Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts.
executing program
[ 62.162494][ T3544] loop0: detected capacity change from 0 to 8192
[ 62.173028][ T3544] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 62.186355][ T3544] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 62.195906][ T3544] REISERFS (device loop0): using ordered data mode
[ 62.202907][ T3544] reiserfs: using flush barriers
[ 62.209545][ T3544] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 62.226357][ T3544] REISERFS (device loop0): checking transaction log (loop0)
[ 62.275086][ T3544] REISERFS (device loop0): Using r5 hash to sort names
[ 62.282301][ T3544] REISERFS (device loop0): using 3.5.x disk format
[ 62.289915][ T3544] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 62.313135][ T27] audit: type=1800 audit(1688354939.702:2): pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor273" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 62.335036][ T3544] ==================================================================
[ 62.343134][ T3544] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1b8/0xab0
[ 62.350798][ T3544] Read of size 18446744073709551305 at addr ffff888071297000 by task syz-executor273/3544
[ 62.360689][ T3544]
[ 62.363013][ T3544] CPU: 1 PID: 3544 Comm: syz-executor273 Not tainted 6.1.37-syzkaller #0
[ 62.371426][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 62.381564][ T3544] Call Trace:
[ 62.384838][ T3544]
[ 62.387763][ T3544] dump_stack_lvl+0x1e3/0x2cb
[ 62.392457][ T3544] ? nf_tcp_handle_invalid+0x642/0x642
[ 62.397939][ T3544] ? panic+0x75d/0x75d
[ 62.402003][ T3544] ? _printk+0xd1/0x111
[ 62.406162][ T3544] ? _raw_spin_lock_irqsave+0xac/0x120
[ 62.411620][ T3544] print_report+0x15f/0x4f0
[ 62.416119][ T3544] ? leaf_move_items+0x1c4c/0x28a0
[ 62.421238][ T3544] ? __virt_addr_valid+0x22b/0x2e0
[ 62.426351][ T3544] ? __phys_addr+0xb6/0x170
[ 62.430857][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 62.436235][ T3544] kasan_report+0x136/0x160
[ 62.440739][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 62.446108][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 62.451490][ T3544] kasan_check_range+0x27f/0x290
[ 62.456427][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 62.461807][ T3544] memmove+0x25/0x60
[ 62.465716][ T3544] leaf_paste_in_buffer+0x1b8/0xab0
[ 62.470930][ T3544] balance_leaf+0x667c/0x12510
[ 62.475709][ T3544] ? print_irqtrace_events+0x210/0x210
[ 62.481175][ T3544] ? do_balance+0x8f0/0x8f0
[ 62.485682][ T3544] ? write_boundary_block+0xb0/0xb0
[ 62.490885][ T3544] ? do_raw_spin_lock+0x14a/0x370
[ 62.495914][ T3544] ? do_raw_spin_unlock+0x137/0x8a0
[ 62.501118][ T3544] ? __getblk_gfp+0x934/0xa20
[ 62.505800][ T3544] ? get_empty_nodes+0xad9/0xd70
[ 62.510747][ T3544] ? direntry_part_size+0xb0/0x1a0
[ 62.515864][ T3544] ? __wake_up+0x1c0/0x1c0
[ 62.520278][ T3544] ? get_neighbors+0x1010/0x1010
[ 62.525224][ T3544] ? is_leaf_removable+0x8c0/0x8c0
