Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 59.253568][ T3547] loop0: detected capacity change from 0 to 8192
[ 59.263860][ T3547] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 59.277514][ T3547] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 59.287329][ T3547] REISERFS (device loop0): using ordered data mode
[ 59.293840][ T3547] reiserfs: using flush barriers
[ 59.300199][ T3547] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 59.317083][ T3547] REISERFS (device loop0): checking transaction log (loop0)
[ 59.371139][ T3547] REISERFS (device loop0): Using r5 hash to sort names
[ 59.378325][ T3547] REISERFS (device loop0): using 3.5.x disk format
[ 59.385924][ T3547] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 59.411074][ T27] audit: type=1800 audit(1697666825.421:2): pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor317" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 59.422545][ T3547] ==================================================================
[ 59.439599][ T3547] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1b8/0xab0
[ 59.447277][ T3547] Read of size 18446744073709551233 at addr ffff888072078000 by task syz-executor317/3547
[ 59.457162][ T3547]
[ 59.459479][ T3547] CPU: 1 PID: 3547 Comm: syz-executor317 Not tainted 6.1.58-syzkaller #0
[ 59.467881][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 59.477937][ T3547] Call Trace:
[ 59.481213][ T3547]
[ 59.484141][ T3547] dump_stack_lvl+0x1e3/0x2cb
[ 59.488848][ T3547] ? nf_tcp_handle_invalid+0x642/0x642
[ 59.494317][ T3547] ? panic+0x75d/0x75d
[ 59.498394][ T3547] ? _printk+0xd1/0x111
[ 59.502560][ T3547] ? _raw_spin_lock_irqsave+0xac/0x120
[ 59.508030][ T3547] print_report+0x15f/0x4f0
[ 59.512553][ T3547] ? leaf_move_items+0x1c4c/0x28a0
[ 59.517672][ T3547] ? __virt_addr_valid+0x22b/0x2e0
[ 59.522812][ T3547] ? __phys_addr+0xb6/0x170
[ 59.527341][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 59.532721][ T3547] kasan_report+0x136/0x160
[ 59.537420][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 59.542831][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 59.548226][ T3547] kasan_check_range+0x27f/0x290
[ 59.553193][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 59.558581][ T3547] memmove+0x25/0x60
[ 59.562485][ T3547] leaf_paste_in_buffer+0x1b8/0xab0
[ 59.567698][ T3547] balance_leaf+0x667c/0x12510
[ 59.572477][ T3547] ? print_irqtrace_events+0x210/0x210
[ 59.577952][ T3547] ? do_balance+0x8f0/0x8f0
[ 59.582481][ T3547] ? write_boundary_block+0xb0/0xb0
[ 59.587689][ T3547] ? do_raw_spin_lock+0x14a/0x370
[ 59.592716][ T3547] ? do_raw_spin_unlock+0x137/0x8a0
[ 59.597930][ T3547] ? __getblk_gfp+0x934/0xa20
[ 59.602616][ T3547] ? get_empty_nodes+0xad9/0xd70
[ 59.607550][ T3547] ? direntry_part_size+0xb0/0x1a0
[ 59.612687][ T3547] ? __wake_up+0x1c0/0x1c0
[ 59.617112][ T3547] ? get_neighbors+0x1010/0x1010
[ 59.622048][ T3547] ? is_leaf_removable+0x8c0/0x8c0
