./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1938663425 <...> Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. execve("./syz-executor1938663425", ["./syz-executor1938663425"], 0x7ffe65a09020 /* 10 vars */) = 0 brk(NULL) = 0x55556463b000 brk(0x55556463bd00) = 0x55556463bd00 arch_prctl(ARCH_SET_FS, 0x55556463b380) = 0 set_tid_address(0x55556463b650) = 5223 set_robust_list(0x55556463b660, 24) = 0 rseq(0x55556463bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1938663425", 4096) = 28 getrandom("\xff\xb5\x4d\x19\x8f\x6c\x3d\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556463bd00 brk(0x55556465cd00) = 0x55556465cd00 brk(0x55556465d000) = 0x55556465d000 mprotect(0x7fc05792b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached , child_tidptr=0x55556463b650) = 5224 [pid 5224] set_robust_list(0x55556463b660, 24) = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] write(1, "executing program\n", 18executing program ) = 18 [pid 5224] memfd_create("syzkaller", 0) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc04f400000 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 [pid 5224] munmap(0x7fc04f400000, 138412032) = 0 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5224] close(3) = 0 [pid 5224] close(4) = 0 [pid 5224] mkdir("./bus", 0777) = 0 [ 78.427357][ T5224] loop0: detected capacity change from 0 to 64 [ 78.455316][ T5224] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI [ 78.467942][ T5224] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 78.476369][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz-executor193 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 78.487477][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 78.497528][ T5224] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 78.502839][ T5224] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 09 79 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 78.522441][ T5224] RSP: 0018:ffffc9000342f2c0 EFLAGS: 00010202 [ 78.528503][ T5224] RAX: 1ffff92000685e77 RBX: ffffc9000342f3b8 RCX: ffff888028d11e00 [ 78.536497][ T5224] RDX: 0000000000000000 RSI: ffffc9000342f3a0 RDI: ffffc9000342f3b0 [ 78.544469][ T5224] RBP: 0000000000000000 R08: ffffffff827faa5f R09: 0000000000000000 [ 78.552440][ T5224] R10: ffffc9000342f3a0 R11: fffff52000685e7b R12: ffffc9000342f3a0 [ 78.560417][ T5224] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 78.568386][ T5224] FS: 000055556463b380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 78.577315][ T5224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.583896][ T5224] CR2: 00007ffd61135000 CR3: 0000000077794000 CR4: 00000000003506f0 [ 78.591872][ T5224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.599856][ T5224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.607823][ T5224] Call Trace: [ 78.611100][ T5224] [ 78.614030][ T5224] ? __die_body+0x88/0xe0 [ 78.618382][ T5224] ? die_addr+0x108/0x140 [ 78.622721][ T5224] ? exc_general_protection+0x3dd/0x5d0 [ 78.628392][ T5224] ? asm_exc_general_protection+0x26/0x30 [ 78.634121][ T5224] ? hfs_get_block+0x3bf/0xb60 [ 78.638889][ T5224] ? hfs_find_init+0x72/0x1f0 [ 78.643567][ T5224] hfs_get_block+0x4f4/0xb60 [ 78.648171][ T5224] ? __pfx_hfs_get_block+0x10/0x10 [ 78.653287][ T5224] ? _raw_spin_unlock+0x28/0x50 [ 78.658138][ T5224] ? create_empty_buffers+0x53e/0x740 [ 78.663516][ T5224] block_read_full_folio+0x418/0xcd0 [ 78.668810][ T5224] ? __pfx_hfs_get_block+0x10/0x10 [ 78.673929][ T5224] ? __pfx_block_read_full_folio+0x10/0x10 [ 78.679738][ T5224] ? __pfx_lru_add_fn+0x10/0x10 [ 78.684617][ T5224] ? folio_add_lru+0x4b3/0x9e0 [ 78.689405][ T5224] ? folio_add_lru+0x27b/0x9e0 [ 78.694180][ T5224] filemap_read_folio+0x1a0/0x790 [ 78.699213][ T5224] ? __pfx_hfs_read_folio+0x10/0x10 [ 78.704417][ T5224] ? __pfx_filemap_read_folio+0x10/0x10 [ 78.709973][ T5224] ? __filemap_get_folio+0x984/0xc10 [ 78.715263][ T5224] ? __pfx_lock_release+0x10/0x10 [ 78.720296][ T5224] do_read_cache_folio+0x134/0x820 [ 78.725538][ T5224] ? __pfx_hfs_read_folio+0x10/0x10 [ 78.730745][ T5224] do_read_cache_page+0x30/0x200 [ 78.735692][ T5224] hfs_btree_open+0x50b/0xf20 [ 78.740389][ T5224] hfs_mdb_get+0x1443/0x21b0 [ 78.745009][ T5224] ? __pfx_hfs_mdb_get+0x10/0x10 [ 78.749957][ T5224] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 78.755774][ T5224] ? make_kgid+0x1f6/0x6f0 [ 78.760200][ T5224] ? __raw_spin_lock_init+0x45/0x100 [ 78.765487][ T5224] hfs_fill_super+0x107e/0x1790 [ 78.770345][ T5224] ? __pfx_hfs_fill_super+0x10/0x10 [ 78.775542][ T5224] ? __pfx_vsnprintf+0x10/0x10 [ 78.780323][ T5224] ? do_raw_spin_lock+0x14f/0x370 [ 78.785356][ T5224] ? sb_set_blocksize+0x98/0xf0 [ 78.790215][ T5224] ? setup_bdev_super+0x4e6/0x5d0 [ 78.795245][ T5224] mount_bdev+0x20a/0x2d0 [ 78.799576][ T5224] ? __pfx_hfs_fill_super+0x10/0x10 [ 78.804774][ T5224] ? __pfx_mount_bdev+0x10/0x10 [ 78.809625][ T5224] ? vfs_parse_fs_string+0x190/0x230 [ 78.814919][ T5224] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 78.820550][ T5224] ? cap_capable+0x1b4/0x250 [ 78.825148][ T5224] legacy_get_tree+0xee/0x190 [ 78.829826][ T5224] ? __pfx_hfs_mount+0x10/0x10 [ 78.834590][ T5224] vfs_get_tree+0x90/0x2a0 [ 78.839007][ T5224] do_new_mount+0x2be/0xb40 [ 78.843511][ T5224] ? __pfx_do_new_mount+0x10/0x10 [ 78.848541][ T5224] __se_sys_mount+0x2d6/0x3c0 [ 78.853228][ T5224] ? __pfx___se_sys_mount+0x10/0x10 [ 78.858427][ T5224] ? do_syscall_64+0x100/0x230 [ 78.863194][ T5224] ? __x64_sys_mount+0x20/0xc0 [ 78.867959][ T5224] do_syscall_64+0xf3/0x230 [ 78.872463][ T5224] ? clear_bhb_loop+0x35/0x90 [ 78.877150][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.883133][ T5224] RIP: 0033:0x7fc0578b906a [ 78.887561][ T5224] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.907947][ T5224] RSP: 002b:00007ffd61134158 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 78.916460][ T5224] RAX: ffffffffffffffda RBX: 00007ffd61134170 RCX: 00007fc0578b906a [ 78.924432][ T5224] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 00007ffd61134170 [ 78.932401][ T5224] RBP: 0000000000000010 R08: 00007ffd611341b0 R09: 000000000000029e [ 78.940368][ T5224] R10: 0000000000000010 R11: 0000000000000286 R12: 0000000000000004 [ 78.948336][ T5224] R13: 00007ffd611341b0 R14: 0000000000000003 R15: 0000000000008000 [ 78.956314][ T5224] [ 78.959325][ T5224] Modules linked in: [ 78.963446][ T5224] ---[ end trace 0000000000000000 ]--- [ 78.968929][ T5224] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 78.974418][ T5224] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 09 79 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 78.994324][ T5224] RSP: 0018:ffffc9000342f2c0 EFLAGS: 00010202 [ 79.000441][ T5224] RAX: 1ffff92000685e77 RBX: ffffc9000342f3b8 RCX: ffff888028d11e00 [ 79.008517][ T5224] RDX: 0000000000000000 RSI: ffffc9000342f3a0 RDI: ffffc9000342f3b0 [ 79.016601][ T5224] RBP: 0000000000000000 R08: ffffffff827faa5f R09: 0000000000000000 [ 79.024623][ T5224] R10: ffffc9000342f3a0 R11: fffff52000685e7b R12: ffffc9000342f3a0 [ 79.032629][ T5224] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 79.040600][ T5224] FS: 000055556463b380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 79.049684][ T5224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.056298][ T5224] CR2: 00007ffd61135000 CR3: 0000000077794000 CR4: 00000000003506f0 [ 79.064316][ T5224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.072313][ T5224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.080561][ T5224] Kernel panic - not syncing: Fatal exception [ 79.086971][ T5224] Kernel Offset: disabled [ 79.091290][ T5224] Rebooting in 86400 seconds..