./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor43029144 <...> Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. execve("./syz-executor43029144", ["./syz-executor43029144"], 0x7ffe6be556e0 /* 10 vars */) = 0 brk(NULL) = 0x55555697d000 brk(0x55555697dd00) = 0x55555697dd00 arch_prctl(ARCH_SET_FS, 0x55555697d380) = 0 set_tid_address(0x55555697d650) = 5058 set_robust_list(0x55555697d660, 24) = 0 rseq(0x55555697dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor43029144", 4096) = 26 getrandom("\x36\x77\xb2\x24\xc0\x80\x2c\xae", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555697dd00 brk(0x55555699ed00) = 0x55555699ed00 brk(0x55555699f000) = 0x55555699f000 mprotect(0x7f29ad78e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f29a5200000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f29a5200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 52.904039][ T5058] loop0: detected capacity change from 0 to 1024 [ 52.949800][ T5058] ------------[ cut here ]------------ [ 52.955326][ T5058] kernel BUG at fs/hfsplus/xattr.c:175! [ 52.960868][ T5058] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 52.966910][ T5058] CPU: 0 PID: 5058 Comm: syz-executor430 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 52.976948][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 52.986976][ T5058] RIP: 0010:__hfsplus_setxattr+0x2104/0x2200 [ 52.992951][ T5058] Code: ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 28 ea ff ff e8 41 fb 81 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 f2 e9 ff ff e8 6d 84 2a ff 90 <0f> 0b 48 8b 7c 24 48 e8 20 fb 81 ff 4c 8b 54 24 50 4c 8b 44 24 38 [ 53.012535][ T5058] RSP: 0018:ffffc90003c0f4c0 EFLAGS: 00010293 [ 53.018575][ T5058] RAX: 0000000000000000 RBX: 0000000000010000 RCX: ffffffff825d75d6 [ 53.026527][ T5058] RDX: ffff88801aee9dc0 RSI: ffffffff825d8c33 RDI: 0000000000000007 [ 53.034473][ T5058] RBP: ffffed100410b907 R08: ffff8880233e6000 R09: 0000000000000000 [ 53.042447][ T5058] R10: ffff88802085c830 R11: 0000000000000000 R12: 0000000000000003 [ 53.050392][ T5058] R13: ffff88802085c800 R14: 1ffff92000781eaa R15: ffffc90003c0f580 [ 53.058340][ T5058] FS: 000055555697d380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.067261][ T5058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.073824][ T5058] CR2: 000000000066c7e0 CR3: 00000000499ac000 CR4: 0000000000350ef0 [ 53.081774][ T5058] Call Trace: [ 53.085028][ T5058] [ 53.087935][ T5058] ? show_regs+0x8f/0xa0 [ 53.092159][ T5058] ? die+0x36/0xa0 [ 53.095859][ T5058] ? do_trap+0x22b/0x420 [ 53.100079][ T5058] ? __hfsplus_setxattr+0x2104/0x2200 [ 53.105427][ T5058] ? __hfsplus_setxattr+0x2104/0x2200 [ 53.110775][ T5058] ? do_error_trap+0xf4/0x230 [ 53.115428][ T5058] ? __hfsplus_setxattr+0x2104/0x2200 [ 53.120777][ T5058] ? handle_invalid_op+0x34/0x40 [ 53.125690][ T5058] ? __hfsplus_setxattr+0x2104/0x2200 [ 53.131039][ T5058] ? exc_invalid_op+0x2e/0x40 [ 53.135692][ T5058] ? asm_exc_invalid_op+0x1a/0x20 [ 53.140698][ T5058] ? __hfsplus_setxattr+0xaa6/0x2200 [ 53.145957][ T5058] ? __hfsplus_setxattr+0x2103/0x2200 [ 53.151304][ T5058] ? __hfsplus_setxattr+0x2104/0x2200 [ 53.156657][ T5058] ? write_profile+0x450/0x450 [ 53.161482][ T5058] ? rcu_is_watching+0x12/0xb0 [ 