syzbot


kernel BUG in __hfsplus_setxattr

Status: upstream: reported C repro on 2023/04/04 04:32
Reported-by: syzbot+a91b43ec91f8e37ccb46@syzkaller.appspotmail.com
First crash: 887d, last: 10d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2025/09/06 upstream (ToT) d1d10cea0895 C Didn't crash
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 kernel BUG in __hfsplus_setxattr hfsplus -1 C 11 930d 1016d 0/1 upstream: reported C repro on 2022/11/26 07:08
linux-6.6 kernel BUG in __hfsplus_setxattr origin:lts-only -1 C done 11 19d 38d 0/2 upstream: reported C repro on 2025/07/30 19:34
upstream kernel BUG in __hfsplus_setxattr hfs -1 C error 18903 26d 1016d 29/29 fixed on 2025/09/04 16:57
linux-4.14 kernel BUG in __hfsplus_setxattr -1 C 3 919d 1009d 0/1 upstream: reported C repro on 2022/12/03 06:20
linux-5.15 kernel BUG in __hfsplus_setxattr origin:upstream -1 C error 204 10d 884d 0/3 upstream: reported C repro on 2023/04/06 18:57
Fix bisection attempts (6)
Created Duration User Patch Repo Result
2024/10/15 00:10 0m bisect fix linux-6.1.y error job log
2024/09/01 19:05 1h05m bisect fix linux-6.1.y OK (0) job log log
2024/07/29 21:35 1h18m bisect fix linux-6.1.y OK (0) job log log
2023/12/31 10:07 1h02m bisect fix linux-6.1.y OK (0) job log log
2023/12/01 05:02 1h26m bisect fix linux-6.1.y OK (0) job log log
2023/10/28 02:15 1h51m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
loop0: detected capacity change from 0 to 1024
------------[ cut here ]------------
kernel BUG at fs/hfsplus/xattr.c:175!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4435 Comm: syz.0.17 Not tainted 6.1.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
RIP: 0010:hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
RIP: 0010:__hfsplus_setxattr+0x1f47/0x1f60 fs/hfsplus/xattr.c:331
Code: 8b 8a ff e9 61 fb ff ff e8 06 6e 3a ff 4c 89 e7 48 c7 c6 80 98 a2 8a e8 17 fa 74 ff 0f 0b e8 f0 6d 3a ff 0f 0b e8 e9 6d 3a ff <0f> 0b e8 e2 6d 3a ff e9 76 f1 ff ff 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc90003ea74e0 EFLAGS: 00010293
RAX: ffffffff82465077 RBX: 1ffff920007d4eb8 RCX: ffff88807a7f8000
RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000
RBP: ffffc90003ea7998 R08: dffffc0000000000 R09: ffffed100e9ed1f8
R10: ffffed100e9ed1f8 R11: 1ffff1100e9ed1f7 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000010000 R15: ffff888074f68f30
FS:  000055557df56500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e263fff CR3: 000000001d7ed000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 hfsplus_setxattr+0xd8/0x120 fs/hfsplus/xattr.c:434
 hfsplus_user_setxattr+0x3c/0x50 fs/hfsplus/xattr_user.c:30
 __vfs_setxattr+0x3e0/0x420 fs/xattr.c:182
 __vfs_setxattr_noperm+0x129/0x5e0 fs/xattr.c:216
 vfs_setxattr+0x168/0x2f0 fs/xattr.c:309
 do_setxattr fs/xattr.c:594 [inline]
 setxattr+0x2b2/0x2d0 fs/xattr.c:617
 path_setxattr+0x142/0x280 fs/xattr.c:636
 __do_sys_setxattr fs/xattr.c:652 [inline]
 __se_sys_setxattr fs/xattr.c:648 [inline]
 __x64_sys_setxattr+0xb7/0xd0 fs/xattr.c:648
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fcf9a38ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe7e858ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
RAX: ffffffffffffffda RBX: 00007fcf9a5b5fa0 RCX: 00007fcf9a38ebe9
RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100
RBP: 00007fcf9a411e19 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcf9a5b5fa0 R14: 00007fcf9a5b5fa0 R15: 0000000000000005
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
RIP: 0010:__hfsplus_setxattr+0x1f47/0x1f60 fs/hfsplus/xattr.c:331
Code: 8b 8a ff e9 61 fb ff ff e8 06 6e 3a ff 4c 89 e7 48 c7 c6 80 98 a2 8a e8 17 fa 74 ff 0f 0b e8 f0 6d 3a ff 0f 0b e8 e9 6d 3a ff <0f> 0b e8 e2 6d 3a ff e9 76 f1 ff ff 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc90003ea74e0 EFLAGS: 00010293
RAX: ffffffff82465077 RBX: 1ffff920007d4eb8 RCX: ffff88807a7f8000
RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000
RBP: ffffc90003ea7998 R08: dffffc0000000000 R09: ffffed100e9ed1f8
R10: ffffed100e9ed1f8 R11: 1ffff1100e9ed1f7 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000010000 R15: ffff888074f68f30
