Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. executing program [ 32.168683][ T6098] loop0: detected capacity change from 0 to 8192 [ 32.174167][ T6098] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 32.177229][ T6098] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 32.179762][ T6098] REISERFS (device loop0): using ordered data mode [ 32.181346][ T6098] reiserfs: using flush barriers [ 32.183272][ T6098] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 32.187318][ T6098] REISERFS (device loop0): checking transaction log (loop0) [ 32.190579][ T6098] REISERFS (device loop0): Using tea hash to sort names [ 32.192384][ T6098] REISERFS (device loop0): using 3.5.x disk format [ 32.194638][ T6098] ================================================================== [ 32.196551][ T6098] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 32.198200][ T6098] Read of size 18446744073709551585 at addr ffff0000decacfa4 by task syz-executor288/6098 [ 32.200484][ T6098] [ 32.201046][ T6098] CPU: 0 PID: 6098 Comm: syz-executor288 Not tainted 6.7.0-rc3-syzkaller-g2cc14f52aeb7 #0 [ 32.203478][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 32.205896][ T6098] Call trace: [ 32.206636][ T6098] dump_backtrace+0x1b8/0x1e4 [ 32.207772][ T6098] show_stack+0x2c/0x44 [ 32.208756][ T6098] dump_stack_lvl+0xd0/0x124 [ 32.209895][ T6098] print_report+0x174/0x514 [ 32.211016][ T6098] kasan_report+0xd8/0x138 [ 32.212071][ T6098] kasan_check_range+0x254/0x294 [ 32.213253][ T6098] __asan_memmove+0x3c/0x84 [ 32.214338][ T6098] leaf_paste_entries+0x698/0xb10 [ 32.215489][ T6098] balance_leaf+0xa0d4/0xe860 [ 32.216601][ T6098] do_balance+0x27c/0x788 [ 32.217617][ T6098] reiserfs_paste_into_item+0x630/0x744 [ 32.219000][ T6098] reiserfs_add_entry+0x8ec/0xca8 [ 32.220211][ T6098] reiserfs_mkdir+0x588/0x77c [ 32.221329][ T6098] reiserfs_xattr_init+0x2b4/0x638 [ 32.222553][ T6098] reiserfs_fill_super+0x1bfc/0x2028 [ 32.223717][ T6098] mount_bdev+0x1e8/0x2b4 [ 32.224722][ T6098] get_super_block+0x44/0x58 [ 32.225822][ T6098] legacy_get_tree+0xd4/0x16c [ 32.226947][ T6098] vfs_get_tree+0x90/0x288 [ 32.227962][ T6098] do_new_mount+0x25c/0x8c8 [ 32.229013][ T6098] path_mount+0x590/0xe04 [ 32.230069][ T6098] __arm64_sys_mount+0x45c/0x594 [ 32.231182][ T6098] invoke_syscall+0x98/0x2b8 [ 32.232213][ T6098] el0_svc_common+0x130/0x23c [ 32.233335][ T6098] do_el0_svc+0x48/0x58 [ 32.234384][ T6098] el0_svc+0x54/0x158 [ 32.235357][ T6098] el0t_64_sync_handler+0x84/0xfc [ 32.236526][ T6098] el0t_64_sync+0x190/0x194 [ 32.237700][ T6098] [ 32.238246][ T6098] The buggy address belongs to the physical page: [ 32.239811][ T6098] page:00000000ac55afca refcount:3 mapcount:0 mapping:00000000b2eb54fe index:0x213 pfn:0x11ecac [ 32.242282][ T6098] memcg:ffff0000c1902000 [ 32.243298][ T6098] aops:def_blk_aops ino:700000 [ 32.244377][ T6098] flags: 0x5ffc00000008104(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 32.246628][ T6098] page_type: 0xffffffff() [ 32.247614][ T6098] raw: 05ffc00000008104 0000000000000000 dead000000000122 ffff0000c149b690 [ 32.249742][ T6098] raw: 0000000000000213 ffff0000dc337ae0 00000003ffffffff ffff0000c1902000 [ 32.251646][ T6098] page dumped because: kasan: bad access detected [ 32.253212][ T6098] [ 32.253767][ T6098] Memory state around the buggy address: [ 32.255066][ T6098] ffff0000decace80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.257049][ T6098] ffff0000decacf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.258903][ T6098] >ffff0000decacf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.260814][ T6098] ^ [ 32.261997][ T6098] ffff0000decad000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.263876][ T6098] ffff0000decad080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 32.265832][ T6098] ================================================================== [ 32.267936][ T6098] Disabling lock debugging due to kernel taint [ 32.269368][ T6098] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1701981698 1919251305 0x705f7366 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 32.273945][ T6098] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 32.276309][ T6098] REISERFS (device loop0): Remounting filesystem read-only [ 32.277941][ T6098] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 32.281081][ T6098] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 32.284978][ T6098] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1701981698 1919251305 0x705f7366 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 32.289558][ T6098] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 32.292024][ T6098] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error