Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. executing program [ 44.522144][ T3485] loop0: detected capacity change from 0 to 8192 [ 44.532288][ T3485] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 44.541680][ T3485] REISERFS (device loop0): using ordered data mode [ 44.548163][ T3485] reiserfs: using flush barriers [ 44.554536][ T3485] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.571319][ T3485] REISERFS (device loop0): checking transaction log (loop0) [ 44.580581][ T3485] REISERFS (device loop0): Using r5 hash to sort names [ 44.591453][ T3485] reiserfs: enabling write barrier flush mode [ 44.603515][ T3485] ================================================================== [ 44.611672][ T3485] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 44.619246][ T3485] Read of size 18446744073709551584 at addr ffff88807260efa4 by task syz-executor819/3485 [ 44.629149][ T3485] [ 44.631456][ T3485] CPU: 1 PID: 3485 Comm: syz-executor819 Not tainted 5.15.127-syzkaller #0 [ 44.640015][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 44.650220][ T3485] Call Trace: [ 44.653482][ T3485] [ 44.656396][ T3485] dump_stack_lvl+0x1e3/0x2cb [ 44.661058][ T3485] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 44.666667][ T3485] ? _printk+0xd1/0x111 [ 44.670800][ T3485] ? __wake_up_klogd+0xcc/0x100 [ 44.675637][ T3485] ? panic+0x84d/0x84d [ 44.679683][ T3485] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 44.685119][ T3485] print_address_description+0x63/0x3b0 [ 44.690641][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.695902][ T3485] kasan_report+0x16b/0x1c0 [ 44.700398][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.705752][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.711014][ T3485] kasan_check_range+0x27e/0x290 [ 44.715929][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 44.721188][ T3485] memmove+0x25/0x60 [ 44.725059][ T3485] leaf_paste_entries+0x95f/0x13a0 [ 44.730153][ T3485] balance_leaf+0xbd1e/0x12510 [ 44.734899][ T3485] ? print_irqtrace_events+0x210/0x210 [ 44.740338][ T3485] ? do_raw_spin_unlock+0x137/0x8b0 [ 44.745512][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 44.750686][ T3485] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 44.756552][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 44.761378][ T3485] ? stack_trace_save+0x113/0x1c0 [ 44.766377][ T3485] ? do_balance+0x8f0/0x8f0 [ 44.770856][ T3485] ? __lock_acquire+0x1295/0x1ff0 [ 44.775872][ T3485] ? stack_depot_save+0x3db/0x440 [ 44.780884][ T3485] ? ____kasan_kmalloc+0xd1/0xf0 [ 44.785798][ T3485] ? ____kasan_kmalloc+0xba/0xf0 [ 44.790707][ T3485] ? __kmalloc+0x168/0x300 [ 44.795094][ T3485] ? fix_nodes+0x69aa/0x8c70 [ 44.799658][ T3485] ? reiserfs_paste_into_item+0x65d/0x880 [ 44.805357][ T3485] ? reiserfs_add_entry+0x9b8/0xd70 [ 44.810543][ T3485] ? reiserfs_mkdir+0x6bc/0x8f0 [ 44.815375][ T3485] ? reiserfs_xattr_init+0x348/0x730 [ 44.820645][ T3485] ? reiserfs_remount+0x12b8/0x18e0 [ 44.825824][ T3485] ? reconfigure_super+0x43a/0x870 [ 44.830949][ T3485] ? path_mount+0xceb/0x10a0 [ 44.835606][ T3485] ? __se_sys_mount+0x2d5/0x3c0 [ 44.840514][ T3485] ? do_syscall_64+0x3d/0xb0 [ 44.845077][ T3485] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.851226][ T3485] ? get_parents+0x513/0xfa0 [ 44.855800][ T3485] ? __wake_up_bit+0x190/0x190 [ 44.860542][ T3485] ? set_parameters+0x8d0/0x8d0 [ 44.865367][ T3485] ? get_neighbors+0x631/0x1010 [ 44.870284][ T3485] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 44.876323][ T3485] ? fix_nodes+0x7abc/0x8c70 [ 44.880892][ T3485] ? __might_sleep+0xc0/0xc0 [ 44.885470][ T3485] do_balance+0x309/0x8f0 [ 44.889782][ T3485] ? get_right_neighbor_position+0x210/0x210 [ 44.895753][ T3485] ? reiserfs_paste_into_item+0x3ef/0x880 [ 44.901540][ T3485] reiserfs_paste_into_item+0x73b/0x880 [ 44.907074][ T3485] ? reiserfs_cut_from_item+0x2560/0x2560 [ 44.912806][ T3485] ? reiserfs_get_parent+0x2c0/0x2c0 [ 44.918067][ T3485] ? inode_get_bytes+0x72/0xa0 [ 44.922900][ T3485] ? _find_first_zero_bit+0x60/0xf0 [ 44.928073][ T3485] reiserfs_add_entry+0x9b8/0xd70 [ 44.933080][ T3485] ? drop_new_inode+0x60/0x60 [ 44.937737][ T3485] ? do_journal_begin_r+0xdad/0x1000 [ 44.943016][ T3485] ? journal_begin+0x1ef/0x350 [ 44.947760][ T3485] reiserfs_mkdir+0x6bc/0x8f0 [ 44.952413][ T3485] ? __might_sleep+0xc0/0xc0 [ 44.957070][ T3485] ? reiserfs_symlink+0x720/0x720 [ 44.962073][ T3485] ? down_write+0x10e/0x170 [ 44.966555][ T3485] ? mutex_unlock+0x10/0x10 [ 44.971035][ T3485] reiserfs_xattr_init+0x348/0x730 [ 44.976127][ T3485] reiserfs_remount+0x12b8/0x18e0 [ 44.981737][ T3485] ? reiserfs_statfs+0x380/0x380 [ 44.986658][ T3485] ? shrink_dcache_sb+0x3be/0x410 [ 44.991662][ T3485] ? dentry_lru_isolate+0x2f0/0x2f0 [ 44.996832][ T3485] ? kmem_cache_alloc_trace+0x143/0x290 [ 45.002356][ T3485] reconfigure_super+0x43a/0x870 [ 45.007277][ T3485] path_mount+0xceb/0x10a0 [ 45.011674][ T3485] ? user_path_at_empty+0x12b/0x180 [ 45.016849][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 45.021590][ T3485] ? __x64_sys_mount+0xc0/0xc0 [ 45.026336][ T3485] ? syscall_enter_from_user_mode+0x2e/0x230 [ 45.032289][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 45.037487][ T3485] ? __x64_sys_mount+0x1c/0xc0 [ 45.042235][ T3485] do_syscall_64+0x3d/0xb0 [ 45.046647][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.052524][ T3485] RIP: 0033:0x7f4c5a56ae7a [ 45.056926][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.076512][ T3485] RSP: 002b:00007ffd239c0958 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 45.085001][ T3485] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f4c5a56ae7a [ 45.092951][ T3485] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 45.100993][ T3485] RBP: 00007ffd239c09f0 R08: 00007ffd239c09f0 R09: 0000000000000000 [ 45.108958][ T3485] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 45.116908][ T3485] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 45.124870][ T3485] [ 45.127867][ T3485] [ 45.130163][ T3485] The buggy address belongs to the page: [ 45.135764][ T3485] page:ffffea0001c98380 refcount:2 mapcount:0 mapping:ffff8881460a5af0 index:0x213 pfn:0x7260e [ 45.146061][ T3485] memcg:ffff888011e34000 [ 45.150280][ T3485] aops:def_blk_aops ino:700000 [ 45.155029][ T3485] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 45.164723][ T3485] raw: 00fff00000002032 ffffea0001c98348 ffffea00008c2888 ffff8881460a5af0 [ 45.173279][ T3485] raw: 0000000000000213 ffff8880731563a0 00000002ffffffff ffff888011e34000 [ 45.181833][ T3485] page dumped because: kasan: bad access detected [ 45.188218][ T3485] page_owner tracks the page as allocated [ 45.193913][ T3485] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3485, ts 44580304336, free_ts 36111486114 [ 45.211073][ T3485] get_page_from_freelist+0x322a/0x33c0 [ 45.216622][ T3485] __alloc_pages+0x272/0x700 [ 45.221185][ T3485] __page_cache_alloc+0xd4/0x4a0 [ 45.226095][ T3485] pagecache_get_page+0xa91/0x1010 [ 45.231179][ T3485] __getblk_gfp+0x22a/0xaf0 [ 45.235659][ T3485] search_by_key+0x46d/0x4730 [ 45.240308][ T3485] reiserfs_read_locked_inode+0x23c/0x2950 [ 45.246102][ T3485] reiserfs_fill_super+0x11bf/0x2690 [ 45.251364][ T3485] mount_bdev+0x2c9/0x3f0 [ 45.255676][ T3485] legacy_get_tree+0xeb/0x180 [ 45.260341][ T3485] vfs_get_tree+0x88/0x270 [ 45.264737][ T3485] do_new_mount+0x28b/0xae0 [ 45.269358][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 45.274024][ T3485] do_syscall_64+0x3d/0xb0 [ 45.278420][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.284299][ T3485] page last free stack trace: [ 45.288949][ T3485] free_unref_page_prepare+0xc34/0xcf0 [ 45.294386][ T3485] free_unref_page_list+0x1f7/0x8e0 [ 45.299561][ T3485] release_pages+0x1bb9/0x1f40 [ 45.304298][ T3485] tlb_finish_mmu+0x177/0x320 [ 45.308952][ T3485] unmap_region+0x304/0x350 [ 45.313430][ T3485] __do_munmap+0x12db/0x1740 [ 45.317994][ T3485] __vm_munmap+0x134/0x230 [ 45.322387][ T3485] __x64_sys_munmap+0x67/0x70 [ 45.327471][ T3485] do_syscall_64+0x3d/0xb0 [ 45.331865][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.337744][ T3485] [ 45.340128][ T3485] Memory state around the buggy address: [ 45.345729][ T3485] ffff88807260ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.353762][ T3485] ffff88807260ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.361807][ T3485] >ffff88807260ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.369836][ T3485] ^ [ 45.374918][ T3485] ffff88807260f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.382950][ T3485] ffff88807260f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.390994][ T3485] ================================================================== [ 45.399031][ T3485] Disabling lock debugging due to kernel taint [ 45.405360][ T3485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 45.412543][ T3485] CPU: 1 PID: 3485 Comm: syz-executor819 Tainted: G B 5.15.127-syzkaller #0 [ 45.422516][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 45.432554][ T3485] Call Trace: [ 45.435809][ T3485] [ 45.438715][ T3485] dump_stack_lvl+0x1e3/0x2cb [ 45.443377][ T3485] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 45.449078][ T3485] ? panic+0x84d/0x84d [ 45.453133][ T3485] ? rcu_is_watching+0x11/0xa0 [ 45.457870][ T3485] ? preempt_schedule_common+0xa6/0xd0 [ 45.463305][ T3485] panic+0x318/0x84d [ 45.467174][ T3485] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 45.473307][ T3485] ? check_panic_on_warn+0x1d/0xa0 [ 45.478409][ T3485] ? fb_is_primary_device+0xcc/0xcc [ 45.483667][ T3485] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 45.489627][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 45.494455][ T3485] check_panic_on_warn+0x7e/0xa0 [ 45.499366][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 45.504627][ T3485] end_report+0x6d/0xf0 [ 45.508760][ T3485] kasan_report+0x18e/0x1c0 [ 45.513243][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 45.518502][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 45.523779][ T3485] kasan_check_range+0x27e/0x290 [ 45.528704][ T3485] ? leaf_paste_entries+0x95f/0x13a0 [ 45.533963][ T3485] memmove+0x25/0x60 [ 45.537833][ T3485] leaf_paste_entries+0x95f/0x13a0 [ 45.542919][ T3485] balance_leaf+0xbd1e/0x12510 [ 45.547745][ T3485] ? print_irqtrace_events+0x210/0x210 [ 45.553179][ T3485] ? do_raw_spin_unlock+0x137/0x8b0 [ 45.558351][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 45.563521][ T3485] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 45.569387][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 45.574209][ T3485] ? stack_trace_save+0x113/0x1c0 [ 45.579207][ T3485] ? do_balance+0x8f0/0x8f0 [ 45.583682][ T3485] ? __lock_acquire+0x1295/0x1ff0 [ 45.588708][ T3485] ? stack_depot_save+0x3db/0x440 [ 45.593709][ T3485] ? ____kasan_kmalloc+0xd1/0xf0 [ 45.598794][ T3485] ? ____kasan_kmalloc+0xba/0xf0 [ 45.603717][ T3485] ? __kmalloc+0x168/0x300 [ 45.608124][ T3485] ? fix_nodes+0x69aa/0x8c70 [ 45.612688][ T3485] ? reiserfs_paste_into_item+0x65d/0x880 [ 45.618382][ T3485] ? reiserfs_add_entry+0x9b8/0xd70 [ 45.623554][ T3485] ? reiserfs_mkdir+0x6bc/0x8f0 [ 45.628378][ T3485] ? reiserfs_xattr_init+0x348/0x730 [ 45.633642][ T3485] ? reiserfs_remount+0x12b8/0x18e0 [ 45.638813][ T3485] ? reconfigure_super+0x43a/0x870 [ 45.643899][ T3485] ? path_mount+0xceb/0x10a0 [ 45.648463][ T3485] ? __se_sys_mount+0x2d5/0x3c0 [ 45.653290][ T3485] ? do_syscall_64+0x3d/0xb0 [ 45.657856][ T3485] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.663900][ T3485] ? get_parents+0x513/0xfa0 [ 45.668465][ T3485] ? __wake_up_bit+0x190/0x190 [ 45.673239][ T3485] ? set_parameters+0x8d0/0x8d0 [ 45.678076][ T3485] ? get_neighbors+0x631/0x1010 [ 45.682902][ T3485] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 45.688943][ T3485] ? fix_nodes+0x7abc/0x8c70 [ 45.693505][ T3485] ? __might_sleep+0xc0/0xc0 [ 45.698081][ T3485] do_balance+0x309/0x8f0 [ 45.702384][ T3485] ? get_right_neighbor_position+0x210/0x210 [ 45.708435][ T3485] ? reiserfs_paste_into_item+0x3ef/0x880 [ 45.714130][ T3485] reiserfs_paste_into_item+0x73b/0x880 [ 45.719652][ T3485] ? reiserfs_cut_from_item+0x2560/0x2560 [ 45.725360][ T3485] ? reiserfs_get_parent+0x2c0/0x2c0 [ 45.730707][ T3485] ? inode_get_bytes+0x72/0xa0 [ 45.735443][ T3485] ? _find_first_zero_bit+0x60/0xf0 [ 45.740613][ T3485] reiserfs_add_entry+0x9b8/0xd70 [ 45.745622][ T3485] ? drop_new_inode+0x60/0x60 [ 45.750272][ T3485] ? do_journal_begin_r+0xdad/0x1000 [ 45.755535][ T3485] ? journal_begin+0x1ef/0x350 [ 45.760284][ T3485] reiserfs_mkdir+0x6bc/0x8f0 [ 45.764933][ T3485] ? __might_sleep+0xc0/0xc0 [ 45.769499][ T3485] ? reiserfs_symlink+0x720/0x720 [ 45.774496][ T3485] ? down_write+0x10e/0x170 [ 45.778976][ T3485] ? mutex_unlock+0x10/0x10 [ 45.783454][ T3485] reiserfs_xattr_init+0x348/0x730 [ 45.788543][ T3485] reiserfs_remount+0x12b8/0x18e0 [ 45.793543][ T3485] ? reiserfs_statfs+0x380/0x380 [ 45.798454][ T3485] ? shrink_dcache_sb+0x3be/0x410 [ 45.803460][ T3485] ? dentry_lru_isolate+0x2f0/0x2f0 [ 45.808632][ T3485] ? kmem_cache_alloc_trace+0x143/0x290 [ 45.814239][ T3485] reconfigure_super+0x43a/0x870 [ 45.819153][ T3485] path_mount+0xceb/0x10a0 [ 45.823553][ T3485] ? user_path_at_empty+0x12b/0x180 [ 45.828728][ T3485] __se_sys_mount+0x2d5/0x3c0 [ 45.833382][ T3485] ? __x64_sys_mount+0xc0/0xc0 [ 45.838119][ T3485] ? syscall_enter_from_user_mode+0x2e/0x230 [ 45.844070][ T3485] ? lockdep_hardirqs_on+0x94/0x130 [ 45.849241][ T3485] ? __x64_sys_mount+0x1c/0xc0 [ 45.853978][ T3485] do_syscall_64+0x3d/0xb0 [ 45.858369][ T3485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.864251][ T3485] RIP: 0033:0x7f4c5a56ae7a [ 45.868745][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.888323][ T3485] RSP: 002b:00007ffd239c0958 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 45.896833][ T3485] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f4c5a56ae7a [ 45.904782][ T3485] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 45.912742][ T3485] RBP: 00007ffd239c09f0 R08: 00007ffd239c09f0 R09: 0000000000000000 [ 45.920698][ T3485] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 45.928648][ T3485] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 45.936602][ T3485] [ 45.939763][ T3485] Kernel Offset: disabled [ 45.944071][ T3485] Rebooting in 86400 seconds..