program: syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'maccyrillic'}}]}, 0x1, 0x25b, &(0x7f0000000540)="$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") [ 58.434428][ T5314] loop0: detected capacity change from 0 to 64 [ 58.464287][ T5314] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 58.469130][ T5314] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 58.472494][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 58.476666][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.480917][ T5314] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 58.483177][ T5314] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 84 15 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 58.491331][ T5314] RSP: 0018:ffffc9000d4d7400 EFLAGS: 00010202 [ 58.494334][ T5314] RAX: 1ffff92001a9ae9f RBX: ffffc9000d4d74f8 RCX: ffff88801f4c0000 [ 58.498343][ T5314] RDX: 0000000000000000 RSI: ffffc9000d4d74e0 RDI: ffffc9000d4d74f0 [ 58.501526][ T5314] RBP: 0000000000000000 R08: ffffffff828300af R09: 0000000000000000 [ 58.504585][ T5314] R10: ffffc9000d4d74e0 R11: fffff52001a9aea3 R12: ffffc9000d4d74e0 [ 58.507523][ T5314] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 58.510428][ T5314] FS: 00007f08e8e646c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.513798][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.516171][ T5314] CR2: 00007f08e7f69ae0 CR3: 00000000406ae000 CR4: 0000000000352ef0 [ 58.519012][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.521907][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.524864][ T5314] Call Trace: [ 58.526126][ T5314] [ 58.527292][ T5314] ? __die_body+0x5f/0xb0 [ 58.528966][ T5314] ? die_addr+0xb0/0xe0 [ 58.530575][ T5314] ? exc_general_protection+0x3dd/0x5d0 [ 58.532723][ T5314] ? hfs_get_block+0x26f/0xb60 [ 58.534578][ T5314] ? asm_exc_general_protection+0x26/0x30 [ 58.536580][ T5314] ? hfs_get_block+0x3bf/0xb60 [ 58.538125][ T5314] ? hfs_find_init+0x72/0x1f0 [ 58.539683][ T5314] hfs_get_block+0x4f4/0xb60 [ 58.541247][ T5314] ? __pfx_hfs_get_block+0x10/0x10 [ 58.543055][ T5314] ? _raw_spin_unlock+0x28/0x50 [ 58.544439][ T5314] ? create_empty_buffers+0x471/0x530 [ 58.546017][ T5314] block_read_full_folio+0x3ee/0xae0 [ 58.547932][ T5314] ? __pfx_hfs_get_block+0x10/0x10 [ 58.549588][ T5314] ? __pfx_block_read_full_folio+0x10/0x10 [ 58.551808][ T5314] filemap_read_folio+0x148/0x3b0 [ 58.553791][ T5314] ? __pfx_hfs_read_folio+0x10/0x10 [ 58.555880][ T5314] ? __pfx_filemap_read_folio+0x10/0x10 [ 58.557805][ T5314] ? __filemap_get_folio+0x848/0x940 [ 58.559677][ T5314] ? hfs_btree_open+0x4cb/0xf40 [ 58.561367][ T5314] do_read_cache_folio+0x373/0x5b0 [ 58.563240][ T5314] ? __pfx_hfs_read_folio+0x10/0x10 [ 58.565447][ T5314] ? do_raw_spin_unlock+0x58/0x8b0 [ 58.567664][ T5314] read_cache_page+0x5b/0x170 [ 58.569304][ T5314] hfs_btree_open+0x506/0xf40 [ 58.571354][ T5314] hfs_mdb_get+0x1443/0x21b0 [ 58.573626][ T5314] ? __pfx_hfs_mdb_get+0x10/0x10 [ 58.576148][ T5314] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 58.579051][ T5314] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 58.582049][ T5314] ? __raw_spin_lock_init+0x45/0x100 [ 58.584680][ T5314] hfs_fill_super+0x38c/0x6b0 [ 58.586980][ T5314] ? __pfx_hfs_fill_super+0x10/0x10 [ 58.589556][ T5314] ? do_raw_spin_lock+0x14f/0x370 [ 58.591394][ T5314] ? sb_set_blocksize+0x98/0xf0 [ 58.593062][ T5314] ? setup_bdev_super+0x4e6/0x5d0 [ 58.594778][ T5314] get_tree_bdev_flags+0x48c/0x5c0 [ 58.596568][ T5314] ? __pfx_hfs_fill_super+0x10/0x10 [ 58.598436][ T5314] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 58.600365][ T5314] ? apparmor_capable+0x13b/0x1b0 [ 58.602077][ T5314] vfs_get_tree+0x90/0x2b0 [ 58.603544][ T5314] do_new_mount+0x2be/0xb40 [ 58.605145][ T5314] ? __pfx_do_new_mount+0x10/0x10 [ 58.607095][ T5314] __se_sys_mount+0x2d6/0x3c0 [ 58.608961][ T5314] ? __pfx___se_sys_mount+0x10/0x10 [ 58.610925][ T5314] ? exc_page_fault+0x590/0x8b0 [ 58.612696][ T5314] ? __x64_sys_mount+0x20/0xc0 [ 58.614389][ T5314] do_syscall_64+0xf3/0x230 [ 58.616022][ T5314] ? clear_bhb_loop+0x35/0x90 [ 58.617776][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.619806][ T5314] RIP: 0033:0x7f08e7f874ca [ 58.621396][ T5314] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.628803][ T5314] RSP: 002b:00007f08e8e63e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.631843][ T5314] RAX: ffffffffffffffda RBX: 00007f08e8e63ef0 RCX: 00007f08e7f874ca [ 58.634663][ T5314] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 00007f08e8e63eb0 [ 58.637495][ T5314] RBP: 0000000020000240 R08: 00007f08e8e63ef0 R09: 0000000000000000 [ 58.640561][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000280 [ 58.643594][ T5314] R13: 00007f08e8e63eb0 R14: 000000000000025b R15: 0000000020000000 [ 58.646713][ T5314] [ 58.647811][ T5314] Modules linked in: [ 58.649625][ T5314] ---[ end trace 0000000000000000 ]--- [ 58.662827][ T5314] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 58.665229][ T5314] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 84 15 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 58.673745][ T4670] Bluetooth: hci0: command tx timeout [ 58.677356][ T5314] RSP: 0018:ffffc9000d4d7400 EFLAGS: 00010202 [ 58.681008][ T5314] RAX: 1ffff92001a9ae9f RBX: ffffc9000d4d74f8 RCX: ffff88801f4c0000 [ 58.683904][ T5314] RDX: 0000000000000000 RSI: ffffc9000d4d74e0 RDI: ffffc9000d4d74f0 [ 58.686548][ T5314] RBP: 0000000000000000 R08: ffffffff828300af R09: 0000000000000000 [ 58.690241][ T5314] R10: ffffc9000d4d74e0 R11: fffff52001a9aea3 R12: ffffc9000d4d74e0 [ 58.693165][ T5314] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 58.695944][ T5314] FS: 00007f08e8e646c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.699636][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.702179][ T5314] CR2: 00007fa0ed395ed8 CR3: 00000000406ae000 CR4: 0000000000352ef0 [ 58.705242][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.708284][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.712200][ T5314] Kernel panic - not syncing: Fatal exception [ 58.714695][ T5314] Kernel Offset: disabled [ 58.716218][ T5314] Rebooting in 86400 seconds..