Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. executing program [ 49.976890][ T3543] loop0: detected capacity change from 0 to 8192 [ 49.986675][ T3543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 49.999728][ T3543] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 50.009077][ T3543] REISERFS (device loop0): using ordered data mode [ 50.015690][ T3543] reiserfs: using flush barriers [ 50.021928][ T3543] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.038392][ T3543] REISERFS (device loop0): checking transaction log (loop0) [ 50.047580][ T3543] REISERFS (device loop0): Using r5 hash to sort names [ 50.056788][ T3543] reiserfs: enabling write barrier flush mode [ 50.068831][ T3543] ================================================================== [ 50.076923][ T3543] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 50.084499][ T3543] Read of size 18446744073709551584 at addr ffff88807790efa4 by task syz-executor210/3543 [ 50.094386][ T3543] [ 50.096712][ T3543] CPU: 0 PID: 3543 Comm: syz-executor210 Not tainted 6.1.53-syzkaller #0 [ 50.105110][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 50.115189][ T3543] Call Trace: [ 50.118456][ T3543] [ 50.121368][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 50.126040][ T3543] ? irq_work_queue+0xc6/0x150 [ 50.130789][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.136245][ T3543] ? panic+0x75d/0x75d [ 50.140296][ T3543] ? _printk+0xd1/0x111 [ 50.144432][ T3543] ? _raw_spin_lock_irqsave+0xac/0x120 [ 50.149877][ T3543] print_report+0x15f/0x4f0 [ 50.154361][ T3543] ? __lock_acquire+0x125b/0x1f80 [ 50.159364][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 50.164485][ T3543] ? __phys_addr+0xb6/0x170 [ 50.168979][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.174277][ T3543] kasan_report+0x136/0x160 [ 50.178771][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.184068][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.189338][ T3543] kasan_check_range+0x27f/0x290 [ 50.194258][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.199526][ T3543] memmove+0x25/0x60 [ 50.203401][ T3543] leaf_paste_entries+0x95f/0x13a0 [ 50.208524][ T3543] balance_leaf+0xbd1e/0x12510 [ 50.213271][ T3543] ? print_irqtrace_events+0x210/0x210 [ 50.218806][ T3543] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 50.224682][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 50.229513][ T3543] ? stack_trace_save+0x113/0x1c0 [ 50.234518][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 50.239619][ T3543] ? do_balance+0x8f0/0x8f0 [ 50.244103][ T3543] ? __stack_depot_save+0x3f5/0x470 [ 50.249284][ T3543] ? kasan_set_track+0x60/0x70 [ 50.254025][ T3543] ? kasan_set_track+0x4b/0x70 [ 50.258766][ T3543] ? __kasan_kmalloc+0x97/0xb0 [ 50.263566][ T3543] ? __kmalloc+0xb2/0x230 [ 50.267892][ T3543] ? fix_nodes+0x69aa/0x8c70 [ 50.272474][ T3543] ? reiserfs_paste_into_item+0x65d/0x880 [ 50.278176][ T3543] ? reiserfs_add_entry+0x9b8/0xd70 [ 50.283369][ T3543] ? reiserfs_mkdir+0x6bc/0x8f0 [ 50.288313][ T3543] ? reiserfs_xattr_init+0x348/0x730 [ 50.293587][ T3543] ? reiserfs_remount+0x12b8/0x18e0 [ 50.298793][ T3543] ? reconfigure_super+0x43a/0x870 [ 50.303887][ T3543] ? path_mount+0xe69/0x1090 [ 50.308467][ T3543] ? __se_sys_mount+0x2d5/0x3c0 [ 50.313318][ T3543] ? do_syscall_64+0x3d/0xb0 [ 50.317887][ T3543] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.323939][ T3543] ? __wake_up+0x1c0/0x1c0 [ 50.328335][ T3543] ? get_parents+0x513/0xfa0 [ 50.332906][ T3543] ? set_parameters+0x8d0/0x8d0 [ 50.337740][ T3543] ? get_neighbors+0x631/0x1010 [ 50.342658][ T3543] ? reiserfs_prepare_for_journal+0x269/0x280 [ 50.348704][ T3543] ? fix_nodes+0x7abc/0x8c70 [ 50.353276][ T3543] ? __might_sleep+0xb0/0xb0 [ 50.357856][ T3543] do_balance+0x309/0x8f0 [ 50.362166][ T3543] ? get_right_neighbor_position+0x210/0x210 [ 50.368131][ T3543] ? reiserfs_paste_into_item+0x3ef/0x880 [ 50.373828][ T3543] reiserfs_paste_into_item+0x73b/0x880 [ 50.379357][ T3543] ? reiserfs_cut_from_item+0x2580/0x2580 [ 50.385096][ T3543] ? reiserfs_get_parent+0x2c0/0x2c0 [ 50.390378][ T3543] ? inode_get_bytes+0x72/0xa0 [ 50.395131][ T3543] ? _find_first_zero_bit+0x61/0x100 [ 50.400524][ T3543] reiserfs_add_entry+0x9b8/0xd70 [ 50.405542][ T3543] ? drop_new_inode+0x60/0x60 [ 50.410208][ T3543] ? do_journal_begin_r+0xdc9/0x1020 [ 50.415497][ T3543] ? journal_begin+0x1ef/0x350 [ 50.420242][ T3543] reiserfs_mkdir+0x6bc/0x8f0 [ 50.424901][ T3543] ? reiserfs_symlink+0x720/0x720 [ 50.429904][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 50.435171][ T3543] ? mutex_unlock+0x10/0x10 [ 50.439655][ T3543] reiserfs_xattr_init+0x348/0x730 [ 50.444757][ T3543] reiserfs_remount+0x12b8/0x18e0 [ 50.449767][ T3543] ? reiserfs_statfs+0x380/0x380 [ 50.454686][ T3543] ? shrink_dcache_sb+0x3be/0x410 [ 50.459702][ T3543] ? dentry_lru_isolate+0x2f0/0x2f0 [ 50.464892][ T3543] ? hook_sb_remount+0x19/0xc0 [ 50.469906][ T3543] reconfigure_super+0x43a/0x870 [ 50.474845][ T3543] path_mount+0xe69/0x1090 [ 50.479256][ T3543] ? user_path_at_empty+0x12b/0x180 [ 50.484437][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 50.489108][ T3543] ? __x64_sys_mount+0xc0/0xc0 [ 50.493857][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 50.499823][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 50.505019][ T3543] ? __x64_sys_mount+0x1c/0xc0 [ 50.509767][ T3543] do_syscall_64+0x3d/0xb0 [ 50.514168][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.520041][ T3543] RIP: 0033:0x7fae6a9a8efa [ 50.524436][ T3543] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.544027][ T3543] RSP: 002b:00007ffd8190c098 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 50.552428][ T3543] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fae6a9a8efa [ 50.560378][ T3543] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 50.568347][ T3543] RBP: 00007ffd8190c130 R08: 00007ffd8190c130 R09: 0000000000000000 [ 50.576297][ T3543] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 50.584248][ T3543] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 50.592216][ T3543] [ 50.595220][ T3543] [ 50.597521][ T3543] The buggy address belongs to the physical page: [ 50.603910][ T3543] page:ffffea0001de4380 refcount:2 mapcount:0 mapping:ffff88801288c9f8 index:0x213 pfn:0x7790e [ 50.614208][ T3543] memcg:ffff888140058000 [ 50.618425][ T3543] aops:def_blk_aops ino:700000 [ 50.623166][ T3543] flags: 0xfff38000002052(referenced|lru|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 50.633206][ T3543] raw: 00fff38000002052 ffffea00012b3288 ffffea000061f648 ffff88801288c9f8 [ 50.641763][ T3543] raw: 0000000000000213 ffff888071896570 00000002ffffffff ffff888140058000 [ 50.650320][ T3543] page dumped because: kasan: bad access detected [ 50.656710][ T3543] page_owner tracks the page as allocated [ 50.662428][ T3543] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3543, tgid 3543 (syz-executor210), ts 50047214969, free_ts 49938854091 [ 50.682977][ T3543] post_alloc_hook+0x18d/0x1b0 [ 50.687722][ T3543] get_page_from_freelist+0x32ed/0x3480 [ 50.693245][ T3543] __alloc_pages+0x28d/0x770 [ 50.697810][ T3543] folio_alloc+0x1a/0x50 [ 50.702028][ T3543] filemap_alloc_folio+0xda/0x4f0 [ 50.707034][ T3543] __filemap_get_folio+0x711/0xe30 [ 50.712123][ T3543] pagecache_get_page+0x28/0x250 [ 50.717042][ T3543] __getblk_gfp+0x211/0xa20 [ 50.721526][ T3543] search_by_key+0x460/0x4b60 [ 50.726177][ T3543] reiserfs_read_locked_inode+0x23c/0x2950 [ 50.731964][ T3543] reiserfs_fill_super+0x135f/0x2620 [ 50.737234][ T3543] mount_bdev+0x2c9/0x3f0 [ 50.741541][ T3543] legacy_get_tree+0xeb/0x180 [ 50.746214][ T3543] vfs_get_tree+0x88/0x270 [ 50.750627][ T3543] do_new_mount+0x28b/0xae0 [ 50.755107][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 50.759763][ T3543] page last free stack trace: [ 50.764408][ T3543] free_unref_page_prepare+0xf63/0x1120 [ 50.769945][ T3543] free_unref_page_list+0x107/0x810 [ 50.775124][ T3543] release_pages+0x2836/0x2b40 [ 50.779878][ T3543] tlb_flush_mmu+0xfc/0x210 [ 50.784355][ T3543] tlb_finish_mmu+0xce/0x1f0 [ 50.788929][ T3543] exit_mmap+0x3c3/0x9f0 [ 50.793248][ T3543] __mmput+0x115/0x3c0 [ 50.797295][ T3543] exec_mmap+0x4fa/0x5b0 [ 50.801519][ T3543] begin_new_exec+0x7ac/0x1030 [ 50.806261][ T3543] load_elf_binary+0x945/0x2750 [ 50.811090][ T3543] bprm_execve+0x8ff/0x1820 [ 50.815573][ T3543] do_execveat_common+0x580/0x720 [ 50.820574][ T3543] __x64_sys_execve+0x8e/0xa0 [ 50.825227][ T3543] do_syscall_64+0x3d/0xb0 [ 50.829620][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.835492][ T3543] [ 50.837816][ T3543] Memory state around the buggy address: [ 50.843419][ T3543] ffff88807790ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.851454][ T3543] ffff88807790ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.859490][ T3543] >ffff88807790ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.867526][ T3543] ^ [ 50.872608][ T3543] ffff88807790f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.880643][ T3543] ffff88807790f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.888678][ T3543] ================================================================== [ 50.897249][ T3543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.904450][ T3543] CPU: 1 PID: 3543 Comm: syz-executor210 Not tainted 6.1.53-syzkaller #0 [ 50.912860][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 50.922913][ T3543] Call Trace: [ 50.926180][ T3543] [ 50.929109][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 50.933779][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.939224][ T3543] ? panic+0x75d/0x75d [ 50.943289][ T3543] ? preempt_schedule_common+0xa6/0xd0 [ 50.948739][ T3543] ? vscnprintf+0x59/0x80 [ 50.953094][ T3543] panic+0x318/0x75d [ 50.956978][ T3543] ? check_panic_on_warn+0x1d/0xa0 [ 50.962080][ T3543] ? memcpy_page_flushcache+0xfc/0xfc [ 50.967439][ T3543] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 50.973408][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 50.978245][ T3543] ? print_report+0x4a3/0x4f0 [ 50.982907][ T3543] check_panic_on_warn+0x7e/0xa0 [ 50.987834][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.993107][ T3543] end_report+0x66/0x110 [ 50.997336][ T3543] kasan_report+0x143/0x160 [ 51.001825][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.007096][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.012363][ T3543] kasan_check_range+0x27f/0x290 [ 51.017287][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.022554][ T3543] memmove+0x25/0x60 [ 51.026436][ T3543] leaf_paste_entries+0x95f/0x13a0 [ 51.031537][ T3543] balance_leaf+0xbd1e/0x12510 [ 51.036294][ T3543] ? print_irqtrace_events+0x210/0x210 [ 51.041745][ T3543] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.047630][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 51.052474][ T3543] ? stack_trace_save+0x113/0x1c0 [ 51.057488][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 51.062587][ T3543] ? do_balance+0x8f0/0x8f0 [ 51.067079][ T3543] ? __stack_depot_save+0x3f5/0x470 [ 51.072264][ T3543] ? kasan_set_track+0x60/0x70 [ 51.077010][ T3543] ? kasan_set_track+0x4b/0x70 [ 51.081755][ T3543] ? __kasan_kmalloc+0x97/0xb0 [ 51.086508][ T3543] ? __kmalloc+0xb2/0x230 [ 51.090821][ T3543] ? fix_nodes+0x69aa/0x8c70 [ 51.095486][ T3543] ? reiserfs_paste_into_item+0x65d/0x880 [ 51.101215][ T3543] ? reiserfs_add_entry+0x9b8/0xd70 [ 51.106399][ T3543] ? reiserfs_mkdir+0x6bc/0x8f0 [ 51.111253][ T3543] ? reiserfs_xattr_init+0x348/0x730 [ 51.116547][ T3543] ? reiserfs_remount+0x12b8/0x18e0 [ 51.121761][ T3543] ? reconfigure_super+0x43a/0x870 [ 51.126880][ T3543] ? path_mount+0xe69/0x1090 [ 51.131468][ T3543] ? __se_sys_mount+0x2d5/0x3c0 [ 51.136404][ T3543] ? do_syscall_64+0x3d/0xb0 [ 51.140996][ T3543] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.147068][ T3543] ? __wake_up+0x1c0/0x1c0 [ 51.151474][ T3543] ? get_parents+0x513/0xfa0 [ 51.156064][ T3543] ? set_parameters+0x8d0/0x8d0 [ 51.160914][ T3543] ? get_neighbors+0x631/0x1010 [ 51.165852][ T3543] ? reiserfs_prepare_for_journal+0x269/0x280 [ 51.171916][ T3543] ? fix_nodes+0x7abc/0x8c70 [ 51.176501][ T3543] ? __might_sleep+0xb0/0xb0 [ 51.181088][ T3543] do_balance+0x309/0x8f0 [ 51.185409][ T3543] ? get_right_neighbor_position+0x210/0x210 [ 51.191382][ T3543] ? reiserfs_paste_into_item+0x3ef/0x880 [ 51.197110][ T3543] reiserfs_paste_into_item+0x73b/0x880 [ 51.202648][ T3543] ? reiserfs_cut_from_item+0x2580/0x2580 [ 51.208379][ T3543] ? reiserfs_get_parent+0x2c0/0x2c0 [ 51.213710][ T3543] ? inode_get_bytes+0x72/0xa0 [ 51.218461][ T3543] ? _find_first_zero_bit+0x61/0x100 [ 51.223749][ T3543] reiserfs_add_entry+0x9b8/0xd70 [ 51.228769][ T3543] ? drop_new_inode+0x60/0x60 [ 51.233432][ T3543] ? do_journal_begin_r+0xdc9/0x1020 [ 51.238720][ T3543] ? journal_begin+0x1ef/0x350 [ 51.243475][ T3543] reiserfs_mkdir+0x6bc/0x8f0 [ 51.248145][ T3543] ? reiserfs_symlink+0x720/0x720 [ 51.253167][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 51.258447][ T3543] ? mutex_unlock+0x10/0x10 [ 51.262942][ T3543] reiserfs_xattr_init+0x348/0x730 [ 51.268047][ T3543] reiserfs_remount+0x12b8/0x18e0 [ 51.273062][ T3543] ? reiserfs_statfs+0x380/0x380 [ 51.277991][ T3543] ? shrink_dcache_sb+0x3be/0x410 [ 51.283013][ T3543] ? dentry_lru_isolate+0x2f0/0x2f0 [ 51.288220][ T3543] ? hook_sb_remount+0x19/0xc0 [ 51.292992][ T3543] reconfigure_super+0x43a/0x870 [ 51.297935][ T3543] path_mount+0xe69/0x1090 [ 51.302349][ T3543] ? user_path_at_empty+0x12b/0x180 [ 51.307538][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 51.312218][ T3543] ? __x64_sys_mount+0xc0/0xc0 [ 51.317068][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.323040][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 51.328233][ T3543] ? __x64_sys_mount+0x1c/0xc0 [ 51.332991][ T3543] do_syscall_64+0x3d/0xb0 [ 51.337397][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.343275][ T3543] RIP: 0033:0x7fae6a9a8efa [ 51.347679][ T3543] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.367272][ T3543] RSP: 002b:00007ffd8190c098 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 51.375683][ T3543] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fae6a9a8efa [ 51.383648][ T3543] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 51.391617][ T3543] RBP: 00007ffd8190c130 R08: 00007ffd8190c130 R09: 0000000000000000 [ 51.399580][ T3543] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 51.407547][ T3543] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 51.415524][ T3543] [ 51.418767][ T3543] Kernel Offset: disabled [ 51.423077][ T3543] Rebooting in 86400 seconds..