./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4032909590
<...>
forked to background, child pid 5500
no interfaces have a carrier
[ 36.671868][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0
[ 36.681019][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.48' (ED25519) to the list of known hosts.
execve("./syz-executor4032909590", ["./syz-executor4032909590"], 0x7ffd3c7167a0 /* 10 vars */) = 0
brk(NULL) = 0x55556be28000
brk(0x55556be28d00) = 0x55556be28d00
arch_prctl(ARCH_SET_FS, 0x55556be28380) = 0
set_tid_address(0x55556be28650) = 5831
set_robust_list(0x55556be28660, 24) = 0
rseq(0x55556be28ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4032909590", 4096) = 28
getrandom("\x1d\x0c\x58\x5f\xba\x92\x39\xab", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556be28d00
brk(0x55556be49d00) = 0x55556be49d00
brk(0x55556be4a000) = 0x55556be4a000
mprotect(0x7f411d531000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4115000000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7f4115000000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 62.430279][ T5831] loop0: detected capacity change from 0 to 64
[ 62.474170][ T5831] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI
[ 62.486991][ T5831] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 62.495629][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor403 Not tainted 6.12.0-rc7-syzkaller-00192-gb5a24181e461 #0
[ 62.507539][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 62.517834][ T5831] RIP: 0010:hfs_find_init+0x72/0x1f0
[ 62.523685][ T5831] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 78 76 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0
[ 62.543336][ T5831] RSP: 0018:ffffc90003b3f2c0 EFLAGS: 00010202
[ 62.550380][ T5831] RAX: 1ffff92000767e77 RBX: ffffc90003b3f3b8 RCX: ffff88802b0f1e00
[ 62.559333][ T5831] RDX: 0000000000000000 RSI: ffffc90003b3f3a0 RDI: ffffc90003b3f3b0
[ 62.568574][ T5831] RBP: 0000000000000000 R08: ffffffff8286673f R09: 0000000000000000
[ 62.579046][ T5831] R10: ffffc90003b3f3a0 R11: fffff52000767e7b R12: ffffc90003b3f3a0
[ 62.591865][ T5831] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008
[ 62.604420][ T5831] FS: 000055556be28380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 62.613915][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 62.621822][ T5831] CR2: 00007fff6eed7000 CR3: 000000007a15a000 CR4: 00000000003526f0
[ 62.629826][ T5831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 62.637835][ T5831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 62.646049][ T5831] Call Trace:
[ 62.649455][ T5831] <TASK>
[ 62.652396][ T5831] ? __die_body+0x5f/0xb0
[ 62.656881][ T5831] ? die_addr+0xb0/0xe0
[ 62.661185][ T5831] ? exc_general_protection+0x3dd/0x5d0
[ 62.666812][ T5831] ? asm_exc_general_protection+0x26/0x30
[ 62.672730][ T5831] ? hfs_get_block+0x3bf/0xb60
[ 62.677510][ T5831] ? hfs_find_init+0x72/0x1f0
[ 62.682318][ T5831] hfs_get_block+0x4f4/0xb60
[ 62.687595][ T5831] ? __pfx_hfs_get_block+0x10/0x10
[ 62.693333][ T5831] ? _raw_spin_unlock+0x28/0x50
[ 62.698454][ T5831] ? create_empty_buffers+0x53e/0x740
[ 62.703873][ T5831] ? rcu_is_watching+0x15/0xb0
[ 62.708686][ T5831] block_read_full_folio+0x418/0xcd0
[ 62.714559][ T5831] ? __pfx_hfs_get_block+0x10/0x10
[ 62.720424][ T5831] ? __pfx_block_read_full_folio+0x10/0x10
[ 62.728641][ T5831] ? folio_add_lru+0x1cd/0x4f0
[ 62.733969][ T5831] filemap_read_folio+0x14b/0x630
[ 62.743298][ T5831] ? __pfx_hfs_read_folio+0x10/0x10
[ 62.749676][ T5831] ? __pfx_filemap_read_folio+0x10/0x10
[ 62.755266][ T5831] ? __filemap_get_folio+0x949/0xbd0
[ 62.760592][ T5831] ? __pfx_lock_release+0x10/0x10
