./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3802416233 <...> Warning: Permanently added '10.128.1.156' (ECDSA) to the list of known hosts. execve("./syz-executor3802416233", ["./syz-executor3802416233"], 0x7ffde93b4d40 /* 10 vars */) = 0 brk(NULL) = 0x555555753000 brk(0x555555753c40) = 0x555555753c40 arch_prctl(ARCH_SET_FS, 0x555555753300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3802416233", 4096) = 28 brk(0x555555774c40) = 0x555555774c40 brk(0x555555775000) = 0x555555775000 mprotect(0x7f7c40692000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7c381d9000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f7c381d9000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 [ 47.039337][ T3629] loop0: detected capacity change from 0 to 64 [ 47.049454][ T3629] ======================================================= [ 47.049454][ T3629] WARNING: The mand mount option has been deprecated and [ 47.049454][ T3629] and is ignored by this kernel. Remove the mand [ 47.049454][ T3629] option from the mount to silence this warning. [ 47.049454][ T3629] ======================================================= [ 47.086887][ T3629] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 47.098588][ T3629] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 47.106971][ T3629] CPU: 0 PID: 3629 Comm: syz-executor380 Not tainted 6.1.0-syzkaller #0 [ 47.115271][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 47.125322][ T3629] RIP: 0010:hfs_find_init+0x74/0x240 [ 47.130601][ T3629] Code: c1 ea 03 80 3c 02 00 0f 85 bc 01 00 00 4c 8d 6b 40 48 c7 45 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 6b 01 00 00 8b 43 40 be c0 0c [ 47.150186][ T3629] RSP: 0018:ffffc90003b6f528 EFLAGS: 00010212 [ 47.156235][ T3629] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 47.164181][ T3629] RDX: 0000000000000008 RSI: ffffffff8245a0b5 RDI: ffffc90003b6f5a8 [ 47.172127][ T3629] RBP: ffffc90003b6f590 R08: 0000000000000004 R09: 0000000000000004 [ 47.180072][ T3629] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 47.188020][ T3629] R13: 0000000000000040 R14: ffff888072e2814a R15: ffffc90003b6f590 [ 47.195968][ T3629] FS: 0000555555753300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 47.204872][ T3629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.211431][ T3629] CR2: 00007ffefb93e000 CR3: 0000000073148000 CR4: 0000000000350ef0 [ 47.219380][ T3629] Call Trace: [ 47.222633][ T3629] [ 47.225541][ T3629] hfs_ext_read_extent+0x18d/0xa20 [ 47.230632][ T3629] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 47.236157][ T3629] ? find_held_lock+0x2d/0x110 [ 47.240900][ T3629] ? hfs_free_extents+0x2e0/0x2e0 [ 47.245901][ T3629] ? create_page_buffers+0x440/0x640 [ 47.251162][ T3629] ? lock_downgrade+0x6e0/0x6e0 [ 47.255993][ T3629] ? folio_flags.constprop.0+0x53/0x150 [ 47.261515][ T3629] hfs_get_block+0x48d/0x820 [ 47.266087][ T3629] block_read_full_folio+0x35b/0x9d0 [ 47.271352][ T3629] ? hfs_extend_file+0xae0/0xae0 [ 47.276264][ T3629] ? create_page_buffers+0x640/0x640 [ 47.281525][ T3629] ? folio_flags.constprop.0+0x53/0x150 [ 47.287053][ T3629] ? folio_add_lru+0x37b/0x680 [ 47.291793][ T3629] ? hfs_bmap+0x30/0x30 [ 47.295923][ T3629] filemap_read_folio+0xdb/0x2c0 [ 47.300837][ T3629] ? __folio_lock_killable+0x20/0x20 [ 47.306101][ T3629] ? hfs_btree_open+0x740/0xff0 [ 47.310926][ T3629] do_read_cache_folio+0x1df/0x510 [ 47.316020][ T3629] ? hfs_bmap+0x30/0x30 [ 47.320152][ T3629] read_cache_page+0x5d/0x170 [ 47.324810][ T3629] hfs_btree_open+0x78e/0xff0 [ 