program: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5f7, &(0x7f0000001580)="$eJzs3c1rHOcdB/DvrFay5YKjJHbilkBFDGmoqK0XlFa91C2l6BBKSA89C1uOF6+VIG2KEkpx36895A9ID7r1VOjdkJ7bW646Bgq95KSbyszOrjaSqpdE1q7iz8c8+zzPPjPP/Oa3M7O7I8wGeGYtz6T5JEWWZ97cLPvbWwvt7a2FR712kktJGkmzW6VYS4pPkjvplnyzfLKervh/2/motfT2p59vf9btNetSLd84ar2TeVyXTCcZq+uzmu/uV56v6O9hmbCbvcTBsO32vV7Xj0+z+lc8b4FRUHTfNw+YSq4kuVx/Dkh9dWicb3Rn71RXOQAAALigntvJTjZzddhxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEVS//5/UZdGrz2dovf7/xP1c6nbF1cx7AAAAAAAAAAA4Gx8eyc72czVXn+3qP7m/2rVuVY9fiPvZyOrWc+tbGYlnXSynrkkUwMTTWyudDrrcydYc/7QNefPZ38BAAAAAAAA4Gvqd1ne+/s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMgiIZ61ZVudZrT6XRTHI5yUS53OPk3732RfZk2AEAAADAOXhuJzvZzNVef7eovvO/VH3vv5z3s5ZOWumkndXcq+4FdL/1N7a3FtrbWwuPynJw3h//91RhVDOme+/h8C3f6N58yP20qmdu5W7eTTv30qjWLN3oxXN4XL8tYyp+VDthZPfqutzzv9T1aJiqcjbez8hsHVuZjeePzsQpX539W5pLo3/n59pTyPmVui73508jnfP58fSPvpeOzkTynX/87ZcP2msPH9zfmBmdXfqS9mdiYeA8fPmZysRslYnr/f5yftb8RWYynbeynlZ+lZV0sprp/LRqrdTHc/k4dXSm7nyh99ZxkUzUr0v3Krovphwd06vVulfTys/zbu5lNW9U/+Yzl+9nMYtZGniFr5/grG+c7qy/+XrdmEzy57oeDWVenx/I6+A1d6oaG3xmL0svnP21sfmtulFu4/fZu/oM3/5MzA1k4sWjM/HX3fJxo732cP3Bynsn3N5rdV2eR38cqXeJ8nh5oXyxqt4Xj45y7MVDx+aqsWv9scaBsev9sePO1In6M9zBmearsZcPHVuoxm4MjE0e8nkLgJF35btXJib/M/mvyY8n/zD5YPLNyz+59INLr0xk/J/jP2zOjr3WeKX4ez7Ob/a+/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/exgcfPlxpt1fXNS5OY2w0wjhVo5EDQ+NJznxbuw7ss2kM+cIEPHW3O4/eu73xwYffaz1aeWf1ndW1pcXFpdmlxTcWbt9vtVdnu4/DjhJ4Gvbe9IcdCQAAAAAAAAAAAHBS5/HfCYa9jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFtjyT5pMUmZu9NVv2t7cW2mXptfeWbCZpJCl+nRSfJHfSLZkamK7YN/1Yr/FRa+ntTz/f/mxvrmZv+cYh653S49760/U2p49efuK4+epSzXP3+PmOUfT3sEzYzV7iYNj+FwAA//+oTQhF") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) [ 94.029665][ T4639] Bluetooth: hci0: command tx timeout [ 94.151230][ T5312] loop0: detected capacity change from 0 to 1024 [ 94.269029][ T5312] hfsplus: (loop0): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only. [ 94.299000][ T5312] hfsplus: Run fsck.hfsplus to repair. [ 94.385315][ T5312] hfsplus: trying to free the freed bnode 1(1) [ 94.399466][ T5312] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 94.404638][ T5312] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 94.408228][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.412163][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.416445][ T5312] RIP: 0010:hfsplus_cat_write_inode+0xc4/0xb40 [ 94.419173][ T5312] Code: 51 4a 89 44 2b 59 66 42 c7 44 2b 61 f3 f3 42 c6 44 2b 63 f3 e8 0d 2c 13 ff 4d 8d 7c 24 28 4c 89 f8 48 c1 e8 03 48 89 44 24 38 <42> 80 3c 28 00 74 08 4c 89 ff e8 2d 6f 82 ff 41 be 78 06 00 00 4c [ 94.426998][ T5312] RSP: 0018:ffffc9000e097880 EFLAGS: 00010206 [ 94.429601][ T5312] RAX: 0000000000000005 RBX: 1ffff92001c12f18 RCX: 0000000000100000 [ 94.432776][ T5312] RDX: ffffc9000eada000 RSI: 0000000000002a24 RDI: 0000000000002a25 [ 94.436024][ T5312] RBP: ffffc9000e097c30 R08: ffffc9000e0977e7 R09: 0000000000000000 [ 94.439596][ T5312] R10: fffff52001c12f28 R11: fffff52001c12efd R12: 0000000000000000 [ 94.442924][ T5312] R13: dffffc0000000000 R14: ffff8880502066d8 R15: 0000000000000028 [ 94.446138][ T5312] FS: 00007f584e3f56c0(0000) GS:ffff88808c534000(0000) knlGS:0000000000000000 [ 94.449895][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.452577][ T5312] CR2: 00007fff81e4dcf4 CR3: 0000000012f83000 CR4: 0000000000352ef0 [ 94.455883][ T5312] Call Trace: [ 94.457238][ T5312] [ 94.458529][ T5312] ? __pfx_hfsplus_cat_write_inode+0x10/0x10 [ 94.461046][ T5312] ? __pfx_hlock_conflict+0x10/0x10 [ 94.463292][ T5312] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 94.465736][ T5312] ? rcu_is_watching+0x15/0xb0 [ 94.467756][ T5312] ? __mark_inode_dirty+0x4e7/0x13b0 [ 94.470048][ T5312] hfsplus_unlink+0x5e0/0x8e0 [ 94.471998][ T5312] ? __pfx_hfsplus_unlink+0x10/0x10 [ 94.474121][ T5312] ? down_write+0x16d/0x200 [ 94.476038][ T5312] ? try_break_deleg+0x5e/0x190 [ 94.478072][ T5312] vfs_unlink+0x27b/0x6d0 [ 94.479968][ T5312] filename_unlinkat+0x3cd/0x610 [ 94.482024][ T5312] ? __pfx_filename_unlinkat+0x10/0x10 [ 94.484405][ T5312] ? do_getname+0x151/0x250 [ 94.486629][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.489703][ T5312] __se_sys_unlinkat+0x83/0x1a0 [ 94.491800][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.494430][ T5312] do_syscall_64+0x174/0x580 [ 94.496410][ T5312] ? trace_irq_disable+0x3b/0x140 [ 94.498566][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 94.500552][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.502907][ T5312] RIP: 0033:0x7f5851f9e0d9 [ 94.504889][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.512990][ T5312] RSP: 002b:00007f584e3f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 94.516342][ T5312] RAX: ffffffffffffffda RBX: 00007f5852225fa0 RCX: 00007f5851f9e0d9 [ 94.519649][ T5312] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 94.523016][ T5312] RBP: 00007f5852035024 R08: 0000000000000000 R09: 0000000000000000 [ 94.526131][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.529475][ T5312] R13: 00007f5852226038 R14: 00007f5852225fa0 R15: 00007fff0116d868 [ 94.532796][ T5312] [ 94.534131][ T5312] Modules linked in: [ 94.536344][ T5312] ---[ end trace 0000000000000000 ]--- [ 94.552447][ T5312] RIP: 0010:hfsplus_cat_write_inode+0xc4/0xb40 [ 94.555165][ T5312] Code: 51 4a 89 44 2b 59 66 42 c7 44 2b 61 f3 f3 42 c6 44 2b 63 f3 e8 0d 2c 13 ff 4d 8d 7c 24 28 4c 89 f8 48 c1 e8 03 48 89 44 24 38 <42> 80 3c 28 00 74 08 4c 89 ff e8 2d 6f 82 ff 41 be 78 06 00 00 4c [ 94.563649][ T5312] RSP: 0018:ffffc9000e097880 EFLAGS: 00010206 [ 94.566349][ T5312] RAX: 0000000000000005 RBX: 1ffff92001c12f18 RCX: 0000000000100000 [ 94.570001][ T5312] RDX: ffffc9000eada000 RSI: 0000000000002a24 RDI: 0000000000002a25 [ 94.573815][ T5312] RBP: ffffc9000e097c30 R08: ffffc9000e0977e7 R09: 0000000000000000 [ 94.577183][ T5312] R10: fffff52001c12f28 R11: fffff52001c12efd R12: 0000000000000000 [ 94.581079][ T5312] R13: dffffc0000000000 R14: ffff8880502066d8 R15: 0000000000000028 [ 94.584529][ T5312] FS: 00007f584e3f56c0(0000) GS:ffff88808c534000(0000) knlGS:0000000000000000 [ 94.588232][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.591487][ T5312] CR2: 00007f447dc47000 CR3: 0000000012f83000 CR4: 0000000000352ef0 [ 94.594964][ T5312] Kernel panic - not syncing: Fatal exception [ 94.597903][ T5312] Kernel Offset: disabled [ 94.599771][ T5312] Rebooting in 86400 seconds..