Mounting corrupted HFS+ causes kernel NULL pointer dereference

From: Anatoly Trosinenko
Date: Sun Jun 03 2018 - 11:53:38 EST

How to reproduce:
1. Take kernel source v4.17-rc7
2. Compile it with the config attached
3. Unpack and mount the attached FS image as hfsplus.

What happens:
[ 1.894686] BUG: unable to handle kernel NULL pointer dereference
at 0000000000000068
[ 1.895133] PGD 5c1c067 P4D 5c1c067 PUD 5c1d067 PMD 0
[ 1.895365] Oops: 0000 [#1] SMP NOPTI
[ 1.895527] Modules linked in:
[ 1.895761] CPU: 0 PID: 989 Comm: exe Not tainted 4.17.0-rc7+ #1
[ 1.895850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),
BIOS 1.10.2-1ubuntu1 04/01/2014
[ 1.896329] RIP: 0010:mount_fs+0x3e/0x150
[ 1.896395] RSP: 0018:ffffa122c08e7e00 EFLAGS: 00000207
[ 1.896485] RAX: 0000000000000000 RBX: ffff885446f58c00 RCX: 0000000000000000
[ 1.896578] RDX: 00000000000001e3 RSI: ffff8854478239a0 RDI: ffff885446c01600
[ 1.896670] RBP: 0000000000000000 R08: 00000000000239a0 R09: ffffffffb829da17
[ 1.896762] R10: ffffcb798018f400 R11: 0000000000000000 R12: ffffffffb94725c0
[ 1.896854] R13: 0000000000000000 R14: 0000000000008000 R15: 0000000000000000
[ 1.896988] FS: 00000000015328c0(0000) GS:ffff885447800000(0000)
knlGS:0000000000000000
[ 1.897113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1.897198] CR2: 0000000000000068 CR3: 0000000005c22000 CR4: 00000000000006f0
[ 1.897358] Call Trace:
[ 1.897930] vfs_kern_mount.part.28+0x4f/0xf0
[ 1.898032] do_mount+0x5d0/0xc60
[ 1.898096] ? _copy_from_user+0x37/0x60
[ 1.898159] ? memdup_user+0x39/0x60
[ 1.898213] ksys_mount+0x7b/0xd0
[ 1.898266] __x64_sys_mount+0x1c/0x20
[ 1.898329] do_syscall_64+0x43/0xf0
[ 1.898387] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1.898577] RIP: 0033:0x48d31a
[ 1.898623] RSP: 002b:00007ffe78f3f168 EFLAGS: 00000246 ORIG_RAX:
00000000000000a5
[ 1.898724] RAX: ffffffffffffffda RBX: 0000000000008000 RCX: 000000000048d31a
[ 1.898811] RDX: 00007ffe78f40f9e RSI: 00007ffe78f40f96 RDI: 00007ffe78f40f8d
[ 1.898896] RBP: 00000000015328a0 R08: 0000000000000000 R09: 0000000000000000
[ 1.898979] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000
[ 1.899072] R13: 0000000000000000 R14: 00007ffe78f3f3d8 R15: 0000000000000000
[ 1.899195] Code: 48 83 ec 10 48 85 c9 0f 85 a7 00 00 00 49 8b 44
24 10 44 89 f6 4c 89 e7 e8 10 51 c5 00 48 3d 00 f0 ff ff 48 89 c5 41
89 c7 77 7a <48> 8b 58 68 48 85 db 0f 84 f1 00 00 00 48 83 bb d8 00 00
00 00
[ 1.899721] RIP: mount_fs+0x3e/0x150 RSP: ffffa122c08e7e00
[ 1.899811] CR2: 0000000000000068
[ 1.900556] ---[ end trace d7a6559d7381eeda ]---
[ 1.901562] exe (989) used greatest stack depth: 12872 bytes left

( Full kernel log is attached. )

PS: Since HFS+ driver is not very maintained, I included into the CC
list two most recent committers to fs/hfsplus/*. Please excuse me for
disturbance.

