Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 44.565152] can: request_module (can-proto-0) failed. [ 44.569826] can: request_module (can-proto-0) failed. [ 45.378418] IPVS: ftp: loaded support on port[0] = 21 [ 45.475644] ip (3573) used greatest stack depth: 23576 bytes left [ 46.057910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.122732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.424059] tipc: TX() has been purged, node left! [ 47.987413] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.216' (ECDSA) to the list of known hosts. 2020/04/16 14:12:09 parsed 1 programs 2020/04/16 14:12:09 executed programs: 0 [ 53.307545] IPVS: ftp: loaded support on port[0] = 21 [ 53.321099] IPVS: ftp: loaded support on port[0] = 21 [ 53.332767] IPVS: ftp: loaded support on port[0] = 21 [ 53.334094] IPVS: ftp: loaded support on port[0] = 21 [ 53.350759] IPVS: ftp: loaded support on port[0] = 21 [ 53.369074] IPVS: ftp: loaded support on port[0] = 21 [ 53.416924] hfs: unable to locate alternate MDB [ 53.421856] hfs: continuing without an alternate MDB [ 53.483662] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN [ 53.494011] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 53.501712] CPU: 1 PID: 3879 Comm: syz-executor2 Not tainted 5.7.0-rc1-syzkaller #0 [ 53.509496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.519006] RIP: 0010:hfs_find_init+0x73/0x180 [ 53.523579] Code: ea 03 80 3c 02 00 0f 85 ee 00 00 00 4d 8d 6c 24 40 48 c7 43 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ac 00 00 00 41 8b 44 24 40 be [ 53.542835] RSP: 0018:ffff8881c91f7328 EFLAGS: 00010202 [ 53.548193] RAX: dffffc0000000000 RBX: ffff8881c91f73a8 RCX: 1ffff11039272b05 [ 53.555454] RDX: 0000000000000008 RSI: ffff8881c91f73a8 RDI: ffff8881c91f73c0 [ 53.562704] RBP: ffff8881c91f7348 R08: 0000000000000000 R09: ffff8881c91f7408 [ 53.569952] R10: 0000000000000000 R11: ffffed103901371a R12: 0000000000000000 [ 53.577198] R13: 0000000000000040 R14: ffff8881c809b98a R15: ffff8881c91f73a8 [ 53.584447] FS: 00007f21eaf07700(0000) GS:ffff8881db100000(0000) knlGS:0000000000000000 [ 53.592753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.598610] CR2: 0000556797268160 CR3: 00000001c93bc000 CR4: 00000000001406e0 [ 53.605979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.613236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.620485] Call Trace: [ 53.623056] hfs_ext_read_extent+0x17e/0xcc0 [ 53.627447] ? __kasan_check_write+0x14/0x20 [ 53.631923] ? do_raw_spin_lock+0x132/0x2e0 [ 53.636233] ? hfs_ext_write_extent.part.4+0x160/0x160 [ 53.641488] ? alloc_buffer_head+0x81/0xd0 [ 53.645703] hfs_get_block+0x490/0x850 [ 53.649569] block_read_full_page+0x290/0x9b0 [ 53.654053] ? hfs_extend_file+0xc20/0xc20 [ 53.658265] ? block_truncate_page+0x8c0/0x8c0 [ 53.662823] ? add_to_page_cache_lru+0x16b/0x250 [ 53.667566] ? add_to_page_cache_locked+0x10/0x10 [ 53.672389] ? __page_cache_alloc+0x1fb/0x3c0 [ 53.676874] hfs_readpage+0x13/0x20 [ 53.680489] do_read_cache_page+0x65c/0x1380 [ 53.684876] ? find_held_lock+0x36/0x1d0 [ 53.688918] ? generic_file_read_iter+0x2220/0x2220 [ 53.693917] ? unlock_new_inode+0x5c/0x100 [ 53.698129] ? lock_downgrade+0x960/0x960 [ 53.702257] ? __kasan_check_write+0x14/0x20 [ 53.706642] ? do_raw_spin_lock+0x132/0x2e0 [ 53.710939] ? rwlock_bug.part.0+0x90/0x90 [ 53.715154] ? wake_bit_function+0x180/0x180 [ 53.719539] ? do_raw_spin_unlock+0x177/0x260 [ 53.724009] read_cache_page+0x45/0x70 [ 53.727875] hfs_btree_open+0x464/0x1070 [ 53.731925] hfs_mdb_get+0x1329/0x1d86 [ 53.735789] ? hfs_mdb_put+0x340/0x340 [ 53.740095] ? queue_work_node+0x320/0x320 [ 53.744318] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.749144] ? lockdep_init_map_waits+0x270/0x870 [ 53.753997] ? debug_mutex_init+0x36/0x70 [ 53.758122] hfs_fill_super+0x9bf/0x12a0 [ 53.762166] ? hfs_show_options+0x550/0x550 [ 53.766477] ? file_dentry_name+0x100/0x100 [ 53.770775] ? vsnprintf+0x8b0/0x1820 [ 53.774560] ? pointer+0x650/0x650 [ 53.778098] ? down_write+0xe1/0x150 [ 53.781790] ? snprintf+0x91/0xc0 [ 53.785222] ? vsprintf+0x20/0x20 [ 53.788656] ? register_shrinker_prepared+0xe1/0x150 [ 53.793733] ? sget+0x3a1/0x4a0 [ 53.796990] mount_bdev+0x27b/0x340 [ 53.800596] ? hfs_show_options+0x550/0x550 [ 53.804908] ? hfs_statfs+0x550/0x550 [ 53.808686] hfs_mount+0x10/0x20 [ 53.812033] legacy_get_tree+0x103/0x1f0 [ 53.816074] vfs_get_tree+0x8b/0x2d0 [ 53.819773] ? capable+0x14/0x20 [ 53.823115] do_mount+0x1287/0x1c30 [ 53.826723] ? lock_downgrade+0x960/0x960 [ 53.830850] ? copy_mount_string+0x20/0x20 [ 53.835059] ? ___might_sleep+0x13e/0x2b0 [ 53.839189] ? __kasan_check_write+0x14/0x20 [ 53.843587] ? _copy_from_user+0xc5/0x110 [ 53.847727] __x64_sys_mount+0x169/0x1c0 [ 53.851775] do_syscall_64+0xd0/0x630 [ 53.855558] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 53.860742] RIP: 0033:0x4579fa [ 53.863933] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 53.882920] RSP: 002b:00007f21eaf06bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.890609] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000004579fa [ 53.897945] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f21eaf06c00 [ 53.905197] RBP: 0000000000000003 R08: 00000000200001c0 R09: 0000000020000000 [ 53.912462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 53.919736] R13: 0000000000000666 R14: 00000000006fba30 R15: 0000000000000000 [ 53.926997] Modules linked in: [ 53.930349] ---[ end trace b7bd748c7703c45b ]--- [ 53.930939] hfs: unable to locate alternate MDB [ 53.935247] RIP: 0010:hfs_find_init+0x73/0x180 [ 53.935253] Code: ea 03 80 3c 02 00 0f 85 ee 00 00 00 4d 8d 6c 24 40 48 c7 43 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ac 00 00 00 41 8b 44 24 40 be [ 53.935257] RSP: 0018:ffff8881c91f7328 EFLAGS: 00010202 [ 53.939920] hfs: continuing without an alternate MDB [ 53.940322] hfs: unable to locate alternate MDB [ 53.944510] RAX: dffffc0000000000 RBX: ffff8881c91f73a8 RCX: 1ffff11039272b05 [ 53.944513] RDX: 0000000000000008 RSI: ffff8881c91f73a8 RDI: ffff8881c91f73c0 [ 53.944516] RBP: ffff8881c91f7348 R08: 0000000000000000 R09: ffff8881c91f7408 [ 53.944518] R10: 0000000000000000 R11: ffffed103901371a R12: 0000000000000000 [ 53.944520] R13: 0000000000000040 R14: ffff8881c809b98a R15: ffff8881c91f73a8 [ 53.944524] FS: 00007f21eaf07700(0000) GS:ffff8881db100000(0000) knlGS:0000000000000000 [ 53.944527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.944531] CR2: 0000556797268160 CR3: 00000001c93bc000 CR4: 00000000001406e0 [ 53.963433] hfs: continuing without an alternate MDB [ 53.968816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.974069] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#2] SMP KASAN [ 53.978580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.985837] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 53.985844] CPU: 0 PID: 3961 Comm: syz-executor1 Tainted: G D 5.7.0-rc1-syzkaller #0 [ 53.985847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.985855] RIP: 0010:hfs_find_init+0x73/0x180 [ 53.985860] Code: ea 03 80 3c 02 00 0f 85 ee 00 00 00 4d 8d 6c 24 40 48 c7 43 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ac 00 00 00 41 8b 44 24 40 be [ 53.993126] Kernel panic - not syncing: Fatal exception [ 54.000360] RSP: 0018:ffff8881b4d57328 EFLAGS: 00010202 [ 54.126300] RAX: dffffc0000000000 RBX: ffff8881b4d573a8 RCX: 1ffff11039023e05 [ 54.133565] RDX: 0000000000000008 RSI: ffff8881b4d573a8 RDI: ffff8881b4d573c0 [ 