Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. executing program [ 64.807398][ T3546] loop0: detected capacity change from 0 to 8192 [ 64.818862][ T3546] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.832054][ T3546] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 64.841586][ T3546] REISERFS (device loop0): using ordered data mode [ 64.848309][ T3546] reiserfs: using flush barriers [ 64.854826][ T3546] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.871446][ T3546] REISERFS (device loop0): checking transaction log (loop0) [ 64.881612][ T3546] REISERFS (device loop0): Using r5 hash to sort names [ 64.894957][ T3546] reiserfs: enabling write barrier flush mode [ 64.907735][ T3546] ================================================================== [ 64.915845][ T3546] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 64.923451][ T3546] Read of size 18446744073709551587 at addr ffff8880700defa4 by task syz-executor899/3546 [ 64.933369][ T3546] [ 64.935701][ T3546] CPU: 1 PID: 3546 Comm: syz-executor899 Not tainted 6.1.53-syzkaller #0 [ 64.944131][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 64.954188][ T3546] Call Trace: [ 64.957498][ T3546] [ 64.960520][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 64.965308][ T3546] ? irq_work_queue+0xc6/0x150 [ 64.970087][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 64.975659][ T3546] ? panic+0x75d/0x75d [ 64.979738][ T3546] ? _printk+0xd1/0x111 [ 64.983922][ T3546] ? _raw_spin_lock_irqsave+0xac/0x120 [ 64.989573][ T3546] print_report+0x15f/0x4f0 [ 64.994085][ T3546] ? __lock_acquire+0x125b/0x1f80 [ 64.999121][ T3546] ? __virt_addr_valid+0x22b/0x2e0 [ 65.004258][ T3546] ? __phys_addr+0xb6/0x170 [ 65.008816][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.014117][ T3546] kasan_report+0x136/0x160 [ 65.018637][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.023936][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.029242][ T3546] kasan_check_range+0x27f/0x290 [ 65.034200][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.039488][ T3546] memmove+0x25/0x60 [ 65.043416][ T3546] leaf_paste_entries+0x95f/0x13a0 [ 65.048541][ T3546] balance_leaf+0xbd1e/0x12510 [ 65.053345][ T3546] ? print_irqtrace_events+0x210/0x210 [ 65.058814][ T3546] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 65.064722][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 65.069585][ T3546] ? stack_trace_save+0x113/0x1c0 [ 65.074641][ T3546] ? stack_trace_snprint+0xe0/0xe0 [ 65.079779][ T3546] ? do_balance+0x8f0/0x8f0 [ 65.084298][ T3546] ? __stack_depot_save+0x3f5/0x470 [ 65.089516][ T3546] ? kasan_set_track+0x60/0x70 [ 65.094287][ T3546] ? kasan_set_track+0x4b/0x70 [ 65.099057][ T3546] ? __kasan_kmalloc+0x97/0xb0 [ 65.103823][ T3546] ? __kmalloc+0xb2/0x230 [ 65.108174][ T3546] ? fix_nodes+0x69aa/0x8c70 [ 65.112790][ T3546] ? reiserfs_paste_into_item+0x65d/0x880 [ 65.118557][ T3546] ? reiserfs_add_entry+0x9b8/0xd70 [ 65.123922][ T3546] ? reiserfs_mkdir+0x6bc/0x8f0 [ 65.128847][ T3546] ? reiserfs_xattr_init+0x348/0x730 [ 65.134166][ T3546] ? reiserfs_remount+0x12b8/0x18e0 [ 65.139403][ T3546] ? reconfigure_super+0x43a/0x870 [ 65.144553][ T3546] ? path_mount+0xe69/0x1090 [ 65.149163][ T3546] ? __se_sys_mount+0x2d5/0x3c0 [ 65.154027][ T3546] ? do_syscall_64+0x3d/0xb0 [ 65.158652][ T3546] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.164737][ T3546] ? __wake_up+0x1c0/0x1c0 [ 65.169157][ T3546] ? get_parents+0x513/0xfa0 [ 65.173763][ T3546] ? set_parameters+0x8d0/0x8d0 [ 65.178623][ T3546] ? get_neighbors+0x631/0x1010 [ 65.183485][ T3546] ? reiserfs_prepare_for_journal+0x269/0x280 [ 65.189564][ T3546] ? fix_nodes+0x7abc/0x8c70 [ 65.194173][ T3546] ? __might_sleep+0xb0/0xb0 [ 65.198786][ T3546] do_balance+0x309/0x8f0 [ 65.203127][ T3546] ? get_right_neighbor_position+0x210/0x210 [ 65.209124][ T3546] ? reiserfs_paste_into_item+0x3ef/0x880 [ 65.214853][ T3546] reiserfs_paste_into_item+0x73b/0x880 [ 65.220410][ T3546] ? reiserfs_cut_from_item+0x2580/0x2580 [ 65.226186][ T3546] ? reiserfs_get_parent+0x2c0/0x2c0 [ 65.231502][ T3546] ? inode_get_bytes+0x72/0xa0 [ 65.236290][ T3546] ? _find_first_zero_bit+0x61/0x100 [ 65.241590][ T3546] reiserfs_add_entry+0x9b8/0xd70 [ 65.246636][ T3546] ? drop_new_inode+0x60/0x60 [ 65.251336][ T3546] ? do_journal_begin_r+0xdc9/0x1020 [ 65.256647][ T3546] ? journal_begin+0x1ef/0x350 [ 65.261437][ T3546] reiserfs_mkdir+0x6bc/0x8f0 [ 65.266150][ T3546] ? reiserfs_symlink+0x720/0x720 [ 65.271198][ T3546] ? rwsem_write_trylock+0x166/0x210 [ 65.276527][ T3546] ? mutex_unlock+0x10/0x10 [ 65.281052][ T3546] reiserfs_xattr_init+0x348/0x730 [ 65.286192][ T3546] reiserfs_remount+0x12b8/0x18e0 [ 65.291240][ T3546] ? reiserfs_statfs+0x380/0x380 [ 65.296193][ T3546] ? shrink_dcache_sb+0x3be/0x410 [ 65.301233][ T3546] ? dentry_lru_isolate+0x2f0/0x2f0 [ 65.306443][ T3546] ? hook_sb_remount+0x19/0xc0 [ 65.311298][ T3546] reconfigure_super+0x43a/0x870 [ 65.316276][ T3546] path_mount+0xe69/0x1090 [ 65.320714][ T3546] ? user_path_at_empty+0x12b/0x180 [ 65.325924][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 65.330619][ T3546] ? __x64_sys_mount+0xc0/0xc0 [ 65.335399][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 65.341394][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 65.346629][ T3546] ? __x64_sys_mount+0x1c/0xc0 [ 65.351483][ T3546] do_syscall_64+0x3d/0xb0 [ 65.355908][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.361805][ T3546] RIP: 0033:0x7f6c942b6eba [ 65.366362][ T3546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.385971][ T3546] RSP: 002b:00007fff3bd3ba88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 65.394408][ T3546] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f6c942b6eba [ 65.402386][ T3546] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 65.410362][ T3546] RBP: 00007fff3bd3bb20 R08: 00007fff3bd3bb20 R09: 0000000000000000 [ 65.418356][ T3546] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 65.426332][ T3546] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 65.434320][ T3546] [ 65.437357][ T3546] [ 65.439679][ T3546] The buggy address belongs to the physical page: [ 65.446098][ T3546] page:ffffea0001c03780 refcount:2 mapcount:0 mapping:ffff888140c949f8 index:0x213 pfn:0x700de [ 65.456430][ T3546] memcg:ffff88813fe10000 [ 65.460667][ T3546] aops:def_blk_aops ino:700000 [ 65.465439][ T3546] flags: 0xfff38000002052(referenced|lru|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 65.475530][ T3546] raw: 00fff38000002052 ffffea0001c03748 ffffea0001fb2dc8 ffff888140c949f8 [ 65.484308][ T3546] raw: 0000000000000213 ffff888072fe6ae0 00000002ffffffff ffff88813fe10000 [ 65.492917][ T3546] page dumped because: kasan: bad access detected [ 65.499329][ T3546] page_owner tracks the page as allocated [ 65.505041][ T3546] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3546, tgid 3546 (syz-executor899), ts 64881292926, free_ts 58437341214 [ 65.525642][ T3546] post_alloc_hook+0x18d/0x1b0 [ 65.530431][ T3546] get_page_from_freelist+0x32ed/0x3480 [ 65.535985][ T3546] __alloc_pages+0x28d/0x770 [ 65.540598][ T3546] folio_alloc+0x1a/0x50 [ 65.544929][ T3546] filemap_alloc_folio+0xda/0x4f0 [ 65.550049][ T3546] __filemap_get_folio+0x711/0xe30 [ 65.555171][ T3546] pagecache_get_page+0x28/0x250 [ 65.560118][ T3546] __getblk_gfp+0x211/0xa20 [ 65.564642][ T3546] search_by_key+0x460/0x4b60 [ 65.569349][ T3546] reiserfs_read_locked_inode+0x23c/0x2950 [ 65.575186][ T3546] reiserfs_fill_super+0x135f/0x2620 [ 65.580493][ T3546] mount_bdev+0x2c9/0x3f0 [ 65.584862][ T3546] legacy_get_tree+0xeb/0x180 [ 65.589563][ T3546] vfs_get_tree+0x88/0x270 [ 65.594001][ T3546] do_new_mount+0x28b/0xae0 [ 65.598519][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 65.603205][ T3546] page last free stack trace: [ 65.607880][ T3546] free_unref_page_prepare+0xf63/0x1120 [ 65.613452][ T3546] free_unref_page_list+0x107/0x810 [ 65.618651][ T3546] release_pages+0x2836/0x2b40 [ 65.623429][ T3546] tlb_flush_mmu+0xfc/0x210 [ 65.627966][ T3546] tlb_finish_mmu+0xce/0x1f0 [ 65.632577][ T3546] unmap_region+0x29f/0x2f0 [ 65.637103][ T3546] do_mas_align_munmap+0xe93/0x15c0 [ 65.642317][ T3546] do_mas_munmap+0x246/0x2b0 [ 65.646920][ T3546] __vm_munmap+0x268/0x370 [ 65.651346][ T3546] __x64_sys_munmap+0x5c/0x70 [ 65.656037][ T3546] do_syscall_64+0x3d/0xb0 [ 65.660456][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.666358][ T3546] [ 65.668692][ T3546] Memory state around the buggy address: [ 65.674331][ T3546] ffff8880700dee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.682390][ T3546] ffff8880700def00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.690624][ T3546] >ffff8880700def80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.698681][ T3546] ^ [ 65.703792][ T3546] ffff8880700df000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.711855][ T3546] ffff8880700df080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.719915][ T3546] ================================================================== [ 65.728282][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.735512][ T3546] CPU: 0 PID: 3546 Comm: syz-executor899 Not tainted 6.1.53-syzkaller #0 [ 65.744043][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 65.754161][ T3546] Call Trace: [ 65.757536][ T3546] [ 65.760818][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 65.765511][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 65.770980][ T3546] ? panic+0x75d/0x75d [ 65.775060][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 65.780528][ T3546] ? vscnprintf+0x59/0x80 [ 65.784873][ T3546] panic+0x318/0x75d [ 65.788782][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 65.793905][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 65.799312][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 65.805307][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 65.810169][ T3546] ? print_report+0x4a3/0x4f0 [ 65.814852][ T3546] check_panic_on_warn+0x7e/0xa0 [ 65.819800][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.825106][ T3546] end_report+0x66/0x110 [ 65.829381][ T3546] kasan_report+0x143/0x160 [ 65.833914][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.839219][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.844521][ T3546] kasan_check_range+0x27f/0x290 [ 65.849471][ T3546] ? leaf_paste_entries+0x95f/0x13a0 [ 65.854760][ T3546] memmove+0x25/0x60 [ 65.858662][ T3546] leaf_paste_entries+0x95f/0x13a0 [ 65.863786][ T3546] balance_leaf+0xbd1e/0x12510 [ 65.868570][ T3546] ? print_irqtrace_events+0x210/0x210 [ 65.874044][ T3546] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 65.879954][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 65.884817][ T3546] ? stack_trace_save+0x113/0x1c0 [ 65.889846][ T3546] ? stack_trace_snprint+0xe0/0xe0 [ 65.895050][ T3546] ? do_balance+0x8f0/0x8f0 [ 65.899564][ T3546] ? __stack_depot_save+0x3f5/0x470 [ 65.904776][ T3546] ? kasan_set_track+0x60/0x70 [ 65.909544][ T3546] ? kasan_set_track+0x4b/0x70 [ 65.914336][ T3546] ? __kasan_kmalloc+0x97/0xb0 [ 65.919101][ T3546] ? __kmalloc+0xb2/0x230 [ 65.923451][ T3546] ? fix_nodes+0x69aa/0x8c70 [ 65.928068][ T3546] ? reiserfs_paste_into_item+0x65d/0x880 [ 65.934088][ T3546] ? reiserfs_add_entry+0x9b8/0xd70 [ 65.939321][ T3546] ? reiserfs_mkdir+0x6bc/0x8f0 [ 65.944208][ T3546] ? reiserfs_xattr_init+0x348/0x730 [ 65.949510][ T3546] ? reiserfs_remount+0x12b8/0x18e0 [ 65.954725][ T3546] ? reconfigure_super+0x43a/0x870 [ 65.959854][ T3546] ? path_mount+0xe69/0x1090 [ 65.964543][ T3546] ? __se_sys_mount+0x2d5/0x3c0 [ 65.969403][ T3546] ? do_syscall_64+0x3d/0xb0 [ 65.974001][ T3546] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.980090][ T3546] ? __wake_up+0x1c0/0x1c0 [ 65.984509][ T3546] ? get_parents+0x513/0xfa0 [ 65.989114][ T3546] ? set_parameters+0x8d0/0x8d0 [ 65.993989][ T3546] ? get_neighbors+0x631/0x1010 [ 65.998882][ T3546] ? reiserfs_prepare_for_journal+0x269/0x280 [ 66.004982][ T3546] ? fix_nodes+0x7abc/0x8c70 [ 66.009614][ T3546] ? __might_sleep+0xb0/0xb0 [ 66.014224][ T3546] do_balance+0x309/0x8f0 [ 66.018566][ T3546] ? get_right_neighbor_position+0x210/0x210 [ 66.024738][ T3546] ? reiserfs_paste_into_item+0x3ef/0x880 [ 66.030601][ T3546] reiserfs_paste_into_item+0x73b/0x880 [ 66.036187][ T3546] ? reiserfs_cut_from_item+0x2580/0x2580 [ 66.041991][ T3546] ? reiserfs_get_parent+0x2c0/0x2c0 [ 66.047295][ T3546] ? inode_get_bytes+0x72/0xa0 [ 66.052072][ T3546] ? _find_first_zero_bit+0x61/0x100 [ 66.057374][ T3546] reiserfs_add_entry+0x9b8/0xd70 [ 66.062413][ T3546] ? drop_new_inode+0x60/0x60 [ 66.067096][ T3546] ? do_journal_begin_r+0xdc9/0x1020 [ 66.072409][ T3546] ? journal_begin+0x1ef/0x350 [ 66.077183][ T3546] reiserfs_mkdir+0x6bc/0x8f0 [ 66.081877][ T3546] ? reiserfs_symlink+0x720/0x720 [ 66.086912][ T3546] ? rwsem_write_trylock+0x166/0x210 [ 66.092216][ T3546] ? mutex_unlock+0x10/0x10 [ 66.096732][ T3546] reiserfs_xattr_init+0x348/0x730 [ 66.101861][ T3546] reiserfs_remount+0x12b8/0x18e0 [ 66.106992][ T3546] ? reiserfs_statfs+0x380/0x380 [ 66.111942][ T3546] ? shrink_dcache_sb+0x3be/0x410 [ 66.116978][ T3546] ? dentry_lru_isolate+0x2f0/0x2f0 [ 66.122190][ T3546] ? hook_sb_remount+0x19/0xc0 [ 66.126981][ T3546] reconfigure_super+0x43a/0x870 [ 66.131935][ T3546] path_mount+0xe69/0x1090 [ 66.136377][ T3546] ? user_path_at_empty+0x12b/0x180 [ 66.141590][ T3546] __se_sys_mount+0x2d5/0x3c0 [ 66.146296][ T3546] ? __x64_sys_mount+0xc0/0xc0 [ 66.151282][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 66.157272][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 66.162478][ T3546] ? __x64_sys_mount+0x1c/0xc0 [ 66.167256][ T3546] do_syscall_64+0x3d/0xb0 [ 66.171678][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.177666][ T3546] RIP: 0033:0x7f6c942b6eba [ 66.182088][ T3546] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.201718][ T3546] RSP: 002b:00007fff3bd3ba88 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 66.210144][ T3546] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f6c942b6eba [ 66.218120][ T3546] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 66.226092][ T3546] RBP: 00007fff3bd3bb20 R08: 00007fff3bd3bb20 R09: 0000000000000000 [ 66.234064][ T3546] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100 [ 66.242038][ T3546] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80 [ 66.250017][ T3546] [ 66.253292][ T3546] Kernel Offset: disabled [ 66.257617][ T3546] Rebooting in 86400 seconds..