Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts.
executing program
[ 44.789607][ T3500] loop0: detected capacity change from 0 to 8192
[ 44.799405][ T3500] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 44.808964][ T3500] REISERFS (device loop0): using ordered data mode
[ 44.815515][ T3500] reiserfs: using flush barriers
[ 44.821491][ T3500] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 44.838607][ T3500] REISERFS (device loop0): checking transaction log (loop0)
[ 44.850888][ T3500] REISERFS (device loop0): Using r5 hash to sort names
[ 44.858660][ T3500] REISERFS (device loop0): using 3.5.x disk format
[ 44.866191][ T3500] ==================================================================
[ 44.874371][ T3500] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0
[ 44.882129][ T3500] Read of size 18446744073709551584 at addr ffff88807f41dfa4 by task syz-executor104/3500
[ 44.892087][ T3500]
[ 44.894404][ T3500] CPU: 1 PID: 3500 Comm: syz-executor104 Not tainted 5.15.118-syzkaller #0
[ 44.903047][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 44.913105][ T3500] Call Trace:
[ 44.916377][ T3500]
[ 44.919292][ T3500] dump_stack_lvl+0x1e3/0x2cb
[ 44.924041][ T3500] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 44.929668][ T3500] ? _printk+0xd1/0x111
[ 44.933846][ T3500] ? __wake_up_klogd+0xcc/0x100
[ 44.938704][ T3500] ? panic+0x84d/0x84d
[ 44.942751][ T3500] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 44.948190][ T3500] print_address_description+0x63/0x3b0
[ 44.953736][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 44.959205][ T3500] kasan_report+0x16b/0x1c0
[ 44.963708][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 44.969002][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 44.974387][ T3500] kasan_check_range+0x27e/0x290
[ 44.979333][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 44.984613][ T3500] memmove+0x25/0x60
[ 44.988527][ T3500] leaf_paste_entries+0x95f/0x13a0
[ 44.993649][ T3500] balance_leaf+0xbd1e/0x12510
[ 44.998418][ T3500] ? print_irqtrace_events+0x210/0x210
[ 45.004317][ T3500] ? do_raw_spin_unlock+0x137/0x8b0
[ 45.013600][ T3500] ? lockdep_hardirqs_on+0x94/0x130
[ 45.018792][ T3500] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 45.024676][ T3500] ? _raw_spin_unlock+0x40/0x40
[ 45.029500][ T3500] ? stack_trace_save+0x113/0x1c0
[ 45.034511][ T3500] ? do_balance+0x8f0/0x8f0
[ 45.038987][ T3500] ? __lock_acquire+0x1295/0x1ff0
[ 45.044001][ T3500] ? stack_depot_save+0x3db/0x440
[ 45.049016][ T3500] ? ____kasan_kmalloc+0xd1/0xf0
[ 45.054018][ T3500] ? ____kasan_kmalloc+0xba/0xf0
[ 45.058939][ T3500] ? __kmalloc+0x168/0x300
[ 45.063329][ T3500] ? fix_nodes+0x69aa/0x8c70
[ 45.067891][ T3500] ? reiserfs_paste_into_item+0x65d/0x880
[ 45.073605][ T3500] ? reiserfs_add_entry+0x9b8/0xd70
[ 45.078775][ T3500] ? reiserfs_mkdir+0x6bc/0x8f0
[ 45.083601][ T3500] ? reiserfs_xattr_init+0x348/0x730
[ 45.088859][ T3500] ? reiserfs_fill_super+0x226a/0x2690
