Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts.
executing program
[ 52.117258][ T3538] loop0: detected capacity change from 0 to 8192
[ 52.126921][ T3538] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 52.140420][ T3538] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 52.150061][ T3538] REISERFS (device loop0): using ordered data mode
[ 52.156787][ T3538] reiserfs: using flush barriers
[ 52.163129][ T3538] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 52.179641][ T3538] REISERFS (device loop0): checking transaction log (loop0)
[ 52.189125][ T3538] REISERFS (device loop0): Using r5 hash to sort names
[ 52.196328][ T3538] REISERFS (device loop0): using 3.5.x disk format
[ 52.203915][ T3538] ==================================================================
[ 52.211975][ T3538] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0
[ 52.219517][ T3538] Read of size 18446744073709551584 at addr ffff88807178efa4 by task syz-executor140/3538
[ 52.229381][ T3538]
[ 52.231686][ T3538] CPU: 0 PID: 3538 Comm: syz-executor140 Not tainted 6.1.37-syzkaller #0
[ 52.240075][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 52.250290][ T3538] Call Trace:
[ 52.253562][ T3538]
[ 52.256482][ T3538] dump_stack_lvl+0x1e3/0x2cb
[ 52.261172][ T3538] ? irq_work_queue+0xc6/0x150
[ 52.265990][ T3538] ? nf_tcp_handle_invalid+0x642/0x642
[ 52.271444][ T3538] ? panic+0x75d/0x75d
[ 52.275499][ T3538] ? _printk+0xd1/0x111
[ 52.279641][ T3538] ? _raw_spin_lock_irqsave+0xac/0x120
[ 52.285087][ T3538] print_report+0x15f/0x4f0
[ 52.289572][ T3538] ? __lock_acquire+0x125b/0x1f80
[ 52.294575][ T3538] ? __virt_addr_valid+0x22b/0x2e0
[ 52.299672][ T3538] ? __phys_addr+0xb6/0x170
[ 52.304157][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 52.309601][ T3538] kasan_report+0x136/0x160
[ 52.314170][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 52.319438][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 52.324812][ T3538] kasan_check_range+0x27f/0x290
[ 52.329733][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 52.335001][ T3538] memmove+0x25/0x60
[ 52.338876][ T3538] leaf_paste_entries+0x95f/0x13a0
[ 52.343980][ T3538] balance_leaf+0xbd1e/0x12510
[ 52.348820][ T3538] ? print_irqtrace_events+0x210/0x210
[ 52.354258][ T3538] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 52.360147][ T3538] ? _raw_spin_unlock+0x40/0x40
[ 52.364975][ T3538] ? stack_trace_save+0x113/0x1c0
[ 52.369979][ T3538] ? stack_trace_snprint+0xe0/0xe0
[ 52.375071][ T3538] ? stack_trace_snprint+0xe0/0xe0
[ 52.380161][ T3538] ? do_balance+0x8f0/0x8f0
[ 52.384817][ T3538] ? __stack_depot_save+0x3f5/0x470
[ 52.390085][ T3538] ? kasan_set_track+0x60/0x70
[ 52.394830][ T3538] ? kasan_set_track+0x4b/0x70
[ 52.399581][ T3538] ? __kasan_kmalloc+0x97/0xb0
[ 52.404326][ T3538] ? __kmalloc+0xb2/0x230
[ 52.408634][ T3538] ? fix_nodes+0x69aa/0x8c70
[ 52.413204][ T3538] ? reiserfs_paste_into_item+0x65d/0x880
[ 52.418902][ T3538] ? reiserfs_add_entry+0x9b8/0xd70
