Warning: Permanently added '10.128.1.164' (ECDSA) to the list of known hosts. executing program [ 60.198394][ T3499] loop0: detected capacity change from 0 to 8192 [ 60.209094][ T3499] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 60.218473][ T3499] REISERFS (device loop0): using ordered data mode [ 60.225220][ T3499] reiserfs: using flush barriers [ 60.231750][ T3499] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.248760][ T3499] REISERFS (device loop0): checking transaction log (loop0) [ 60.293277][ T3499] REISERFS (device loop0): Using r5 hash to sort names [ 60.301787][ T3499] ================================================================== [ 60.309990][ T3499] BUG: KASAN: out-of-bounds in reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.318345][ T3499] Read of size 8 at addr ffff888071adb000 by task syz-executor204/3499 [ 60.326781][ T3499] [ 60.329095][ T3499] CPU: 0 PID: 3499 Comm: syz-executor204 Not tainted 5.15.109-syzkaller #0 [ 60.337667][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 60.347707][ T3499] Call Trace: [ 60.350973][ T3499] [ 60.353886][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 60.358547][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 60.364178][ T3499] ? _printk+0xd1/0x111 [ 60.368317][ T3499] ? __wake_up_klogd+0xcc/0x100 [ 60.373146][ T3499] ? panic+0x84d/0x84d [ 60.377198][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 60.382639][ T3499] print_address_description+0x63/0x3b0 [ 60.388171][ T3499] ? reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.393786][ T3499] kasan_report+0x16b/0x1c0 [ 60.398275][ T3499] ? reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.403977][ T3499] kasan_check_range+0x27e/0x290 [ 60.408900][ T3499] reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.414354][ T3499] ? __lock_acquire+0x1295/0x1ff0 [ 60.419359][ T3499] ? reiserfs_dir_fsync+0x100/0x100 [ 60.424553][ T3499] ? read_lock_is_recursive+0x10/0x10 [ 60.429910][ T3499] ? __might_sleep+0xc0/0xc0 [ 60.434481][ T3499] ? __down_read_common+0x184/0x2c0 [ 60.439774][ T3499] ? iterate_dir+0x10a/0x570 [ 60.444363][ T3499] iterate_dir+0x224/0x570 [ 60.448785][ T3499] ? reiserfs_sync_file+0x270/0x270 [ 60.453966][ T3499] __se_sys_getdents64+0x209/0x4f0 [ 60.459060][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 60.465047][ T3499] ? __x64_sys_getdents64+0x80/0x80 [ 60.470223][ T3499] ? filldir+0x720/0x720 [ 60.474451][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.480410][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 60.485589][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.491636][ T3499] do_syscall_64+0x3d/0xb0 [ 60.496107][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.501996][ T3499] RIP: 0033:0x7f5b357182e9 [ 60.506405][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.525996][ T3499] RSP: 002b:00007ffcdb0866f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 60.534390][ T3499] RAX: ffffffffffffffda RBX: 00007ffcdb086748 RCX: 00007f5b357182e9 [ 60.542345][ T3499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 60.550295][ T3499] RBP: 0000000000000000 R08: 00007ffcdb086820 R09: 00007ffcdb086820 [ 60.558248][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdb086740 [ 60.566199][ T3499] R13: 00007ffcdb086820 R14: 431bde82d7b634db R15: 00007ffcdb086720 [ 60.574165][ T3499] [ 60.577190][ T3499] [ 60.579491][ T3499] The buggy address belongs to the page: [ 60.585095][ T3499] page:ffffea0001c6b6c0 refcount:1 mapcount:1 mapping:0000000000000000 index:0x7fffffff4 pfn:0x71adb [ 60.595916][ T3499] memcg:ffff888011e5c000 [ 60.600134][ T3499] anon flags: 0xfff00000080014(uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 60.610201][ T3499] raw: 00fff00000080014 ffffea0001c9ccc8 ffffea0001c6b708 ffff888024f13bb1 [ 60.618851][ T3499] raw: 00000007fffffff4 0000000000000000 0000000100000000 ffff888011e5c000 [ 60.627423][ T3499] page dumped because: kasan: bad access detected [ 60.633850][ T3499] page_owner tracks the page as allocated [ 60.639541][ T3499] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 2962, ts 60302495732, free_ts 10649780676 [ 60.654207][ T3499] get_page_from_freelist+0x322a/0x33c0 [ 60.659742][ T3499] __alloc_pages+0x272/0x700 [ 60.664315][ T3499] alloc_pages_vma+0x39a/0x800 [ 60.669063][ T3499] wp_page_copy+0x26c/0x2000 [ 