[ 45.094316][ T3500] ? mount_bdev+0x2c9/0x3f0
[ 45.098805][ T3500] ? legacy_get_tree+0xeb/0x180
[ 45.103631][ T3500] ? vfs_get_tree+0x88/0x270
[ 45.108196][ T3500] ? do_new_mount+0x28b/0xae0
[ 45.112940][ T3500] ? __se_sys_mount+0x2d5/0x3c0
[ 45.117771][ T3500] ? do_syscall_64+0x3d/0xb0
[ 45.122518][ T3500] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.128667][ T3500] ? get_parents+0x513/0xfa0
[ 45.133320][ T3500] ? __wake_up_bit+0x190/0x190
[ 45.138151][ T3500] ? set_parameters+0x8d0/0x8d0
[ 45.143251][ T3500] ? get_neighbors+0x631/0x1010
[ 45.148082][ T3500] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 45.154129][ T3500] ? fix_nodes+0x7abc/0x8c70
[ 45.158703][ T3500] ? __might_sleep+0xc0/0xc0
[ 45.163803][ T3500] do_balance+0x309/0x8f0
[ 45.168111][ T3500] ? get_right_neighbor_position+0x210/0x210
[ 45.174095][ T3500] ? reiserfs_paste_into_item+0x3ef/0x880
[ 45.179794][ T3500] reiserfs_paste_into_item+0x73b/0x880
[ 45.186103][ T3500] ? reiserfs_cut_from_item+0x2560/0x2560
[ 45.192350][ T3500] ? reiserfs_get_parent+0x2c0/0x2c0
[ 45.197611][ T3500] ? inode_get_bytes+0x72/0xa0
[ 45.202353][ T3500] ? _find_first_zero_bit+0x60/0xf0
[ 45.207790][ T3500] reiserfs_add_entry+0x9b8/0xd70
[ 45.212797][ T3500] ? drop_new_inode+0x60/0x60
[ 45.217464][ T3500] ? do_journal_begin_r+0xdad/0x1000
[ 45.224136][ T3500] ? journal_begin+0x1ef/0x350
[ 45.228881][ T3500] reiserfs_mkdir+0x6bc/0x8f0
[ 45.233536][ T3500] ? __might_sleep+0xc0/0xc0
[ 45.238104][ T3500] ? reiserfs_symlink+0x720/0x720
[ 45.243109][ T3500] ? down_write+0x10e/0x170
[ 45.247602][ T3500] ? __up_read+0x690/0x690
[ 45.252866][ T3500] reiserfs_xattr_init+0x348/0x730
[ 45.257957][ T3500] reiserfs_fill_super+0x226a/0x2690
[ 45.263227][ T3500] ? reiserfs_kill_sb+0x150/0x150
[ 45.268251][ T3500] ? snprintf+0xd6/0x120
[ 45.272482][ T3500] mount_bdev+0x2c9/0x3f0
[ 45.276789][ T3500] ? reiserfs_kill_sb+0x150/0x150
[ 45.281792][ T3500] legacy_get_tree+0xeb/0x180
[ 45.286447][ T3500] ? remove_save_link+0x540/0x540
[ 45.291449][ T3500] vfs_get_tree+0x88/0x270
[ 45.296018][ T3500] do_new_mount+0x28b/0xae0
[ 45.300501][ T3500] ? do_move_mount_old+0x160/0x160
[ 45.305589][ T3500] ? user_path_at_empty+0x12b/0x180
[ 45.310766][ T3500] __se_sys_mount+0x2d5/0x3c0
[ 45.315424][ T3500] ? __x64_sys_mount+0xc0/0xc0
[ 45.320257][ T3500] ? syscall_enter_from_user_mode+0x2e/0x230
[ 45.326221][ T3500] ? lockdep_hardirqs_on+0x94/0x130
[ 45.331398][ T3500] ? __x64_sys_mount+0x1c/0xc0
[ 45.336136][ T3500] do_syscall_64+0x3d/0xb0
[ 45.340748][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.346825][ T3500] RIP: 0033:0x7fbbf60dfb1a
[ 45.351234][ T3500] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 45.371228][ T3500] RSP: 002b:00007ffde15ae1a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 45.379634][ T3500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbbf60dfb1a
[ 45.387591][ T3500] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffde15ae1c0