[ 52.424079][ T3538] ? reiserfs_mkdir+0x6bc/0x8f0
[ 52.428906][ T3538] ? reiserfs_xattr_init+0x348/0x730
[ 52.434348][ T3538] ? reiserfs_fill_super+0x2203/0x2620
[ 52.439791][ T3538] ? mount_bdev+0x2c9/0x3f0
[ 52.444273][ T3538] ? legacy_get_tree+0xeb/0x180
[ 52.449107][ T3538] ? vfs_get_tree+0x88/0x270
[ 52.453678][ T3538] ? do_new_mount+0x28b/0xae0
[ 52.458350][ T3538] ? __se_sys_mount+0x2d5/0x3c0
[ 52.463184][ T3538] ? do_syscall_64+0x3d/0xb0
[ 52.467757][ T3538] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.473810][ T3538] ? __wake_up+0x1c0/0x1c0
[ 52.478204][ T3538] ? get_parents+0x513/0xfa0
[ 52.482780][ T3538] ? set_parameters+0x8d0/0x8d0
[ 52.487610][ T3538] ? get_neighbors+0x631/0x1010
[ 52.492442][ T3538] ? reiserfs_prepare_for_journal+0x269/0x280
[ 52.498488][ T3538] ? fix_nodes+0x7abc/0x8c70
[ 52.503062][ T3538] ? __might_sleep+0xb0/0xb0
[ 52.507636][ T3538] do_balance+0x309/0x8f0
[ 52.511947][ T3538] ? get_right_neighbor_position+0x210/0x210
[ 52.517910][ T3538] ? reiserfs_paste_into_item+0x3ef/0x880
[ 52.523609][ T3538] reiserfs_paste_into_item+0x73b/0x880
[ 52.529154][ T3538] ? reiserfs_cut_from_item+0x2580/0x2580
[ 52.534867][ T3538] ? reiserfs_get_parent+0x2c0/0x2c0
[ 52.540140][ T3538] ? inode_get_bytes+0x72/0xa0
[ 52.544886][ T3538] ? _find_first_zero_bit+0x61/0x100
[ 52.550156][ T3538] reiserfs_add_entry+0x9b8/0xd70
[ 52.555163][ T3538] ? drop_new_inode+0x60/0x60
[ 52.559821][ T3538] ? do_journal_begin_r+0xdc9/0x1020
[ 52.565096][ T3538] ? journal_begin+0x1ef/0x350
[ 52.569837][ T3538] reiserfs_mkdir+0x6bc/0x8f0
[ 52.574582][ T3538] ? reiserfs_symlink+0x720/0x720
[ 52.579587][ T3538] ? rwsem_write_trylock+0x166/0x210
[ 52.584855][ T3538] ? __up_read+0x690/0x690
[ 52.589255][ T3538] reiserfs_xattr_init+0x348/0x730
[ 52.594348][ T3538] reiserfs_fill_super+0x2203/0x2620
[ 52.599618][ T3538] ? reiserfs_kill_sb+0x150/0x150
[ 52.604623][ T3538] ? snprintf+0xd6/0x120
[ 52.608850][ T3538] mount_bdev+0x2c9/0x3f0
[ 52.613165][ T3538] ? reiserfs_kill_sb+0x150/0x150
[ 52.618176][ T3538] legacy_get_tree+0xeb/0x180
[ 52.622834][ T3538] ? remove_save_link+0x540/0x540
[ 52.628013][ T3538] vfs_get_tree+0x88/0x270
[ 52.632414][ T3538] do_new_mount+0x28b/0xae0
[ 52.636901][ T3538] ? do_move_mount_old+0x160/0x160
[ 52.641996][ T3538] ? user_path_at_empty+0x12b/0x180
[ 52.647181][ T3538] __se_sys_mount+0x2d5/0x3c0
[ 52.651843][ T3538] ? __x64_sys_mount+0xc0/0xc0
[ 52.656587][ T3538] ? syscall_enter_from_user_mode+0x2e/0x220
[ 52.662546][ T3538] ? lockdep_hardirqs_on+0x94/0x130
[ 52.667723][ T3538] ? __x64_sys_mount+0x1c/0xc0
[ 52.672468][ T3538] do_syscall_64+0x3d/0xb0
[ 52.676867][ T3538] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.682741][ T3538] RIP: 0033:0x7f4e26e0bb1a
[ 52.687135][ T3538] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.706718][ T3538] RSP: 002b:00007ffe5c85bbc8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 52.715111][ T3538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4e26e0bb1a
