./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor43977114
<...>
Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts.
execve("./syz-executor43977114", ["./syz-executor43977114"], 0x7ffdf0bea360 /* 10 vars */) = 0
brk(NULL) = 0x555583230000
brk(0x555583230d00) = 0x555583230d00
arch_prctl(ARCH_SET_FS, 0x555583230380) = 0
set_tid_address(0x555583230650) = 5837
set_robust_list(0x555583230660, 24) = 0
rseq(0x555583230ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor43977114", 4096) = 26
getrandom("\x81\x7a\xf3\xc2\xf5\xb0\xb6\x45", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555583230d00
brk(0x555583251d00) = 0x555583251d00
brk(0x555583252000) = 0x555583252000
mprotect(0x7fd73f229000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached
<unfinished ...>
[pid 5838] set_robust_list(0x555583230660, 24 <unfinished ...>
[pid 5837] <... clone resumed>, child_tidptr=0x555583230650) = 5838
[pid 5838] <... set_robust_list resumed>) = 0
[pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5838] setpgid(0, 0) = 0
[pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5838] write(3, "1000", 4) = 4
[pid 5838] close(3) = 0
executing program
[pid 5838] write(1, "executing program\n", 18) = 18
[pid 5838] memfd_create("syzkaller", 0) = 3
[pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd736c00000
[pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid 5838] munmap(0x7fd736c00000, 138412032) = 0
[pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5838] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5838] close(3) = 0
[pid 5838] close(4) = 0
[pid 5838] mkdir("./file1", 0777) = 0
[ 60.342442][ T5838] loop0: detected capacity change from 0 to 1024
[pid 5838] mount("/dev/loop0", "./file1", "hfsplus", MS_SILENT|MS_STRICTATIME, "") = 0
[pid 5838] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5838] chdir("./file1") = 0
[pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5838] memfd_create("syzkaller", 0) = 4
[pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd736c00000
[pid 5838] write(4, "\x58\x46\x53\x42\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xdc\x47\xfc\x10\xd8\x4e\xed\xa5\x62\x11\xa8\x31\xb3\xf7\x91\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x24\x40\x00\x00\x00\x00\x00\x00\x24\x41\x00\x00\x00\x00\x00\x00\x24\x42\x00\x00\x00\x02\x00\x00\x20\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x12\x00"..., 16777216) = 16777216
[pid 5838] munmap(0x7fd736c00000, 138412032) = 0
[pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5838] close(4) = 0
[ 60.654426][ T5838] ------------[ cut here ]------------
[ 60.660171][ T5838] kernel BUG at fs/hfsplus/xattr.c:175!
[ 60.665884][ T5838] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 60.672890][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor439 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[ 60.684005][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 60.694173][ T5838] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0
[ 60.700293][ T5838] Code: e8 31 4c 3a 09 e8 dc ee 0f ff 4c 89 ff 48 c7 c6 60 2d 22 8c e8 5d b7 58 ff 90 0f 0b e8 c5 ee 0f ff 90 0f 0b e8 bd ee 0f ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[ 60.720073][ T5838] RSP: 0018:ffffc90003db7300 EFLAGS: 00010293
[ 60.726305][ T5838] RAX: ffffffff8284faf3 RBX: 0000000000010000 RCX: ffff88803104da00
[ 60.734373][ T5838] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000
[ 60.742437][ T5838] RBP: ffffc90003db7788 R08: ffffffff8284e213 R09: 1ffff1100acc6556
[ 60.750589][ T5838] R10: dffffc0000000000 R11: ffffed100acc6557 R12: ffff888056632370
[ 60.758745][ T5838] R13: dffffc0000000000 R14: ffff888056632a30 R15: 0000000000000000
[ 60.766712][ T5838] FS: 0000555583230380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 60.775636][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.782235][ T5838] CR2: 00007fd737bff000 CR3: 0000000031064000 CR4: 00000000003526f0
[ 60.790222][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.798212][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.806187][ T5838] Call Trace:
[ 60.809462][ T5838] <TASK>
[ 60.812380][ T5838] ? __die_body+0x5f/0xb0
[ 60.816698][ T5838] ? die+0x9e/0xc0
[ 60.820413][ T5838] ? do_trap+0x15a/0x3a0
[ 60.824648][ T5838] ? __hfsplus_setxattr+0x22c4/0x22d0
