./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1368777269 <...> Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. execve("./syz-executor1368777269", ["./syz-executor1368777269"], 0x7ffd17ba8800 /* 10 vars */) = 0 brk(NULL) = 0x55555625c000 brk(0x55555625cd00) = 0x55555625cd00 arch_prctl(ARCH_SET_FS, 0x55555625c380) = 0 set_tid_address(0x55555625c650) = 5032 set_robust_list(0x55555625c660, 24) = 0 rseq(0x55555625cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1368777269", 4096) = 28 getrandom("\xc1\xa8\x94\x3f\x64\x0e\x7d\x1e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555625cd00 brk(0x55555627dd00) = 0x55555627dd00 brk(0x55555627e000) = 0x55555627e000 mprotect(0x7f9ec6bb2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9ebe701000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f9ebe701000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 syzkaller login: [ 78.215329][ T5032] syz-executor136[5032]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.237306][ T5032] loop0: detected capacity change from 0 to 1024 [ 78.255862][ T5032] hfsplus: new node 0 already hashed? [ 78.261901][ T5032] ------------[ cut here ]------------ [ 78.267467][ T5032] WARNING: CPU: 0 PID: 5032 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3b1/0x440 [ 78.277276][ T5032] Modules linked in: [ 78.281803][ T5032] CPU: 0 PID: 5032 Comm: syz-executor136 Not tainted 6.6.0-rc7-syzkaller-00018-gd88520ad73b7 #0 [ 78.292339][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 78.302529][ T5032] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 78.308571][ T5032] Code: 8b 44 89 e6 e8 d0 97 61 08 e9 7c fd ff ff e8 96 ea 25 ff 4c 89 ff e8 de 5f 6e 08 48 c7 c7 c0 52 20 8b 44 89 e6 e8 af 97 61 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 78.328442][ T5032] RSP: 0018:ffffc900039fef78 EFLAGS: 00010246 [ 78.334621][ T5032] RAX: 0000000000000023 RBX: ffff888017a7e400 RCX: c21f1fad8d9b8600 [ 78.342782][ T5032] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 78.351028][ T5032] RBP: 0000000000000000 R08: ffffffff81711cfc R09: 1ffff9200073fd90 [ 78.359112][ T5032] R10: dffffc0000000000 R11: fffff5200073fd91 R12: 0000000000000000 [ 78.367625][ T5032] R13: dffffc0000000000 R14: ffff88807aedc000 R15: ffff88807aedc0e0 [ 78.375686][ T5032] FS: 000055555625c380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.384736][ T5032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.391407][ T5032] CR2: 00000000005fdeb8 CR3: 000000001c213000 CR4: 00000000003506f0 [ 78.399395][ T5032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.407450][ T5032] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.415856][ T5032] Call Trace: [ 78.419152][ T5032] [ 78.422178][ T5032] ? __warn+0x162/0x4a0 [ 78.426383][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.431846][ T5032] ? report_bug+0x2b3/0x500 [ 78.436654][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.442146][ T5032] ? handle_bug+0x3d/0x70 [ 78.446533][ T5032] ? exc_invalid_op+0x1a/0x50 [ 78.451294][ T5032] ? asm_exc_invalid_op+0x1a/0x20 [ 78.456462][ T5032] ? __wake_up_klogd+0xcc/0x100 [ 78.461424][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.467619][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.473296][ T5032] hfsplus_bmap_alloc+0x59a/0x640 [ 78.478364][ T5032] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 78.483934][ T5032] ? hfsplus_file_truncate+0x1a8/0xb40 [ 78.489751][ T5032] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 78.495450][ T5032] hfs_bnode_split+0xde/0x1110 [ 78.500299][ T5032] ? hfsplus_bnode_dump+0xa36/0xba0 [ 78.505739][ T5032] ? hfsplus_bnode_read+0xe9/0x1e0 [ 78.510980][ T5032] ? __asan_memcpy+0x40/0x70 [ 78.515655][ T5032] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 78.521335][ T5032] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 78.526763][ T5032] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 78.532725][ T5032] hfsplus_brec_insert+0x3a6/0xdd0 [ 78.537933][ T5032] ? hfsplus_brec_keylen+0x310/0x310 [ 78.543370][ T5032] ? __kmalloc+0xe6/0x230 [ 78.547765][ T5032] hfsplus_create_cat+0x49c/0x1b90 [ 78.553020][ T5032] ? hfsplus_find_cat+0x5c0/0x5c0 [ 78.558225][ T5032] ? do_raw_spin_unlock+0x13b/0x8b0 [ 78.563534][ T5032] ? _raw_spin_unlock+0x28/0x40 [ 78.568405][ T5032] ? hfsplus_new_inode+0x5b2/0x730 [ 78.573612][ T5032] hfsplus_fill_super+0x13ea/0x1c90 [ 78.578891][ T5032] ? hfsplus_mount+0x40/0x40 [ 78.583767][ T5032] ? read_lock_is_recursive+0x20/0x20 [ 78.589207][ T5032] mount_bdev+0x237/0x300 [ 78.593607][ T5032] ? hfsplus_mount+0x40/0x40 [ 78.598231][ T5032] ? get_tree_bdev+0x5b0/0x5b0 [ 78.603125][ T5032] ? vfs_parse_fs_string+0x190/0x230 [ 78.608478][ T5032] ? vfs_parse_fs_param+0x410/0x410 [ 78.613753][ T5032] ? cap_capable+0x1b4/0x240 [ 78.618378][ T5032] legacy_get_tree+0xef/0x190 [ 78.623188][ T5032] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 78.628810][ T5032] vfs_get_tree+0x8c/0x280 [ 78.633329][ T5032] do_new_mount+0x28f/0xae0 [ 78.637980][ T5032] ? do_move_mount_old+0x170/0x170 [ 78.643303][ T5032] __se_sys_mount+0x2d9/0x3c0 [ 78.648041][ T5032] ? __x64_sys_mount+0xc0/0xc0 [ 78.652893][ T5032] ? syscall_enter_from_user_mode+0x32/0x230 [ 78.659037][ T5032] ? __x64_sys_mount+0x20/0xc0 [ 78.663907][ T5032] do_syscall_64+0x41/0xc0 [ 78.668733][ T5032] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.674905][ T5032] RIP: 0033:0x7f9ec6b3fc3a [ 78.681027][ T5032] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.703473][ T5032] RSP: 002b:00007ffc816ca9e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 78.712561][ T5032] RAX: ffffffffffffffda RBX: 00007ffc816caa00 RCX: 00007f9ec6b3fc3a [ 78.720838][ T5032] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffc816caa00 [ 78.728836][ T5032] RBP: 0000000000000004 R08: 00007ffc816caa40 R09: 0000000000000646 [ 78.736984][ T5032] R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010 [ 78.746849][ T5032] R13: 00007ffc816caa40 R14: 0000000000000003 R15: 0000000000080000 [ 78.754933][ T5032] [ 78.757984][ T5032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.765268][ T5032] CPU: 0 PID: 5032 Comm: syz-executor136 Not tainted 6.6.0-rc7-syzkaller-00018-gd88520ad73b7 #0 [ 78.775771][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 78.785843][ T5032] Call Trace: [ 78.789128][ T5032] [ 78.792069][ T5032] dump_stack_lvl+0x1e7/0x2d0 [ 78.796773][ T5032] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.802250][ T5032] ? panic+0x770/0x770 [ 78.806347][ T5032] ? vscnprintf+0x5d/0x80 [ 78.810700][ T5032] panic+0x30f/0x770 [ 78.814617][ T5032] ? __warn+0x171/0x4a0 [ 78.818800][ T5032] ? __memcpy_flushcache+0x2b0/0x2b0 [ 78.824119][ T5032] __warn+0x314/0x4a0 [ 78.828143][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.833561][ T5032] report_bug+0x2b3/0x500 [ 78.837940][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.843351][ T5032] handle_bug+0x3d/0x70 [ 78.847538][ T5032] exc_invalid_op+0x1a/0x50 [ 78.852073][ T5032] asm_exc_invalid_op+0x1a/0x20 [ 78.856976][ T5032] RIP: 0010:hfsplus_bnode_create+0x3b1/0x440 [ 78.862992][ T5032] Code: 8b 44 89 e6 e8 d0 97 61 08 e9 7c fd ff ff e8 96 ea 25 ff 4c 89 ff