[ 52.723062][ T3538] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffe5c85bbe0
[ 52.731016][ T3538] RBP: 00007ffe5c85bbe0 R08: 00007ffe5c85bc20 R09: 0000000000001108
[ 52.738974][ T3538] R10: 0000000002000480 R11: 0000000000000286 R12: 0000000000000004
[ 52.746928][ T3538] R13: 0000555555ee82c0 R14: 0000000002000480 R15: 00007ffe5c85bc20
[ 52.754886][ T3538]
[ 52.757885][ T3538]
[ 52.760188][ T3538] The buggy address belongs to the physical page:
[ 52.766577][ T3538] page:ffffea0001c5e380 refcount:3 mapcount:0 mapping:ffff888148d175f8 index:0x213 pfn:0x7178e
[ 52.776877][ T3538] memcg:ffff888140060000
[ 52.781095][ T3538] aops:def_blk_aops ino:700000
[ 52.785842][ T3538] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[ 52.795540][ T3538] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888148d175f8
[ 52.804100][ T3538] raw: 0000000000000213 ffff888070c8b488 00000003ffffffff ffff888140060000
[ 52.812659][ T3538] page dumped because: kasan: bad access detected
[ 52.819048][ T3538] page_owner tracks the page as allocated
[ 52.824912][ T3538] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3538, tgid 3538 (syz-executor140), ts 52188797322, free_ts 51994057209
[ 52.845464][ T3538] post_alloc_hook+0x18d/0x1b0
[ 52.850216][ T3538] get_page_from_freelist+0x32ed/0x3480
[ 52.855740][ T3538] __alloc_pages+0x28d/0x770
[ 52.860311][ T3538] folio_alloc+0x1a/0x50
[ 52.864533][ T3538] filemap_alloc_folio+0xda/0x4f0
[ 52.869538][ T3538] __filemap_get_folio+0x711/0xe30
[ 52.874627][ T3538] pagecache_get_page+0x28/0x250
[ 52.879542][ T3538] __getblk_gfp+0x211/0xa20
[ 52.884024][ T3538] search_by_key+0x460/0x4b60
[ 52.888676][ T3538] reiserfs_read_locked_inode+0x23c/0x2950
[ 52.894472][ T3538] reiserfs_fill_super+0x135f/0x2620
[ 52.899736][ T3538] mount_bdev+0x2c9/0x3f0
[ 52.904055][ T3538] legacy_get_tree+0xeb/0x180
[ 52.908712][ T3538] vfs_get_tree+0x88/0x270
[ 52.913113][ T3538] do_new_mount+0x28b/0xae0
[ 52.917597][ T3538] __se_sys_mount+0x2d5/0x3c0
[ 52.922339][ T3538] page last free stack trace:
[ 52.926991][ T3538] free_unref_page_prepare+0xf63/0x1120
[ 52.932519][ T3538] free_unref_page_list+0x107/0x810
[ 52.937698][ T3538] release_pages+0x2836/0x2b40
[ 52.942444][ T3538] tlb_flush_mmu+0xfc/0x210
[ 52.946921][ T3538] tlb_finish_mmu+0xce/0x1f0
[ 52.951485][ T3538] exit_mmap+0x3c3/0x9f0
[ 52.955707][ T3538] __mmput+0x115/0x3c0
[ 52.959752][ T3538] exit_mm+0x226/0x300
[ 52.963801][ T3538] do_exit+0x67e/0x2300
[ 52.967936][ T3538] do_group_exit+0x202/0x2b0
[ 52.972679][ T3538] __x64_sys_exit_group+0x3b/0x40
[ 52.977684][ T3538] do_syscall_64+0x3d/0xb0
[ 52.982081][ T3538] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.987956][ T3538]
[ 52.990259][ T3538] Memory state around the buggy address:
[ 52.996132][ T3538] ffff88807178ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 53.004255][ T3538] ffff88807178ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 53.012290][ T3538] >ffff88807178ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 53.020327][ T3538] ^
