./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3250521724 <...> Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. execve("./syz-executor3250521724", ["./syz-executor3250521724"], 0x7ffdedfe5940 /* 10 vars */) = 0 brk(NULL) = 0x555555873000 brk(0x555555873c40) = 0x555555873c40 arch_prctl(ARCH_SET_FS, 0x555555873300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3250521724", 4096) = 28 brk(0x555555894c40) = 0x555555894c40 brk(0x555555895000) = 0x555555895000 mprotect(0x7f624c247000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6243d8e000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f6243d8e000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 63.980493][ T4994] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4994 'syz-executor325' [ 63.996924][ T4994] loop0: detected capacity change from 0 to 64 [ 64.011064][ T4994] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 64.022802][ T4994] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 64.031207][ T4994] CPU: 0 PID: 4994 Comm: syz-executor325 Not tainted 6.4.0-rc4-syzkaller-00204-gc43a6ff9f93f #0 [ 64.041618][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 64.051686][ T4994] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 64.057003][ T4994] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 0d 80 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 64.076796][ T4994] RSP: 0018:ffffc90003b0f300 EFLAGS: 00010202 [ 64.082863][ T4994] RAX: 1ffff92000761e7f RBX: ffffc90003b0f3f8 RCX: ffff888028983b80 [ 64.090858][ T4994] RDX: 0000000000000000 RSI: ffffc90003b0f3e0 RDI: ffffc90003b0f3f0 [ 64.098832][ T4994] RBP: 0000000000000000 R08: ffffffff82647b7f R09: 0000000000000000 [ 64.106978][ T4994] R10: ffffc90003b0f3e0 R11: dffffc0000000001 R12: ffffc90003b0f3e0 [ 64.115124][ T4994] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 64.123184][ T4994] FS: 0000555555873300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 64.132115][ T4994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.138701][ T4994] CR2: 00007ffdde473000 CR3: 0000000077303000 CR4: 00000000003506f0 [ 64.146766][ T4994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.154909][ T4994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.162879][ T4994] Call Trace: [ 64.166174][ T4994] [ 64.169106][ T4994] ? __die_body+0x5e/0xa0 [ 64.173447][ T4994] ? die_addr+0x99/0xc0 [ 64.177605][ T4994] ? exc_general_protection+0x3c2/0x5b0 [ 64.183174][ T4994] ? asm_exc_general_protection+0x26/0x30 [ 64.188896][ T4994] ? hfs_get_block+0x3bf/0xb60 [ 64.193668][ T4994] ? hfs_find_init+0x72/0x1f0 [ 64.198447][ T4994] hfs_get_block+0x4f4/0xb60 [ 64.203060][ T4994] ? hfs_free_extents+0x420/0x420 [ 64.208098][ T4994] ? _raw_spin_unlock+0x28/0x40 [ 64.212964][ T4994] ? folio_create_buffers+0x132/0x250 [ 64.218345][ T4994] block_read_full_folio+0x47b/0x1000 [ 64.223728][ T4994] ? hfs_free_extents+0x420/0x420 [ 64.228768][ T4994] ? block_is_partially_uptodate+0x590/0x590 [ 64.234763][ T4994] ? folio_batch_add_and_move+0x16a/0x2c0 [ 64.240495][ T4994] ? folio_add_lru+0x6f0/0x6f0 [ 64.245352][ T4994] ? folio_add_lru+0x353/0x6f0 [ 64.250139][ T4994] filemap_read_folio+0x19d/0x7a0 [ 64.255168][ T4994] ? filemap_add_folio+0x580/0x580 [ 64.260281][ T4994] ? hfs_writepage+0x30/0x30 [ 64.264896][ T4994] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 64.270709][ T4994] ? __filemap_get_folio+0x777/0xa00 [ 64.276000][ T4994] do_read_cache_folio+0x134/0x820 [ 64.281122][ T4994] ? hfs_writepage+0x30/0x30 [ 64.286097][ T4994] do_read_cache_page+0x32/0x220 [ 64.291061][ T4994] hfs_btree_open+0x50b/0xf20 [ 64.295960][ T4994] hfs_mdb_get+0x1443/0x21b0 [ 64.300652][ T4994] ? hfs_xattr_set+0x5b0/0x5b0 [ 64.305428][ T4994] ? lockdep_softirqs_off+0x420/0x420 [ 64.310824][ T4994] ? __debug_object_init+0xeb/0x640 [ 64.316038][ T4994] ? __raw_spin_lock_init+0x45/0x100 [ 64.321444][ T4994] hfs_fill_super+0x107d/0x1790 [ 64.326317][ T4994] ? hfs_mount+0x40/0x40 [ 64.331006][ T4994] ? ptr_to_hashval+0x80/0x80 [ 64.335693][ T4994] ? __mutex_unlock_slowpath+0x21c/0x750 [ 64.341345][ T4994] ? snprintf+0xda/0x120 [ 64.345606][ T4994] ? set_blocksize+0x1e2/0x390 [ 64.350381][ T4994] ? sb_set_blocksize+0x99/0x100 [ 64.355324][ T4994] mount_bdev+0x2d0/0x3f0 [ 64.359685][ T4994] ? hfs_mount+0x40/0x40 [ 64.363960][ T4994] legacy_get_tree+0xef/0x190 [ 64.368648][ T4994] ? hfs_mark_mdb_dirty+0x1c0/0x1c0 [ 64.373863][ T4994] vfs_get_tree+0x8c/0x270 [ 64.378309][ T4994] do_new_mount+0x28f/0xae0 [ 64.382829][ T4994] ? path_mount+0x5f2/0xf80 [ 64.387361][ T4994] ? do_move_mount_old+0x170/0x170 [ 64.392485][ T4994] ? user_path_at_empty+0x12f/0x180 [ 64.397692][ T4994] __se_sys_mount+0x2d9/0x3c0 [ 64.402382][ T4994] ? __x64_sys_mount+0xc0/0xc0 [ 64.407159][ T4994] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.413152][ T4994] ? __x64_sys_mount+0x20/0xc0 [ 64.418011][ T4994] do_syscall_64+0x41/0xc0 [ 64.422466][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.428366][ T4994] RIP: 0033:0x7f624c1dbafa [ 64.432788][ T4994] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.452409][ T4994] RSP: 002b:00007ffdde471fc8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 64.460925][ T4994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f624c1dbafa [ 64.468995][ T4994] RDX: 0000000020000240 RSI: 0000000020000000 RDI: 00007ffdde471fe0 [ 64.476968][ T4994] RBP: 00007ffdde471fe0 R08: 00007ffdde472020 R09: 0000000000000248 [ 64.485026][ T4994] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 64.492995][ T4994] R13: 00005555558732c0 R14: 0000000000000000 R15: 00007ffdde472020 [ 64.501064][ T4994] [ 64.504085][ T4994] Modules linked in: [ 64.508830][ T4994] ---[ end trace 0000000000000000 ]--- [ 64.514307][ T4994] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 64.519802][ T4994] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 74 0d 80 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 64.539575][ T4994] RSP: 0018:ffffc90003b0f300 EFLAGS: 00010202 [ 64.545731][ T4994] RAX: 1ffff92000761e7f RBX: ffffc90003b0f3f8 RCX: ffff888028983b80 [ 64.553965][ T4994] RDX: 0000000000000000 RSI: ffffc90003b0f3e0 RDI: ffffc90003b0f3f0 [ 64.562002][ T4994] RBP: 0000000000000000 R08: ffffffff82647b7f R09: 0000000000000000 [ 64.570038][ T4994] R10: ffffc90003b0f3e0 R11: dffffc0000000001 R12: ffffc90003b0f3e0 [ 64.578046][ T4994] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 64.586058][ T4994] FS: 0000555555873300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 64.594983][ T4994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.601598][ T4994] CR2: 00007ffdde473000 CR3: 0000000077303000 CR4: 00000000003506f0 [ 64.609609][ T4994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.617622][ T4994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.625638][ T4994] Kernel panic - not syncing: Fatal exception [ 64.631933][ T4994] Kernel Offset: disabled [ 64.636261][ T4994] Rebooting in 86400 seconds..