47.329463][ T3629] hfs_mdb_get+0x15b8/0x1f10 [ 47.334030][ T3629] ? hfs_mdb_put+0x380/0x380 [ 47.338595][ T3629] ? do_raw_spin_lock+0x124/0x2b0 [ 47.343593][ T3629] ? rwlock_bug.part.0+0x90/0x90 [ 47.348507][ T3629] ? lockdep_init_map_type+0x21e/0x800 [ 47.353948][ T3629] ? lockdep_init_map_type+0x21e/0x800 [ 47.359388][ T3629] ? __raw_spin_lock_init+0x3a/0x110 [ 47.364648][ T3629] hfs_fill_super+0xa5f/0x1340 [ 47.369401][ T3629] ? hfs_remount+0x1f0/0x1f0 [ 47.373973][ T3629] ? vsnprintf+0x4cd/0x16b0 [ 47.378454][ T3629] ? pointer+0xc50/0xc50 [ 47.382666][ T3629] ? sget+0x476/0x580 [ 47.386629][ T3629] ? lock_downgrade+0x6e0/0x6e0 [ 47.391459][ T3629] ? snprintf+0xbf/0x100 [ 47.395674][ T3629] ? vsprintf+0x30/0x30 [ 47.399799][ T3629] ? wait_for_completion_io_timeout+0x20/0x20 [ 47.405869][ T3629] ? up_write+0x1b0/0x520 [ 47.410179][ T3629] ? set_blocksize+0x2e9/0x380 [ 47.414928][ T3629] mount_bdev+0x351/0x410 [ 47.419239][ T3629] ? hfs_remount+0x1f0/0x1f0 [ 47.423815][ T3629] ? hfs_statfs+0x4b0/0x4b0 [ 47.428392][ T3629] legacy_get_tree+0x109/0x220 [ 47.433131][ T3629] vfs_get_tree+0x8d/0x2f0 [ 47.437529][ T3629] path_mount+0x132a/0x1e20 [ 47.442012][ T3629] ? kmem_cache_free+0xee/0x5c0 [ 47.446926][ T3629] ? finish_automount+0x960/0x960 [ 47.451929][ T3629] ? putname+0x102/0x140 [ 47.456152][ T3629] __x64_sys_mount+0x283/0x300 [ 47.460894][ T3629] ? copy_mnt_ns+0xae0/0xae0 [ 47.465462][ T3629] ? lockdep_hardirqs_on+0x7d/0x100 [ 47.470635][ T3629] ? _raw_spin_unlock_irq+0x2e/0x50 [ 47.475811][ T3629] ? ptrace_notify+0xfe/0x140 [ 47.480467][ T3629] do_syscall_64+0x39/0xb0 [ 47.484864][ T3629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 47.490736][ T3629] RIP: 0033:0x7f7c40626b0a [ 47.495125][ T3629] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 47.514794][ T3629] RSP: 002b:00007ffefb93d7f8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 47.523178][ T3629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7c40626b0a [ 47.531126][ T3629] RDX: 0000000020000080 RSI: 0000000020000280 RDI: 00007ffefb93d800 [ 47.539073][ T3629] RBP: 00007ffefb93d800 R08: 00007ffefb93d840 R09: 0000000000000255 [ 47.547023][ T3629] R10: 00000000010184c9 R11: 0000000000000286 R12: 0000000000000004 [ 47.554971][ T3629] R13: 00005555557532c0 R14: 00007ffefb93d840 R15: 0000000000000000 [ 47.562921][ T3629] [ 47.565917][ T3629] Modules linked in: [ 47.570043][ T3629] ---[ end trace 0000000000000000 ]--- [ 47.575673][ T3629] RIP: 0010:hfs_find_init+0x74/0x240 [ 47.580978][ T3629] Code: c1 ea 03 80 3c 02 00 0f 85 bc 01 00 00 4c 8d 6b 40 48 c7 45 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 6b 01 00 00 8b 43 40 be c0 0c [ 47.600639][ T3629] RSP: 0018:ffffc90003b6f528 EFLAGS: 00010212 [ 47.606734][ T3629] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 47.614725][ T3629] RDX: 0000000000000008 RSI: ffffffff8245a0b5 RDI: ffffc90003b6f5a8 [ 47.622686][ T3629] RBP: ffffc90003b6f590 R08: 0000000000000004 R09: 0000000000000004 [ 47.630669][ T3629] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 47.638684][ T3629] R13: 0000000000000040 R14: ffff888072e2814a R15: ffffc90003b6f590 [ 47.646685][ T3629] FS: 0000555555753300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 47.655646][ T3629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.662211][ T3629] CR2: 00007ffefb93e000 CR3: 0000000073148000 CR4: 0000000000350ef0 [ 47.670187][ T3629] Kernel panic - not syncing: Fatal exception [ 47.677263][ T3629] Kernel Offset: disabled [ 47.681568][ T3629] Rebooting in 86400 seconds..