53.166220][ T5058] ? copy_name+0xa0/0xa0 [ 53.170440][ T5058] ? rcu_is_watching+0x12/0xb0 [ 53.175179][ T5058] ? do_raw_read_unlock+0xe0/0xe0 [ 53.180179][ T5058] ? rcu_is_watching+0x12/0xb0 [ 53.184919][ T5058] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 53.190893][ T5058] hfsplus_setxattr+0x10c/0x160 [ 53.195723][ T5058] ? hfsplus_init_security+0x40/0x40 [ 53.200987][ T5058] __vfs_setxattr+0x173/0x1d0 [ 53.205644][ T5058] ? __vfs_removexattr+0x1c0/0x1c0 [ 53.210727][ T5058] ? apparmor_capable+0x126/0x1e0 [ 53.215731][ T5058] __vfs_setxattr_noperm+0x127/0x5e0 [ 53.220988][ T5058] __vfs_setxattr_locked+0x17e/0x250 [ 53.226246][ T5058] vfs_setxattr+0x146/0x350 [ 53.230722][ T5058] ? kasan_save_stack+0x42/0x50 [ 53.235547][ T5058] ? __vfs_setxattr_locked+0x250/0x250 [ 53.240983][ T5058] do_setxattr+0x142/0x170 [ 53.245382][ T5058] setxattr+0x159/0x170 [ 53.249515][ T5058] ? do_setxattr+0x170/0x170 [ 53.254086][ T5058] ? mnt_get_write_access+0x20c/0x300 [ 53.259446][ T5058] path_setxattr+0x175/0x1d0 [ 53.264031][ T5058] ? setxattr+0x170/0x170 [ 53.268337][ T5058] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 53.274299][ T5058] __x64_sys_lsetxattr+0xc1/0x160 [ 53.279299][ T5058] do_syscall_64+0xd3/0x250 [ 53.283776][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 53.289647][ T5058] RIP: 0033:0x7f29ad71b639 [ 53.294036][ T5058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.313616][ T5058] RSP: 002b:00007ffdd64dce08 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 53.322001][ T5058] RAX: ffffffffffffffda RBX: 00007ffdd64dcfe8 RCX: 00007f29ad71b639 [ 53.329954][ T5058] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 53.337901][ T5058] RBP: 00007f29ad78e610 R08: 0000000000000003 R09: 0000000000000000 [ 53.345847][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.353790][ T5058] R13: 00007ffdd64dcfd8 R14: 0000000000000001 R15: 0000000000000001 [ 53.361737][ T5058] [ 53.364731][ T5058] Modules linked in: [ 53.370106][ T5058] ---[ end trace 0000000000000000 ]--- [ 53.375884][ T5058] RIP: 0010:__hfsplus_setxattr+0x2104/0x2200 [ 53.382688][ T5058] Code: ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 28 ea ff ff e8 41 fb 81 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 f2 e9 ff ff e8 6d 84 2a ff 90 <0f> 0b 48 8b 7c 24 48 e8 20 fb 81 ff 4c 8b 54 24 50 4c 8b 44 24 38 [ 53.402378][ T5058] RSP: 0018:ffffc90003c0f4c0 EFLAGS: 00010293 [ 53.408473][ T5058] RAX: 0000000000000000 RBX: 0000000000010000 RCX: ffffffff825d75d6 [ 53.416719][ T5058] RDX: ffff88801aee9dc0 RSI: ffffffff825d8c33 RDI: 0000000000000007 [ 53.424728][ T5058] RBP: ffffed100410b907 R08: ffff8880233e6000 R09: 0000000000000000 [ 53.432719][ T5058] R10: ffff88802085c830 R11: 0000000000000000 R12: 0000000000000003 [ 53.440695][ T5058] R13: ffff88802085c800 R14: 1ffff92000781eaa R15: ffffc90003c0f580 [ 53.448695][ T5058] FS: 000055555697d380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 53.457647][ T5058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.464869][ T5058] CR2: 000000000066c7e0 CR3: 00000000499ac000 CR4: 0000000000350ef0 [ 53.472901][ T5058] Kernel panic - not syncing: Fatal exception [ 53.479192][ T5058] Kernel Offset: disabled [ 53.483499][ T5058] Rebooting in 86400 seconds..