program: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2400000010000000", @ANYRES32, @ANYBLOB="a3e3459ce8aec41c9d10e2ceec6fc70b5bdc2cf10abec57d69952e652b7cd3163858f58484d42df47c921a2cfee48603e01797592dd2b2b58ca8e73a5cfb5c8001598a2c7f9e94c1554ba4c9569822f8522d9a6080a69085b7481fdba8c6871c0ce71ba2650fb3fbc152602ab91a0881f78ddd81f7d0c7d5387405750afd8f40825252671508727c7a0b22f6603a68a22af7fa9f86b31956dd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x4004, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6ded1166f95bc118305a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581"], 0x1, 0x316, &(0x7f0000000cc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffff9c, &(0x7f00000006c0), 0x82001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) fallocate(r1, 0x0, 0x56eb, 0x3) keyctl$clear(0x3, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x1}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) write$qrtrtun(r2, &(0x7f0000000640)="0c62cf5141cf57c011166bd53fd4286fd78730d1e6dc5fd3a1a416583402a723764bc413d72430070a97aebe044d61a5505c4603b937dfddc3d405daca5b1de4d67ab189fcbf7af190b0b3a546db2444d1d9cc272b731b891a5f042d6018bbec97", 0x61) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0xb43}, 0x1c) getdents(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xc1, &(0x7f0000000040)={[], [{@subj_type={'subj_type', 0x3d, ':-/'}}, {@context={'context', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '](,,&())'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x51d, &(0x7f0000000780)="$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") [ 72.147526][ T4664] Bluetooth: hci0: command tx timeout [ 72.265270][ T5316] loop0: detected capacity change from 0 to 64 [ 72.285319][ T5316] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 72.293007][ T5316] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 72.297394][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc6-syzkaller #0 [ 72.317813][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.325727][ T5316] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 72.328390][ T5316] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 54 14 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 72.355340][ T5316] RSP: 0018:ffffc9000d1bf400 EFLAGS: 00010202 [ 72.357871][ T5316] RAX: 1ffff92001a37e9f RBX: ffffc9000d1bf4f8 RCX: 0000000000100000 [ 72.376648][ T5316] RDX: ffffc9000eb1a000 RSI: 00000000000020a4 RDI: ffffc9000d1bf4f0 [ 72.380078][ T5316] RBP: 0000000000000000 R08: ffffffff82830e5f R09: 0000000000000000 [ 72.383799][ T5316] R10: ffffc9000d1bf4e0 R11: fffff52001a37ea3 R12: ffffc9000d1bf4e0 [ 72.394091][ T5316] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 72.419453][ T5316] FS: 00007fad5061b6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 72.441795][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.446736][ T5316] CR2: 00007fad4f769ae0 CR3: 0000000043348000 CR4: 0000000000352ef0 [ 72.453314][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.456186][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.459034][ T5316] Call Trace: [ 72.460661][ T5316] [ 72.463291][ T5316] ? __die_body+0x5f/0xb0 [ 72.490530][ T5316] ? die_addr+0xb0/0xe0 [ 72.503883][ T5316] ? exc_general_protection+0x3dd/0x5d0 [ 72.508367][ T5316] ? hfs_get_block+0x26f/0xb60 [ 72.511889][ T5316] ? asm_exc_general_protection+0x26/0x30 [ 72.514961][ T5316] ? hfs_get_block+0x3bf/0xb60 [ 72.517612][ T5316] ? hfs_find_init+0x72/0x1f0 [ 72.520156][ T5316] hfs_get_block+0x4f4/0xb60 [ 72.522648][ T5316] ? __pfx_hfs_get_block+0x10/0x10 [ 72.525539][ T5316] ? _raw_spin_unlock+0x28/0x50 [ 72.528088][ T5316] ? create_empty_buffers+0x471/0x530 [ 72.530489][ T5316] block_read_full_folio+0x3ee/0xae0 [ 72.532745][ T5316] ? __pfx_hfs_get_block+0x10/0x10 [ 72.534911][ T5316] ? __pfx_block_read_full_folio+0x10/0x10 [ 72.537386][ T5316] filemap_read_folio+0x148/0x3b0 [ 72.541038][ T5316] ? __pfx_hfs_read_folio+0x10/0x10 [ 72.545644][ T5316] ? __pfx_filemap_read_folio+0x10/0x10 [ 72.549047][ T5316] ? __filemap_get_folio+0x848/0x940 [ 72.561392][ T5316] ? hfs_btree_open+0x4cb/0xf40 [ 72.563498][ T5316] do_read_cache_folio+0x373/0x5b0 [ 72.565661][ T5316] ? __pfx_hfs_read_folio+0x10/0x10 [ 72.569534][ T5316] ? do_raw_spin_unlock+0x58/0x8b0 [ 72.573358][ T5316] read_cache_page+0x5b/0x170 [ 72.576734][ T5316] hfs_btree_open+0x506/0xf40 [ 72.579828][ T5316] hfs_mdb_get+0x1443/0x21b0 [ 72.581967][ T5316] ? __pfx_hfs_mdb_get+0x10/0x10 [ 72.583836][ T5316] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 72.586017][ T5316] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 72.589056][ T5316] ? __raw_spin_lock_init+0x45/0x100 [ 72.593050][ T5316] hfs_fill_super+0x38c/0x6b0 [ 72.596181][ T5316] ? __pfx_hfs_fill_super+0x10/0x10 [ 72.619571][ T5316] ? do_raw_spin_lock+0x14f/0x370 [ 72.622264][ T5316] ? sb_set_blocksize+0x98/0xf0 [ 72.626045][ T5316] ? setup_bdev_super+0x4e6/0x5d0 [ 72.631664][ T5316] get_tree_bdev_flags+0x48c/0x5c0 [ 72.635784][ T5316] ? __pfx_hfs_fill_super+0x10/0x10 [ 72.638024][ T5316] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 72.640127][ T5316] ? apparmor_capable+0x13b/0x1b0 [ 72.642591][ T5316] vfs_get_tree+0x90/0x2b0 [ 72.644983][ T5316] do_new_mount+0x2be/0xb40 [ 72.647419][ T5316] ? __pfx_do_new_mount+0x10/0x10 [ 72.649941][ T5316] __se_sys_mount+0x2d6/0x3c0 [ 72.651904][ T5316] ? __pfx___se_sys_mount+0x10/0x10 [ 72.654447][ T5316] ? exc_page_fault+0x590/0x8b0 [ 72.656983][ T5316] ? __x64_sys_mount+0x20/0xc0 [ 72.659435][ T5316] do_syscall_64+0xf3/0x230 [ 72.661841][ T5316] ? clear_bhb_loop+0x35/0x90 [ 72.664358][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.668003][ T5316] RIP: 0033:0x7fad4f7874ca [ 72.681078][ T5316] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.689780][ T5316] RSP: 002b:00007fad5061ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.702677][ T5316] RAX: ffffffffffffffda RBX: 00007fad5061aef0 RCX: 00007fad4f7874ca [ 72.705926][ T5316] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 00007fad5061aeb0 [ 72.709169][ T5316] RBP: 0000000020000100 R08: 00007fad5061aef0 R09: 0000000000004004 [ 72.722293][ T5316] R10: 0000000000004004 R11: 0000000000000246 R12: 0000000020000040 [ 72.725155][ T5316] R13: 00007fad5061aeb0 R14: 0000000000000316 R15: 0000000020000240 [ 72.728847][ T5316] [ 72.731530][ T5316] Modules linked in: [ 72.736499][ T5316] ---[ end trace 0000000000000000 ]--- [ 72.833942][ T5316] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 72.836728][ T5316] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 54 14 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 72.861392][ T5316] RSP: 0018:ffffc9000d1bf400 EFLAGS: 00010202 [ 72.863856][ T5316] RAX: 1ffff92001a37e9f RBX: ffffc9000d1bf4f8 RCX: 0000000000100000 [ 72.867564][ T5316] RDX: ffffc9000eb1a000 RSI: 00000000000020a4 RDI: ffffc9000d1bf4f0 [ 72.888490][ T5316] RBP: 0000000000000000 R08: ffffffff82830e5f R09: 0000000000000000 [ 72.892884][ T5316] R10: ffffc9000d1bf4e0 R11: fffff52001a37ea3 R12: ffffc9000d1bf4e0 [ 72.896120][ T5316] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 72.899410][ T5316] FS: 00007fad5061b6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 72.919722][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.926273][ T5316] CR2: 000055711669aaf0 CR3: 0000000043348000 CR4: 0000000000352ef0 [ 72.940260][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.948524][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.958037][ T5316] Kernel panic - not syncing: Fatal exception [ 72.961172][ T5316] Kernel Offset: disabled [ 72.962760][ T5316] Rebooting in 86400 seconds..