[ 59.627157][ T3547] ? get_neighbors+0x631/0x1010
[ 59.632004][ T3547] ? reiserfs_prepare_for_journal+0x269/0x280
[ 59.638086][ T3547] ? fix_nodes+0x7abc/0x8c70
[ 59.642667][ T3547] ? read_lock_is_recursive+0x10/0x10
[ 59.648059][ T3547] do_balance+0x309/0x8f0
[ 59.652395][ T3547] ? get_right_neighbor_position+0x210/0x210
[ 59.658383][ T3547] ? preempt_count_add+0x8f/0x180
[ 59.663434][ T3547] ? reiserfs_paste_into_item+0x3ef/0x880
[ 59.669161][ T3547] reiserfs_paste_into_item+0x73b/0x880
[ 59.674719][ T3547] ? reiserfs_cut_from_item+0x2580/0x2580
[ 59.680476][ T3547] ? reiserfs_get_block+0x19b3/0x5150
[ 59.685853][ T3547] ? rcu_is_watching+0x11/0xb0
[ 59.690629][ T3547] ? __kmalloc+0xe2/0x230
[ 59.694961][ T3547] reiserfs_get_block+0x2259/0x5150
[ 59.700190][ T3547] ? make_le_item_head+0x5c0/0x5c0
[ 59.705316][ T3547] ? register_lock_class+0x100/0x990
[ 59.710606][ T3547] ? generic_cont_expand_simple+0x187/0x2a0
[ 59.716497][ T3547] ? reiserfs_setattr+0x606/0x11c0
[ 59.721611][ T3547] ? notify_change+0xce3/0xfc0
[ 59.726380][ T3547] ? do_truncate+0x21c/0x300
[ 59.730972][ T3547] ? do_sys_ftruncate+0x2e2/0x380
[ 59.735995][ T3547] ? do_syscall_64+0x3d/0xb0
[ 59.740594][ T3547] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.746665][ T3547] ? is_dynamic_key+0x260/0x260
[ 59.751522][ T3547] ? mark_lock+0x9a/0x340
[ 59.755861][ T3547] ? __lock_acquire+0x125b/0x1f80
[ 59.760907][ T3547] ? create_page_buffers+0x1d2/0x4b0
[ 59.766209][ T3547] ? __lock_acquire+0x1f80/0x1f80
[ 59.771255][ T3547] ? create_page_buffers+0x24e/0x4b0
[ 59.776548][ T3547] __block_write_begin_int+0x544/0x1a30
[ 59.782104][ T3547] ? xas_load+0x11a/0x140
[ 59.786444][ T3547] ? make_le_item_head+0x5c0/0x5c0
[ 59.791565][ T3547] ? page_zero_new_buffers+0x650/0x650
[ 59.797033][ T3547] ? __block_write_begin+0x61/0x150
[ 59.802243][ T3547] ? reiserfs_write_begin+0x17f/0x510
[ 59.807627][ T3547] reiserfs_write_begin+0x249/0x510
[ 59.812833][ T3547] ? reiserfs_write_lock+0x76/0xd0
[ 59.817942][ T3547] generic_cont_expand_simple+0x187/0x2a0
[ 59.823659][ T3547] ? submit_bh+0x20/0x20
[ 59.827901][ T3547] ? ktime_get_coarse_real_ts64+0x36/0x120
[ 59.833708][ T3547] ? setattr_prepare+0x1e0/0xc20
[ 59.838654][ T3547] reiserfs_setattr+0x606/0x11c0
[ 59.843597][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0
[ 59.849058][ T3547] ? ktime_get_coarse_real_ts64+0x107/0x120
[ 59.854955][ T3547] ? current_time+0x1d1/0x2f0
[ 59.859642][ T3547] ? atime_needs_update+0x7b0/0x7b0
[ 59.864847][ T3547] ? rwsem_write_trylock+0x166/0x210
[ 59.870136][ T3547] ? bpf_lsm_inode_setattr+0x5/0x10
[ 59.875336][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0
[ 59.880819][ T3547] notify_change+0xce3/0xfc0
[ 59.885421][ T3547] do_truncate+0x21c/0x300
[ 59.889841][ T3547] ? put_page_bootmem+0x2e0/0x2e0
[ 59.894869][ T3547] ? print_irqtrace_events+0x210/0x210
[ 59.900341][ T3547] ? print_irqtrace_events+0x210/0x210
[ 59.905808][ T3547] ? bpf_lsm_path_truncate+0x5/0x10