[ 62.530346][ T3544] ? get_neighbors+0x631/0x1010
[ 62.535203][ T3544] ? reiserfs_prepare_for_journal+0x269/0x280
[ 62.541271][ T3544] ? fix_nodes+0x7abc/0x8c70
[ 62.545882][ T3544] ? __might_sleep+0xb0/0xb0
[ 62.550484][ T3544] do_balance+0x309/0x8f0
[ 62.554832][ T3544] ? get_right_neighbor_position+0x210/0x210
[ 62.560820][ T3544] ? reiserfs_paste_into_item+0x3ef/0x880
[ 62.566535][ T3544] reiserfs_paste_into_item+0x73b/0x880
[ 62.572097][ T3544] ? reiserfs_cut_from_item+0x2580/0x2580
[ 62.577904][ T3544] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 62.583834][ T3544] ? reiserfs_get_block+0x19b3/0x5150
[ 62.589212][ T3544] ? rcu_is_watching+0x11/0xb0
[ 62.593982][ T3544] ? __kmalloc+0xe2/0x230
[ 62.598320][ T3544] reiserfs_get_block+0x2259/0x5150
[ 62.603632][ T3544] ? make_le_item_head+0x5c0/0x5c0
[ 62.608754][ T3544] ? register_lock_class+0x100/0x990
[ 62.614037][ T3544] ? generic_cont_expand_simple+0x187/0x2a0
[ 62.620056][ T3544] ? reiserfs_setattr+0x606/0x11c0
[ 62.625172][ T3544] ? notify_change+0xdcd/0x1080
[ 62.630022][ T3544] ? do_truncate+0x21c/0x300
[ 62.634793][ T3544] ? do_sys_ftruncate+0x2e2/0x380
[ 62.639930][ T3544] ? do_syscall_64+0x3d/0xb0
[ 62.644529][ T3544] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 62.650602][ T3544] ? is_dynamic_key+0x1f0/0x1f0
[ 62.655458][ T3544] ? mark_lock+0x9a/0x340
[ 62.659884][ T3544] ? __lock_acquire+0x125b/0x1f80
[ 62.664926][ T3544] ? create_page_buffers+0x1d2/0x4b0
[ 62.670217][ T3544] ? __lock_acquire+0x1f80/0x1f80
[ 62.675258][ T3544] ? create_page_buffers+0x24e/0x4b0
[ 62.680547][ T3544] __block_write_begin_int+0x544/0x1a30
[ 62.686094][ T3544] ? xas_load+0x11a/0x140
[ 62.690434][ T3544] ? make_le_item_head+0x5c0/0x5c0
[ 62.695543][ T3544] ? page_zero_new_buffers+0x650/0x650
[ 62.701030][ T3544] ? __block_write_begin+0x61/0x150
[ 62.706258][ T3544] ? reiserfs_write_begin+0x17f/0x510
[ 62.711636][ T3544] reiserfs_write_begin+0x249/0x510
[ 62.716847][ T3544] generic_cont_expand_simple+0x187/0x2a0
[ 62.722574][ T3544] ? submit_bh+0x20/0x20
[ 62.726818][ T3544] ? ktime_get_coarse_real_ts64+0x36/0x120
[ 62.732628][ T3544] ? mutex_lock_nested+0x17/0x20
[ 62.737583][ T3544] reiserfs_setattr+0x606/0x11c0
[ 62.742530][ T3544] ? reiserfs_commit_write+0x5a0/0x5a0
[ 62.747994][ T3544] ? ktime_get_coarse_real_ts64+0x107/0x120
[ 62.753887][ T3544] ? current_time+0x1d1/0x2f0
[ 62.758573][ T3544] ? atime_needs_update+0x7b0/0x7b0
[ 62.763784][ T3544] ? rwsem_write_trylock+0x166/0x210
[ 62.769076][ T3544] ? bpf_lsm_inode_setattr+0x5/0x10
[ 62.774304][ T3544] ? reiserfs_commit_write+0x5a0/0x5a0
[ 62.779782][ T3544] notify_change+0xdcd/0x1080
[ 62.784464][ T3544] do_truncate+0x21c/0x300
[ 62.788891][ T3544] ? put_page_bootmem+0x2e0/0x2e0
[ 62.793920][ T3544] ? print_irqtrace_events+0x210/0x210
[ 62.799377][ T3544] ? print_irqtrace_events+0x210/0x210
[ 62.804834][ T3544] ? bpf_lsm_path_truncate+0x5/0x10
[ 62.810042][ T3544] do_sys_ftruncate+0x2e2/0x380
[ 62.814900][ T3544] do_syscall_64+0x3d/0xb0
