Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. executing program syzkaller login: [ 45.150433][ T4018] loop0: detected capacity change from 0 to 1024 [ 45.280152][ T136] ================================================================== [ 45.281928][ T136] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x834/0xffc [ 45.283731][ T136] Read of size 1024 at addr ffff0000d9ecfc00 by task kworker/u4:1/136 [ 45.285408][ T136] [ 45.285927][ T136] CPU: 1 PID: 136 Comm: kworker/u4:1 Not tainted 5.15.173-syzkaller #0 [ 45.287725][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.289872][ T136] Workqueue: loop0 loop_rootcg_workfn [ 45.291119][ T136] Call trace: [ 45.291882][ T136] dump_backtrace+0x0/0x530 [ 45.292846][ T136] show_stack+0x2c/0x3c [ 45.293751][ T136] dump_stack_lvl+0x108/0x170 [ 45.294766][ T136] print_address_description+0x7c/0x3f0 [ 45.295868][ T136] kasan_report+0x174/0x1e4 [ 45.296788][ T136] kasan_check_range+0x274/0x2b4 [ 45.298186][ T136] memcpy+0x90/0xe8 [ 45.299670][ T136] copy_page_from_iter_atomic+0x834/0xffc [ 45.302010][ T136] generic_perform_write+0x2d0/0x520 [ 45.303771][ T136] __generic_file_write_iter+0x230/0x454 [ 45.306166][ T136] generic_file_write_iter+0xb4/0x1b8 [ 45.308376][ T136] do_iter_readv_writev+0x420/0x5f8 [ 45.310649][ T136] do_iter_write+0x1b8/0x66c [ 45.312470][ T136] vfs_iter_write+0x88/0xac [ 45.314496][ T136] lo_write_bvec+0x394/0xb4c [ 45.316379][ T136] loop_process_work+0x1f24/0x2798 [ 45.318224][ T136] loop_rootcg_workfn+0x28/0x38 [ 45.319703][ T136] process_one_work+0x790/0x11b8 [ 45.321812][ T136] worker_thread+0x910/0x1034 [ 45.323365][ T136] kthread+0x37c/0x45c [ 45.324770][ T136] ret_from_fork+0x10/0x20 [ 45.326432][ T136] [ 45.327347][ T136] Allocated by task 4018: [ 45.329190][ T136] ____kasan_kmalloc+0xbc/0xfc [ 45.330863][ T136] __kasan_kmalloc+0x10/0x1c [ 45.332747][ T136] __kmalloc+0x29c/0x4c8 [ 45.334338][ T136] hfsplus_read_wrapper+0x3b8/0xfc8 [ 45.336192][ T136] hfsplus_fill_super+0x2f0/0x167c [ 45.337885][ T136] mount_bdev+0x274/0x370 [ 45.339664][ T136] hfsplus_mount+0x44/0x58 [ 45.341395][ T136] legacy_get_tree+0xd4/0x16c [ 45.343022][ T136] vfs_get_tree+0x90/0x274 [ 45.344591][ T136] do_new_mount+0x278/0x8fc [ 45.346441][ T136] path_mount+0x594/0x101c [ 45.348066][ T136] __arm64_sys_mount+0x510/0x5e0 [ 45.349671][ T136] invoke_syscall+0x98/0x2b8 [ 45.351794][ T136] el0_svc_common+0x138/0x258 [ 45.353836][ T136] do_el0_svc+0x58/0x14c [ 45.355383][ T136] el0_svc+0x7c/0x1f0 [ 45.356290][ T136] el0t_64_sync_handler+0x84/0xe4 [ 45.358140][ T136] el0t_64_sync+0x1a0/0x1a4 [ 45.359749][ T136] [ 45.360453][ T136] The buggy address belongs to the object at ffff0000d9ecfc00 [ 45.360453][ T136] which belongs to the cache kmalloc-512 of size 512 [ 45.365820][ T136] The buggy address is located 0 bytes inside of [ 45.365820][ T136] 512-byte region [ffff0000d9ecfc00, ffff0000d9ecfe00) [ 45.370406][ T136] The buggy address belongs to the page: [ 45.372368][ T136] page:00000000b1b74434 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119ecc [ 45.375454][ T136] head:00000000b1b74434 order:2 compound_mapcount:0 compound_pincount:0 [ 45.378728][ T136] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 45.382179][ T136] raw: 05ffc00000010200 fffffc0003467600 0000000500000005 ffff0000c0002600 [ 45.386202][ T136] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 45.389111][ T136] page dumped because: kasan: bad access detected [ 45.391313][ T136] [ 45.392073][ T136] Memory state around the buggy address: [ 45.394174][ T136] ffff0000d9ecfd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.397391][ T136] ffff0000d9ecfd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.399796][ T136] >ffff0000d9ecfe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.403002][ T136] ^ [ 45.404222][ T136] ffff0000d9ecfe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.405856][ T136] ffff0000d9ecff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.407608][ T136] ================================================================== [ 45.409255][ T136] Disabling lock debugging due to kernel taint executing program [ 45.477808][ T4020] loop0: detected capacity change from 0 to 1024 [ 45.516895][ T4020] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 45.586854][ T4021] loop0: detected capacity change from 0 to 1024 [ 45.626620][ T4021] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 45.687594][ T4023] loop0: detected capacity change from 0 to 1024 executing program [ 45.876961][ T4024] loop0: detected capacity change from 0 to 1024 executing program [ 45.977719][ T4025] loop0: detected capacity change from 0 to 1024 [ 46.036530][ T4025] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 