Warning: Permanently added '10.128.10.38' (ED25519) to the list of known hosts. executing program [ 53.584496][ T3540] loop0: detected capacity change from 0 to 8192 [ 53.596941][ T3540] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.610153][ T3540] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.619973][ T3540] REISERFS (device loop0): using ordered data mode [ 53.626690][ T3540] reiserfs: using flush barriers [ 53.633010][ T3540] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.649477][ T3540] REISERFS (device loop0): checking transaction log (loop0) [ 53.692255][ T3540] REISERFS (device loop0): Using rupasov hash to sort names [ 53.700230][ T3540] ================================================================== [ 53.708287][ T3540] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0 [ 53.715837][ T3540] Read of size 18446744073709551584 at addr ffff88801229bfa4 by task syz-executor102/3540 [ 53.725707][ T3540] [ 53.728016][ T3540] CPU: 1 PID: 3540 Comm: syz-executor102 Not tainted 6.1.81-syzkaller #0 [ 53.736410][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 53.746462][ T3540] Call Trace: [ 53.749726][ T3540] [ 53.752657][ T3540] dump_stack_lvl+0x1e3/0x2cb [ 53.757351][ T3540] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.762803][ T3540] ? panic+0x75d/0x75d [ 53.766879][ T3540] ? _printk+0xd1/0x111 [ 53.771024][ T3540] ? __virt_addr_valid+0x17f/0x520 [ 53.776119][ T3540] ? __virt_addr_valid+0x17f/0x520 [ 53.781212][ T3540] print_report+0x15f/0x4f0 [ 53.785699][ T3540] ? __virt_addr_valid+0x17f/0x520 [ 53.790800][ T3540] ? __virt_addr_valid+0x17f/0x520 [ 53.795899][ T3540] ? __virt_addr_valid+0x44a/0x520 [ 53.800999][ T3540] ? __phys_addr+0xb6/0x170 [ 53.805489][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 53.810759][ T3540] kasan_report+0x136/0x160 [ 53.815249][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 53.820519][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 53.825789][ T3540] kasan_check_range+0x27f/0x290 [ 53.830709][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 53.835987][ T3540] memmove+0x25/0x60 [ 53.839866][ T3540] leaf_paste_entries+0x95f/0x13a0 [ 53.844973][ T3540] balance_leaf+0xbd1e/0x12510 [ 53.849734][ T3540] ? print_irqtrace_events+0x210/0x210 [ 53.855187][ T3540] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.861067][ T3540] ? _raw_spin_unlock+0x40/0x40 [ 53.865899][ T3540] ? stack_trace_save+0x113/0x1c0 [ 53.870913][ T3540] ? stack_trace_snprint+0xe0/0xe0 [ 53.876011][ T3540] ? do_balance+0x8f0/0x8f0 [ 53.880505][ T3540] ? __stack_depot_save+0x3f5/0x470 [ 53.885689][ T3540] ? kasan_set_track+0x60/0x70 [ 53.890440][ T3540] ? kasan_set_track+0x4b/0x70 [ 53.895190][ T3540] ? __kasan_kmalloc+0x97/0xb0 [ 53.899940][ T3540] ? __kmalloc+0xb2/0x230 [ 53.904259][ T3540] ? fix_nodes+0x69aa/0x8c70 [ 53.908835][ T3540] ? reiserfs_paste_into_item+0x65d/0x880 [ 53.914542][ T3540] ? reiserfs_add_entry+0x9b8/0xd70 [ 53.919730][ T3540] ? reiserfs_mkdir+0x6bc/0x8f0 [ 53.924568][ T3540] ? reiserfs_xattr_init+0x348/0x730 [ 53.929835][ T3540] ? reiserfs_fill_super+0x2203/0x2620 [ 53.935299][ T3540] ? mount_bdev+0x2c9/0x3f0 [ 53.939801][ T3540] ? legacy_get_tree+0xeb/0x180 [ 53.944655][ T3540] ? vfs_get_tree+0x88/0x270 [ 53.949238][ T3540] ? do_new_mount+0x2ba/0xb40 [ 53.953902][ T3540] ? __se_sys_mount+0x2d5/0x3c0 [ 53.958743][ T3540] ? do_syscall_64+0x3d/0xb0 [ 53.963321][ T3540] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.969407][ T3540] ? __wake_up+0x1c0/0x1c0 [ 53.973812][ T3540] ? get_parents+0x513/0xfa0 [ 53.978391][ T3540] ? set_parameters+0x8d0/0x8d0 [ 53.983225][ T3540] ? get_neighbors+0x631/0x1010 [ 53.988062][ T3540] ? reiserfs_prepare_for_journal+0x269/0x280 [ 53.994120][ T3540] ? fix_nodes+0x7abc/0x8c70 [ 53.998693][ T3540] ? read_lock_is_recursive+0x10/0x10 [ 54.004063][ T3540] do_balance+0x309/0x8f0 [ 54.008384][ T3540] ? get_right_neighbor_position+0x210/0x210 [ 54.014356][ T3540] ? reiserfs_paste_into_item+0x3ef/0x880 [ 54.020061][ T3540] reiserfs_paste_into_item+0x73b/0x880 [ 54.025597][ T3540] ? reiserfs_cut_from_item+0x2580/0x2580 [ 54.031327][ T3540] ? reiserfs_get_parent+0x2c0/0x2c0 [ 54.036598][ T3540] ? inode_get_bytes+0x72/0xa0 [ 54.041354][ T3540] ? yura_hash+0x439/0x480 [ 54.045757][ T3540] ? _find_first_zero_bit+0x61/0x100 [ 54.051031][ T3540] reiserfs_add_entry+0x9b8/0xd70 [ 54.056047][ T3540] ? drop_new_inode+0x60/0x60 [ 54.060714][ T3540] ? do_journal_begin_r+0xdc9/0x1020 [ 54.066003][ T3540] ? journal_begin+0x1ef/0x350 [ 54.070753][ T3540] reiserfs_mkdir+0x6bc/0x8f0 [ 54.075422][ T3540] ? reiserfs_symlink+0x720/0x720 [ 54.080435][ T3540] ? rwsem_write_trylock+0x166/0x210 [ 54.085711][ T3540] ? __up_read+0x690/0x690 [ 54.090115][ T3540] reiserfs_xattr_init+0x348/0x730 [ 54.095213][ T3540] reiserfs_fill_super+0x2203/0x2620 [ 54.100490][ T3540] ? reiserfs_kill_sb+0x150/0x150 [ 54.105500][ T3540] ? snprintf+0xd6/0x120 [ 54.109732][ T3540] mount_bdev+0x2c9/0x3f0 [ 54.114051][ T3540] ? reiserfs_kill_sb+0x150/0x150 [ 54.119060][ T3540] legacy_get_tree+0xeb/0x180 [ 54.123723][ T3540] ? remove_save_link+0x540/0x540 [ 54.128733][ T3540] vfs_get_tree+0x88/0x270 [ 54.133136][ T3540] do_new_mount+0x2ba/0xb40 [ 54.137626][ T3540] ? ns_capable+0x85/0xe0 [ 54.141944][ T3540] ? do_move_mount_old+0x160/0x160 [ 54.147047][ T3540] __se_sys_mount+0x2d5/0x3c0 [ 54.151712][ T3540] ? __x64_sys_mount+0xc0/0xc0 [ 54.156461][ T3540] ? syscall_enter_from_user_mode+0x2e/0x220 [ 54.162426][ T3540] ? lockdep_hardirqs_on+0x94/0x130 [ 54.167607][ T3540] ? __x64_sys_mount+0x1c/0xc0 [ 54.172419][ T3540] do_syscall_64+0x3d/0xb0 [ 54.176823][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.182702][ T3540] RIP: 0033:0x7f4ca1ec58fa [ 54.187187][ T3540] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.206776][ T3540] RSP: 002b:00007ffe85798678 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 54.215177][ T3540] RAX: ffffffffffffffda RBX: 00007ffe85798690 