./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2967409791 <...> Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. execve("./syz-executor2967409791", ["./syz-executor2967409791"], 0x7ffdee340c70 /* 10 vars */) = 0 brk(NULL) = 0x55558f11d000 brk(0x55558f11dd00) = 0x55558f11dd00 arch_prctl(ARCH_SET_FS, 0x55558f11d380) = 0 set_tid_address(0x55558f11d650) = 5069 set_robust_list(0x55558f11d660, 24) = 0 rseq(0x55558f11dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2967409791", 4096) = 28 getrandom("\x4b\x6a\xde\x63\xbe\x69\x9e\x2f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f11dd00 brk(0x55558f13ed00) = 0x55558f13ed00 brk(0x55558f13f000) = 0x55558f13f000 mprotect(0x7f8ca48d7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8c9c400000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f8c9c400000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "hfsplus", MS_NOEXEC|MS_RELATIME, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 [ 55.940606][ T5069] loop0: detected capacity change from 0 to 1024 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 56.021613][ T5069] ------------[ cut here ]------------ [ 56.027220][ T5069] kernel BUG at fs/hfsplus/xattr.c:175! [ 56.033098][ T5069] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 56.039505][ T5069] CPU: 0 PID: 5069 Comm: syz-executor296 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0 [ 56.049894][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.059930][ T5069] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0 [ 56.065906][ T5069] Code: e8 f1 87 f9 08 e8 7c 0b 18 ff 4c 89 ff 48 c7 c6 60 47 e1 8b e8 ed 63 5e ff 90 0f 0b e8 65 0b 18 ff 90 0f 0b e8 5d 0b 18 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 56.085489][ T5069] RSP: 0018:ffffc900022df4c0 EFLAGS: 00010293 [ 56.091532][ T5069] RAX: ffffffff827df513 RBX: 0000000000010000 RCX: ffff88802c770000 [ 56.099484][ T5069] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 56.107437][ T5069] RBP: ffffc900022df958 R08: ffffffff827ddc33 R09: 1ffff110022be11f [ 56.115387][ T5069] R10: dffffc0000000000 R11: ffffed10022be120 R12: ffff8880115f01b0 [ 56.123337][ T5069] R13: dffffc0000000000 R14: ffff8880115f0870 R15: 0000000000000000 [ 56.131289][ T5069] FS: 000055558f11d380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 56.140197][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.146773][ T5069] CR2: 000000000066c7e0 CR3: 0000000079b2a000 CR4: 00000000003506f0 [ 56.154726][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.162674][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.170622][ T5069] Call Trace: [ 56.173881][ T5069] [ 56.176800][ T5069] ? __die_body+0x88/0xe0 [ 56.181111][ T5069] ? die+0xcf/0x110 [ 56.184894][ T5069] ? do_trap+0x15a/0x3a0 [ 56.189114][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 56.194469][ T5069] ? do_error_trap+0x1dc/0x2c0 [ 56.199212][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 56.204563][ T5069] ? __pfx_do_error_trap+0x10/0x10 [ 56.209653][ T5069] ? report_bug+0x3e8/0x500 [ 56.214146][ T5069] ? handle_invalid_op+0x34/0x40 [ 56.219059][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 56.224408][ T5069] ? exc_invalid_op+0x38/0x50 [ 56.229065][ T5069] ? asm_exc_invalid_op+0x1a/0x20 [ 56.234069][ T5069] ? __hfsplus_setxattr+0x9e3/0x22d0 [ 56.239330][ T5069] ? __hfsplus_setxattr+0x22c3/0x22d0 [ 56.244681][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 56.250033][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.256338][ T5069] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 