./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor789440780 <...> Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. execve("./syz-executor789440780", ["./syz-executor789440780"], 0x7ffceaa30930 /* 10 vars */) = 0 brk(NULL) = 0x55555712b000 brk(0x55555712bd00) = 0x55555712bd00 arch_prctl(ARCH_SET_FS, 0x55555712b380) = 0 set_tid_address(0x55555712b650) = 5060 set_robust_list(0x55555712b660, 24) = 0 rseq(0x55555712bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor789440780", 4096) = 27 getrandom("\x54\x9b\x59\x39\xb1\xed\x2d\xb1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555712bd00 brk(0x55555714cd00) = 0x55555714cd00 brk(0x55555714d000) = 0x55555714d000 mprotect(0x7fe17e66b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe1761bb000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7fe1761bb000, 138412032) = 0 [ 82.066969][ T27] audit: type=1400 audit(1702149740.855:83): avc: denied { execmem } for pid=5060 comm="syz-executor789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 [ 82.134404][ T27] audit: type=1400 audit(1702149740.925:84): avc: denied { read write } for pid=5060 comm="syz-executor789" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.148922][ T5060] loop0: detected capacity change from 0 to 1024 close(3) = 0 mkdir("./file1", 0777) = 0 [ 82.160170][ T27] audit: type=1400 audit(1702149740.925:85): avc: denied { open } for pid=5060 comm="syz-executor789" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.190917][ T27] audit: type=1400 audit(1702149740.935:86): avc: denied { ioctl } for pid=5060 comm="syz-executor789" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 mount("/dev/loop0", "./file1", "hfsplus", MS_NODEV|MS_SYNCHRONOUS|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 82.218466][ T27] audit: type=1400 audit(1702149741.005:87): avc: denied { mounton } for pid=5060 comm="syz-executor789" path="/root/file1" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 82.241738][ T27] audit: type=1400 audit(1702149741.025:88): avc: denied { mount } for pid=5060 comm="syz-executor789" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 openat(AT_FDCWD, "blkio.throttle.io_serviced_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 82.265142][ T27] audit: type=1400 audit(1702149741.055:89): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.288648][ T27] audit: type=1400 audit(1702149741.055:90): avc: denied { open } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.307499][ T5060] hfsplus: new node 0 already hashed? [ 82.317090][ T5060] ------------[ cut here ]------------ [ 82.318311][ T27] audit: type=1400 audit(1702149741.055:91): avc: denied { getattr } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.322682][ T5060] WARNING: CPU: 1 PID: 5060 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x14c/0x530 [ 82.355740][ T5060] Modules linked in: [ 82.359774][ T5060] CPU: 1 PID: 5060 Comm: syz-executor789 Not tainted 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 [ 82.370283][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 82.380491][ T5060] RIP: 0010:hfsplus_bnode_create+0x14c/0x530 [ 82.386810][ T5060] Code: 36 2e ff 45 39 fc 75 9e e8 f1 3b 2e ff 4c 89 f7 e8 d9 86 2a 08 e8 e4 3b 2e ff 44 89 e6 48 c7 c7 c0 c1 e7 8a e8 f5 16 11 ff 90 <0f> 0b 90 e8 cc 3b 2e ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 [ 82.406837][ T5060] RSP: 0018:ffffc900033df2b0 EFLAGS: 00010286 [ 82.413062][ T5060] RAX: 0000000000000023 RBX: ffff88801c942000 RCX: ffffffff81697219 [ 82.422811][ T5060] RDX: 0000000000000000 RSI: ffffffff8169f6c2 RDI: 0000000000000005 [ 82.430838][ T5060] RBP: ffff88802107c000 R08: 0000000000000005 R09: 0000000000000000 [ 82.438828][ T5060] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 82.446886][ T5060] R13: dffffc0000000000 R14: ffff88802107c0e0 R15: 0000000000000000 [ 82.454933][ T5060] FS: 000055555712b380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 82.463960][ T5060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.470614][ T5060] CR2: 000000002000f000 CR3: 00000000166bb000 CR4: 00000000003506f0 [ 82.478597][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.486654][ T5060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.494698][ T5060] Call Trace: [ 82.497978][ T5060] [ 82.501011][ T5060] ? show_regs+0x8f/0xa0 [ 82.505314][ T5060] ? __warn+0xe6/0x390 [ 82.509411][ T5060] ? hfsplus_bnode_create+0x14c/0x530 [ 82.514985][ T5060] ? report_bug+0x3bc/0x580 [ 82.519625][ T5060] ? handle_bug+0x3d/0x70 [ 82.524021][ T5060] ? exc_invalid_op+0x17/0x40 [ 82.528771][ T5060] ? asm_exc_invalid_op+0x1a/0x20 [ 82.533963][ T5060] ? __wake_up_klogd.part.0+0x99/0xf0 [ 82.539387][ T5060] ? vprintk+0x82/0x90 [ 82.543792][ T5060] ? hfsplus_bnode_create+0x14c/0x530 [ 82.549297][ T5060] hfsplus_bmap_alloc+0x728/0x830 [ 82.554493][ T5060] ? hfsplus_bmap_reserve+0x410/0x410 [ 82.560187][ T5060] ? debug_mutex_lock_common+0x28/0xc0 [ 82.565669][ T5060] ? hfsplus_find_init+0x95/0x200 [ 82.570878][ T5060] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 82.576732][ T5060] ? hfs_bnode_split+0xdc0/0xdc0 [ 82.581798][ T5060] ? mutex_is_locked+0x40/0x40 [ 82.586686][ T5060] hfsplus_brec_insert+0x9fe/0xc50 [ 82.591892][ T5060] ? trace_contention_end+0xd6/0x100 [ 82.597216][ T5060] ? hfsplus_brec_find+0x3e8/0x520 [ 82.602441][ T5060] ? __mutex_lock+0x1a6/0x9d0 [ 82.607333][ T5060] ? hfsplus_brec_keylen+0x340/0x340 [ 82.612697][ T5060] ? hfsplus_bmap_reserve+0x332/0x410 [ 82.618122][ T5060] ? mutex_trylock+0x130/0x130 [ 82.623118][ T5060] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 82.628982][ T5060] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 82.634714][ T5060] hfsplus_ext_read_extent+0x1fc/0x240 [ 82.640345][ T5060] ? __hfsplus_ext_cache_extent+0x9d0/0x9d0 [ 82.646285][ T5060] ? hfsplus_get_block+0x3b8/0x9e0 [ 82.651519][ T5060] hfsplus_file_extend+0x695/0x1090 [ 82.656756][ T5060] ? hfsplus_free_fork+0x820/0x820 [ 82.662106][ T5060] ? __lock_buffer+0x70/0x70 [ 82.666780][ T5060] ? spin_bug+0x1d0/0x1d0 [ 82.671330][ T5060] hfsplus_get_block+0x1ae/0x9e0 [ 82.676324][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 82.681879][ T5060] __block_write_begin_int+0x3c0/0x1560 [ 82.687479][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 82.693098][ T5060] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 82.698680][ T5060] block_write_begin+0xb1/0x490 [ 82.703654][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 82.709181][ T5060] cont_write_begin+0x530/0x730 [ 82.714272][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 82.720002][ T5060] ? block_write_begin+0x490/0x490 [ 82.725155][ T5060] ? fault_in_readable+0x106/0x200 [ 82.730364][ T5060] ? fault_in_readable+0x150/0x200 [ 82.735525][ T5060] ? fault_in_subpage_writeable+0x20/0x20 [ 82.741398][ T5060] hfsplus_write_begin+0x87/0x140 [ 82.746536][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 82.752108][ T5060] generic_perform_write+0x278/0x600 [ 82.757439][ T5060] ? folio_add_wait_queue+0x1c0/0x1c0 [ 82.763126][ T5060] ? generic_write_checks+0x2b0/0x3f0 [ 82.768626][ T5060] __generic_file_write_iter+0x1f9/0x240 [ 82.774456][ T5060] generic_file_write_iter+0xe3/0x350 [ 82.780050][ T5060] vfs_write+0x64f/0xdf0 [ 82.784417][ T5060] ? kernel_write+0x6c0/0x6c0 [ 82.789170][ T5060] ? __fget_light+0x1fc/0x260 [ 82.793976][ T5060] ksys_write+0x12f/0x250 [ 82.798550][ T5060] ? __ia32_sys_read+0xb0/0xb0 [ 82.803474][ T5060] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 82.809808][ T5060] do_syscall_64+0x40/0x110 [ 82.814352][ T5060] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 82.820581][ T5060] RIP: 0033:0x7fe17e5f8639 [ 82.825036][ T5060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.845064][ T5060] RSP: 002b:00007ffc578a7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.853662][ T5060] RAX: ffffffffffffffda RBX: 00007ffc578a73d8 RCX: 00007fe17e5f8639 [ 82.861765][ T5060] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004 [ 82.869808][ T5060] RBP: 00007fe17e66b610 R08: 0000000000000000 R09: 00007ffc578a73d8 [ 82.877875][ T5060] R10: 0000000000000642 R11: 0000000000000246 R12: 0000000000000001 [ 82.886457][ T5060] R13: 00007ffc578a73c8 R14: 0000000000000001 R15: 0000000000000001 [ 82.894510][ T5060] [ 82.897531][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.904891][ T5060] CPU: 1 PID: 5060 Comm: syz-executor789 Not tainted 6.7.0-rc4-syzkaller-00358-gf2e8a57ee903 #0 [ 82.915415][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 82.925566][ T5060] Call Trace: [ 82.928950][ T5060] [ 82.931882][ T5060] dump_stack_lvl+0xd9/0x1b0 [ 82.936477][ T5060] panic+0x6dc/0x790 [ 82.940386][ T5060] ? panic_smp_self_stop+0xa0/0xa0 [ 82.945607][ T5060] ? show_trace_log_lvl+0x363/0x4f0 [ 82.950820][ T5060] ? check_panic_on_warn+0x1f/0xb0 [ 82.955976][ T5060] ? hfsplus_bnode_create+0x14c/0x530 [ 82.961435][ T5060] check_panic_on_warn+0xab/0xb0 [ 82.966398][ T5060] __warn+0xf2/0x390 [ 82.970291][ T5060] ? hfsplus_bnode_create+0x14c/0x530 [ 82.975661][ T5060] report_bug+0x3bc/0x580 [ 82.980075][ T5060] handle_bug+0x3d/0x70 [ 82.984229][ T5060] exc_invalid_op+0x17/0x40 [ 82.988748][ T5060] asm_exc_invalid_op+0x1a/0x20 [ 82.993625][ T5060] RIP: 0010:hfsplus_bnode_create+0x14c/0x530 [ 82.999649][ T5060] Code: 36 2e ff 45 39 fc 75 9e e8 f1 3b 2e ff 4c 89 f7 e8 d9 86 2a 08 e8 e4 3b 2e ff 44 89 e6 48 c7 c7 c0 c1 e7 8a e8 f5 16 11 ff 90 <0f> 0b 90 e8 cc 3b 2e ff 48 89 d8 48 83 c4 18 5b 5d 41 5c 41 5d 41 [ 83.019286][ T5060] RSP: 0018:ffffc900033df2b0 EFLAGS: 00010286 [ 83.025547][ T5060] RAX: 0000000000000023 RBX: ffff88801c942000 RCX: ffffffff81697219 [ 83.033616][ T5060] RDX: 0000000000000000 RSI: ffffffff8169f6c2 RDI: 0000000000000005 [ 83.041613][ T5060] RBP: ffff88802107c000 R08: 0000000000000005 R09: 0000000000000000 [ 83.049590][ T5060] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 83.057639][ T5060] R13: dffffc0000000000 R14: ffff88802107c0e0 R15: 0000000000000000 [ 83.065641][ T5060] ? __wake_up_klogd.part.0+0x99/0xf0 [ 83.071061][ T5060] ? vprintk+0x82/0x90 [ 83.075139][ T5060] hfsplus_bmap_alloc+0x728/0x830 [ 83.080175][ T5060] ? hfsplus_bmap_reserve+0x410/0x410 [ 83.085638][ T5060] ? debug_mutex_lock_common+0x28/0xc0 [ 83.091193][ T5060] ? hfsplus_find_init+0x95/0x200 [ 83.096360][ T5060] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 83.102382][ T5060] ? hfs_bnode_split+0xdc0/0xdc0 [ 83.107342][ T5060] ? mutex_is_locked+0x40/0x40 [ 83.112122][ T5060] hfsplus_brec_insert+0x9fe/0xc50 [ 83.117249][ T5060] ? trace_contention_end+0xd6/0x100 [ 83.122666][ T5060] ? hfsplus_brec_find+0x3e8/0x520 [ 83.127871][ T5060] ? __mutex_lock+0x1a6/0x9d0 [ 83.132582][ T5060] ? hfsplus_brec_keylen+0x340/0x340 [ 83.137874][ T5060] ? hfsplus_bmap_reserve+0x332/0x410 [ 83.143282][ T5060] ? mutex_trylock+0x130/0x130 [ 83.148068][ T5060] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 83.153806][ T5060] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 83.159452][ T5060] hfsplus_ext_read_extent+0x1fc/0x240 [ 83.165008][ T5060] ? __hfsplus_ext_cache_extent+0x9d0/0x9d0 [ 83.171173][ T5060] ? hfsplus_get_block+0x3b8/0x9e0 [ 83.176300][ T5060] hfsplus_file_extend+0x695/0x1090 [ 83.181512][ T5060] ? hfsplus_free_fork+0x820/0x820 [ 83.186629][ T5060] ? __lock_buffer+0x70/0x70 [ 83.191231][ T5060] ? spin_bug+0x1d0/0x1d0 [ 83.195596][ T5060] hfsplus_get_block+0x1ae/0x9e0 [ 83.200556][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 83.206021][ T5060] __block_write_begin_int+0x3c0/0x1560 [ 83.211674][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 83.217248][ T5060] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 83.222903][ T5060] block_write_begin+0xb1/0x490 [ 83.227952][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 83.233419][ T5060] cont_write_begin+0x530/0x730 [ 83.238295][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 83.243762][ T5060] ? block_write_begin+0x490/0x490 [ 83.248884][ T5060] ? fault_in_readable+0x106/0x200 [ 83.254099][ T5060] ? fault_in_readable+0x150/0x200 [ 83.259227][ T5060] ? fault_in_subpage_writeable+0x20/0x20 [ 83.264982][ T5060] hfsplus_write_begin+0x87/0x140 [ 83.270364][ T5060] ? hfsplus_file_extend+0x1090/0x1090 [ 83.275897][ T5060] generic_perform_write+0x278/0x600 [ 83.281295][ T5060] ? folio_add_wait_queue+0x1c0/0x1c0 [ 83.286685][ T5060] ? generic_write_checks+0x2b0/0x3f0 [ 83.292244][ T5060] __generic_file_write_iter+0x1f9/0x240 [ 83.297901][ T5060] generic_file_write_iter+0xe3/0x350 [ 83.303289][ T5060] vfs_write+0x64f/0xdf0 [ 83.307546][ T5060] ? kernel_write+0x6c0/0x6c0 [ 83.312323][ T5060] ? __fget_light+0x1fc/0x260 [ 83.317098][ T5060] ksys_write+0x12f/0x250 [ 83.321434][ T5060] ? __ia32_sys_read+0xb0/0xb0 [ 83.326207][ T5060] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 83.332476][ T5060] do_syscall_64+0x40/0x110 [ 83.337010][ T5060] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 83.343281][ T5060] RIP: 0033:0x7fe17e5f8639 [ 83.347881][ T5060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.368135][ T5060] RSP: 002b:00007ffc578a7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.377022][ T5060] RAX: ffffffffffffffda RBX: 00007ffc578a73d8 RCX: 00007fe17e5f8639 [ 83.385010][ T5060] RDX: 0000000000029000 RSI: 0000000020000040 RDI: 0000000000000004 [ 83.393001][ T5060] RBP: 00007fe17e66b610 R08: 0000000000000000 R09: 00007ffc578a73d8 [ 83.401086][ T5060] R10: 0000000000000642 R11: 0000000000000246 R12: 0000000000000001 [ 83.409065][ T5060] R13: 00007ffc578a73c8 R14: 0000000000000001 R15: 0000000000000001 [ 83.417064][ T5060] [ 83.420329][ T5060] Kernel Offset: disabled [ 83.424860][ T5060] Rebooting in 86400 seconds..