Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. executing program [ 33.376724] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 33.386755] REISERFS (device loop0): using ordered data mode [ 33.393447] reiserfs: using flush barriers [ 33.399164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 4294967295, max trans age 30 [ 33.416229] REISERFS (device loop0): checking transaction log (loop0) [ 33.424292] REISERFS (device loop0): Using r5 hash to sort names [ 33.430911] REISERFS (device loop0): using 3.5.x disk format [ 33.437069] ================================================================== [ 33.444463] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x44b/0x9b0 [ 33.451195] Read of size 18446744073709551584 at addr ffff88808acaafa4 by task syz-executor162/7988 [ 33.460346] [ 33.461953] CPU: 1 PID: 7988 Comm: syz-executor162 Not tainted 4.14.302-syzkaller #0 [ 33.469891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.479216] Call Trace: [ 33.481784] dump_stack+0x1b2/0x281 [ 33.485386] print_address_description.cold+0x54/0x1d3 [ 33.490645] kasan_report_error.cold+0x8a/0x191 [ 33.495285] ? leaf_paste_entries+0x44b/0x9b0 [ 33.499759] kasan_report+0x6f/0x80 [ 33.503365] ? leaf_paste_entries+0x44b/0x9b0 [ 33.507832] memmove+0x20/0x50 [ 33.510996] leaf_paste_entries+0x44b/0x9b0 [ 33.515295] balance_leaf+0x827e/0xba30 [ 33.519266] ? replace_key+0x150/0x150 [ 33.523143] do_balance+0x282/0x630 [ 33.526770] ? get_right_neighbor_position+0x160/0x160 [ 33.532031] ? __mutex_unlock_slowpath+0x75/0x770 [ 33.536859] ? memset+0x20/0x40 [ 33.540129] reiserfs_paste_into_item+0x569/0x6f0 [ 33.544949] ? reiserfs_delete_object+0x1e0/0x1e0 [ 33.549792] ? __mutex_unlock_slowpath+0x43/0x770 [ 33.554610] ? search_by_entry_key+0xf50/0xf50 [ 33.559251] ? r5_hash+0x8f/0xb0 [ 33.562589] ? make_cpu_key+0x22/0x2a0 [ 33.566450] reiserfs_add_entry+0x7d3/0xbc0 [ 33.570746] ? reiserfs_lookup+0x400/0x400 [ 33.574958] ? __mutex_unlock_slowpath+0x43/0x770 [ 33.579774] ? wait_for_completion_io+0x10/0x10 [ 33.584427] reiserfs_mkdir+0x5ca/0x8b0 [ 33.588376] ? reiserfs_mknod+0x690/0x690 [ 33.592588] reiserfs_xattr_init+0x393/0xa50 [ 33.596996] reiserfs_fill_super+0x1d4a/0x2990 [ 33.601553] ? reiserfs_remount+0x1390/0x1390 [ 33.606082] ? lock_downgrade+0x740/0x740 [ 33.610202] ? snprintf+0xa5/0xd0 [ 33.613644] mount_bdev+0x2b3/0x360 [ 33.617241] ? reiserfs_remount+0x1390/0x1390 [ 33.621709] mount_fs+0x92/0x2a0 [ 33.625051] vfs_kern_mount.part.0+0x5b/0x470 [ 33.629621] do_mount+0xe65/0x2a30 [ 33.633137] ? copy_mount_string+0x40/0x40 [ 33.637349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.642338] ? copy_mnt_ns+0xa30/0xa30 [ 33.646206] ? copy_mount_options+0x1fa/0x2f0 [ 33.650675] ? copy_mnt_ns+0xa30/0xa30 [ 33.654534] SyS_mount+0xa8/0x120 [ 33.657964] ? copy_mnt_ns+0xa30/0xa30 [ 33.661852] do_syscall_64+0x1d5/0x640 [ 33.665717] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 33.670879] RIP: 0033:0x7fcd7770bf4a [ 33.674564] RSP: 002b:00007ffd18731738 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 33.682245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcd7770bf4a [ 33.689487] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffd18731750 [ 33.696735] RBP: 00007ffd18731750 R08: 00007ffd18731790 R09: 00000000000010f3 [ 33.703977] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 33.711218] R13: 00005555574e62c0 R14: 0000000000000000 R15: 00007ffd18731790 [ 33.718471] [ 33.720086] The buggy address belongs to the page: [ 33.725001] page:ffffea00022b2a80 count:3 mapcount:0 mapping:ffff8880b1d80a68 index:0x213 [ 33.733300] flags: 0xfff00000001044(referenced|active|private) [ 33.739344] raw: 00fff00000001044 ffff8880b1d80a68 