./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor83386705 <...> Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. execve("./syz-executor83386705", ["./syz-executor83386705"], 0x7fff7a969b20 /* 10 vars */) = 0 brk(NULL) = 0x555556d0b000 brk(0x555556d0bd00) = 0x555556d0bd00 arch_prctl(ARCH_SET_FS, 0x555556d0b380) = 0 set_tid_address(0x555556d0b650) = 5038 set_robust_list(0x555556d0b660, 24) = 0 rseq(0x555556d0bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor83386705", 4096) = 26 getrandom("\x73\xc5\xab\x1a\x25\x02\xf0\xae", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d0bd00 brk(0x555556d2cd00) = 0x555556d2cd00 brk(0x555556d2d000) = 0x555556d2d000 mprotect(0x7f3c2a9b9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3c22508000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f3c22508000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfsplus", MS_SYNCHRONOUS|MS_SILENT|MS_RELATIME, "gid=0x0000000000000000,nls=cp437,nobarrier,gid=0x000000000000ee01,nobarrier,force,type=\\I^1,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 69.673363][ T5038] syz-executor833[5038]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 69.691141][ T5038] loop0: detected capacity change from 0 to 1024 [ 69.702329][ T5038] hfsplus: request for non-existent node 3 in B*Tree [ 69.709025][ T5038] hfsplus: request for non-existent node 3 in B*Tree open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [ 69.720346][ T28] audit: type=1800 audit(1693066742.631:2): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor833" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 69.721027][ T5038] ------------[ cut here ]------------ [ 69.746453][ T5038] kernel BUG at fs/hfsplus/xattr.c:175! [ 69.752439][ T5038] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 69.758529][ T5038] CPU: 0 PID: 5038 Comm: syz-executor833 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 69.768411][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 69.778466][ T5038] RIP: 0010:__hfsplus_setxattr+0x2101/0x2200 [ 69.784455][ T5038] Code: 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 29 ea ff ff e8 63 84 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 f3 e9 ff ff e8 ef c9 2d ff <0f> 0b 48 8b 7c 24 48 e8 43 84 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 [ 69.804086][ T5038] RSP: 0018:ffffc90003a9f4d8 EFLAGS: 00010293 [ 69.810182][ T5038] RAX: 0000000000000000 RBX: 0000060000000000 RCX: 0000000000000000 [ 69.818165][ T5038] RDX: ffff8880234c5940 RSI: ffffffff825a0881 RDI: 0000000000000007 [ 69.826128][ T5038] RBP: ffffed102980a007 R08: ffff88807d5b4000 R09: 0000000000000000 [ 69.834085][ T5038] R10: ffff88814c050030 R11: 0000000000000000 R12: 0000000000000003 [ 69.842042][ T5038] R13: ffff88814c050000 R14: 1ffff92000753ead R15: ffffc90003a9f598 [ 69.850000][ T5038] FS: 0000555556d0b380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 69.858922][ T5038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.865492][ T5038] CR2: 0000000020007f84 CR3: 000000002913d000 CR4: 00000000003506f0 [ 69.873450][ T5038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.881409][ T5038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.889385][ T5038] Call Trace: [ 69.892651][ T5038] [ 69.895570][ T5038] ? show_regs+0x8f/0xa0 [ 69.899810][ T5038] ? die+0x36/0xa0 [ 69.903537][ T5038] ? do_trap+0x22b/0x420 [ 69.907773][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.913140][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.918495][ T5038] ? do_error_trap+0xf4/0x230 [ 69.923208][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.928569][ T5038] ? handle_invalid_op+0x34/0x40 [ 69.933511][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.938914][ T5038] ? exc_invalid_op+0x2d/0x40 [ 69.943588][ T5038] ? asm_exc_invalid_op+0x1a/0x20 [ 69.948602][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.953958][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.959316][ T5038] ? __hfsplus_setxattr+0x2101/0x2200 [ 69.964766][ T5038] ? write_profile+0x450/0x450 [ 69.969525][ T5038] ? rcu_is_watching+0x12/0xb0 [ 69.974274][ T5038] ? copy_name+0xa0/0xa0 [ 69.978510][ T5038] ? rcu_is_watching+0x12/0xb0 [ 69.983259][ T5038] ? spin_bug+0x1d0/0x1d0 [ 69.987605][ T5038] ? rcu_is_watching+0x12/0xb0 [ 69.992360][ T5038] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 69.998360][ T5038] hfsplus_setxattr+0x10c/0x160 [ 70.003221][ T5038] ? hfsplus_listxattr+0xe10/0xe10 [ 70.008320][ T5038] __vfs_setxattr+0x173/0x1d0 [ 70.012988][ T5038] ? __vfs_removexattr+0x1c0/0x1c0 [ 70.018089][ T5038] __vfs_setxattr_noperm+0x127/0x5e0 [ 70.023362][ T5038] __vfs_setxattr_locked+0x17e/0x250 [ 70.028638][ T5038] vfs_setxattr+0x146/0x350 [ 70.033131][ T5038] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.039215][ T5038] ? __vfs_setxattr_locked+0x250/0x250 [ 70.044667][ T5038] do_setxattr+0x142/0x170 [ 70.049073][ T5038] setxattr+0x159/0x170 [ 70.053215][ T5038] ? do_setxattr+0x170/0x170 [ 70.057798][ T5038] ? __mnt_want_write+0x217/0x300 [ 70.062816][ T5038] path_setxattr+0x1a3/0x1d0 [ 70.067393][ T5038] ? setxattr+0x170/0x170 [ 70.071726][ T5038] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 70.077736][ T5038] __x64_sys_setxattr+0xc4/0x160 [ 70.082755][ T5038] do_syscall_64+0x38/0xb0 [ 70.087173][ T5038] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.093064][ T5038] RIP: 0033:0x7f3c2a9459f9 [ 70.097464][ T5038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.117181][ T5038] RSP: 002b:00007ffe0281ea98 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 70.125588][ T5038] RAX: ffffffffffffffda RBX: 6569727261626f6e RCX: 00007f3c2a9459f9 [ 70.133549][ T5038] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000000 [ 70.141507][ T5038] RBP: 00007f3c2a98e04b R08: 0000000000000001 R09: 0000000000000000 [ 70.149471][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.157446][ T5038] R13: 00007ffe0281ec78 R14: 0000000000000001 R15: 0000000000000001 [ 70.165430][ T5038] [ 70.168455][ T5038] Modules linked in: [ 70.172558][ T5038] ---[ end trace 0000000000000000 ]--- [ 70.178028][ T5038] RIP: 0010:__hfsplus_setxattr+0x2101/0x2200 [ 70.184049][ T5038] Code: 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 29 ea ff ff e8 63 84 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 e9 f3 e9 ff ff e8 ef c9 2d ff <0f> 0b 48 8b 7c 24 48 e8 43 84 83 ff 4c 8b 54 24 50 4c 8b 44 24 38 [ 70.203711][ T5038] RSP: 0018:ffffc90003a9f4d8 EFLAGS: 00010293 [ 70.209782][ T5038] RAX: 0000000000000000 RBX: 0000060000000000 RCX: 0000000000000000 [ 70.217805][ T5038] RDX: ffff8880234c5940 RSI: ffffffff825a0881 RDI: 0000000000000007 [ 70.225814][ T5038] RBP: ffffed102980a007 R08: ffff88807d5b4000 R09: 0000000000000000 [ 70.233809][ T5038] R10: ffff88814c050030 R11: 0000000000000000 R12: 0000000000000003 [ 70.241786][ T5038] R13: ffff88814c050000 R14: 1ffff92000753ead R15: ffffc90003a9f598 [ 70.249819][ T5038] FS: 0000555556d0b380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 70.258772][ T5038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.265384][ T5038] CR2: 0000000020007f84 CR3: 000000002913d000 CR4: 00000000003506f0 [ 70.273377][ T5038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.281598][ T5038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.289601][ T5038] Kernel panic - not syncing: Fatal exception [ 70.295925][ T5038] Kernel Offset: disabled [ 70.300256][ T5038] Rebooting in 86400 seconds..