./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3066353050
<...>
DUID 00:04:48:2f:83:80:5e:82:2f:af:2e:03:8c:bf:d4:14:8e:03
forked to background, child pid 3209
[ 30.409821][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.421860][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts.
execve("./syz-executor3066353050", ["./syz-executor3066353050"], 0x7ffef6451ad0 /* 10 vars */) = 0
brk(NULL) = 0x5555558fc000
brk(0x5555558fcc40) = 0x5555558fcc40
arch_prctl(ARCH_SET_FS, 0x5555558fc300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3066353050", 4096) = 28
brk(0x55555591dc40) = 0x55555591dc40
brk(0x55555591e000) = 0x55555591e000
mprotect(0x7f4788fb5000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4780a00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
munmap(0x7f4780a00000, 524288) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "hfsplus", MS_SYNCHRONOUS|MS_RELATIME|MS_I_VERSION, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
unlink("./file1") = 0
syzkaller login: [ 55.291247][ T3631] loop0: detected capacity change from 0 to 1024
[ 55.316475][ T3631] hfsplus: trying to free free bnode 0(1)
[ 55.326819][ T3631] hfsplus: new node 0 already hashed?
[ 55.332765][ T3631] ------------[ cut here ]------------
[ 55.338341][ T3631] WARNING: CPU: 0 PID: 3631 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x3d4/0x460
[ 55.348012][ T3631] Modules linked in:
[ 55.352048][ T3631] CPU: 0 PID: 3631 Comm: syz-executor306 Not tainted 6.1.0-rc7-syzkaller-00103-gef4d3ea40565 #0
[ 55.362555][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.372722][ T3631] RIP: 0010:hfsplus_bnode_create+0x3d4/0x460
[ 55.378788][ T3631] Code: 31 c0 e8 41 9b 43 08 e9 5f fd ff ff e8 45 25 2b ff 4c 89 ff e8 7d fe 4e 08 48 c7 c7 c0 52 27 8b 44 89 e6 31 c0 e8 1e 9b 43 08 <0f> 0b eb b1 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 61 fc ff ff 48 89
[ 55.398467][ T3631] RSP: 0018:ffffc90003bfedb0 EFLAGS: 00010246
[ 55.404544][ T3631] RAX: 0000000000000023 RBX: ffff888017af7400 RCX: 99976e79c3affa00
[ 55.412571][ T3631] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 55.420661][ T3631] RBP: 0000000000000000 R08: ffffffff816fdabd R09: fffff5200077fd6d
[ 55.428688][ T3631] R10: fffff5200077fd6d R11: 1ffff9200077fd6c R12: 0000000000000000
[ 55.436664][ T3631] R13: dffffc0000000000 R14: ffff88807bef8000 R15: ffff88807bef80e0
[ 55.444694][ T3631] FS: 00005555558fc300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 55.453690][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.460340][ T3631] CR2: 00007ffe4e739000 CR3: 000000007bbce000 CR4: 00000000003506f0
[ 55.468349][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.476308][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.484435][ T3631] Call Trace:
[ 55.487721][ T3631]
[ 55.490695][ T3631] hfsplus_bmap_alloc+0x5a5/0x640
[ 55.495735][ T3631] ? hfsplus_bmap_reserve+0x500/0x500
[ 55.501194][ T3631] hfs_btree_inc_height+0x131/0xda0
[ 55.506418][ T3631] ? rcu_read_lock_sched_held+0x89/0x130
[ 55.512122][ T3631] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 55.518179][ T3631] ? trace_raw_output_contention_end+0xd0/0xd0
[ 55.524347][ T3631] ? hfsplus_brec_insert+0xdf0/0xdf0
[ 55.529671][ T3631] ? char2uni+0xe0/0x1c0
[ 55.533926][ T3631] hfsplus_brec_insert+0x160/0xdf0
