Warning: Permanently added '10.128.1.144' (ECDSA) to the list of known hosts. executing program [ 43.491314][ T3963] loop0: detected capacity change from 0 to 8192 [ 43.496721][ T3963] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 43.498769][ T3963] REISERFS (device loop0): using ordered data mode [ 43.500258][ T3963] reiserfs: using flush barriers [ 43.502284][ T3963] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.505750][ T3963] REISERFS (device loop0): checking transaction log (loop0) [ 43.509212][ T3963] REISERFS (device loop0): Using r5 hash to sort names [ 43.512212][ T3963] reiserfs: enabling write barrier flush mode [ 43.522505][ T3963] ================================================================== [ 43.524239][ T3963] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x504/0x944 [ 43.525673][ T3963] Read of size 18446744073709551584 at addr ffff000178c77fa4 by task syz-executor275/3963 [ 43.527685][ T3963] [ 43.528166][ T3963] CPU: 1 PID: 3963 Comm: syz-executor275 Not tainted 5.15.117-syzkaller #0 [ 43.530059][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 43.532240][ T3963] Call trace: [ 43.532926][ T3963] dump_backtrace+0x0/0x530 [ 43.533884][ T3963] show_stack+0x2c/0x3c [ 43.534787][ T3963] dump_stack_lvl+0x108/0x170 [ 43.535785][ T3963] print_address_description+0x7c/0x3f0 [ 43.536995][ T3963] kasan_report+0x174/0x1e4 [ 43.537952][ T3963] kasan_check_range+0x274/0x2b4 [ 43.539011][ T3963] memmove+0x90/0xe8 [ 43.539765][ T3963] leaf_paste_entries+0x504/0x944 [ 43.540863][ T3963] balance_leaf+0xa0d4/0xe860 [ 43.541818][ T3963] do_balance+0x27c/0x790 [ 43.542689][ T3963] reiserfs_paste_into_item+0x630/0x744 [ 43.543869][ T3963] reiserfs_add_entry+0x8c0/0xc8c [ 43.544964][ T3963] reiserfs_mkdir+0x588/0x77c [ 43.545967][ T3963] reiserfs_xattr_init+0x2b0/0x6dc [ 43.547036][ T3963] reiserfs_remount+0x78c/0x13f4 [ 43.548097][ T3963] legacy_reconfigure+0xfc/0x114 [ 43.549182][ T3963] reconfigure_super+0x340/0x690 [ 43.550228][ T3963] path_mount+0xc94/0x104c [ 43.551149][ T3963] __arm64_sys_mount+0x510/0x5e0 [ 43.552118][ T3963] invoke_syscall+0x98/0x2b8 [ 43.553118][ T3963] el0_svc_common+0x138/0x258 [ 43.554233][ T3963] do_el0_svc+0x58/0x14c [ 43.555112][ T3963] el0_svc+0x7c/0x1f0 [ 43.555937][ T3963] el0t_64_sync_handler+0x84/0xe4 [ 43.557064][ T3963] el0t_64_sync+0x1a0/0x1a4 [ 43.558021][ T3963] [ 43.558492][ T3963] The buggy address belongs to the page: [ 43.559762][ T3963] page:00000000f74bffc3 refcount:3 mapcount:0 mapping:00000000f266b2e8 index:0x213 pfn:0x1b8c77 [ 43.562049][ T3963] memcg:ffff0000c0894000 [ 43.562921][ T3963] aops:def_blk_aops ino:700000 [ 43.563959][ T3963] flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 43.565982][ T3963] raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c0495b08 [ 43.567903][ T3963] raw: 0000000000000213 ffff0000c065f000 00000003ffffffff ffff0000c0894000 [ 43.569741][ T3963] page dumped because: kasan: bad access detected [ 43.571084][ T3963] [ 43.571531][ T3963] Memory state around the buggy address: [ 43.572784][ T3963] ffff000178c77e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.574482][ T3963] ffff000178c77f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.576308][ T3963] >ffff000178c77f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.577968][ T3963] ^ [ 43.579044][ T3963] ffff000178c78000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.580790][ T3963] ffff000178c78080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.582525][ T3963] ================================================================== [ 43.584290][ T3963] Disabling lock debugging due to kernel taint [ 43.585797][ T3963] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 43.590128][ T3963] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 43.592369][ T3963] REISERFS (device loop0): Remounting filesystem read-only [ 43.593941][ T3963] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 43.596632][ T3963] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 43.599771][ T3963] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 43.604043][ T3963] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 43.606166][ T3963] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error