Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. executing program syzkaller login: [ 76.378622][ T3548] loop0: detected capacity change from 0 to 8192 [ 76.390454][ T3548] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.404081][ T3548] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 76.414030][ T3548] REISERFS (device loop0): using ordered data mode [ 76.420561][ T3548] reiserfs: using flush barriers [ 76.427643][ T3548] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.444660][ T3548] REISERFS (device loop0): checking transaction log (loop0) [ 76.455120][ T3548] REISERFS (device loop0): Using r5 hash to sort names [ 76.465251][ T3548] reiserfs: enabling write barrier flush mode [ 76.477815][ T3548] ================================================================== [ 76.485916][ T3548] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 76.493515][ T3548] Read of size 18446744073709551584 at addr ffff88806f60efa4 by task syz-executor411/3548 [ 76.503423][ T3548] [ 76.505762][ T3548] CPU: 1 PID: 3548 Comm: syz-executor411 Not tainted 6.1.54-syzkaller #0 [ 76.514194][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 76.524273][ T3548] Call Trace: [ 76.527571][ T3548] [ 76.530518][ T3548] dump_stack_lvl+0x1e3/0x2cb [ 76.535323][ T3548] ? irq_work_queue+0xc6/0x150 [ 76.540102][ T3548] ? nf_tcp_handle_invalid+0x642/0x642 [ 76.545666][ T3548] ? panic+0x75d/0x75d [ 76.549748][ T3548] ? _printk+0xd1/0x111 [ 76.553916][ T3548] ? _raw_spin_lock_irqsave+0xac/0x120 [ 76.559431][ T3548] print_report+0x15f/0x4f0 [ 76.563943][ T3548] ? __lock_acquire+0x125b/0x1f80 [ 76.568972][ T3548] ? __virt_addr_valid+0x22b/0x2e0 [ 76.574107][ T3548] ? __phys_addr+0xb6/0x170 [ 76.578626][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 76.583920][ T3548] kasan_report+0x136/0x160 [ 76.588431][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 76.593720][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 76.599009][ T3548] kasan_check_range+0x27f/0x290 [ 76.603952][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 76.609242][ T3548] memmove+0x25/0x60 [ 76.613147][ T3548] leaf_paste_entries+0x95f/0x13a0 [ 76.618278][ T3548] balance_leaf+0xbd1e/0x12510 [ 76.623064][ T3548] ? print_irqtrace_events+0x210/0x210 [ 76.628535][ T3548] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 76.634446][ T3548] ? _raw_spin_unlock+0x40/0x40 [ 76.639313][ T3548] ? stack_trace_save+0x113/0x1c0 [ 76.644344][ T3548] ? stack_trace_snprint+0xe0/0xe0 [ 76.649464][ T3548] ? do_balance+0x8f0/0x8f0 [ 76.653982][ T3548] ? __stack_depot_save+0x3f5/0x470 [ 76.659196][ T3548] ? kasan_set_track+0x60/0x70 [ 76.663966][ T3548] ? kasan_set_track+0x4b/0x70 [ 76.668767][ T3548] ? __kasan_kmalloc+0x97/0xb0 [ 76.673534][ T3548] ? __kmalloc+0xb2/0x230 [ 76.677867][ T3548] ? fix_nodes+0x69aa/0x8c70 [ 76.682475][ T3548] ? reiserfs_paste_into_item+0x65d/0x880 [ 76.688267][ T3548] ? reiserfs_add_entry+0x9b8/0xd70 [ 76.693482][ T3548] ? reiserfs_mkdir+0x6bc/0x8f0 [ 76.698339][ T3548] ? reiserfs_xattr_init+0x348/0x730 [ 76.703642][ T3548] ? reiserfs_remount+0x12b8/0x18e0 [ 76.708867][ T3548] ? reconfigure_super+0x43a/0x870 [ 76.713998][ T3548] ? path_mount+0xe69/0x1090 [ 76.718607][ T3548] ? __se_sys_mount+0x2d5/0x3c0 [ 76.723465][ T3548] ? do_syscall_64+0x3d/0xb0 [ 76.728081][ T3548] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.734169][ T3548] ? __wake_up+0x1c0/0x1c0 [ 76.738603][ T3548] ? get_parents+0x513/0xfa0 [ 76.743202][ T3548] ? set_parameters+0x8d0/0x8d0 [ 76.748060][ T3548] ? get_neighbors+0x631/0x1010 [ 76.752929][ T3548] ? reiserfs_prepare_for_journal+0x269/0x280 [ 76.759018][ T3548] ? fix_nodes+0x7abc/0x8c70 [ 76.763709][ T3548] ? __might_sleep+0xb0/0xb0 [ 76.768321][ T3548] do_balance+0x309/0x8f0 [ 76.772663][ T3548] ? get_right_neighbor_position+0x210/0x210 [ 76.778657][ T3548] ? reiserfs_paste_into_item+0x3ef/0x880 [ 76.784386][ T3548] reiserfs_paste_into_item+0x73b/0x880 [ 76.789947][ T3548] ? reiserfs_cut_from_item+0x2580/0x2580 [ 76.795705][ T3548] ? reiserfs_get_parent+0x2c0/0x2c0 [ 76.800998][ T3548] ? inode_get_bytes+0x72/0xa0 [ 76.805773][ T3548] ? _find_first_zero_bit+0x61/0x100 [ 76.811082][ T3548] reiserfs_add_entry+0x9b8/0xd70 [ 76.816123][ T3548] ? drop_new_inode+0x60/0x60 [ 76.820825][ T3548] ? do_journal_begin_r+0xdc9/0x1020 [ 76.826134][ T3548] ? journal_begin+0x1ef/0x350 [ 76.830903][ T3548] reiserfs_mkdir+0x6bc/0x8f0 [ 76.835616][ T3548] ? reiserfs_symlink+0x720/0x720 [ 76.840648][ T3548] ? rwsem_write_trylock+0x166/0x210 [ 76.845954][ T3548] ? mutex_unlock+0x10/0x10 [ 76.850462][ T3548] reiserfs_xattr_init+0x348/0x730 [ 76.855589][ T3548] reiserfs_remount+0x12b8/0x18e0 [ 76.860627][ T3548] ? reiserfs_statfs+0x380/0x380 [ 76.865573][ T3548] ? shrink_dcache_sb+0x3be/0x410 [ 76.870600][ T3548] ? dentry_lru_isolate+0x2f0/0x2f0 [ 76.875819][ T3548] ? hook_sb_remount+0x19/0xc0 [ 76.880582][ T3548] reconfigure_super+0x43a/0x870 [ 76.885526][ T3548] path_mount+0xe69/0x1090 [ 76.889957][ T3548] ? user_path_at_empty+0x12b/0x180 [ 76.895163][ T3548] __se_sys_mount+0x2d5/0x3c0 [ 76.899854][ T3548] ? __x64_sys_mount+0xc0/0xc0 [ 76.904633][ T3548] ? syscall_enter_from_user_mode+0x2e/0x220 [ 76.910620][ T3548] ? lockdep_hardirqs_on+0x94/0x130 [ 76.915825][ T3548] ? __x64_sys_mount+0x1c/0xc0 [ 76.920600][ T3548] do_syscall_64+0x3d/0xb0 [ 76.925037][ T3548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.930934][ T3548] RIP: 0033:0x7f2f954dfe7a [ 76.935350][ T3548] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.954968][ T3548] RSP: 002b:00007fff7ef93158 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 76.963392][ T3548] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f2f954dfe7a [ 76.971366][ T3548] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 76.979340][ T3548] RBP: 00007fff7ef931f0 R08: 00007fff7ef931f0 R09: 0000000000000000 [ 76.987400][ T3548] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 76.995373][ T3548] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 77.003353][ T3548] [ 77.006369][ T3548] [ 77.008688][ T3548] The buggy address belongs to the physical page: [ 77.015099][ T3548] page:ffffea0001bd8380 refcount:3 mapcount:0 mapping:ffff888012891df8 index:0x213 pfn:0x6f60e [ 77.025447][ T3548] memcg:ffff888140058000 [ 77.029684][ T3548] aops:def_blk_aops ino:700000 [ 77.034453][ T3548] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 77.044175][ T3548] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888012891df8 [ 77.052783][ T3548] raw: 0000000000000213 ffff888072709488 00000003ffffffff ffff888140058000 [ 77.061357][ T3548] page dumped because: kasan: bad access detected [ 77.067764][ T3548] page_owner tracks the page as allocated [ 77.073821][ T3548] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3548, tgid 3548 (syz-executor411), ts 76454686730, free_ts 17048918561 [ 77.094406][ T3548] post_alloc_hook+0x18d/0x1b0 [ 77.099176][ T3548] get_page_from_freelist+0x32ed/0x3480 [ 77.104742][ T3548] __alloc_pages+0x28d/0x770 [ 77.109352][ T3548] folio_alloc+0x1a/0x50 [ 77.113607][ T3548] filemap_alloc_folio+0xda/0x4f0 [ 77.118651][ T3548] __filemap_get_folio+0x711/0xe30 [ 77.123772][ T3548] pagecache_get_page+0x28/0x250 [ 77.128732][ T3548] __getblk_gfp+0x211/0xa20 [ 77.133237][ T3548] search_by_key+0x460/0x4b60 [ 77.137916][ T3548] reiserfs_read_locked_inode+0x23c/0x2950 [ 77.143725][ T3548] reiserfs_fill_super+0x135f/0x2620 [ 77.149020][ T3548] mount_bdev+0x2c9/0x3f0 [ 77.153360][ T3548] legacy_get_tree+0xeb/0x180 [ 77.158032][ T3548] vfs_get_tree+0x88/0x270 [ 77.162477][ T3548] do_new_mount+0x28b/0xae0 [ 77.167000][ T3548] __se_sys_mount+0x2d5/0x3c0 [ 77.171699][ T3548] page last free stack trace: [ 77.176370][ T3548] free_unref_page_prepare+0xf63/0x1120 [ 77.181948][ T3548] free_unref_page+0x98/0x570 [ 77.186625][ T3548] free_contig_range+0x9a/0x150 [ 77.191498][ T3548] destroy_args+0xfe/0x997 [ 77.195916][ T3548] debug_vm_pgtable+0x416/0x46b [ 77.200781][ T3548] do_one_initcall+0x265/0x8f0 [ 77.205551][ T3548] do_initcall_level+0x157/0x207 [ 77.210496][ T3548] do_initcalls+0x49/0x86 [ 77.214841][ T3548] kernel_init_freeable+0x473/0x61f [ 77.220073][ T3548] kernel_init+0x19/0x290 [ 77.224411][ T3548] ret_from_fork+0x1f/0x30 [ 77.228837][ T3548] [ 77.231183][ T3548] Memory state around the buggy address: [ 77.236894][ T3548] ffff88806f60ee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.245043][ T3548] ffff88806f60ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.253103][ T3548] >ffff88806f60ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.261163][ T3548] ^ [ 77.266268][ T3548] ffff88806f60f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.274675][ T3548] ffff88806f60f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.282728][ T3548] ================================================================== [ 77.297173][ T3548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.304413][ T3548] CPU: 1 PID: 3548 Comm: syz-executor411 Not tainted 6.1.54-syzkaller #0 [ 77.312846][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 77.322914][ T3548] Call Trace: [ 77.326214][ T3548] [ 77.329164][ T3548] dump_stack_lvl+0x1e3/0x2cb [ 77.333874][ T3548] ? nf_tcp_handle_invalid+0x642/0x642 [ 77.339359][ T3548] ? panic+0x75d/0x75d [ 77.343460][ T3548] ? preempt_schedule_common+0xa6/0xd0 [ 77.348975][ T3548] ? vscnprintf+0x59/0x80 [ 77.353337][ T3548] panic+0x318/0x75d [ 77.357271][ T3548] ? check_panic_on_warn+0x1d/0xa0 [ 77.362407][ T3548] ? memcpy_page_flushcache+0xfc/0xfc [ 77.367810][ T3548] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 77.373826][ T3548] ? _raw_spin_unlock+0x40/0x40 [ 77.378711][ T3548] ? print_report+0x4a3/0x4f0 [ 77.383416][ T3548] check_panic_on_warn+0x7e/0xa0 [ 77.388402][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 77.393706][ T3548] end_report+0x66/0x110 [ 77.397975][ T3548] kasan_report+0x143/0x160 [ 77.402503][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 77.407814][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 77.413124][ T3548] kasan_check_range+0x27f/0x290 [ 77.418080][ T3548] ? leaf_paste_entries+0x95f/0x13a0 [ 77.423388][ T3548] memmove+0x25/0x60 [ 77.427311][ T3548] leaf_paste_entries+0x95f/0x13a0 [ 77.432452][ T3548] balance_leaf+0xbd1e/0x12510 [ 77.437258][ T3548] ? print_irqtrace_events+0x210/0x210 [ 77.442742][ T3548] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 77.449795][ T3548] ? _raw_spin_unlock+0x40/0x40 [ 77.454671][ T3548] ? stack_trace_save+0x113/0x1c0 [ 77.459713][ T3548] ? stack_trace_snprint+0xe0/0xe0 [ 77.464845][ T3548] ? do_balance+0x8f0/0x8f0 [ 77.469372][ T3548] ? __stack_depot_save+0x3f5/0x470 [ 77.474599][ T3548] ? kasan_set_track+0x60/0x70 [ 77.479378][ T3548] ? kasan_set_track+0x4b/0x70 [ 77.484159][ T3548] ? __kasan_kmalloc+0x97/0xb0 [ 77.488959][ T3548] ? __kmalloc+0xb2/0x230 [ 77.493407][ T3548] ? fix_nodes+0x69aa/0x8c70 [ 77.498027][ T3548] ? reiserfs_paste_into_item+0x65d/0x880 [ 77.503765][ T3548] ? reiserfs_add_entry+0x9b8/0xd70 [ 77.508985][ T3548] ? reiserfs_mkdir+0x6bc/0x8f0 [ 77.513874][ T3548] ? reiserfs_xattr_init+0x348/0x730 [ 77.519287][ T3548] ? reiserfs_remount+0x12b8/0x18e0 [ 77.524614][ T3548] ? reconfigure_super+0x43a/0x870 [ 77.529757][ T3548] ? path_mount+0xe69/0x1090 [ 77.534381][ T3548] ? __se_sys_mount+0x2d5/0x3c0 [ 77.539291][ T3548] ? do_syscall_64+0x3d/0xb0 [ 77.543904][ T3548] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.550022][ T3548] ? __wake_up+0x1c0/0x1c0 [ 77.554460][ T3548] ? get_parents+0x513/0xfa0 [ 77.559083][ T3548] ? set_parameters+0x8d0/0x8d0 [ 77.563960][ T3548] ? get_neighbors+0x631/0x1010 [ 77.568848][ T3548] ? reiserfs_prepare_for_journal+0x269/0x280 [ 77.574977][ T3548] ? fix_nodes+0x7abc/0x8c70 [ 77.579587][ T3548] ? __might_sleep+0xb0/0xb0 [ 77.584198][ T3548] do_balance+0x309/0x8f0 [ 77.588538][ T3548] ? get_right_neighbor_position+0x210/0x210 [ 77.594529][ T3548] ? reiserfs_paste_into_item+0x3ef/0x880 [ 77.600253][ T3548] reiserfs_paste_into_item+0x73b/0x880 [ 77.605894][ T3548] ? reiserfs_cut_from_item+0x2580/0x2580 [ 77.611653][ T3548] ? reiserfs_get_parent+0x2c0/0x2c0 [ 77.617036][ T3548] ? inode_get_bytes+0x72/0xa0 [ 77.621804][ T3548] ? _find_first_zero_bit+0x61/0x100 [ 77.627099][ T3548] reiserfs_add_entry+0x9b8/0xd70 [ 77.632135][ T3548] ? drop_new_inode+0x60/0x60 [ 77.636906][ T3548] ? do_journal_begin_r+0xdc9/0x1020 [ 77.642214][ T3548] ? journal_begin+0x1ef/0x350 [ 77.646991][ T3548] reiserfs_mkdir+0x6bc/0x8f0 [ 77.651684][ T3548] ? reiserfs_symlink+0x720/0x720 [ 77.656720][ T3548] ? rwsem_write_trylock+0x166/0x210 [ 77.662022][ T3548] ? mutex_unlock+0x10/0x10 [ 77.666535][ T3548] reiserfs_xattr_init+0x348/0x730 [ 77.671670][ T3548] reiserfs_remount+0x12b8/0x18e0 [ 77.676723][ T3548] ? reiserfs_statfs+0x380/0x380 [ 77.681689][ T3548] ? shrink_dcache_sb+0x3be/0x410 [ 77.686721][ T3548] ? dentry_lru_isolate+0x2f0/0x2f0 [ 77.691930][ T3548] ? hook_sb_remount+0x19/0xc0 [ 77.696699][ T3548] reconfigure_super+0x43a/0x870 [ 77.701652][ T3548] path_mount+0xe69/0x1090 [ 77.706189][ T3548] ? user_path_at_empty+0x12b/0x180 [ 77.711420][ T3548] __se_sys_mount+0x2d5/0x3c0 [ 77.716122][ T3548] ? __x64_sys_mount+0xc0/0xc0 [ 77.720897][ T3548] ? syscall_enter_from_user_mode+0x2e/0x220 [ 77.726891][ T3548] ? lockdep_hardirqs_on+0x94/0x130 [ 77.732102][ T3548] ? __x64_sys_mount+0x1c/0xc0 [ 77.736887][ T3548] do_syscall_64+0x3d/0xb0 [ 77.741324][ T3548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.747244][ T3548] RIP: 0033:0x7f2f954dfe7a [ 77.751681][ T3548] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.772652][ T3548] RSP: 002b:00007fff7ef93158 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 77.781167][ T3548] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f2f954dfe7a [ 77.789144][ T3548] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 77.797117][ T3548] RBP: 00007fff7ef931f0 R08: 00007fff7ef931f0 R09: 0000000000000000 [ 77.805090][ T3548] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 77.813066][ T3548] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 77.821054][ T3548] [ 77.824403][ T3548] Kernel Offset: disabled [ 77.828730][ T3548] Rebooting in 86400 seconds..