Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. executing program [ 50.759540][ T3543] loop0: detected capacity change from 0 to 8192 [ 50.769170][ T3543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.782301][ T3543] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 50.791963][ T3543] REISERFS (device loop0): using ordered data mode [ 50.798450][ T3543] reiserfs: using flush barriers [ 50.804398][ T3543] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.820998][ T3543] REISERFS (device loop0): checking transaction log (loop0) [ 50.860841][ T3543] REISERFS (device loop0): Using r5 hash to sort names [ 50.868247][ T3543] ================================================================== [ 50.876294][ T3543] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 50.883832][ T3543] Read of size 18446744073709551585 at addr ffff888070bcbfa4 by task syz-executor371/3543 [ 50.893697][ T3543] [ 50.896004][ T3543] CPU: 1 PID: 3543 Comm: syz-executor371 Not tainted 6.1.54-syzkaller #0 [ 50.904391][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 50.914424][ T3543] Call Trace: [ 50.917680][ T3543] [ 50.920592][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 50.925253][ T3543] ? irq_work_queue+0xcd/0x150 [ 50.930002][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.935437][ T3543] ? panic+0x75d/0x75d [ 50.939484][ T3543] ? _printk+0xd1/0x111 [ 50.943617][ T3543] ? _raw_spin_lock_irqsave+0xac/0x120 [ 50.949056][ T3543] print_report+0x15f/0x4f0 [ 50.953536][ T3543] ? __lock_acquire+0x125b/0x1f80 [ 50.958553][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 50.963649][ T3543] ? __phys_addr+0xb6/0x170 [ 50.968138][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.973403][ T3543] kasan_report+0x136/0x160 [ 50.977884][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.983146][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.988406][ T3543] kasan_check_range+0x27f/0x290 [ 50.993321][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 50.998582][ T3543] memmove+0x25/0x60 [ 51.002458][ T3543] leaf_paste_entries+0x95f/0x13a0 [ 51.007552][ T3543] balance_leaf+0xbd1e/0x12510 [ 51.012400][ T3543] ? print_irqtrace_events+0x210/0x210 [ 51.020797][ T3543] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.026673][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 51.031524][ T3543] ? stack_trace_save+0x113/0x1c0 [ 51.036525][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 51.041612][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 51.046698][ T3543] ? do_balance+0x8f0/0x8f0 [ 51.051179][ T3543] ? __stack_depot_save+0x3f5/0x470 [ 51.056362][ T3543] ? kasan_set_track+0x60/0x70 [ 51.061099][ T3543] ? kasan_set_track+0x4b/0x70 [ 51.065835][ T3543] ? __kasan_kmalloc+0x97/0xb0 [ 51.070576][ T3543] ? __kmalloc+0xb2/0x230 [ 51.074880][ T3543] ? fix_nodes+0x69aa/0x8c70 [ 51.079449][ T3543] ? reiserfs_paste_into_item+0x65d/0x880 [ 51.085142][ T3543] ? reiserfs_add_entry+0x9b8/0xd70 [ 51.090320][ T3543] ? reiserfs_mkdir+0x6bc/0x8f0 [ 51.095148][ T3543] ? reiserfs_xattr_init+0x348/0x730 [ 51.100420][ T3543] ? reiserfs_fill_super+0x2203/0x2620 [ 51.105855][ T3543] ? mount_bdev+0x2c9/0x3f0 [ 51.110341][ T3543] ? legacy_get_tree+0xeb/0x180 [ 51.115178][ T3543] ? vfs_get_tree+0x88/0x270 [ 51.119755][ T3543] ? do_new_mount+0x28b/0xae0 [ 51.124410][ T3543] ? __se_sys_mount+0x2d5/0x3c0 [ 51.129240][ T3543] ? do_syscall_64+0x3d/0xb0 [ 51.133809][ T3543] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.139861][ T3543] ? __wake_up+0x1c0/0x1c0 [ 51.144252][ T3543] ? get_parents+0x513/0xfa0 [ 51.148822][ T3543] ? set_parameters+0x8d0/0x8d0 [ 51.153654][ T3543] ? get_neighbors+0x631/0x1010 [ 51.158498][ T3543] ? reiserfs_prepare_for_journal+0x269/0x280 [ 51.164541][ T3543] ? fix_nodes+0x7abc/0x8c70 [ 51.169107][ T3543] ? __might_sleep+0xb0/0xb0 [ 51.173683][ T3543] do_balance+0x309/0x8f0 [ 51.177996][ T3543] ? get_right_neighbor_position+0x210/0x210 [ 51.183959][ T3543] ? reiserfs_paste_into_item+0x3ef/0x880 [ 51.189655][ T3543] reiserfs_paste_into_item+0x73b/0x880 [ 51.195180][ T3543] ? reiserfs_cut_from_item+0x2580/0x2580 [ 51.200896][ T3543] ? reiserfs_get_parent+0x2c0/0x2c0 [ 51.206160][ T3543] ? inode_get_bytes+0x72/0xa0 [ 51.210904][ T3543] ? _find_first_zero_bit+0x61/0x100 [ 51.216167][ T3543] reiserfs_add_entry+0x9b8/0xd70 [ 51.221174][ T3543] ? drop_new_inode+0x60/0x60 [ 51.225834][ T3543] ? do_journal_begin_r+0xdc9/0x1020 [ 51.231115][ T3543] ? journal_begin+0x1ef/0x350 [ 51.235861][ T3543] reiserfs_mkdir+0x6bc/0x8f0 [ 51.240521][ T3543] ? reiserfs_symlink+0x720/0x720 [ 51.245523][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 51.250792][ T3543] ? __up_read+0x690/0x690 [ 51.255186][ T3543] reiserfs_xattr_init+0x348/0x730 [ 51.260279][ T3543] reiserfs_fill_super+0x2203/0x2620 [ 51.265547][ T3543] ? reiserfs_kill_sb+0x150/0x150 [ 51.270551][ T3543] ? snprintf+0xd6/0x120 [ 51.274777][ T3543] mount_bdev+0x2c9/0x3f0 [ 51.279083][ T3543] ? reiserfs_kill_sb+0x150/0x150 [ 51.284090][ T3543] legacy_get_tree+0xeb/0x180 [ 51.288744][ T3543] ? remove_save_link+0x540/0x540 [ 51.293748][ T3543] vfs_get_tree+0x88/0x270 [ 51.298161][ T3543] do_new_mount+0x28b/0xae0 [ 51.302650][ T3543] ? do_move_mount_old+0x160/0x160 [ 51.307741][ T3543] ? user_path_at_empty+0x12b/0x180 [ 51.312916][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 51.317573][ T3543] ? __x64_sys_mount+0xc0/0xc0 [ 51.322316][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.328278][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 51.333458][ T3543] ? __x64_sys_mount+0x1c/0xc0 [ 51.338200][ T3543] do_syscall_64+0x3d/0xb0 [ 51.342593][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.348463][ T3543] RIP: 0033:0x7f7115a7a8fa [ 51.352856][ T3543] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.372530][ T3543] RSP: 002b:00007ffdcc444a88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 51.380921][ T3543] RAX: ffffffffffffffda RBX: 00007ffdcc444aa0 RCX: 00007f7115a7a8fa [ 51.388872][ T3543] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffdcc444aa0 [ 51.396822][ T3543] RBP: 0000000000000004 R08: 00007ffdcc444ae0 R09: 0000000000001109 [ 51.404772][ T3543] R10: 0000000000008080 R11: 0000000000000286 R12: 0000000000008080 [ 51.412738][ T3543] R13: 00007ffdcc444ae0 R14: 0000000000000003 R15: 0000000000400000 [ 51.420691][ T3543] [ 51.423688][ T3543] [ 51.425989][ T3543] The buggy address belongs to the physical page: [ 51.432378][ T3543] page:ffffea0001c2f2c0 refcount:3 mapcount:0 mapping:ffff888148dc49f8 index:0x213 pfn:0x70bcb [ 51.442677][ T3543] memcg:ffff88813fe28000 [ 51.446891][ T3543] aops:def_blk_aops ino:700000 [ 51.451650][ T3543] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 51.461345][ T3543] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888148dc49f8 [ 51.469908][ T3543] raw: 0000000000000213 ffff8880747a4658 00000003ffffffff ffff88813fe28000 [ 51.478475][ T3543] page dumped because: kasan: bad access detected [ 51.484860][ T3543] page_owner tracks the page as allocated [ 51.490549][ T3543] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3543, tgid 3543 (syz-executor371), ts 50860611984, free_ts 11189737842 [ 51.511096][ T3543] post_alloc_hook+0x18d/0x1b0 [ 51.515836][ T3543] get_page_from_freelist+0x32ed/0x3480 [ 51.521362][ T3543] __alloc_pages+0x28d/0x770 [ 51.525930][ T3543] folio_alloc+0x1a/0x50 [ 51.530148][ T3543] filemap_alloc_folio+0xda/0x4f0 [ 51.535151][ T3543] __filemap_get_folio+0x711/0xe30 [ 51.540244][ T3543] pagecache_get_page+0x28/0x250 [ 51.545159][ T3543] __getblk_gfp+0x211/0xa20 [ 51.549655][ T3543] search_by_key+0x460/0x4b60 [ 51.554305][ T3543] reiserfs_read_locked_inode+0x23c/0x2950 [ 51.560095][ T3543] reiserfs_fill_super+0x135f/0x2620 [ 51.565360][ T3543] mount_bdev+0x2c9/0x3f0 [ 51.569667][ T3543] legacy_get_tree+0xeb/0x180 [ 51.574318][ T3543] vfs_get_tree+0x88/0x270 [ 51.578711][ T3543] do_new_mount+0x28b/0xae0 [ 51.583195][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 51.587849][ T3543] page last free stack trace: [ 51.592493][ T3543] free_unref_page_prepare+0xf63/0x1120 [ 51.598010][ T3543] free_unref_page+0x98/0x570 [ 51.602661][ T3543] free_contig_range+0x9a/0x150 [ 51.607487][ T3543] destroy_args+0xfe/0x997 [ 51.611875][ T3543] debug_vm_pgtable+0x416/0x46b [ 51.616718][ T3543] do_one_initcall+0x265/0x8f0 [ 51.621459][ T3543] do_initcall_level+0x157/0x207 [ 51.626372][ T3543] do_initcalls+0x49/0x86 [ 51.630677][ T3543] kernel_init_freeable+0x473/0x61f [ 51.635853][ T3543] kernel_init+0x19/0x290 [ 51.640164][ T3543] ret_from_fork+0x1f/0x30 [ 51.644556][ T3543] [ 51.646854][ T3543] Memory state around the buggy address: [ 51.652458][ T3543] ffff888070bcbe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.660490][ T3543] ffff888070bcbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.668524][ T3543] >ffff888070bcbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.676555][ T3543] ^ [ 51.681633][ T3543] ffff888070bcc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.689682][ T3543] ffff888070bcc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.697731][ T3543] ================================================================== [ 51.706083][ T3543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.713278][ T3543] CPU: 1 PID: 3543 Comm: syz-executor371 Not tainted 6.1.54-syzkaller #0 [ 51.721673][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 51.731711][ T3543] Call Trace: [ 51.734976][ T3543] [ 51.737909][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 51.742590][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.748039][ T3543] ? panic+0x75d/0x75d [ 51.752098][ T3543] ? preempt_schedule_common+0xa6/0xd0 [ 51.757543][ T3543] ? vscnprintf+0x59/0x80 [ 51.761864][ T3543] panic+0x318/0x75d [ 51.765746][ T3543] ? check_panic_on_warn+0x1d/0xa0 [ 51.770847][ T3543] ? memcpy_page_flushcache+0xfc/0xfc [ 51.776208][ T3543] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 51.782179][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 51.787018][ T3543] ? print_report+0x4a3/0x4f0 [ 51.791684][ T3543] check_panic_on_warn+0x7e/0xa0 [ 51.796608][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.801877][ T3543] end_report+0x66/0x110 [ 51.806106][ T3543] kasan_report+0x143/0x160 [ 51.810597][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.815865][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.821136][ T3543] kasan_check_range+0x27f/0x290 [ 51.826059][ T3543] ? leaf_paste_entries+0x95f/0x13a0 [ 51.831330][ T3543] memmove+0x25/0x60 [ 51.835213][ T3543] leaf_paste_entries+0x95f/0x13a0 [ 51.840313][ T3543] balance_leaf+0xbd1e/0x12510 [ 51.845071][ T3543] ? print_irqtrace_events+0x210/0x210 [ 51.850520][ T3543] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.856406][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 51.861248][ T3543] ? stack_trace_save+0x113/0x1c0 [ 51.866261][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 51.871357][ T3543] ? stack_trace_snprint+0xe0/0xe0 [ 51.876454][ T3543] ? do_balance+0x8f0/0x8f0 [ 51.880944][ T3543] ? __stack_depot_save+0x3f5/0x470 [ 51.886134][ T3543] ? kasan_set_track+0x60/0x70 [ 51.890880][ T3543] ? kasan_set_track+0x4b/0x70 [ 51.895628][ T3543] ? __kasan_kmalloc+0x97/0xb0 [ 51.900373][ T3543] ? __kmalloc+0xb2/0x230 [ 51.904686][ T3543] ? fix_nodes+0x69aa/0x8c70 [ 51.909266][ T3543] ? reiserfs_paste_into_item+0x65d/0x880 [ 51.914971][ T3543] ? reiserfs_add_entry+0x9b8/0xd70 [ 51.920159][ T3543] ? reiserfs_mkdir+0x6bc/0x8f0 [ 51.924996][ T3543] ? reiserfs_xattr_init+0x348/0x730 [ 51.930270][ T3543] ? reiserfs_fill_super+0x2203/0x2620 [ 51.935718][ T3543] ? mount_bdev+0x2c9/0x3f0 [ 51.940213][ T3543] ? legacy_get_tree+0xeb/0x180 [ 51.945046][ T3543] ? vfs_get_tree+0x88/0x270 [ 51.949621][ T3543] ? do_new_mount+0x28b/0xae0 [ 51.954294][ T3543] ? __se_sys_mount+0x2d5/0x3c0 [ 51.959132][ T3543] ? do_syscall_64+0x3d/0xb0 [ 51.963709][ T3543] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.969768][ T3543] ? __wake_up+0x1c0/0x1c0 [ 51.974169][ T3543] ? get_parents+0x513/0xfa0 [ 51.978749][ T3543] ? set_parameters+0x8d0/0x8d0 [ 51.983587][ T3543] ? get_neighbors+0x631/0x1010 [ 51.988425][ T3543] ? reiserfs_prepare_for_journal+0x269/0x280 [ 51.994478][ T3543] ? fix_nodes+0x7abc/0x8c70 [ 51.999056][ T3543] ? __might_sleep+0xb0/0xb0 [ 52.003642][ T3543] do_balance+0x309/0x8f0 [ 52.007959][ T3543] ? get_right_neighbor_position+0x210/0x210 [ 52.013952][ T3543] ? reiserfs_paste_into_item+0x3ef/0x880 [ 52.019663][ T3543] reiserfs_paste_into_item+0x73b/0x880 [ 52.025203][ T3543] ? reiserfs_cut_from_item+0x2580/0x2580 [ 52.030935][ T3543] ? reiserfs_get_parent+0x2c0/0x2c0 [ 52.036207][ T3543] ? inode_get_bytes+0x72/0xa0 [ 52.040955][ T3543] ? _find_first_zero_bit+0x61/0x100 [ 52.046230][ T3543] reiserfs_add_entry+0x9b8/0xd70 [ 52.051251][ T3543] ? drop_new_inode+0x60/0x60 [ 52.055915][ T3543] ? do_journal_begin_r+0xdc9/0x1020 [ 52.061201][ T3543] ? journal_begin+0x1ef/0x350 [ 52.065952][ T3543] reiserfs_mkdir+0x6bc/0x8f0 [ 52.070618][ T3543] ? reiserfs_symlink+0x720/0x720 [ 52.075633][ T3543] ? rwsem_write_trylock+0x166/0x210 [ 52.080911][ T3543] ? __up_read+0x690/0x690 [ 52.085320][ T3543] reiserfs_xattr_init+0x348/0x730 [ 52.090423][ T3543] reiserfs_fill_super+0x2203/0x2620 [ 52.095704][ T3543] ? reiserfs_kill_sb+0x150/0x150 [ 52.100725][ T3543] ? snprintf+0xd6/0x120 [ 52.104964][ T3543] mount_bdev+0x2c9/0x3f0 [ 52.109283][ T3543] ? reiserfs_kill_sb+0x150/0x150 [ 52.114299][ T3543] legacy_get_tree+0xeb/0x180 [ 52.118961][ T3543] ? remove_save_link+0x540/0x540 [ 52.123974][ T3543] vfs_get_tree+0x88/0x270 [ 52.128384][ T3543] do_new_mount+0x28b/0xae0 [ 52.132882][ T3543] ? do_move_mount_old+0x160/0x160 [ 52.137985][ T3543] ? user_path_at_empty+0x12b/0x180 [ 52.143175][ T3543] __se_sys_mount+0x2d5/0x3c0 [ 52.147841][ T3543] ? __x64_sys_mount+0xc0/0xc0 [ 52.152597][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.158563][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 52.163749][ T3543] ? __x64_sys_mount+0x1c/0xc0 [ 52.168501][ T3543] do_syscall_64+0x3d/0xb0 [ 52.172902][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.178780][ T3543] RIP: 0033:0x7f7115a7a8fa [ 52.183179][ T3543] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.202767][ T3543] RSP: 002b:00007ffdcc444a88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 52.211169][ T3543] RAX: ffffffffffffffda RBX: 00007ffdcc444aa0 RCX: 00007f7115a7a8fa [ 52.219128][ T3543] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffdcc444aa0 [ 52.227088][ T3543] RBP: 0000000000000004 R08: 00007ffdcc444ae0 R09: 0000000000001109 [ 52.235046][ T3543] R10: 0000000000008080 R11: 0000000000000286 R12: 0000000000008080 [ 52.243000][ T3543] R13: 00007ffdcc444ae0 R14: 0000000000000003 R15: 0000000000400000 [ 52.250961][ T3543] [ 52.254144][ T3543] Kernel Offset: disabled [ 52.258454][ T3543] Rebooting in 86400 seconds..