54.140813] RBP: ffff8881b4d57348 R08: 0000000000000000 R09: ffff8881b4d57408 [ 54.148061] R10: 0000000000000000 R11: ffffed10369c3b22 R12: 0000000000000000 [ 54.155308] R13: 0000000000000040 R14: ffff8881b4e1d9ca R15: ffff8881b4d573a8 [ 54.162573] FS: 00007f0b3b02f700(0000) GS:ffff8881db000000(0000) knlGS:0000000000000000 [ 54.170776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.176649] CR2: 000000000072c051 CR3: 00000001c81dd000 CR4: 00000000001406f0 [ 54.183903] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.191153] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.198403] Call Trace: [ 54.200974] hfs_ext_read_extent+0x17e/0xcc0 [ 54.205361] ? __kasan_check_write+0x14/0x20 [ 54.209766] ? do_raw_spin_lock+0x132/0x2e0 [ 54.214065] ? hfs_ext_write_extent.part.4+0x160/0x160 [ 54.219319] ? alloc_buffer_head+0x81/0xd0 [ 54.223536] hfs_get_block+0x490/0x850 [ 54.227402] block_read_full_page+0x290/0x9b0 [ 54.231875] ? hfs_extend_file+0xc20/0xc20 [ 54.236088] ? block_truncate_page+0x8c0/0x8c0 [ 54.240821] ? add_to_page_cache_lru+0x16b/0x250 [ 54.245553] ? add_to_page_cache_locked+0x10/0x10 [ 54.250372] ? __page_cache_alloc+0x1fb/0x3c0 [ 54.254844] hfs_readpage+0x13/0x20 [ 54.258448] do_read_cache_page+0x65c/0x1380 [ 54.262836] ? inode_sb_list_add+0x43/0x200 [ 54.267134] ? generic_file_read_iter+0x2220/0x2220 [ 54.272127] ? unlock_new_inode+0x5c/0x100 [ 54.276338] ? lock_downgrade+0x960/0x960 [ 54.280461] ? __kasan_check_write+0x14/0x20 [ 54.284861] ? do_raw_spin_lock+0x132/0x2e0 [ 54.289159] ? rwlock_bug.part.0+0x90/0x90 [ 54.293370] ? wake_bit_function+0x180/0x180 [ 54.297775] ? do_raw_spin_unlock+0x177/0x260 [ 54.302248] read_cache_page+0x45/0x70 [ 54.306132] hfs_btree_open+0x464/0x1070 [ 54.310184] hfs_mdb_get+0x1329/0x1d86 [ 54.314058] ? hfs_mdb_put+0x340/0x340 [ 54.317927] ? widen_string+0x1e0/0x1e0 [ 54.321882] ? free_object+0x70/0x70 [ 54.325585] ? lockdep_init_map_waits+0x12d/0x870 [ 54.330410] ? debug_mutex_init+0x36/0x70 [ 54.334553] hfs_fill_super+0x9bf/0x12a0 [ 54.338598] ? hfs_show_options+0x550/0x550 [ 54.342988] ? lock_acquire+0x200/0x9b0 [ 54.346944] ? file_dentry_name+0x100/0x100 [ 54.351245] ? vsnprintf+0x8b0/0x1820 [ 54.355029] ? pointer+0x650/0x650 [ 54.358552] ? down_write+0xe1/0x150 [ 54.362263] ? snprintf+0x91/0xc0 [ 54.365695] ? vsprintf+0x20/0x20 [ 54.369131] ? register_shrinker_prepared+0xe1/0x150 [ 54.374215] ? sget+0x3a1/0x4a0 [ 54.377489] mount_bdev+0x27b/0x340 [ 54.381098] ? hfs_show_options+0x550/0x550 [ 54.385398] ? hfs_statfs+0x550/0x550 [ 54.389179] hfs_mount+0x10/0x20 [ 54.392528] legacy_get_tree+0x103/0x1f0 [ 54.396572] vfs_get_tree+0x8b/0x2d0 [ 54.400265] ? capable+0x14/0x20 [ 54.403610] do_mount+0x1287/0x1c30 [ 54.407216] ? lock_downgrade+0x960/0x960 [ 54.411348] ? copy_mount_string+0x20/0x20 [ 54.415576] ? ___might_sleep+0x13e/0x2b0 [ 54.419705] ? __kasan_check_write+0x14/0x20 [ 54.424092] ? _copy_from_user+0xc5/0x110 [ 54.428222] __x64_sys_mount+0x169/0x1c0 [ 54.432264] do_syscall_64+0xd0/0x630 [ 54.436044] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.441212] RIP: 0033:0x4579fa [ 54.444387] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 54.463282] RSP: 002b:00007f0b3b02ebb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.470973] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000004579fa [ 54.478223] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0b3b02ec00 [ 54.485498] RBP: 0000000000000003 R08: 00000000200001c0 R09: 0000000020000000 [ 54.492751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 54.500000] R13: 0000000000000666 R14: 00000000006fba30 R15: 0000000000000000 [ 54.507255] Modules linked in: [ 54.511196] Kernel Offset: disabled [ 54.514850] Rebooting in 86400 seconds..