./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2588902809 <...> Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. execve("./syz-executor2588902809", ["./syz-executor2588902809"], 0x7ffff6af7300 /* 10 vars */) = 0 brk(NULL) = 0x555586f0e000 brk(0x555586f0ed00) = 0x555586f0ed00 arch_prctl(ARCH_SET_FS, 0x555586f0e380) = 0 set_tid_address(0x555586f0e650) = 5069 set_robust_list(0x555586f0e660, 24) = 0 rseq(0x555586f0eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2588902809", 4096) = 28 getrandom("\xf5\x27\xa9\xaa\xde\x7a\xa6\x96", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555586f0ed00 brk(0x555586f2fd00) = 0x555586f2fd00 brk(0x555586f30000) = 0x555586f30000 mprotect(0x7feba75a6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb9f000000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7feb9f000000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "hfsplus", MS_SILENT|MS_STRICTATIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 72.562467][ T5069] loop0: detected capacity change from 0 to 1024 lseek(-1, 2, SEEK_SET) = -1 EBADF (Bad file descriptor) [ 72.634963][ T5069] ------------[ cut here ]------------ [ 72.640681][ T5069] kernel BUG at fs/hfsplus/xattr.c:175! [ 72.646302][ T5069] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 72.652731][ T5069] CPU: 0 PID: 5069 Comm: syz-executor258 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 72.662890][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 72.672946][ T5069] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0 [ 72.678955][ T5069] Code: e8 71 14 f0 08 e8 fc 75 19 ff 4c 89 ff 48 c7 c6 e0 44 c1 8b e8 0d 5b 5f ff 90 0f 0b e8 e5 75 19 ff 90 0f 0b e8 dd 75 19 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 72.699356][ T5069] RSP: 0018:ffffc900040d7300 EFLAGS: 00010293 [ 72.705453][ T5069] RAX: ffffffff827b7e73 RBX: 0000000000010000 RCX: ffff888017fa3c00 [ 72.713444][ T5069] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 72.721445][ T5069] RBP: ffffc900040d7788 R08: ffffffff827b6593 R09: 1ffff1100447047f [ 72.729615][ T5069] R10: dffffc0000000000 R11: ffffed1004470480 R12: ffff888022381cb0 [ 72.737613][ T5069] R13: dffffc0000000000 R14: ffff888022382370 R15: 0000000000000000 [ 72.745610][ T5069] FS: 0000555586f0e380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 72.754643][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.761413][ T5069] CR2: 000000000066c7e0 CR3: 0000000075d52000 CR4: 00000000003506f0 [ 72.769570][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.777552][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.785731][ T5069] Call Trace: [ 72.789200][ T5069] [ 72.792155][ T5069] ? __die_body+0x88/0xe0 [ 72.796666][ T5069] ? die+0xcf/0x110 [ 72.800569][ T5069] ? do_trap+0x15a/0x3a0 [ 72.805010][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 72.810395][ T5069] ? do_error_trap+0x1dc/0x2c0 [ 72.815261][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 72.820659][ T5069] ? __pfx_do_error_trap+0x10/0x10 [ 72.825876][ T5069] ? handle_invalid_op+0x34/0x40 [ 72.831365][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 72.837131][ T5069] ? exc_invalid_op+0x38/0x50 [ 72.842013][ T5069] ? asm_exc_invalid_op+0x1a/0x20 [ 72.847153][ T5069] ? __hfsplus_setxattr+0x9e3/0x22d0 [ 72.852629][ T5069] ? __hfsplus_setxattr+0x22c3/0x22d0 [ 72.858014][ T5069] ? __hfsplus_setxattr+0x22c4/0x22d0 [ 72.863419][ T5069] ? lockdep_hardirqs_on+0x99/0x150 [ 72.868637][ T5069] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 72.874194][ T5069] ? stack_trace_save+0x118/0x1d0 [ 72.879235][ T5069] ? stack_depot_save_flags+0x37d/0x860 [ 72.884841][ T5069] ? __kasan_kmalloc+0x98/0xb0 [ 72.889697][ T5069] ? hfsplus_initxattrs+0x5d/0x220 [ 72.894819][ T5069] ? kmalloc_trace+0x1db/0x360 [ 72.899594][ T5069] hfsplus_initxattrs+0x158/0x220 [ 72.904722][ T5069] security_inode_init_security+0x250/0x440 [ 72.910644][ T5069] ? __pfx_hfsplus_initxattrs+0x10/0x10 [ 72.916203][ T5069] ? __pfx_security_inode_init_security+0x10/0x10 [ 72.922716][ T5069] ? _raw_spin_unlock+0x28/0x50 [ 72.927583][ T5069] hfsplus_mknod+0x1c6/0x2a0 [ 72.932190][ T5069] ? __pfx_hfsplus_create+0x10/0x10 [ 72.937404][ T5069] path_openat+0x1425/0x3240 [ 72.942025][ T5069] ? __pfx_path_openat+0x10/0x10 [ 72.946989][ T5069] do_filp_open+0x235/0x490 [ 72.951503][ T5069] ? __pfx_do_filp_open+0x10/0x10 [ 72.956560][ T5069] ? _raw_spin_unlock+0x28/0x50 [ 72.961451][ T5069] ? alloc_fd+0x59d/0x640 [ 72.965875][ T5069] do_sys_openat2+0x13e/0x1d0 [ 72.970827][ T5069] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.976032][ T5069] ? lockdep_hardirqs_on+0x99/0x150 [ 72.981278][ T5069] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.986486][ T5069] ? ptrace_notify+0x279/0x380 [ 72.991281][ T5069] __x64_sys_openat+0x247/0x2a0 [ 72.996317][ T5069] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.001723][ T5069] ? do_syscall_64+0x10a/0x240 [ 73.006498][ T5069] ? syscall_trace_enter+0x5f/0x150 [ 73.011709][ T5069] do_syscall_64+0xfb/0x240 [ 73.016220][ T5069] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 73.022305][ T5069] RIP: 0033:0x7feba7532639 [ 73.026777][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.046499][ T5069] RSP: 002b:00007fff70c9ac98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.054921][ T5069] RAX: ffffffffffffffda RBX: 00007fff70c9ae78 RCX: 00007feba7532639 [ 73.062911][ T5069] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 73.070890][ T5069] RBP: 00007feba75a6610 R08: 0000000000000000 R09: 0000000000000000 [ 73.078865][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.086927][ T5069] R13: 00007fff70c9ae68 R14: 0000000000000001 R15: 0000000000000001 [ 73.095007][ T5069] [ 73.098128][ T5069] Modules linked in: [ 73.102392][ T5069] ---[ end trace 0000000000000000 ]--- [ 73.108408][ T5069] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0 [ 73.114897][ T5069] Code: e8 71 14 f0 08 e8 fc 75 19 ff 4c 89 ff 48 c7 c6 e0 44 c1 8b e8 0d 5b 5f ff 90 0f 0b e8 e5 75 19 ff 90 0f 0b e8 dd 75 19 ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 73.135137][ T5069] RSP: 0018:ffffc900040d7300 EFLAGS: 00010293 [ 73.141367][ T5069] RAX: ffffffff827b7e73 RBX: 0000000000010000 RCX: ffff888017fa3c00 [ 73.149712][ T5069] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000 [ 73.158179][ T5069] RBP: ffffc900040d7788 R08: ffffffff827b6593 R09: 1ffff1100447047f [ 73.166392][ T5069] R10: dffffc0000000000 R11: ffffed1004470480 R12: ffff888022381cb0 [ 73.174426][ T5069] R13: dffffc0000000000 R14: ffff888022382370 R15: 0000000000000000 [ 73.182398][ T5069] FS: 0000555586f0e380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 73.191610][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.198344][ T5069] CR2: 000000000066c7e0 CR3: 0000000075d52000 CR4: 00000000003506f0 [ 73.206389][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.214458][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.222468][ T5069] Kernel panic - not syncing: Fatal exception [ 73.228870][ T5069] Kernel Offset: disabled [ 73.233204][ T5069] Rebooting in 86400 seconds..