Thanks,
Anatoly
W[ 0.000000] Linux version 4.17.0-rc7+ (trosinenko@trosinenko-pc) (gcc version 7.3.0 (Ubuntu 7.3.0-16ubuntu3)) #1 SMP Sun Jun 3 16:40:58 MSK 2018
[ 0.000000] Command line: console=ttyS0
[ 0.000000] x86/fpu: x87 FPU will use FXSAVE
[ 0.000000] e820: BIOS-provided physical RAM map:
[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable
[ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved
[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x0000000007fdffff] usable
[ 0.000000] BIOS-e820: [mem 0x0000000007fe0000-0x0000000007ffffff] reserved
[ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved
[ 0.000000] NX (Execute Disable) protection: active
[ 0.000000] SMBIOS 2.8 present.
[ 0.000000] DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014
[ 0.000000] e820: last_pfn = 0x7fe0 max_arch_pfn = 0x400000000
[ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT
[ 0.000000] found SMP MP-table at [mem 0x000f6aa0-0x000f6aaf] mapped at [ (ptrval)]
[ 0.000000] Scanning 1 areas for low memory corruption
[ 0.000000] RAMDISK: [mem 0x07b2d000-0x07fdffff]
[ 0.000000] ACPI: Early table checksum verification disabled
[ 0.000000] ACPI: RSDP 0x00000000000F68C0 000014 (v00 BOCHS )
[ 0.000000] ACPI: RSDT 0x0000000007FE15FC 000030 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: FACP 0x0000000007FE1458 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001)
[ 0.000000] ACPI: DSDT 0x0000000007FE0040 001418 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001)
[ 0.000000] ACPI: FACS 0x0000000007FE0000 000040
[ 0.000000] ACPI: APIC 0x0000000007FE154C 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001)
[ 0.000000] ACPI: HPET 0x0000000007FE15C4 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001)
[ 0.000000] No NUMA configuration found
[ 0.000000] Faking a node at [mem 0x0000000000000000-0x0000000007fdffff]
[ 0.000000] NODE_DATA(0) allocated [mem 0x07b29000-0x07b2cfff]
[ 0.000000] tsc: Unable to calibrate against PIT
[ 0.000000] tsc: No reference (HPET/PMTIMER) available
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
[ 0.000000] DMA32 [mem 0x0000000001000000-0x0000000007fdffff]
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff]
[ 0.000000] node 0: [mem 0x0000000000100000-0x0000000007fdffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x0000000007fdffff]
[ 0.000000] Reserved but unavailable: 98 pages
[ 0.000000] ACPI: PM-Timer IO Port: 0x608
[ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
[ 0.000000] IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
[ 0.000000] Using ACPI (MADT) for SMP configuration information
[ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
[ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs
[ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
[ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
[ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff]
[ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff]
[ 0.000000] e820: [mem 0x08000000-0xfffbffff] available for PCI devices
[ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns
[ 0.000000] random: get_random_bytes called from start_kernel+0x8b/0x49f with crng_init=0
[ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:1 nr_node_ids:1
[ 0.000000] percpu: Embedded 43 pages/cpu @ (ptrval) s137304 r8192 d30632 u2097152
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32105
[ 0.000000] Policy zone: DMA32
[ 0.000000] Kernel command line: console=ttyS0
[ 0.000000] Memory: 95420K/130552K available (14348K kernel code, 1363K rwdata, 3092K rodata, 1260K init, 592K bss, 35132K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU event tracing is enabled.
[ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=1.
[ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1
[ 0.000000] NR_IRQS: 4352, nr_irqs: 256, preallocated irqs: 16
[ 0.000000] Console: colour VGA+ 80x25
[ 0.000000] console [ttyS0] enabled
[ 0.000000] ACPI: Core revision 20180313
[ 0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns
[ 0.002000] APIC: Switch to symmetric I/O mode setup
[ 0.004000] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[ 0.009000] tsc: Fast TSC calibration using PIT
[ 0.010000] tsc: Detected 2807.817 MHz processor
[ 0.011340] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x287919901fb, max_idle_ns: 440795338034 ns
[ 0.011703] Calibrating delay loop (skipped), value calculated using timer frequency.. 5615.63 BogoMIPS (lpj=2807817)
[ 0.012092] pid_max: default: 32768 minimum: 301
[ 0.012684] Security Framework initialized
[ 0.012855] SELinux: Initializing.
[ 0.013903] Dentry cache hash table entries: 16384 (order: 5, 131072 bytes)
[ 0.014131] Inode-cache hash table entries: 8192 (order: 4, 65536 bytes)
[ 0.014342] Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
[ 0.014453] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes)
[ 0.024938] mce: CPU supports 10 MCE banks
[ 0.025813] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0
[ 0.025898] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0
[ 0.026076] Spectre V2 : Spectre mitigation: LFENCE not serializing, switching to generic retpoline
[ 0.026200] Spectre V2 : Mitigation: Full generic retpoline
[ 0.026285] Spectre V2 : Spectre v2 mitigation: Filling RSB on context switch
[ 0.026395] Speculative Store Bypass: Vulnerable
[ 0.256212] random: fast init done
[ 0.335107] Freeing SMP alternatives memory: 40K
[ 0.344000] smpboot: CPU0: AMD QEMU Virtual CPU version 2.5+ (family: 0x6, model: 0x6, stepping: 0x3)
[ 0.347383] Performance Events: PMU not available due to virtualization, using software events only.
[ 0.349000] Hierarchical SRCU implementation.
[ 0.352266] Huh? What family is it: 0x6?!
[ 0.353274] smp: Bringing up secondary CPUs ...
[ 0.353396] smp: Brought up 1 node, 1 CPU
[ 0.353476] smpboot: Max logical packages: 1
[ 0.353581] smpboot: Total of 1 processors activated (5615.63 BogoMIPS)
[ 0.361418] devtmpfs: initialized
[ 0.367130] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
[ 0.367402] futex hash table entries: 256 (order: 2, 16384 bytes)
[ 0.370083] RTC time: 15:36:16, date: 06/03/18
[ 0.377717] NET: Registered protocol family 16
[ 0.379198] kworker/u2:0 (16) used greatest stack depth: 14640 bytes left
[ 0.382146] audit: initializing netlink subsys (disabled)
[ 0.388518] audit: type=2000 audit(1528040176.382:1): state=initialized audit_enabled=0 res=1
[ 0.389061] cpuidle: using governor menu
[ 0.389884] ACPI: bus type PCI registered
[ 0.390842] kworker/u2:1 (22) used greatest stack depth: 14144 bytes left
[ 0.395284] PCI: Using configuration type 1 for base access
[ 0.462338] kworker/u2:2 (216) used greatest stack depth: 14008 bytes left
[ 0.516619] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
[ 0.520000] ACPI: Added _OSI(Module Device)
[ 0.520155] ACPI: Added _OSI(Processor Device)
[ 0.520218] ACPI: Added _OSI(3.0 _SCP Extensions)
[ 0.520278] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.520450] ACPI: Added _OSI(Linux-Dell-Video)
[ 0.532278] ACPI: 1 ACPI AML tables successfully acquired and loaded
[ 0.543639] ACPI: Interpreter enabled
[ 0.544481] ACPI: (supports S0 S3 S4 S5)
[ 0.544581] ACPI: Using IOAPIC for interrupt routing
[ 0.545249] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.546402] ACPI: Enabled 2 GPEs in block 00 to 0F
[ 0.606256] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.606698] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI]
[ 0.606976] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM
[ 0.607684] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge.
