Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. executing program [ 37.893387][ T6090] syz-executor217[6090]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 37.935472][ T6090] loop0: detected capacity change from 0 to 8192 [ 37.940756][ T6090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.944264][ T6090] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 37.946772][ T6090] REISERFS (device loop0): using ordered data mode [ 37.948652][ T6090] reiserfs: using flush barriers [ 37.950702][ T6090] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.955306][ T6090] REISERFS (device loop0): checking transaction log (loop0) [ 37.959055][ T6090] REISERFS (device loop0): Using tea hash to sort names [ 37.961533][ T6090] ================================================================== [ 37.963729][ T6090] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 37.965809][ T6090] Read of size 18446744073709551584 at addr ffff0000dd98bfa4 by task syz-executor217/6090 [ 37.968433][ T6090] [ 37.969020][ T6090] CPU: 0 PID: 6090 Comm: syz-executor217 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 37.971675][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 37.974385][ T6090] Call trace: [ 37.975257][ T6090] dump_backtrace+0x1b8/0x1e4 [ 37.976520][ T6090] show_stack+0x2c/0x44 [ 37.977672][ T6090] dump_stack_lvl+0xd0/0x124 [ 37.978918][ T6090] print_report+0x174/0x514 [ 37.980184][ T6090] kasan_report+0xd8/0x138 [ 37.981393][ T6090] kasan_check_range+0x254/0x294 [ 37.982718][ T6090] __asan_memmove+0x3c/0x84 [ 37.983900][ T6090] leaf_paste_entries+0x698/0xb10 [ 37.985231][ T6090] balance_leaf+0xa0d4/0xe860 [ 37.986472][ T6090] do_balance+0x27c/0x788 [ 37.987617][ T6090] reiserfs_paste_into_item+0x630/0x744 [ 37.989119][ T6090] reiserfs_add_entry+0x8ec/0xca8 [ 37.990453][ T6090] reiserfs_mkdir+0x588/0x77c [ 37.991728][ T6090] reiserfs_xattr_init+0x2b4/0x638 [ 37.993106][ T6090] reiserfs_fill_super+0x1bfc/0x2028 [ 37.994511][ T6090] mount_bdev+0x1e8/0x2b4 [ 37.995658][ T6090] get_super_block+0x44/0x58 [ 37.996864][ T6090] legacy_get_tree+0xd4/0x16c [ 37.998121][ T6090] vfs_get_tree+0x90/0x288 [ 37.999326][ T6090] do_new_mount+0x25c/0x8c8 [ 38.000522][ T6090] path_mount+0x590/0xe04 [ 38.001629][ T6090] __arm64_sys_mount+0x45c/0x594 [ 38.002978][ T6090] invoke_syscall+0x98/0x2b8 [ 38.004206][ T6090] el0_svc_common+0x130/0x23c [ 38.005401][ T6090] do_el0_svc+0x48/0x58 [ 38.006463][ T6090] el0_svc+0x54/0x158 [ 38.007541][ T6090] el0t_64_sync_handler+0x84/0xfc [ 38.008814][ T6090] el0t_64_sync+0x190/0x194 [ 38.009970][ T6090] [ 38.010594][ T6090] The buggy address belongs to the physical page: [ 38.012316][ T6090] page:00000000325a8f29 refcount:3 mapcount:0 mapping:00000000f3b07943 index:0x213 pfn:0x11d98b [ 38.015096][ T6090] memcg:ffff0000c18fa000 [ 38.016237][ T6090] aops:def_blk_aops ino:700000 [ 38.017433][ T6090] flags: 0x5ffc00000008104(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 38.019930][ T6090] page_type: 0xffffffff() [ 38.021135][ T6090] raw: 05ffc00000008104 0000000000000000 dead000000000122 ffff0000c151c210 [ 38.023362][ T6090] raw: 0000000000000213 ffff0000dcfa1658 00000003ffffffff ffff0000c18fa000 [ 38.025616][ T6090] page dumped because: kasan: bad access detected [ 38.027256][ T6090] [ 38.027851][ T6090] Memory state around the buggy address: [ 38.029284][ T6090] ffff0000dd98be80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.031455][ T6090] ffff0000dd98bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.033561][ T6090] >ffff0000dd98bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.035639][ T6090] ^ [ 38.036932][ T6090] ffff0000dd98c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.039005][ T6090] ffff0000dd98c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.041194][ T6090] ================================================================== [ 38.043486][ T6090] Disabling lock debugging due to kernel taint [ 38.045196][ T6090] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 38.050425][ T6090] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 38.053112][ T6090] REISERFS (device loop0): Remounting filesystem read-only [ 38.055015][ T6090] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 38.058439][ T6090] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 38.062222][ T6090] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 38.067684][ T6090] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 38.070224][ T6090] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error