./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3198197049 <...> Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. execve("./syz-executor3198197049", ["./syz-executor3198197049"], 0x7fff21ace4c0 /* 10 vars */) = 0 brk(NULL) = 0x555556fb6000 brk(0x555556fb6d00) = 0x555556fb6d00 arch_prctl(ARCH_SET_FS, 0x555556fb6380) = 0 set_tid_address(0x555556fb6650) = 5061 set_robust_list(0x555556fb6660, 24) = 0 rseq(0x555556fb6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3198197049", 4096) = 28 getrandom("\xa5\x38\x7c\x33\x56\x12\xa9\xe2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556fb6d00 brk(0x555556fd7d00) = 0x555556fd7d00 brk(0x555556fd8000) = 0x555556fd8000 mprotect(0x7fb9dd8a1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb9d53f1000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7fb9d53f1000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 55.342535][ T5061] loop0: detected capacity change from 0 to 64 [ 55.364775][ T5061] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 55.376500][ T5061] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 55.384886][ T5061] CPU: 0 PID: 5061 Comm: syz-executor319 Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0 [ 55.394926][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 55.404980][ T5061] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 55.410308][ T5061] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 24 85 7e ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 55.429895][ T5061] RSP: 0018:ffffc9000437f2c0 EFLAGS: 00010202 [ 55.435938][ T5061] RAX: 1ffff9200086fe77 RBX: ffffc9000437f3b8 RCX: ffff88801f343b80 [ 55.443885][ T5061] RDX: 0000000000000000 RSI: ffffc9000437f3a0 RDI: ffffc9000437f3b0 [ 55.451829][ T5061] RBP: 0000000000000000 R08: ffffffff826d922f R09: 0000000000000000 [ 55.459775][ T5061] R10: ffffc9000437f3a0 R11: fffff5200086fe7b R12: ffffc9000437f3a0 [ 55.467723][ T5061] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 55.475669][ T5061] FS: 0000555556fb6380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 55.484578][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.491152][ T5061] CR2: 00007fffd4481000 CR3: 0000000074328000 CR4: 00000000003506f0 [ 55.499116][ T5061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.507063][ T5061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.515011][ T5061] Call Trace: [ 55.518278][ T5061] [ 55.521185][ T5061] ? __die_body+0x8b/0xe0 [ 55.525500][ T5061] ? die_addr+0xc9/0x100 [ 55.529722][ T5061] ? exc_general_protection+0x3c2/0x5b0 [ 55.535260][ T5061] ? asm_exc_general_protection+0x26/0x30 [ 55.540960][ T5061] ? hfs_get_block+0x3bf/0xb60 [ 55.545704][ T5061] ? hfs_find_init+0x72/0x1f0 [ 55.550360][ T5061] hfs_get_block+0x4f4/0xb60 [ 55.554932][ T5061] ? hfs_free_extents+0x420/0x420 [ 55.559941][ T5061] ? _raw_spin_unlock+0x28/0x40 [ 55.564765][ T5061] ? create_empty_buffers+0x53e/0x740 [ 55.570131][ T5061] block_read_full_folio+0x474/0xe90 [ 55.575419][ T5061] ? hfs_free_extents+0x420/0x420 [ 55.580423][ T5061] ? block_is_partially_uptodate+0x570/0x570 [ 55.586408][ T5061] ? folio_add_lru+0x9d0/0x9d0 [ 55.591147][ T5061] ? folio_add_lru+0x4b2/0x9d0 [ 55.595886][ T5061] ? folio_add_lru+0x27b/0x9d0 [ 55.600625][ T5061] filemap_read_folio+0x19c/0x770 [ 55.605627][ T5061] ? hfs_writepage+0x30/0x30 [ 55.610193][ T5061] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 55.615723][ T5061] ? __filemap_get_folio+0x92f/0xbb0 [ 55.620984][ T5061] ? __lock_acquire+0x7f70/0x7f70 [ 