./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1016045263 <...> Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. execve("./syz-executor1016045263", ["./syz-executor1016045263"], 0x7ffd91f27790 /* 10 vars */) = 0 brk(NULL) = 0x55556af91000 brk(0x55556af91d00) = 0x55556af91d00 arch_prctl(ARCH_SET_FS, 0x55556af91380) = 0 set_tid_address(0x55556af91650) = 5073 set_robust_list(0x55556af91660, 24) = 0 rseq(0x55556af91ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1016045263", 4096) = 28 getrandom("\x92\x63\x87\xa4\xfb\x4c\x1a\xeb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556af91d00 brk(0x55556afb2d00) = 0x55556afb2d00 brk(0x55556afb3000) = 0x55556afb3000 mprotect(0x7f488393a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached , child_tidptr=0x55556af91650) = 5074 [pid 5074] set_robust_list(0x55556af91660, 24) = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f487b400000 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5074] munmap(0x7f487b400000, 138412032) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5074] close(3) = 0 [pid 5074] close(4) = 0 [pid 5074] mkdir("./file0", 0777) = 0 [ 109.426380][ T5074] loop0: detected capacity change from 0 to 1024 [pid 5074] mount("/dev/loop0", "./file0", "hfsplus", MS_SILENT|MS_I_VERSION, "") = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file0") = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 109.509084][ T28] audit: type=1800 audit(1711824985.654:2): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor101" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 109.511009][ T5074] ------------[ cut here ]------------ [ 109.536152][ T5074] kernel BUG at fs/hfsplus/xattr.c:175! [ 109.542035][ T5074] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 109.548635][ T5074] CPU: 1 PID: 5074 Comm: syz-executor101 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 109.558709][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 109.568791][ T5074] RIP: 0010:__hfsplus_setxattr+0x1fb4/0x2180 [ 109.574824][ T5074] Code: ff 4c 8b 54 24 50 4c 8b 44 24 48 e9 84 eb ff ff e8 71 45 7d ff 4c 8b 54 24 50 4c 8b 44 24 48 e9 4e eb ff ff e8 ed 62 22 ff 90 <0f> 0b 48 8b 7c 24 40 e8 50 45 7d ff 4c 8b 54 24 50 4c 8b 44 24 48 [ 109.594466][ T5074] RSP: 0018:ffffc9000409f558 EFLAGS: 00010293 [ 109.600559][ T5074] RAX: 0000000000000000 RBX: 0000000000010000 RCX: ffffffff826bc442 [ 109.608554][ T5074] RDX: ffff888021e18000 RSI: ffffffff826bd943 RDI: 0000000000000007 [ 109.616548][ T5074] RBP: ffffed1005c8b307 R08: ffff888023078000 R09: 0000000000000000 [ 109.624541][ T5074] R10: ffff88802e459830 R11: 0000000000000004 R12: 0000000000000003 [ 109.632555][ T5074] R13: ffff88802e459800 R14: 1ffff92000813ebd R15: ffffc9000409f618 [ 109.640556][ T5074] FS: 000055556af91380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 109.649515][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.656122][ T5074] CR2: 00007f488393e0f8 CR3: 000000002cd2a000 CR4: 0000000000350ef0 [ 109.664117][ T5074] Call Trace: [ 109.667409][ T5074] [ 109.670354][ T5074] ? show_regs+0x8c/0xa0 [ 109.674624][ T5074] ? die+0x36/0xa0 [ 109.678367][ T5074] ? do_trap+0x232/0x430 [ 109.682652][ T5074] ? __hfsplus_setxattr+0x1fb4/0x2180 [ 109.688080][ T5074] ? __hfsplus_setxattr+0x1fb4/0x2180 [ 109.693500][ T5074] ? do_error_trap+0xf4/0x230 [ 109.698220][ T5074] ? __hfsplus_setxattr+0x1fb4/0x2180 [ 109.703640][ T5074] ? handle_invalid_op+0x34/0x40 [ 109.708621][ T5074] ? __hfsplus_setxattr+0x1fb4/0x2180 [ 109.714035][ T5074] ? exc_invalid_op+0x2e/0x50 [ 109.718752][ T5074] ? asm_exc_invalid_op+0x1a/0x20 [ 109.723829][ T5074] ? __hfsplus_setxattr+0xab2/0x2180 [ 109.729159][ T5074] ? __hfsplus_setxattr+0x1fb3/0x2180 [ 109.734577][ T5074] ? __hfsplus_setxattr+0x1fb4/0x2180 [ 