[ 0.610402] PCI host bridge to bus 0000:00
[ 0.610601] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
[ 0.610706] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
[ 0.610803] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[ 0.610897] pci_bus 0000:00: root bus resource [mem 0x08000000-0xfebfffff window]
[ 0.610992] pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window]
[ 0.611297] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.620110] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7]
[ 0.620246] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6]
[ 0.620352] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177]
[ 0.620451] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376]
[ 0.622564] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI
[ 0.622703] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB
[ 0.643524] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
[ 0.644583] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
[ 0.645284] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
[ 0.645791] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
[ 0.646232] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
[ 0.651629] pci 0000:00:02.0: vgaarb: setting as boot VGA device
[ 0.651801] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 0.651946] pci 0000:00:02.0: vgaarb: bridge control possible
[ 0.652095] vgaarb: loaded
[ 0.654287] SCSI subsystem initialized
[ 0.656820] ACPI: bus type USB registered
[ 0.657593] usbcore: registered new interface driver usbfs
[ 0.658000] usbcore: registered new interface driver hub
[ 0.658301] usbcore: registered new device driver usb
[ 0.659762] pps_core: LinuxPPS API ver. 1 registered
[ 0.659851] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@xxxxxxxx>
[ 0.660554] PTP clock support registered
[ 0.663919] EDAC MC: Ver: 3.0.0
[ 0.666927] Advanced Linux Sound Architecture Driver Initialized.
[ 0.667510] PCI: Using ACPI for IRQ routing
[ 0.676159] NetLabel: Initializing
[ 0.676243] NetLabel: domain hash size = 128
[ 0.676302] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
[ 0.677548] NetLabel: unlabeled traffic allowed by default
[ 0.678943] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
[ 0.679255] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[ 0.679388] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
[ 0.683900] clocksource: Switched to clocksource tsc-early
[ 0.820135] VFS: Disk quotas dquot_6.6.0
[ 0.820442] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 0.822897] pnp: PnP ACPI init
[ 0.831855] pnp: PnP ACPI: found 6 devices
[ 0.882796] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[ 0.884736] NET: Registered protocol family 2
[ 0.889062] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes)
[ 0.889449] TCP established hash table entries: 1024 (order: 1, 8192 bytes)
[ 0.889666] TCP bind hash table entries: 1024 (order: 2, 16384 bytes)
[ 0.889822] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.890831] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 0.891054] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 0.892528] NET: Registered protocol family 1
[ 0.894462] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
[ 0.894661] pci 0000:00:01.0: PIIX3: Enabling Passive Release
[ 0.894830] pci 0000:00:01.0: Activating ISA DMA hang workarounds
[ 0.895111] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[ 0.898498] Unpacking initramfs...
[ 0.944504] Freeing initrd memory: 4812K
[ 0.948526] Scanning for low memory corruption every 60 seconds
[ 0.959458] Initialise system trusted keyrings
[ 0.962096] workingset: timestamp_bits=56 max_order=15 bucket_order=0
[ 1.005630] SGI XFS with ACLs, security attributes, no debug enabled
[ 1.032538] Key type asymmetric registered
[ 1.032671] Asymmetric key parser 'x509' registered
[ 1.033221] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 1.033444] io scheduler noop registered
[ 1.033528] io scheduler deadline registered
[ 1.034116] io scheduler cfq registered (default)
[ 1.034221] io scheduler mq-deadline registered
[ 1.034287] io scheduler kyber registered
[ 1.040234] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0
[ 1.042171] ACPI: Power Button [PWRF]
[ 1.049322] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
[ 1.073156] 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
[ 1.083739] Non-volatile memory driver v1.3
[ 1.084610] Linux agpgart interface v0.103
[ 1.116982] loop: module loaded
[ 1.130753] scsi host0: ata_piix
[ 1.133921] scsi host1: ata_piix
[ 1.135216] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc040 irq 14
[ 1.135355] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc048 irq 15
[ 1.140280] e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
[ 1.140397] e100: Copyright(c) 1999-2006 Intel Corporation
[ 1.140825] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI
[ 1.141120] e1000: Copyright (c) 1999-2006 Intel Corporation.
