Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. executing program [ 33.113089][ T6100] loop0: detected capacity change from 0 to 8192 [ 33.118265][ T6100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 33.121571][ T6100] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 33.123803][ T6100] REISERFS (device loop0): using ordered data mode [ 33.125518][ T6100] reiserfs: using flush barriers [ 33.127391][ T6100] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 33.131444][ T6100] REISERFS (device loop0): checking transaction log (loop0) [ 33.135859][ T6100] REISERFS (device loop0): Using tea hash to sort names [ 33.137683][ T6100] REISERFS (device loop0): using 3.5.x disk format [ 33.139771][ T6100] ================================================================== [ 33.141676][ T6100] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 33.143368][ T6100] Read of size 18446744073709551584 at addr ffff0000dcf8dfa4 by task syz-executor153/6100 [ 33.145772][ T6100] [ 33.146365][ T6100] CPU: 1 PID: 6100 Comm: syz-executor153 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 33.148866][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 33.151299][ T6100] Call trace: [ 33.152021][ T6100] dump_backtrace+0x1b8/0x1e4 [ 33.153176][ T6100] show_stack+0x2c/0x3c [ 33.154200][ T6100] dump_stack_lvl+0xd0/0x124 [ 33.155354][ T6100] print_report+0x174/0x514 [ 33.156455][ T6100] kasan_report+0xd8/0x138 [ 33.157533][ T6100] kasan_check_range+0x254/0x294 [ 33.158746][ T6100] __asan_memmove+0x3c/0x84 [ 33.159884][ T6100] leaf_paste_entries+0x698/0xb10 [ 33.161142][ T6100] balance_leaf+0xa0d4/0xe860 [ 33.162333][ T6100] do_balance+0x27c/0x788 [ 33.163347][ T6100] reiserfs_paste_into_item+0x630/0x744 [ 33.164648][ T6100] reiserfs_add_entry+0x8ec/0xca8 [ 33.165902][ T6100] reiserfs_mkdir+0x588/0x77c [ 33.167044][ T6100] reiserfs_xattr_init+0x2b4/0x638 [ 33.168312][ T6100] reiserfs_fill_super+0x1bfc/0x2028 [ 33.169618][ T6100] mount_bdev+0x1e8/0x2b4 [ 33.170651][ T6100] get_super_block+0x44/0x58 [ 33.171755][ T6100] legacy_get_tree+0xd4/0x16c [ 33.172992][ T6100] vfs_get_tree+0x90/0x288 [ 33.174121][ T6100] do_new_mount+0x25c/0x8c8 [ 33.175193][ T6100] path_mount+0x590/0xe04 [ 33.176328][ T6100] __arm64_sys_mount+0x45c/0x594 [ 33.177645][ T6100] invoke_syscall+0x98/0x2b8 [ 33.178784][ T6100] el0_svc_common+0x130/0x23c [ 33.180002][ T6100] do_el0_svc+0x48/0x58 [ 33.180958][ T6100] el0_svc+0x54/0x158 [ 33.181884][ T6100] el0t_64_sync_handler+0x84/0xfc [ 33.183122][ T6100] el0t_64_sync+0x190/0x194 [ 33.184227][ T6100] [ 33.184741][ T6100] The buggy address belongs to the physical page: [ 33.186290][ T6100] page:00000000e89e43f5 refcount:3 mapcount:0 mapping:00000000a29ac5c8 index:0x213 pfn:0x11cf8d [ 33.188739][ T6100] memcg:ffff0000c1902000 [ 33.189743][ T6100] aops:def_blk_aops ino:700000 [ 33.190943][ T6100] flags: 0x5ffc00000008104(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 33.193296][ T6100] page_type: 0xffffffff() [ 33.194422][ T6100] raw: 05ffc00000008104 0000000000000000 dead000000000122 ffff0000c149cd90 [ 33.196610][ T6100] raw: 0000000000000213 ffff0000dec56d98 00000003ffffffff ffff0000c1902000 [ 33.198833][ T6100] page dumped because: kasan: bad access detected [ 33.200389][ T6100] [ 33.200968][ T6100] Memory state around the buggy address: [ 33.202254][ T6100] ffff0000dcf8de80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.204253][ T6100] ffff0000dcf8df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.206266][ T6100] >ffff0000dcf8df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.208310][ T6100] ^ [ 33.209550][ T6100] ffff0000dcf8e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.211574][ T6100] ffff0000dcf8e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.213551][ T6100] ================================================================== [ 33.215692][ T6100] Disabling lock debugging due to kernel taint [ 33.217220][ T6100] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 33.221842][ T6100] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 33.224255][ T6100] REISERFS (device loop0): Remounting filesystem read-only [ 33.225965][ T6100] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 33.229139][ T6100] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 33.232324][ T6100] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 33.237081][ T6100] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 33.239605][ T6100] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error