program:
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f0000021380)="$eJzs3U1rE08cB/DvTJJm+2/+dfsggsdqQS+i9SJeIpK3IIgH0bYRiqGiVlAvJuJJRO/efQu+CC+Kb0BPHsSr0F4cmdnZTXZ39iFt2jX6/YC42d3J/CYzk/1NUAZE9M+62vny7uI3/UcANdSAl5cBCcAD6gCO44T3aHtna6fX3cx7o5opgT0FgaCkSN2zsd01fw/ip3U5U8Ly9as6WqPn6HAopa58TZz7LisKhipjZr+DBJp2dprr3pFHlm9Q5ibHeO4fQizTROxiF48xX3UcRERULf38HwRPSv2cb9n8XUpgFRh4f+rzv5z/U2d+VhLHUVK5V0ee/2aVpYTu32Pm0nC9Z5Zw+roMV4llam4kXs8gyMFiCaZwryqHSz4Ti5y9s9Xrntu419uUeI62NVJgOarB0iO0INoVx9o0R4m2C2dGGYQlG7oNaxnxL+2zxhypdDfWIeKD+CRuCh9vsRnlf3UldLQmYD/RU0H857PrmzOl9F2wXxvtdluaNwotmEpOxnsqu5VmFHjuFQnCD3YB8R8I/KI4TanFRKmgdRecBZpRqSVnqbXwVUZdy7FSujXRaM6OcjLUs6wr4rW4LlbwA+/RGcn/pY5vFemZOdIJw1kjVoOJZj7xoD0z7urq5j391JOjjxut+JnoU2xmhb6nBH8SOqCwD19hHZcw//DJ07u1Xq/7QB/cdhzcb0VnGi8A5z0VH6A/PNOEMlI3h9+BseKz9uQYldbGCOzsRFuqJ2LhzXqWJS+FrZzoJz86EsIJO7E+hax+aOWNjc7HxEAqPFC1cnNHNZ0j3C/u94xLv9Q+2p7Ol+nvNOz0qiOhiui8SwTrP5PJ23zf5Gs6W7jWzF6NhItMV8pmEkf7jkrn2NEKyIuVXzRH/8XT6IIV0JzNYxzruD5Say797E+tuU6dAU6Xr9G3cU6H7PTfEh18xi3+/k9ERERERERERERERERERERERERENG3G/98Rs2OWavBflhMRERERERERERERERERERERERERERERHVC0/y/C/X9Rbv/f5PZSdv9fDwX7/66nY0jt//tmG6IPcP9fosP1OwAA//+1UnIe")
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20084804)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)={[{@fat=@debug}, {@fat=@gid}, {@dots}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@uid}, {@dots}, {@dots}], [{@fsmagic={'fsmagic', 0x3d, 0xfb}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@flag='ro'}, {@audit}, {@subj_role}, {@hash}]}, 0x5, 0x1c7, &(0x7f0000000500)="$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")
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'binder0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
[ 114.226618][ T4646] Bluetooth: hci0: command tx timeout
[ 114.235495][ T5326] loop0: detected capacity change from 0 to 64
[ 114.450265][ T5326] hfs: new node 4 already hashed?
