Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts.
executing program
[ 43.884009][ T3486] loop0: detected capacity change from 0 to 8192
[ 43.894625][ T3486] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 43.904488][ T3486] REISERFS (device loop0): using ordered data mode
[ 43.910993][ T3486] reiserfs: using flush barriers
[ 43.917172][ T3486] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 43.933852][ T3486] REISERFS (device loop0): checking transaction log (loop0)
[ 43.979222][ T3486] REISERFS (device loop0): Using r5 hash to sort names
[ 43.986298][ T3486] REISERFS (device loop0): using 3.5.x disk format
[ 43.993443][ T3486] ==================================================================
[ 44.001558][ T3486] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0
[ 44.009103][ T3486] Read of size 18446744073709551584 at addr ffff888071e51fa4 by task syz-executor334/3486
[ 44.018969][ T3486]
[ 44.021273][ T3486] CPU: 0 PID: 3486 Comm: syz-executor334 Not tainted 5.15.127-syzkaller #0
[ 44.029839][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 44.039875][ T3486] Call Trace:
[ 44.043136][ T3486]
[ 44.046047][ T3486] dump_stack_lvl+0x1e3/0x2cb
[ 44.050709][ T3486] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 44.056320][ T3486] ? _printk+0xd1/0x111
[ 44.060590][ T3486] ? __wake_up_klogd+0xcc/0x100
[ 44.065436][ T3486] ? panic+0x84d/0x84d
[ 44.069487][ T3486] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 44.074931][ T3486] print_address_description+0x63/0x3b0
[ 44.080462][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.085736][ T3486] kasan_report+0x16b/0x1c0
[ 44.090222][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.095485][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.100750][ T3486] kasan_check_range+0x27e/0x290
[ 44.105665][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.110932][ T3486] memmove+0x25/0x60
[ 44.114805][ T3486] leaf_paste_entries+0x95f/0x13a0
[ 44.119901][ T3486] balance_leaf+0xbd1e/0x12510
[ 44.124652][ T3486] ? print_irqtrace_events+0x210/0x210
[ 44.130096][ T3486] ? do_raw_spin_unlock+0x137/0x8b0
[ 44.135272][ T3486] ? lockdep_hardirqs_on+0x94/0x130
[ 44.140445][ T3486] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 44.146318][ T3486] ? _raw_spin_unlock+0x40/0x40
[ 44.151145][ T3486] ? stack_trace_save+0x113/0x1c0
[ 44.156149][ T3486] ? do_balance+0x8f0/0x8f0
[ 44.160634][ T3486] ? stack_depot_save+0x3db/0x440
[ 44.165641][ T3486] ? ____kasan_kmalloc+0xd1/0xf0
[ 44.170557][ T3486] ? ____kasan_kmalloc+0xba/0xf0
[ 44.175469][ T3486] ? __kmalloc+0x168/0x300
[ 44.179877][ T3486] ? fix_nodes+0x69aa/0x8c70
[ 44.184443][ T3486] ? reiserfs_paste_into_item+0x65d/0x880
[ 44.190142][ T3486] ? reiserfs_add_entry+0x9b8/0xd70
[ 44.195316][ T3486] ? reiserfs_mkdir+0x6bc/0x8f0
[ 44.200143][ T3486] ? reiserfs_xattr_init+0x348/0x730
[ 44.205405][ T3486] ? reiserfs_fill_super+0x226a/0x2690
[ 44.210843][ T3486] ? mount_bdev+0x2c9/0x3f0
