INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.747835] hfs: unable to locate alternate MDB [ 24.752657] hfs: continuing without an alternate MDB [ 24.758666] kasan: CONFIG_KASAN_INLINE enabled [ 24.763343] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 24.770735] general protection fault: 0000 [#1] SMP KASAN [ 24.776253] Dumping ftrace buffer: [ 24.779760] (ftrace buffer empty) [ 24.783441] Modules linked in: [ 24.786603] CPU: 0 PID: 4467 Comm: syzkaller143800 Not tainted 4.16.0-rc7+ #9 [ 24.793842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.803170] RIP: 0010:hfs_find_init+0x76/0x180 [ 24.807719] RSP: 0018:ffff8801acbe6bd0 EFLAGS: 00010202 [ 24.813054] RAX: dffffc0000000000 RBX: ffff8801acbe6c58 RCX: ffffffff820dd056 [ 24.820295] RDX: 0000000000000008 RSI: ffff8801acbe6c58 RDI: ffff8801acbe6c70 [ 24.827532] RBP: ffff8801acbe6bf0 R08: ffffffff820f0430 R09: 0000000000000000 [ 24.834770] R10: ffff8801acbe6ce0 R11: ffffed003597cc6f R12: 0000000000000000 [ 24.842009] R13: 0000000000000040 R14: ffff8801ad972080 R15: ffff8801acbe6cb8 [ 24.849255] FS: 0000000001e2d880(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 24.857450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.863299] CR2: 00007fe9b457a9b8 CR3: 00000001ac89e004 CR4: 00000000001606f0 [ 24.870542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.877786] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.885031] Call Trace: [ 24.887595] hfs_ext_read_extent+0x197/0xb50 [ 24.891974] ? __hfs_ext_write_extent+0x4b0/0x4b0 [ 24.896789] ? create_page_buffers+0x168/0x350 [ 24.901340] hfs_get_block+0x4cc/0x7a0 [ 24.905199] block_read_full_page+0x293/0x990 [ 24.909669] ? hfs_extend_file+0xd30/0xd30 [ 24.913879] ? __bread_gfp+0x290/0x290 [ 24.917735] ? alloc_pages_current+0xbe/0x1e0 [ 24.922200] ? __page_cache_alloc+0x12e/0x530 [ 24.926666] ? filemap_page_mkwrite+0x3c0/0x3c0 [ 24.931305] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.936462] hfs_readpage+0x1c/0x20 [ 24.940060] do_read_cache_page+0x637/0x11b0 [ 24.944436] ? hfs_bmap+0x30/0x30 [ 24.947859] ? pagecache_get_page+0xba0/0xba0 [ 24.952323] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.957484] ? mark_held_locks+0xaf/0x100 [ 24.961600] ? __raw_spin_lock_init+0x1c/0x100 [ 24.966152] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.971137] ? __lockdep_init_map+0xe4/0x650 [ 24.975517] ? trace_hardirqs_off+0x10/0x10 [ 24.979810] ? lockdep_init_map+0x9/0x10 [ 24.983839] ? __init_rwsem+0x12a/0x280 [ 24.987781] ? do_raw_write_unlock+0x290/0x290 [ 24.992333] ? print_irqtrace_events+0x270/0x270 [ 24.997057] ? trace_hardirqs_off+0x10/0x10 [ 25.001349] ? find_held_lock+0x35/0x1d0 [ 25.005380] ? trace_hardirqs_off+0x10/0x10 [ 25.009671] ? mark_held_locks+0xaf/0x100 [ 25.013789] ? find_held_lock+0x35/0x1d0 [ 25.017818] ? unlock_new_inode+0xca/0x120 [ 25.022026] ? lock_downgrade+0x980/0x980 [ 25.026142] ? wake_atomic_t_function+0x330/0x330 [ 25.030954] ? do_raw_spin_trylock+0x190/0x190 [ 25.035510] ? hfs_bmap+0x30/0x30 [ 25.038936] read_cache_page+0x61/0x80 [ 25.042792] hfs_btree_open+0x536/0x1630 [ 25.046821] ? do_raw_spin_trylock+0x190/0x190 [ 25.051374] ? hfs_brec_remove+0x490/0x490 [ 25.055580] ? __lock_is_held+0xb6/0x140 [ 25.059611] ? hfs_mdb_get+0x13d7/0x22c0 [ 25.063647] ? __brelse+0xda/0x130 [ 25.067156] ? block_commit_write+0x30/0x30 [ 25.071448] hfs_mdb_get+0x16ab/0x22c0 [ 25.075307] ? hfs_mdb_put+0x380/0x380 [ 25.079166] ? SyS_membarrier+0x700/0x700 [ 25.083281] ? init_timer_key+0x163/0x3f0 [ 25.087397] ? init_timer_on_stack_key+0xe0/0xe0 [ 25.092125] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.097114] ? __lockdep_init_map+0xe4/0x650 [ 25.101493] hfs_fill_super+0x1023/0x1930 [ 25.105643] ? hfs_show_options+0x6b0/0x6b0 [ 25.109937] ? netdev_bits+0xa0/0xa0 [ 25.113622] ? ns_test_super+0x50/0x50 [ 25.117486] ? format_decode+0x10a/0x830 [ 25.121516] ? vsnprintf+0x1ed/0x1900 [ 25.125285] ? pointer+0x9c0/0x9c0 [ 25.128792] ? wait_for_completion+0x770/0x770 [ 25.133345] ? cap_capable+0x1b5/0x230 [ 25.137203] ? snprintf+0xc0/0xf0 [ 25.140623] ? vsprintf+0x40/0x40 [ 25.144043] ? ns_capable_common+0xcf/0x160 [ 25.148334] ? set_blocksize+0x1f1/0x260 [ 25.152362] mount_bdev+0x2b7/0x370 [ 25.155966] ? mount_bdev+0x2b7/0x370 [ 25.159735] ? hfs_show_options+0x6b0/0x6b0 [ 25.164031] hfs_mount+0x34/0x40 [ 25.167366] mount_fs+0x66/0x2d0 [ 25.170712] vfs_kern_mount.part.26+0xc6/0x4a0 [ 25.175263] ? may_umount+0xa0/0xa0 [ 25.178867] ? _raw_read_unlock+0x22/0x30 [ 25.182985] ? __get_fs_type+0x8a/0xc0 [ 25.186851] do_mount+0xea4/0x2bb0 [ 25.190364] ? copy_mount_string+0x40/0x40 [ 25.194570] ? rcu_pm_notify+0xc0/0xc0 [ 25.198425] ? copy_mount_options+0x5f/0x2e0 [ 25.202802] ? rcu_read_lock_sched_held+0x108/0x120 [ 25.207787] ? kmem_cache_alloc_trace+0x459/0x740 [ 25.212598] ? kasan_check_write+0x14/0x20 [ 25.216803] ? _copy_from_user+0x99/0x110 [ 25.220923] ? copy_mount_options+0x1f7/0x2e0 [ 25.225389] SyS_mount+0xab/0x120 [ 25.228812] ? copy_mnt_ns+0xb30/0xb30 [ 25.232671] do_syscall_64+0x281/0x940 [ 25.236529] ? vmalloc_sync_all+0x30/0x30 [ 25.240650] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 25.246157] ? syscall_return_slowpath+0x550/0x550 [ 25.251056] ? syscall_return_slowpath+0x2ac/0x550 [ 25.255958] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 25.261294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.266110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.271267] RIP: 0033:0x442daa [ 25.274430] RSP: 002b:00007ffd0232faf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 25.282104] RAX: ffffffffffffffda RBX: 0000000020000258 RCX: 0000000000442daa [ 25.289342] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd0232fb00 [ 25.296581] RBP: 0000000000000003 R08: 00000000200001c0 R09: 000000000000000a [ 25.303819] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 [ 25.311057] R13: 0000000000401ca0 R14: 0000000000000000 R15: 0000000000000000 [ 25.318305] Code: c1 ea 03 80 3c 02 00 0f 85 f2 00 00 00 4d 8d 6c 24 40 48 b8 00 00 00 00 00 fc ff df 48 c7 43 18 00 00 00 00 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b0 00 00 00 41 8b 44 24 40 [ 25.337390] RIP: hfs_find_init+0x76/0x180 RSP: ffff8801acbe6bd0 [ 25.343489] ---[ end trace 5617fd7a7b5bfbcd ]--- [ 25.348260] Kernel panic - not syncing: Fatal exception [ 25.354086] Dumping ftrace buffer: [ 25.357601] (ftrace buffer empty) [ 25.361278] Kernel Offset: disabled [ 25.364877] Rebooting in 86400 seconds..