program: syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x294, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) [ 75.095477][ T45] Bluetooth: hci0: command tx timeout [ 75.130971][ T5322] loop0: detected capacity change from 0 to 64 [ 75.217871][ T5322] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 75.223696][ T5322] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 75.227235][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) [ 75.231926][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.236260][ T5322] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 75.238489][ T5322] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 58 b0 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 75.246461][ T5322] RSP: 0018:ffffc9000fe37588 EFLAGS: 00010202 [ 75.248981][ T5322] RAX: 1ffff92001fc6ecf RBX: 0000000000000000 RCX: ffff88803e6f8000 [ 75.252256][ T5322] RDX: 0000000000000000 RSI: ffffc9000fe37660 RDI: ffffc9000fe37670 [ 75.255693][ T5322] RBP: 0000000000000040 R08: ffffc9000fe37697 R09: 0000000000000000 [ 75.259102][ T5322] R10: ffffc9000fe37660 R11: fffff52001fc6ed3 R12: ffff888041506640 [ 75.262503][ T5322] R13: dffffc0000000000 R14: ffffc9000fe37660 R15: 0000000000000008 [ 75.266306][ T5322] FS: 00007fb7ac5b46c0(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 [ 75.270252][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.272914][ T5322] CR2: 00007f0b29b909c0 CR3: 00000000434d6000 CR4: 0000000000352ef0 [ 75.276117][ T5322] Call Trace: [ 75.277525][ T5322] [ 75.278750][ T5322] hfs_get_block+0x51b/0xbd0 [ 75.280603][ T5322] ? __pfx_hfs_get_block+0x10/0x10 [ 75.282690][ T5322] block_read_full_folio+0x29c/0x830 [ 75.284842][ T5322] ? __pfx_hfs_get_block+0x10/0x10 [ 75.287207][ T5322] filemap_read_folio+0x117/0x380 [ 75.289354][ T5322] ? __pfx_hfs_read_folio+0x10/0x10 [ 75.291547][ T5322] ? __pfx_filemap_read_folio+0x10/0x10 [ 75.293808][ T5322] ? filemap_add_folio+0x1af/0x270 [ 75.296039][ T5322] do_read_cache_folio+0x350/0x590 [ 75.298215][ T5322] ? __pfx_hfs_read_folio+0x10/0x10 [ 75.300552][ T5322] read_cache_page+0x5d/0x170 [ 75.302721][ T5322] hfs_btree_open+0x55f/0x14f0 [ 75.304849][ T5322] ? hfs_mdb_get+0x1293/0x2080 [ 75.306981][ T5322] hfs_mdb_get+0x1327/0x2080 [ 75.309012][ T5322] ? __pfx_hfs_mdb_get+0x10/0x10 [ 75.311158][ T5322] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 75.313895][ T5322] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.316757][ T5322] hfs_fill_super+0x37b/0x640 [ 75.318830][ T5322] ? __pfx_hfs_fill_super+0x10/0x10 [ 75.321196][ T5322] ? sb_set_blocksize+0x104/0x180 [ 75.323500][ T5322] ? setup_bdev_super+0x4c1/0x5b0 [ 75.325846][ T5322] get_tree_bdev_flags+0x40e/0x4d0 [ 75.328191][ T5322] ? __pfx_hfs_fill_super+0x10/0x10 [ 75.330511][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.332997][ T5322] vfs_get_tree+0x92/0x2b0 [ 75.334911][ T5322] do_new_mount+0x24a/0xa40 [ 75.337017][ T5322] __se_sys_mount+0x317/0x410 [ 75.339048][ T5322] ? __pfx___se_sys_mount+0x10/0x10 [ 75.341364][ T5322] ? do_syscall_64+0xbe/0x3b0 [ 75.343586][ T5322] ? __x64_sys_mount+0x20/0xc0 [ 75.345833][ T5322] do_syscall_64+0xfa/0x3b0 [ 75.347819][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.349646][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.351877][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 75.353857][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.356330][ T5322] RIP: 0033:0x7fb7ab7900ca [ 75.358202][ T5322] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.365814][ T5322] RSP: 002b:00007fb7ac5b3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.369456][ T5322] RAX: ffffffffffffffda RBX: 00007fb7ac5b3ef0 RCX: 00007fb7ab7900ca [ 75.373009][ T5322] RDX: 0000200000002c80 RSI: 0000200000000000 RDI: 00007fb7ac5b3eb0 [ 75.376446][ T5322] RBP: 0000200000002c80 R08: 00007fb7ac5b3ef0 R09: 0000000000004490 [ 75.379754][ T5322] R10: 0000000000004490 R11: 0000000000000246 R12: 0000200000000000 [ 75.382971][ T5322] R13: 00007fb7ac5b3eb0 R14: 0000000000000294 R15: 0000200000002cc0 [ 75.386123][ T5322] [ 75.387487][ T5322] Modules linked in: [ 75.390148][ T5322] ---[ end trace 0000000000000000 ]--- [ 75.399244][ T5322] RIP: 0010:hfs_find_init+0x6a/0x1e0 [ 75.401948][ T5322] Code: 7e 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 58 b0 8a ff 49 c7 07 00 00 00 00 48 8d 6b 40 49 89 ef 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 0f 85 0c 01 00 00 8b 45 00 8d 3c 45 04 00 00 [ 75.411419][ T5322] RSP: 0018:ffffc9000fe37588 EFLAGS: 00010202 [ 75.413894][ T5322] RAX: 1ffff92001fc6ecf RBX: 0000000000000000 RCX: ffff88803e6f8000 [ 75.417789][ T5322] RDX: 0000000000000000 RSI: ffffc9000fe37660 RDI: ffffc9000fe37670 [ 75.421129][ T5322] RBP: 0000000000000040 R08: ffffc9000fe37697 R09: 0000000000000000 [ 75.424617][ T5322] R10: ffffc9000fe37660 R11: fffff52001fc6ed3 R12: ffff888041506640 [ 75.428651][ T5322] R13: dffffc0000000000 R14: ffffc9000fe37660 R15: 0000000000000008 [ 75.432076][ T5322] FS: 00007fb7ac5b46c0(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 [ 75.436643][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.439599][ T5322] CR2: 00007f0b29b909c0 CR3: 00000000434d6000 CR4: 0000000000352ef0 [ 75.443619][ T5322] Kernel panic - not syncing: Fatal exception [ 75.446767][ T5322] Kernel Offset: disabled [ 75.448794][ T5322] Rebooting in 86400 seconds..