program: fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000f40)={[{@dir_umask={'dir_umask', 0x3d, 0x9}}, {@type={'type', 0x3d, "7763e6ef"}}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@uid={'uid', 0x3d, r0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0x30b, &(0x7f0000000840)="$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") chdir(&(0x7f00000001c0)='./file0\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101002, 0x4) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) [ 81.737220][ T790] cfg80211: failed to load regulatory.db [ 81.746034][ T49] Bluetooth: hci0: command tx timeout [ 81.751074][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.754162][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.821956][ T5324] loop0: detected capacity change from 0 to 64 [ 81.849125][ T5324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 81.853932][ T5324] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 81.857168][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 81.860969][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.864895][ T5324] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 81.866946][ T5324] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 02 82 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 81.873987][ T5324] RSP: 0018:ffffc9000d3df400 EFLAGS: 00010202 [ 81.876253][ T5324] RAX: 1ffff92001a7be9f RBX: ffffc9000d3df4f8 RCX: 0000000000100000 [ 81.879168][ T5324] RDX: ffffc9000e892000 RSI: 0000000000001e5d RDI: ffffc9000d3df4f0 [ 81.881901][ T5324] RBP: 0000000000000000 R08: ffffffff82a848ff R09: 0000000000000000 [ 81.884719][ T5324] R10: ffffc9000d3df4e0 R11: fffff52001a7bea3 R12: ffffc9000d3df4e0 [ 81.887656][ T5324] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 81.890631][ T5324] FS: 00007f9f776246c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 81.893714][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.896027][ T5324] CR2: 00007f9f76770f20 CR3: 0000000040392000 CR4: 0000000000352ef0 [ 81.898893][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.901688][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.904815][ T5324] Call Trace: [ 81.906130][ T5324] [ 81.907312][ T5324] ? __die_body+0x5f/0xb0 [ 81.908910][ T5324] ? die_addr+0xb0/0xe0 [ 81.910445][ T5324] ? exc_general_protection+0x3dd/0x5d0 [ 81.912704][ T5324] ? asm_exc_general_protection+0x26/0x30 [ 81.914860][ T5324] ? hfs_get_block+0x3bf/0xb60 [ 81.916661][ T5324] ? hfs_find_init+0x72/0x1f0 [ 81.918378][ T5324] hfs_get_block+0x4f4/0xb60 [ 81.919978][ T5324] ? __pfx_hfs_get_block+0x10/0x10 [ 81.922017][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 81.923988][ T5324] ? create_empty_buffers+0x471/0x530 [ 81.926082][ T5324] block_read_full_folio+0x3ee/0xae0 [ 81.928200][ T5324] ? __pfx_hfs_get_block+0x10/0x10 [ 81.930197][ T5324] ? __pfx_block_read_full_folio+0x10/0x10 [ 81.932545][ T5324] filemap_read_folio+0x148/0x3b0 [ 81.934580][ T5324] ? __pfx_hfs_read_folio+0x10/0x10 [ 81.936667][ T5324] ? __pfx_filemap_read_folio+0x10/0x10 [ 81.938887][ T5324] ? __filemap_get_folio+0x9d2/0xb40 [ 81.940955][ T5324] ? hfs_btree_open+0x4cb/0xf40 [ 81.942890][ T5324] do_read_cache_folio+0x373/0x5b0 [ 81.944839][ T5324] ? __pfx_hfs_read_folio+0x10/0x10 [ 81.946679][ T5324] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.948652][ T5324] read_cache_page+0x5b/0x170 [ 81.950541][ T5324] hfs_btree_open+0x506/0xf40 [ 81.952248][ T5324] hfs_mdb_get+0x1492/0x2200 [ 81.954077][ T5324] ? __pfx_hfs_mdb_get+0x10/0x10 [ 81.956090][ T5324] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 81.958528][ T5324] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 81.960875][ T5324] ? __raw_spin_lock_init+0x45/0x100 [ 81.962965][ T5324] hfs_fill_super+0x38f/0x710 [ 81.965296][ T5324] ? __pfx_hfs_fill_super+0x10/0x10 [ 81.967739][ T5324] ? do_raw_spin_lock+0x14f/0x370 [ 81.970191][ T5324] ? sb_set_blocksize+0x98/0xf0 [ 81.972606][ T5324] ? setup_bdev_super+0x4e6/0x5d0 [ 81.974852][ T5324] get_tree_bdev_flags+0x48c/0x5c0 [ 81.977114][ T5324] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 81.979838][ T5324] ? __pfx_hfs_fill_super+0x10/0x10 [ 81.982351][ T5324] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 81.984967][ T5324] ? apparmor_capable+0x13b/0x1b0 [ 81.987034][ T5324] vfs_get_tree+0x90/0x2b0 [ 81.988667][ T5324] do_new_mount+0x2be/0xb40 [ 81.990517][ T5324] ? __pfx_do_new_mount+0x10/0x10 [ 81.992535][ T5324] __se_sys_mount+0x2d6/0x3c0 [ 81.994508][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 81.996440][ T5324] ? exc_page_fault+0x590/0x8b0 [ 81.998415][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 82.000439][ T5324] do_syscall_64+0xf3/0x230 [ 82.002377][ T5324] ? clear_bhb_loop+0x35/0x90 [ 82.004280][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.006315][ T5324] RIP: 0033:0x7f9f7678e90a [ 82.008098][ T5324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.015286][ T5324] RSP: 002b:00007f9f77623e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.018577][ T5324] RAX: ffffffffffffffda RBX: 00007f9f77623ef0 RCX: 00007f9f7678e90a [ 82.021542][ T5324] RDX: 0000200000001600 RSI: 0000200000000040 RDI: 00007f9f77623eb0 [ 82.024594][ T5324] RBP: 0000200000001600 R08: 00007f9f77623ef0 R09: 0000000002000000 [ 82.027367][ T5324] R10: 0000000002000000 R11: 0000000000000246 R12: 0000200000000040 [ 82.030330][ T5324] R13: 00007f9f77623eb0 R14: 000000000000030b R15: 0000200000000f40 [ 82.033490][ T5324] [ 82.034736][ T5324] Modules linked in: [ 82.036612][ T5324] ---[ end trace 0000000000000000 ]--- [ 82.043404][ T5324] RIP: 0010:hfs_find_init+0x72/0x1f0 [ 82.045347][ T5324] Code: d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 02 82 ff 48 c7 03 00 00 00 00 48 89 2c 24 4c 8d 75 40 4d 89 f7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 10 01 00 00 41 8b 06 8d 7c 00 04 be c0 [ 82.052252][ T5324] RSP: 0018:ffffc9000d3df400 EFLAGS: 00010202 [ 82.055000][ T5324] RAX: 1ffff92001a7be9f RBX: ffffc9000d3df4f8 RCX: 0000000000100000 [ 82.057878][ T5324] RDX: ffffc9000e892000 RSI: 0000000000001e5d RDI: ffffc9000d3df4f0 [ 82.060835][ T5324] RBP: 0000000000000000 R08: ffffffff82a848ff R09: 0000000000000000 [ 82.064387][ T5324] R10: ffffc9000d3df4e0 R11: fffff52001a7bea3 R12: ffffc9000d3df4e0 [ 82.067603][ T5324] R13: dffffc0000000000 R14: 0000000000000040 R15: 0000000000000008 [ 82.071120][ T5324] FS: 00007f9f776246c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 82.077226][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.080845][ T5324] CR2: 00007f9f76770f20 CR3: 0000000040392000 CR4: 0000000000352ef0 [ 82.085601][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.089793][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.094627][ T5324] Kernel panic - not syncing: Fatal exception [ 82.098016][ T5324] Kernel Offset: disabled [ 82.099837][ T5324] Rebooting in 86400 seconds..