program: statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x200000, &(0x7f0000000740)={[{@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid={'uid', 0x3d, r0}}, {@umask={'umask', 0x3d, 0xfff}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x8, 0x336, &(0x7f0000000800)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) utimensat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) [ 74.698013][ T4688] Bluetooth: hci0: command tx timeout [ 74.752845][ T5342] loop0: detected capacity change from 0 to 64 [ 74.803948][ T5342] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 74.810024][ T5342] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 74.813445][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 74.818530][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.823169][ T5342] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 74.825634][ T5342] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 38 af 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 74.834861][ T5342] RSP: 0018:ffffc9000d697588 EFLAGS: 00010202 [ 74.837735][ T5342] RAX: 1ffff92001ad2ecf RBX: 0000000000000000 RCX: 0000000000100000 [ 74.841531][ T5342] RDX: ffffc9000e12a000 RSI: 0000000000001fa7 RDI: ffffc9000d697670 [ 74.845915][ T5342] RBP: 0000000000000040 R08: ffffc9000d697697 R09: 0000000000000000 [ 74.850086][ T5342] R10: ffffc9000d697660 R11: fffff52001ad2ed3 R12: ffff88803f92c640 [ 74.854184][ T5342] R13: dffffc0000000000 R14: ffffc9000d697660 R15: 0000000000000008 [ 74.858373][ T5342] FS: 00007f943ac656c0(0000) GS:ffff88808d21a000(0000) knlGS:0000000000000000 [ 74.862525][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.865347][ T5342] CR2: 00007f82ace39000 CR3: 0000000042f22000 CR4: 0000000000352ef0 [ 74.868828][ T5342] Call Trace: [ 74.870280][ T5342] [ 74.871628][ T5342] hfs_get_block+0x51b/0xbd0 [ 74.873724][ T5342] ? __pfx_hfs_get_block+0x10/0x10 [ 74.876058][ T5342] block_read_full_folio+0x29c/0x830 [ 74.878525][ T5342] ? __pfx_hfs_get_block+0x10/0x10 [ 74.881233][ T5342] filemap_read_folio+0x114/0x380 [ 74.883796][ T5342] ? __pfx_hfs_read_folio+0x10/0x10 [ 74.886805][ T5342] ? __pfx_filemap_read_folio+0x10/0x10 [ 74.889702][ T5342] ? filemap_add_folio+0x1af/0x270 [ 74.892397][ T5342] do_read_cache_folio+0x350/0x590 [ 74.894295][ T5342] ? __pfx_hfs_read_folio+0x10/0x10 [ 74.896393][ T5342] read_cache_page+0x5d/0x170 [ 74.898282][ T5342] hfs_btree_open+0x55f/0x14f0 [ 74.900350][ T5342] ? hfs_mdb_get+0x1293/0x2080 [ 74.902255][ T5342] hfs_mdb_get+0x1327/0x2080 [ 74.904290][ T5342] ? __pfx_hfs_mdb_get+0x10/0x10 [ 74.906579][ T5342] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 74.909389][ T5342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.912277][ T5342] hfs_fill_super+0x37b/0x640 [ 74.914355][ T5342] ? __pfx_hfs_fill_super+0x10/0x10 [ 74.916708][ T5342] ? sb_set_blocksize+0x104/0x180 [ 74.919019][ T5342] ? setup_bdev_super+0x4c1/0x5b0 [ 74.921314][ T5342] get_tree_bdev_flags+0x40b/0x4d0 [ 74.923786][ T5342] ? __pfx_hfs_fill_super+0x10/0x10 [ 74.926528][ T5342] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 74.929445][ T5342] vfs_get_tree+0x8f/0x2b0 [ 74.931478][ T5342] do_new_mount+0x24a/0xa40 [ 74.933457][ T5342] __se_sys_mount+0x317/0x410 [ 74.935719][ T5342] ? __pfx___se_sys_mount+0x10/0x10 [ 74.937959][ T5342] ? do_syscall_64+0xbe/0x3b0 [ 74.939997][ T5342] ? __x64_sys_mount+0x20/0xc0 [ 74.942200][ T5342] do_syscall_64+0xfa/0x3b0 [ 74.944420][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.946704][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.949250][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 74.951098][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.953284][ T5342] RIP: 0033:0x7f9439d9014a [ 74.955207][ T5342] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.963971][ T5342] RSP: 002b:00007f943ac64e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.967638][ T5342] RAX: ffffffffffffffda RBX: 00007f943ac64ef0 RCX: 00007f9439d9014a [ 74.971062][ T5342] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 00007f943ac64eb0 [ 74.974584][ T5342] RBP: 0000200000000080 R08: 00007f943ac64ef0 R09: 0000000000200000 [ 74.978392][ T5342] R10: 0000000000200000 R11: 0000000000000246 R12: 0000200000000300 [ 74.982635][ T5342] R13: 00007f943ac64eb0 R14: 0000000000000336 R15: 0000200000000740 [ 74.987013][ T5342] [ 74.988820][ T5342] Modules linked in: [ 74.991833][ T5342] ---[ end trace 0000000000000000 ]--- [ 75.038510][ T5342] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 75.041584][ T5342] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 38 af 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 75.051627][ T5342] RSP: 0018:ffffc9000d697588 EFLAGS: 00010202 [ 75.054281][ T5342] RAX: 1ffff92001ad2ecf RBX: 0000000000000000 RCX: 0000000000100000 [ 75.059441][ T5342] RDX: ffffc9000e12a000 RSI: 0000000000001fa7 RDI: ffffc9000d697670 [ 75.063201][ T5342] RBP: 0000000000000040 R08: ffffc9000d697697 R09: 0000000000000000 [ 75.067512][ T5342] R10: ffffc9000d697660 R11: fffff52001ad2ed3 R12: ffff88803f92c640 [ 75.071920][ T5342] R13: dffffc0000000000 R14: ffffc9000d697660 R15: 0000000000000008 [ 75.077488][ T5342] FS: 00007f943ac656c0(0000) GS:ffff88808d21a000(0000) knlGS:0000000000000000 [ 75.082105][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.086611][ T5342] CR2: 0000556c91a7b660 CR3: 0000000042f22000 CR4: 0000000000352ef0 [ 75.090960][ T5342] Kernel panic - not syncing: Fatal exception [ 75.093917][ T5342] Kernel Offset: disabled [ 75.095752][ T5342] Rebooting in 86400 seconds..