[ 62.819322][ T3544] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 62.825221][ T3544] RIP: 0033:0x7f67ae7f79b9
[ 62.829646][ T3544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 62.849257][ T3544] RSP: 002b:00007ffd11eb8668 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 62.857675][ T3544] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f67ae7f79b9
[ 62.865654][ T3544] RDX: 00007f67ae7f79b9 RSI: 0000000002007fff RDI: 0000000000000005
[ 62.873625][ T3544] RBP: 00007f67ae7b7250 R08: 0000000000000000 R09: 0000000000000000
[ 62.881601][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67ae7b72e0
[ 62.889574][ T3544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 62.897574][ T3544]
[ 62.900590][ T3544]
[ 62.902910][ T3544] The buggy address belongs to the physical page:
[ 62.909318][ T3544] page:ffffea0001c4a5c0 refcount:1 mapcount:1 mapping:0000000000000000 index:0x7f4b1f097 pfn:0x71297
[ 62.920162][ T3544] memcg:ffff88813ff58000
[ 62.924390][ T3544] anon flags: 0xfff800000a0014(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 62.935150][ T3544] raw: 00fff800000a0014 ffffea0001cd9788 ffffea0001c4a608 ffff88807ec60661
[ 62.943734][ T3544] raw: 00000007f4b1f097 0000000000000000 0000000100000000 ffff88813ff58000
[ 62.952309][ T3544] page dumped because: kasan: bad access detected
[ 62.958714][ T3544] page_owner tracks the page as allocated
[ 62.964422][ T3544] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 3000, tgid 3000 (udevd), ts 62313141031, free_ts 17194015951
[ 62.981521][ T3544] post_alloc_hook+0x18d/0x1b0
[ 62.986310][ T3544] get_page_from_freelist+0x32ed/0x3480
[ 62.991874][ T3544] __alloc_pages+0x28d/0x770
[ 62.996456][ T3544] __folio_alloc+0xf/0x30
[ 63.000787][ T3544] vma_alloc_folio+0x486/0x990
[ 63.005557][ T3544] wp_page_copy+0x292/0x17d0
[ 63.010152][ T3544] handle_mm_fault+0x2522/0x5330
[ 63.015089][ T3544] exc_page_fault+0x26f/0x660
[ 63.019765][ T3544] asm_exc_page_fault+0x22/0x30
[ 63.024617][ T3544] page last free stack trace:
[ 63.029294][ T3544] free_unref_page_prepare+0xf63/0x1120
[ 63.034856][ T3544] free_unref_page+0x98/0x570
[ 63.039549][ T3544] free_contig_range+0x9a/0x150
[ 63.044402][ T3544] destroy_args+0xfe/0x997
[ 63.048822][ T3544] debug_vm_pgtable+0x416/0x46b
[ 63.053682][ T3544] do_one_initcall+0x265/0x8f0
[ 63.058476][ T3544] do_initcall_level+0x157/0x207
[ 63.063432][ T3544] do_initcalls+0x49/0x86
[ 63.067862][ T3544] kernel_init_freeable+0x473/0x61f
[ 63.073070][ T3544] kernel_init+0x19/0x290
[ 63.077400][ T3544] ret_from_fork+0x1f/0x30
[ 63.081837][ T3544]
[ 63.084168][ T3544] Memory state around the buggy address:
[ 63.089789][ T3544] ffff888071296f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 63.097850][ T3544] ffff888071296f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 63.105906][ T3544] >ffff888071297000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 63.114219][ T3544] ^