[ 44.215323][ T3486] ? legacy_get_tree+0xeb/0x180
[ 44.220150][ T3486] ? vfs_get_tree+0x88/0x270
[ 44.224716][ T3486] ? do_new_mount+0x28b/0xae0
[ 44.229372][ T3486] ? __se_sys_mount+0x2d5/0x3c0
[ 44.234200][ T3486] ? do_syscall_64+0x3d/0xb0
[ 44.238764][ T3486] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 44.244819][ T3486] ? get_parents+0x513/0xfa0
[ 44.249389][ T3486] ? __wake_up_bit+0x190/0x190
[ 44.254133][ T3486] ? set_parameters+0x8d0/0x8d0
[ 44.258981][ T3486] ? get_neighbors+0x631/0x1010
[ 44.263814][ T3486] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 44.269950][ T3486] ? fix_nodes+0x7abc/0x8c70
[ 44.274534][ T3486] ? __might_sleep+0xc0/0xc0
[ 44.279112][ T3486] do_balance+0x309/0x8f0
[ 44.283420][ T3486] ? get_right_neighbor_position+0x210/0x210
[ 44.289380][ T3486] ? reiserfs_paste_into_item+0x3ef/0x880
[ 44.295093][ T3486] reiserfs_paste_into_item+0x73b/0x880
[ 44.300627][ T3486] ? reiserfs_cut_from_item+0x2560/0x2560
[ 44.306448][ T3486] ? reiserfs_get_parent+0x2c0/0x2c0
[ 44.311709][ T3486] ? inode_get_bytes+0x72/0xa0
[ 44.316452][ T3486] ? _find_first_zero_bit+0x60/0xf0
[ 44.321626][ T3486] reiserfs_add_entry+0x9b8/0xd70
[ 44.326634][ T3486] ? drop_new_inode+0x60/0x60
[ 44.331292][ T3486] ? do_journal_begin_r+0xdad/0x1000
[ 44.336572][ T3486] ? journal_begin+0x1ef/0x350
[ 44.341316][ T3486] reiserfs_mkdir+0x6bc/0x8f0
[ 44.346006][ T3486] ? __might_sleep+0xc0/0xc0
[ 44.350586][ T3486] ? reiserfs_symlink+0x720/0x720
[ 44.355592][ T3486] ? down_write+0x10e/0x170
[ 44.360078][ T3486] ? __up_read+0x690/0x690
[ 44.364475][ T3486] reiserfs_xattr_init+0x348/0x730
[ 44.369572][ T3486] reiserfs_fill_super+0x226a/0x2690
[ 44.374846][ T3486] ? reiserfs_kill_sb+0x150/0x150
[ 44.380028][ T3486] ? snprintf+0xd6/0x120
[ 44.384263][ T3486] mount_bdev+0x2c9/0x3f0
[ 44.388576][ T3486] ? reiserfs_kill_sb+0x150/0x150
[ 44.393580][ T3486] legacy_get_tree+0xeb/0x180
[ 44.398241][ T3486] ? remove_save_link+0x540/0x540
[ 44.403426][ T3486] vfs_get_tree+0x88/0x270
[ 44.407836][ T3486] do_new_mount+0x28b/0xae0
[ 44.412336][ T3486] ? do_move_mount_old+0x160/0x160
[ 44.417428][ T3486] ? user_path_at_empty+0x12b/0x180
[ 44.422626][ T3486] __se_sys_mount+0x2d5/0x3c0
[ 44.427285][ T3486] ? __x64_sys_mount+0xc0/0xc0
[ 44.432037][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230
[ 44.438114][ T3486] ? lockdep_hardirqs_on+0x94/0x130
[ 44.443317][ T3486] ? __x64_sys_mount+0x1c/0xc0
[ 44.448080][ T3486] do_syscall_64+0x3d/0xb0
[ 44.452485][ T3486] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 44.458356][ T3486] RIP: 0033:0x7f923de7e88a
[ 44.462750][ T3486] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 44.482423][ T3486] RSP: 002b:00007ffd76da4258 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 44.490823][ T3486] RAX: ffffffffffffffda RBX: 00007ffd76da4270 RCX: 00007f923de7e88a
[ 44.498772][ T3486] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffd76da4270
