Extracting prog: 2m17.120367371s
Minimizing prog: 6m43.028597706s
Simplifying prog options: 0s
Extracting C: 52.694438582s
Simplifying C: 7m21.321860046s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="000075b822a6f1b61ed41795b8b62e943fefae1913e055b8852885f3200b41a4a7e94014173e7f708cfa000f58442c767bb8bac7e75a49add62f1121fbd4ac5762d2de39e14035ce68d06a90718e4b3de52f7f3b28d3469e25124b2babd96757a24825c15b0f8ea60df5ce8d75bf8584de04275c08005bfa4e569df0e873d6ff9d8ed3bdf95c41f60f000000"], 0x1, 0x5d4, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0)

program crashed: kernel BUG in __hfsplus_setxattr
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="000075b822a6f1b61ed41795b8b62e943fefae1913e055b8852885f3200b41a4a7e94014173e7f708cfa000f58442c767bb8bac7e75a49add62f1121fbd4ac5762d2de39e14035ce68d06a90718e4b3de52f7f3b28d3469e25124b2babd96757a24825c15b0f8ea60df5ce8d75bf8584de04275c08005bfa4e569df0e873d6ff9d8ed3bdf95c41f60f000000"], 0x1, 0x5d4, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)

program did not crash
testing program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-fsetxattr$trusted_overlay_redirect
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="000075b822a6f1b61ed41795b8b62e943fefae1913e055b8852885f3200b41a4a7e94014173e7f708cfa000f58442c767bb8bac7e75a49add62f1121fbd4ac5762d2de39e14035ce68d06a90718e4b3de52f7f3b28d3469e25124b2babd96757a24825c15b0f8ea60df5ce8d75bf8584de04275c08005bfa4e569df0e873d6ff9d8ed3bdf95c41f60f000000"], 0x1, 0x5d4, &(0x7f0000000cc0)="$eJzs3cFvHFcdB/DvbhxnHaR04yZtQJWwilQhLJJdWyIpF6AUZKEKVeLA2SJOYmWTVvYWuT2AQRwqTv0TysH/AOJYJB9oj3Dq2ahHJO6+uZrZWXttb107dr3r9vORZt9782be/t5vZicza0Ub4BtrYTYTm6llYfaNtaK9tTHf2dqYf9KvJ7mSpJ40ktSK1f9I8lmynt6Sb/c7BspDPv2o8fCTDz5+v9dqVEu5fe2o/Y5nN5ZmL9ayPKvx5k493v4ZTieZOV18cDZ2+v47tPuUn0sAYJzVkkvD1jeTq9XNevEc0Lsr7t1jX2jrow4AAAAAzsFz29nOWq6NOg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SKrf/69VS71fn0mt//v/k9W6VPULbXPUAQAAAAAAAADAGfjudrazlmv99k6t/Jv/y2XjRvn6rbyT1SxlJbezlsV0081K2kmaAwNNri12uyvtY+w5N3TPufOZLwAAAAAAAAB8Tf05C3t//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHFQSy71inK50a83U59I0kgyWWy3nvynX7/INkcdAAAAAJyD57aznbVc67d3auUz/wvlc38j7+RpullON50s5X75XUDvqb++tTHf2dqYf1Ish8f92f9PFEY5YnrfPQx/51vlFlN5kOVyze38Lm+lk/upl3sWbvXjGR7Xn4qYaj+pHDOy+1VZzPxXVTkemmVGLu9mpFXFVmTj+tGZOOHROfhO7dR3v/m58RXk/GpVFvN5faxzPjdw9r1wdCaS6d/+9e6jztPHjx6szo7PlJ7RwUzMD2TixW9UJlplJm7uthfyy/wms5nJm1nJcn6fxXSzlJm8XtYWq/O5eG0enamf7mu9+WWRTFbHpXcVPVlML5f7Xstyfp23cr88oq3czd3M5Ud5Na19R/jm0Lj/uFN1l5/6+sk+9d/7flW5nOQXVTkeirxeH8jr4DW3WfYNrtnL0vTZXxsnvlNVirPntbG7Nl4/8K9EPxPPH52Jv5Unzmrn6eOVR4tvH/P9XqnKIgM/P5SJnUunntAzK86X6eJgla39Z0fR9/zQvnbZd2O3r36o7+Zu35d9Uiere7jDI82VfS8O7evtd2ugb9j9FgBj7+oPrk5O/W/q31MfTv1l6tHUG43Xrty78tJkLv/r8o8nWpdeqb9U+3s+zB/2nv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnt/rue48XO52lFRUVFZXdyqivTMBX7U73ydt3Vt9974fLTxYfLj1cevpq6969drt9t3XnwXJnqXoddZQAwFnau+kfdSQAAAAAAAAAAAAAAMAXOY//TjzqOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vC7OZ2Ewt7dbtVtHe2pjvFEu/vrdlI0mtqPwzyWfJenpLmgPD1b7ofT79qPHwkw8+fn9vrEZ/+9pR+x3PvljqB2I67Xhzpx5vb4YzSaarEkbu8wAAAP//Z8wF+Q==")
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0)

program did not crash
testing program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-fsetxattr$trusted_overlay_redirect
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0)

program did not crash
testing program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="000075b822a6f1b61ed41795b8b62e943fefae1913e055b8852885f3200b41a4a7e94014173e7f708cfa000f58442c767bb8bac7e75a49add62f1121fbd4ac5762d2de39e14035ce68d06a90718e4b3de52f7f3b28d3469e25124b2babd96757a24825c15b0f8ea60df5ce8d75bf8584de04275c08005bfa4e569df0e873d6ff9d8ed3bdf95c41f60f000000"], 0x1, 0x5d4, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0)