[ 45.395570][ T3500] RBP: 00007ffde15ae1c0 R08: 00007ffde15ae200 R09: 0000000000001107
[ 45.404221][ T3500] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000004
[ 45.412255][ T3500] R13: 00005555567102c0 R14: 0000000000000080 R15: 00007ffde15ae200
[ 45.420223][ T3500]
[ 45.423221][ T3500]
[ 45.425518][ T3500] The buggy address belongs to the page:
[ 45.431119][ T3500] page:ffffea0001fd0740 refcount:3 mapcount:0 mapping:ffff8880182b88b0 index:0x213 pfn:0x7f41d
[ 45.441427][ T3500] memcg:ffff888140774000
[ 45.446338][ T3500] aops:def_blk_aops ino:700000
[ 45.451098][ T3500] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 45.460442][ T3500] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff8880182b88b0
[ 45.469003][ T3500] raw: 0000000000000213 ffff8880735ad740 00000003ffffffff ffff888140774000
[ 45.477557][ T3500] page dumped because: kasan: bad access detected
[ 45.483940][ T3500] page_owner tracks the page as allocated
[ 45.489632][ T3500] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3500, ts 44850608606, free_ts 44788559332
[ 45.506702][ T3500] get_page_from_freelist+0x322a/0x33c0
[ 45.512255][ T3500] __alloc_pages+0x272/0x700
[ 45.516818][ T3500] __page_cache_alloc+0xd4/0x4a0
[ 45.522326][ T3500] pagecache_get_page+0xa91/0x1010
[ 45.527702][ T3500] __getblk_gfp+0x22a/0xaf0
[ 45.533084][ T3500] search_by_key+0x46d/0x4730
[ 45.537861][ T3500] reiserfs_read_locked_inode+0x23c/0x2950
[ 45.545394][ T3500] reiserfs_fill_super+0x11bf/0x2690
[ 45.551198][ T3500] mount_bdev+0x2c9/0x3f0
[ 45.555526][ T3500] legacy_get_tree+0xeb/0x180
[ 45.560383][ T3500] vfs_get_tree+0x88/0x270
[ 45.564948][ T3500] do_new_mount+0x28b/0xae0
[ 45.569433][ T3500] __se_sys_mount+0x2d5/0x3c0
[ 45.574086][ T3500] do_syscall_64+0x3d/0xb0
[ 45.578477][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.584434][ T3500] page last free stack trace:
[ 45.589093][ T3500] free_unref_page_prepare+0xc34/0xcf0
[ 45.594705][ T3500] free_unref_page_list+0x1f7/0x8e0
[ 45.601519][ T3500] release_pages+0x1bb9/0x1f40
[ 45.606277][ T3500] tlb_finish_mmu+0x177/0x320
[ 45.610940][ T3500] unmap_region+0x304/0x350
[ 45.615421][ T3500] __do_munmap+0x12db/0x1740
[ 45.620082][ T3500] __vm_munmap+0x134/0x230
[ 45.624494][ T3500] __x64_sys_munmap+0x67/0x70
[ 45.629254][ T3500] do_syscall_64+0x3d/0xb0
[ 45.633651][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.639520][ T3500]
[ 45.641835][ T3500] Memory state around the buggy address:
[ 45.647441][ T3500] ffff88807f41de80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.655600][ T3500] ffff88807f41df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.663732][ T3500] >ffff88807f41df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.671968][ T3500] ^
[ 45.677064][ T3500] ffff88807f41e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.685190][ T3500] ffff88807f41e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.693244][ T3500] ==================================================================