[ 1.274805] PCI Interrupt Link [LNKC] enabled at IRQ 11
[ 1.303182] ata1.00: ATA-7: QEMU HARDDISK, 2.5+, max UDMA/100
[ 1.303295] ata1.00: 262144 sectors, multi 16: LBA48
[ 1.304683] ata1.00: configured for MWDMA2
[ 1.312347] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100
[ 1.312856] ata2.00: configured for MWDMA2
[ 1.318740] scsi 0:0:0:0: Direct-Access ATA QEMU HARDDISK 2.5+ PQ: 0 ANSI: 5
[ 1.328874] sd 0:0:0:0: [sda] 262144 512-byte logical blocks: (134 MB/128 MiB)
[ 1.330028] sd 0:0:0:0: [sda] Write Protect is off
[ 1.330678] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[ 1.331783] sd 0:0:0:0: Attached scsi generic sg0 type 0
[ 1.334566] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5
[ 1.350028] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
[ 1.350349] cdrom: Uniform CD-ROM driver Revision: 3.20
[ 1.360720] sr 1:0:0:0: Attached scsi generic sg1 type 5
[ 1.376652] sd 0:0:0:0: [sda] Attached SCSI disk
[ 1.628774] e1000 0000:00:03.0 eth0: (PCI:33MHz:32-bit) 52:54:00:12:34:56
[ 1.629191] e1000 0000:00:03.0 eth0: Intel(R) PRO/1000 Network Connection
[ 1.630290] e1000e: Intel(R) PRO/1000 Network Driver - 3.2.6-k
[ 1.630388] e1000e: Copyright(c) 1999 - 2015 Intel Corporation.
[ 1.630869] sky2: driver version 1.30
[ 1.633973] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 1.634235] ehci-pci: EHCI PCI platform driver
[ 1.634532] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 1.634797] ohci-pci: OHCI PCI platform driver
[ 1.635130] uhci_hcd: USB Universal Host Controller Interface driver
[ 1.637785] usbcore: registered new interface driver usblp
[ 1.638551] usbcore: registered new interface driver usb-storage
[ 1.639999] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
[ 1.644126] serio: i8042 KBD port at 0x60,0x64 irq 1
[ 1.644690] serio: i8042 AUX port at 0x60,0x64 irq 12
[ 1.649883] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1
[ 1.654536] rtc_cmos 00:00: RTC can wake from S4
[ 1.660289] rtc_cmos 00:00: registered as rtc0
[ 1.662449] rtc_cmos 00:00: alarms up to one day, y3k, 114 bytes nvram, hpet irqs
[ 1.666307] device-mapper: ioctl: 4.39.0-ioctl (2018-04-03) initialised: dm-devel@xxxxxxxxxx
[ 1.667337] hidraw: raw HID events driver (C) Jiri Kosina
[ 1.675970] usbcore: registered new interface driver usbhid
[ 1.676231] usbhid: USB HID core driver
[ 1.689176] Initializing XFRM netlink socket
[ 1.691795] NET: Registered protocol family 10
[ 1.698421] Segment Routing with IPv6
[ 1.700810] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[ 1.703758] NET: Registered protocol family 17
[ 1.704106] Key type dns_resolver registered
[ 1.706620] sched_clock: Marking stable (1706040442, 0)->(1798834245, -92793803)
[ 1.711893] registered taskstats version 1
[ 1.712147] Loading compiled-in X.509 certificates
[ 1.715591] Magic number: 6:396:638
[ 1.716399] console [netcon0] enabled
[ 1.716487] netconsole: network logging started
[ 1.718433] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 1.748031] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 1.753402] ALSA device list:
[ 1.753491] No soundcards found.
