Warning: Permanently added '10.128.10.30' (ED25519) to the list of known hosts. executing program [ 44.178481][ T6097] loop0: detected capacity change from 0 to 1024 [ 44.188481][ T6097] ================================================================== [ 44.190450][ T6097] BUG: KASAN: out-of-bounds in hfsplus_bnode_move+0x650/0x9c4 [ 44.192131][ T6097] Read of size 18446744073709551602 at addr ffff00000000104e by task syz-executor285/6097 [ 44.194344][ T6097] [ 44.194900][ T6097] CPU: 1 PID: 6097 Comm: syz-executor285 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 44.197107][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 44.199409][ T6097] Call trace: [ 44.200245][ T6097] dump_backtrace+0x1b8/0x1e4 [ 44.201267][ T6097] show_stack+0x2c/0x3c [ 44.202181][ T6097] dump_stack_lvl+0xd0/0x124 [ 44.203201][ T6097] print_report+0x174/0x514 [ 44.204276][ T6097] kasan_report+0xd8/0x138 [ 44.205344][ T6097] kasan_check_range+0x254/0x294 [ 44.206552][ T6097] __asan_memmove+0x3c/0x84 [ 44.207528][ T6097] hfsplus_bnode_move+0x650/0x9c4 [ 44.208676][ T6097] hfsplus_brec_insert+0x47c/0xaa0 [ 44.209847][ T6097] hfsplus_create_attr+0x3b0/0x568 [ 44.211022][ T6097] __hfsplus_setxattr+0x980/0x1d00 [ 44.212242][ T6097] hfsplus_initxattrs+0x150/0x20c [ 44.213441][ T6097] security_inode_init_security+0x264/0x428 [ 44.214798][ T6097] hfsplus_init_security+0x40/0x54 [ 44.215945][ T6097] hfsplus_fill_super+0x1010/0x166c [ 44.217150][ T6097] mount_bdev+0x1e8/0x2b4 [ 44.218145][ T6097] hfsplus_mount+0x44/0x58 [ 44.219134][ T6097] legacy_get_tree+0xd4/0x16c [ 44.220212][ T6097] vfs_get_tree+0x90/0x288 [ 44.221210][ T6097] do_new_mount+0x25c/0x8c8 [ 44.222207][ T6097] path_mount+0x590/0xe04 [ 44.223173][ T6097] __arm64_sys_mount+0x45c/0x594 [ 44.224238][ T6097] invoke_syscall+0x98/0x2b8 [ 44.225246][ T6097] el0_svc_common+0x130/0x23c [ 44.226288][ T6097] do_el0_svc+0x48/0x58 [ 44.227285][ T6097] el0_svc+0x54/0x158 [ 44.228144][ T6097] el0t_64_sync_handler+0x84/0xfc [ 44.229281][ T6097] el0t_64_sync+0x190/0x194 [ 44.230318][ T6097] [ 44.230816][ T6097] The buggy address belongs to the physical page: [ 44.232370][ T6097] page:000000005b08f408 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40001 [ 44.234683][ T6097] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 44.236274][ T6097] page_type: 0xffffffff() [ 44.237286][ T6097] raw: 01ffc00000000000 fffffc0000000048 fffffc0000000048 0000000000000000 [ 44.239206][ T6097] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 44.241186][ T6097] page dumped because: kasan: bad access detected [ 44.242575][ T6097] [ 44.243079][ T6097] Memory state around the buggy address: [ 44.244380][ T6097] ffff000000000f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.246190][ T6097] ffff000000000f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.248066][ T6097] >ffff000000001000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.249857][ T6097] ^ [ 44.251290][ T6097] ffff000000001080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.253081][ T6097] ffff000000001100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.254901][ T6097] ================================================================== [ 44.257298][ T6097] Disabling lock debugging due to kernel taint