e8 de 5f 6e 08 48 c7 c7 c0 52 20 8b 44 89 e6 e8 af 97 61 08 <0f> 0b eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 89 fc ff ff 48 89 [ 78.882791][ T5032] RSP: 0018:ffffc900039fef78 EFLAGS: 00010246 [ 78.888878][ T5032] RAX: 0000000000000023 RBX: ffff888017a7e400 RCX: c21f1fad8d9b8600 [ 78.896972][ T5032] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 78.905024][ T5032] RBP: 0000000000000000 R08: ffffffff81711cfc R09: 1ffff9200073fd90 [ 78.913015][ T5032] R10: dffffc0000000000 R11: fffff5200073fd91 R12: 0000000000000000 [ 78.921257][ T5032] R13: dffffc0000000000 R14: ffff88807aedc000 R15: ffff88807aedc0e0 [ 78.929424][ T5032] ? __wake_up_klogd+0xcc/0x100 [ 78.934299][ T5032] ? hfsplus_bnode_create+0x3b1/0x440 [ 78.939693][ T5032] hfsplus_bmap_alloc+0x59a/0x640 [ 78.944746][ T5032] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 78.950138][ T5032] ? hfsplus_file_truncate+0x1a8/0xb40 [ 78.956046][ T5032] ? hfsplus_bnode_read_u16+0x146/0x2c0 [ 78.961794][ T5032] hfs_bnode_split+0xde/0x1110 [ 78.966579][ T5032] ? hfsplus_bnode_dump+0xa36/0xba0 [ 78.971818][ T5032] ? hfsplus_bnode_read+0xe9/0x1e0 [ 78.977125][ T5032] ? __asan_memcpy+0x40/0x70 [ 78.981732][ T5032] ? hfsplus_bnode_read_u16+0x1c1/0x2c0 [ 78.987295][ T5032] ? hfs_btree_inc_height+0xdb0/0xdb0 [ 78.992689][ T5032] ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0 [ 78.998606][ T5032] hfsplus_brec_insert+0x3a6/0xdd0 [ 79.003933][ T5032] ? hfsplus_brec_keylen+0x310/0x310 [ 79.009238][ T5032] ? __kmalloc+0xe6/0x230 [ 79.013591][ T5032] hfsplus_create_cat+0x49c/0x1b90 [ 79.018734][ T5032] ? hfsplus_find_cat+0x5c0/0x5c0 [ 79.023841][ T5032] ? do_raw_spin_unlock+0x13b/0x8b0 [ 79.029089][ T5032] ? _raw_spin_unlock+0x28/0x40 [ 79.033969][ T5032] ? hfsplus_new_inode+0x5b2/0x730 [ 79.039126][ T5032] hfsplus_fill_super+0x13ea/0x1c90 [ 79.044431][ T5032] ? hfsplus_mount+0x40/0x40 [ 79.049633][ T5032] ? read_lock_is_recursive+0x20/0x20 [ 79.055053][ T5032] mount_bdev+0x237/0x300 [ 79.059407][ T5032] ? hfsplus_mount+0x40/0x40 [ 79.064015][ T5032] ? get_tree_bdev+0x5b0/0x5b0 [ 79.068804][ T5032] ? vfs_parse_fs_string+0x190/0x230 [ 79.074113][ T5032] ? vfs_parse_fs_param+0x410/0x410 [ 79.079328][ T5032] ? cap_capable+0x1b4/0x240 [ 79.083939][ T5032] legacy_get_tree+0xef/0x190 [ 79.088645][ T5032] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 79.094215][ T5032] vfs_get_tree+0x8c/0x280 [ 79.098655][ T5032] do_new_mount+0x28f/0xae0 [ 79.103187][ T5032] ? do_move_mount_old+0x170/0x170 [ 79.108344][ T5032] __se_sys_mount+0x2d9/0x3c0 [ 79.113100][ T5032] ? __x64_sys_mount+0xc0/0xc0 [ 79.117899][ T5032] ? syscall_enter_from_user_mode+0x32/0x230 [ 79.124177][ T5032] ? __x64_sys_mount+0x20/0xc0 [ 79.128961][ T5032] do_syscall_64+0x41/0xc0 [ 79.133484][ T5032] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.139409][ T5032] RIP: 0033:0x7f9ec6b3fc3a [ 79.143837][ T5032] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.164005][ T5032] RSP: 002b:00007ffc816ca9e8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 79.172457][ T5032] RAX: ffffffffffffffda RBX: 00007ffc816caa00 RCX: 00007f9ec6b3fc3a [ 79.180523][ T5032] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffc816caa00 [ 79.188498][ T5032] RBP: 0000000000000004 R08: 00007ffc816caa40 R09: 0000000000000646 [ 79.196931][ T5032] R10: 0000000002000010 R11: 0000000000000286 R12: 0000000002000010 [ 79.205177][ T5032] R13: 00007ffc816caa40 R14: 0000000000000003 R15: 0000000000080000 [ 79.213258][ T5032] [ 79.216573][ T5032] Kernel Offset: disabled [ 79.221014][ T5032] Rebooting in 86400 seconds..