Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.177439][ T4217] loop0: detected capacity change from 0 to 8192 [ 34.182080][ T4217] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.184844][ T4217] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 34.187031][ T4217] REISERFS (device loop0): using ordered data mode [ 34.188409][ T4217] reiserfs: using flush barriers [ 34.190166][ T4217] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.193746][ T4217] REISERFS (device loop0): checking transaction log (loop0) [ 34.197177][ T4217] REISERFS (device loop0): Using r5 hash to sort names [ 34.200020][ T4217] reiserfs: enabling write barrier flush mode [ 34.205252][ T4217] ================================================================== [ 34.207049][ T4217] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 34.208608][ T4217] Read of size 18446744073709551584 at addr ffff0000e0ed5fa4 by task syz-executor300/4217 [ 34.210692][ T4217] [ 34.211168][ T4217] CPU: 1 PID: 4217 Comm: syz-executor300 Not tainted 6.1.35-syzkaller #0 [ 34.212953][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 34.215178][ T4217] Call trace: [ 34.215830][ T4217] dump_backtrace+0x1c8/0x1f4 [ 34.216819][ T4217] show_stack+0x2c/0x3c [ 34.217758][ T4217] dump_stack_lvl+0x108/0x170 [ 34.218793][ T4217] print_report+0x174/0x4c0 [ 34.219795][ T4217] kasan_report+0xd4/0x130 [ 34.220732][ T4217] kasan_check_range+0x264/0x2a4 [ 34.221902][ T4217] memmove+0x48/0x90 [ 34.222739][ T4217] leaf_paste_entries+0x698/0xb10 [ 34.223794][ T4217] balance_leaf+0xa0d4/0xe860 [ 34.224857][ T4217] do_balance+0x27c/0x788 [ 34.225751][ T4217] reiserfs_paste_into_item+0x630/0x744 [ 34.226937][ T4217] reiserfs_add_entry+0x8ec/0xcc4 [ 34.228037][ T4217] reiserfs_mkdir+0x588/0x77c [ 34.228995][ T4217] reiserfs_xattr_init+0x2b0/0x6bc [ 34.230062][ T4217] reiserfs_remount+0x78c/0x13f4 [ 34.231085][ T4217] legacy_reconfigure+0xfc/0x114 [ 34.232229][ T4217] reconfigure_super+0x328/0x738 [ 34.233343][ T4217] path_mount+0xc6c/0xe58 [ 34.234342][ T4217] __arm64_sys_mount+0x45c/0x594 [ 34.235450][ T4217] invoke_syscall+0x98/0x2c0 [ 34.236487][ T4217] el0_svc_common+0x138/0x258 [ 34.237413][ T4217] do_el0_svc+0x64/0x218 [ 34.238316][ T4217] el0_svc+0x58/0x168 [ 34.239143][ T4217] el0t_64_sync_handler+0x84/0xf0 [ 34.240252][ T4217] el0t_64_sync+0x18c/0x190 [ 34.241255][ T4217] [ 34.241690][ T4217] The buggy address belongs to the physical page: [ 34.243047][ T4217] page:0000000055791cd6 refcount:3 mapcount:0 mapping:000000000b55d243 index:0x213 pfn:0x120ed5 [ 34.245177][ T4217] memcg:ffff0000c0930000 [ 34.246034][ T4217] aops:def_blk_aops ino:700000 [ 34.247090][ T4217] flags: 0x5ffc60000002042(referenced|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 34.249270][ T4217] raw: 05ffc60000002042 0000000000000000 dead000000000122 ffff0000c050a910 [ 34.251153][ T4217] raw: 0000000000000213 ffff0000dfa403a0 00000003ffffffff ffff0000c0930000 [ 34.252964][ T4217] page dumped because: kasan: bad access detected [ 34.254276][ T4217] [ 34.254804][ T4217] Memory state around the buggy address: [ 34.256033][ T4217] ffff0000e0ed5e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.257796][ T4217] ffff0000e0ed5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.259580][ T4217] >ffff0000e0ed5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.261410][ T4217] ^ [ 34.262522][ T4217] ffff0000e0ed6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.264174][ T4217] ffff0000e0ed6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.265875][ T4217] ================================================================== [ 34.267628][ T4217] Disabling lock debugging due to kernel taint [ 34.268960][ T4217] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 34.273126][ T4217] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 34.275572][ T4217] REISERFS (device loop0): Remounting filesystem read-only [ 34.277000][ T4217] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 34.279828][ T4217] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 34.282866][ T4217] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 34.287091][ T4217] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 34.289311][ T4217] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error