./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4078102954 <...> Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. execve("./syz-executor4078102954", ["./syz-executor4078102954"], 0x7ffe592744e0 /* 10 vars */) = 0 brk(NULL) = 0x555556da8000 brk(0x555556da8c40) = 0x555556da8c40 arch_prctl(ARCH_SET_FS, 0x555556da8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4078102954", 4096) = 28 brk(0x555556dc9c40) = 0x555556dc9c40 brk(0x555556dca000) = 0x555556dca000 mprotect(0x7f26f4ffc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f26ecb43000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7f26ecb43000, 32768) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0 [ 64.568068][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-executor407' [ 64.582549][ T4992] loop0: detected capacity change from 0 to 64 [ 64.594377][ T4992] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 64.606093][ T4992] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 64.614484][ T4992] CPU: 0 PID: 4992 Comm: syz-executor407 Not tainted 6.4.0-rc6-syzkaller-00242-g1639fae5132b #0 [ 64.624872][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 64.634912][ T4992] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 64.640192][ T4992] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 24 01 80 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 64.659774][ T4992] RSP: 0018:ffffc90003a9f300 EFLAGS: 00010202 [ 64.665817][ T4992] RAX: 1ffff92000753e7f RBX: ffffc90003a9f3f8 RCX: ffff8880276b1dc0 [ 64.673766][ T4992] RDX: 0000000000000000 RSI: ffffc90003a9f3e0 RDI: ffffc90003a9f3f0 [ 64.681716][ T4992] RBP: 0000000000000000 R08: ffffffff82648b5f R09: 0000000000000000 [ 64.689670][ T4992] R10: ffffc90003a9f3e0 R11: dffffc0000000001 R12: ffffc90003a9f3e0 [ 64.697617][ T4992] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 64.705568][ T4992] FS: 0000555556da8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 64.714479][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.721040][ T4992] CR2: 00000000005fdeb8 CR3: 000000002275a000 CR4: 00000000003506f0 [ 64.728991][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.736943][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.744890][ T4992] Call Trace: [ 64.748145][ T4992] [ 64.751056][ T4992] ? __die_body+0x5e/0xa0 [ 64.755364][ T4992] ? die_addr+0x99/0xc0 [ 64.759494][ T4992] ? exc_general_protection+0x3c2/0x5b0 [ 64.765032][ T4992] ? asm_exc_general_protection+0x26/0x30 [ 64.770733][ T4992] ? hfs_get_block+0x3bf/0xb60 [ 64.775480][ T4992] ? hfs_find_init+0x72/0x1f0 [ 64.780136][ T4992] hfs_get_block+0x4f4/0xb60 [ 64.784708][ T4992] ? hfs_free_extents+0x420/0x420 [ 64.789712][ T4992] ? _raw_spin_unlock+0x28/0x40 [ 64.794541][ T4992] ? folio_create_buffers+0x132/0x250 [ 64.799892][ T4992] block_read_full_folio+0x47b/0x1000 [ 64.805248][ T4992] ? hfs_free_extents+0x420/0x420 [ 64.810248][ T4992] ? block_is_partially_uptodate+0x590/0x590 [ 64.816209][ T4992] ? folio_batch_add_and_move+0x16a/0x2c0 [ 64.821907][ T4992] ? folio_add_lru+0x6f0/0x6f0 [ 64.826651][ T4992] ? folio_add_lru+0x353/0x6f0 [ 64.831393][ T4992] filemap_read_folio+0x19d/0x7a0 [ 64.836396][ T4992] ? filemap_add_folio+0x580/0x580 [ 64.841485][ T4992] ? hfs_writepage+0x30/0x30 [ 64.846054][ T4992] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 64.851751][ T4992] ? __filemap_get_folio+0x777/0xa00 [ 64.857013][ T4992] do_read_cache_folio+0x134/0x820 [ 64.862103][ T4992] ? hfs_writepage+0x30/0x30 [ 64.866671][ T4992] do_read_cache_page+0x32/0x220 [ 64.871590][ T4992] hfs_btree_open+0x50b/0xf20 [ 64.876245][ T4992] hfs_mdb_get+0x1443/0x21b0 [ 64.880818][ T4992] ? hfs_xattr_set+0x5b0/0x5b0 [ 64.885563][ T4992] ? lockdep_softirqs_off+0x420/0x420 [ 64.890917][ T4992] ? __debug_object_init+0xeb/0x640 [ 64.896095][ T4992] ? __raw_spin_lock_init+0x45/0x100 [ 64.901362][ T4992] hfs_fill_super+0x107d/0x1790 [ 64.906196][ T4992] ? hfs_mount+0x40/0x40 [ 64.911637][ T4992] ? ptr_to_hashval+0x80/0x80 [ 64.916293][ T4992] ? __mutex_unlock_slowpath+0x21c/0x750 [ 64.921902][ T4992] ? snprintf+0xda/0x120 [ 64.926124][ T4992] ? set_blocksize+0x1e2/0x390 [ 64.930867][ T4992] ? sb_set_blocksize+0x99/0x100 [ 64.935782][ T4992] mount_bdev+0x2d0/0x3f0 [ 64.940086][ T4992] ? hfs_mount+0x40/0x40 [ 64.944308][ T4992] legacy_get_tree+0xef/0x190 [ 64.948963][ T4992] ? hfs_mark_mdb_dirty+0x1c0/0x1c0 [ 64.954142][ T4992] vfs_get_tree+0x8c/0x270 [ 64.958535][ T4992] do_new_mount+0x28f/0xae0 [ 64.963019][ T4992] ? path_mount+0x5f2/0xf80 [ 64.967501][ T4992] ? do_move_mount_old+0x170/0x170 [ 64.972590][ T4992] ? user_path_at_empty+0x12f/0x180 [ 64.977763][ T4992] __se_sys_mount+0x2d9/0x3c0 [ 64.982421][ T4992] ? __x64_sys_mount+0xc0/0xc0 [ 64.987162][ T4992] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.993124][ T4992] ? __x64_sys_mount+0x20/0xc0 [ 64.997864][ T4992] do_syscall_64+0x41/0xc0 [ 65.002260][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.008132][ T4992] RIP: 0033:0x7f26f4f90b5a [ 65.012525][ T4992] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.032107][ T4992] RSP: 002b:00007ffde9466e58 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 65.040494][ T4992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f26f4f90b5a [ 65.048443][ T4992] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 00007ffde9466e70 [ 65.056392][ T4992] RBP: 00007ffde9466e70 R08: 00007ffde9466eb0 R09: 00000000000002d8 [ 65.064340][ T4992] R10: 000000000300041c R11: 0000000000000286 R12: 0000000000000004 [ 65.072288][ T4992] R13: 0000555556da82c0 R14: 000000000300041c R15: 00007ffde9466eb0 [ 65.080240][ T4992] [ 65.083235][ T4992] Modules linked in: [ 65.087592][ T4992] ---[ end trace 0000000000000000 ]--- [ 65.093090][ T4992] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 65.098390][ T4992] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 24 01 80 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 65.118060][ T4992] RSP: 0018:ffffc90003a9f300 EFLAGS: 00010202 [ 65.124160][ T4992] RAX: 1ffff92000753e7f RBX: ffffc90003a9f3f8 RCX: ffff8880276b1dc0 [ 65.132191][ T4992] RDX: 0000000000000000 RSI: ffffc90003a9f3e0 RDI: ffffc90003a9f3f0 [ 65.140155][ T4992] RBP: 0000000000000000 R08: ffffffff82648b5f R09: 0000000000000000 [ 65.148139][ T4992] R10: ffffc90003a9f3e0 R11: dffffc0000000001 R12: ffffc90003a9f3e0 [ 65.156138][ T4992] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 65.164123][ T4992] FS: 0000555556da8300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 65.173061][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.179637][ T4992] CR2: 00000000005fdeb8 CR3: 000000002275a000 CR4: 00000000003506f0 [ 65.187625][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.195685][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.203674][ T4992] Kernel panic - not syncing: Fatal exception [ 65.209885][ T4992] Kernel Offset: disabled [ 65.214195][ T4992] Rebooting in 86400 seconds..