REISERFS (device loop3): checking transaction log (loop3) REISERFS (device loop3): Using tea hash to sort names REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4507 Comm: syz-executor.3 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) pc : reiserfs_ioctl+0x238/0x4b4 fs/reiserfs/ioctl.c:96 lr : sign_extend64 include/linux/bitops.h:183 [inline] lr : __uaccess_mask_ptr arch/arm64/include/asm/uaccess.h:244 [inline] lr : reiserfs_ioctl+0x204/0x4b4 fs/reiserfs/ioctl.c:96 sp : ffff80001f087cd0 x29: ffff80001f087cd0 x28: ffff0000d59b9b40 x27: 0000000000000004 x26: 1fffe0001c4c8037 x25: dfff800000000000 x24: 00000000fffffdfd x23: 00000000fffffff2 x22: 0000000000000000 x21: 0000000000000000 x20: ffff0000e26405f8 x19: ffff0000e26401b8 x18: 0000000000000000 x17: ffff800016cb1000 x16: ffff800008c2e824 x15: ffff800016791500 x14: ffff0000d59ba540 x13: dfff800000000000 x12: 0000000000ff0100 x11: 0000000000000000 x10: 1fffe0001c4c80bf x9 : 0000ffffffffffff x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff800016e469e8 x4 : 0000000000000008 x3 : ffff8000082bfbc8 x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: reiserfs_ioctl+0x238/0x4b4 fs/reiserfs/ioctl.c:96 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Code: 350010a8 2a1f03f7 b9400288 b8000ac8 (14000064) ---[ end trace 00c3bd9b49f6c9bb ]--- ---------------- Code disassembly (best guess): 0: 350010a8 cbnz w8, 0x214 4: 2a1f03f7 mov w23, wzr 8: b9400288 ldr w8, [x20] c: b8000ac8 sttr w8, [x22] * 10: 14000064 b 0x1a0 <-- trapping instruction