[ 44.506722][ T3486] RBP: 0000000000000004 R08: 00007ffd76da42b0 R09: 00000000000010f4
[ 44.514670][ T3486] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080
[ 44.522839][ T3486] R13: 00007ffd76da42b0 R14: 0000000000000003 R15: 0000000000400000
[ 44.530816][ T3486]
[ 44.533815][ T3486]
[ 44.536191][ T3486] The buggy address belongs to the page:
[ 44.541834][ T3486] page:ffffea0001c79440 refcount:3 mapcount:0 mapping:ffff8881408d08b0 index:0x213 pfn:0x71e51
[ 44.552233][ T3486] memcg:ffff88814009c000
[ 44.556451][ T3486] aops:def_blk_aops ino:700000
[ 44.561210][ T3486] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 44.570558][ T3486] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff8881408d08b0
[ 44.579130][ T3486] raw: 0000000000000213 ffff888075382488 00000003ffffffff ffff88814009c000
[ 44.587684][ T3486] page dumped because: kasan: bad access detected
[ 44.594069][ T3486] page_owner tracks the page as allocated
[ 44.599776][ T3486] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3486, ts 43978949340, free_ts 10939830242
[ 44.616851][ T3486] get_page_from_freelist+0x322a/0x33c0
[ 44.622378][ T3486] __alloc_pages+0x272/0x700
[ 44.626946][ T3486] __page_cache_alloc+0xd4/0x4a0
[ 44.631861][ T3486] pagecache_get_page+0xa91/0x1010
[ 44.636949][ T3486] __getblk_gfp+0x22a/0xaf0
[ 44.641425][ T3486] search_by_key+0x46d/0x4730
[ 44.646169][ T3486] reiserfs_read_locked_inode+0x23c/0x2950
[ 44.651954][ T3486] reiserfs_fill_super+0x11bf/0x2690
[ 44.657215][ T3486] mount_bdev+0x2c9/0x3f0
[ 44.661525][ T3486] legacy_get_tree+0xeb/0x180
[ 44.666175][ T3486] vfs_get_tree+0x88/0x270
[ 44.670576][ T3486] do_new_mount+0x28b/0xae0
[ 44.675058][ T3486] __se_sys_mount+0x2d5/0x3c0
[ 44.679712][ T3486] do_syscall_64+0x3d/0xb0
[ 44.684108][ T3486] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 44.689980][ T3486] page last free stack trace:
[ 44.694625][ T3486] free_unref_page_prepare+0xc34/0xcf0
[ 44.700061][ T3486] free_unref_page+0x95/0x2d0
[ 44.704714][ T3486] free_contig_range+0x95/0xf0
[ 44.709455][ T3486] destroy_args+0xfe/0x97f
[ 44.713846][ T3486] debug_vm_pgtable+0x40d/0x462
[ 44.718670][ T3486] do_one_initcall+0x22b/0x7a0
[ 44.723415][ T3486] do_initcall_level+0x157/0x207
[ 44.728333][ T3486] do_initcalls+0x49/0x86
[ 44.732637][ T3486] kernel_init_freeable+0x43c/0x5c5
[ 44.737807][ T3486] kernel_init+0x19/0x290
[ 44.742110][ T3486] ret_from_fork+0x1f/0x30
[ 44.746512][ T3486]
[ 44.748813][ T3486] Memory state around the buggy address:
[ 44.754432][ T3486] ffff888071e51e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.762473][ T3486] ffff888071e51f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.770511][ T3486] >ffff888071e51f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.778550][ T3486] ^
[ 44.783640][ T3486] ffff888071e52000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 44.791679][ T3486] ffff888071e52080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 44.799734][ T3486] ==================================================================
