Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. executing program [ 42.468737][ T3488] loop0: detected capacity change from 0 to 8192 [ 42.478445][ T3488] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 42.488214][ T3488] REISERFS (device loop0): using ordered data mode [ 42.494943][ T3488] reiserfs: using flush barriers [ 42.500936][ T3488] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.517644][ T3488] REISERFS (device loop0): checking transaction log (loop0) [ 42.527007][ T3488] REISERFS (device loop0): Using r5 hash to sort names [ 42.541751][ T3488] reiserfs: enabling write barrier flush mode [ 42.555267][ T3488] ================================================================== [ 42.563466][ T3488] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 42.571033][ T3488] Read of size 18446744073709551587 at addr ffff888071604fa4 by task syz-executor390/3488 [ 42.580903][ T3488] [ 42.583212][ T3488] CPU: 0 PID: 3488 Comm: syz-executor390 Not tainted 5.15.126-syzkaller #0 [ 42.591777][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 42.601830][ T3488] Call Trace: [ 42.605104][ T3488] [ 42.608017][ T3488] dump_stack_lvl+0x1e3/0x2cb [ 42.612681][ T3488] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.618301][ T3488] ? _printk+0xd1/0x111 [ 42.622440][ T3488] ? __wake_up_klogd+0xcc/0x100 [ 42.627277][ T3488] ? panic+0x84d/0x84d [ 42.631324][ T3488] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 42.636771][ T3488] print_address_description+0x63/0x3b0 [ 42.642304][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 42.647591][ T3488] kasan_report+0x16b/0x1c0 [ 42.652083][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 42.657358][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 42.662624][ T3488] kasan_check_range+0x27e/0x290 [ 42.667549][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 42.672821][ T3488] memmove+0x25/0x60 [ 42.676708][ T3488] leaf_paste_entries+0x95f/0x13a0 [ 42.681820][ T3488] balance_leaf+0xbd1e/0x12510 [ 42.686581][ T3488] ? print_irqtrace_events+0x210/0x210 [ 42.692032][ T3488] ? do_raw_spin_unlock+0x137/0x8b0 [ 42.697233][ T3488] ? lockdep_hardirqs_on+0x94/0x130 [ 42.702427][ T3488] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 42.708337][ T3488] ? _raw_spin_unlock+0x40/0x40 [ 42.713175][ T3488] ? stack_trace_save+0x113/0x1c0 [ 42.718185][ T3488] ? do_balance+0x8f0/0x8f0 [ 42.722673][ T3488] ? stack_depot_save+0x3db/0x440 [ 42.727683][ T3488] ? ____kasan_kmalloc+0xd1/0xf0 [ 42.732599][ T3488] ? ____kasan_kmalloc+0xba/0xf0 [ 42.737517][ T3488] ? __kmalloc+0x168/0x300 [ 42.741910][ T3488] ? fix_nodes+0x69aa/0x8c70 [ 42.746481][ T3488] ? reiserfs_paste_into_item+0x65d/0x880 [ 42.752216][ T3488] ? reiserfs_add_entry+0x9b8/0xd70 [ 42.757413][ T3488] ? reiserfs_mkdir+0x6bc/0x8f0 [ 42.762243][ T3488] ? reiserfs_xattr_init+0x348/0x730 [ 42.767525][ T3488] ? reiserfs_remount+0x12b8/0x18e0 [ 42.772719][ T3488] ? reconfigure_super+0x43a/0x870 [ 42.777936][ T3488] ? path_mount+0xceb/0x10a0 [ 42.782514][ T3488] ? __se_sys_mount+0x2d5/0x3c0 [ 42.787356][ T3488] ? do_syscall_64+0x3d/0xb0 [ 42.791932][ T3488] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.797993][ T3488] ? get_parents+0x513/0xfa0 [ 42.802564][ T3488] ? __wake_up_bit+0x190/0x190 [ 42.807310][ T3488] ? set_parameters+0x8d0/0x8d0 [ 42.812138][ T3488] ? get_neighbors+0x631/0x1010 [ 42.816972][ T3488] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 42.823022][ T3488] ? fix_nodes+0x7abc/0x8c70 [ 42.827598][ T3488] ? __might_sleep+0xc0/0xc0 [ 42.832189][ T3488] do_balance+0x309/0x8f0 [ 42.836508][ T3488] ? get_right_neighbor_position+0x210/0x210 [ 42.842479][ T3488] ? reiserfs_paste_into_item+0x3ef/0x880 [ 42.848228][ T3488] reiserfs_paste_into_item+0x73b/0x880 [ 42.853767][ T3488] ? reiserfs_cut_from_item+0x2560/0x2560 [ 42.859511][ T3488] ? reiserfs_get_parent+0x2c0/0x2c0 [ 42.864813][ T3488] ? inode_get_bytes+0x72/0xa0 [ 42.869573][ T3488] ? _find_first_zero_bit+0x60/0xf0 [ 42.874762][ T3488] reiserfs_add_entry+0x9b8/0xd70 [ 42.879792][ T3488] ? drop_new_inode+0x60/0x60 [ 42.884463][ T3488] ? do_journal_begin_r+0xdad/0x1000 [ 42.889753][ T3488] ? journal_begin+0x1ef/0x350 [ 42.894499][ T3488] reiserfs_mkdir+0x6bc/0x8f0 [ 42.899339][ T3488] ? __might_sleep+0xc0/0xc0 [ 42.903913][ T3488] ? reiserfs_symlink+0x720/0x720 [ 42.908922][ T3488] ? down_write+0x10e/0x170 [ 42.913413][ T3488] ? mutex_unlock+0x10/0x10 [ 42.917899][ T3488] reiserfs_xattr_init+0x348/0x730 [ 42.922996][ T3488] reiserfs_remount+0x12b8/0x18e0 [ 42.928008][ T3488] ? reiserfs_statfs+0x380/0x380 [ 42.933450][ T3488] ? shrink_dcache_sb+0x3be/0x410 [ 42.938466][ T3488] ? dentry_lru_isolate+0x2f0/0x2f0 [ 42.943651][ T3488] ? kmem_cache_alloc_trace+0x143/0x290 [ 42.949185][ T3488] reconfigure_super+0x43a/0x870 [ 42.954111][ T3488] path_mount+0xceb/0x10a0 [ 42.958512][ T3488] ? user_path_at_empty+0x12b/0x180 [ 42.963701][ T3488] __se_sys_mount+0x2d5/0x3c0 [ 42.968378][ T3488] ? __x64_sys_mount+0xc0/0xc0 [ 42.973134][ T3488] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.979095][ T3488] ? lockdep_hardirqs_on+0x94/0x130 [ 42.984272][ T3488] ? __x64_sys_mount+0x1c/0xc0 [ 42.989034][ T3488] do_syscall_64+0x3d/0xb0 [ 42.993445][ T3488] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.999328][ T3488] RIP: 0033:0x7f7c173a4eba [ 43.003735][ T3488] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.023324][ T3488] RSP: 002b:00007ffc64ef9908 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 43.031725][ T3488] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f7c173a4eba [ 43.039691][ T3488] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 43.047649][ T3488] RBP: 00007ffc64ef99a0 R08: 00007ffc64ef99a0 R09: 0000000000000000 [ 43.055611][ T3488] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 43.063565][ T3488] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 43.071525][ T3488] [ 43.074525][ T3488] [ 43.076871][ T3488] The buggy address belongs to the page: [ 43.082756][ T3488] page:ffffea0001c58100 refcount:2 mapcount:0 mapping:ffff88814088a030 index:0x213 pfn:0x71604 [ 43.093074][ T3488] memcg:ffff888011e34000 [ 43.097301][ T3488] aops:def_blk_aops ino:700000 [ 43.102058][ T3488] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 43.111755][ T3488] raw: 00fff00000002032 ffffea0001c580c8 ffffea000029d508 ffff88814088a030 [ 43.120332][ T3488] raw: 0000000000000213 ffff8880752ea000 00000002ffffffff ffff888011e34000 [ 43.128886][ T3488] page dumped because: kasan: bad access detected [ 43.135272][ T3488] page_owner tracks the page as allocated [ 43.140958][ T3488] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3488, ts 42526723056, free_ts 10657480198 [ 43.158039][ T3488] get_page_from_freelist+0x322a/0x33c0 [ 43.163573][ T3488] __alloc_pages+0x272/0x700 [ 43.168141][ T3488] __page_cache_alloc+0xd4/0x4a0 [ 43.173061][ T3488] pagecache_get_page+0xa91/0x1010 [ 43.178162][ T3488] __getblk_gfp+0x22a/0xaf0 [ 43.182654][ T3488] search_by_key+0x46d/0x4730 [ 43.187315][ T3488] reiserfs_read_locked_inode+0x23c/0x2950 [ 43.193112][ T3488] reiserfs_fill_super+0x11bf/0x2690 [ 43.198435][ T3488] mount_bdev+0x2c9/0x3f0 [ 43.202752][ T3488] legacy_get_tree+0xeb/0x180 [ 43.207406][ T3488] vfs_get_tree+0x88/0x270 [ 43.211799][ T3488] do_new_mount+0x28b/0xae0 [ 43.216298][ T3488] __se_sys_mount+0x2d5/0x3c0 [ 43.220985][ T3488] do_syscall_64+0x3d/0xb0 [ 43.225396][ T3488] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.231363][ T3488] page last free stack trace: [ 43.236013][ T3488] free_unref_page_prepare+0xc34/0xcf0 [ 43.241538][ T3488] free_unref_page+0x95/0x2d0 [ 43.246202][ T3488] free_contig_range+0x95/0xf0 [ 43.250943][ T3488] destroy_args+0xfe/0x97f [ 43.255338][ T3488] debug_vm_pgtable+0x40d/0x462 [ 43.260175][ T3488] do_one_initcall+0x22b/0x7a0 [ 43.264925][ T3488] do_initcall_level+0x157/0x207 [ 43.269853][ T3488] do_initcalls+0x49/0x86 [ 43.274181][ T3488] kernel_init_freeable+0x43c/0x5c5 [ 43.279365][ T3488] kernel_init+0x19/0x290 [ 43.283684][ T3488] ret_from_fork+0x1f/0x30 [ 43.288097][ T3488] [ 43.290405][ T3488] Memory state around the buggy address: [ 43.296043][ T3488] ffff888071604e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.304109][ T3488] ffff888071604f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.312173][ T3488] >ffff888071604f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.320210][ T3488] ^ [ 43.325307][ T3488] ffff888071605000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.333530][ T3488] ffff888071605080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.341564][ T3488] ================================================================== [ 43.349615][ T3488] Disabling lock debugging due to kernel taint [ 43.356341][ T3488] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 43.363550][ T3488] CPU: 1 PID: 3488 Comm: syz-executor390 Tainted: G B 5.15.126-syzkaller #0 [ 43.373520][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 43.383578][ T3488] Call Trace: [ 43.386859][ T3488] [ 43.389775][ T3488] dump_stack_lvl+0x1e3/0x2cb [ 43.394468][ T3488] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.400098][ T3488] ? panic+0x84d/0x84d [ 43.404243][ T3488] ? rcu_is_watching+0x11/0xa0 [ 43.408993][ T3488] ? preempt_schedule_common+0xa6/0xd0 [ 43.414434][ T3488] panic+0x318/0x84d [ 43.418315][ T3488] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 43.424452][ T3488] ? check_panic_on_warn+0x1d/0xa0 [ 43.429555][ T3488] ? fb_is_primary_device+0xcc/0xcc [ 43.434736][ T3488] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 43.440695][ T3488] ? _raw_spin_unlock+0x40/0x40 [ 43.445523][ T3488] check_panic_on_warn+0x7e/0xa0 [ 43.450441][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 43.455715][ T3488] end_report+0x6d/0xf0 [ 43.459851][ T3488] kasan_report+0x18e/0x1c0 [ 43.464328][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 43.469591][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 43.474853][ T3488] kasan_check_range+0x27e/0x290 [ 43.479781][ T3488] ? leaf_paste_entries+0x95f/0x13a0 [ 43.485057][ T3488] memmove+0x25/0x60 [ 43.488935][ T3488] leaf_paste_entries+0x95f/0x13a0 [ 43.494033][ T3488] balance_leaf+0xbd1e/0x12510 [ 43.498780][ T3488] ? print_irqtrace_events+0x210/0x210 [ 43.504221][ T3488] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.509397][ T3488] ? lockdep_hardirqs_on+0x94/0x130 [ 43.514569][ T3488] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 43.520435][ T3488] ? _raw_spin_unlock+0x40/0x40 [ 43.525353][ T3488] ? stack_trace_save+0x113/0x1c0 [ 43.530394][ T3488] ? do_balance+0x8f0/0x8f0 [ 43.534880][ T3488] ? stack_depot_save+0x3db/0x440 [ 