RCX: 00007f4ca1ec58fa [ 54.223134][ T3540] RDX: 0000000020001100 RSI: 0000000020001140 RDI: 00007ffe85798690 [ 54.231089][ T3540] RBP: 0000000000000004 R08: 00007ffe857986d0 R09: 00000000000010e5 [ 54.239044][ T3540] R10: 0000000000200808 R11: 0000000000000286 R12: 0000000000200808 [ 54.247000][ T3540] R13: 00007ffe857986d0 R14: 0000000000000003 R15: 0000000000400000 [ 54.254958][ T3540] [ 54.257973][ T3540] [ 54.260281][ T3540] The buggy address belongs to the physical page: [ 54.266670][ T3540] page:ffffea000048a6c0 refcount:3 mapcount:0 mapping:ffff888140c8c9f8 index:0x213 pfn:0x1229b [ 54.276980][ T3540] memcg:ffff88813fe10000 [ 54.281201][ T3540] aops:def_blk_aops ino:700000 [ 54.285948][ T3540] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 54.295655][ T3540] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888140c8c9f8 [ 54.304225][ T3540] raw: 0000000000000213 ffff888071100cb0 00000003ffffffff ffff88813fe10000 [ 54.312786][ T3540] page dumped because: kasan: bad access detected [ 54.319174][ T3540] page_owner tracks the page as allocated [ 54.324867][ T3540] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3540, tgid 3540 (syz-executor102), ts 53691924098, free_ts 47917824672 [ 54.345423][ T3540] post_alloc_hook+0x18d/0x1b0 [ 54.350171][ T3540] get_page_from_freelist+0x31a1/0x3320 [ 54.355699][ T3540] __alloc_pages+0x28d/0x770 [ 54.360273][ T3540] folio_alloc+0x1a/0x50 [ 54.364503][ T3540] filemap_alloc_folio+0xda/0x4f0 [ 54.369513][ T3540] __filemap_get_folio+0x749/0xe80 [ 54.374611][ T3540] pagecache_get_page+0x28/0x250 [ 54.379533][ T3540] __getblk_gfp+0x211/0xa20 [ 54.384032][ T3540] search_by_key+0x460/0x4b60 [ 54.388695][ T3540] reiserfs_read_locked_inode+0x23c/0x2950 [ 54.394479][ T3540] reiserfs_fill_super+0x135f/0x2620 [ 54.399748][ T3540] mount_bdev+0x2c9/0x3f0 [ 54.404065][ T3540] legacy_get_tree+0xeb/0x180 [ 54.408726][ T3540] vfs_get_tree+0x88/0x270 [ 54.413127][ T3540] do_new_mount+0x2ba/0xb40 [ 54.417615][ T3540] __se_sys_mount+0x2d5/0x3c0 [ 54.422277][ T3540] page last free stack trace: [ 54.426929][ T3540] free_unref_page_prepare+0xf63/0x1120 [ 54.432461][ T3540] free_unref_page_list+0x663/0x900 [ 54.437642][ T3540] release_pages+0x2836/0x2b40 [ 54.442389][ T3540] tlb_flush_mmu+0xfc/0x210 [ 54.446873][ T3540] tlb_finish_mmu+0xce/0x1f0 [ 54.451445][ T3540] unmap_region+0x29f/0x2f0 [ 54.455936][ T3540] do_mas_align_munmap+0xec8/0x15f0 [ 54.461126][ T3540] do_mas_munmap+0x246/0x2b0 [ 54.465705][ T3540] __vm_munmap+0x268/0x370 [ 54.470117][ T3540] __x64_sys_munmap+0x5c/0x70 [ 54.474781][ T3540] do_syscall_64+0x3d/0xb0 [ 54.479184][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.485062][ T3540] [ 54.487368][ T3540] Memory state around the buggy address: [ 54.492975][ T3540] ffff88801229be80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.501016][ T3540] ffff88801229bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.509055][ T3540] >ffff88801229bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.517106][ T3540] ^ [ 54.522209][ T3540] ffff88801229c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.530260][ T3540] ffff88801229c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.538318][ T3540] ================================================================== [ 54.547190][ T3540] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 54.554579][ T3540] CPU: 0 PID: 3540 Comm: syz-executor102 Not tainted 6.1.81-syzkaller #0 [ 54.562976][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 54.573015][ T3540] Call Trace: [ 54.576293][ T3540] [ 54.579215][ T3540] dump_stack_lvl+0x1e3/0x2cb [ 54.583910][ T3540] ? nf_tcp_handle_invalid+0x642/0x642 [ 54.589363][ T3540] ? panic+0x75d/0x75d [ 54.593425][ T3540] ? preempt_schedule_common+0xa6/0xd0 [ 54.598878][ T3540] ? vscnprintf+0x59/0x80 [ 54.603202][ T3540] panic+0x318/0x75d [ 54.607098][ T3540] ? check_panic_on_warn+0x1d/0xa0 [ 54.612203][ T3540] ? memcpy_page_flushcache+0xfc/0xfc [ 54.617564][ T3540] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 54.623526][ T3540] ? _raw_spin_unlock+0x40/0x40 [ 54.628358][ T3540] ? print_report+0x4a3/0x4f0 [ 54.633021][ T3540] check_panic_on_warn+0x7e/0xa0 [ 54.637957][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 54.643231][ T3540] end_report+0x66/0x110 [ 54.647459][ T3540] kasan_report+0x143/0x160 [ 54.651946][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 54.657236][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 54.662510][ T3540] kasan_check_range+0x27f/0x290 [ 54.667429][ T3540] ? leaf_paste_entries+0x95f/0x13a0 [ 54.672697][ T3540] memmove+0x25/0x60 [ 54.676576][ T3540] leaf_paste_entries+0x95f/0x13a0 [ 54.681677][ T3540] balance_leaf+0xbd1e/0x12510 [ 54.686434][ T3540] ? print_irqtrace_events+0x210/0x210 [ 54.691888][ T3540] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.697768][ T3540] ? _raw_spin_unlock+0x40/0x40 [ 54.703228][ T3540] ? stack_trace_save+0x113/0x1c0 [ 54.708248][ T3540] ? stack_trace_snprint+0xe0/0xe0 [ 54.713349][ T3540] ? do_balance+0x8f0/0x8f0 [ 54.717844][ T3540] ? __stack_depot_save+0x3f5/0x470 [ 54.723033][ T3540] ? kasan_set_track+0x60/0x70 [ 54.727792][ T3540] ? kasan_set_track+0x4b/0x70 [ 54.732551][ T3540] ? __kasan_kmalloc+0x97/0xb0 [ 54.737311][ T3540] ? __kmalloc+0xb2/0x230 [ 54.741631][ T3540] ? fix_nodes+0x69aa/0x8c70 [ 54.746208][ T3540] ? reiserfs_paste_into_item+0x65d/0x880 [ 54.751919][ T3540] ? reiserfs_add_entry+0x9b8/0xd70 [ 54.757109][ T3540] ? reiserfs_mkdir+0x6bc/0x8f0 [ 54.761955][ T3540] ? reiserfs_xattr_init+0x348/0x730 [ 54.767247][ T3540] ? reiserfs_fill_super+0x2203/0x2620 [ 54.772687][ T3540] ? mount_bdev+0x2c9/0x3f0 [ 54.777175][ T3540] ? legacy_get_tree+0xeb/0x180 [ 54.782024][ T3540] ? vfs_get_tree+0x88/0x270 [ 54.786599][ T3540] ? do_new_mount+0x2ba/0xb40 [ 54.791264][ T3540] ? __se_sys_mount+0x2d5/0x3c0 [ 54.796100][ T3540] ? do_syscall_64+0x3d/0xb0 [ 54.800674][ T3540] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.806738][ T3540] ? __wake_up+0x1c0/0x1c0 [ 54.811230][ T3540] ? get_parents+0x513/0xfa0 [ 54.815812][ T3540] ? set_parameters+0x8d0/0x8d0 [ 54.820647][ T3540] ? get_neighbors+0x631/0x1010 [ 54.825488][ T3540] ? reiserfs_prepare_for_journal+0x269/0x280 [ 54.831542][ T3540] ? fix_nodes+0x7abc/0x8c70 [ 54.836114][ T3540] ? read_lock_is_recursive+0x10/0x10 [ 54.841502][ T3540] do_balance+0x309/0x8f0 [ 54.845822][ T3540] ? get_right_neighbor_position+0x210/0x210 [ 54.851795][ T3540] ? reiserfs_paste_into_item+0x3ef/0x880 [ 54.857499][ T3540] reiserfs_paste_into_item+0x73b/0x880 [ 54.863033][ T3540] ? reiserfs_cut_from_item+0x2580/0x2580 [ 54.868759][ T3540] ? reiserfs_get_parent+0x2c0/0x2c0 [ 54.874034][ T3540] ? inode_get_bytes+0x72/0xa0 [ 54.878785][ T3540] ? yura_hash+0x439/0x480 [ 54.883188][ T3540] ? _find_first_zero_bit+0x61/0x100 [ 54.888461][ T3540] reiserfs_add_entry+0x9b8/0xd70 [ 54.893484][ T3540] ? drop_new_inode+0x60/0x60 [ 54.898152][ T3540] ? do_journal_begin_r+0xdc9/0x1020 [ 54.903437][ T3540] ? journal_begin+0x1ef/0x350 [ 54.908189][ T3540] reiserfs_mkdir+0x6bc/0x8f0 [ 54.912862][ T3540] ? reiserfs_symlink+0x720/0x720 [ 54.917876][ T3540] ? rwsem_write_trylock+0x166/0x210 [ 54.923152][ T3540] ? __up_read+0x690/0x690 [ 54.927554][ T3540] reiserfs_xattr_init+0x348/0x730 [ 54.932651][ T3540] reiserfs_fill_super+0x2203/0x2620 [ 54.938101][ T3540] ? reiserfs_kill_sb+0x150/0x150 [ 54.943114][ T3540] ? snprintf+0xd6/0x120 [ 54.947521][ T3540] mount_bdev+0x2c9/0x3f0 [ 54.951926][ T3540] ? reiserfs_kill_sb+0x150/0x150 [ 54.956935][ T3540] legacy_get_tree+0xeb/0x180 [ 54.961601][ T3540] ? remove_save_link+0x540/0x540 [ 54.966620][ T3540] vfs_get_tree+0x88/0x270 [ 54.971027][ T3540] do_new_mount+0x2ba/0xb40 [ 54.975517][ T3540] ? ns_capable+0x85/0xe0 [ 54.979831][ T3540] ? do_move_mount_old+0x160/0x160 [ 54.984929][ T3540] __se_sys_mount+0x2d5/0x3c0 [ 54.989595][ T3540] ? __x64_sys_mount+0xc0/0xc0 [ 54.994345][ T3540] ? syscall_enter_from_user_mode+0x2e/0x220 [ 55.000307][ T3540] ? lockdep_hardirqs_on+0x94/0x130 [ 55.005486][ T3540] ? __x64_sys_mount+0x1c/0xc0 [ 55.010234][ T3540] do_syscall_64+0x3d/0xb0 [ 55.014645][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.020526][ T3540] RIP: 0033:0x7f4ca1ec58fa [ 55.024925][ T3540] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.044519][ T3540] RSP: 002b:00007ffe85798678 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.052921][ T3540] RAX: ffffffffffffffda RBX: 00007ffe85798690 RCX: 00007f4ca1ec58fa [ 55.060875][ T3540] RDX: 0000000020001100 RSI: 0000000020001140 RDI: 00007ffe85798690 [ 55.068832][ T3540] RBP: 0000000000000004 R08: 00007ffe857986d0 R09: 00000000000010e5 [ 55.076785][ T3540] R10: 0000000000200808 R11: 0000000000000286 R12: 0000000000200808 [ 55.084738][ T3540] R13: 00007ffe857986d0 R14: 0000000000000003 R15: 0000000000400000 [ 55.092698][ T3540] [ 55.095963][ T3540] Kernel Offset: disabled [ 55.100267][ T3540] Rebooting in 86400 seconds..