Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. executing program [ 58.382736][ T3510] loop0: detected capacity change from 0 to 8192 [ 58.393678][ T3510] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.406849][ T3510] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 58.416663][ T3510] REISERFS (device loop0): using ordered data mode [ 58.423294][ T3510] reiserfs: using flush barriers [ 58.429765][ T3510] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.446730][ T3510] REISERFS (device loop0): checking transaction log (loop0) [ 58.510738][ T3510] REISERFS (device loop0): Using r5 hash to sort names [ 58.517866][ T3510] REISERFS (device loop0): using 3.5.x disk format [ 58.525217][ T3510] ================================================================== [ 58.533297][ T3510] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 58.540955][ T3510] Read of size 18446744073709551584 at addr ffff888071772fa4 by task syz-executor401/3510 [ 58.550834][ T3510] [ 58.553172][ T3510] CPU: 0 PID: 3510 Comm: syz-executor401 Not tainted 6.1.45-syzkaller #0 [ 58.561573][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 58.571634][ T3510] Call Trace: [ 58.574904][ T3510] [ 58.577827][ T3510] dump_stack_lvl+0x1e3/0x2cb [ 58.582518][ T3510] ? irq_work_queue+0xc6/0x150 [ 58.587286][ T3510] ? nf_tcp_handle_invalid+0x642/0x642 [ 58.592750][ T3510] ? panic+0x75d/0x75d [ 58.596812][ T3510] ? _printk+0xd1/0x111 [ 58.600959][ T3510] ? _raw_spin_lock_irqsave+0xac/0x120 [ 58.606430][ T3510] print_report+0x15f/0x4f0 [ 58.610927][ T3510] ? __lock_acquire+0x125b/0x1f80 [ 58.615961][ T3510] ? __virt_addr_valid+0x22b/0x2e0 [ 58.621074][ T3510] ? __phys_addr+0xb6/0x170 [ 58.625592][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 58.630872][ T3510] kasan_report+0x136/0x160 [ 58.635374][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 58.640652][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 58.645930][ T3510] kasan_check_range+0x27f/0x290 [ 58.650867][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 58.656148][ T3510] memmove+0x25/0x60 [ 58.660049][ T3510] leaf_paste_entries+0x95f/0x13a0 [ 58.665159][ T3510] balance_leaf+0xbd1e/0x12510 [ 58.669926][ T3510] ? print_irqtrace_events+0x210/0x210 [ 58.675389][ T3510] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 58.681280][ T3510] ? _raw_spin_unlock+0x40/0x40 [ 58.686129][ T3510] ? stack_trace_save+0x113/0x1c0 [ 58.691148][ T3510] ? stack_trace_snprint+0xe0/0xe0 [ 58.696255][ T3510] ? do_balance+0x8f0/0x8f0 [ 58.700753][ T3510] ? __stack_depot_save+0x3f5/0x470 [ 58.705949][ T3510] ? kasan_set_track+0x60/0x70 [ 58.710712][ T3510] ? kasan_set_track+0x4b/0x70 [ 58.715487][ T3510] ? __kasan_kmalloc+0x97/0xb0 [ 58.720244][ T3510] ? __kmalloc+0xb2/0x230 [ 58.724566][ T3510] ? fix_nodes+0x69aa/0x8c70 [ 58.729154][ T3510] ? reiserfs_paste_into_item+0x65d/0x880 [ 58.734865][ T3510] ? reiserfs_add_entry+0x9b8/0xd70 [ 58.740062][ T3510] ? reiserfs_mkdir+0x6bc/0x8f0 [ 58.744909][ T3510] ? reiserfs_xattr_init+0x348/0x730 [ 58.750191][ T3510] ? reiserfs_fill_super+0x2203/0x2620 [ 58.755655][ T3510] ? mount_bdev+0x2c9/0x3f0 [ 58.760156][ T3510] ? legacy_get_tree+0xeb/0x180 [ 58.765014][ T3510] ? vfs_get_tree+0x88/0x270 [ 58.769650][ T3510] ? do_new_mount+0x28b/0xae0 [ 58.774341][ T3510] ? __se_sys_mount+0x2d5/0x3c0 [ 58.779204][ T3510] ? do_syscall_64+0x3d/0xb0 [ 58.783800][ T3510] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.789879][ T3510] ? __wake_up+0x1c0/0x1c0 [ 58.794306][ T3510] ? get_parents+0x513/0xfa0 [ 58.798905][ T3510] ? set_parameters+0x8d0/0x8d0 [ 58.803761][ T3510] ? get_neighbors+0x631/0x1010 [ 58.808618][ T3510] ? reiserfs_prepare_for_journal+0x269/0x280 [ 58.814687][ T3510] ? fix_nodes+0x7abc/0x8c70 [ 58.819280][ T3510] ? __might_sleep+0xb0/0xb0 [ 58.823879][ T3510] do_balance+0x309/0x8f0 [ 58.828308][ T3510] ? get_right_neighbor_position+0x210/0x210 [ 58.834295][ T3510] ? reiserfs_paste_into_item+0x3ef/0x880 [ 58.840013][ T3510] reiserfs_paste_into_item+0x73b/0x880 [ 58.845562][ T3510] ? reiserfs_cut_from_item+0x2580/0x2580 [ 58.851312][ T3510] ? reiserfs_get_parent+0x2c0/0x2c0 [ 58.856614][ T3510] ? inode_get_bytes+0x72/0xa0 [ 58.861371][ T3510] ? _find_first_zero_bit+0x61/0x100 [ 58.866671][ T3510] reiserfs_add_entry+0x9b8/0xd70 [ 58.871697][ T3510] ? drop_new_inode+0x60/0x60 [ 58.876368][ T3510] ? do_journal_begin_r+0xdc9/0x1020 [ 58.881662][ T3510] ? journal_begin+0x1ef/0x350 [ 58.886424][ T3510] reiserfs_mkdir+0x6bc/0x8f0 [ 58.891098][ T3510] ? reiserfs_symlink+0x720/0x720 [ 58.896144][ T3510] ? rwsem_write_trylock+0x166/0x210 [ 58.901430][ T3510] ? __up_read+0x690/0x690 [ 58.905851][ T3510] reiserfs_xattr_init+0x348/0x730 [ 58.910961][ T3510] reiserfs_fill_super+0x2203/0x2620 [ 58.916250][ T3510] ? reiserfs_kill_sb+0x150/0x150 [ 58.921301][ T3510] ? snprintf+0xd6/0x120 [ 58.925552][ T3510] mount_bdev+0x2c9/0x3f0 [ 58.929885][ T3510] ? reiserfs_kill_sb+0x150/0x150 [ 58.934916][ T3510] legacy_get_tree+0xeb/0x180 [ 58.939603][ T3510] ? remove_save_link+0x540/0x540 [ 58.944681][ T3510] vfs_get_tree+0x88/0x270 [ 58.949099][ T3510] do_new_mount+0x28b/0xae0 [ 58.953621][ T3510] ? do_move_mount_old+0x160/0x160 [ 58.958751][ T3510] ? user_path_at_empty+0x12b/0x180 [ 58.963966][ T3510] __se_sys_mount+0x2d5/0x3c0 [ 58.968737][ T3510] ? __x64_sys_mount+0xc0/0xc0 [ 58.973500][ T3510] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.979489][ T3510] ? lockdep_hardirqs_on+0x94/0x130 [ 58.984682][ T3510] ? __x64_sys_mount+0x1c/0xc0 [ 58.989445][ T3510] do_syscall_64+0x3d/0xb0 [ 58.993870][ T3510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.999760][ T3510] RIP: 0033:0x7f67a31f18ba [ 59.004173][ T3510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.023770][ T3510] RSP: 002b:00007ffe6ecc6f78 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 59.032180][ T3510] RAX: ffffffffffffffda RBX: 00007ffe6ecc6f90 RCX: 00007f67a31f18ba [ 59.040150][ T3510] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffe6ecc6f90 [ 59.048116][ T3510] RBP: 0000000000000004 R08: 00007ffe6ecc6fd0 R09: 00000000000010fb [ 59.056084][ T3510] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080 [ 59.064047][ T3510] R13: 00007ffe6ecc6fd0 R14: 0000000000000003 R15: 0000000000400000 [ 59.072035][ T3510] [ 59.075048][ T3510] [ 59.077386][ T3510] The buggy address belongs to the physical page: [ 59.083786][ T3510] page:ffffea0001c5dc80 refcount:3 mapcount:0 mapping:ffff8880128887f8 index:0x213 pfn:0x71772 [ 59.094099][ T3510] memcg:ffff88813fe40000 [ 59.098325][ T3510] aops:def_blk_aops ino:700000 [ 59.103084][ T3510] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 59.112803][ T3510] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff8880128887f8 [ 59.121374][ T3510] raw: 0000000000000213 ffff88807001a3a0 00000003ffffffff ffff88813fe40000 [ 59.129939][ T3510] page dumped because: kasan: bad access detected [ 59.136337][ T3510] page_owner tracks the page as allocated [ 59.142034][ T3510] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3510, tgid 3510 (syz-executor401), ts 58510349626, free_ts 50546657161 [ 59.162697][ T3510] post_alloc_hook+0x18d/0x1b0 [ 59.167471][ T3510] get_page_from_freelist+0x32ed/0x3480 [ 59.173016][ T3510] __alloc_pages+0x28d/0x770 [ 59.177600][ T3510] folio_alloc+0x1a/0x50 [ 59.181841][ T3510] filemap_alloc_folio+0xda/0x4f0 [ 59.186864][ T3510] __filemap_get_folio+0x711/0xe30 [ 59.191973][ T3510] pagecache_get_page+0x28/0x250 [ 59.196905][ T3510] __getblk_gfp+0x211/0xa20 [ 59.201397][ T3510] search_by_key+0x460/0x4b60 [ 59.206069][ T3510] reiserfs_read_locked_inode+0x23c/0x2950 [ 59.211874][ T3510] reiserfs_fill_super+0x135f/0x2620 [ 59.217158][ T3510] mount_bdev+0x2c9/0x3f0 [ 59.221484][ T3510] legacy_get_tree+0xeb/0x180 [ 59.226164][ T3510] vfs_get_tree+0x88/0x270 [ 59.230576][ T3510] do_new_mount+0x28b/0xae0 [ 59.235077][ T3510] __se_sys_mount+0x2d5/0x3c0 [ 59.239750][ T3510] page last free stack trace: [ 59.244433][ T3510] free_unref_page_prepare+0xf63/0x1120 [ 59.249985][ T3510] free_unref_page_list+0x107/0x810 [ 59.255178][ T3510] release_pages+0x2836/0x2b40 [ 59.259944][ T3510] tlb_flush_mmu+0xfc/0x210 [ 59.264442][ T3510] tlb_finish_mmu+0xce/0x1f0 [ 59.269038][ T3510] unmap_region+0x29f/0x2f0 [ 59.273546][ T3510] do_mas_align_munmap+0xe93/0x15c0 [ 59.278742][ T3510] do_mas_munmap+0x246/0x2b0 [ 59.283333][ T3510] __vm_munmap+0x268/0x370 [ 59.287747][ T3510] __x64_sys_munmap+0x5c/0x70 [ 59.292424][ T3510] do_syscall_64+0x3d/0xb0 [ 59.296841][ T3510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.302735][ T3510] [ 59.305064][ T3510] Memory state around the buggy address: [ 59.310681][ T3510] ffff888071772e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.318734][ T3510] ffff888071772f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.326785][ T3510] >ffff888071772f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.334835][ T3510] ^ [ 59.339932][ T3510] ffff888071773000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 59.348007][ T3510] ffff888071773080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 59.356080][ T3510] ================================================================== [ 59.364598][ T3510] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.371900][ T3510] CPU: 0 PID: 3510 Comm: syz-executor401 Not tainted 6.1.45-syzkaller #0 [ 59.380322][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 59.390377][ T3510] Call Trace: [ 59.393658][ T3510] [ 59.396590][ T3510] dump_stack_lvl+0x1e3/0x2cb [ 59.401283][ T3510] ? nf_tcp_handle_invalid+0x642/0x642 [ 59.406769][ T3510] ? panic+0x75d/0x75d [ 59.410856][ T3510] ? preempt_schedule_common+0xa6/0xd0 [ 59.416322][ T3510] ? vscnprintf+0x59/0x80 [ 59.420660][ T3510] panic+0x318/0x75d [ 59.424558][ T3510] ? check_panic_on_warn+0x1d/0xa0 [ 59.429673][ T3510] ? memcpy_page_flushcache+0xfc/0xfc [ 59.435049][ T3510] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 59.441051][ T3510] ? _raw_spin_unlock+0x40/0x40 [ 59.445926][ T3510] ? print_report+0x4a3/0x4f0 [ 59.450607][ T3510] check_panic_on_warn+0x7e/0xa0 [ 59.455566][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 59.460861][ T3510] end_report+0x66/0x110 [ 59.465196][ T3510] kasan_report+0x143/0x160 [ 59.469801][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 59.475092][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 59.480413][ T3510] kasan_check_range+0x27f/0x290 [ 59.485352][ T3510] ? leaf_paste_entries+0x95f/0x13a0 [ 59.490636][ T3510] memmove+0x25/0x60 [ 59.494538][ T3510] leaf_paste_entries+0x95f/0x13a0 [ 59.499747][ T3510] balance_leaf+0xbd1e/0x12510 [ 59.504522][ T3510] ? print_irqtrace_events+0x210/0x210 [ 59.509989][ T3510] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 59.515889][ T3510] ? _raw_spin_unlock+0x40/0x40 [ 59.520742][ T3510] ? stack_trace_save+0x113/0x1c0 [ 59.525768][ T3510] ? stack_trace_snprint+0xe0/0xe0 [ 59.530879][ T3510] ? do_balance+0x8f0/0x8f0 [ 59.535386][ T3510] ? __stack_depot_save+0x3f5/0x470 [ 59.540588][ T3510] ? kasan_set_track+0x60/0x70 [ 59.545374][ T3510] ? kasan_set_track+0x4b/0x70 [ 59.550161][ T3510] ? __kasan_kmalloc+0x97/0xb0 [ 59.555024][ T3510] ? __kmalloc+0xb2/0x230 [ 59.559371][ T3510] ? fix_nodes+0x69aa/0x8c70 [ 59.563971][ T3510] ? reiserfs_paste_into_item+0x65d/0x880 [ 59.569686][ T3510] ? reiserfs_add_entry+0x9b8/0xd70 [ 59.574882][ T3510] ? reiserfs_mkdir+0x6bc/0x8f0 [ 59.579730][ T3510] ? reiserfs_xattr_init+0x348/0x730 [ 59.585023][ T3510] ? reiserfs_fill_super+0x2203/0x2620 [ 59.590682][ T3510] ? mount_bdev+0x2c9/0x3f0 [ 59.595199][ T3510] ? legacy_get_tree+0xeb/0x180 [ 59.600051][ T3510] ? vfs_get_tree+0x88/0x270 [ 59.604652][ T3510] ? do_new_mount+0x28b/0xae0 [ 59.609334][ T3510] ? __se_sys_mount+0x2d5/0x3c0 [ 59.614299][ T3510] ? do_syscall_64+0x3d/0xb0 [ 59.618900][ T3510] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.625012][ T3510] ? __wake_up+0x1c0/0x1c0 [ 59.629454][ T3510] ? get_parents+0x513/0xfa0 [ 59.634069][ T3510] ? set_parameters+0x8d0/0x8d0 [ 59.638956][ T3510] ? get_neighbors+0x631/0x1010 [ 59.643843][ T3510] ? reiserfs_prepare_for_journal+0x269/0x280 [ 59.649920][ T3510] ? fix_nodes+0x7abc/0x8c70 [ 59.654537][ T3510] ? __might_sleep+0xb0/0xb0 [ 59.659141][ T3510] do_balance+0x309/0x8f0 [ 59.663492][ T3510] ? get_right_neighbor_position+0x210/0x210 [ 59.669485][ T3510] ? reiserfs_paste_into_item+0x3ef/0x880 [ 59.675225][ T3510] reiserfs_paste_into_item+0x73b/0x880 [ 59.680779][ T3510] ? reiserfs_cut_from_item+0x2580/0x2580 [ 59.686530][ T3510] ? reiserfs_get_parent+0x2c0/0x2c0 [ 59.692251][ T3510] ? inode_get_bytes+0x72/0xa0 [ 59.697030][ T3510] ? _find_first_zero_bit+0x61/0x100 [ 59.702339][ T3510] reiserfs_add_entry+0x9b8/0xd70 [ 59.707373][ T3510] ? drop_new_inode+0x60/0x60 [ 59.712056][ T3510] ? do_journal_begin_r+0xdc9/0x1020 [ 59.717363][ T3510] ? journal_begin+0x1ef/0x350 [ 59.722224][ T3510] reiserfs_mkdir+0x6bc/0x8f0 [ 59.726916][ T3510] ? reiserfs_symlink+0x720/0x720 [ 59.731944][ T3510] ? rwsem_write_trylock+0x166/0x210 [ 59.737246][ T3510] ? __up_read+0x690/0x690 [ 59.741672][ T3510] reiserfs_xattr_init+0x348/0x730 [ 59.746793][ T3510] reiserfs_fill_super+0x2203/0x2620 [ 59.752120][ T3510] ? reiserfs_kill_sb+0x150/0x150 [ 59.757592][ T3510] ? snprintf+0xd6/0x120 [ 59.761846][ T3510] mount_bdev+0x2c9/0x3f0 [ 59.766177][ T3510] ? reiserfs_kill_sb+0x150/0x150 [ 59.771206][ T3510] legacy_get_tree+0xeb/0x180 [ 59.775881][ T3510] ? remove_save_link+0x540/0x540 [ 59.780913][ T3510] vfs_get_tree+0x88/0x270 [ 59.785333][ T3510] do_new_mount+0x28b/0xae0 [ 59.789839][ T3510] ? do_move_mount_old+0x160/0x160 [ 59.794954][ T3510] ? user_path_at_empty+0x12b/0x180 [ 59.800159][ T3510] __se_sys_mount+0x2d5/0x3c0 [ 59.804932][ T3510] ? __x64_sys_mount+0xc0/0xc0 [ 59.809710][ T3510] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.815711][ T3510] ? lockdep_hardirqs_on+0x94/0x130 [ 59.820935][ T3510] ? __x64_sys_mount+0x1c/0xc0 [ 59.825715][ T3510] do_syscall_64+0x3d/0xb0 [ 59.830153][ T3510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.836071][ T3510] RIP: 0033:0x7f67a31f18ba [ 59.840507][ T3510] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.860119][ T3510] RSP: 002b:00007ffe6ecc6f78 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 59.868543][ T3510] RAX: ffffffffffffffda RBX: 00007ffe6ecc6f90 RCX: 00007f67a31f18ba [ 59.876868][ T3510] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffe6ecc6f90 [ 59.884845][ T3510] RBP: 0000000000000004 R08: 00007ffe6ecc6fd0 R09: 00000000000010fb [ 59.892814][ T3510] R10: 0000000000000080 R11: 0000000000000286 R12: 0000000000000080 [ 59.900783][ T3510] R13: 00007ffe6ecc6fd0 R14: 0000000000000003 R15: 0000000000400000 [ 59.908762][ T3510] [ 59.912064][ T3510] Kernel Offset: disabled [ 59.916423][ T3510] Rebooting in 86400 seconds..