[ 114.450943][ T5326] ------------[ cut here ]------------
[ 114.450952][ T5326] 1
[ 114.450956][ T5326] WARNING: fs/hfs/bnode.c:478 at hfs_bnode_create+0x45a/0x4e0, CPU#0: syz.0.0/5326
[ 114.461276][ T5326] Modules linked in:
[ 114.463394][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 114.467103][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 114.471495][ T5326] RIP: 0010:hfs_bnode_create+0x45a/0x4e0
[ 114.473943][ T5326] Code: 2a 8c 89 ee e8 97 de 6b fe e9 d6 fc ff ff e8 8d 0b 0c ff 4c 89 ef e8 e5 cc 2e 09 48 c7 c7 00 15 2a 8c 89 ee e8 77 de 6b fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff
[ 114.482341][ T5326] RSP: 0018:ffffc9000f047828 EFLAGS: 00010246
[ 114.485000][ T5326] RAX: 000000000000001f RBX: ffff88803469e000 RCX: 56101e7e51644800
[ 114.488586][ T5326] RDX: ffffc9000f669000 RSI: 00000000000013ba RDI: 00000000000013bb
[ 114.492591][ T5326] RBP: 0000000000000004 R08: ffffc9000f0475a7 R09: 1ffff92001e08eb4
[ 114.496059][ T5326] R10: dffffc0000000000 R11: fffff52001e08eb5 R12: 0000000000000004
[ 114.499612][ T5326] R13: ffff88803469e0d8 R14: ffff888033be9000 R15: dffffc0000000000
[ 114.503126][ T5326] FS: 00007f53093f36c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 114.507133][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.510115][ T5326] CR2: 00007f09f699b000 CR3: 0000000012236000 CR4: 0000000000352ef0
[ 114.513545][ T5326] Call Trace:
[ 114.515047][ T5326]
[ 114.516353][ T5326] hfs_bnode_split+0xd4/0x1070
[ 114.518655][ T5326] ? hfs_bnode_read+0x23b/0x810
[ 114.520856][ T5326] ? __asan_memcpy+0x40/0x70
[ 114.523111][ T5326] ? hfs_bnode_read+0x3cf/0x810
[ 114.525771][ T5326] ? hfs_bnode_read_u16+0x8d/0xe0
[ 114.528251][ T5326] ? __pfx_hfs_bnode_split+0x10/0x10
[ 114.530672][ T5326] ? __hfs_brec_find+0x335/0x510
[ 114.533115][ T5326] hfs_brec_insert+0x3a4/0xc80
[ 114.535254][ T5326] ? __pfx_hfs_brec_insert+0x10/0x10
[ 114.537679][ T5326] ? __asan_memset+0x22/0x50
[ 114.540490][ T5326] ? hfs_cat_build_record+0xa4/0xa00
[ 114.543344][ T5326] hfs_cat_create+0x537/0x870
[ 114.545562][ T5326] ? __pfx_hfs_cat_create+0x10/0x10
[ 114.548079][ T5326] ? _raw_spin_unlock+0x28/0x50
[ 114.550382][ T5326] ? hfs_new_inode+0x8e8/0xc50
[ 114.552456][ T5326] hfs_mkdir+0x73/0xe0
[ 114.554295][ T5326] vfs_mkdir+0x40c/0x620
[ 114.556141][ T5326] filename_mkdirat+0x285/0x510
[ 114.558370][ T5326] ? __pfx_filename_mkdirat+0x10/0x10
[ 114.560629][ T5326] ? do_getname+0x151/0x250
[ 114.562633][ T5326] __se_sys_mkdirat+0x35/0x150
[ 114.564667][ T5326] do_syscall_64+0x166/0x520
[ 114.566637][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.569346][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 114.571418][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.574295][ T5326] RIP: 0033:0x7f530859cfc7
[ 114.576805][ T5326] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 114.585686][ T5326] RSP: 002b:00007f53093f2e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 114.589310][ T5326] RAX: ffffffffffffffda RBX: 00007f53093f2ea0 RCX: 00007f530859cfc7
[ 114.592696][ T5326] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[ 114.596023][ T5326] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[ 114.599800][ T5326] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0
[ 114.603546][ T5326] R13: 00007f53093f2e60 R14: 0000000000000000 R15: 0000000000000000
[ 114.606930][ T5326]
[ 114.608417][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 114.611622][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 114.615531][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 114.619785][ T5326] Call Trace:
[ 114.621278][ T5326]
[ 114.622501][ T5326] vpanic+0x56d/0xa60
[ 114.624126][ T5326] ? __pfx__printk+0x10/0x10
[ 114.626108][ T5326] ? __pfx_vpanic+0x10/0x10
[ 114.628087][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 114.630335][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 114.632449][ T5326] panic+0xc5/0xd0
