memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5968 'syz-executor123' loop0: detected capacity change from 0 to 1024 hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5968 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 Modules linked in: CPU: 1 PID: 5968 Comm: syz-executor123 Not tainted 6.4.0-rc4-syzkaller-gcd6bd67ad7ab #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 lr : hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 sp : ffff800096596cf0 x29: ffff800096596d00 x28: dfff800000000000 x27: dfff800000000000 x26: ffff0000e12990f8 x25: dfff800000000000 x24: ffff0000d8f9aa88 x23: 0000000000000000 x22: ffff0000c78440e0 x21: ffff0000c7844000 x20: 0000000000000000 x19: ffff0000d8f9aa00 x18: ffff800096596320 x17: 0000000000000000 x16: ffff80008a433f7c x15: 0000000000000001 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000000000 x10: 0000000000000000 x9 : 809f64cf2d08b100 x8 : 809f64cf2d08b100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff8000965965f8 x4 : ffff80008df9ed80 x3 : ffff800082a921c4 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 hfsplus_bmap_alloc+0x570/0x638 fs/hfsplus/btree.c:415 hfs_bnode_split+0xcc/0xd88 fs/hfsplus/brec.c:245 hfsplus_brec_insert+0x2d4/0xaa0 fs/hfsplus/brec.c:100 hfsplus_create_cat+0x3ac/0x1330 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:560 mount_bdev+0x274/0x370 fs/super.c:1380 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:641 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1510 do_new_mount+0x25c/0x8c4 fs/namespace.c:3039 path_mount+0x590/0xe04 fs/namespace.c:3369 do_mount fs/namespace.c:3382 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 16036 hardirqs last enabled at (16035): [] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:347 hardirqs last disabled at (16036): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (14830): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (14828): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- hfsplus: new node 0 already hashed? ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5968 at fs/hfsplus/bnode.c:573 hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 Modules linked in: CPU: 1 PID: 5968 Comm: syz-executor123 Tainted: G W 6.4.0-rc4-syzkaller-gcd6bd67ad7ab #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 lr : hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 sp : ffff800096596d30 x29: ffff800096596d40 x28: dfff800000000000 x27: dfff800000000000 x26: ffff0000e1299134 x25: dfff800000000000 x24: ffff0000d8f9aa88 x23: 0000000000000000 x22: ffff0000c78440e0 x21: ffff0000c7844000 x20: 0000000000000000 x19: ffff0000d8f9aa00 x18: ffff800096596320 x17: 0000000000000000 x16: ffff80008a380e70 x15: 0000000000000001 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000000000 x10: 0000000000000000 x9 : 809f64cf2d08b100 x8 : 809f64cf2d08b100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800096596638 x4 : ffff80008df9ed80 x3 : ffff80008035bc08 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000023 Call trace: hfsplus_bnode_create+0x428/0x4dc fs/hfsplus/bnode.c:572 hfsplus_bmap_alloc+0x570/0x638 fs/hfsplus/btree.c:415 hfs_btree_inc_height+0xf8/0xa60 fs/hfsplus/brec.c:475 hfsplus_brec_insert+0x594/0xaa0 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x3ac/0x1330 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:560 mount_bdev+0x274/0x370 fs/super.c:1380 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:641 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1510 do_new_mount+0x25c/0x8c4 fs/namespace.c:3039 path_mount+0x590/0xe04 fs/namespace.c:3369 do_mount fs/namespace.c:3382 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 17000 hardirqs last enabled at (16999): [] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:347 hardirqs last disabled at (17000): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (16952): [] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (16952): [] __do_softirq+0xac0/0xd54 kernel/softirq.c:600 softirqs last disabled at (16039): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at fs/hfsplus/bnode.c:618! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 5968 Comm: syz-executor123 Tainted: G W 6.4.0-rc4-syzkaller-gcd6bd67ad7ab #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 lr : hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 sp : ffff800096596e20 x29: ffff800096596e20 x28: dfff800000000000 x27: ffff700012cb2ddc x26: 1fffe00018f08803 x25: 1fffe0001b1f3540 x24: ffff0000c7844000 x23: dfff800000000000 x22: ffff0000d8f9aa00 x21: ffff0000d8f9aa80 x20: 0000000000000000 x19: ffff0000d8f9aa00 x18: ffff800096596320 x17: 0000000000000000 x16: ffff80008026ab00 x15: 0000000000000001 x14: 1ffff00011bd80ae x13: dfff800000000000 x12: 0000000000000001 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff0000ddf48000 x7 : ffff80008a385628 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000810b2a90 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: hfsplus_bnode_put+0x488/0x494 fs/hfsplus/bnode.c:618 hfs_btree_inc_height+0x4fc/0xa60 fs/hfsplus/brec.c:530 hfsplus_brec_insert+0x594/0xaa0 fs/hfsplus/brec.c:148 hfsplus_create_cat+0x3ac/0x1330 fs/hfsplus/catalog.c:292 hfsplus_fill_super+0xf60/0x166c fs/hfsplus/super.c:560 mount_bdev+0x274/0x370 fs/super.c:1380 hfsplus_mount+0x44/0x58 fs/hfsplus/super.c:641 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1510 do_new_mount+0x25c/0x8c4 fs/namespace.c:3039 path_mount+0x590/0xe04 fs/namespace.c:3369 do_mount fs/namespace.c:3382 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: aa1403e0 97e38bef 17ffffb7 97d15ece (d4210000) ---[ end trace 0000000000000000 ]---