[ 45.701287][ T3500] Disabling lock debugging due to kernel taint
[ 45.708233][ T3500] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 45.715439][ T3500] CPU: 1 PID: 3500 Comm: syz-executor104 Tainted: G B 5.15.118-syzkaller #0
[ 45.725499][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 45.735535][ T3500] Call Trace:
[ 45.738975][ T3500]
[ 45.741893][ T3500] dump_stack_lvl+0x1e3/0x2cb
[ 45.746549][ T3500] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 45.752269][ T3500] ? panic+0x84d/0x84d
[ 45.756705][ T3500] ? rcu_is_watching+0x11/0xa0
[ 45.761565][ T3500] ? preempt_schedule_common+0xa6/0xd0
[ 45.767015][ T3500] panic+0x318/0x84d
[ 45.770895][ T3500] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 45.777200][ T3500] ? check_panic_on_warn+0x1d/0xa0
[ 45.782375][ T3500] ? fb_is_primary_device+0xcc/0xcc
[ 45.787646][ T3500] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 45.793617][ T3500] ? _raw_spin_unlock+0x40/0x40
[ 45.798462][ T3500] check_panic_on_warn+0x7e/0xa0
[ 45.803555][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 45.808817][ T3500] end_report+0x6d/0xf0
[ 45.812949][ T3500] kasan_report+0x18e/0x1c0
[ 45.817443][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 45.822807][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 45.828184][ T3500] kasan_check_range+0x27e/0x290
[ 45.834222][ T3500] ? leaf_paste_entries+0x95f/0x13a0
[ 45.840021][ T3500] memmove+0x25/0x60
[ 45.843905][ T3500] leaf_paste_entries+0x95f/0x13a0
[ 45.849551][ T3500] balance_leaf+0xbd1e/0x12510
[ 45.854309][ T3500] ? print_irqtrace_events+0x210/0x210
[ 45.859750][ T3500] ? do_raw_spin_unlock+0x137/0x8b0
[ 45.865047][ T3500] ? lockdep_hardirqs_on+0x94/0x130
[ 45.870255][ T3500] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 45.876401][ T3500] ? _raw_spin_unlock+0x40/0x40
[ 45.881327][ T3500] ? stack_trace_save+0x113/0x1c0
[ 45.886324][ T3500] ? do_balance+0x8f0/0x8f0
[ 45.890800][ T3500] ? __lock_acquire+0x1295/0x1ff0
[ 45.895801][ T3500] ? stack_depot_save+0x3db/0x440
[ 45.900840][ T3500] ? ____kasan_kmalloc+0xd1/0xf0
[ 45.905763][ T3500] ? ____kasan_kmalloc+0xba/0xf0
[ 45.910674][ T3500] ? __kmalloc+0x168/0x300
[ 45.915067][ T3500] ? fix_nodes+0x69aa/0x8c70
[ 45.919813][ T3500] ? reiserfs_paste_into_item+0x65d/0x880
[ 45.925504][ T3500] ? reiserfs_add_entry+0x9b8/0xd70
[ 45.930761][ T3500] ? reiserfs_mkdir+0x6bc/0x8f0
[ 45.935584][ T3500] ? reiserfs_xattr_init+0x348/0x730
[ 45.940946][ T3500] ? reiserfs_fill_super+0x226a/0x2690
[ 45.946375][ T3500] ? mount_bdev+0x2c9/0x3f0
[ 45.950945][ T3500] ? legacy_get_tree+0xeb/0x180
[ 45.955858][ T3500] ? vfs_get_tree+0x88/0x270
[ 45.960512][ T3500] ? do_new_mount+0x28b/0xae0
[ 45.965162][ T3500] ? __se_sys_mount+0x2d5/0x3c0
[ 45.969988][ T3500] ? do_syscall_64+0x3d/0xb0
[ 45.974554][ T3500] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 45.980686][ T3500] ? get_parents+0x513/0xfa0
