program: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000640)='./file1\x00', 0x120c80c, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000c80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) [ 180.850030][ T4666] Bluetooth: hci0: command tx timeout [ 180.903407][ T5337] loop0: detected capacity change from 0 to 1024 [ 180.955325][ T5337] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 180.960934][ T5337] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 180.964221][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 180.967811][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.972080][ T5337] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 180.975661][ T5337] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 76 f7 80 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 59 f7 80 ff 4d 8b 36 49 8d 7e 90 [ 180.984421][ T5337] RSP: 0018:ffffc9000e037420 EFLAGS: 00010202 [ 180.987006][ T5337] RAX: 0000000000000001 RBX: fffff52001c06ea4 RCX: 0000000000100000 [ 180.990257][ T5337] RDX: ffffc90020561000 RSI: 00000000000013df RDI: 00000000000013e0 [ 180.993852][ T5337] RBP: ffffc9000e0378f8 R08: ffffea00007c68f7 R09: 1ffffd40000f8d1e [ 180.997572][ T5337] R10: dffffc0000000000 R11: fffff940000f8d1f R12: dffffc0000000000 [ 181.001075][ T5337] R13: ffff8880131b2a30 R14: 0000000000000008 R15: ffff8880131b3740 [ 181.005031][ T5337] FS: 00007fb6ba0456c0(0000) GS:ffff88808ca40000(0000) knlGS:0000000000000000 [ 181.008788][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.011642][ T5337] CR2: 00007fd6d678a000 CR3: 000000003690d000 CR4: 0000000000352ef0 [ 181.015605][ T5337] Call Trace: [ 181.017356][ T5337] [ 181.019154][ T5337] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 181.022394][ T5337] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 181.025211][ T5337] ? rcu_is_watching+0x15/0xb0 [ 181.027285][ T5337] ? __kasan_kmalloc+0x93/0xb0 [ 181.029527][ T5337] ? __kmalloc_cache_noprof+0x31c/0x660 [ 181.031999][ T5337] ? hfsplus_setxattr+0x10b/0x340 [ 181.034242][ T5337] hfsplus_setxattr+0x124/0x340 [ 181.036451][ T5337] hfsplus_trusted_setxattr+0x40/0x60 [ 181.039715][ T5337] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 181.042691][ T5337] __vfs_setxattr+0x43c/0x480 [ 181.044887][ T5337] __vfs_setxattr_noperm+0x12d/0x660 [ 181.047166][ T5337] vfs_setxattr+0x163/0x360 [ 181.049350][ T5337] ? __pfx_vfs_setxattr+0x10/0x10 [ 181.051617][ T5337] filename_setxattr+0x296/0x630 [ 181.054309][ T5337] ? __pfx_filename_setxattr+0x10/0x10 [ 181.057400][ T5337] ? do_getname+0x151/0x250 [ 181.059971][ T5337] path_setxattrat+0x3eb/0x440 [ 181.062371][ T5337] ? __pfx_path_setxattrat+0x10/0x10 [ 181.064822][ T5337] ? do_futex+0x395/0x420 [ 181.067236][ T5337] ? rcu_is_watching+0x15/0xb0 [ 181.069479][ T5337] __x64_sys_lsetxattr+0xbf/0xe0 [ 181.071737][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.075168][ T5337] do_syscall_64+0x15f/0xf80 [ 181.078134][ T5337] ? trace_irq_disable+0x3b/0x150 [ 181.081053][ T5337] ? clear_bhb_loop+0x40/0x90 [ 181.083127][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.085669][ T5337] RIP: 0033:0x7fb6b919c819 [ 181.087381][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.096182][ T5337] RSP: 002b:00007fb6ba044fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 181.100745][ T5337] RAX: ffffffffffffffda RBX: 00007fb6b9415fa0 RCX: 00007fb6b919c819 [ 181.104128][ T5337] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000200 [ 181.107526][ T5337] RBP: 00007fb6b9232c91 R08: 0000000000000001 R09: 0000000000000000 [ 181.112154][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.116097][ T5337] R13: 00007fb6b9416038 R14: 00007fb6b9415fa0 R15: 00007ffeab6151e8 [ 181.119740][ T5337] [ 181.121036][ T5337] Modules linked in: [ 181.123327][ T5337] ---[ end trace 0000000000000000 ]--- [ 181.153726][ T5337] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 181.156644][ T5337] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 76 f7 80 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 59 f7 80 ff 4d 8b 36 49 8d 7e 90 [ 181.166214][ T5337] RSP: 0018:ffffc9000e037420 EFLAGS: 00010202 [ 181.169221][ T5337] RAX: 0000000000000001 RBX: fffff52001c06ea4 RCX: 0000000000100000 [ 181.173370][ T5337] RDX: ffffc90020561000 RSI: 00000000000013df RDI: 00000000000013e0 [ 181.177325][ T5337] RBP: ffffc9000e0378f8 R08: ffffea00007c68f7 R09: 1ffffd40000f8d1e [ 181.181554][ T5337] R10: dffffc0000000000 R11: fffff940000f8d1f R12: dffffc0000000000 [ 181.185626][ T5337] R13: ffff8880131b2a30 R14: 0000000000000008 R15: ffff8880131b3740 [ 181.189871][ T5337] FS: 00007fb6ba0456c0(0000) GS:ffff88808ca40000(0000) knlGS:0000000000000000 [ 181.193863][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.196864][ T5337] CR2: 00007fd6d6788000 CR3: 000000003690d000 CR4: 0000000000352ef0 [ 181.201346][ T5337] Kernel panic - not syncing: Fatal exception [ 181.205331][ T5337] Kernel Offset: disabled [ 181.207550][ T5337] Rebooting in 86400 seconds..