0000000000000213 00000003ffffffff [ 33.747294] raw: dead000000000100 dead000000000200 ffff88808db29dc8 ffff88823b3288c0 [ 33.755141] page dumped because: kasan: bad access detected [ 33.760820] page->mem_cgroup:ffff88823b3288c0 [ 33.765283] [ 33.766900] Memory state around the buggy address: [ 33.771823] ffff88808acaae80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.779152] ffff88808acaaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.786482] >ffff88808acaaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.793811] ^ [ 33.798188] ffff88808acab000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.805516] ffff88808acab080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.812849] ================================================================== [ 33.820176] Disabling lock debugging due to kernel taint [ 33.825830] Kernel panic - not syncing: panic_on_warn set ... [ 33.825830] [ 33.833182] CPU: 1 PID: 7988 Comm: syz-executor162 Tainted: G B 4.14.302-syzkaller #0 [ 33.842259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.851773] Call Trace: [ 33.854343] dump_stack+0x1b2/0x281 [ 33.857961] panic+0x1f9/0x42d [ 33.861132] ? add_taint.cold+0x16/0x16 [ 33.865077] ? ___preempt_schedule+0x16/0x18 [ 33.869456] kasan_end_report+0x43/0x49 [ 33.873402] kasan_report_error.cold+0xa7/0x191 [ 33.878043] ? leaf_paste_entries+0x44b/0x9b0 [ 33.882512] kasan_report+0x6f/0x80 [ 33.886198] ? leaf_paste_entries+0x44b/0x9b0 [ 33.890839] memmove+0x20/0x50 [ 33.894011] leaf_paste_entries+0x44b/0x9b0 [ 33.898307] balance_leaf+0x827e/0xba30 [ 33.902261] ? replace_key+0x150/0x150 [ 33.906207] do_balance+0x282/0x630 [ 33.909807] ? get_right_neighbor_position+0x160/0x160 [ 33.915054] ? __mutex_unlock_slowpath+0x75/0x770 [ 33.919906] ? memset+0x20/0x40 [ 33.923158] reiserfs_paste_into_item+0x569/0x6f0 [ 33.927975] ? reiserfs_delete_object+0x1e0/0x1e0 [ 33.932805] ? __mutex_unlock_slowpath+0x43/0x770 [ 33.937704] ? search_by_entry_key+0xf50/0xf50 [ 33.942257] ? r5_hash+0x8f/0xb0 [ 33.945607] ? make_cpu_key+0x22/0x2a0 [ 33.949482] reiserfs_add_entry+0x7d3/0xbc0 [ 33.955881] ? reiserfs_lookup+0x400/0x400 [ 33.960093] ? __mutex_unlock_slowpath+0x43/0x770 [ 33.965001] ? wait_for_completion_io+0x10/0x10 [ 33.969648] reiserfs_mkdir+0x5ca/0x8b0 [ 33.973684] ? reiserfs_mknod+0x690/0x690 [ 33.977808] reiserfs_xattr_init+0x393/0xa50 [ 33.982236] reiserfs_fill_super+0x1d4a/0x2990 [ 33.986792] ? reiserfs_remount+0x1390/0x1390 [ 33.991259] ? lock_downgrade+0x740/0x740 [ 33.995381] ? snprintf+0xa5/0xd0 [ 33.998806] mount_bdev+0x2b3/0x360 [ 34.002405] ? reiserfs_remount+0x1390/0x1390 [ 34.006870] mount_fs+0x92/0x2a0 [ 34.010207] vfs_kern_mount.part.0+0x5b/0x470 [ 34.014671] do_mount+0xe65/0x2a30 [ 34.018184] ? copy_mount_string+0x40/0x40 [ 34.022389] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 34.027375] ? copy_mnt_ns+0xa30/0xa30 [ 34.031234] ? copy_mount_options+0x1fa/0x2f0 [ 34.035699] ? copy_mnt_ns+0xa30/0xa30 [ 34.039556] SyS_mount+0xa8/0x120 [ 34.042981] ? copy_mnt_ns+0xa30/0xa30 [ 34.046840] do_syscall_64+0x1d5/0x640 [ 34.050699] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 34.055868] RIP: 0033:0x7fcd7770bf4a [ 34.059555] RSP: 002b:00007ffd18731738 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 34.067233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcd7770bf4a [ 34.074475] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007ffd18731750 [ 34.081729] RBP: 00007ffd18731750 R08: 00007ffd18731790 R09: 00000000000010f3 [ 34.088974] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 34.096213] R13: 00005555574e62c0 R14: 0000000000000000 R15: 00007ffd18731790 [ 34.103627] Kernel Offset: disabled [ 34.107232] Rebooting in 86400 seconds..