[ 45.985253][ T3500] ? __wake_up_bit+0x190/0x190
[ 45.990001][ T3500] ? set_parameters+0x8d0/0x8d0
[ 45.994824][ T3500] ? get_neighbors+0x631/0x1010
[ 45.999673][ T3500] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 46.005923][ T3500] ? fix_nodes+0x7abc/0x8c70
[ 46.010490][ T3500] ? __might_sleep+0xc0/0xc0
[ 46.015065][ T3500] do_balance+0x309/0x8f0
[ 46.019388][ T3500] ? get_right_neighbor_position+0x210/0x210
[ 46.025350][ T3500] ? reiserfs_paste_into_item+0x3ef/0x880
[ 46.031049][ T3500] reiserfs_paste_into_item+0x73b/0x880
[ 46.036583][ T3500] ? reiserfs_cut_from_item+0x2560/0x2560
[ 46.042301][ T3500] ? reiserfs_get_parent+0x2c0/0x2c0
[ 46.047792][ T3500] ? inode_get_bytes+0x72/0xa0
[ 46.052732][ T3500] ? _find_first_zero_bit+0x60/0xf0
[ 46.057922][ T3500] reiserfs_add_entry+0x9b8/0xd70
[ 46.063049][ T3500] ? drop_new_inode+0x60/0x60
[ 46.068130][ T3500] ? do_journal_begin_r+0xdad/0x1000
[ 46.073832][ T3500] ? journal_begin+0x1ef/0x350
[ 46.078784][ T3500] reiserfs_mkdir+0x6bc/0x8f0
[ 46.083442][ T3500] ? __might_sleep+0xc0/0xc0
[ 46.088114][ T3500] ? reiserfs_symlink+0x720/0x720
[ 46.093202][ T3500] ? down_write+0x10e/0x170
[ 46.097680][ T3500] ? __up_read+0x690/0x690
[ 46.102076][ T3500] reiserfs_xattr_init+0x348/0x730
[ 46.107225][ T3500] reiserfs_fill_super+0x226a/0x2690
[ 46.112499][ T3500] ? reiserfs_kill_sb+0x150/0x150
[ 46.117849][ T3500] ? snprintf+0xd6/0x120
[ 46.122084][ T3500] mount_bdev+0x2c9/0x3f0
[ 46.126393][ T3500] ? reiserfs_kill_sb+0x150/0x150
[ 46.131395][ T3500] legacy_get_tree+0xeb/0x180
[ 46.136148][ T3500] ? remove_save_link+0x540/0x540
[ 46.141235][ T3500] vfs_get_tree+0x88/0x270
[ 46.145630][ T3500] do_new_mount+0x28b/0xae0
[ 46.150111][ T3500] ? do_move_mount_old+0x160/0x160
[ 46.155460][ T3500] ? user_path_at_empty+0x12b/0x180
[ 46.160817][ T3500] __se_sys_mount+0x2d5/0x3c0
[ 46.165564][ T3500] ? __x64_sys_mount+0xc0/0xc0
[ 46.170334][ T3500] ? syscall_enter_from_user_mode+0x2e/0x230
[ 46.176286][ T3500] ? lockdep_hardirqs_on+0x94/0x130
[ 46.181459][ T3500] ? __x64_sys_mount+0x1c/0xc0
[ 46.186218][ T3500] do_syscall_64+0x3d/0xb0
[ 46.190611][ T3500] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 46.196482][ T3500] RIP: 0033:0x7fbbf60dfb1a
[ 46.200875][ T3500] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 46.220463][ T3500] RSP: 002b:00007ffde15ae1a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 46.229026][ T3500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbbf60dfb1a
[ 46.237159][ T3500] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffde15ae1c0
[ 46.245143][ T3500] RBP: 00007ffde15ae1c0 R08: 00007ffde15ae200 R09: 0000000000001107
[ 46.253094][ T3500] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000004
[ 46.261038][ T3500] R13: 00005555567102c0 R14: 0000000000000080 R15: 00007ffde15ae200
[ 46.268989][ T3500]
[ 46.272190][ T3500] Kernel Offset: disabled
[ 46.276671][ T3500] Rebooting in 86400 seconds..