[ 114.633959][ T5326] ? __pfx_panic+0x10/0x10
[ 114.635882][ T5326] __warn+0x315/0x4c0
[ 114.637569][ T5326] ? hfs_bnode_create+0x45a/0x4e0
[ 114.639731][ T5326] ? hfs_bnode_create+0x45a/0x4e0
[ 114.641934][ T5326] __report_bug+0x276/0x570
[ 114.643873][ T5326] ? hfs_bnode_create+0x45a/0x4e0
[ 114.646080][ T5326] ? __pfx___report_bug+0x10/0x10
[ 114.648231][ T5326] ? __wake_up_klogd+0xf0/0x130
[ 114.650356][ T5326] ? vprintk_emit+0x4ee/0x560
[ 114.652437][ T5326] ? __pfx_vprintk_emit+0x10/0x10
[ 114.654673][ T5326] ? folio_mark_accessed+0x439/0x8b0
[ 114.656553][ T5326] ? hfs_bnode_create+0x45a/0x4e0
[ 114.658294][ T5326] report_bug+0x16b/0x220
[ 114.660006][ T5326] ? hfs_bnode_create+0x45a/0x4e0
[ 114.661995][ T5326] ? hfs_bnode_create+0x45c/0x4e0
[ 114.663994][ T5326] handle_bug+0x9c/0x200
[ 114.665687][ T5326] exc_invalid_op+0x1a/0x50
[ 114.667508][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 114.669377][ T5326] RIP: 0010:hfs_bnode_create+0x45a/0x4e0
[ 114.671602][ T5326] Code: 2a 8c 89 ee e8 97 de 6b fe e9 d6 fc ff ff e8 8d 0b 0c ff 4c 89 ef e8 e5 cc 2e 09 48 c7 c7 00 15 2a 8c 89 ee e8 77 de 6b fe 90 <0f> 0b 90 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c dd fb ff ff
[ 114.679369][ T5326] RSP: 0018:ffffc9000f047828 EFLAGS: 00010246
[ 114.682338][ T5326] RAX: 000000000000001f RBX: ffff88803469e000 RCX: 56101e7e51644800
[ 114.685927][ T5326] RDX: ffffc9000f669000 RSI: 00000000000013ba RDI: 00000000000013bb
[ 114.689222][ T5326] RBP: 0000000000000004 R08: ffffc9000f0475a7 R09: 1ffff92001e08eb4
[ 114.692192][ T5326] R10: dffffc0000000000 R11: fffff52001e08eb5 R12: 0000000000000004
[ 114.695522][ T5326] R13: ffff88803469e0d8 R14: ffff888033be9000 R15: dffffc0000000000
[ 114.698871][ T5326] ? hfs_bnode_create+0x459/0x4e0
[ 114.701010][ T5326] hfs_bnode_split+0xd4/0x1070
[ 114.703001][ T5326] ? hfs_bnode_read+0x23b/0x810
[ 114.704882][ T5326] ? __asan_memcpy+0x40/0x70
[ 114.706836][ T5326] ? hfs_bnode_read+0x3cf/0x810
[ 114.708877][ T5326] ? hfs_bnode_read_u16+0x8d/0xe0
[ 114.710975][ T5326] ? __pfx_hfs_bnode_split+0x10/0x10
[ 114.713005][ T5326] ? __hfs_brec_find+0x335/0x510
[ 114.715130][ T5326] hfs_brec_insert+0x3a4/0xc80
[ 114.717086][ T5326] ? __pfx_hfs_brec_insert+0x10/0x10
[ 114.719264][ T5326] ? __asan_memset+0x22/0x50
[ 114.721235][ T5326] ? hfs_cat_build_record+0xa4/0xa00
[ 114.723373][ T5326] hfs_cat_create+0x537/0x870
[ 114.725495][ T5326] ? __pfx_hfs_cat_create+0x10/0x10
[ 114.727790][ T5326] ? _raw_spin_unlock+0x28/0x50
[ 114.729882][ T5326] ? hfs_new_inode+0x8e8/0xc50
[ 114.731969][ T5326] hfs_mkdir+0x73/0xe0
[ 114.733738][ T5326] vfs_mkdir+0x40c/0x620
[ 114.735597][ T5326] filename_mkdirat+0x285/0x510
[ 114.737701][ T5326] ? __pfx_filename_mkdirat+0x10/0x10
[ 114.740003][ T5326] ? do_getname+0x151/0x250
[ 114.741964][ T5326] __se_sys_mkdirat+0x35/0x150
[ 114.744015][ T5326] do_syscall_64+0x166/0x520
[ 114.746073][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.748569][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 114.750550][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.753043][ T5326] RIP: 0033:0x7f530859cfc7
[ 114.754875][ T5326] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 114.762572][ T5326] RSP: 002b:00007f53093f2e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 114.765835][ T5326] RAX: ffffffffffffffda RBX: 00007f53093f2ea0 RCX: 00007f530859cfc7
[ 114.769049][ T5326] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[ 114.771796][ T5326] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[ 114.774817][ T5326] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0
[ 114.778088][ T5326] R13: 00007f53093f2e60 R14: 0000000000000000 R15: 0000000000000000
[ 114.781303][ T5326]
[ 114.783076][ T5326] Kernel Offset: disabled
[ 114.785053][ T5326] Rebooting in 86400 seconds..