program did not crash
testing program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
detailed listing:
executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="000075b822a6f1b61ed41795b8b62e943fefae1913e055b8852885f3200b41a4a7e94014173e7f708cfa000f58442c767bb8bac7e75a49add62f1121fbd4ac5762d2de39e14035ce68d06a90718e4b3de52f7f3b28d3469e25124b2babd96757a24825c15b0f8ea60df5ce8d75bf8584de04275c08005bfa4e569df0e873d6ff9d8ed3bdf95c41f60f000000"], 0x1, 0x5d4, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=56.097828786s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
simplifying C reproducer
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
testing compiled C program (duration=56.097828786s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat-fsetxattr$trusted_overlay_redirect
program crashed: kernel BUG in __hfsplus_setxattr
reproducing took 17m14.165299145s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
------------[ cut here ]------------
kernel BUG at fs/hfsplus/xattr.c:175!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4292 Comm: syz-executor215 Not tainted 6.1.136-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
pc : __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
lr : hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
lr : __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
sp : ffff800020817380
x29: ffff8000208177e0 x28: ffff0000d9059000 x27: 0000000000000001
x26: ffff0000d9522a80 x25: 0000000000010000 x24: ffff0000d9059038
x23: ffff700004102e88 x22: 0000000000000000 x21: ffff800011b3e2a0
x20: dfff800000000000 x19: ffff0000d9522370 x18: 0000000000000000
x17: ffff8000181a0000 x16: ffff8000082e7444 x15: ffff800017c80fc0
x14: ffff0000d95e2658 x13: ffff0000d95e26d0 x12: 0000000000ff0100
x11: ff00800008f7a348 x10: 0000000000000000 x9 : ffff800008f7a348
x8 : ffff0000d95e1bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff8000182d8240 x4 : 0000000000000008 x3 : ffff8000082e7558
x2 : 0000000000000001 x1 : 0000000000010000 x0 : 0000000000000000
Call trace:
 hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
 __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
 hfsplus_setxattr+0xdc/0x12c fs/hfsplus/xattr.c:434
 hfsplus_trusted_setxattr+0x54/0x6c fs/hfsplus/xattr_trusted.c:30
 __vfs_setxattr+0x388/0x3a4 fs/xattr.c:182
 __vfs_setxattr_noperm+0x120/0x564 fs/xattr.c:216
 __vfs_setxattr_locked+0x1ec/0x218 fs/xattr.c:277
 vfs_setxattr+0x158/0x2ac fs/xattr.c:309
 do_setxattr fs/xattr.c:594 [inline]
 setxattr+0x228/0x28c fs/xattr.c:617
 __do_sys_fsetxattr fs/xattr.c:673 [inline]
 __se_sys_fsetxattr fs/xattr.c:662 [inline]
 __arm64_sys_fsetxattr+0x1a8/0x224 fs/xattr.c:662
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: d4210000 97d49d64 d4210000 97d49d62 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 1024
------------[ cut here ]------------
kernel BUG at fs/hfsplus/xattr.c:175!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4292 Comm: syz-executor215 Not tainted 6.1.136-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
pc : __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
lr : hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
lr : __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
sp : ffff800020817380
x29: ffff8000208177e0 x28: ffff0000d9059000 x27: 0000000000000001
x26: ffff0000d9522a80 x25: 0000000000010000 x24: ffff0000d9059038
x23: ffff700004102e88 x22: 0000000000000000 x21: ffff800011b3e2a0
x20: dfff800000000000 x19: ffff0000d9522370 x18: 0000000000000000
x17: ffff8000181a0000 x16: ffff8000082e7444 x15: ffff800017c80fc0
x14: ffff0000d95e2658 x13: ffff0000d95e26d0 x12: 0000000000ff0100
x11: ff00800008f7a348 x10: 0000000000000000 x9 : ffff800008f7a348
x8 : ffff0000d95e1bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff8000182d8240 x4 : 0000000000000008 x3 : ffff8000082e7558
x2 : 0000000000000001 x1 : 0000000000010000 x0 : 0000000000000000
Call trace:
 hfsplus_create_attributes_file fs/hfsplus/xattr.c:175 [inline]
 __hfsplus_setxattr+0x19c4/0x1a30 fs/hfsplus/xattr.c:331
 hfsplus_setxattr+0xdc/0x12c fs/hfsplus/xattr.c:434
 hfsplus_trusted_setxattr+0x54/0x6c fs/hfsplus/xattr_trusted.c:30
 __vfs_setxattr+0x388/0x3a4 fs/xattr.c:182
 __vfs_setxattr_noperm+0x120/0x564 fs/xattr.c:216
 __vfs_setxattr_locked+0x1ec/0x218 fs/xattr.c:277
 vfs_setxattr+0x158/0x2ac fs/xattr.c:309
 do_setxattr fs/xattr.c:594 [inline]
 setxattr+0x228/0x28c fs/xattr.c:617
 __do_sys_fsetxattr fs/xattr.c:673 [inline]
 __se_sys_fsetxattr fs/xattr.c:662 [inline]
 __arm64_sys_fsetxattr+0x1a8/0x224 fs/xattr.c:662
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: d4210000 97d49d64 d4210000 97d49d62 (d4210000) 
---[ end trace 0000000000000000 ]---