program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000680)="$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") syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0xe08802, &(0x7f0000000180)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$eJzs3c1rHOcdB/DvrFay1gVHSWwnLYGKGNJSU1uycFqVQtweig+hBBcaCr0IW46F106QlaKE0qrv1x7yB6QHHQq9tNC7IYWe2h4KoTfRQwkUekkvurnM7Ky0trTKrixprebzMbPzzDyv89uZZzS7mA3wqXX1fJr3U+Tq+VdXy+2N9bn2xvrciTq7naRMN5JmZ5XiblJ8kFxJZ8lny511+aJfP+8tzV/78OONjzpbzXqpyjf2qjeYtXrJdJKxer3T+L7au963vd19vV4vbO0pto6wDNi5buBg1B7ssDZM9ce8boEnQdG5b+4wlZxMMln/HZB6dmgc7egO3lCzHAAAABxTT21mM6s5NepxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFSpDVWrTpLo5ueTtH9/f+Jel/q9LXGiMf8OO6PegAAAAAAAAAAcAA+v5nNrOZUkr+X2w863+y/WL2erl4/k7dzL4tZzoWsZiErWclyZpNM9TQ0sbqwsrI8O0DNS7vWvLS/8f9+f9UAAAAAAAAA4P/NT3O1+v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeGEUy1llVy+lueiqNZpLJJBNlubXkb930MVHstvP+0Y8DAAAAHsvkPuo8tZnNrOZUd/tBUT3zn62elyfzdu5mJUtZSTuLuVE/Q5dP/Y2N9bn2xvrcnY31uarj7z/o6LTzjf8MNYyqxXQ+e9i95+erEq3czFK150KuV4O5kUZVs/R8PZ6t5eFOflKOqfVKbcCR3ajXZWe/7vcpwkFoDFthqqo0vhWRmXpsZUNP7x2JT3x3mnv2NJvG1ic/p/foqXtIxZAxP9mtl+SXj8T8lX/99nsDNnMItiLRSBWJSz1n39mN9bmx9I158oU//u71W+27t2/dvHf+0E6jo/LoOTHXE4nn9j77nvBINIcsP1NF4szW9tV8K9/J+UzntSxnKT/IQlaymHpmzEJ9PpevUz1RSnZE6spDW6990kgm6velM4sOMqbpnKhSC3mxqnsqSynyZm5kMS9X/y5lNl/J5VzOfM87fKbvO1wdWzXTNoa76s99MduX+q/KmXqwesmfBy04vM4ttYzr0z1x7Z1zp6q83j3bUXpmgPvRkHNj83N1ouzjZ/u5bRyaRyMx2xOJZ/eOxG+qa+Ne++7t5VsLb/Vpf+2R7ZfGt9O/OMw789DK8+WZTNYzycNnR5n37NYs83C8JupvXDp5jR15Z6q8ouheqd/e5UotIz5flT67a0uXqrznduaN1SP/xz978h76eytv/mU08QRgSCe/dHKi9e/WX1vvt37eutV6dfKbJ7564oWJjP9p/GvNmbGXGi8Uf8j7+dH28z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB/99559/ZCu724vHui0T/rYBNF/UM+/co008oRDOMoE0Wy1n4wdrAtZ/THNUCi+yOCj9vO61eeiMM51omxJPWeHyfb50/9FnV+Ce27/x3ZDAUclosrd966eO+dd7+8dGfhjcU3Fu+OX748PzN/+eW5izeX2osznddRjxI4DNt/D4x6JAAAAAAAAAAAAMCgjuJ/GvR0Nz3CQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOqavn0xxPkdmZCzPl9sb6XLtcuuntks0kjUZS/DApPkiupLNkqqe5ol8/7y3NX/vw442Ptttqdss39qo3mLV6yXSSsXq9w8T+2rver72BFVtHWAbsXDdwMGr/CwAA//8xgggQ") r0 = userfaultfd(0x1) r1 = fanotify_init(0x10, 0x800) fanotify_mark(r1, 0x49c, 0x40000029, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x20}) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) [ 83.957448][ T4654] Bluetooth: hci0: command tx timeout [ 84.116489][ T5324] loop0: detected capacity change from 0 to 1024 [ 84.307686][ T5324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 84.312795][ T5324] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 84.316279][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.319853][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.324288][ T5324] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 84.327226][ T5324] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 f6 cc 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 d9 cc 81 ff 4d 8b 36 49 8d 7e 90 [ 84.335125][ T5324] RSP: 0018:ffffc9000ee8f420 EFLAGS: 00010202 [ 84.337723][ T5324] RAX: 0000000000000001 RBX: fffff52001dd1ea4 RCX: 0000000000100000 [ 84.341116][ T5324] RDX: ffffc9000f6a1000 RSI: 00000000000015d6 RDI: 00000000000015d7 [ 84.344828][ T5324] RBP: ffffc9000ee8f8f8 R08: ffffea00004cf237 R09: 1ffffd4000099e46 [ 84.348396][ T5324] R10: dffffc0000000000 R11: fffff94000099e47 R12: dffffc0000000000 [ 84.351998][ T5324] R13: ffff8880421128a8 R14: 0000000000000008 R15: ffff888042113538 [ 84.355432][ T5324] FS: 00007f952509c6c0(0000) GS:ffff88808c87f000(0000) knlGS:0000000000000000 [ 84.359422][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.362226][ T5324] CR2: 00007fd9cae51000 CR3: 0000000036789000 CR4: 0000000000352ef0 [ 84.365721][ T5324] Call Trace: [ 84.367177][ T5324] [ 84.368504][ T5324] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 84.370932][ T5324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 84.373564][ T5324] ? rcu_is_watching+0x15/0xb0 [ 84.375695][ T5324] ? __kasan_kmalloc+0x93/0xb0 [ 84.377819][ T5324] ? __kmalloc_cache_noprof+0x31c/0x660 [ 84.380272][ T5324] ? hfsplus_setxattr+0x10b/0x340 [ 84.382553][ T5324] hfsplus_setxattr+0x124/0x340 [ 84.384732][ T5324] hfsplus_security_setxattr+0x40/0x60 [ 84.387148][ T5324] ? __pfx_hfsplus_security_setxattr+0x10/0x10 [ 84.389845][ T5324] __vfs_setxattr+0x43c/0x480 [ 84.391954][ T5324] __vfs_setxattr_noperm+0x12d/0x660 [ 84.394297][ T5324] vfs_setxattr+0x163/0x360 [ 84.396356][ T5324] ? __pfx_vfs_setxattr+0x10/0x10 [ 84.398513][ T5324] filename_setxattr+0x296/0x630 [ 84.400523][ T5324] ? __pfx_filename_setxattr+0x10/0x10 [ 84.402826][ T5324] ? do_getname+0x151/0x250 [ 84.404784][ T5324] path_setxattrat+0x3eb/0x440 [ 84.406807][ T5324] ? __pfx_path_setxattrat+0x10/0x10 [ 84.409048][ T5324] ? do_futex+0x395/0x420 [ 84.410970][ T5324] ? rcu_is_watching+0x15/0xb0 [ 84.413210][ T5324] __x64_sys_setxattr+0xbc/0xe0 [ 84.415337][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.417884][ T5324] do_syscall_64+0x15f/0xf80 [ 84.419945][ T5324] ? trace_irq_disable+0x3b/0x140 [ 84.422093][ T5324] ? clear_bhb_loop+0x40/0x90 [ 84.424503][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.427044][ T5324] RIP: 0033:0x7f952419ce59 [ 84.428941][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.437442][ T5324] RSP: 002b:00007f952509bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 84.440883][ T5324] RAX: ffffffffffffffda RBX: 00007f9524415fa0 RCX: 00007f952419ce59 [ 84.444262][ T5324] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 84.447646][ T5324] RBP: 00007f9524232d6f R08: 0000000000000000 R09: 0000000000000000 [ 84.451078][ T5324] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 84.454504][ T5324] R13: 00007f9524416038 R14: 00007f9524415fa0 R15: 00007ffdf14a0d78 [ 84.457959][ T5324] [ 84.459314][ T5324] Modules linked in: [ 84.461525][ T5324] ---[ end trace 0000000000000000 ]--- [ 84.475801][ T5324] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 84.478823][ T5324] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 f6 cc 81 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 d9 cc 81 ff 4d 8b 36 49 8d 7e 90 [ 84.489275][ T5324] RSP: 0018:ffffc9000ee8f420 EFLAGS: 00010202 [ 84.492044][ T5324] RAX: 0000000000000001 RBX: fffff52001dd1ea4 RCX: 0000000000100000 [ 84.495696][ T5324] RDX: ffffc9000f6a1000 RSI: 00000000000015d6 RDI: 00000000000015d7 [ 84.499114][ T5324] RBP: ffffc9000ee8f8f8 R08: ffffea00004cf237 R09: 1ffffd4000099e46 [ 84.503048][ T5324] R10: dffffc0000000000 R11: fffff94000099e47 R12: dffffc0000000000 [ 84.506617][ T5324] R13: ffff8880421128a8 R14: 0000000000000008 R15: ffff888042113538 [ 84.510094][ T5324] FS: 00007f952509c6c0(0000) GS:ffff88808c87f000(0000) knlGS:0000000000000000 [ 84.514221][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.517285][ T5324] CR2: 00007fd9cae49000 CR3: 0000000036789000 CR4: 0000000000352ef0 [ 84.520911][ T5324] Kernel panic - not syncing: Fatal exception [ 84.523993][ T5324] Kernel Offset: disabled [ 84.525825][ T5324] Rebooting in 86400 seconds..