Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. executing program [ 54.549801][ T3546] loop0: detected capacity change from 0 to 8192 [ 54.559712][ T3546] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 54.573062][ T3546] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 54.582529][ T3546] REISERFS (device loop0): using ordered data mode [ 54.589513][ T3546] reiserfs: using flush barriers [ 54.595845][ T3546] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.612316][ T3546] REISERFS (device loop0): checking transaction log (loop0) [ 54.669791][ T3546] REISERFS (device loop0): Using r5 hash to sort names [ 54.676889][ T3546] REISERFS (device loop0): using 3.5.x disk format [ 54.684196][ T3546] ================================================================== [ 54.692252][ T3546] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 54.699803][ T3546] Read of size 18446744073709551584 at addr ffff8880702c4fa4 by task syz-executor484/3546 [ 54.709668][ T3546] [ 54.711976][ T3546] CPU: 0 PID: 3546 Comm: syz-executor484 Not tainted 6.1.58-syzkaller #0 [ 54.720365][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 54.730420][ T3546] Call Trace: [ 54.733690][ T3546] [ 54.736608][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 54.741285][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 54.746734][ T3546] ? panic+0x75d/0x75d [ 54.750787][ T3546] ? _printk+0xd1/0x111 [ 54.754952][ T3546] ? _raw_spin_lock_irqsave+0xac/0x120 [ 54.760398][ T3546] print_report+0x15f/0x4f0 [ 54.764910][ T3546] ? __lock_acquire+0x125b/0x1f80 [ 54.769945][ T3546] ? __virt_addr_valid+0x22b/0x2e0 [ 54.775046][ T3546] ? __phys_addr+0xb6/0x170 [ 54.779535][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 54.784820][ T3546] kasan_report+0x136/0x160 [ 54.789321][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 54.794595][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 54.799875][ T3546] kasan_check_range+0x27f/0x290 [ 54.804803][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 54.810072][ T3546] memmove+0x25/0x60 [ 54.813949][ T3546] leaf_paste_entries+0x95f/0x13a0 [ 54.819071][ T3546] balance_leaf+0xbd1e/0x12510 [ 54.823837][ T3546] ? print_irqtrace_events+0x210/0x210 [ 54.829297][ T3546] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.835180][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 54.840014][ T3546] ? stack_trace_save+0x113/0x1c0 [ 54.845026][ T3546] ? stack_trace_snprint+0xe0/0xe0 [ 54.850122][ T3546] ? do_balance+0x8f0/0x8f0 [ 54.854613][ T3546] ? __stack_depot_save+0x3f5/0x470 [ 54.859798][ T3546] ? kasan_set_track+0x60/0x70 [ 54.864564][ T3546] ? kasan_set_track+0x4b/0x70 [ 54.869317][ T3546] ? __kasan_kmalloc+0x97/0xb0 [ 54.874069][ T3546] ? __kmalloc+0xb2/0x230 [ 54.878390][ T3546] ? fix_nodes+0x69aa/0x8c70 [ 54.882965][ T3546] ? reiserfs_paste_into_item+0x65d/0x880 [ 54.888682][ T3546] ? reiserfs_add_entry+0x9b8/0xd70 [ 54.893872][ T3546] ? reiserfs_mkdir+0x6bc/0x8f0 [ 54.898733][ T3546] ? reiserfs_xattr_init+0x348/0x730 [ 54.904262][ T3546] ? reiserfs_fill_super+0x2203/0x2620 [ 54.909704][ T3546] ? mount_bdev+0x2c9/0x3f0 [ 54.914199][ T3546] ? legacy_get_tree+0xeb/0x180 [ 54.919052][ T3546] ? vfs_get_tree+0x88/0x270 [ 54.923629][ T3546] ? do_new_mount+0x28b/0xae0 [ 54.928290][ T3546] ? __se_sys_mount+0x2d5/0x3c0 [ 54.933129][ T3546] ? do_syscall_64+0x3d/0xb0 [ 54.937714][ T3546] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.943775][ T3546] ? __wake_up+0x1c0/0x1c0 [ 54.948184][ T3546] ? get_parents+0x513/0xfa0 [ 54.952765][ T3546] ? set_parameters+0x8d0/0x8d0 [ 54.957602][ T3546] ? get_neighbors+0x631/0x1010 [ 54.962443][ T3546] ? reiserfs_prepare_for_journal+0x269/0x280 [ 54.968535][ T3546] ? fix_nodes+0x7abc/0x8c70 [ 54.973115][ T3546] ? read_lock_is_recursive+0x10/0x10 [ 54.978493][ T3546] do_balance+0x309/0x8f0 [ 54.982841][ T3546] ? get_right_neighbor_position+0x210/0x210 [ 54.988829][ T3546] ? reiserfs_paste_into_item+0x3ef/0x880 [ 54.994543][ T3546] reiserfs_paste_into_item+0x73b/0x880 [ 55.000085][ T3546] ? reiserfs_cut_from_item+0x2580/0x2580 [ 55.005820][ T3546] ? reiserfs_get_parent+0x2c0/0x2c0 [ 55.011098][ T3546] ? inode_get_bytes+0x72/0xa0 [ 55.015851][ T3546] ? _find_first_zero_bit+0x61/0x100 [ 55.021122][ T3546] reiserfs_add_entry+0x9b8/0xd70 [ 55.026139][ T3546] ? drop_new_inode+0x60/0x60 [ 55.030804][ T3546] ? do_journal_begin_r+0xdc9/0x1020 [ 55.036089][ T3546] ? journal_begin+0x1ef/0x350 [ 55.040839][ T3546] reiserfs_mkdir+0x6bc/0x8f0 [ 55.045520][ T3546] ? reiserfs_symlink+0x720/0x720 [ 55.050538][ T3546] ? rwsem_write_trylock+0x166/0x210 [ 55.055821][ T3546] ? __up_read+0x690/0x690 [ 55.060233][ T3546] reiserfs_xattr_init+0x348/0x730 [ 55.065350][ T3546] reiserfs_fill_super+0x2203/0x2620 [ 55.070635][ T3546] ? reiserfs_kill_sb+0x150/0x150 [ 55.075659][ T3546] ? snprintf+0xd6/0x120 [ 55.079895][ T3546] mount_bdev+0x2c9/0x3f0 [ 55.084213][ T3546] ? reiserfs_kill_sb+0x150/0x150 [ 55.089222][ T3546] legacy_get_tree+0xeb/0x180 [ 55.093886][ T3546] ? remove_save_link+0x540/0x540 [ 55.098894][ T3546] vfs_get_tree+0x88/0x270 [ 55.103307][ T3546] do_new_mount+0x28b/0xae0 [ 55.107822][ T3546] ? do_move_mount_old+0x160/0x160 [ 55.112940][ T3546] ? user_path_at_empty+0x12b/0x180 [ 55.118131][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 55.122799][ T3546] ? __x64_sys_mount+0xc0/0xc0 [ 55.127554][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 55.133554][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 55.138767][ T3546] ? __x64_sys_mount+0x1c/0xc0 [ 55.143549][ T3546] do_syscall_64+0x3d/0xb0 [ 55.147973][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.153856][ T3546] RIP: 0033:0x7f5efbbb188a [ 55.158255][ T3546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.177841][ T3546] RSP: 002b:00007ffdf3525688 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.186267][ T3546] RAX: ffffffffffffffda RBX: 00007ffdf35256a0 RCX: 00007f5efbbb188a [ 55.194225][ T3546] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffdf35256a0 [ 55.202179][ T3546] RBP: 0000000000000004 R08: 00007ffdf35256e0 R09: 00000000000010f4 [ 55.210147][ T3546] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080 [ 55.218126][ T3546] R13: 00007ffdf35256e0 R14: 0000000000000003 R15: 0000000000400000 [ 55.226116][ T3546] [ 55.229123][ T3546] [ 55.231429][ T3546] The buggy address belongs to the physical page: [ 55.237822][ T3546] page:ffffea0001c0b100 refcount:3 mapcount:0 mapping:ffff88801e4cc9f8 index:0x213 pfn:0x702c4 [ 55.248142][ T3546] memcg:ffff88813fe30000 [ 55.252367][ T3546] aops:def_blk_aops ino:700000 [ 55.257120][ T3546] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 55.266823][ T3546] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff88801e4cc9f8 [ 55.275388][ T3546] raw: 0000000000000213 ffff8880737ece80 00000003ffffffff ffff88813fe30000 [ 55.283959][ T3546] page dumped because: kasan: bad access detected [ 55.290366][ T3546] page_owner tracks the page as allocated [ 55.296060][ T3546] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3546, tgid 3546 (syz-executor484), ts 54669457163, free_ts 14551074668 [ 55.316705][ T3546] post_alloc_hook+0x18d/0x1b0 [ 55.321476][ T3546] get_page_from_freelist+0x31a1/0x3320 [ 55.327032][ T3546] __alloc_pages+0x28d/0x770 [ 55.331623][ T3546] folio_alloc+0x1a/0x50 [ 55.335867][ T3546] filemap_alloc_folio+0xda/0x4f0 [ 55.340881][ T3546] __filemap_get_folio+0x749/0xe80 [ 