FS:  000055557df56500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e263fff CR3: 000000001d7ed000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (112):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/27 17:42 linux-6.1.y 0bc96de781b4 e12e5ba4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/25 08:58 linux-6.1.y 0bc96de781b4 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/22 01:53 linux-6.1.y 0bc96de781b4 3e79b825 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/07 17:51 linux-6.1.y 3594f306da12 04cffc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/07 17:50 linux-6.1.y 3594f306da12 04cffc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/04 14:25 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/04 06:05 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/03 21:03 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/03 11:35 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/01 07:59 linux-6.1.y 3594f306da12 0c075d67 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/03/04 03:04 linux-6.1.y 3a8358583626 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/03/03 09:47 linux-6.1.y 3a8358583626 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/01/07 19:16 linux-6.1.y 7dc732d24ff7 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/01/02 07:39 linux-6.1.y 563edd786f0a d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/01/02 03:34 linux-6.1.y 563edd786f0a d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2023/09/03 19:24 linux-6.1.y c2cbfe5f5122 696ea0d2 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2023/08/13 16:52 linux-6.1.y 1321ab403b38 39990d51 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan kernel BUG in __hfsplus_setxattr
2025/08/25 23:12 linux-6.1.y 0bc96de781b4 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/25 16:19 linux-6.1.y 0bc96de781b4 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/21 10:24 linux-6.1.y 0bc96de781b4 0b9605c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/17 19:08 linux-6.1.y 0bc96de781b4 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/16 03:42 linux-6.1.y 0bc96de781b4 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/14 06:35 linux-6.1.y 3594f306da12 22ec1469 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/14 06:10 linux-6.1.y 3594f306da12 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/04 08:43 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/04 01:34 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/03 15:29 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/03 09:55 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/08/01 06:29 linux-6.1.y 3594f306da12 0c075d67 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/07/30 17:55 linux-6.1.y 3594f306da12 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/07/30 04:52 linux-6.1.y 3594f306da12 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/07/27 18:57 linux-6.1.y 3594f306da12 fb8f743d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/06/28 21:39 linux-6.1.y 7e69c33e4858 fc9d8ee5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/06/22 06:58 linux-6.1.y 58485ff1a74f d6cdfb8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/05/31 09:43 linux-6.1.y da3c5173c55f 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/05/11 22:06 linux-6.1.y 02b72ccb5f9d 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/05/04 16:23 linux-6.1.y b6736e03756f b0714e37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/04/20 00:34 linux-6.1.y 420102835862 2a20f901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/03/30 11:34 linux-6.1.y 8e60a714ba3b d3999433 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/03/28 08:24 linux-6.1.y 344a09659766 6c09fb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/03/26 01:46 linux-6.1.y 344a09659766 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/03/12 15:35 linux-6.1.y 6ae7ac5c4251 ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/02/08 08:43 linux-6.1.y 0cbb5f65e52f ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/02/05 13:59 linux-6.1.y 0cbb5f65e52f 5896748e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/01/27 07:25 linux-6.1.y 75cefdf153f5 9fbd772e .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/01/27 04:08 linux-6.1.y 75cefdf153f5 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/01/12 04:44 linux-6.1.y c63962be84ef 6dbc6a9b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2025/01/07 01:33 linux-6.1.y 7dc732d24ff7 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2024/12/28 19:16 linux-6.1.y 563edd786f0a d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2024/02/28 01:28 linux-6.1.y 81e1dc2f7001 d367cbe5 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2024/02/14 13:37 linux-6.1.y f1bb70486c9c d902085f .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2024/01/15 03:33 linux-6.1.y 7c58bfa711cb 551587c1 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2023/06/07 14:21 linux-6.1.y 76ba310227d2 a4ae4f42 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
2023/04/04 04:32 linux-6.1.y 3b29299e5f60 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in __hfsplus_setxattr
* Struck through repros no longer work on HEAD.