hpfs: You really don't want any checks? You are crazy... hpfs: hpfs_map_sector(): read error hpfs: code page support is disabled ================================================================== BUG: KASAN: use-after-free in strcmp+0xc0/0xf4 lib/string.c:361 Read of size 1 at addr ffff0000fd4c0001 by task syz.2.187/5304 CPU: 0 PID: 5304 Comm: syz.2.187 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 print_address_description+0x88/0x218 mm/kasan/report.c:316 print_report+0x50/0x68 mm/kasan/report.c:420 kasan_report+0xa8/0x100 mm/kasan/report.c:524 __asan_report_load1_noabort+0x2c/0x38 mm/kasan/report_generic.c:348 strcmp+0xc0/0xf4 lib/string.c:361 hpfs_get_ea+0xfc/0x968 fs/hpfs/ea.c:139 hpfs_read_inode+0x15c/0xcac fs/hpfs/inode.c:63 hpfs_fill_super+0xe64/0x1800 fs/hpfs/super.c:712 mount_bdev+0x264/0x358 fs/super.c:1443 hpfs_mount+0x44/0x58 fs/hpfs/super.c:758 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1573 do_new_mount+0x228/0x810 fs/namespace.c:3069 path_mount+0x5b4/0xe78 fs/namespace.c:3399 do_mount fs/namespace.c:3412 [inline] __do_sys_mount fs/namespace.c:3620 [inline] __se_sys_mount fs/namespace.c:3597 [inline] __arm64_sys_mount+0x49c/0x584 fs/namespace.c:3597 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 The buggy address belongs to the physical page: page:00000000bd776513 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x13d4c0 flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000000000 fffffc0003dac808 fffffc0003f84808 0000000000000000 raw: 0000000000000001 0000000000000003 00000000ffffff7f 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff0000fd4bff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0000fd4bff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff0000fd4c0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff0000fd4c0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff0000fd4c0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ================================================================== hpfs: filesystem error: EAs don't end correctly, sectors 7b318741, len 00000003 hpfs: filesystem error: EAs don't end correctly, sectors 7b318741, len 00000003 hpfs: filesystem error: EAs don't end correctly, sectors 7b318741, len 00000003 hpfs: filesystem error: EAs don't end correctly, sectors 7b318741, len 00000003 hpfs: hpfs_map_4sectors(): unaligned read hpfs: hpfs_map_4sectors(): unaligned read hpfs: filesystem error: unable to find root dir loop2: detected capacity change from 0 to 40427 F2FS-fs (loop2): Small segment_count (9 < 1 * 24) F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop2): Found nat_bits in checkpoint F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 syz.2.187: attempt to access beyond end of device loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427