[ 62.765658][ T5831] do_read_cache_folio+0x3f5/0x850
[ 62.770814][ T5831] ? __pfx_hfs_read_folio+0x10/0x10
[ 62.776152][ T5831] do_read_cache_page+0x30/0x200
[ 62.781377][ T5831] hfs_btree_open+0x506/0xf40
[ 62.786142][ T5831] hfs_mdb_get+0x1443/0x21b0
[ 62.791037][ T5831] ? __pfx_hfs_mdb_get+0x10/0x10
[ 62.796192][ T5831] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 62.802126][ T5831] ? make_kgid+0x1f0/0x710
[ 62.806601][ T5831] ? __raw_spin_lock_init+0x45/0x100
[ 62.812018][ T5831] hfs_fill_super+0x107e/0x1790
[ 62.816898][ T5831] ? __pfx_hfs_fill_super+0x10/0x10
[ 62.822125][ T5831] ? __pfx_vsnprintf+0x10/0x10
[ 62.826935][ T5831] ? do_raw_spin_lock+0x14f/0x370
[ 62.831982][ T5831] ? sb_set_blocksize+0x98/0xf0
[ 62.836838][ T5831] ? setup_bdev_super+0x4e6/0x5d0
[ 62.841900][ T5831] mount_bdev+0x20a/0x2d0
[ 62.846259][ T5831] ? __pfx_hfs_fill_super+0x10/0x10
[ 62.851463][ T5831] ? __pfx_mount_bdev+0x10/0x10
[ 62.856335][ T5831] ? vfs_parse_fs_string+0x190/0x230
[ 62.861637][ T5831] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 62.867273][ T5831] legacy_get_tree+0xee/0x190
[ 62.871962][ T5831] ? __pfx_hfs_mount+0x10/0x10
[ 62.876730][ T5831] vfs_get_tree+0x90/0x2b0
[ 62.881149][ T5831] do_new_mount+0x2be/0xb40
[ 62.886094][ T5831] ? __pfx_do_new_mount+0x10/0x10
[ 62.891155][ T5831] __se_sys_mount+0x2d6/0x3c0
[ 62.895857][ T5831] ? __pfx___se_sys_mount+0x10/0x10
[ 62.901080][ T5831] ? do_syscall_64+0x100/0x230
[ 62.905992][ T5831] ? __x64_sys_mount+0x20/0xc0
[ 62.912446][ T5831] do_syscall_64+0xf3/0x230
[ 62.917361][ T5831] ? clear_bhb_loop+0x35/0x90
[ 62.924867][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.933031][ T5831] RIP: 0033:0x7f411d4bfcba
[ 62.937476][ T5831] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.957908][ T5831] RSP: 002b:00007fff6eed6758 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 62.966685][ T5831] RAX: ffffffffffffffda RBX: 00007fff6eed6770 RCX: 00007f411d4bfcba
[ 62.974655][ T5831] RDX: 0000000020000280 RSI: 0000000020000100 RDI: 00007fff6eed6770
[ 62.982644][ T5831] RBP: 0000000000000004 R08: 00007fff6eed67b0 R09: 0000000000000336
[ 62.990643][ T5831] R10: 0000000001210080 R11: 0000000000000286 R12: 0000000001210080
[ 62.998626][ T5831] R13: 00007fff6eed67b0 R14: 0000000000000003 R15: 0000000000008000
[ 63.006900][ T5831] </TASK>
[ 63.009921][ T5831] Modules linked in:
[ 63.014062][ T5831] ---[ end trace 0000000000000000 ]---
[ 63.019890][ T5831] RIP: 0010:hfs_find_init+0x72/0x1f0
[ 63.025359][ T5831] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 78 76 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0
[ 63.049118][ T5831] RSP: 0018:ffffc90003b3f2c0 EFLAGS: 00010202
[ 63.056025][ T5831] RAX: 1ffff92000767e77 RBX: ffffc90003b3f3b8 RCX: ffff88802b0f1e00
[ 63.065881][ T5831] RDX: 0000000000000000 RSI: ffffc90003b3f3a0 RDI: ffffc90003b3f3b0
[ 63.075600][ T5831] RBP: 0000000000000000 R08: ffffffff8286673f R09: 0000000000000000
[ 63.084836][ T5831] R10: ffffc90003b3f3a0 R11: fffff52000767e7b R12: ffffc90003b3f3a0
[ 63.097085][ T5831] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008
[ 63.106539][ T5831] FS: 000055556be28380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 63.128401][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 63.139397][ T5831] CR2: 0000557d9c8d31d8 CR3: 000000007a15a000 CR4: 00000000003526f0
[ 63.147783][ T5831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 63.160130][ T5831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 63.169621][ T5831] Kernel panic - not syncing: Fatal exception
[ 63.176114][ T5831] Kernel Offset: disabled
[ 63.180645][ T5831] Rebooting in 86400 seconds..