[ 1.754972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1.755402] cfg80211: failed to load regulatory.db
[ 1.776890] Freeing unused kernel memory: 1260K
[ 1.777578] Write protecting the kernel read-only data: 20480k
[ 1.787982] Freeing unused kernel memory: 2004K
[ 1.795849] Freeing unused kernel memory: 1004K
[ 1.894686] BUG: unable to handle kernel NULL pointer dereference at 0000000000000068
[ 1.895133] PGD 5c1c067 P4D 5c1c067 PUD 5c1d067 PMD 0
[ 1.895365] Oops: 0000 [#1] SMP NOPTI
[ 1.895527] Modules linked in:
[ 1.895761] CPU: 0 PID: 989 Comm: exe Not tainted 4.17.0-rc7+ #1
[ 1.895850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014
[ 1.896329] RIP: 0010:mount_fs+0x3e/0x150
[ 1.896395] RSP: 0018:ffffa122c08e7e00 EFLAGS: 00000207
[ 1.896485] RAX: 0000000000000000 RBX: ffff885446f58c00 RCX: 0000000000000000
[ 1.896578] RDX: 00000000000001e3 RSI: ffff8854478239a0 RDI: ffff885446c01600
[ 1.896670] RBP: 0000000000000000 R08: 00000000000239a0 R09: ffffffffb829da17
[ 1.896762] R10: ffffcb798018f400 R11: 0000000000000000 R12: ffffffffb94725c0
[ 1.896854] R13: 0000000000000000 R14: 0000000000008000 R15: 0000000000000000
[ 1.896988] FS: 00000000015328c0(0000) GS:ffff885447800000(0000) knlGS:0000000000000000
[ 1.897113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1.897198] CR2: 0000000000000068 CR3: 0000000005c22000 CR4: 00000000000006f0
[ 1.897358] Call Trace:
[ 1.897930] vfs_kern_mount.part.28+0x4f/0xf0
[ 1.898032] do_mount+0x5d0/0xc60
[ 1.898096] ? _copy_from_user+0x37/0x60
[ 1.898159] ? memdup_user+0x39/0x60
[ 1.898213] ksys_mount+0x7b/0xd0
[ 1.898266] __x64_sys_mount+0x1c/0x20
[ 1.898329] do_syscall_64+0x43/0xf0
[ 1.898387] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1.898577] RIP: 0033:0x48d31a
[ 1.898623] RSP: 002b:00007ffe78f3f168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1.898724] RAX: ffffffffffffffda RBX: 0000000000008000 RCX: 000000000048d31a
[ 1.898811] RDX: 00007ffe78f40f9e RSI: 00007ffe78f40f96 RDI: 00007ffe78f40f8d
[ 1.898896] RBP: 00000000015328a0 R08: 0000000000000000 R09: 0000000000000000
[ 1.898979] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000
[ 1.899072] R13: 0000000000000000 R14: 00007ffe78f3f3d8 R15: 0000000000000000
[ 1.899195] Code: 48 83 ec 10 48 85 c9 0f 85 a7 00 00 00 49 8b 44 24 10 44 89 f6 4c 89 e7 e8 10 51 c5 00 48 3d 00 f0 ff ff 48 89 c5 41 89 c7 77 7a <48> 8b 58 68 48 85 db 0f 84 f1 00 00 00 48 83 bb d8 00 00 00 00
[ 1.899721] RIP: mount_fs+0x3e/0x150 RSP: ffffa122c08e7e00
[ 1.899811] CR2: 0000000000000068
[ 1.900556] ---[ end trace d7a6559d7381eeda ]---
[ 1.901562] exe (989) used greatest stack depth: 12872 bytes left
Killed


BusyBox v1.27.2 (Ubuntu 1:1.27.2-2ubuntu3) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/bin/sh: can't access tty; job control turned off
/ # [ 1.952605] tsc: Refined TSC clocksource calibration: 2808.023 MHz
[ 1.953056] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2879dbf011e, max_idle_ns: 440795311159 ns
[ 1.954563] clocksource: Switched to clocksource tsc
[ 2.283884] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3

Attachment: config_v4.17-rc7
Description: Binary data

Attachment: hfsplus_128mb.img.bz2
Description: Binary data