55.346016][ T3546] pagecache_get_page+0x28/0x250 [ 55.350953][ T3546] __getblk_gfp+0x211/0xa20 [ 55.355450][ T3546] search_by_key+0x460/0x4b60 [ 55.360116][ T3546] reiserfs_read_locked_inode+0x23c/0x2950 [ 55.365924][ T3546] reiserfs_fill_super+0x135f/0x2620 [ 55.371199][ T3546] mount_bdev+0x2c9/0x3f0 [ 55.375533][ T3546] legacy_get_tree+0xeb/0x180 [ 55.380206][ T3546] vfs_get_tree+0x88/0x270 [ 55.384613][ T3546] do_new_mount+0x28b/0xae0 [ 55.389117][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 55.393795][ T3546] page last free stack trace: [ 55.398450][ T3546] free_unref_page_prepare+0xf63/0x1120 [ 55.403992][ T3546] free_unref_page+0x33/0x3e0 [ 55.408680][ T3546] free_contig_range+0x9a/0x150 [ 55.413565][ T3546] destroy_args+0xfe/0x997 [ 55.417965][ T3546] debug_vm_pgtable+0x416/0x46b [ 55.422800][ T3546] do_one_initcall+0x265/0x8f0 [ 55.427557][ T3546] do_initcall_level+0x157/0x207 [ 55.432486][ T3546] do_initcalls+0x49/0x86 [ 55.436807][ T3546] kernel_init_freeable+0x45c/0x60f [ 55.441992][ T3546] kernel_init+0x19/0x290 [ 55.446310][ T3546] ret_from_fork+0x1f/0x30 [ 55.450718][ T3546] [ 55.453040][ T3546] Memory state around the buggy address: [ 55.458654][ T3546] ffff8880702c4e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.466700][ T3546] ffff8880702c4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.474753][ T3546] >ffff8880702c4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.482802][ T3546] ^ [ 55.487899][ T3546] ffff8880702c5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.495977][ T3546] ffff8880702c5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.504026][ T3546] ================================================================== [ 55.513035][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.520255][ T3546] CPU: 1 PID: 3546 Comm: syz-executor484 Not tainted 6.1.58-syzkaller #0 [ 55.528673][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 55.538765][ T3546] Call Trace: [ 55.542036][ T3546] [ 55.544983][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 55.549668][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 55.555126][ T3546] ? panic+0x75d/0x75d [ 55.559192][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 55.564667][ T3546] ? vscnprintf+0x59/0x80 [ 55.568991][ T3546] panic+0x318/0x75d [ 55.572894][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 55.578000][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 55.583379][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 55.589453][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 55.594321][ T3546] ? print_report+0x4a3/0x4f0 [ 55.599005][ T3546] check_panic_on_warn+0x7e/0xa0 [ 55.603937][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 55.609229][ T3546] end_report+0x66/0x110 [ 55.613502][ T3546] kasan_report+0x143/0x160 [ 55.618024][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 55.623313][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 55.628607][ T3546] kasan_check_range+0x27f/0x290 [ 55.633560][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 55.638854][ T3546] memmove+0x25/0x60 [ 55.642756][ T3546] leaf_paste_entries+0x95f/0x13a0 [ 55.647884][ T3546] balance_leaf+0xbd1e/0x12510 [ 55.652665][ T3546] ? print_irqtrace_events+0x210/0x210 [ 55.658136][ T3546] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 55.664036][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 55.668887][ T3546] ? stack_trace_save+0x113/0x1c0 [ 55.673918][ T3546] ? stack_trace_snprint+0xe0/0xe0 [ 55.679029][ T3546] ? do_balance+0x8f0/0x8f0 [ 55.683533][ T3546] ? __stack_depot_save+0x3f5/0x470 [ 55.688745][ T3546] ? kasan_set_track+0x60/0x70 [ 55.693513][ T3546] ? kasan_set_track+0x4b/0x70 [ 55.698291][ T3546] ? __kasan_kmalloc+0x97/0xb0 [ 55.703058][ T3546] ? __kmalloc+0xb2/0x230 [ 55.707398][ T3546] ? fix_nodes+0x69aa/0x8c70 [ 55.712004][ T3546] ? reiserfs_paste_into_item+0x65d/0x880 [ 55.717722][ T3546] ? reiserfs_add_entry+0x9b8/0xd70 [ 55.722937][ T3546] ? reiserfs_mkdir+0x6bc/0x8f0 [ 55.727793][ T3546] ? reiserfs_xattr_init+0x348/0x730 [ 55.733071][ T3546] ? reiserfs_fill_super+0x2203/0x2620 [ 55.738532][ T3546] ? mount_bdev+0x2c9/0x3f0 [ 55.743039][ T3546] ? legacy_get_tree+0xeb/0x180 [ 55.747907][ T3546] ? vfs_get_tree+0x88/0x270 [ 55.752495][ T3546] ? do_new_mount+0x28b/0xae0 [ 55.757170][ T3546] ? __se_sys_mount+0x2d5/0x3c0 [ 55.762015][ T3546] ? do_syscall_64+0x3d/0xb0 [ 55.766601][ T3546] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.772681][ T3546] ? __wake_up+0x1c0/0x1c0 [ 55.777113][ T3546] ? get_parents+0x513/0xfa0 [ 55.781698][ T3546] ? set_parameters+0x8d0/0x8d0 [ 55.786546][ T3546] ? get_neighbors+0x631/0x1010 [ 55.791397][ T3546] ? reiserfs_prepare_for_journal+0x269/0x280 [ 55.797470][ T3546] ? fix_nodes+0x7abc/0x8c70 [ 55.802059][ T3546] ? read_lock_is_recursive+0x10/0x10 [ 55.807445][ T3546] do_balance+0x309/0x8f0 [ 55.811776][ T3546] ? get_right_neighbor_position+0x210/0x210 [ 55.817758][ T3546] ? reiserfs_paste_into_item+0x3ef/0x880 [ 55.823482][ T3546] reiserfs_paste_into_item+0x73b/0x880 [ 55.829040][ T3546] ? reiserfs_cut_from_item+0x2580/0x2580 [ 55.834778][ T3546] ? reiserfs_get_parent+0x2c0/0x2c0 [ 55.840060][ T3546] ? inode_get_bytes+0x72/0xa0 [ 55.844825][ T3546] ? _find_first_zero_bit+0x61/0x100 [ 55.850108][ T3546] reiserfs_add_entry+0x9b8/0xd70 [ 55.855136][ T3546] ? drop_new_inode+0x60/0x60 [ 55.859810][ T3546] ? do_journal_begin_r+0xdc9/0x1020 [ 55.865104][ T3546] ? journal_begin+0x1ef/0x350 [ 55.869880][ T3546] reiserfs_mkdir+0x6bc/0x8f0 [ 55.874556][ T3546] ? reiserfs_symlink+0x720/0x720 [ 55.879579][ T3546] ? rwsem_write_trylock+0x166/0x210 [ 55.884882][ T3546] ? __up_read+0x690/0x690 [ 55.889300][ T3546] reiserfs_xattr_init+0x348/0x730 [ 55.894423][ T3546] reiserfs_fill_super+0x2203/0x2620 [ 55.899705][ T3546] ? reiserfs_kill_sb+0x150/0x150 [ 55.904735][ T3546] ? snprintf+0xd6/0x120 [ 55.908982][ T3546] mount_bdev+0x2c9/0x3f0 [ 55.913313][ T3546] ? reiserfs_kill_sb+0x150/0x150 [ 55.918334][ T3546] legacy_get_tree+0xeb/0x180 [ 55.923013][ T3546] ? remove_save_link+0x540/0x540 [ 55.928037][ T3546] vfs_get_tree+0x88/0x270 [ 55.932455][ T3546] do_new_mount+0x28b/0xae0 [ 55.936962][ T3546] ? do_move_mount_old+0x160/0x160 [ 55.942071][ T3546] ? user_path_at_empty+0x12b/0x180 [ 55.947262][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 55.951939][ T3546] ? __x64_sys_mount+0xc0/0xc0 [ 55.956705][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 55.962683][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 55.967881][ T3546] ? __x64_sys_mount+0x1c/0xc0 [ 55.972647][ T3546] do_syscall_64+0x3d/0xb0 [ 55.977067][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.982963][ T3546] RIP: 0033:0x7f5efbbb188a [ 55.987374][ T3546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.006990][ T3546] RSP: 002b:00007ffdf3525688 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 56.015402][ T3546] RAX: ffffffffffffffda RBX: 00007ffdf35256a0 RCX: 00007f5efbbb188a [ 56.023371][ T3546] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffdf35256a0 [ 56.031336][ T3546] RBP: 0000000000000004 R08: 00007ffdf35256e0 R09: 00000000000010f4 [ 56.039300][ T3546] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080 [ 56.047262][ T3546] R13: 00007ffdf35256e0 R14: 0000000000000003 R15: 0000000000400000 [ 56.055231][ T3546] [ 56.058549][ T3546] Kernel Offset: disabled [ 56.062870][ T3546] Rebooting in 86400 seconds..