[ 55.539293][ T3631] ? hfsplus_asc2uni+0xa77/0xbf0
[ 55.544232][ T3631] ? hfsplus_brec_find+0x196/0x580
[ 55.549386][ T3631] ? hfs_find_1st_rec_by_cnid+0x3b0/0x3b0
[ 55.555129][ T3631] ? hfsplus_brec_keylen+0x310/0x310
[ 55.560589][ T3631] ? hfsplus_create_attr+0x44d/0x620
[ 55.565894][ T3631] hfsplus_create_attr+0x4b2/0x620
[ 55.571058][ T3631] ? hfsplus_attr_exists+0x1c0/0x1c0
[ 55.576364][ T3631] ? __kmalloc+0xcc/0x1a0
[ 55.580774][ T3631] ? mutex_lock_nested+0x17/0x20
[ 55.585740][ T3631] ? hfsplus_find_init+0x143/0x1b0
[ 55.590926][ T3631] __hfsplus_setxattr+0x6e4/0x2270
[ 55.596073][ T3631] ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 55.602113][ T3631] ? print_irqtrace_events+0x220/0x220
[ 55.607585][ T3631] ? hfsplus_delete_all_attrs+0x440/0x440
[ 55.613347][ T3631] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 55.619327][ T3631] ? lockdep_hardirqs_on+0x95/0x140
[ 55.624528][ T3631] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 55.630590][ T3631] ? _raw_spin_unlock+0x40/0x40
[ 55.635469][ T3631] ? stack_trace_save+0x12d/0x1f0
[ 55.640708][ T3631] ? hfsplus_initxattrs+0xe1/0x230
[ 55.645867][ T3631] hfsplus_initxattrs+0x15c/0x230
[ 55.650970][ T3631] security_inode_init_security+0x3bf/0x3f0
[ 55.656873][ T3631] ? hfsplus_init_security+0x30/0x30
[ 55.662235][ T3631] ? security_dentry_create_files_as+0xd0/0xd0
[ 55.668471][ T3631] ? hfsplus_new_inode+0x67b/0x870
[ 55.673583][ T3631] hfsplus_mknod+0x1bd/0x290
[ 55.678297][ T3631] ? hfsplus_lookup+0xc40/0xc40
[ 55.683167][ T3631] path_openat+0x12e2/0x2e00
[ 55.687773][ T3631] ? do_filp_open+0x500/0x500
[ 55.692512][ T3631] ? alloc_fd+0x5a7/0x640
[ 55.696870][ T3631] do_filp_open+0x275/0x500
[ 55.701451][ T3631] ? vfs_tmpfile+0x490/0x490
[ 55.706070][ T3631] ? _raw_spin_unlock+0x24/0x40
[ 55.710964][ T3631] ? alloc_fd+0x5a7/0x640
[ 55.715308][ T3631] do_sys_openat2+0x13b/0x500
[ 55.720032][ T3631] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.725244][ T3631] ? _raw_spin_unlock_irq+0x1f/0x40
[ 55.730481][ T3631] ? do_sys_open+0x220/0x220
[ 55.735168][ T3631] ? ptrace_notify+0x245/0x340
[ 55.740046][ T3631] ? do_notify_parent+0xeb0/0xeb0
[ 55.745089][ T3631] ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 55.751115][ T3631] __x64_sys_creat+0x11f/0x160
[ 55.755892][ T3631] ? __x64_compat_sys_openat+0x290/0x290
[ 55.761620][ T3631] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 55.767631][ T3631] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 55.773698][ T3631] do_syscall_64+0x2b/0x70
[ 55.778181][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.784164][ T3631] RIP: 0033:0x7f4788f48779
[ 55.788620][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.808334][ T3631] RSP: 002b:00007ffe4e738698 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 55.816739][ T3631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4788f48779
[ 55.824874][ T3631] RDX: 00007f4788f48779 RSI: 0000000000000000 RDI: 0000000020000300
[ 55.832909][ T3631] RBP: 00007f4788f08010 R08: 0000000000000000 R09: 0000000000000000
[ 55.841035][ T3631] R10: 0000000000000604 R11: 0000000000000246 R12: 00007f4788f080a0
[ 55.849063][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.857037][ T3631]
[ 55.860101][ T3631] Kernel panic - not syncing: panic_on_warn set ...
