Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. executing program [ 34.332846][ T6103] loop0: detected capacity change from 0 to 8192 [ 34.337613][ T6103] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.340447][ T6103] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 34.342604][ T6103] REISERFS (device loop0): using ordered data mode [ 34.344188][ T6103] reiserfs: using flush barriers [ 34.345851][ T6103] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.349739][ T6103] REISERFS (device loop0): checking transaction log (loop0) [ 34.353154][ T6103] REISERFS (device loop0): Using tea hash to sort names [ 34.355094][ T6103] REISERFS (device loop0): using 3.5.x disk format [ 34.357193][ T6103] ================================================================== [ 34.358902][ T6103] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 34.360638][ T6103] Read of size 18446744073709551592 at addr ffff0000dcca7fa4 by task syz-executor119/6103 [ 34.362928][ T6103] [ 34.363388][ T6103] CPU: 1 PID: 6103 Comm: syz-executor119 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 34.365662][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 34.367905][ T6103] Call trace: [ 34.368561][ T6103] dump_backtrace+0x1b8/0x1e4 [ 34.369686][ T6103] show_stack+0x2c/0x3c [ 34.370775][ T6103] dump_stack_lvl+0xd0/0x124 [ 34.371929][ T6103] print_report+0x174/0x514 [ 34.372961][ T6103] kasan_report+0xd8/0x138 [ 34.374026][ T6103] kasan_check_range+0x254/0x294 [ 34.375146][ T6103] __asan_memmove+0x3c/0x84 [ 34.376136][ T6103] leaf_paste_entries+0x698/0xb10 [ 34.377259][ T6103] balance_leaf+0xa0d4/0xe860 [ 34.378290][ T6103] do_balance+0x27c/0x788 [ 34.379296][ T6103] reiserfs_paste_into_item+0x630/0x744 [ 34.380496][ T6103] reiserfs_add_entry+0x8ec/0xca8 [ 34.381723][ T6103] reiserfs_mkdir+0x588/0x77c [ 34.382806][ T6103] reiserfs_xattr_init+0x2b4/0x638 [ 34.383853][ T6103] reiserfs_fill_super+0x1bfc/0x2028 [ 34.385095][ T6103] mount_bdev+0x1e8/0x2b4 [ 34.386119][ T6103] get_super_block+0x44/0x58 [ 34.387195][ T6103] legacy_get_tree+0xd4/0x16c [ 34.388213][ T6103] vfs_get_tree+0x90/0x288 [ 34.389124][ T6103] do_new_mount+0x25c/0x8c8 [ 34.390200][ T6103] path_mount+0x590/0xe04 [ 34.391229][ T6103] __arm64_sys_mount+0x45c/0x594 [ 34.392318][ T6103] invoke_syscall+0x98/0x2b8 [ 34.393303][ T6103] el0_svc_common+0x130/0x23c [ 34.394322][ T6103] do_el0_svc+0x48/0x58 [ 34.395303][ T6103] el0_svc+0x54/0x158 [ 34.396238][ T6103] el0t_64_sync_handler+0x84/0xfc [ 34.397380][ T6103] el0t_64_sync+0x190/0x194 [ 34.398467][ T6103] [ 34.399045][ T6103] The buggy address belongs to the physical page: [ 34.400546][ T6103] page:00000000dcab4715 refcount:3 mapcount:0 mapping:000000003889e0ba index:0x213 pfn:0x11cca7 [ 34.402952][ T6103] memcg:ffff0000c1902000 [ 34.403921][ T6103] aops:def_blk_aops ino:700000 [ 34.405010][ T6103] flags: 0x5ffc00000008104(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 34.407142][ T6103] page_type: 0xffffffff() [ 34.408193][ T6103] raw: 05ffc00000008104 0000000000000000 dead000000000122 ffff0000c153f010 [ 34.410028][ T6103] raw: 0000000000000213 ffff0000dbfa7cb0 00000003ffffffff ffff0000c1902000 [ 34.412052][ T6103] page dumped because: kasan: bad access detected [ 34.413475][ T6103] [ 34.413985][ T6103] Memory state around the buggy address: [ 34.415308][ T6103] ffff0000dcca7e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.417111][ T6103] ffff0000dcca7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.419081][ T6103] >ffff0000dcca7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.420959][ T6103] ^ [ 34.421983][ T6103] ffff0000dcca8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.423716][ T6103] ffff0000dcca8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.425597][ T6103] ================================================================== [ 34.427685][ T6103] Disabling lock debugging due to kernel taint [ 34.429080][ T6103] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[2 0 0x6965722e UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 34.433168][ T6103] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 34.435645][ T6103] REISERFS (device loop0): Remounting filesystem read-only [ 34.437357][ T6103] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 34.440176][ T6103] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 34.443460][ T6103] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[2 0 0x6965722e UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 34.447743][ T6103] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 34.449978][ T6103] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error