Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. executing program [ 43.047469][ T3485] loop0: detected capacity change from 0 to 8192 [ 43.057359][ T3485] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 43.066710][ T3485] REISERFS (device loop0): using ordered data mode [ 43.073339][ T3485] reiserfs: using flush barriers [ 43.079992][ T3485] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.097629][ T3485] REISERFS (device loop0): checking transaction log (loop0) [ 43.147292][ T3485] REISERFS (device loop0): Using r5 hash to sort names [ 43.154982][ T3485] ================================================================== [ 43.164517][ T3485] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 43.172084][ T3485] Read of size 18446744073709551585 at addr ffff888073507fa4 by task syz-executor363/3485 [ 43.182053][ T3485] [ 43.184455][ T3485] CPU: 1 PID: 3485 Comm: syz-executor363 Not tainted 5.15.127-syzkaller #0 [ 43.193043][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 43.203343][ T3485] Call Trace: [ 43.206632][ T3485] [ 43.209577][ T3485] dump_stack_lvl+0x1e3/0x2cb [ 43.214265][ T3485] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.219901][ T3485] ? _printk+0xd1/0x111 [ 43.224059][ T3485] ? __wake_up_klogd+0xcc/0x100 [ 43.229016][ T3485] ? panic+0x84d/0x84d [ 43.233094][ T3485] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 43.238547][ T3485] print_address_description+0x63/0x3b0 [ 43.244084][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 43.249352][ T3485] kasan_report+0x16b/0x1c0 [ 43.253845][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 43.259120][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 43.264389][ T3485] kasan_check_range+0x27e/0x290 [ 43.269321][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 43.274605][ T3485] memmove+0x25/0x60 [ 43.278493][ T3485] leaf_paste_entries+0x95f/0x13a0 [ 43.283602][ T3485] balance_leaf+0xbd1e/0x12510 [ 43.288352][ T3485] ? print_irqtrace_events+0x210/0x210 [ 43.293797][ T3485] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.298980][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 43.304164][ T3485] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.310040][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 43.314871][ T3485] ? stack_trace_save+0x113/0x1c0 [ 43.320224][ T3485] ? do_balance+0x8f0/0x8f0 [ 43.324711][ T3485] ? stack_depot_save+0x3db/0x440 [ 43.329727][ T3485] ? ____kasan_kmalloc+0xd1/0xf0 [ 43.334836][ T3485] ? ____kasan_kmalloc+0xba/0xf0 [ 43.339778][ T3485] ? __kmalloc+0x168/0x300 [ 43.344284][ T3485] ? fix_nodes+0x69aa/0x8c70 [ 43.348865][ T3485] ? reiserfs_paste_into_item+0x65d/0x880 [ 43.355274][ T3485] ? reiserfs_add_entry+0x9b8/0xd70 [ 43.360469][ T3485] ? reiserfs_mkdir+0x6bc/0x8f0 [ 43.365320][ T3485] ? reiserfs_xattr_init+0x348/0x730 [ 43.370588][ T3485] ? reiserfs_fill_super+0x226a/0x2690 [ 43.376234][ T3485] ? mount_bdev+0x2c9/0x3f0 [ 43.380805][ T3485] ? legacy_get_tree+0xeb/0x180 [ 43.385653][ T3485] ? vfs_get_tree+0x88/0x270 [ 43.390229][ T3485] ? do_new_mount+0x28b/0xae0 [ 43.394888][ T3485] ? __se_sys_mount+0x2d5/0x3c0 [ 43.399721][ T3485] ? do_syscall_64+0x3d/0xb0 [ 43.404292][ T3485] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.410360][ T3485] ? get_parents+0x513/0xfa0 [ 43.414935][ T3485] ? __wake_up_bit+0x190/0x190 [ 43.419679][ T3485] ? set_parameters+0x8d0/0x8d0 [ 43.424624][ T3485] ? get_neighbors+0x631/0x1010 [ 43.429477][ T3485] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 43.435535][ T3485] ? fix_nodes+0x7abc/0x8c70 [ 43.440115][ T3485] ? __might_sleep+0xc0/0xc0 [ 43.444792][ T3485] do_balance+0x309/0x8f0 [ 43.449130][ T3485] ? get_right_neighbor_position+0x210/0x210 [ 43.455096][ T3485] ? reiserfs_paste_into_item+0x3ef/0x880 [ 43.460798][ T3485] reiserfs_paste_into_item+0x73b/0x880 [ 43.466423][ T3485] ? reiserfs_cut_from_item+0x2560/0x2560 [ 43.472163][ T3485] ? reiserfs_get_parent+0x2c0/0x2c0 [ 43.477538][ T3485] ? inode_get_bytes+0x72/0xa0 [ 43.482292][ T3485] ? _find_first_zero_bit+0x60/0xf0 [ 43.487481][ T3485] reiserfs_add_entry+0x9b8/0xd70 [ 43.492517][ T3485] ? drop_new_inode+0x60/0x60 [ 43.497185][ T3485] ? do_journal_begin_r+0xdad/0x1000 [ 43.502472][ T3485] ? journal_begin+0x1ef/0x350 [ 43.507217][ T3485] reiserfs_mkdir+0x6bc/0x8f0 [ 43.511877][ T3485] ? __might_sleep+0xc0/0xc0 [ 43.516537][ T3485] ? reiserfs_symlink+0x720/0x720 [ 43.521671][ T3485] ? down_write+0x10e/0x170 [ 43.526243][ T3485] ? __up_read+0x690/0x690 [ 43.530739][ T3485] reiserfs_xattr_init+0x348/0x730 [ 43.535835][ T3485] reiserfs_fill_super+0x226a/0x2690 [ 43.541110][ T3485] ? reiserfs_kill_sb+0x150/0x150 [ 43.546146][ T3485] ? snprintf+0xd6/0x120 [ 43.550379][ T3485] mount_bdev+0x2c9/0x3f0 [ 43.554689][ T3485] ? reiserfs_kill_sb+0x150/0x150 [ 43.559789][ T3485] legacy_get_tree+0xeb/0x180 [ 43.564464][ T3485] ? remove_save_link+0x540/0x540 [ 43.569478][ T3485] vfs_get_tree+0x88/0x270 [ 43.573880][ T3485] do_new_mount+0x28b/0xae0 [ 43.578377][ T3485] ? do_move_mount_old+0x160/0x160 [ 43.583474][ T3485] ? user_path_at_empty+0x12b/0x180 [ 43.588657][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 43.593314][ T3485] ? __x64_sys_mount+0xc0/0xc0 [ 43.598058][ T3485] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.604022][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 43.609398][ T3485] ? __x64_sys_mount+0x1c/0xc0 [ 43.614141][ T3485] do_syscall_64+0x3d/0xb0 [ 43.618539][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.624418][ T3485] RIP: 0033:0x7f457fe508fa [ 43.628812][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.648497][ T3485] RSP: 002b:00007fff830fb438 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 43.656895][ T3485] RAX: ffffffffffffffda RBX: 00007fff830fb450 RCX: 00007f457fe508fa [ 43.664845][ T3485] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007fff830fb450 [ 43.672811][ T3485] RBP: 0000000000000004 R08: 00007fff830fb490 R09: 0000000000001109 [ 43.681214][ T3485] R10: 0000000000008080 R11: 0000000000000286 R12: 0000000000008080 [ 43.689270][ T3485] R13: 00007fff830fb490 R14: 0000000000000003 R15: 0000000000400000 [ 43.697404][ T3485] [ 43.700413][ T3485] [ 43.702722][ T3485] The buggy address belongs to the page: [ 43.708326][ T3485] page:ffffea0001cd41c0 refcount:3 mapcount:0 mapping:ffff888145e44f30 index:0x213 pfn:0x73507 [ 43.719096][ T3485] memcg:ffff888011e34000 [ 43.723322][ T3485] aops:def_blk_aops ino:700000 [ 43.728090][ T3485] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 43.737456][ T3485] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff888145e44f30 [ 43.746018][ T3485] raw: 0000000000000213 ffff8880753e0488 00000003ffffffff ffff888011e34000 [ 43.754669][ T3485] page dumped because: kasan: bad access detected [ 43.761152][ T3485] page_owner tracks the page as allocated [ 43.766945][ T3485] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3485, ts 43146885735, free_ts 43014668704 [ 43.784119][ T3485] get_page_from_freelist+0x322a/0x33c0 [ 43.789657][ T3485] __alloc_pages+0x272/0x700 [ 43.794223][ T3485] __page_cache_alloc+0xd4/0x4a0 [ 43.799137][ T3485] pagecache_get_page+0xa91/0x1010 [ 43.804316][ T3485] __getblk_gfp+0x22a/0xaf0 [ 43.808795][ T3485] search_by_key+0x46d/0x4730 [ 43.813460][ T3485] reiserfs_read_locked_inode+0x23c/0x2950 [ 43.819265][ T3485] reiserfs_fill_super+0x11bf/0x2690 [ 43.824527][ T3485] mount_bdev+0x2c9/0x3f0 [ 43.828831][ T3485] legacy_get_tree+0xeb/0x180 [ 