./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2443314196 <...> no interfaces have a carrier [ 26.850907][ T3208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.863001][ T3208] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 27.277662][ T3297] sshd (3297) used greatest stack depth: 22376 bytes left OK syzkaller Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. execve("./syz-executor2443314196", ["./syz-executor2443314196"], 0x7ffd28f04dc0 /* 10 vars */) = 0 brk(NULL) = 0x555556283000 brk(0x555556283c40) = 0x555556283c40 arch_prctl(ARCH_SET_FS, 0x555556283300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2443314196", 4096) = 28 brk(0x5555562a4c40) = 0x5555562a4c40 brk(0x5555562a5000) = 0x5555562a5000 mprotect(0x7fd3fbd0c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd3f3853000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7fd3f3853000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 51.439832][ T3628] loop0: detected capacity change from 0 to 64 [ 51.450676][ T3628] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 51.462377][ T3628] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 51.470777][ T3628] CPU: 1 PID: 3628 Comm: syz-executor244 Not tainted 6.1.0-rc8-syzkaller-00164-g4cee37b3a4e6 #0 [ 51.481163][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.491194][ T3628] RIP: 0010:hfs_find_init+0x74/0x240 [ 51.496568][ T3628] Code: c1 ea 03 80 3c 02 00 0f 85 bc 01 00 00 4c 8d 6b 40 48 c7 45 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 6b 01 00 00 8b 43 40 be c0 0c [ 51.516153][ T3628] RSP: 0018:ffffc90003d0f528 EFLAGS: 00010212 [ 51.522196][ T3628] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.530151][ T3628] RDX: 0000000000000008 RSI: ffffffff8245a0b5 RDI: ffffc90003d0f5a8 [ 51.538105][ T3628] RBP: ffffc90003d0f590 R08: 0000000000000004 R09: 0000000000000004 [ 51.546061][ T3628] R10: 0000000000000000 R11: 1ffffffff21154cb R12: 0000000000000004 [ 51.554013][ T3628] R13: 0000000000000040 R14: ffff8880769c814a R15: ffffc90003d0f590 [ 51.561986][ T3628] FS: 0000555556283300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.570909][ T3628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.577478][ T3628] CR2: 00000000005d84c8 CR3: 000000001d6df000 CR4: 0000000000350ee0 [ 51.585435][ T3628] Call Trace: [ 51.588695][ T3628] [ 51.591610][ T3628] hfs_ext_read_extent+0x18d/0xa20 [ 51.596712][ T3628] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 51.602259][ T3628] ? find_held_lock+0x2d/0x110 [ 51.607018][ T3628] ? hfs_free_extents+0x2e0/0x2e0 [ 51.612031][ T3628] ? create_page_buffers+0x440/0x640 [ 51.617304][ T3628] ? lock_downgrade+0x6e0/0x6e0 [ 51.622151][ T3628] ? folio_flags.constprop.0+0x53/0x150 [ 51.627705][ T3628] hfs_get_block+0x48d/0x820 [ 51.632294][ T3628] block_read_full_folio+0x35b/0x9d0 [ 51.637568][ T3628] ? hfs_extend_file+0xae0/0xae0 [ 51.642771][ T3628] ? create_page_buffers+0x640/0x640 [ 51.648060][ T3628] ? folio_flags.constprop.0+0x53/0x150 [ 51.653615][ T3628] ? folio_add_lru+0x37b/0x680 [ 51.658380][ T3628] ? hfs_bmap+0x30/0x30 [ 51.662521][ T3628] filemap_read_folio+0xdb/0x2c0 [ 51.667449][ T3628] ? __folio_lock_killable+0x20/0x20 [ 51.672725][ T3628] ? hfs_btree_open+0x740/0xff0 [ 51.677564][ T3628] do_read_cache_folio+0x1df/0x510 [ 51.682673][ T3628] ? hfs_bmap+0x30/0x30 [ 51.686823][ T3628] read_cache_page+0x5d/0x170 [ 51.691494][ T3628] hfs_btree_open+0x78e/0xff0 [ 51.696162][ T3628] hfs_mdb_get+0x15b8/0x1f10 [ 51.700744][ T3628] ? hfs_mdb_put+0x380/0x380 [ 51.705322][ T3628] ? do_raw_spin_lock+0x124/0x2b0 [ 51.710340][ T3628] ? rwlock_bug.part.0+0x90/0x90 [ 51.715260][ T3628] ? lockdep_init_map_type+0x21e/0x800 [ 51.720712][ T3628] ? lockdep_init_map_type+0x21e/0x800 [ 51.726337][ T3628] ? __raw_spin_lock_init+0x3a/0x110 [ 51.731609][ T3628] hfs_fill_super+0xa5f/0x1340 [ 51.736370][ T3628] ? hfs_remount+0x1f0/0x1f0 [ 51.740949][ T3628] ? vsnprintf+0x4cd/0x16b0 [ 51.745439][ T3628] ? pointer+0xc50/0xc50 [ 51.749750][ T3628] ? sget+0x476/0x580 [ 51.753822][ T3628] ? lock_downgrade+0x6e0/0x6e0 [ 51.758753][ T3628] ? snprintf+0xbf/0x100 [ 51.762976][ T3628] ? vsprintf+0x30/0x30 [ 51.767115][ T3628] ? wait_for_completion_io_timeout+0x20/0x20 [ 51.773171][ T3628] ? up_write+0x1b0/0x520 [ 51.777491][ T3628] ? set_blocksize+0x2e9/0x380 [ 51.782251][ T3628] mount_bdev+0x351/0x410 [ 51.786573][ T3628] ? hfs_remount+0x1f0/0x1f0 [ 51.791152][ T3628] ? hfs_statfs+0x4b0/0x4b0 [ 51.795639][ T3628] legacy_get_tree+0x109/0x220 [ 51.800384][ T3628] vfs_get_tree+0x8d/0x2f0 [ 51.804789][ T3628] path_mount+0x132a/0x1e20 [ 51.809282][ T3628] ? kmem_cache_free+0xee/0x5c0 [ 51.814118][ T3628] ? finish_automount+0x960/0x960 [ 51.819136][ T3628] ? putname+0x102/0x140 [ 51.823544][ T3628] __x64_sys_mount+0x283/0x300 [ 51.828297][ T3628] ? copy_mnt_ns+0xae0/0xae0 [ 51.832875][ T3628] ? lockdep_hardirqs_on+0x7d/0x100 [ 51.838070][ T3628] ? _raw_spin_unlock_irq+0x2e/0x50 [ 51.843252][ T3628] ? ptrace_notify+0xfe/0x140 [ 51.847925][ T3628] do_syscall_64+0x39/0xb0 [ 51.852330][ T3628] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.858208][ T3628] RIP: 0033:0x7fd3fbca0b6a [ 51.862610][ T3628] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.882285][ T3628] RSP: 002b:00007ffc837da638 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 51.890680][ T3628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd3fbca0b6a [ 51.898633][ T3628] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 00007ffc837da640 [ 51.906585][ T3628] RBP: 00007ffc837da640 R08: 00007ffc837da680 R09: 0000000000000258 [ 51.914541][ T3628] R10: 0000000000000003 R11: 0000000000000286 R12: 0000000000000004 [ 51.922507][ T3628] R13: 00005555562832c0 R14: 00007ffc837da680 R15: 0000000000000000 [ 51.930467][ T3628] [ 51.933465][ T3628] Modules linked in: [ 51.938234][ T3628] ---[ end trace 0000000000000000 ]--- [ 51.943694][ T3628] RIP: 0010:hfs_find_init+0x74/0x240 [ 51.949002][ T3628] Code: c1 ea 03 80 3c 02 00 0f 85 bc 01 00 00 4c 8d 6b 40 48 c7 45 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 6b 01 00 00 8b 43 40 be c0 0c [ 51.968645][ T3628] RSP: 0018:ffffc90003d0f528 EFLAGS: 00010212 [ 51.974723][ T3628] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.982691][ T3628] RDX: 0000000000000008 RSI: ffffffff8245a0b5 RDI: ffffc90003d0f5a8 [ 51.990666][ T3628] RBP: ffffc90003d0f590 R08: 0000000000000004 R09: 0000000000000004 [ 51.998642][ T3628] R10: 0000000000000000 R11: 1ffffffff21154cb R12: 0000000000000004 [ 52.006623][ T3628] R13: 0000000000000040 R14: ffff8880769c814a R15: ffffc90003d0f590 [ 52.014608][ T3628] FS: 0000555556283300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.023514][ T3628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.030108][ T3628] CR2: 00007fd3fbc9f610 CR3: 000000001d6df000 CR4: 0000000000350ef0 [ 52.038099][ T3628] Kernel panic - not syncing: Fatal exception [ 52.044857][ T3628] Kernel Offset: disabled [ 52.049166][ T3628] Rebooting in 86400 seconds..