Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. executing program [ 50.905654][ T3965] loop0: detected capacity change from 0 to 8192 [ 50.908747][ T3965] ======================================================= [ 50.908747][ T3965] WARNING: The mand mount option has been deprecated and [ 50.908747][ T3965] and is ignored by this kernel. Remove the mand [ 50.908747][ T3965] option from the mount to silence this warning. [ 50.908747][ T3965] ======================================================= [ 50.918589][ T3965] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.920645][ T3965] REISERFS (device loop0): using ordered data mode [ 50.922314][ T3965] reiserfs: using flush barriers [ 50.924371][ T3965] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.927869][ T3965] REISERFS (device loop0): checking transaction log (loop0) [ 50.992896][ T3965] REISERFS (device loop0): Using tea hash to sort names [ 50.995249][ T3965] ================================================================== [ 50.997079][ T3965] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x504/0x944 [ 50.998768][ T3965] Read of size 18446744073709551584 at addr ffff0000dfe60fa4 by task syz-executor220/3965 [ 51.000993][ T3965] [ 51.001501][ T3965] CPU: 0 PID: 3965 Comm: syz-executor220 Not tainted 5.15.110-syzkaller #0 [ 51.003387][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 51.005545][ T3965] Call trace: [ 51.006211][ T3965] dump_backtrace+0x0/0x530 [ 51.007157][ T3965] show_stack+0x2c/0x3c [ 51.008032][ T3965] dump_stack_lvl+0x108/0x170 [ 51.009088][ T3965] print_address_description+0x7c/0x3f0 [ 51.010207][ T3965] kasan_report+0x174/0x1e4 [ 51.011166][ T3965] kasan_check_range+0x274/0x2b4 [ 51.012264][ T3965] memmove+0x90/0xe8 [ 51.013175][ T3965] leaf_paste_entries+0x504/0x944 [ 51.014179][ T3965] balance_leaf+0xa0d4/0xe860 [ 51.015218][ T3965] do_balance+0x27c/0x790 [ 51.016212][ T3965] reiserfs_paste_into_item+0x630/0x744 [ 51.017442][ T3965] reiserfs_add_entry+0x8c0/0xc8c [ 51.018538][ T3965] reiserfs_mkdir+0x588/0x77c [ 51.019550][ T3965] reiserfs_xattr_init+0x2b0/0x6dc [ 51.020654][ T3965] reiserfs_fill_super+0x1b28/0x1e8c [ 51.021806][ T3965] mount_bdev+0x26c/0x368 [ 51.022701][ T3965] get_super_block+0x44/0x58 [ 51.023674][ T3965] legacy_get_tree+0xd4/0x16c [ 51.024696][ T3965] vfs_get_tree+0x90/0x274 [ 51.025659][ T3965] do_new_mount+0x25c/0x8c8 [ 51.026615][ T3965] path_mount+0x590/0x104c [ 51.027516][ T3965] __arm64_sys_mount+0x510/0x5e0 [ 51.028506][ T3965] invoke_syscall+0x98/0x2b8 [ 51.029488][ T3965] el0_svc_common+0x138/0x258 [ 51.030451][ T3965] do_el0_svc+0x58/0x14c [ 51.031387][ T3965] el0_svc+0x7c/0x1f0 [ 51.032251][ T3965] el0t_64_sync_handler+0x84/0xe4 [ 51.033221][ T3965] el0t_64_sync+0x1a0/0x1a4 [ 51.034179][ T3965] [ 51.034718][ T3965] The buggy address belongs to the page: [ 51.035927][ T3965] page:000000001897bb7c refcount:3 mapcount:0 mapping:00000000ed5c84ce index:0x213 pfn:0x11fe60 [ 51.038089][ T3965] memcg:ffff0000c0894000 [ 51.038968][ T3965] aops:def_blk_aops ino:700000 [ 51.039936][ T3965] flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 51.041986][ T3965] raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c5074f48 [ 51.043769][ T3965] raw: 0000000000000213 ffff0000df8a8488 00000003ffffffff ffff0000c0894000 [ 51.045601][ T3965] page dumped because: kasan: bad access detected [ 51.046867][ T3965] [ 51.047376][ T3965] Memory state around the buggy address: [ 51.048574][ T3965] ffff0000dfe60e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.050299][ T3965] ffff0000dfe60f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.052029][ T3965] >ffff0000dfe60f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.053836][ T3965] ^ [ 51.054808][ T3965] ffff0000dfe61000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.056519][ T3965] ffff0000dfe61080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.058228][ T3965] ================================================================== [ 51.059914][ T3965] Disabling lock debugging due to kernel taint [ 51.061453][ T3965] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 51.065866][ T3965] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 51.068106][ T3965] REISERFS (device loop0): Remounting filesystem read-only [ 51.069470][ T3965] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 51.072206][ T3965] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 51.075170][ T3965] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 51.079449][ T3965] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 51.081628][ T3965] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error