REISERFS panic (device loop3): vs-13065 update_stat_data: key [1 2 0x0 SD], found item *3.5*[1 2 0(0) DIR], item_len 80, item_location 3972, free_space(entry_count) 3
------------[ cut here ]------------
kernel BUG at fs/reiserfs/prints.c:390!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4951 Comm: syz.3.141 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __reiserfs_panic+0x150/0x154 fs/reiserfs/prints.c:384
lr : __reiserfs_panic+0x150/0x154 fs/reiserfs/prints.c:384
sp : ffff8000218473e0
x29: ffff800021847480 x28: ffff0000f750303f x27: ffff0000f750303c
x26: ffff0000f7503030 x25: ffff0000d7ae93a0 x24: ffff700004308e80
x23: ffff800021847400 x22: ffff800011c90720 x21: ffff0000dd4b4000
x20: ffff800011c90700 x19: ffff800014a6c280 x18: ffff800011b8bf60
x17: 1fffe00033eac97e x16: ffff8000082d91a4 x15: ffff80001520d000
x14: 0000000000000001 x13: 1fffe00033eac9a3 x12: 0000000000080000
x11: 000000000001f59e x10: ffff800029a60000 x9 : 034f10ab1ee5b800
x8 : 034f10ab1ee5b800 x7 : ffff80000825796c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000853854c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 00000000000000a6
Call trace:
 __reiserfs_panic+0x150/0x154 fs/reiserfs/prints.c:384
 update_stat_data fs/reiserfs/inode.c:1424 [inline]
 reiserfs_update_sd_size+0xb2c/0xb84 fs/reiserfs/inode.c:1497
 reiserfs_update_sd fs/reiserfs/reiserfs.h:3099 [inline]
 reiserfs_mkdir+0x644/0x7bc fs/reiserfs/namei.c:877
 xattr_mkdir fs/reiserfs/xattr.c:76 [inline]
 create_privroot fs/reiserfs/xattr.c:882 [inline]
 reiserfs_xattr_init+0x2b0/0x6b4 fs/reiserfs/xattr.c:1005
 reiserfs_fill_super+0x1944/0x1d40 fs/reiserfs/super.c:2175
 mount_bdev+0x264/0x358 fs/super.c:1443
 get_super_block+0x44/0x58 fs/reiserfs/super.c:2601
 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5bc/0xe80 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 912d80a5 911aa2a1 aa1303e4 97ffe328 (d4210000) 
---[ end trace 0000000000000000 ]---