[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.930546] can: request_module (can-proto-0) failed. [ 40.939620] can: request_module (can-proto-0) failed. [ 41.723725] IPVS: ftp: loaded support on port[0] = 21 [ 42.328922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.391404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.690845] tipc: TX() has been purged, node left! [ 44.233112] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2020/01/12 22:21:33 parsed 1 programs 2020/01/12 22:21:33 executed programs: 0 [ 49.365458] IPVS: ftp: loaded support on port[0] = 21 [ 49.371719] IPVS: ftp: loaded support on port[0] = 21 [ 49.393697] IPVS: ftp: loaded support on port[0] = 21 [ 49.403655] IPVS: ftp: loaded support on port[0] = 21 [ 49.413040] IPVS: ftp: loaded support on port[0] = 21 [ 49.433235] IPVS: ftp: loaded support on port[0] = 21 [ 49.447307] hfs: unable to locate alternate MDB [ 49.452129] hfs: continuing without an alternate MDB [ 49.473284] kasan: CONFIG_KASAN_INLINE enabled [ 49.478071] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 49.485580] general protection fault: 0000 [#1] SMP KASAN [ 49.491120] CPU: 0 PID: 4445 Comm: syz-executor3 Not tainted 5.5.0-rc5-syzkaller #0 [ 49.498911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.508270] RIP: 0010:hfs_find_init+0x73/0x180 [ 49.512849] Code: ea 03 80 3c 02 00 0f 85 ee 00 00 00 4d 8d 6c 24 40 48 c7 43 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ac 00 00 00 41 8b 44 24 40 be [ 49.531752] RSP: 0018:ffff8881c6317330 EFLAGS: 00010202 [ 49.537115] RAX: dffffc0000000000 RBX: ffff8881c63173b0 RCX: 1ffff11039294505 [ 49.544379] RDX: 0000000000000008 RSI: ffff8881c63173b0 RDI: ffff8881c63173c8 [ 49.551631] RBP: ffff8881c6317350 R08: 0000000000000000 R09: ffff8881c6317410 [ 49.558994] R10: 0000000000000000 R11: ffff8881c52e16cf R12: 0000000000000000 [ 49.566245] R13: 0000000000000040 R14: ffff8881c52e1772 R15: ffff8881c63173b0 [ 49.573547] FS: 00007f9f1b8e4700(0000) GS:ffff8881db000000(0000) knlGS:0000000000000000 [ 49.581798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.587715] CR2: 00007fa425c91518 CR3: 00000001c7550000 CR4: 00000000001406f0 [ 49.594967] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.602230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.609478] Call Trace: [ 49.612058] hfs_ext_read_extent+0x17e/0xcc0 [ 49.616554] ? __kasan_check_write+0x14/0x20 [ 49.620944] ? do_raw_spin_lock+0x132/0x2e0 [ 49.625252] ? hfs_ext_write_extent.part.4+0x160/0x160 [ 49.630523] hfs_get_block+0x490/0x850 [ 49.634404] block_read_full_page+0x288/0x950 [ 49.638892] ? hfs_extend_file+0xc20/0xc20 [ 49.643119] ? __bread_gfp+0x2b0/0x2b0 [ 49.646997] ? add_to_page_cache_lru+0x16b/0x250 [ 49.651807] ? add_to_page_cache_locked+0x10/0x10 [ 49.656635] ? __page_cache_alloc+0x1fb/0x3c0 [ 49.661118] hfs_readpage+0x13/0x20 [ 49.665259] do_read_cache_page+0x65c/0x12d0 [ 49.669796] ? find_held_lock+0x36/0x1d0 [ 49.673844] ? grab_cache_page_write_begin+0x80/0x80 [ 49.678928] ? lock_downgrade+0x900/0x900 [ 49.683059] ? __kasan_check_write+0x14/0x20 [ 49.687446] ? do_raw_spin_lock+0x132/0x2e0 [ 49.691751] ? rwlock_bug.part.0+0x90/0x90 [ 49.696075] ? lock_acquire+0x194/0x3e0 [ 49.700035] ? wake_bit_function+0x180/0x180 [ 49.704431] ? do_raw_spin_unlock+0x177/0x260 [ 49.708905] read_cache_page+0x45/0x70 [ 49.712781] hfs_btree_open+0x45f/0x1070 [ 49.716825] hfs_mdb_get+0x1329/0x1d85 [ 49.720692] ? hfs_mdb_put+0x340/0x340 [ 49.724572] ? queue_work_node+0x320/0x320 [ 49.728789] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 49.733625] ? free_object+0x70/0x70 [ 49.737316] ? lockdep_init_map+0x1b6/0x6c0 [ 49.741615] ? debug_mutex_init+0x2d/0x60 [ 49.745762] hfs_fill_super+0x9b4/0x12a0 [ 49.749807] ? hfs_show_options+0x550/0x550 [ 49.754114] ? file_dentry_name+0x100/0x100 [ 49.758420] ? vsnprintf+0x8b0/0x1820 [ 49.762199] ? pointer+0x650/0x650 [ 49.765716] ? down_write+0xe1/0x150 [ 49.769410] ? snprintf+0x91/0xc0 [ 49.772858] ? vsprintf+0x20/0x20 [ 49.776292] ? register_shrinker_prepared+0xe1/0x150 [ 49.781376] mount_bdev+0x27b/0x340 [ 49.784998] ? hfs_show_options+0x550/0x550 [ 49.789833] ? hfs_statfs+0x550/0x550 [ 49.793630] hfs_mount+0x10/0x20 [ 49.796988] legacy_get_tree+0x103/0x1f0 [ 49.801025] vfs_get_tree+0x8b/0x2d0 [ 49.804754] ? capable+0x14/0x20 [ 49.808104] do_mount+0x1285/0x1b70 [ 49.811732] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 49.816556] ? copy_mount_string+0x20/0x20 [ 49.820773] ? kmem_cache_alloc_trace+0x372/0x760 [ 49.825597] ? __kasan_check_write+0x14/0x20 [ 49.829997] ? __kasan_check_read+0x11/0x20 [ 49.834303] ? copy_mount_options+0x77/0x2c0 [ 49.838709] __x64_sys_mount+0x169/0x1c0 [ 49.842759] do_syscall_64+0xd0/0x600 [ 49.846556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.851793] RIP: 0033:0x4579fa [ 49.855022] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 49.873913] RSP: 002b:00007f9f1b8e3bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.881600] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 00000000004579fa [ 49.888854] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f9f1b8e3c00 [ 49.896106] RBP: 0000000000000003 R08: 00000000200001c0 R09: 0000000020000000 [ 49.903374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 49.910625] R13: 0000000000000666 R14: 00000000006fba30 R15: 0000000000000000 [ 49.917876] Modules linked in: [ 49.921222] ---[ end trace c5d4fc82c6920b76 ]--- [ 49.925992] RIP: 0010:hfs_find_init+0x73/0x180 [ 49.930577] Code: ea 03 80 3c 02 00 0f 85 ee 00 00 00 4d 8d 6c 24 40 48 c7 43 18 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ac 00 00 00 41 8b 44 24 40 be [ 49.949529] RSP: 0018:ffff8881c6317330 EFLAGS: 00010202 [ 49.954896] RAX: dffffc0000000000 RBX: ffff8881c63173b0 RCX: 1ffff11039294505 [ 49.962172] RDX: 0000000000000008 RSI: ffff8881c63173b0 RDI: ffff8881c63173c8 [ 49.969452] RBP: ffff8881c6317350 R08: 0000000000000000 R09: ffff8881c6317410 [ 49.976838] R10: 0000000000000000 R11: ffff8881c52e16cf R12: 0000000000000000 [ 49.984187] R13: 0000000000000040 R14: ffff8881c52e1772 R15: ffff8881c63173b0 [ 49.991525] FS: 00007f9f1b8e4700(0000) GS:ffff8881db000000(0000) knlGS:0000000000000000 [ 49.999816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.005704] CR2: 00007fa425c91518 CR3: 00000001c7550000 CR4: 00000000001406f0 [ 50.012983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.020257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.027686] Kernel panic - not syncing: Fatal exception [ 50.033863] Kernel Offset: disabled [ 50.037485] Rebooting in 86400 seconds..