60.673634][ T3499] handle_mm_fault+0x2a3d/0x5950 [ 60.678551][ T3499] exc_page_fault+0x271/0x740 [ 60.683206][ T3499] asm_exc_page_fault+0x22/0x30 [ 60.688038][ T3499] page last free stack trace: [ 60.692690][ T3499] free_unref_page_prepare+0xc34/0xcf0 [ 60.698128][ T3499] free_unref_page+0x95/0x2d0 [ 60.702789][ T3499] free_contig_range+0x95/0xf0 [ 60.707530][ T3499] destroy_args+0xfe/0x97f [ 60.711929][ T3499] debug_vm_pgtable+0x40d/0x462 [ 60.716758][ T3499] do_one_initcall+0x22b/0x7a0 [ 60.721501][ T3499] do_initcall_level+0x157/0x207 [ 60.726507][ T3499] do_initcalls+0x49/0x86 [ 60.730816][ T3499] kernel_init_freeable+0x43c/0x5c5 [ 60.735993][ T3499] kernel_init+0x19/0x290 [ 60.740302][ T3499] ret_from_fork+0x1f/0x30 [ 60.744700][ T3499] [ 60.747001][ T3499] Memory state around the buggy address: [ 60.752736][ T3499] ffff888071adaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.760792][ T3499] ffff888071adaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.768836][ T3499] >ffff888071adb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.776903][ T3499] ^ [ 60.780962][ T3499] ffff888071adb080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.789014][ T3499] ffff888071adb100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.797065][ T3499] ================================================================== [ 60.805117][ T3499] Disabling lock debugging due to kernel taint [ 60.811556][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.818751][ T3499] CPU: 0 PID: 3499 Comm: syz-executor204 Tainted: G B 5.15.109-syzkaller #0 [ 60.828709][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 60.838745][ T3499] Call Trace: [ 60.842005][ T3499] [ 60.844922][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 60.849581][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 60.855194][ T3499] ? panic+0x84d/0x84d [ 60.859245][ T3499] ? preempt_schedule_common+0xa6/0xd0 [ 60.864679][ T3499] ? preempt_schedule+0xd9/0xe0 [ 60.869507][ T3499] panic+0x318/0x84d [ 60.873379][ T3499] ? check_panic_on_warn+0x1d/0xa0 [ 60.878468][ T3499] ? fb_is_primary_device+0xcc/0xcc [ 60.883642][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 60.889600][ T3499] ? _raw_spin_unlock+0x40/0x40 [ 60.894424][ T3499] ? print_memory_metadata+0xe2/0x140 [ 60.899774][ T3499] check_panic_on_warn+0x7e/0xa0 [ 60.904691][ T3499] ? reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.910311][ T3499] end_report+0x6d/0xf0 [ 60.914469][ T3499] kasan_report+0x18e/0x1c0 [ 60.918971][ T3499] ? reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.924587][ T3499] kasan_check_range+0x27e/0x290 [ 60.929504][ T3499] reiserfs_readdir_inode+0x5d8/0x14d0 [ 60.934978][ T3499] ? __lock_acquire+0x1295/0x1ff0 [ 60.939995][ T3499] ? reiserfs_dir_fsync+0x100/0x100 [ 60.945178][ T3499] ? read_lock_is_recursive+0x10/0x10 [ 60.950529][ T3499] ? __might_sleep+0xc0/0xc0 [ 60.955099][ T3499] ? __down_read_common+0x184/0x2c0 [ 60.960410][ T3499] ? iterate_dir+0x10a/0x570 [ 60.964997][ T3499] iterate_dir+0x224/0x570 [ 60.969410][ T3499] ? reiserfs_sync_file+0x270/0x270 [ 60.974601][ T3499] __se_sys_getdents64+0x209/0x4f0 [ 60.979711][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 60.985676][ T3499] ? __x64_sys_getdents64+0x80/0x80 [ 60.990890][ T3499] ? filldir+0x720/0x720 [ 60.995113][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 61.001073][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 61.006276][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 61.012239][ T3499] do_syscall_64+0x3d/0xb0 [ 61.016656][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 61.022527][ T3499] RIP: 0033:0x7f5b357182e9 [ 61.026921][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.046503][ T3499] RSP: 002b:00007ffcdb0866f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 61.054895][ T3499] RAX: ffffffffffffffda RBX: 00007ffcdb086748 RCX: 00007f5b357182e9 [ 61.063021][ T3499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 61.070973][ T3499] RBP: 0000000000000000 R08: 00007ffcdb086820 R09: 00007ffcdb086820 [ 61.078925][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdb086740 [ 61.086877][ T3499] R13: 00007ffcdb086820 R14: 431bde82d7b634db R15: 00007ffcdb086720 [ 61.094840][ T3499] [ 61.098168][ T3499] Kernel Offset: disabled [ 61.102493][ T3499] Rebooting in 86400 seconds..