program: syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31342c636f6465706167653d63703836362c00b98ca84a82894a44d230d85781d07b941c527aeeede9ffdeae490b216650602e9c2958dafbc442834d0c8d457de56e510ec8bdd0461f18ca158d9b4874283995508025489486ff72fe3e8375536e15ce54fbb90c0ffc51888e49e205952f538430ec33160206e38a404836"], 0x1, 0x27f, &(0x7f0000000700)="$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") perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xdd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x3}, 0x10e170, 0x0, 0x1, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$l2tp(0x2, 0x2, 0x73) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) [ 73.800426][ T5304] Bluetooth: hci0: command tx timeout [ 73.881747][ T5319] loop0: detected capacity change from 0 to 64 [ 73.906854][ T5319] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 73.911172][ T5319] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 73.913997][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 73.917642][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.921361][ T5319] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 73.923313][ T5319] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 17 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 73.930713][ T5319] RSP: 0018:ffffc9000d407400 EFLAGS: 00010202 [ 73.933099][ T5319] RAX: 1ffff92001a80e9f RBX: ffffc9000d4074f8 RCX: 0000000000100000 [ 73.936074][ T5319] RDX: ffffc9000e6d2000 RSI: 0000000000001d17 RDI: ffffc9000d4074f0 [ 73.939097][ T5319] RBP: 0000000000000000 R08: ffffffff8283001f R09: 0000000000000000 [ 73.942137][ T5319] R10: ffffc9000d4074e0 R11: fffff52001a80ea3 R12: ffffc9000d4074e0 [ 73.944991][ T5319] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 73.948109][ T5319] FS: 00007fab094d86c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 73.951381][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.953627][ T5319] CR2: 00007fab08769ae0 CR3: 00000000530e8000 CR4: 0000000000352ef0 [ 73.956644][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.959665][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.962672][ T5319] Call Trace: [ 73.963914][ T5319] [ 73.965090][ T5319] ? __die_body+0x5f/0xb0 [ 73.966860][ T5319] ? die_addr+0xb0/0xe0 [ 73.968387][ T5319] ? exc_general_protection+0x3dd/0x5d0 [ 73.970525][ T5319] ? hfs_get_block+0x26f/0xb60 [ 73.972317][ T5319] ? asm_exc_general_protection+0x26/0x30 [ 73.974743][ T5319] ? hfs_get_block+0x3bf/0xb60 [ 73.977074][ T5319] ? hfs_find_init+0x72/0x1f0 [ 73.978999][ T5319] hfs_get_block+0x4f4/0xb60 [ 73.980717][ T5319] ? __pfx_hfs_get_block+0x10/0x10 [ 73.982617][ T5319] ? _raw_spin_unlock+0x28/0x50 [ 73.984444][ T5319] ? create_empty_buffers+0x471/0x530 [ 73.986585][ T5319] block_read_full_folio+0x3ee/0xae0 [ 73.988727][ T5319] ? __pfx_hfs_get_block+0x10/0x10 [ 73.990625][ T5319] ? __pfx_block_read_full_folio+0x10/0x10 [ 73.992916][ T5319] filemap_read_folio+0x148/0x3b0 [ 73.994767][ T5319] ? __pfx_hfs_read_folio+0x10/0x10 [ 73.996851][ T5319] ? __pfx_filemap_read_folio+0x10/0x10 [ 73.998939][ T5319] ? __filemap_get_folio+0x848/0x940 [ 74.001139][ T5319] ? hfs_btree_open+0x4cb/0xf40 [ 74.002871][ T5319] do_read_cache_folio+0x373/0x5b0 [ 74.004841][ T5319] ? __pfx_hfs_read_folio+0x10/0x10 [ 74.006757][ T5319] ? do_raw_spin_unlock+0x58/0x8b0 [ 74.008692][ T5319] read_cache_page+0x5b/0x170 [ 74.010445][ T5319] hfs_btree_open+0x506/0xf40 [ 74.012214][ T5319] hfs_mdb_get+0x1443/0x21b0 [ 74.014051][ T5319] ? __pfx_hfs_mdb_get+0x10/0x10 [ 74.015859][ T5319] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 74.017870][ T5319] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 74.019907][ T5319] ? __raw_spin_lock_init+0x45/0x100 [ 74.021834][ T5319] hfs_fill_super+0x38c/0x6b0 [ 74.023606][ T5319] ? __pfx_hfs_fill_super+0x10/0x10 [ 74.025510][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 74.027406][ T5319] ? sb_set_blocksize+0x98/0xf0 [ 74.029273][ T5319] ? setup_bdev_super+0x4e6/0x5d0 [ 74.031091][ T5319] get_tree_bdev_flags+0x48c/0x5c0 [ 74.032934][ T5319] ? __pfx_hfs_fill_super+0x10/0x10 [ 74.034836][ T5319] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 74.036947][ T5319] ? apparmor_capable+0x13b/0x1b0 [ 74.038797][ T5319] vfs_get_tree+0x90/0x2b0 [ 74.040398][ T5319] do_new_mount+0x2be/0xb40 [ 74.042086][ T5319] ? __pfx_do_new_mount+0x10/0x10 [ 74.043976][ T5319] __se_sys_mount+0x2d6/0x3c0 [ 74.045800][ T5319] ? __pfx___se_sys_mount+0x10/0x10 [ 74.047654][ T5319] ? exc_page_fault+0x590/0x8b0 [ 74.049537][ T5319] ? __x64_sys_mount+0x20/0xc0 [ 74.051318][ T5319] do_syscall_64+0xf3/0x230 [ 74.053084][ T5319] ? clear_bhb_loop+0x35/0x90 [ 74.054912][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.057226][ T5319] RIP: 0033:0x7fab087874ba [ 74.058925][ T5319] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.066132][ T5319] RSP: 002b:00007fab094d7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.069233][ T5319] RAX: ffffffffffffffda RBX: 00007fab094d7ef0 RCX: 00007fab087874ba [ 74.072022][ T5319] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 00007fab094d7eb0 [ 74.074724][ T5319] RBP: 0000000020000240 R08: 00007fab094d7ef0 R09: 0000000000000000 [ 74.077442][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000280 [ 74.080155][ T5319] R13: 00007fab094d7eb0 R14: 000000000000027f R15: 0000000020000380 [ 74.083003][ T5319] [ 74.084105][ T5319] Modules linked in: [ 74.085811][ T5319] ---[ end trace 0000000000000000 ]--- [ 74.102982][ T5319] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 74.105055][ T5319] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 17 84 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 74.113394][ T5319] RSP: 0018:ffffc9000d407400 EFLAGS: 00010202 [ 74.115716][ T5319] RAX: 1ffff92001a80e9f RBX: ffffc9000d4074f8 RCX: 0000000000100000 [ 74.118649][ T5319] RDX: ffffc9000e6d2000 RSI: 0000000000001d17 RDI: ffffc9000d4074f0 [ 74.122328][ T5319] RBP: 0000000000000000 R08: ffffffff8283001f R09: 0000000000000000 [ 74.125336][ T5319] R10: ffffc9000d4074e0 R11: fffff52001a80ea3 R12: ffffc9000d4074e0 [ 74.128232][ T5319] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 74.131708][ T5319] FS: 00007fab094d86c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 74.134863][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.137128][ T5319] CR2: 000056392e58bb10 CR3: 00000000530e8000 CR4: 0000000000352ef0 [ 74.140160][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.143095][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.145891][ T5319] Kernel panic - not syncing: Fatal exception [ 74.148306][ T5319] Kernel Offset: disabled [ 74.149946][ T5319] Rebooting in 86400 seconds..