Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. executing program [ 35.659437][ T4220] loop0: detected capacity change from 0 to 8192 [ 35.664916][ T4220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.668318][ T4220] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 35.670729][ T4220] REISERFS (device loop0): using ordered data mode [ 35.672905][ T4220] reiserfs: using flush barriers [ 35.675093][ T4220] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.679497][ T4220] REISERFS (device loop0): checking transaction log (loop0) [ 35.683479][ T4220] REISERFS (device loop0): Using tea hash to sort names [ 35.685461][ T4220] REISERFS (device loop0): using 3.5.x disk format [ 35.687395][ T4220] ================================================================== [ 35.689462][ T4220] BUG: KASAN: use-after-free in reiserfs_find_entry+0xac8/0x149c [ 35.691446][ T4220] Read of size 1 at addr ffff0000e2eb5f83 by task syz-executor413/4220 [ 35.693572][ T4220] [ 35.694171][ T4220] CPU: 0 PID: 4220 Comm: syz-executor413 Not tainted 6.1.83-syzkaller #0 [ 35.696249][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 35.698920][ T4220] Call trace: [ 35.699731][ T4220] dump_backtrace+0x1c8/0x1f4 [ 35.700955][ T4220] show_stack+0x2c/0x3c [ 35.702034][ T4220] dump_stack_lvl+0x108/0x170 [ 35.703200][ T4220] print_report+0x174/0x4c0 [ 35.704368][ T4220] kasan_report+0xd4/0x130 [ 35.705497][ T4220] __asan_report_load1_noabort+0x2c/0x38 [ 35.706977][ T4220] reiserfs_find_entry+0xac8/0x149c [ 35.708320][ T4220] reiserfs_lookup+0x184/0x3c4 [ 35.709593][ T4220] __lookup_slow+0x250/0x374 [ 35.710811][ T4220] lookup_one_len+0x178/0x28c [ 35.712058][ T4220] reiserfs_lookup_privroot+0x8c/0x204 [ 35.713452][ T4220] reiserfs_fill_super+0x1bc0/0x2028 [ 35.714853][ T4220] mount_bdev+0x274/0x370 [ 35.715964][ T4220] get_super_block+0x44/0x58 [ 35.717182][ T4220] legacy_get_tree+0xd4/0x16c [ 35.718429][ T4220] vfs_get_tree+0x90/0x274 [ 35.719598][ T4220] do_new_mount+0x278/0x8fc [ 35.720787][ T4220] path_mount+0x590/0xe5c [ 35.721918][ T4220] __arm64_sys_mount+0x45c/0x594 [ 35.723230][ T4220] invoke_syscall+0x98/0x2c0 [ 35.724439][ T4220] el0_svc_common+0x138/0x258 [ 35.725653][ T4220] do_el0_svc+0x64/0x218 [ 35.726734][ T4220] el0_svc+0x58/0x168 [ 35.727791][ T4220] el0t_64_sync_handler+0x84/0xf0 [ 35.729102][ T4220] el0t_64_sync+0x18c/0x190 [ 35.730269][ T4220] [ 35.730873][ T4220] The buggy address belongs to the physical page: [ 35.732556][ T4220] page:000000003d3fe86f refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x122eb5 [ 35.735205][ T4220] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 35.737115][ T4220] raw: 05ffc00000000000 fffffc00038bad88 fffffc00038bad08 0000000000000000 [ 35.739317][ T4220] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 35.741659][ T4220] page dumped because: kasan: bad access detected [ 35.743378][ T4220] [ 35.743988][ T4220] Memory state around the buggy address: [ 35.745422][ T4220] ffff0000e2eb5e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 35.747576][ T4220] ffff0000e2eb5f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 35.749683][ T4220] >ffff0000e2eb5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 35.751809][ T4220] ^ [ 35.752867][ T4220] ffff0000e2eb6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 35.754969][ T4220] ffff0000e2eb6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 35.757105][ T4220] ================================================================== [ 35.761604][ T4220] Disabling lock debugging due to kernel taint [ 35.763347][ T4220] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 35.767291][ T4220] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.769927][ T4220] REISERFS (device loop0): Remounting filesystem read-only [ 35.772026][ T4220] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data [ 35.775607][ T4220] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 35.779790][ T4220] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.782470][ T4220] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 35.784563][ T4220] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 35.788566][ T4220] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.791220][ T4220] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data [ 35.795183][ T4220] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.