[ 6.621694] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 23.912904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.915686] syz-executor (2896) used greatest stack depth: 24328 bytes left [ 23.942984] IPVS: ftp: loaded support on port[0] = 21 [ 25.466931] syz-executor.0 (2899) used greatest stack depth: 21712 bytes left Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. 2024/01/21 12:11:06 ignoring optional flag "sandboxArg"="0" 2024/01/21 12:11:06 parsed 1 programs 2024/01/21 12:11:08 executed programs: 0 [ 46.229397] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.263306] IPVS: ftp: loaded support on port[0] = 21 [ 47.810513] ================================================================== [ 47.819040] BUG: KASAN: wild-memory-access in hfsplus_bnode_move+0x29a/0x770 [ 47.827014] Read of size 18446744073709551602 at addr 000508000000100e by task syz-executor.0/3747 [ 47.837275] [ 47.839764] CPU: 0 PID: 3747 Comm: syz-executor.0 Not tainted 4.19.0-syzkaller #0 [ 47.849192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 47.858711] Call Trace: [ 47.861298] dump_stack+0x10c/0x17a [ 47.865075] kasan_report.cold.7+0x6d/0x305 [ 47.869396] ? hfsplus_bnode_move+0x29a/0x770 [ 47.873979] check_memory_region+0x13c/0x1b0 [ 47.878659] memmove+0x23/0x50 [ 47.882250] hfsplus_bnode_move+0x29a/0x770 [ 47.886669] hfsplus_brec_insert+0x50d/0xc40 [ 47.891154] ? hfsplus_brec_keylen+0x2d0/0x2d0 [ 47.895868] hfsplus_create_attr+0x306/0x3b0 [ 47.900355] ? hfsplus_attr_exists+0x1f0/0x1f0 [ 47.905064] ? mutex_lock_nested+0x16/0x20 [ 47.909466] ? mutex_lock_nested+0x16/0x20 [ 47.913853] __hfsplus_setxattr+0x2b8/0x1fd0 [ 47.918852] ? do_raw_spin_unlock+0x172/0x260 [ 47.923431] ? _raw_spin_unlock_irqrestore+0x63/0x90 [ 47.928512] ? copy_name+0x80/0x80 [ 47.932051] ? kmem_cache_alloc_trace+0x13c/0x260 [ 47.937213] ? hfsplus_initxattrs+0x4f/0x1e0 [ 47.941710] ? security_inode_init_security+0x17f/0x2d0 [ 47.947171] ? hfsplus_init_security+0x13/0x20 [ 47.951842] ? hfsplus_fill_super+0x11b5/0x1770 [ 47.956500] ? mount_bdev+0x26f/0x330 [ 47.960450] ? hfsplus_mount+0x10/0x20 [ 47.964306] ? mount_fs+0x7f/0x1f0 [ 47.967937] ? vfs_kern_mount.part.11+0x58/0x3d0 [ 47.972674] ? do_mount+0x376/0x26e0 [ 47.976362] ? ksys_mount+0xb1/0xd0 [ 47.979963] ? __x64_sys_mount+0xb9/0x150 [ 47.984184] ? do_syscall_64+0xca/0x340 [ 47.988223] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.993567] ? mutex_unlock+0xd/0x10 [ 47.997275] ? hfsplus_find_exit+0x75/0xc0 [ 48.001489] ? hfsplus_create_cat+0xb0f/0xd80 [ 48.006097] ? kasan_check_write+0x14/0x20 [ 48.010431] ? __lock_acquire.isra.10+0x116/0x1870 [ 48.015357] ? setup_fault_attr+0x220/0x220 [ 48.019660] ? fs_reclaim_release+0xf/0x30 [ 48.024159] ? kasan_unpoison_shadow+0x35/0x50 [ 48.028719] ? kasan_kmalloc+0xaf/0xc0 [ 48.032581] hfsplus_initxattrs+0x13e/0x1e0 [ 48.037054] security_inode_init_security+0x17f/0x2d0 [ 48.042586] ? hfsplus_user_getxattr+0x30/0x30 [ 48.047423] ? security_kernel_load_data+0x80/0x80 [ 48.052331] hfsplus_init_security+0x13/0x20 [ 48.056715] hfsplus_fill_super+0x11b5/0x1770 [ 48.061204] ? hfsplus_iget+0x6e0/0x6e0 [ 48.065165] ? pointer+0x270/0x6f0 [ 48.068942] ? __list_lru_init+0x2ca/0x610 [ 48.073313] ? netdev_bits+0xa0/0xa0 [ 48.079549] ? pointer_string+0x1b0/0x1b0 [ 48.084159] ? sget_userns+0x1a1/0xb60 [ 48.088346] ? vsnprintf+0x448/0x1490 [ 48.092431] ? lock_downgrade+0x590/0x590 [ 48.096905] ? pointer+0x6f0/0x6f0 [ 48.100557] ? snprintf+0x91/0xc0 [ 48.104067] ? vsprintf+0x20/0x20 [ 48.107503] mount_bdev+0x26f/0x330 [ 48.111144] ? hfsplus_iget+0x6e0/0x6e0 [ 48.115180] hfsplus_mount+0x10/0x20 [ 48.118885] mount_fs+0x7f/0x1f0 [ 48.122243] vfs_kern_mount.part.11+0x58/0x3d0 [ 48.126831] do_mount+0x376/0x26e0 [ 48.130528] ? setup_fault_attr+0x220/0x220 [ 48.135003] ? copy_mount_string+0x20/0x20 [ 48.139231] ? kasan_kmalloc+0xaf/0xc0 [ 48.143265] ? kmem_cache_alloc_trace+0x13c/0x260 [ 48.148423] ? copy_mount_options+0x55/0x260 [ 48.153315] ? copy_mount_options+0x55/0x260 [ 48.158449] ksys_mount+0xb1/0xd0 [ 48.161898] __x64_sys_mount+0xb9/0x150 [ 48.165941] do_syscall_64+0xca/0x340 [ 48.169960] ? prepare_exit_to_usermode+0xec/0x130 [ 48.175040] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.180528] RIP: 0033:0x7fb300bae4aa [ 48.184324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.204030] RSP: 002b:00007fb30072eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.211845] RAX: ffffffffffffffda RBX: 00007fb30072ef80 RCX: 00007fb300bae4aa [ 48.219280] RDX: 0000000020000040 RSI: 0000000020000240 RDI: 00007fb30072ef40 [ 48.226893] RBP: 0000000020000040 R08: 00007fb30072ef80 R09: 0000000000800000 [ 48.234242] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000020000240 [ 48.241487] R13: 00007fb30072ef40 R14: 00000000000006cb R15: 00000000200003c0 [ 48.248965] ================================================================== [ 48.256687] Disabling lock debugging due to kernel taint [ 48.263902] Kernel panic - not syncing: panic_on_warn set ... [ 48.263902] [ 48.271554] Kernel Offset: disabled [ 48.275186] Rebooting in 86400 seconds..