WARNING: The mand mount option has been deprecated and and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] CPU: 1 PID: 5498 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-gc664e16bb1ba #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:hfsplus_rename_cat+0x563/0x1240 fs/hfsplus/catalog.c:480 Code: 84 24 60 01 00 00 66 89 44 24 42 48 8b 44 24 60 48 83 c0 40 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 e4 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffffc90004aef858 EFLAGS: 00010212 RAX: dffffc0000000000 RBX: 00000000fffffffb RCX: ffffffff8266f69a RDX: 0000000000000008 RSI: ffffffff82667f37 RDI: 0000000000000005 RBP: ffffc90004aefc90 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 742cf1e1742cf1e1 R12: ffff8880228a9cb0 R13: ffffc90004aef8f8 R14: ffff88804d452000 R15: 1ffff9200095df19 FS: 00007f5f99b496c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5f98fa8000 CR3: 000000002210c000 CR4: 0000000000350ef0 Call Trace: hfsplus_unlink+0x492/0x7f0 fs/hfsplus/dir.c:376 vfs_unlink+0x2fe/0x910 fs/namei.c:4334 do_unlinkat+0x5c0/0x750 fs/namei.c:4398 __do_sys_unlink fs/namei.c:4446 [inline] __se_sys_unlink fs/namei.c:4444 [inline] __x64_sys_unlink+0xc8/0x110 fs/namei.c:4444 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd8/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f5f98e7cda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5f99b490c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 00007f5f98fabf80 RCX: 00007f5f98e7cda9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 RBP: 00007f5f98ec947a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f5f98fabf80 R15: 00007ffd0bd25398 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:hfsplus_rename_cat+0x563/0x1240 fs/hfsplus/catalog.c:480 Code: 84 24 60 01 00 00 66 89 44 24 42 48 8b 44 24 60 48 83 c0 40 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 e4 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffffc90004aef858 EFLAGS: 00010212 RAX: dffffc0000000000 RBX: 00000000fffffffb RCX: ffffffff8266f69a RDX: 0000000000000008 RSI: ffffffff82667f37 RDI: 0000000000000005 RBP: ffffc90004aefc90 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 742cf1e1742cf1e1 R12: ffff8880228a9cb0 R13: ffffc90004aef8f8 R14: ffff88804d452000 R15: 1ffff9200095df19 FS: 00007f5f99b496c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5aa07fe440 CR3: 000000002210c000 CR4: 0000000000350ef0 ---------------- Code disassembly (best guess): 0: 84 24 60 test %ah,(%rax,%riz,2) 3: 01 00 add %eax,(%rax) 5: 00 66 89 add %ah,-0x77(%rsi) 8: 44 24 42 rex.R and $0x42,%al b: 48 8b 44 24 60 mov 0x60(%rsp),%rax 10: 48 83 c0 40 add $0x40,%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 10 mov %rax,0x10(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 e4 0a 00 00 jne 0xb18 34: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 3b: fc ff df 3e: 48 rex.W 3f: 8b .byte 0x8b