[ 53.025411][ T3538] ffff88807178f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 53.033446][ T3538] ffff88807178f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 53.041543][ T3538] ==================================================================
[ 53.049980][ T3538] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 53.057185][ T3538] CPU: 1 PID: 3538 Comm: syz-executor140 Not tainted 6.1.37-syzkaller #0
[ 53.065603][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 53.075652][ T3538] Call Trace:
[ 53.078925][ T3538]
[ 53.081848][ T3538] dump_stack_lvl+0x1e3/0x2cb
[ 53.086526][ T3538] ? nf_tcp_handle_invalid+0x642/0x642
[ 53.091980][ T3538] ? panic+0x75d/0x75d
[ 53.096342][ T3538] ? preempt_schedule_common+0xa6/0xd0
[ 53.101808][ T3538] ? vscnprintf+0x59/0x80
[ 53.106132][ T3538] panic+0x318/0x75d
[ 53.110024][ T3538] ? check_panic_on_warn+0x1d/0xa0
[ 53.115132][ T3538] ? memcpy_page_flushcache+0xfc/0xfc
[ 53.120493][ T3538] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 53.126471][ T3538] ? _raw_spin_unlock+0x40/0x40
[ 53.131309][ T3538] ? print_report+0x4a3/0x4f0
[ 53.135977][ T3538] check_panic_on_warn+0x7e/0xa0
[ 53.140903][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 53.146235][ T3538] end_report+0x66/0x110
[ 53.150466][ T3538] kasan_report+0x143/0x160
[ 53.154957][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 53.160234][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 53.165513][ T3538] kasan_check_range+0x27f/0x290
[ 53.170444][ T3538] ? leaf_paste_entries+0x95f/0x13a0
[ 53.175723][ T3538] memmove+0x25/0x60
[ 53.179605][ T3538] leaf_paste_entries+0x95f/0x13a0
[ 53.184713][ T3538] balance_leaf+0xbd1e/0x12510
[ 53.189471][ T3538] ? print_irqtrace_events+0x210/0x210
[ 53.194923][ T3538] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 53.200806][ T3538] ? _raw_spin_unlock+0x40/0x40
[ 53.205643][ T3538] ? stack_trace_save+0x113/0x1c0
[ 53.210655][ T3538] ? stack_trace_snprint+0xe0/0xe0
[ 53.215754][ T3538] ? stack_trace_snprint+0xe0/0xe0
[ 53.220873][ T3538] ? do_balance+0x8f0/0x8f0
[ 53.225388][ T3538] ? __stack_depot_save+0x3f5/0x470
[ 53.230593][ T3538] ? kasan_set_track+0x60/0x70
[ 53.235355][ T3538] ? kasan_set_track+0x4b/0x70
[ 53.240127][ T3538] ? __kasan_kmalloc+0x97/0xb0
[ 53.244900][ T3538] ? __kmalloc+0xb2/0x230
[ 53.249226][ T3538] ? fix_nodes+0x69aa/0x8c70
[ 53.253820][ T3538] ? reiserfs_paste_into_item+0x65d/0x880
[ 53.259546][ T3538] ? reiserfs_add_entry+0x9b8/0xd70
[ 53.264757][ T3538] ? reiserfs_mkdir+0x6bc/0x8f0
[ 53.269608][ T3538] ? reiserfs_xattr_init+0x348/0x730
[ 53.274884][ T3538] ? reiserfs_fill_super+0x2203/0x2620
[ 53.280340][ T3538] ? mount_bdev+0x2c9/0x3f0
[ 53.284861][ T3538] ? legacy_get_tree+0xeb/0x180
[ 53.289724][ T3538] ? vfs_get_tree+0x88/0x270
[ 53.294317][ T3538] ? do_new_mount+0x28b/0xae0
[ 53.298990][ T3538] ? __se_sys_mount+0x2d5/0x3c0
[ 53.303846][ T3538] ? do_syscall_64+0x3d/0xb0