43.539890][ T3488] ? ____kasan_kmalloc+0xd1/0xf0 [ 43.544807][ T3488] ? ____kasan_kmalloc+0xba/0xf0 [ 43.549718][ T3488] ? __kmalloc+0x168/0x300 [ 43.554110][ T3488] ? fix_nodes+0x69aa/0x8c70 [ 43.558695][ T3488] ? reiserfs_paste_into_item+0x65d/0x880 [ 43.564474][ T3488] ? reiserfs_add_entry+0x9b8/0xd70 [ 43.569646][ T3488] ? reiserfs_mkdir+0x6bc/0x8f0 [ 43.574471][ T3488] ? reiserfs_xattr_init+0x348/0x730 [ 43.579731][ T3488] ? reiserfs_remount+0x12b8/0x18e0 [ 43.584902][ T3488] ? reconfigure_super+0x43a/0x870 [ 43.589992][ T3488] ? path_mount+0xceb/0x10a0 [ 43.594555][ T3488] ? __se_sys_mount+0x2d5/0x3c0 [ 43.599389][ T3488] ? do_syscall_64+0x3d/0xb0 [ 43.604045][ T3488] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.610096][ T3488] ? get_parents+0x513/0xfa0 [ 43.614664][ T3488] ? __wake_up_bit+0x190/0x190 [ 43.619409][ T3488] ? set_parameters+0x8d0/0x8d0 [ 43.624236][ T3488] ? get_neighbors+0x631/0x1010 [ 43.629076][ T3488] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 43.635125][ T3488] ? fix_nodes+0x7abc/0x8c70 [ 43.639694][ T3488] ? __might_sleep+0xc0/0xc0 [ 43.644268][ T3488] do_balance+0x309/0x8f0 [ 43.648577][ T3488] ? get_right_neighbor_position+0x210/0x210 [ 43.654537][ T3488] ? reiserfs_paste_into_item+0x3ef/0x880 [ 43.660411][ T3488] reiserfs_paste_into_item+0x73b/0x880 [ 43.665935][ T3488] ? reiserfs_cut_from_item+0x2560/0x2560 [ 43.671643][ T3488] ? reiserfs_get_parent+0x2c0/0x2c0 [ 43.676902][ T3488] ? inode_get_bytes+0x72/0xa0 [ 43.681644][ T3488] ? _find_first_zero_bit+0x60/0xf0 [ 43.686821][ T3488] reiserfs_add_entry+0x9b8/0xd70 [ 43.691830][ T3488] ? drop_new_inode+0x60/0x60 [ 43.696492][ T3488] ? do_journal_begin_r+0xdad/0x1000 [ 43.701763][ T3488] ? journal_begin+0x1ef/0x350 [ 43.706516][ T3488] reiserfs_mkdir+0x6bc/0x8f0 [ 43.711175][ T3488] ? __might_sleep+0xc0/0xc0 [ 43.715745][ T3488] ? reiserfs_symlink+0x720/0x720 [ 43.720835][ T3488] ? down_write+0x10e/0x170 [ 43.725409][ T3488] ? mutex_unlock+0x10/0x10 [ 43.729891][ T3488] reiserfs_xattr_init+0x348/0x730 [ 43.734985][ T3488] reiserfs_remount+0x12b8/0x18e0 [ 43.739987][ T3488] ? reiserfs_statfs+0x380/0x380 [ 43.744900][ T3488] ? shrink_dcache_sb+0x3be/0x410 [ 43.749900][ T3488] ? dentry_lru_isolate+0x2f0/0x2f0 [ 43.755517][ T3488] ? kmem_cache_alloc_trace+0x143/0x290 [ 43.761213][ T3488] reconfigure_super+0x43a/0x870 [ 43.766389][ T3488] path_mount+0xceb/0x10a0 [ 43.770785][ T3488] ? user_path_at_empty+0x12b/0x180 [ 43.775970][ T3488] __se_sys_mount+0x2d5/0x3c0 [ 43.780635][ T3488] ? __x64_sys_mount+0xc0/0xc0 [ 43.785378][ T3488] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.791330][ T3488] ? lockdep_hardirqs_on+0x94/0x130 [ 43.796504][ T3488] ? __x64_sys_mount+0x1c/0xc0 [ 43.801243][ T3488] do_syscall_64+0x3d/0xb0 [ 43.805635][ T3488] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.811545][ T3488] RIP: 0033:0x7f7c173a4eba [ 43.815940][ T3488] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.835525][ T3488] RSP: 002b:00007ffc64ef9908 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 43.843921][ T3488] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f7c173a4eba [ 43.851961][ T3488] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 43.859997][ T3488] RBP: 00007ffc64ef99a0 R08: 00007ffc64ef99a0 R09: 0000000000000000 [ 43.867950][ T3488] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 43.875907][ T3488] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 43.883959][ T3488] [ 43.887062][ T3488] Kernel Offset: disabled [ 43.891380][ T3488] Rebooting in 86400 seconds..