[ 44.807854][ T3486] Disabling lock debugging due to kernel taint
[ 44.814337][ T3486] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 44.821524][ T3486] CPU: 0 PID: 3486 Comm: syz-executor334 Tainted: G B 5.15.127-syzkaller #0
[ 44.831493][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 44.841526][ T3486] Call Trace:
[ 44.844782][ T3486]
[ 44.847690][ T3486] dump_stack_lvl+0x1e3/0x2cb
[ 44.852347][ T3486] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 44.857954][ T3486] ? panic+0x84d/0x84d
[ 44.861997][ T3486] ? rcu_is_watching+0x11/0xa0
[ 44.866737][ T3486] ? preempt_schedule_common+0xa6/0xd0
[ 44.872209][ T3486] panic+0x318/0x84d
[ 44.876083][ T3486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 44.882213][ T3486] ? check_panic_on_warn+0x1d/0xa0
[ 44.887299][ T3486] ? fb_is_primary_device+0xcc/0xcc
[ 44.892474][ T3486] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 44.898434][ T3486] ? _raw_spin_unlock+0x40/0x40
[ 44.903259][ T3486] check_panic_on_warn+0x7e/0xa0
[ 44.908176][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.913443][ T3486] end_report+0x6d/0xf0
[ 44.917575][ T3486] kasan_report+0x18e/0x1c0
[ 44.922054][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.927340][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.932600][ T3486] kasan_check_range+0x27e/0x290
[ 44.937513][ T3486] ? leaf_paste_entries+0x95f/0x13a0
[ 44.942777][ T3486] memmove+0x25/0x60
[ 44.946648][ T3486] leaf_paste_entries+0x95f/0x13a0
[ 44.951736][ T3486] balance_leaf+0xbd1e/0x12510
[ 44.956476][ T3486] ? print_irqtrace_events+0x210/0x210
[ 44.961915][ T3486] ? do_raw_spin_unlock+0x137/0x8b0
[ 44.967089][ T3486] ? lockdep_hardirqs_on+0x94/0x130
[ 44.972265][ T3486] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 44.978137][ T3486] ? _raw_spin_unlock+0x40/0x40
[ 44.982963][ T3486] ? stack_trace_save+0x113/0x1c0
[ 44.987965][ T3486] ? do_balance+0x8f0/0x8f0
[ 44.992442][ T3486] ? stack_depot_save+0x3db/0x440
[ 44.997443][ T3486] ? ____kasan_kmalloc+0xd1/0xf0
[ 45.002356][ T3486] ? ____kasan_kmalloc+0xba/0xf0
[ 45.007267][ T3486] ? __kmalloc+0x168/0x300
[ 45.011656][ T3486] ? fix_nodes+0x69aa/0x8c70
[ 45.016217][ T3486] ? reiserfs_paste_into_item+0x65d/0x880
[ 45.021909][ T3486] ? reiserfs_add_entry+0x9b8/0xd70
[ 45.027081][ T3486] ? reiserfs_mkdir+0x6bc/0x8f0
[ 45.031905][ T3486] ? reiserfs_xattr_init+0x348/0x730
[ 45.037164][ T3486] ? reiserfs_fill_super+0x226a/0x2690
[ 45.042598][ T3486] ? mount_bdev+0x2c9/0x3f0
[ 45.047075][ T3486] ? legacy_get_tree+0xeb/0x180
[ 45.051899][ T3486] ? vfs_get_tree+0x88/0x270
[ 45.056468][ T3486] ? do_new_mount+0x28b/0xae0
[ 45.061123][ T3486] ? __se_sys_mount+0x2d5/0x3c0
[ 45.065965][ T3486] ? do_syscall_64+0x3d/0xb0
[ 45.070533][ T3486] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.076580][ T3486] ? get_parents+0x513/0xfa0