46.086826][ T4026] loop0: detected capacity change from 0 to 1024 executing program [ 46.277625][ T4027] loop0: detected capacity change from 0 to 1024 executing program [ 46.369411][ T4028] loop0: detected capacity change from 0 to 1024 [ 46.436489][ T4028] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) [ 46.524346][ T4029] loop0: detected capacity change from 0 to 1024 executing program [ 46.566894][ T4029] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) [ 46.614638][ T4030] loop0: detected capacity change from 0 to 1024 executing program executing program [ 46.798784][ T4031] loop0: detected capacity change from 0 to 1024 [ 46.886670][ T4031] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 46.933689][ T4032] loop0: detected capacity change from 0 to 1024 executing program [ 47.027823][ T4033] loop0: detected capacity change from 0 to 1024 executing program [ 47.124959][ T4034] loop0: detected capacity change from 0 to 1024 [ 47.166864][ T4034] loop_set_block_size: loop0 () has still dirty pages (nrpages=7) executing program [ 47.225891][ T4035] loop0: detected capacity change from 0 to 1024 [ 47.266801][ T4035] loop_set_block_size: loop0 () has still dirty pages (nrpages=4) executing program [ 47.316510][ T4036] loop0: detected capacity change from 0 to 1024 executing program [ 47.424446][ T4037] loop0: detected capacity change from 0 to 1024 executing program [ 47.517806][ T4038] loop0: detected capacity change from 0 to 1024 executing program [ 47.607980][ T4039] loop0: detected capacity change from 0 to 1024 executing program [ 47.704157][ T4040] loop0: detected capacity change from 0 to 1024 executing program [ 47.794431][ T4041] loop0: detected capacity change from 0 to 1024 [ 47.866525][ T4041] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 47.914551][ T4042] loop0: detected capacity change from 0 to 1024 [ 47.966457][ T4042] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 48.014594][ T4043] loop0: detected capacity change from 0 to 1024 [ 48.056429][ T4043] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 48.104517][ T4044] loop0: detected capacity change from 0 to 1024 executing program [ 48.197411][ T4045] loop0: detected capacity change from 0 to 1024 executing program [ 48.336896][ T4046] loop0: detected capacity change from 0 to 1024 executing program [ 48.438417][ T4047] loop0: detected capacity change from 0 to 1024 executing program [ 48.554431][ T4048] loop0: detected capacity change from 0 to 1024 [ 48.636480][ T4048] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 48.685001][ T4049] loop0: detected capacity change from 0 to 1024 [ 48.726667][ T4049] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 48.794801][ T4050] loop0: detected capacity change from 0 to 1024 [ 48.846508][ T4050] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 48.898401][ T4051] loop0: detected capacity change from 0 to 1024 executing program [ 49.004724][ T4052] loop0: detected capacity change from 0 to 1024 [ 49.046489][ T4052] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 49.095785][ T4053] loop0: detected capacity change from 0 to 1024 executing program [ 49.194401][ T4054] loop0: detected capacity change from 0 to 1024 [ 49.226913][ T4054] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program executing program [ 49.302776][ T4056] loop0: detected capacity change from 0 to 1024 [ 49.336443][ T4056] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 49.425783][ T4057] loop0: detected capacity change from 0 to 1024 [ 49.526529][ T4057] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 49.585591][ T4058] loop0: detected capacity change from 0 to 1024 executing program [ 49.678036][ T4059] loop0: detected capacity change from 0 to 1024 executing program [ 49.773799][ T4060] loop0: detected capacity change from 0 to 1024 executing program [ 49.884747][ T4061] loop0: detected capacity change from 0 to 1024 [ 49.916924][ T4061] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 49.987714][ T4062] loop0: detected capacity change from 0 to 1024 executing program [ 50.087853][ T4063] loop0: detected capacity change from 0 to 1024 executing program [ 50.183814][ T4064] loop0: detected capacity change from 0 to 1024 [ 50.236488][ T4064] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 50.315432][ T4065] loop0: detected capacity change from 0 to 1024 executing program [ 50.414994][ T4066] loop0: detected capacity change from 0 to 1024 [ 50.456672][ T4066] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 50.534488][ T4067] loop0: detected capacity change from 0 to 1024 executing program [ 50.657546][ T4068] loop0: detected capacity change from 0 to 1024 executing program [ 50.765722][ T4069] loop0: