program: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000640)='./file1\x00', 0x120c80c, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000c80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) open(0x0, 0x64842, 0x389b0d52417bb201) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2f) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x105) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x400) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x675, 0x200) ioctl$BLKPG(r2, 0x1269, 0xffffffffffffffff) [ 73.936484][ T44] Bluetooth: hci0: command tx timeout [ 74.022459][ T5317] loop0: detected capacity change from 0 to 1024 [ 74.193110][ T5317] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 74.198195][ T5317] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 74.201894][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.205733][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.210027][ T5317] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 74.212739][ T5317] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 b6 cd 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 99 cd 81 ff 4d 8b 36 49 8d 7e 90 [ 74.220901][ T5317] RSP: 0018:ffffc9000e4d7420 EFLAGS: 00010202 [ 74.223417][ T5317] RAX: 0000000000000001 RBX: fffff52001c9aea4 RCX: 0000000000100000 [ 74.226316][ T5317] RDX: ffffc9000ee69000 RSI: 000000000000144c RDI: 000000000000144d [ 74.229659][ T5317] RBP: ffffc9000e4d78f8 R08: ffffea00014073f7 R09: 1ffffd4000280e7e [ 74.233023][ T5317] R10: dffffc0000000000 R11: fffff94000280e7f R12: dffffc0000000000 [ 74.236476][ T5317] R13: ffff888043aca8a8 R14: 0000000000000008 R15: ffff888043acb538 [ 74.239883][ T5317] FS: 00007fa6749776c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 74.243708][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.246598][ T5317] CR2: 00007ffedcf57bcc CR3: 0000000012eb8000 CR4: 0000000000352ef0 [ 74.250085][ T5317] Call Trace: [ 74.251570][ T5317] [ 74.252902][ T5317] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 74.255329][ T5317] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 74.257974][ T5317] ? rcu_is_watching+0x15/0xb0 [ 74.259990][ T5317] ? __kasan_kmalloc+0x93/0xb0 [ 74.262063][ T5317] ? __kmalloc_cache_noprof+0x31c/0x660 [ 74.264315][ T5317] ? hfsplus_setxattr+0x10b/0x340 [ 74.266360][ T5317] hfsplus_setxattr+0x124/0x340 [ 74.268371][ T5317] hfsplus_trusted_setxattr+0x40/0x60 [ 74.270527][ T5317] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 74.273065][ T5317] __vfs_setxattr+0x43c/0x480 [ 74.274775][ T5317] __vfs_setxattr_noperm+0x12d/0x660 [ 74.277140][ T5317] vfs_setxattr+0x163/0x360 [ 74.279330][ T5317] ? __pfx_vfs_setxattr+0x10/0x10 [ 74.281559][ T5317] filename_setxattr+0x296/0x630 [ 74.283808][ T5317] ? __pfx_filename_setxattr+0x10/0x10 [ 74.286208][ T5317] ? do_getname+0x151/0x250 [ 74.288228][ T5317] path_setxattrat+0x3eb/0x440 [ 74.290364][ T5317] ? __pfx_path_setxattrat+0x10/0x10 [ 74.292548][ T5317] ? do_futex+0x333/0x420 [ 74.294483][ T5317] ? rcu_is_watching+0x15/0xb0 [ 74.296665][ T5317] __x64_sys_setxattr+0xbc/0xe0 [ 74.298839][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.301534][ T5317] do_syscall_64+0x15f/0xf80 [ 74.303555][ T5317] ? trace_irq_disable+0x3b/0x140 [ 74.305752][ T5317] ? clear_bhb_loop+0x40/0x90 [ 74.307837][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.310402][ T5317] RIP: 0033:0x7fa673b9cdd9 [ 74.312254][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.320685][ T5317] RSP: 002b:00007fa674976fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 74.324217][ T5317] RAX: ffffffffffffffda RBX: 00007fa673e15fa0 RCX: 00007fa673b9cdd9 [ 74.327606][ T5317] RDX: 0000200000001400 RSI: 00002000000001c0 RDI: 0000200000000380 [ 74.330945][ T5317] RBP: 00007fa673c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.334568][ T5317] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 74.338035][ T5317] R13: 00007fa673e16038 R14: 00007fa673e15fa0 R15: 00007fffa9902298 [ 74.341673][ T5317] [ 74.343135][ T5317] Modules linked in: [ 74.345333][ T5317] ---[ end trace 0000000000000000 ]--- [ 74.370864][ T5317] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 74.374565][ T5317] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 b6 cd 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 99 cd 81 ff 4d 8b 36 49 8d 7e 90 [ 74.383269][ T5317] RSP: 0018:ffffc9000e4d7420 EFLAGS: 00010202 [ 74.387112][ T5317] RAX: 0000000000000001 RBX: fffff52001c9aea4 RCX: 0000000000100000 [ 74.390657][ T5317] RDX: ffffc9000ee69000 RSI: 000000000000144c RDI: 000000000000144d [ 74.394588][ T5317] RBP: ffffc9000e4d78f8 R08: ffffea00014073f7 R09: 1ffffd4000280e7e [ 74.398235][ T5317] R10: dffffc0000000000 R11: fffff94000280e7f R12: dffffc0000000000 [ 74.401628][ T5317] R13: ffff888043aca8a8 R14: 0000000000000008 R15: ffff888043acb538 [ 74.405962][ T5317] FS: 00007fa6749776c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 74.409727][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.413014][ T5317] CR2: 00007fa66fff50a8 CR3: 0000000012eb8000 CR4: 0000000000352ef0 [ 74.416518][ T5317] Kernel panic - not syncing: Fatal exception [ 74.419766][ T5317] Kernel Offset: disabled [ 74.421792][ T5317] Rebooting in 86400 seconds..