[ 45.081151][ T3486] ? __wake_up_bit+0x190/0x190
[ 45.085891][ T3486] ? set_parameters+0x8d0/0x8d0
[ 45.090718][ T3486] ? get_neighbors+0x631/0x1010
[ 45.095544][ T3486] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 45.101583][ T3486] ? fix_nodes+0x7abc/0x8c70
[ 45.106146][ T3486] ? __might_sleep+0xc0/0xc0
[ 45.110714][ T3486] do_balance+0x309/0x8f0
[ 45.115024][ T3486] ? get_right_neighbor_position+0x210/0x210
[ 45.120987][ T3486] ? reiserfs_paste_into_item+0x3ef/0x880
[ 45.126684][ T3486] reiserfs_paste_into_item+0x73b/0x880
[ 45.132205][ T3486] ? reiserfs_cut_from_item+0x2560/0x2560
[ 45.137911][ T3486] ? reiserfs_get_parent+0x2c0/0x2c0
[ 45.143172][ T3486] ? inode_get_bytes+0x72/0xa0
[ 45.147915][ T3486] ? _find_first_zero_bit+0x60/0xf0
[ 45.153090][ T3486] reiserfs_add_entry+0x9b8/0xd70
[ 45.158089][ T3486] ? drop_new_inode+0x60/0x60
[ 45.162747][ T3486] ? do_journal_begin_r+0xdad/0x1000
[ 45.168032][ T3486] ? journal_begin+0x1ef/0x350
[ 45.172769][ T3486] reiserfs_mkdir+0x6bc/0x8f0
[ 45.177421][ T3486] ? __might_sleep+0xc0/0xc0
[ 45.181988][ T3486] ? reiserfs_symlink+0x720/0x720
[ 45.186984][ T3486] ? down_write+0x10e/0x170
[ 45.191462][ T3486] ? __up_read+0x690/0x690
[ 45.195859][ T3486] reiserfs_xattr_init+0x348/0x730
[ 45.200948][ T3486] reiserfs_fill_super+0x226a/0x2690
[ 45.206226][ T3486] ? reiserfs_kill_sb+0x150/0x150
[ 45.211246][ T3486] ? snprintf+0xd6/0x120
[ 45.215468][ T3486] mount_bdev+0x2c9/0x3f0
[ 45.219773][ T3486] ? reiserfs_kill_sb+0x150/0x150
[ 45.224768][ T3486] legacy_get_tree+0xeb/0x180
[ 45.229415][ T3486] ? remove_save_link+0x540/0x540
[ 45.234417][ T3486] vfs_get_tree+0x88/0x270
[ 45.238807][ T3486] do_new_mount+0x28b/0xae0
[ 45.243284][ T3486] ? do_move_mount_old+0x160/0x160
[ 45.248366][ T3486] ? user_path_at_empty+0x12b/0x180
[ 45.253539][ T3486] __se_sys_mount+0x2d5/0x3c0
[ 45.258195][ T3486] ? __x64_sys_mount+0xc0/0xc0
[ 45.262934][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230
[ 45.268893][ T3486] ? lockdep_hardirqs_on+0x94/0x130
[ 45.274063][ T3486] ? __x64_sys_mount+0x1c/0xc0
[ 45.278802][ T3486] do_syscall_64+0x3d/0xb0
[ 45.283192][ T3486] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.289059][ T3486] RIP: 0033:0x7f923de7e88a
[ 45.293449][ T3486] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 45.313027][ T3486] RSP: 002b:00007ffd76da4258 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 45.321416][ T3486] RAX: ffffffffffffffda RBX: 00007ffd76da4270 RCX: 00007f923de7e88a
[ 45.329364][ T3486] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffd76da4270
[ 45.337316][ T3486] RBP: 0000000000000004 R08: 00007ffd76da42b0 R09: 00000000000010f4
[ 45.345266][ T3486] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080
[ 45.353214][ T3486] R13: 00007ffd76da42b0 R14: 0000000000000003 R15: 0000000000400000
[ 45.361168][ T3486]
[ 45.364337][ T3486] Kernel Offset: disabled
[ 45.368656][ T3486] Rebooting in 86400 seconds..