[ 60.830110][ T5838] ? do_error_trap+0x1dc/0x2c0
[ 60.834872][ T5838] ? __hfsplus_setxattr+0x22c4/0x22d0
[ 60.840250][ T5838] ? __pfx_do_error_trap+0x10/0x10
[ 60.845367][ T5838] ? handle_invalid_op+0x34/0x40
[ 60.850341][ T5838] ? __hfsplus_setxattr+0x22c4/0x22d0
[ 60.855720][ T5838] ? exc_invalid_op+0x38/0x50
[ 60.860413][ T5838] ? asm_exc_invalid_op+0x1a/0x20
[ 60.865524][ T5838] ? __hfsplus_setxattr+0x9e3/0x22d0
[ 60.871071][ T5838] ? __hfsplus_setxattr+0x22c3/0x22d0
[ 60.876445][ T5838] ? __hfsplus_setxattr+0x22c4/0x22d0
[ 60.881815][ T5838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 60.888250][ T5838] ? __pfx___hfsplus_setxattr+0x10/0x10
[ 60.893795][ T5838] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 60.899683][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 60.905995][ T5838] ? stack_trace_save+0x118/0x1d0
[ 60.911122][ T5838] ? stack_depot_save_flags+0x6e4/0x830
[ 60.916664][ T5838] ? __kasan_kmalloc+0x98/0xb0
[ 60.922072][ T5838] ? hfsplus_initxattrs+0x5d/0x220
[ 60.927179][ T5838] hfsplus_initxattrs+0x158/0x220
[ 60.932196][ T5838] security_inode_init_security+0x29c/0x480
[ 60.938088][ T5838] ? __pfx_hfsplus_initxattrs+0x10/0x10
[ 60.943714][ T5838] ? __pfx_security_inode_init_security+0x10/0x10
[ 60.950207][ T5838] ? _raw_spin_unlock+0x28/0x50
[ 60.955130][ T5838] hfsplus_mknod+0x1c6/0x2a0
[ 60.959710][ T5838] ? __pfx_hfsplus_create+0x10/0x10
[ 60.965045][ T5838] path_openat+0x1c03/0x3590
[ 60.969633][ T5838] ? __pfx_path_openat+0x10/0x10
[ 60.974682][ T5838] do_filp_open+0x235/0x490
[ 60.979201][ T5838] ? __pfx_do_filp_open+0x10/0x10
[ 60.984343][ T5838] ? _raw_spin_unlock+0x28/0x50
[ 60.989212][ T5838] ? alloc_fd+0x5a1/0x640
[ 60.993535][ T5838] do_sys_openat2+0x13e/0x1d0
[ 60.998212][ T5838] ? __pfx_do_sys_openat2+0x10/0x10
[ 61.003903][ T5838] ? lockdep_hardirqs_on+0x99/0x150
[ 61.009110][ T5838] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.014550][ T5838] ? ptrace_notify+0x279/0x380
[ 61.019327][ T5838] __x64_sys_openat+0x247/0x2a0
[ 61.024357][ T5838] ? __pfx___x64_sys_openat+0x10/0x10
[ 61.029733][ T5838] ? do_syscall_64+0x100/0x230
[ 61.034507][ T5838] do_syscall_64+0xf3/0x230
[ 61.039037][ T5838] ? clear_bhb_loop+0x35/0x90
[ 61.043754][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.049646][ T5838] RIP: 0033:0x7fd73f1acc59
[ 61.054067][ T5838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.073930][ T5838] RSP: 002b:00007ffdc35b6ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 61.082880][ T5838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd73f1acc59
[ 61.090918][ T5838] RDX: 000000000000275a RSI: 0000000020000080 RDI: 00000000ffffff9c
[ 61.098899][ T5838] RBP: 00007fd73f2295f0 R08: 0000000000009600 R09: 00005555832314c0
[ 61.106950][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc35b6af0
[ 61.115021][ T5838] R13: 00007ffdc35b6d18 R14: 431bde82d7b634db R15: 00007fd73f1f503b
[ 61.123004][ T5838] </TASK>
[ 61.126083][ T5838] Modules linked in:
[ 61.130267][ T5838] ---[ end trace 0000000000000000 ]---
[ 61.135777][ T5838] RIP: 0010:__hfsplus_setxattr+0x22c4/0x22d0
[ 61.141778][ T5838] Code: e8 31 4c 3a 09 e8 dc ee 0f ff 4c 89 ff 48 c7 c6 60 2d 22 8c e8 5d b7 58 ff 90 0f 0b e8 c5 ee 0f ff 90 0f 0b e8 bd ee 0f ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[ 61.161477][ T5838] RSP: 0018:ffffc90003db7300 EFLAGS: 00010293
[ 61.168288][ T5838] RAX: ffffffff8284faf3 RBX: 0000000000010000 RCX: ffff88803104da00
[ 61.176319][ T5838] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000000
[ 61.184482][ T5838] RBP: ffffc90003db7788 R08: ffffffff8284e213 R09: 1ffff1100acc6556
[ 61.192738][ T5838] R10: dffffc0000000000 R11: ffffed100acc6557 R12: ffff888056632370
[ 61.200848][ T5838] R13: dffffc0000000000 R14: ffff888056632a30 R15: 0000000000000000
[ 61.208920][ T5838] FS: 0000555583230380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 61.218006][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 61.224896][ T5838] CR2: 00007fd737bff000 CR3: 0000000031064000 CR4: 00000000003526f0
[ 61.232891][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 61.241031][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 61.249084][ T5838] Kernel panic - not syncing: Fatal exception
[ 61.255395][ T5838] Kernel Offset: disabled
[ 61.259717][ T5838] Rebooting in 86400 seconds..