Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. executing program [ 47.080350][ T4025] loop0: detected capacity change from 0 to 8192 [ 47.160248][ T4025] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 47.162843][ T4025] REISERFS (device loop0): using ordered data mode [ 47.164569][ T4025] reiserfs: using flush barriers [ 47.167083][ T4025] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.171905][ T4025] REISERFS (device loop0): checking transaction log (loop0) [ 47.176498][ T4025] REISERFS (device loop0): Using r5 hash to sort names [ 47.179161][ T4025] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.185171][ T4025] ================================================================== [ 47.187404][ T4025] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1a8/0x9f0 [ 47.189496][ T4025] Read of size 18446744073709551365 at addr ffff0000dd4c4000 by task syz-executor442/4025 [ 47.192173][ T4025] [ 47.192811][ T4025] CPU: 1 PID: 4025 Comm: syz-executor442 Not tainted 5.15.178-syzkaller #0 [ 47.195116][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.197838][ T4025] Call trace: [ 47.198690][ T4025] dump_backtrace+0x0/0x530 [ 47.199868][ T4025] show_stack+0x2c/0x3c [ 47.201012][ T4025] dump_stack_lvl+0x108/0x170 [ 47.202257][ T4025] print_address_description+0x7c/0x3f0 [ 47.203684][ T4025] kasan_report+0x174/0x1e4 [ 47.204868][ T4025] kasan_check_range+0x274/0x2b4 [ 47.206200][ T4025] memmove+0x90/0xe8 [ 47.207227][ T4025] leaf_paste_in_buffer+0x1a8/0x9f0 [ 47.208729][ T4025] balance_leaf+0x5eec/0xe860 [ 47.209997][ T4025] do_balance+0x27c/0x790 [ 47.211177][ T4025] reiserfs_paste_into_item+0x630/0x744 [ 47.212647][ T4025] reiserfs_get_block+0x1820/0x3fd0 [ 47.214111][ T4025] __block_write_begin_int+0x3ec/0x1608 [ 47.215642][ T4025] __block_write_begin+0x40/0x54 [ 47.216982][ T4025] reiserfs_write_begin+0x3c8/0x654 [ 47.218362][ T4025] generic_perform_write+0x24c/0x520 [ 47.219824][ T4025] __generic_file_write_iter+0x230/0x454 [ 47.221473][ T4025] generic_file_write_iter+0xb4/0x1b8 [ 47.222970][ T4025] vfs_write+0x884/0xb44 [ 47.224148][ T4025] __arm64_sys_pwrite64+0x188/0x220 [ 47.225599][ T4025] invoke_syscall+0x98/0x2b8 [ 47.226871][ T4025] el0_svc_common+0x138/0x258 [ 47.228141][ T4025] do_el0_svc+0x58/0x14c [ 47.229271][ T4025] el0_svc+0x7c/0x1f0 [ 47.230346][ T4025] el0t_64_sync_handler+0x84/0xe4 [ 47.231709][ T4025] el0t_64_sync+0x1a0/0x1a4 [ 47.232959][ T4025] [ 47.233586][ T4025] The buggy address belongs to the page: [ 47.235110][ T4025] page:00000000b47785e5 refcount:4 mapcount:0 mapping:00000000bdf78e09 index:0x8000 pfn:0x11d4c4 [ 47.238020][ T4025] memcg:ffff0000c08a4000 [ 47.239164][ T4025] aops:reiserfs_address_space_operations ino:2 dentry name:"file1" [ 47.241293][ T4025] flags: 0x5ffc00000002001(locked|private|node=0|zone=2|lastcpupid=0x7ff) [ 47.243660][ T4025] raw: 05ffc00000002001 0000000000000000 dead000000000122 ffff0000dd3210f8 [ 47.246061][ T4025] raw: 0000000000008000 ffff0000d250de80 00000004ffffffff ffff0000c08a4000 [ 47.248354][ T4025] page dumped because: kasan: bad access detected [ 47.250054][ T4025] [ 47.250647][ T4025] Memory state around the buggy address: [ 47.252184][ T4025] ffff0000dd4c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.254356][ T4025] ffff0000dd4c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.256563][ T4025] >ffff0000dd4c4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.258758][ T4025] ^ [ 47.259867][ T4025] ffff0000dd4c4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.262010][ T4025] ffff0000dd4c4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.264268][ T4025] ================================================================== [ 47.266423][ T4025] Disabling lock debugging due to kernel taint [ 47.268518][ T4025] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 47.271344][ T4025] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 47.274161][ T4025] REISERFS (device loop0): Remounting filesystem read-only executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program