[ 15.286758][ T3893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.291162][ T3893] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.338806][ T1682] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.341703][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.661003][ T4217] loop0: detected capacity change from 0 to 8192 [ 35.665911][ T4217] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.668951][ T4217] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 35.671099][ T4217] REISERFS (device loop0): using ordered data mode [ 35.672479][ T4217] reiserfs: using flush barriers [ 35.674372][ T4217] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.678235][ T4217] REISERFS (device loop0): checking transaction log (loop0) [ 35.681861][ T4217] REISERFS (device loop0): Using r5 hash to sort names [ 35.683532][ T4217] REISERFS (device loop0): using 3.5.x disk format [ 35.685408][ T4217] ================================================================== [ 35.687274][ T4217] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 35.688908][ T4217] Read of size 18446744073709551584 at addr ffff00017203dfa4 by task syz-executor565/4217 [ 35.691377][ T4217] [ 35.691926][ T4217] CPU: 1 PID: 4217 Comm: syz-executor565 Not tainted 6.1.30-syzkaller #0 [ 35.693940][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 35.696370][ T4217] Call trace: [ 35.697184][ T4217] dump_backtrace+0x1c8/0x1f4 [ 35.698347][ T4217] show_stack+0x2c/0x3c [ 35.699397][ T4217] dump_stack_lvl+0x108/0x170 [ 35.700503][ T4217] print_report+0x174/0x4c0 [ 35.701593][ T4217] kasan_report+0xd4/0x130 [ 35.702723][ T4217] kasan_check_range+0x264/0x2a4 [ 35.703928][ T4217] memmove+0x48/0x90 [ 35.704921][ T4217] leaf_paste_entries+0x698/0xb10 [ 35.706099][ T4217] balance_leaf+0xa0d4/0xe860 [ 35.707257][ T4217] do_balance+0x27c/0x788 [ 35.708308][ T4217] reiserfs_paste_into_item+0x630/0x744 [ 35.709555][ T4217] reiserfs_add_entry+0x8ec/0xcc4 [ 35.710626][ T4217] reiserfs_mkdir+0x588/0x77c [ 35.711750][ T4217] reiserfs_xattr_init+0x2b0/0x6bc [ 35.712940][ T4217] reiserfs_fill_super+0x1bfc/0x2028 [ 35.714198][ T4217] mount_bdev+0x26c/0x368 [ 35.715242][ T4217] get_super_block+0x44/0x58 [ 35.716300][ T4217] legacy_get_tree+0xd4/0x16c [ 35.717455][ T4217] vfs_get_tree+0x90/0x274 [ 35.718503][ T4217] do_new_mount+0x25c/0x8c8 [ 35.719510][ T4217] path_mount+0x590/0xe58 [ 35.720543][ T4217] __arm64_sys_mount+0x45c/0x594 [ 35.721656][ T4217] invoke_syscall+0x98/0x2c0 [ 35.722715][ T4217] el0_svc_common+0x138/0x258 [ 35.723896][ T4217] do_el0_svc+0x64/0x218 [ 35.724936][ T4217] el0_svc+0x58/0x168 [ 35.725861][ T4217] el0t_64_sync_handler+0x84/0xf0 [ 35.727020][ T4217] el0t_64_sync+0x18c/0x190 [ 35.728081][ T4217] [ 35.728636][ T4217] The buggy address belongs to the physical page: [ 35.730197][ T4217] page:000000004bdf7410 refcount:3 mapcount:0 mapping:000000007eccc65d index:0x213 pfn:0x1b203d [ 35.732681][ T4217] memcg:ffff0000c0930000 [ 35.733699][ T4217] aops:def_blk_aops ino:700000 [ 35.734848][ T4217] flags: 0x5ffc60000002042(referenced|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 35.737182][ T4217] raw: 05ffc60000002042 0000000000000000 dead000000000122 ffff0000c050d510 [ 35.739229][ T4217] raw: 0000000000000213 ffff0000dfb86d98 00000003ffffffff ffff0000c0930000 [ 35.741270][ T4217] page dumped because: kasan: bad access detected [ 35.742843][ T4217] [ 35.743434][ T4217] Memory state around the buggy address: [ 35.744808][ T4217] ffff00017203de80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.746818][ T4217] ffff00017203df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.748700][ T4217] >ffff00017203df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.750607][ T4217] ^ [ 35.751800][ T4217] ffff00017203e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.753708][ T4217] ffff00017203e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.755578][ T4217] ================================================================== [ 35.757664][ T4217] Disabling lock debugging due to kernel taint [ 35.759154][ T4217] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 35.763677][ T4217] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.765966][ T4217] REISERFS (device loop0): Remounting filesystem read-only [ 35.767572][ T4217] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 35.770674][ T4217] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 35.773811][ T4217] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 35.778329][ T4217] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.781047][ T4217] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error