================================================================== BUG: KASAN: wild-memory-access in memcpy_from_page include/linux/highmem.h:417 [inline] BUG: KASAN: wild-memory-access in hfsplus_bnode_read fs/hfsplus/bnode.c:32 [inline] BUG: KASAN: wild-memory-access in hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:45 [inline] BUG: KASAN: wild-memory-access in hfsplus_bnode_dump+0x403/0xbb0 fs/hfsplus/bnode.c:305 Read of size 2 at addr 000508800000103e by task syz-executor.4/11963 CPU: 0 PID: 11963 Comm: syz-executor.4 Not tainted 6.9.0-rc4-next-20240418-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_report+0xe8/0x550 mm/kasan/report.c:491 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x29/0x70 mm/kasan/shadow.c:105 memcpy_from_page include/linux/highmem.h:417 [inline] hfsplus_bnode_read fs/hfsplus/bnode.c:32 [inline] hfsplus_bnode_read_u16 fs/hfsplus/bnode.c:45 [inline] hfsplus_bnode_dump+0x403/0xbb0 fs/hfsplus/bnode.c:305 hfsplus_brec_remove+0x42c/0x4f0 fs/hfsplus/brec.c:229 __hfsplus_delete_attr+0x275/0x450 fs/hfsplus/attributes.c:299 hfsplus_delete_attr+0x353/0x4b0 fs/hfsplus/attributes.c:345 hfsplus_removexattr fs/hfsplus/xattr.c:794 [inline] __hfsplus_setxattr+0x801/0x22d0 fs/hfsplus/xattr.c:275 hfsplus_setxattr+0xb0/0xe0 fs/hfsplus/xattr.c:434 hfsplus_user_setxattr+0x40/0x60 fs/hfsplus/xattr_user.c:30 __vfs_removexattr+0x42a/0x460 fs/xattr.c:518 __vfs_removexattr_locked+0x206/0x450 fs/xattr.c:553 vfs_removexattr+0x103/0x2b0 fs/xattr.c:575 removexattr+0x147/0x1c0 fs/xattr.c:917 path_removexattr+0x1a9/0x290 fs/xattr.c:931 __do_sys_removexattr fs/xattr.c:945 [inline] __se_sys_removexattr fs/xattr.c:942 [inline] __x64_sys_removexattr+0x60/0x70 fs/xattr.c:942 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ffbfdc7dea9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffbfea380c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 RAX: ffffffffffffffda RBX: 00007ffbfddac050 RCX: 00007ffbfdc7dea9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 RBP: 00007ffbfdcca4a4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007ffbfddac050 R15: 00007ffe91d0cc38 ==================================================================