[ 63.118278][ T3544] ffff888071297080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 63.126332][ T3544] ffff888071297100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 63.134384][ T3544] ==================================================================
[ 63.142729][ T3544] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 63.149947][ T3544] CPU: 1 PID: 3544 Comm: syz-executor273 Not tainted 6.1.37-syzkaller #0
[ 63.158370][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 63.168434][ T3544] Call Trace:
[ 63.171720][ T3544]
[ 63.174655][ T3544] dump_stack_lvl+0x1e3/0x2cb
[ 63.179350][ T3544] ? nf_tcp_handle_invalid+0x642/0x642
[ 63.184822][ T3544] ? panic+0x75d/0x75d
[ 63.188900][ T3544] ? vscnprintf+0x59/0x80
[ 63.193287][ T3544] panic+0x318/0x75d
[ 63.197192][ T3544] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 63.203450][ T3544] ? check_panic_on_warn+0x1d/0xa0
[ 63.208575][ T3544] ? memcpy_page_flushcache+0xfc/0xfc
[ 63.214056][ T3544] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 63.220067][ T3544] ? _raw_spin_unlock+0x40/0x40
[ 63.224952][ T3544] check_panic_on_warn+0x7e/0xa0
[ 63.229915][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 63.235306][ T3544] end_report+0x66/0x110
[ 63.239554][ T3544] kasan_report+0x143/0x160
[ 63.244070][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 63.249458][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 63.254859][ T3544] kasan_check_range+0x27f/0x290
[ 63.259810][ T3544] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 63.265205][ T3544] memmove+0x25/0x60
[ 63.269106][ T3544] leaf_paste_in_buffer+0x1b8/0xab0
[ 63.274324][ T3544] balance_leaf+0x667c/0x12510
[ 63.279108][ T3544] ? print_irqtrace_events+0x210/0x210
[ 63.284581][ T3544] ? do_balance+0x8f0/0x8f0
[ 63.289092][ T3544] ? write_boundary_block+0xb0/0xb0
[ 63.294295][ T3544] ? do_raw_spin_lock+0x14a/0x370
[ 63.299333][ T3544] ? do_raw_spin_unlock+0x137/0x8a0
[ 63.304542][ T3544] ? __getblk_gfp+0x934/0xa20
[ 63.309232][ T3544] ? get_empty_nodes+0xad9/0xd70
[ 63.314180][ T3544] ? direntry_part_size+0xb0/0x1a0
[ 63.319306][ T3544] ? __wake_up+0x1c0/0x1c0
[ 63.323731][ T3544] ? get_neighbors+0x1010/0x1010
[ 63.328685][ T3544] ? is_leaf_removable+0x8c0/0x8c0
[ 63.333811][ T3544] ? get_neighbors+0x631/0x1010
[ 63.338677][ T3544] ? reiserfs_prepare_for_journal+0x269/0x280
[ 63.344751][ T3544] ? fix_nodes+0x7abc/0x8c70
[ 63.349363][ T3544] ? __might_sleep+0xb0/0xb0
[ 63.353970][ T3544] do_balance+0x309/0x8f0
[ 63.358321][ T3544] ? get_right_neighbor_position+0x210/0x210
[ 63.364403][ T3544] ? reiserfs_paste_into_item+0x3ef/0x880
[ 63.370215][ T3544] reiserfs_paste_into_item+0x73b/0x880
[ 63.375774][ T3544] ? reiserfs_cut_from_item+0x2580/0x2580
[ 63.381493][ T3544] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 63.387420][ T3544] ? reiserfs_get_block+0x19b3/0x5150
[ 63.392797][ T3544] ? rcu_is_watching+0x11/0xb0
[ 63.397567][ T3544] ? __kmalloc+0xe2/0x230
[ 63.401917][ T3544] reiserfs_get_block+0x2259/0x5150
[ 63.407173][ T3544] ? make_le_item_head+0x5c0/0x5c0