[ 53.308445][ T3538] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.314521][ T3538] ? __wake_up+0x1c0/0x1c0
[ 53.318933][ T3538] ? get_parents+0x513/0xfa0
[ 53.323525][ T3538] ? set_parameters+0x8d0/0x8d0
[ 53.328375][ T3538] ? get_neighbors+0x631/0x1010
[ 53.333228][ T3538] ? reiserfs_prepare_for_journal+0x269/0x280
[ 53.339288][ T3538] ? fix_nodes+0x7abc/0x8c70
[ 53.343867][ T3538] ? __might_sleep+0xb0/0xb0
[ 53.348631][ T3538] do_balance+0x309/0x8f0
[ 53.352976][ T3538] ? get_right_neighbor_position+0x210/0x210
[ 53.359039][ T3538] ? reiserfs_paste_into_item+0x3ef/0x880
[ 53.364839][ T3538] reiserfs_paste_into_item+0x73b/0x880
[ 53.370377][ T3538] ? reiserfs_cut_from_item+0x2580/0x2580
[ 53.376112][ T3538] ? reiserfs_get_parent+0x2c0/0x2c0
[ 53.381384][ T3538] ? inode_get_bytes+0x72/0xa0
[ 53.386137][ T3538] ? _find_first_zero_bit+0x61/0x100
[ 53.391414][ T3538] reiserfs_add_entry+0x9b8/0xd70
[ 53.396432][ T3538] ? drop_new_inode+0x60/0x60
[ 53.401100][ T3538] ? do_journal_begin_r+0xdc9/0x1020
[ 53.406404][ T3538] ? journal_begin+0x1ef/0x350
[ 53.411157][ T3538] reiserfs_mkdir+0x6bc/0x8f0
[ 53.415823][ T3538] ? reiserfs_symlink+0x720/0x720
[ 53.420835][ T3538] ? rwsem_write_trylock+0x166/0x210
[ 53.426112][ T3538] ? __up_read+0x690/0x690
[ 53.430521][ T3538] reiserfs_xattr_init+0x348/0x730
[ 53.435625][ T3538] reiserfs_fill_super+0x2203/0x2620
[ 53.440906][ T3538] ? reiserfs_kill_sb+0x150/0x150
[ 53.445930][ T3538] ? snprintf+0xd6/0x120
[ 53.450169][ T3538] mount_bdev+0x2c9/0x3f0
[ 53.454494][ T3538] ? reiserfs_kill_sb+0x150/0x150
[ 53.459511][ T3538] legacy_get_tree+0xeb/0x180
[ 53.464187][ T3538] ? remove_save_link+0x540/0x540
[ 53.469223][ T3538] vfs_get_tree+0x88/0x270
[ 53.473634][ T3538] do_new_mount+0x28b/0xae0
[ 53.478128][ T3538] ? do_move_mount_old+0x160/0x160
[ 53.483231][ T3538] ? user_path_at_empty+0x12b/0x180
[ 53.488426][ T3538] __se_sys_mount+0x2d5/0x3c0
[ 53.493292][ T3538] ? __x64_sys_mount+0xc0/0xc0
[ 53.498061][ T3538] ? syscall_enter_from_user_mode+0x2e/0x220
[ 53.504049][ T3538] ? lockdep_hardirqs_on+0x94/0x130
[ 53.509250][ T3538] ? __x64_sys_mount+0x1c/0xc0
[ 53.514012][ T3538] do_syscall_64+0x3d/0xb0
[ 53.518431][ T3538] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.524753][ T3538] RIP: 0033:0x7f4e26e0bb1a
[ 53.529163][ T3538] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 53.548931][ T3538] RSP: 002b:00007ffe5c85bbc8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 53.557336][ T3538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4e26e0bb1a
[ 53.565299][ T3538] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffe5c85bbe0
[ 53.573264][ T3538] RBP: 00007ffe5c85bbe0 R08: 00007ffe5c85bc20 R09: 0000000000001108
[ 53.581237][ T3538] R10: 0000000002000480 R11: 0000000000000286 R12: 0000000000000004
[ 53.589719][ T3538] R13: 0000555555ee82c0 R14: 0000000002000480 R15: 00007ffe5c85bc20
[ 53.597775][ T3538]
[ 53.600868][ T3538] Kernel Offset: disabled
[ 53.605175][ T3538] Rebooting in 86400 seconds..