Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. executing program [ 51.134483][ T3538] loop0: detected capacity change from 0 to 8192 [ 51.142577][ T3538] ======================================================= [ 51.142577][ T3538] WARNING: The mand mount option has been deprecated and [ 51.142577][ T3538] and is ignored by this kernel. Remove the mand [ 51.142577][ T3538] option from the mount to silence this warning. [ 51.142577][ T3538] ======================================================= [ 51.179659][ T3538] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.192711][ T3538] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.201974][ T3538] REISERFS (device loop0): using ordered data mode [ 51.208463][ T3538] reiserfs: using flush barriers [ 51.214448][ T3538] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.231050][ T3538] REISERFS (device loop0): checking transaction log (loop0) [ 51.269267][ T3538] REISERFS (device loop0): Using tea hash to sort names [ 51.276929][ T3538] ================================================================== [ 51.284985][ T3538] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 51.292529][ T3538] Read of size 18446744073709551584 at addr ffff888070614fa4 by task syz-executor354/3538 [ 51.302402][ T3538] [ 51.304711][ T3538] CPU: 1 PID: 3538 Comm: syz-executor354 Not tainted 6.1.31-syzkaller #0 [ 51.313096][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 51.323216][ T3538] Call Trace: [ 51.326484][ T3538] [ 51.329393][ T3538] dump_stack_lvl+0x1e3/0x2cb [ 51.334149][ T3538] ? irq_work_queue+0xcd/0x150 [ 51.338890][ T3538] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.344331][ T3538] ? panic+0x75d/0x75d [ 51.348390][ T3538] ? _printk+0xd1/0x111 [ 51.352537][ T3538] ? _raw_spin_lock_irqsave+0xac/0x120 [ 51.357981][ T3538] print_report+0x15f/0x4f0 [ 51.362476][ T3538] ? __lock_acquire+0x125b/0x1f80 [ 51.367483][ T3538] ? __virt_addr_valid+0x22b/0x2e0 [ 51.372585][ T3538] ? __phys_addr+0xb6/0x170 [ 51.377075][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 51.382352][ T3538] kasan_report+0x136/0x160 [ 51.386845][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 51.392119][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 51.397393][ T3538] kasan_check_range+0x27f/0x290 [ 51.402326][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 51.407601][ T3538] memmove+0x25/0x60 [ 51.411483][ T3538] leaf_paste_entries+0x95f/0x13a0 [ 51.416584][ T3538] balance_leaf+0xbd1e/0x12510 [ 51.421339][ T3538] ? print_irqtrace_events+0x210/0x210 [ 51.426784][ T3538] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.432662][ T3538] ? _raw_spin_unlock+0x40/0x40 [ 51.437493][ T3538] ? stack_trace_save+0x113/0x1c0 [ 51.442513][ T3538] ? stack_trace_snprint+0xe0/0xe0 [ 51.447629][ T3538] ? do_balance+0x8f0/0x8f0 [ 51.452127][ T3538] ? __stack_depot_save+0x3f5/0x470 [ 51.457339][ T3538] ? kasan_set_track+0x60/0x70 [ 51.462103][ T3538] ? kasan_set_track+0x4b/0x70 [ 51.466859][ T3538] ? __kasan_kmalloc+0x97/0xb0 [ 51.471628][ T3538] ? __kmalloc+0xb2/0x230 [ 51.475950][ T3538] ? fix_nodes+0x69aa/0x8c70 [ 51.480537][ T3538] ? reiserfs_paste_into_item+0x65d/0x880 [ 51.486256][ T3538] ? reiserfs_add_entry+0x9b8/0xd70 [ 51.491443][ T3538] ? reiserfs_mkdir+0x6bc/0x8f0 [ 51.496277][ T3538] ? reiserfs_xattr_init+0x348/0x730 [ 51.501562][ T3538] ? reiserfs_fill_super+0x2203/0x2620 [ 51.507008][ T3538] ? mount_bdev+0x2c9/0x3f0 [ 51.511496][ T3538] ? legacy_get_tree+0xeb/0x180 [ 51.516336][ T3538] ? vfs_get_tree+0x88/0x270 [ 51.520909][ T3538] ? do_new_mount+0x28b/0xae0 [ 51.525570][ T3538] ? __se_sys_mount+0x2d5/0x3c0 [ 51.530405][ T3538] ? do_syscall_64+0x3d/0xb0 [ 51.534985][ T3538] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.541043][ T3538] ? __wake_up+0x1c0/0x1c0 [ 51.545448][ T3538] ? get_parents+0x513/0xfa0 [ 51.550028][ T3538] ? set_parameters+0x8d0/0x8d0 [ 51.554864][ T3538] ? get_neighbors+0x631/0x1010 [ 51.559702][ T3538] ? reiserfs_prepare_for_journal+0x269/0x280 [ 51.565754][ T3538] ? fix_nodes+0x7abc/0x8c70 [ 51.570332][ T3538] ? __might_sleep+0xb0/0xb0 [ 51.574917][ T3538] do_balance+0x309/0x8f0 [ 51.579233][ T3538] ? get_right_neighbor_position+0x210/0x210 [ 51.585200][ T3538] ? reiserfs_paste_into_item+0x3ef/0x880 [ 51.590905][ T3538] reiserfs_paste_into_item+0x73b/0x880 [ 51.596436][ T3538] ? reiserfs_cut_from_item+0x2580/0x2580 [ 51.602163][ T3538] ? reiserfs_get_parent+0x2c0/0x2c0 [ 51.607431][ T3538] ? inode_get_bytes+0x72/0xa0 [ 51.612185][ T3538] ? _find_first_zero_bit+0x61/0x100 [ 51.617455][ T3538] reiserfs_add_entry+0x9b8/0xd70 [ 51.622467][ T3538] ? drop_new_inode+0x60/0x60 [ 51.627131][ T3538] ? do_journal_begin_r+0xdc9/0x1020 [ 51.632428][ T3538] ? journal_begin+0x1ef/0x350 [ 51.637175][ T3538] reiserfs_mkdir+0x6bc/0x8f0 [ 51.641839][ T3538] ? reiserfs_symlink+0x720/0x720 [ 51.646877][ T3538] ? rwsem_write_trylock+0x166/0x210 [ 51.652152][ T3538] ? __up_read+0x690/0x690 [ 51.656563][ T3538] reiserfs_xattr_init+0x348/0x730 [ 51.661665][ T3538] reiserfs_fill_super+0x2203/0x2620 [ 51.666943][ T3538] ? reiserfs_kill_sb+0x150/0x150 [ 51.671955][ T3538] ? snprintf+0xd6/0x120 [ 51.676191][ T3538] mount_bdev+0x2c9/0x3f0 [ 51.680508][ T3538] ? reiserfs_kill_sb+0x150/0x150 [ 51.685524][ T3538] legacy_get_tree+0xeb/0x180 [ 51.690194][ T3538] ? remove_save_link+0x540/0x540 [ 51.695205][ T3538] vfs_get_tree+0x88/0x270 [ 51.699611][ T3538] do_new_mount+0x28b/0xae0 [ 51.704103][ T3538] ? do_move_mount_old+0x160/0x160 [ 51.709199][ T3538] ? user_path_at_empty+0x12b/0x180 [ 51.714382][ T3538] __se_sys_mount+0x2d5/0x3c0 [ 51.719047][ T3538] ? __x64_sys_mount+0xc0/0xc0 [ 51.723795][ T3538] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.729761][ T3538] ? lockdep_hardirqs_on+0x94/0x130 [ 51.734944][ T3538] ? __x64_sys_mount+0x1c/0xc0 [ 51.739697][ T3538] do_syscall_64+0x3d/0xb0 [ 51.744100][ T3538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.749981][ T3538] RIP: 0033:0x7fc9fdfd8b2a [ 51.754378][ T3538] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.774052][ T3538] RSP: 002b:00007fffceb4e338 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 51.782451][ T3538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc9fdfd8b2a [ 51.790405][ T3538] RDX: 00000000200011c0 RSI: 0000000020001100 RDI: 00007fffceb4e350 [ 51.798362][ T3538] RBP: 00007fffceb4e350 R08: 00007fffceb4e390 R09: 00000000000010ed [ 51.806317][ T3538] R10: 000000000000c0cc R11: 0000000000000286 R12: 0000000000000004 [ 51.814271][ T3538] R13: 0000555555a9c2c0 R14: 000000000000c0cc R15: 00007fffceb4e390 [ 51.822234][ T3538] [ 51.825235][ T3538] [ 51.827541][ T3538] The buggy address belongs to the physical page: [ 51.833930][ T3538] page:ffffea0001c18500 refcount:3 mapcount:0 mapping:ffff888140c4f5f8 index:0x213 pfn:0x70614 [ 51.844234][ T3538] memcg:ffff88813ff58000 [ 51.848453][ T3538] aops:def_blk_aops ino:700000 [ 51.853201][ T3538] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 51.862919][ T3538] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888140c4f5f8 [ 51.871511][ T3538] raw: 0000000000000213 ffff888070cfb9f8 00000003ffffffff ffff88813ff58000 [ 51.880077][ T3538] page dumped because: kasan: bad access detected [ 51.886470][ T3538] page_owner tracks the page as allocated [ 51.892258][ T3538] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3538, tgid 3538 (syz-executor354), ts 51269008479, free_ts 11060352102 [ 51.912817][ T3538] post_alloc_hook+0x18d/0x1b0 [ 51.917576][ T3538] get_page_from_freelist+0x32ed/0x3480 [ 51.923103][ T3538] __alloc_pages+0x28d/0x770 [ 51.927678][ T3538] folio_alloc+0x1a/0x50 [ 51.931907][ T3538] filemap_alloc_folio+0xda/0x4f0 [ 51.936914][ T3538] __filemap_get_folio+0x711/0xe30 [ 51.942009][ T3538] pagecache_get_page+0x28/0x250 [ 51.946928][ T3538] __getblk_gfp+0x211/0xa20 [ 51.951413][ T3538] search_by_key+0x460/0x4b60 [ 51.956076][ T3538] reiserfs_read_locked_inode+0x23c/0x2950 [ 51.961867][ T3538] reiserfs_fill_super+0x135f/0x2620 [ 51.967142][ T3538] mount_bdev+0x2c9/0x3f0 [ 51.971457][ T3538] legacy_get_tree+0xeb/0x180 [ 51.976131][ T3538] vfs_get_tree+0x88/0x270 [ 51.980530][ T3538] do_new_mount+0x28b/0xae0 [ 51.985026][ T3538] __se_sys_mount+0x2d5/0x3c0 [ 51.989689][ T3538] page last free stack trace: [ 51.994339][ T3538] free_unref_page_prepare+0xf63/0x1120 [ 51.999869][ T3538] free_unref_page+0x98/0x570 [ 52.004530][ T3538] free_contig_range+0x9a/0x150 [ 52.009366][ T3538] destroy_args+0xfe/0x997 [ 52.013764][ T3538] debug_vm_pgtable+0x416/0x46b [ 52.018599][ T3538] do_one_initcall+0x265/0x8f0 [ 52.023348][ T3538] do_initcall_level+0x157/0x207 [ 52.028269][ T3538] do_initcalls+0x49/0x86 [ 52.032579][ T3538] kernel_init_freeable+0x473/0x61f [ 52.037762][ T3538] kernel_init+0x19/0x290 [ 52.042079][ T3538] ret_from_fork+0x1f/0x30 [ 52.046481][ T3538] [ 52.048790][ T3538] Memory state around the buggy address: [ 52.054414][ T3538] ffff888070614e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.062471][ T3538] ffff888070614f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.070521][ T3538] >ffff888070614f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.078580][ T3538] ^ [ 52.083676][ T3538] ffff888070615000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.091735][ T3538] ffff888070615080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.099778][ T3538] ================================================================== [ 52.108284][ T3538] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.115490][ T3538] CPU: 0 PID: 3538 Comm: syz-executor354 Not tainted 6.1.31-syzkaller #0 [ 52.123888][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 52.133927][ T3538] Call Trace: [ 52.137192][ T3538] [ 52.140107][ T3538] dump_stack_lvl+0x1e3/0x2cb [ 52.144774][ T3538] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.150221][ T3538] ? panic+0x75d/0x75d [ 52.154276][ T3538] ? preempt_schedule_common+0xa6/0xd0 [ 52.159722][ T3538] ? vscnprintf+0x59/0x80 [ 52.164051][ T3538] panic+0x318/0x75d [ 52.167931][ T3538] ? check_panic_on_warn+0x1d/0xa0 [ 52.173025][ T3538] ? memcpy_page_flushcache+0xfc/0xfc [ 52.178386][ T3538] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 52.184347][ T3538] ? _raw_spin_unlock+0x40/0x40 [ 52.189176][ T3538] ? print_report+0x4a3/0x4f0 [ 52.193841][ T3538] check_panic_on_warn+0x7e/0xa0 [ 52.198763][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 52.204034][ T3538] end_report+0x66/0x110 [ 52.208278][ T3538] kasan_report+0x143/0x160 [ 52.212770][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 52.218045][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 52.223316][ T3538] kasan_check_range+0x27f/0x290 [ 52.228240][ T3538] ? leaf_paste_entries+0x95f/0x13a0 [ 52.233511][ T3538] memmove+0x25/0x60 [ 52.237391][ T3538] leaf_paste_entries+0x95f/0x13a0 [ 52.242501][ T3538] balance_leaf+0xbd1e/0x12510 [ 52.247255][ T3538] ? print_irqtrace_events+0x210/0x210 [ 52.252701][ T3538] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 52.258584][ T3538] ? _raw_spin_unlock+0x40/0x40 [ 52.263416][ T3538] ? stack_trace_save+0x113/0x1c0 [ 52.268423][ T3538] ? stack_trace_snprint+0xe0/0xe0 [ 52.273515][ T3538] ? do_balance+0x8f0/0x8f0 [ 52.278002][ T3538] ? __stack_depot_save+0x3f5/0x470 [ 52.283194][ T3538] ? kasan_set_track+0x60/0x70 [ 52.287951][ T3538] ? kasan_set_track+0x4b/0x70 [ 52.292708][ T3538] ? __kasan_kmalloc+0x97/0xb0 [ 52.297460][ T3538] ? __kmalloc+0xb2/0x230 [ 52.301774][ T3538] ? fix_nodes+0x69aa/0x8c70 [ 52.306348][ T3538] ? reiserfs_paste_into_item+0x65d/0x880 [ 52.312051][ T3538] ? reiserfs_add_entry+0x9b8/0xd70 [ 52.317233][ T3538] ? reiserfs_mkdir+0x6bc/0x8f0 [ 52.322070][ T3538] ? reiserfs_xattr_init+0x348/0x730 [ 52.327339][ T3538] ? reiserfs_fill_super+0x2203/0x2620 [ 52.332783][ T3538] ? mount_bdev+0x2c9/0x3f0 [ 52.337275][ T3538] ? legacy_get_tree+0xeb/0x180 [ 52.342113][ T3538] ? vfs_get_tree+0x88/0x270 [ 52.346688][ T3538] ? do_new_mount+0x28b/0xae0 [ 52.351349][ T3538] ? __se_sys_mount+0x2d5/0x3c0 [ 52.356186][ T3538] ? do_syscall_64+0x3d/0xb0 [ 52.360759][ T3538] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.366818][ T3538] ? __wake_up+0x1c0/0x1c0 [ 52.371217][ T3538] ? get_parents+0x513/0xfa0 [ 52.375794][ T3538] ? set_parameters+0x8d0/0x8d0 [ 52.380631][ T3538] ? get_neighbors+0x631/0x1010 [ 52.385473][ T3538] ? reiserfs_prepare_for_journal+0x269/0x280 [ 52.391533][ T3538] ? fix_nodes+0x7abc/0x8c70 [ 52.396108][ T3538] ? __might_sleep+0xb0/0xb0 [ 52.400693][ T3538] do_balance+0x309/0x8f0 [ 52.405010][ T3538] ? get_right_neighbor_position+0x210/0x210 [ 52.410980][ T3538] ? reiserfs_paste_into_item+0x3ef/0x880 [ 52.416687][ T3538] reiserfs_paste_into_item+0x73b/0x880 [ 52.422217][ T3538] ? reiserfs_cut_from_item+0x2580/0x2580 [ 52.427940][ T3538] ? reiserfs_get_parent+0x2c0/0x2c0 [ 52.433208][ T3538] ? inode_get_bytes+0x72/0xa0 [ 52.437962][ T3538] ? _find_first_zero_bit+0x61/0x100 [ 52.443234][ T3538] reiserfs_add_entry+0x9b8/0xd70 [ 52.448246][ T3538] ? drop_new_inode+0x60/0x60 [ 52.452907][ T3538] ? do_journal_begin_r+0xdc9/0x1020 [ 52.458196][ T3538] ? journal_begin+0x1ef/0x350 [ 52.462944][ T3538] reiserfs_mkdir+0x6bc/0x8f0 [ 52.467607][ T3538] ? reiserfs_symlink+0x720/0x720 [ 52.472616][ T3538] ? rwsem_write_trylock+0x166/0x210 [ 52.477890][ T3538] ? __up_read+0x690/0x690 [ 52.482307][ T3538] reiserfs_xattr_init+0x348/0x730 [ 52.487407][ T3538] reiserfs_fill_super+0x2203/0x2620 [ 52.492685][ T3538] ? reiserfs_kill_sb+0x150/0x150 [ 52.497701][ T3538] ? snprintf+0xd6/0x120 [ 52.501941][ T3538] mount_bdev+0x2c9/0x3f0 [ 52.506254][ T3538] ? reiserfs_kill_sb+0x150/0x150 [ 52.511267][ T3538] legacy_get_tree+0xeb/0x180 [ 52.515931][ T3538] ? remove_save_link+0x540/0x540 [ 52.520944][ T3538] vfs_get_tree+0x88/0x270 [ 52.525352][ T3538] do_new_mount+0x28b/0xae0 [ 52.529842][ T3538] ? do_move_mount_old+0x160/0x160 [ 52.534947][ T3538] ? user_path_at_empty+0x12b/0x180 [ 52.540130][ T3538] __se_sys_mount+0x2d5/0x3c0 [ 52.544797][ T3538] ? __x64_sys_mount+0xc0/0xc0 [ 52.549557][ T3538] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.555528][ T3538] ? lockdep_hardirqs_on+0x94/0x130 [ 52.560715][ T3538] ? __x64_sys_mount+0x1c/0xc0 [ 52.565467][ T3538] do_syscall_64+0x3d/0xb0 [ 52.569869][ T3538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.575748][ T3538] RIP: 0033:0x7fc9fdfd8b2a [ 52.580145][ T3538] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.599732][ T3538] RSP: 002b:00007fffceb4e338 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 52.608137][ T3538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc9fdfd8b2a [ 52.616098][ T3538] RDX: 00000000200011c0 RSI: 0000000020001100 RDI: 00007fffceb4e350 [ 52.624051][ T3538] RBP: 00007fffceb4e350 R08: 00007fffceb4e390 R09: 00000000000010ed [ 52.632004][ T3538] R10: 000000000000c0cc R11: 0000000000000286 R12: 0000000000000004 [ 52.639956][ T3538] R13: 0000555555a9c2c0 R14: 000000000000c0cc R15: 00007fffceb4e390 [ 52.647917][ T3538] [ 52.650972][ T3538] Kernel Offset: disabled [ 52.655283][ T3538] Rebooting in 86400 seconds..