program: futex(0x0, 0x189, 0x2, 0x0, 0x0, 0x0) r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ed, &(0x7f0000000f80)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) [ 133.467213][ T48] Bluetooth: hci0: command tx timeout [ 133.654544][ T5342] loop0: detected capacity change from 0 to 1024 [ 133.667033][ T5342] hfsplus: (loop0): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only. [ 133.667053][ T5342] hfsplus: Run fsck.hfsplus to repair. [ 133.735766][ T5342] hfsplus: trying to free the freed bnode 1(1) [ 133.759916][ T5342] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 133.765094][ T5342] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 133.768787][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 133.772352][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.776467][ T5342] RIP: 0010:hfsplus_cat_write_inode+0xc4/0xb40 [ 133.779222][ T5342] Code: 51 4a 89 44 2b 59 66 42 c7 44 2b 61 f3 f3 42 c6 44 2b 63 f3 e8 3d 7b 0e ff 4d 8d 7c 24 28 4c 89 f8 48 c1 e8 03 48 89 44 24 38 <42> 80 3c 28 00 74 08 4c 89 ff e8 3d 14 81 ff 41 be 78 06 00 00 4c [ 133.786777][ T5342] RSP: 0018:ffffc9000f337880 EFLAGS: 00010206 [ 133.789120][ T5342] RAX: 0000000000000005 RBX: 1ffff92001e66f18 RCX: 0000000000100000 [ 133.792153][ T5342] RDX: ffffc90020001000 RSI: 0000000000002ff2 RDI: 0000000000002ff3 [ 133.795184][ T5342] RBP: ffffc9000f337c30 R08: ffffc9000f3377e7 R09: 0000000000000000 [ 133.798260][ T5342] R10: fffff52001e66f28 R11: fffff52001e66efd R12: 0000000000000000 [ 133.801313][ T5342] R13: dffffc0000000000 R14: ffff8880543826d8 R15: 0000000000000028 [ 133.804383][ T5342] FS: 00007f6d0fb186c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000 [ 133.808289][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.811183][ T5342] CR2: 00007fcc96980000 CR3: 0000000013e41000 CR4: 0000000000352ef0 [ 133.814634][ T5342] Call Trace: [ 133.816169][ T5342] [ 133.817525][ T5342] ? __pfx_hfsplus_cat_write_inode+0x10/0x10 [ 133.820222][ T5342] ? __pfx_hlock_conflict+0x10/0x10 [ 133.822604][ T5342] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 133.825307][ T5342] ? rcu_is_watching+0x16/0xb0 [ 133.827443][ T5342] ? __mark_inode_dirty+0x4e7/0x13b0 [ 133.829771][ T5342] hfsplus_unlink+0x5e0/0x8e0 [ 133.831936][ T5342] ? __pfx_hfsplus_unlink+0x10/0x10 [ 133.834286][ T5342] ? down_write+0x166/0x200 [ 133.836412][ T5342] ? try_break_deleg+0x5e/0x190 [ 133.838624][ T5342] vfs_unlink+0x27b/0x6d0 [ 133.840541][ T5342] filename_unlinkat+0x3cd/0x610 [ 133.842728][ T5342] ? __pfx_filename_unlinkat+0x10/0x10 [ 133.845052][ T5342] ? do_getname+0x151/0x250 [ 133.847171][ T5342] __se_sys_unlinkat+0x83/0x1a0 [ 133.849374][ T5342] do_syscall_64+0x166/0x520 [ 133.851453][ T5342] ? trace_irq_disable+0x3b/0x140 [ 133.853561][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.856108][ T5342] ? clear_bhb_loop+0x70/0xc0 [ 133.858201][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.860441][ T5342] RIP: 0033:0x7f6d0eb9f559 [ 133.862399][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.870587][ T5342] RSP: 002b:00007f6d0fb17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 133.874204][ T5342] RAX: ffffffffffffffda RBX: 00007f6d0ee25fa0 RCX: 00007f6d0eb9f559 [ 133.877568][ T5342] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 133.880495][ T5342] RBP: 00007f6d0ec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.883137][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.886171][ T5342] R13: 00007f6d0ee26038 R14: 00007f6d0ee25fa0 R15: 00007fffeb2c6698 [ 133.889603][ T5342] [ 133.890972][ T5342] Modules linked in: [ 133.893648][ T5342] ---[ end trace 0000000000000000 ]--- [ 133.934623][ T5342] RIP: 0010:hfsplus_cat_write_inode+0xc4/0xb40 [ 133.934655][ T5342] Code: 51 4a 89 44 2b 59 66 42 c7 44 2b 61 f3 f3 42 c6 44 2b 63 f3 e8 3d 7b 0e ff 4d 8d 7c 24 28 4c 89 f8 48 c1 e8 03 48 89 44 24 38 <42> 80 3c 28 00 74 08 4c 89 ff e8 3d 14 81 ff 41 be 78 06 00 00 4c [ 133.934667][ T5342] RSP: 0018:ffffc9000f337880 EFLAGS: 00010206 [ 133.934679][ T5342] RAX: 0000000000000005 RBX: 1ffff92001e66f18 RCX: 0000000000100000 [ 133.934688][ T5342] RDX: ffffc90020001000 RSI: 0000000000002ff2 RDI: 0000000000002ff3 [ 133.934696][ T5342] RBP: ffffc9000f337c30 R08: ffffc9000f3377e7 R09: 0000000000000000 [ 133.934704][ T5342] R10: fffff52001e66f28 R11: fffff52001e66efd R12: 0000000000000000 [ 133.934712][ T5342] R13: dffffc0000000000 R14: ffff8880543826d8 R15: 0000000000000028 [ 133.934720][ T5342] FS: 00007f6d0fb186c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000 [ 133.934729][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.934737][ T5342] CR2: 00005584fe3b3590 CR3: 0000000013e41000 CR4: 0000000000352ef0 [ 133.934777][ T5342] Kernel panic - not syncing: Fatal exception [ 133.977807][ T5342] Kernel Offset: disabled [ 133.979523][ T5342] Rebooting in 86400 seconds..