detected capacity change from 0 to 1024 executing program [ 50.864534][ T4070] loop0: detected capacity change from 0 to 1024 [ 50.906668][ T4070] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 50.954605][ T4071] loop0: detected capacity change from 0 to 1024 executing program [ 51.047776][ T4072] loop0: detected capacity change from 0 to 1024 executing program executing program [ 51.153871][ T4074] loop0: detected capacity change from 0 to 1024 [ 51.196527][ T4074] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 51.245564][ T4075] loop0: detected capacity change from 0 to 1024 executing program [ 51.388251][ T4076] loop0: detected capacity change from 0 to 1024 [ 51.426630][ T4076] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 51.494712][ T4077] loop0: detected capacity change from 0 to 1024 [ 51.546566][ T4077] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 51.597228][ T4078] loop0: detected capacity change from 0 to 1024 [ 51.726475][ T4078] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 51.796598][ T4079] loop0: detected capacity change from 0 to 1024 executing program [ 52.028422][ T4080] loop0: detected capacity change from 0 to 1024 executing program [ 52.118386][ T4081] loop0: detected capacity change from 0 to 1024 executing program [ 52.243626][ T4082] loop0: detected capacity change from 0 to 1024 [ 52.286666][ T4082] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 52.367793][ T4083] loop0: detected capacity change from 0 to 1024 executing program [ 52.516448][ T4084] loop0: detected capacity change from 0 to 1024 executing program [ 52.666294][ T4085] loop0: detected capacity change from 0 to 1024 [ 52.706498][ T4085] loop_set_block_size: loop0 () has still dirty pages (nrpages=5) executing program [ 52.767525][ T4086] loop0: detected capacity change from 0 to 1024 executing program [ 52.869297][ T4087] loop0: detected capacity change from 0 to 1024 [ 52.996452][ T4087] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 53.057760][ T4088] loop0: detected capacity change from 0 to 1024 executing program [ 53.157689][ T4089] loop0: detected capacity change from 0 to 1024 [ 53.206586][ T4089] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 53.264575][ T4090] loop0: detected capacity change from 0 to 1024 [ 53.316457][ T4090] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 53.376775][ T4091] loop_set_block_size: loop0 () has still dirty pages (nrpages=9) executing program [ 53.423996][ T4092] loop0: detected capacity change from 0 to 1024 [ 53.466578][ T4092] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 53.534333][ T4093] loop0: detected capacity change from 0 to 1024 [ 53.586542][ T4093] loop_set_block_size: loop0 () has still dirty pages (nrpages=5) executing program [ 53.635028][ T4094] loop0: detected capacity change from 0 to 1024 [ 53.676536][ T4094] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 53.734901][ T4095] loop0: detected capacity change from 0 to 1024 executing program [ 53.854259][ T4096] loop0: detected capacity change from 0 to 1024 [ 53.896498][ T4096] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 53.964811][ T4097] loop0: detected capacity change from 0 to 1024 [ 54.006548][ T4097] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 54.058589][ T4098] loop0: detected capacity change from 0 to 1024 executing program [ 54.174750][ T4099] loop0: detected capacity change from 0 to 1024 [ 54.236530][ T4099] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 54.305034][ T4100] loop0: detected capacity change from 0 to 1024 [ 54.366460][ T4100] loop_set_block_size: loop0 () has still dirty pages (nrpages=2) executing program [ 54.414395][ T4101] loop0: detected capacity change from 0 to 1024 [ 54.456443][ T4101] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 54.514512][ T4102] loop0: detected capacity change from 0 to 1024 executing program [ 54.617415][ T4103] loop0: detected capacity change from 0 to 1024 [ 54.666465][ T4103] loop_set_block_size: loop0 () has still dirty pages (nrpages=5) executing program [ 54.724561][ T4104] loop0: detected capacity change from 0 to 1024 [ 54.766505][ T4104] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) executing program [ 54.813974][ T4105] loop0: detected capacity change from 0 to 1024 executing program [ 54.927573][ T4106] loop0: detected capacity change from 0 to 1024 [ 54.976892][ T4106] loop_set_block_size: loop0 () has still dirty pages (nrpages=1) executing program [ 55.043957][ T4107] loop0: detected capacity change from 0 to 1024 executing program [ 55.167589][ T4108] loop0: detected capacity change from 0 to 1024 executing program [ 55.265007][ T4109] loop0: detected capacity change from 0 to 1024