./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3688346000 <...> Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. execve("./syz-executor3688346000", ["./syz-executor3688346000"], 0x7ffc23485ed0 /* 10 vars */) = 0 brk(NULL) = 0x555574f34000 brk(0x555574f34d00) = 0x555574f34d00 arch_prctl(ARCH_SET_FS, 0x555574f34380) = 0 set_tid_address(0x555574f34650) = 5230 set_robust_list(0x555574f34660, 24) = 0 rseq(0x555574f34ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3688346000", 4096) = 28 getrandom("\x07\xb8\xc2\x14\x9c\xe0\x5c\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574f34d00 brk(0x555574f55d00) = 0x555574f55d00 brk(0x555574f56000) = 0x555574f56000 mprotect(0x7f17a2dd9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f179a800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f179a800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "hfs", MS_STRICTATIME|MS_LAZYTIME, "quiet,codepage=cp860,iocharset=cp861,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "blkio.bfq.io_queued_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 69.916631][ T5230] loop0: detected capacity change from 0 to 64 [ 69.976626][ T116] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c7: 0000 [#1] PREEMPT SMP KASAN PTI [ 69.989252][ T116] KASAN: null-ptr-deref in range [0x0000000000000638-0x000000000000063f] [ 69.997697][ T116] CPU: 1 UID: 0 PID: 116 Comm: kworker/1:2 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 70.007872][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.017956][ T116] Workqueue: events_long flush_mdb [ 70.023111][ T116] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 70.028500][ T116] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 dc 45 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 0a 2b 74 ff 4d 8b 34 24 49 8d 6e [ 70.048118][ T116] RSP: 0018:ffffc90002d0fb40 EFLAGS: 00010202 [ 70.054212][ T116] RAX: ffffffff828a89e4 RBX: 00000000000000c7 RCX: ffff88801ef68000 [ 70.062191][ T116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 70.070253][ T116] RBP: ffffc90002d0fdc0 R08: ffff88802e32d1eb R09: 1ffff11005c65a3d [ 70.078230][ T116] R10: dffffc0000000000 R11: ffffed1005c65a3e R12: 0000000000000638 [ 70.086216][ T116] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 70.094195][ T116] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 70.103141][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.109901][ T116] CR2: 000055fc5eb2fb50 CR3: 00000000786e8000 CR4: 00000000003526f0 [ 70.117884][ T116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.125864][ T116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.133841][ T116] Call Trace: [ 70.137129][ T116] [ 70.140165][ T116] ? __die_body+0x5f/0xb0 [ 70.144506][ T116] ? die_addr+0xb0/0xe0 [ 70.148667][ T116] ? exc_general_protection+0x3dd/0x5d0 [ 70.154235][ T116] ? asm_exc_general_protection+0x26/0x30 [ 70.159970][ T116] ? hfs_mdb_commit+0x24/0xfd0 [ 70.164747][ T116] ? hfs_mdb_commit+0x37/0xfd0 [ 70.169525][ T116] ? process_scheduled_works+0x976/0x1850 [ 70.175607][ T116] ? _raw_spin_unlock+0x28/0x50 [ 70.180482][ T116] ? process_scheduled_works+0x976/0x1850 [ 70.186218][ T116] process_scheduled_works+0xa63/0x1850 [ 70.191788][ T116] ? __pfx_process_scheduled_works+0x10/0x10 [ 70.197789][ T116] ? assign_work+0x364/0x3d0 [ 70.202396][ T116] worker_thread+0x870/0xd30 [ 70.207003][ T116] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.212908][ T116] ? __kthread_parkme+0x169/0x1d0 [ 70.217946][ T116] ? __pfx_worker_thread+0x10/0x10 [ 70.223073][ T116] kthread+0x2f0/0x390 [ 70.227153][ T116] ? __pfx_worker_thread+0x10/0x10 [ 70.232276][ T116] ? __pfx_kthread+0x10/0x10 [ 70.236874][ T116] ret_from_fork+0x4b/0x80 [ 70.241304][ T116] ? __pfx_kthread+0x10/0x10 [ 70.245935][ T116] ret_from_fork_asm+0x1a/0x30 [ 70.250717][ T116] [ 70.253740][ T116] Modules linked in: [ 70.257940][ T116] ---[ end trace 0000000000000000 ]--- [ 70.263683][ T116] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 70.269108][ T116] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 dc 45 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 0a 2b 74 ff 4d 8b 34 24 49 8d 6e [ 70.289211][ T116] RSP: 0018:ffffc90002d0fb40 EFLAGS: 00010202 [ 70.295342][ T116] RAX: ffffffff828a89e4 RBX: 00000000000000c7 RCX: ffff88801ef68000 [ 70.303449][ T116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 70.311463][ T116] RBP: ffffc90002d0fdc0 R08: ffff88802e32d1eb R09: 1ffff11005c65a3d [ 70.319457][ T116] R10: dffffc0000000000 R11: ffffed1005c65a3e R12: 0000000000000638 [ 70.327476][ T116] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 70.335494][ T116] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 70.344467][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.351090][ T116] CR2: 000055fc5eb2fb50 CR3: 00000000786e8000 CR4: 00000000003526f0 [ 70.359069][ T116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.367092][ T116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.375128][ T116] Kernel panic - not syncing: Fatal exception [ 70.381487][ T116] Kernel Offset: disabled [ 70.385820][ T116] Rebooting in 86400 seconds..