[ 63.412376][ T3544] ? register_lock_class+0x100/0x990
[ 63.417664][ T3544] ? generic_cont_expand_simple+0x187/0x2a0
[ 63.423572][ T3544] ? reiserfs_setattr+0x606/0x11c0
[ 63.428693][ T3544] ? notify_change+0xdcd/0x1080
[ 63.433546][ T3544] ? do_truncate+0x21c/0x300
[ 63.438148][ T3544] ? do_sys_ftruncate+0x2e2/0x380
[ 63.443188][ T3544] ? do_syscall_64+0x3d/0xb0
[ 63.447963][ T3544] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 63.454055][ T3544] ? is_dynamic_key+0x1f0/0x1f0
[ 63.458923][ T3544] ? mark_lock+0x9a/0x340
[ 63.463272][ T3544] ? __lock_acquire+0x125b/0x1f80
[ 63.468331][ T3544] ? create_page_buffers+0x1d2/0x4b0
[ 63.473640][ T3544] ? __lock_acquire+0x1f80/0x1f80
[ 63.478683][ T3544] ? create_page_buffers+0x24e/0x4b0
[ 63.483984][ T3544] __block_write_begin_int+0x544/0x1a30
[ 63.489629][ T3544] ? xas_load+0x11a/0x140
[ 63.493976][ T3544] ? make_le_item_head+0x5c0/0x5c0
[ 63.499132][ T3544] ? page_zero_new_buffers+0x650/0x650
[ 63.504603][ T3544] ? __block_write_begin+0x61/0x150
[ 63.509814][ T3544] ? reiserfs_write_begin+0x17f/0x510
[ 63.515200][ T3544] reiserfs_write_begin+0x249/0x510
[ 63.520410][ T3544] generic_cont_expand_simple+0x187/0x2a0
[ 63.526138][ T3544] ? submit_bh+0x20/0x20
[ 63.530387][ T3544] ? ktime_get_coarse_real_ts64+0x36/0x120
[ 63.536202][ T3544] ? mutex_lock_nested+0x17/0x20
[ 63.541157][ T3544] reiserfs_setattr+0x606/0x11c0
[ 63.546281][ T3544] ? reiserfs_commit_write+0x5a0/0x5a0
[ 63.551746][ T3544] ? ktime_get_coarse_real_ts64+0x107/0x120
[ 63.557646][ T3544] ? current_time+0x1d1/0x2f0
[ 63.562340][ T3544] ? atime_needs_update+0x7b0/0x7b0
[ 63.570177][ T3544] ? rwsem_write_trylock+0x166/0x210
[ 63.575559][ T3544] ? bpf_lsm_inode_setattr+0x5/0x10
[ 63.580769][ T3544] ? reiserfs_commit_write+0x5a0/0x5a0
[ 63.586345][ T3544] notify_change+0xdcd/0x1080
[ 63.591038][ T3544] do_truncate+0x21c/0x300
[ 63.595471][ T3544] ? put_page_bootmem+0x2e0/0x2e0
[ 63.600505][ T3544] ? print_irqtrace_events+0x210/0x210
[ 63.605969][ T3544] ? print_irqtrace_events+0x210/0x210
[ 63.611430][ T3544] ? bpf_lsm_path_truncate+0x5/0x10
[ 63.616642][ T3544] do_sys_ftruncate+0x2e2/0x380
[ 63.621510][ T3544] do_syscall_64+0x3d/0xb0
[ 63.625942][ T3544] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 63.631847][ T3544] RIP: 0033:0x7f67ae7f79b9
[ 63.636271][ T3544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 63.655884][ T3544] RSP: 002b:00007ffd11eb8668 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 63.664314][ T3544] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f67ae7f79b9
[ 63.672292][ T3544] RDX: 00007f67ae7f79b9 RSI: 0000000002007fff RDI: 0000000000000005
[ 63.680273][ T3544] RBP: 00007f67ae7b7250 R08: 0000000000000000 R09: 0000000000000000
[ 63.688257][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67ae7b72e0
[ 63.696226][ T3544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 63.704209][ T3544]
[ 63.707634][ T3544] Kernel Offset: disabled
[ 63.712047][ T3544] Rebooting in 86400 seconds..