Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. executing program [ 35.308776][ T4226] loop0: detected capacity change from 0 to 8192 [ 35.313416][ T4226] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.316065][ T4226] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 35.318132][ T4226] REISERFS (device loop0): using ordered data mode [ 35.319475][ T4226] reiserfs: using flush barriers [ 35.321392][ T4226] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.324782][ T4226] REISERFS (device loop0): checking transaction log (loop0) [ 35.328124][ T4226] REISERFS (device loop0): Using r5 hash to sort names [ 35.330865][ T4226] reiserfs: enabling write barrier flush mode [ 35.336140][ T4226] ================================================================== [ 35.337864][ T4226] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x698/0xb10 [ 35.339349][ T4226] Read of size 18446744073709551587 at addr ffff000171fe3fa4 by task syz-executor114/4226 [ 35.341323][ T4226] [ 35.341773][ T4226] CPU: 0 PID: 4226 Comm: syz-executor114 Not tainted 6.1.35-syzkaller #0 [ 35.343481][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 35.345618][ T4226] Call trace: [ 35.346360][ T4226] dump_backtrace+0x1c8/0x1f4 [ 35.347198][ T4226] show_stack+0x2c/0x3c [ 35.347989][ T4226] dump_stack_lvl+0x108/0x170 [ 35.348932][ T4226] print_report+0x174/0x4c0 [ 35.349819][ T4226] kasan_report+0xd4/0x130 [ 35.350796][ T4226] kasan_check_range+0x264/0x2a4 [ 35.351839][ T4226] memmove+0x48/0x90 [ 35.352639][ T4226] leaf_paste_entries+0x698/0xb10 [ 35.353740][ T4226] balance_leaf+0xa0d4/0xe860 [ 35.354657][ T4226] do_balance+0x27c/0x788 [ 35.355542][ T4226] reiserfs_paste_into_item+0x630/0x744 [ 35.356908][ T4226] reiserfs_add_entry+0x8ec/0xcc4 [ 35.358075][ T4226] reiserfs_mkdir+0x588/0x77c [ 35.359065][ T4226] reiserfs_xattr_init+0x2b0/0x6bc [ 35.360148][ T4226] reiserfs_remount+0x78c/0x13f4 [ 35.361218][ T4226] legacy_reconfigure+0xfc/0x114 [ 35.362324][ T4226] reconfigure_super+0x328/0x738 [ 35.363318][ T4226] path_mount+0xc6c/0xe58 [ 35.364203][ T4226] __arm64_sys_mount+0x45c/0x594 [ 35.365287][ T4226] invoke_syscall+0x98/0x2c0 [ 35.366223][ T4226] el0_svc_common+0x138/0x258 [ 35.367217][ T4226] do_el0_svc+0x64/0x218 [ 35.368076][ T4226] el0_svc+0x58/0x168 [ 35.368857][ T4226] el0t_64_sync_handler+0x84/0xf0 [ 35.369826][ T4226] el0t_64_sync+0x18c/0x190 [ 35.370736][ T4226] [ 35.371277][ T4226] The buggy address belongs to the physical page: [ 35.372615][ T4226] page:00000000b3126f44 refcount:3 mapcount:0 mapping:00000000baf4ad3b index:0x213 pfn:0x1b1fe3 [ 35.374758][ T4226] memcg:ffff0000c0930000 [ 35.375670][ T4226] aops:def_blk_aops ino:700000 [ 35.376707][ T4226] flags: 0x5ffc60000002042(referenced|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 35.378793][ T4226] raw: 05ffc60000002042 0000000000000000 dead000000000122 ffff0000c0543f10 [ 35.380599][ T4226] raw: 0000000000000213 ffff0000e0001d98 00000003ffffffff ffff0000c0930000 [ 35.382335][ T4226] page dumped because: kasan: bad access detected [ 35.383752][ T4226] [ 35.384231][ T4226] Memory state around the buggy address: [ 35.385511][ T4226] ffff000171fe3e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.387162][ T4226] ffff000171fe3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.388801][ T4226] >ffff000171fe3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.390373][ T4226] ^ [ 35.391435][ T4226] ffff000171fe4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.393102][ T4226] ffff000171fe4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.394739][ T4226] ================================================================== [ 35.397035][ T4226] Disabling lock debugging due to kernel taint [ 35.398359][ T4226] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[771751938 1936287090 0x73667265 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 35.402414][ T4226] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.404536][ T4226] REISERFS (device loop0): Remounting filesystem read-only [ 35.406142][ T4226] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 35.408911][ T4226] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 35.411773][ T4226] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[771751938 1936287090 0x73667265 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 35.415888][ T4226] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 35.418034][ T4226] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error