[ 55.866683][ T3631] CPU: 0 PID: 3631 Comm: syz-executor306 Not tainted 6.1.0-rc7-syzkaller-00103-gef4d3ea40565 #0
[ 55.877084][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.887128][ T3631] Call Trace:
[ 55.890416][ T3631]
[ 55.893335][ T3631] dump_stack_lvl+0x1e3/0x2cb
[ 55.898010][ T3631] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 55.903456][ T3631] ? panic+0x766/0x766
[ 55.907518][ T3631] ? vscnprintf+0x59/0x80
[ 55.911831][ T3631] ? hfsplus_bnode_create+0x390/0x460
[ 55.917191][ T3631] panic+0x316/0x766
[ 55.921093][ T3631] ? __warn+0x131/0x220
[ 55.925265][ T3631] ? memcpy_page_flushcache+0xfc/0xfc
[ 55.930652][ T3631] ? hfsplus_bnode_create+0x3d4/0x460
[ 55.936026][ T3631] __warn+0x1fa/0x220
[ 55.940010][ T3631] ? hfsplus_bnode_create+0x3d4/0x460
[ 55.945395][ T3631] report_bug+0x1b3/0x2d0
[ 55.949733][ T3631] handle_bug+0x3d/0x70
[ 55.953888][ T3631] exc_invalid_op+0x16/0x40
[ 55.958390][ T3631] asm_exc_invalid_op+0x16/0x20
[ 55.963239][ T3631] RIP: 0010:hfsplus_bnode_create+0x3d4/0x460
[ 55.969221][ T3631] Code: 31 c0 e8 41 9b 43 08 e9 5f fd ff ff e8 45 25 2b ff 4c 89 ff e8 7d fe 4e 08 48 c7 c7 c0 52 27 8b 44 89 e6 31 c0 e8 1e 9b 43 08 <0f> 0b eb b1 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 61 fc ff ff 48 89
[ 55.988848][ T3631] RSP: 0018:ffffc90003bfedb0 EFLAGS: 00010246
[ 55.994917][ T3631] RAX: 0000000000000023 RBX: ffff888017af7400 RCX: 99976e79c3affa00
[ 56.002883][ T3631] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 56.010871][ T3631] RBP: 0000000000000000 R08: ffffffff816fdabd R09: fffff5200077fd6d
[ 56.018946][ T3631] R10: fffff5200077fd6d R11: 1ffff9200077fd6c R12: 0000000000000000
[ 56.026921][ T3631] R13: dffffc0000000000 R14: ffff88807bef8000 R15: ffff88807bef80e0
[ 56.034898][ T3631] ? __wake_up_klogd+0xcd/0x100
[ 56.039763][ T3631] hfsplus_bmap_alloc+0x5a5/0x640
[ 56.044790][ T3631] ? hfsplus_bmap_reserve+0x500/0x500
[ 56.050171][ T3631] hfs_btree_inc_height+0x131/0xda0
[ 56.055372][ T3631] ? rcu_read_lock_sched_held+0x89/0x130
[ 56.061000][ T3631] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 56.066984][ T3631] ? trace_raw_output_contention_end+0xd0/0xd0
[ 56.073142][ T3631] ? hfsplus_brec_insert+0xdf0/0xdf0
[ 56.078429][ T3631] ? char2uni+0xe0/0x1c0
[ 56.082677][ T3631] hfsplus_brec_insert+0x160/0xdf0
[ 56.087795][ T3631] ? hfsplus_asc2uni+0xa77/0xbf0
[ 56.092742][ T3631] ? hfsplus_brec_find+0x196/0x580
[ 56.097858][ T3631] ? hfs_find_1st_rec_by_cnid+0x3b0/0x3b0
[ 56.103576][ T3631] ? hfsplus_brec_keylen+0x310/0x310
[ 56.108862][ T3631] ? hfsplus_create_attr+0x44d/0x620
[ 56.114151][ T3631] hfsplus_create_attr+0x4b2/0x620
[ 56.119268][ T3631] ? hfsplus_attr_exists+0x1c0/0x1c0
[ 56.124556][ T3631] ? __kmalloc+0xcc/0x1a0
[ 56.128889][ T3631] ? mutex_lock_nested+0x17/0x20