43.833574][ T3485] vfs_get_tree+0x88/0x270 [ 43.837970][ T3485] do_new_mount+0x28b/0xae0 [ 43.843405][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 43.848055][ T3485] do_syscall_64+0x3d/0xb0 [ 43.852446][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.858316][ T3485] page last free stack trace: [ 43.862966][ T3485] free_unref_page_prepare+0xc34/0xcf0 [ 43.868835][ T3485] free_unref_page_list+0x1f7/0x8e0 [ 43.874006][ T3485] release_pages+0x1bb9/0x1f40 [ 43.879012][ T3485] tlb_finish_mmu+0x177/0x320 [ 43.883664][ T3485] exit_mmap+0x3cd/0x670 [ 43.887916][ T3485] __mmput+0x112/0x3b0 [ 43.892049][ T3485] exec_mmap+0x543/0x630 [ 43.896269][ T3485] begin_new_exec+0x75d/0xfe0 [ 43.900930][ T3485] load_elf_binary+0x945/0x2750 [ 43.905757][ T3485] bprm_execve+0x8fd/0x17c0 [ 43.910234][ T3485] do_execveat_common+0x583/0x720 [ 43.915234][ T3485] __x64_sys_execve+0x8e/0xa0 [ 43.919976][ T3485] do_syscall_64+0x3d/0xb0 [ 43.924547][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.930605][ T3485] [ 43.932910][ T3485] Memory state around the buggy address: [ 43.938727][ T3485] ffff888073507e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.946766][ T3485] ffff888073507f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.954803][ T3485] >ffff888073507f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.962842][ T3485] ^ [ 43.967940][ T3485] ffff888073508000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.975996][ T3485] ffff888073508080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.984047][ T3485] ================================================================== [ 43.992083][ T3485] Disabling lock debugging due to kernel taint [ 43.998424][ T3485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 44.005628][ T3485] CPU: 0 PID: 3485 Comm: syz-executor363 Tainted: G B 5.15.127-syzkaller #0 [ 44.015604][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 44.025860][ T3485] Call Trace: [ 44.029135][ T3485] [ 44.032052][ T3485] dump_stack_lvl+0x1e3/0x2cb [ 44.036716][ T3485] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 44.042601][ T3485] ? panic+0x84d/0x84d [ 44.046645][ T3485] ? rcu_is_watching+0x11/0xa0 [ 44.051398][ T3485] ? preempt_schedule_common+0xa6/0xd0 [ 44.056835][ T3485] panic+0x318/0x84d [ 44.060711][ T3485] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 44.066843][ T3485] ? check_panic_on_warn+0x1d/0xa0 [ 44.072110][ T3485] ? fb_is_primary_device+0xcc/0xcc [ 44.077286][ T3485] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 44.083320][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 44.088148][ T3485] check_panic_on_warn+0x7e/0xa0 [ 44.093067][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.098603][ T3485] end_report+0x6d/0xf0 [ 44.102759][ T3485] kasan_report+0x18e/0x1c0 [ 44.107242][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.112596][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.117862][ T3485] kasan_check_range+0x27e/0x290 [ 44.122790][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.128139][ T3485] memmove+0x25/0x60 [ 44.132011][ T3485] leaf_paste_entries+0x95f/0x13a0 [ 44.137107][ T3485] balance_leaf+0xbd1e/0x12510 [ 44.141860][ T3485] ? print_irqtrace_events+0x210/0x210 [ 44.147315][ T3485] ? do_raw_spin_unlock+0x137/0x8b0 [ 44.152503][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 44.157684][ T3485] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 44.163561][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 44.168389][ T3485] ? stack_trace_save+0x113/0x1c0 [ 44.173422][ T3485] ? do_balance+0x8f0/0x8f0 [ 44.177902][ T3485] ? stack_depot_save+0x3db/0x440 [ 44.182915][ T3485] ? ____kasan_kmalloc+0xd1/0xf0 [ 44.187841][ T3485] ? ____kasan_kmalloc+0xba/0xf0 [ 44.192790][ T3485] ? __kmalloc+0x168/0x300 [ 44.197275][ T3485] ? fix_nodes+0x69aa/0x8c70 [ 44.201846][ T3485] ? reiserfs_paste_into_item+0x65d/0x880 [ 44.207550][ T3485] ? reiserfs_add_entry+0x9b8/0xd70 [ 44.212725][ T3485] ? reiserfs_mkdir+0x6bc/0x8f0 [ 44.217640][ T3485] ? reiserfs_xattr_init+0x348/0x730 [ 44.222922][ T3485] ? reiserfs_fill_super+0x226a/0x2690 [ 44.228356][ T3485] ? mount_bdev+0x2c9/0x3f0 [ 44.232844][ T3485] ? legacy_get_tree+0xeb/0x180 [ 44.237669][ T3485] ? vfs_get_tree+0x88/0x270 [ 44.242236][ T3485] ? do_new_mount+0x28b/0xae0 [ 44.246894][ T3485] ? __se_sys_mount+0x2d5/0x3c0 [ 44.251723][ T3485] ? do_syscall_64+0x3d/0xb0 [ 44.256291][ T3485] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.262340][ T3485] ? get_parents+0x513/0xfa0 [ 44.266914][ T3485] ? __wake_up_bit+0x190/0x190 [ 44.271657][ T3485] ? set_parameters+0x8d0/0x8d0 [ 44.276575][ T3485] ? get_neighbors+0x631/0x1010 [ 44.281511][ T3485] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 44.287680][ T3485] ? fix_nodes+0x7abc/0x8c70 [ 44.292272][ T3485] ? __might_sleep+0xc0/0xc0 [ 44.296865][ T3485] do_balance+0x309/0x8f0 [ 44.301219][ T3485] ? get_right_neighbor_position+0x210/0x210 [ 44.307184][ T3485] ? reiserfs_paste_into_item+0x3ef/0x880 [ 44.312910][ T3485] reiserfs_paste_into_item+0x73b/0x880 [ 44.318549][ T3485] ? reiserfs_cut_from_item+0x2560/0x2560 [ 44.324279][ T3485] ? reiserfs_get_parent+0x2c0/0x2c0 [ 44.329803][ T3485] ? inode_get_bytes+0x72/0xa0 [ 44.334583][ T3485] ? _find_first_zero_bit+0x60/0xf0 [ 44.339848][ T3485] reiserfs_add_entry+0x9b8/0xd70 [ 44.344916][ T3485] ? drop_new_inode+0x60/0x60 [ 44.349705][ T3485] ? do_journal_begin_r+0xdad/0x1000 [ 44.355001][ T3485] ? journal_begin+0x1ef/0x350 [ 44.359748][ T3485] reiserfs_mkdir+0x6bc/0x8f0 [ 44.364408][ T3485] ? __might_sleep+0xc0/0xc0 [ 44.368977][ T3485] ? reiserfs_symlink+0x720/0x720 [ 44.374599][ T3485] ? down_write+0x10e/0x170 [ 44.379186][ T3485] ? __up_read+0x690/0x690 [ 44.383608][ T3485] reiserfs_xattr_init+0x348/0x730 [ 44.388733][ T3485] reiserfs_fill_super+0x226a/0x2690 [ 44.394021][ T3485] ? reiserfs_kill_sb+0x150/0x150 [ 44.399025][ T3485] ? snprintf+0xd6/0x120 [ 44.403252][ T3485] mount_bdev+0x2c9/0x3f0 [ 44.407563][ T3485] ? reiserfs_kill_sb+0x150/0x150 [ 44.412568][ T3485] legacy_get_tree+0xeb/0x180 [ 44.417226][ T3485] ? remove_save_link+0x540/0x540 [ 44.422242][ T3485] vfs_get_tree+0x88/0x270 [ 44.426744][ T3485] do_new_mount+0x28b/0xae0 [ 44.431322][ T3485] ? do_move_mount_old+0x160/0x160 [ 44.436437][ T3485] ? user_path_at_empty+0x12b/0x180 [ 44.441619][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 44.446275][ T3485] ? __x64_sys_mount+0xc0/0xc0 [ 44.451022][ T3485] ? syscall_enter_from_user_mode+0x2e/0x230 [ 44.456979][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 44.462161][ T3485] ? __x64_sys_mount+0x1c/0xc0 [ 44.466915][ T3485] do_syscall_64+0x3d/0xb0 [ 44.471348][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.477244][ T3485] RIP: 0033:0x7f457fe508fa [ 44.481745][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.501329][ T3485] RSP: 002b:00007fff830fb438 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 44.509859][ T3485] RAX: ffffffffffffffda RBX: 00007fff830fb450 RCX: 00007f457fe508fa [ 44.517809][ T3485] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007fff830fb450 [ 44.525759][ T3485] RBP: 0000000000000004 R08: 00007fff830fb490 R09: 0000000000001109 [ 44.533991][ T3485] R10: 0000000000008080 R11: 0000000000000286 R12: 0000000000008080 [ 44.542210][ T3485] R13: 00007fff830fb490 R14: 0000000000000003 R15: 0000000000400000 [ 44.550249][ T3485] [ 44.553496][ T3485] Kernel Offset: disabled [ 44.557812][ T3485] Rebooting in 86400 seconds..