109.739993][ T5074] ? __hfsplus_setxattr+0x1fb3/0x2180 [ 109.745416][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.750314][ T5074] ? lock_acquire+0x1b1/0x540 [ 109.755019][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.759911][ T5074] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 109.765514][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.770408][ T5074] ? mark_held_locks+0x9f/0xe0 [ 109.775207][ T5074] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 109.781046][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.785940][ T5074] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.791233][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.796153][ T5074] hfsplus_setxattr+0x10c/0x180 [ 109.801055][ T5074] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 109.807174][ T5074] __vfs_setxattr+0x176/0x1e0 [ 109.811889][ T5074] ? __pfx___vfs_setxattr+0x10/0x10 [ 109.817118][ T5074] ? apparmor_capable+0x126/0x1e0 [ 109.822176][ T5074] __vfs_setxattr_noperm+0x127/0x5e0 [ 109.827508][ T5074] __vfs_setxattr_locked+0x182/0x260 [ 109.832835][ T5074] vfs_setxattr+0x146/0x350 [ 109.837380][ T5074] ? __pfx_vfs_setxattr+0x10/0x10 [ 109.842442][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.847349][ T5074] do_setxattr+0x146/0x170 [ 109.851802][ T5074] setxattr+0x15d/0x180 [ 109.855992][ T5074] ? __pfx_setxattr+0x10/0x10 [ 109.860709][ T5074] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.866121][ T5074] ? cgroup_update_frozen+0x144/0x6b0 [ 109.871562][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.876463][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.881369][ T5074] __x64_sys_fsetxattr+0x261/0x310 [ 109.886531][ T5074] ? srso_return_thunk+0x5/0x5f [ 109.891429][ T5074] do_syscall_64+0xd5/0x260 [ 109.895988][ T5074] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 109.901929][ T5074] RIP: 0033:0x7f48838c6a99 [ 109.906364][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 109.926000][ T5074] RSP: 002b:00007ffd3a9cdd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 109.934441][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48838c6a99 [ 109.942438][ T5074] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 109.950453][ T5074] RBP: 00007f488393a5f0 R08: 0000000000000002 R09: 000055556af924c0 [ 109.958448][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3a9cdd80 [ 109.966447][ T5074] R13: 00007ffd3a9cdfa8 R14: 431bde82d7b634db R15: 00007f488390f03b [ 109.974459][ T5074] [ 109.977498][ T5074] Modules linked in: [ 109.981654][ T5074] ---[ end trace 0000000000000000 ]--- [ 109.987238][ T5074] RIP: 0010:__hfsplus_setxattr+0x1fb4/0x2180 [ 109.993329][ T5074] Code: ff 4c 8b 54 24 50 4c 8b 44 24 48 e9 84 eb ff ff e8 71 45 7d ff 4c 8b 54 24 50 4c 8b 44 24 48 e9 4e eb ff ff e8 ed 62 22 ff 90 <0f> 0b 48 8b 7c 24 40 e8 50 45 7d ff 4c 8b 54 24 50 4c 8b 44 24 48 [ 110.013025][ T5074] RSP: 0018:ffffc9000409f558 EFLAGS: 00010293 [ 110.019138][ T5074] RAX: 0000000000000000 RBX: 0000000000010000 RCX: ffffffff826bc442 [ 110.027178][ T5074] RDX: ffff888021e18000 RSI: ffffffff826bd943 RDI: 0000000000000007 [ 110.035316][ T5074] RBP: ffffed1005c8b307 R08: ffff888023078000 R09: 0000000000000000 [ 110.043345][ T5074] R10: ffff88802e459830 R11: 0000000000000004 R12: 0000000000000003 [ 110.051345][ T5074] R13: ffff88802e459800 R14: 1ffff92000813ebd R15: ffffc9000409f618 [ 110.059378][ T5074] FS: 000055556af91380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 110.068364][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.075006][ T5074] CR2: 00007f488393e0f8 CR3: 000000002cd2a000 CR4: 0000000000350ef0 [ 110.083045][ T5074] Kernel panic - not syncing: Fatal exception [ 110.089364][ T5074] Kernel Offset: disabled [ 110.093705][ T5074] Rebooting in 86400 seconds..