56.261861][ T5069] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.267732][ T5069] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 56.274035][ T5069] ? stack_trace_save+0x118/0x1d0 [ 56.279041][ T5069] ? stack_depot_save_flags+0x6e4/0x830 [ 56.284585][ T5069] ? __kasan_kmalloc+0x98/0xb0 [ 56.289329][ T5069] ? hfsplus_setxattr+0x68/0xe0 [ 56.294156][ T5069] ? kmalloc_trace+0x1db/0x360 [ 56.298899][ T5069] ? hfsplus_setxattr+0x68/0xe0 [ 56.303730][ T5069] hfsplus_setxattr+0xb0/0xe0 [ 56.308390][ T5069] hfsplus_trusted_setxattr+0x40/0x60 [ 56.313744][ T5069] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 56.319787][ T5069] __vfs_setxattr+0x468/0x4a0 [ 56.324445][ T5069] __vfs_setxattr_noperm+0x12e/0x5e0 [ 56.329707][ T5069] vfs_setxattr+0x221/0x430 [ 56.334189][ T5069] ? __pfx_vfs_setxattr+0x10/0x10 [ 56.339188][ T5069] ? __check_object_size+0x8e/0xa00 [ 56.344366][ T5069] ? __might_fault+0xc6/0x120 [ 56.349033][ T5069] ? strncpy_from_user+0x1a4/0x2f0 [ 56.354125][ T5069] setxattr+0x25d/0x2f0 [ 56.358262][ T5069] ? __pfx_setxattr+0x10/0x10 [ 56.362923][ T5069] ? mnt_get_write_access+0x226/0x2b0 [ 56.368277][ T5069] path_setxattr+0x1c0/0x2a0 [ 56.372933][ T5069] ? __pfx_path_setxattr+0x10/0x10 [ 56.378021][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.384324][ T5069] ? do_syscall_64+0x102/0x240 [ 56.389067][ T5069] __x64_sys_lsetxattr+0xb8/0xd0 [ 56.393981][ T5069] do_syscall_64+0xf5/0x240 [ 56.398477][ T5069] ? clear_bhb_loop+0x35/0x90 [ 56.403147][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.409033][ T5069] RIP: 0033:0x7f8ca4864639 [ 56.413426][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.433007][ T5069] RSP: 002b:00007ffc9fb89b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 56.441400][ T5069] RAX: ffffffffffffffda RBX: 00007ffc9fb89d18 RCX: 00007f8ca4864639 [ 56.449358][ T5069] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 56.457308][ T5069] RBP: 00007f8ca48d7610 R08: 0000000000000003 R09: 0000000000000000 [ 56.465256][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.473205][ T5069] R13: 00007ffc9fb89d08 R14: 0000000000000001 R15: 0000000000000001 [ 56.481159][ T5069] [ 56.484154][ T5069] Modules linked in: [ 56.488510][ T5069] ---[ end trace 0000000000000000 ]--- [ 56.494110][ T5069] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0 [ 56.500179][ T5069] Code: e8 f1 87 f9 08 e8 7c 0b 18 ff 4c 89 ff 48 c7 c6 60 47 e1 8b e8 ed 63 5e ff 90 0f 0b e8 65 0b 18 ff 90 0f 0b e8 5d 0b 18 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 56.519806][ T5069] RSP: 0018:ffffc900022df4c0 EFLAGS: 00010293 [ 56.525909][ T5069] RAX: ffffffff827df513 RBX: 0000000000010000 RCX: ffff88802c770000 [ 56.533883][ T5069] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 56.541867][ T5069] RBP: ffffc900022df958 R08: ffffffff827ddc33 R09: 1ffff110022be11f [ 56.549862][ T5069] R10: dffffc0000000000 R11: ffffed10022be120 R12: ffff8880115f01b0 [ 56.557848][ T5069] R13: dffffc0000000000 R14: ffff8880115f0870 R15: 0000000000000000 [ 56.565839][ T5069] FS: 000055558f11d380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.574785][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.581364][ T5069] CR2: 000056532951fc00 CR3: 0000000079b2a000 CR4: 00000000003506f0 [ 56.589350][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.597516][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.605519][ T5069] Kernel panic - not syncing: Fatal exception [ 56.611823][ T5069] Kernel Offset: disabled [ 56.616129][ T5069] Rebooting in 86400 seconds..