55.625986][ T5061] do_read_cache_folio+0x134/0x810 [ 55.631082][ T5061] ? hfs_writepage+0x30/0x30 [ 55.635649][ T5061] do_read_cache_page+0x30/0x1f0 [ 55.640574][ T5061] hfs_btree_open+0x50b/0xf20 [ 55.645234][ T5061] ? hfs_mdb_get+0x13d2/0x21b0 [ 55.649973][ T5061] hfs_mdb_get+0x1443/0x21b0 [ 55.654552][ T5061] ? hfs_xattr_set+0x5b0/0x5b0 [ 55.659291][ T5061] ? lockdep_softirqs_off+0x420/0x420 [ 55.664640][ T5061] ? __debug_object_init+0xec/0x310 [ 55.669812][ T5061] ? __raw_spin_lock_init+0x45/0x100 [ 55.675074][ T5061] hfs_fill_super+0x107d/0x1790 [ 55.679926][ T5061] ? hfs_mount+0x40/0x40 [ 55.684150][ T5061] ? clear_nonspinnable+0x60/0x60 [ 55.689150][ T5061] mount_bdev+0x237/0x300 [ 55.693455][ T5061] ? hfs_mount+0x40/0x40 [ 55.697671][ T5061] ? get_tree_bdev+0x5b0/0x5b0 [ 55.702405][ T5061] ? vfs_parse_fs_string+0x190/0x230 [ 55.707665][ T5061] ? vfs_parse_fs_param+0x410/0x410 [ 55.712925][ T5061] ? cap_capable+0x1b4/0x240 [ 55.717501][ T5061] legacy_get_tree+0xef/0x190 [ 55.722154][ T5061] ? hfs_mark_mdb_dirty+0x1c0/0x1c0 [ 55.727327][ T5061] vfs_get_tree+0x8c/0x280 [ 55.731803][ T5061] do_new_mount+0x28f/0xae0 [ 55.736282][ T5061] ? do_move_mount_old+0x170/0x170 [ 55.741369][ T5061] __se_sys_mount+0x2d9/0x3c0 [ 55.746124][ T5061] ? __x64_sys_mount+0xc0/0xc0 [ 55.750861][ T5061] ? syscall_enter_from_user_mode+0x32/0x230 [ 55.756819][ T5061] ? __x64_sys_mount+0x20/0xc0 [ 55.761556][ T5061] do_syscall_64+0x44/0x110 [ 55.766035][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 55.771907][ T5061] RIP: 0033:0x7fb9dd82f8fa [ 55.776298][ T5061] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.795880][ T5061] RSP: 002b:00007fffd4480838 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.804272][ T5061] RAX: ffffffffffffffda RBX: 00007fffd4480850 RCX: 00007fb9dd82f8fa [ 55.812216][ T5061] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007fffd4480850 [ 55.820163][ T5061] RBP: 0000000000000004 R08: 00007fffd4480890 R09: 00000000000002d8 [ 55.828110][ T5061] R10: 000000000300041c R11: 0000000000000286 R12: 000000000300041c [ 55.836059][ T5061] R13: 00007fffd4480890 R14: 0000000000000003 R15: 0000000000008000 [ 55.844008][ T5061] [ 55.847003][ T5061] Modules linked in: [ 55.851073][ T5061] ---[ end trace 0000000000000000 ]--- [ 55.856683][ T5061] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 55.861988][ T5061] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 24 85 7e ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 55.881727][ T5061] RSP: 0018:ffffc9000437f2c0 EFLAGS: 00010202 [ 55.887827][ T5061] RAX: 1ffff9200086fe77 RBX: ffffc9000437f3b8 RCX: ffff88801f343b80 [ 55.895821][ T5061] RDX: 0000000000000000 RSI: ffffc9000437f3a0 RDI: ffffc9000437f3b0 [ 55.903780][ T5061] RBP: 0000000000000000 R08: ffffffff826d922f R09: 0000000000000000 [ 55.911772][ T5061] R10: ffffc9000437f3a0 R11: fffff5200086fe7b R12: ffffc9000437f3a0 [ 55.919829][ T5061] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 55.927842][ T5061] FS: 0000555556fb6380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 55.936792][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.943459][ T5061] CR2: 00007fffd4481000 CR3: 0000000074328000 CR4: 00000000003506f0 [ 55.951479][ T5061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.959466][ T5061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.967459][ T5061] Kernel panic - not syncing: Fatal exception [ 55.973790][ T5061] Kernel Offset: disabled [ 55.978106][ T5061] Rebooting in 86400 seconds..