[ 56.133823][ T3631] ? hfsplus_find_init+0x143/0x1b0
[ 56.138935][ T3631] __hfsplus_setxattr+0x6e4/0x2270
[ 56.144065][ T3631] ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 56.150049][ T3631] ? print_irqtrace_events+0x220/0x220
[ 56.155511][ T3631] ? hfsplus_delete_all_attrs+0x440/0x440
[ 56.161228][ T3631] ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 56.167125][ T3631] ? lockdep_hardirqs_on+0x95/0x140
[ 56.172331][ T3631] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 56.178225][ T3631] ? _raw_spin_unlock+0x40/0x40
[ 56.183079][ T3631] ? stack_trace_save+0x12d/0x1f0
[ 56.188175][ T3631] ? hfsplus_initxattrs+0xe1/0x230
[ 56.193289][ T3631] hfsplus_initxattrs+0x15c/0x230
[ 56.198315][ T3631] security_inode_init_security+0x3bf/0x3f0
[ 56.204204][ T3631] ? hfsplus_init_security+0x30/0x30
[ 56.209492][ T3631] ? security_dentry_create_files_as+0xd0/0xd0
[ 56.215651][ T3631] ? hfsplus_new_inode+0x67b/0x870
[ 56.220761][ T3631] hfsplus_mknod+0x1bd/0x290
[ 56.225350][ T3631] ? hfsplus_lookup+0xc40/0xc40
[ 56.230196][ T3631] path_openat+0x12e2/0x2e00
[ 56.234820][ T3631] ? do_filp_open+0x500/0x500
[ 56.239497][ T3631] ? alloc_fd+0x5a7/0x640
[ 56.243841][ T3631] do_filp_open+0x275/0x500
[ 56.248347][ T3631] ? vfs_tmpfile+0x490/0x490
[ 56.252964][ T3631] ? _raw_spin_unlock+0x24/0x40
[ 56.257816][ T3631] ? alloc_fd+0x5a7/0x640
[ 56.262152][ T3631] do_sys_openat2+0x13b/0x500
[ 56.266825][ T3631] ? do_raw_spin_unlock+0x134/0x8a0
[ 56.272025][ T3631] ? _raw_spin_unlock_irq+0x1f/0x40
[ 56.277225][ T3631] ? do_sys_open+0x220/0x220
[ 56.281811][ T3631] ? ptrace_notify+0x245/0x340
[ 56.286578][ T3631] ? do_notify_parent+0xeb0/0xeb0
[ 56.291602][ T3631] ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 56.297579][ T3631] __x64_sys_creat+0x11f/0x160
[ 56.302339][ T3631] ? __x64_compat_sys_openat+0x290/0x290
[ 56.307973][ T3631] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 56.313960][ T3631] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 56.319947][ T3631] do_syscall_64+0x2b/0x70
[ 56.324362][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.330248][ T3631] RIP: 0033:0x7f4788f48779
[ 56.334661][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.354262][ T3631] RSP: 002b:00007ffe4e738698 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 56.362672][ T3631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4788f48779
[ 56.370637][ T3631] RDX: 00007f4788f48779 RSI: 0000000000000000 RDI: 0000000020000300
[ 56.378601][ T3631] RBP: 00007f4788f08010 R08: 0000000000000000 R09: 0000000000000000
[ 56.386574][ T3631] R10: 0000000000000604 R11: 0000000000000246 R12: 00007f4788f080a0
[ 56.394541][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.402520][ T3631]
[ 56.405677][ T3631] Kernel Offset: disabled
[ 56.410069][ T3631] Rebooting in 86400 seconds..