[ 59.911004][ T3547] do_sys_ftruncate+0x2e2/0x380
[ 59.915863][ T3547] do_syscall_64+0x3d/0xb0
[ 59.920287][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.926187][ T3547] RIP: 0033:0x7f112b474679
[ 59.930602][ T3547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 59.950206][ T3547] RSP: 002b:00007ffcf2207b08 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 59.958622][ T3547] RAX: ffffffffffffffda RBX: 00007ffcf2207cd8 RCX: 00007f112b474679
[ 59.966592][ T3547] RDX: 00007f112b474679 RSI: 0000000002007fff RDI: 0000000000000005
[ 59.974559][ T3547] RBP: 00007f112b4e8610 R08: 00007ffcf2207cd8 R09: 00007ffcf2207cd8
[ 59.982529][ T3547] R10: 00007ffcf2207cd8 R11: 0000000000000246 R12: 0000000000000001
[ 59.990498][ T3547] R13: 00007ffcf2207cc8 R14: 0000000000000001 R15: 0000000000000001
[ 59.998477][ T3547]
[ 60.001490][ T3547]
[ 60.003808][ T3547] The buggy address belongs to the physical page:
[ 60.010215][ T3547] page:ffffea0001c81e00 refcount:2 mapcount:0 mapping:ffff888073e090f8 index:0xc pfn:0x72078
[ 60.020360][ T3547] memcg:ffff88813fe28000
[ 60.024594][ T3547] aops:reiserfs_address_space_operations ino:2 dentry name:"hugetlb.1GB.usage_in_bytes"
[ 60.034314][ T3547] flags: 0xfff2000000201c(uptodate|dirty|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[ 60.043774][ T3547] raw: 00fff2000000201c ffffea0001c81dc8 ffffea0001c81e48 ffff888073e090f8
[ 60.052353][ T3547] raw: 000000000000000c ffff888070095cb0 00000002ffffffff ffff88813fe28000
[ 60.060924][ T3547] page dumped because: kasan: bad access detected
[ 60.067327][ T3547] page_owner tracks the page as allocated
[ 60.073033][ T3547] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), pid 3547, tgid 3547 (syz-executor317), ts 59407881854, free_ts 53484059742
[ 60.092046][ T3547] post_alloc_hook+0x18d/0x1b0
[ 60.096825][ T3547] get_page_from_freelist+0x31a1/0x3320
[ 60.102366][ T3547] __alloc_pages+0x28d/0x770
[ 60.106953][ T3547] folio_alloc+0x1a/0x50
[ 60.111202][ T3547] filemap_alloc_folio+0xda/0x4f0
[ 60.116231][ T3547] __filemap_get_folio+0x749/0xe80
[ 60.121346][ T3547] pagecache_get_page+0x28/0x250
[ 60.126287][ T3547] reiserfs_write_begin+0x51/0x510
[ 60.131404][ T3547] generic_cont_expand_simple+0x187/0x2a0
[ 60.137119][ T3547] reiserfs_setattr+0x606/0x11c0
[ 60.142064][ T3547] notify_change+0xce3/0xfc0
[ 60.146658][ T3547] do_truncate+0x21c/0x300
[ 60.151075][ T3547] do_sys_ftruncate+0x2e2/0x380
[ 60.155932][ T3547] do_syscall_64+0x3d/0xb0
[ 60.160353][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.166253][ T3547] page last free stack trace:
[ 60.170920][ T3547] free_unref_page_prepare+0xf63/0x1120
[ 60.176472][ T3547] free_unref_page_list+0x663/0x900
[ 60.181715][ T3547] release_pages+0x2836/0x2b40
[ 60.186492][ T3547] tlb_flush_mmu+0xfc/0x210
[ 60.190998][ T3547] tlb_finish_mmu+0xce/0x1f0
[ 60.195582][ T3547] unmap_region+0x29f/0x2f0
[ 60.200089][ T3547] do_mas_align_munmap+0xec8/0x15f0
[ 60.205291][ T3547] do_mas_munmap+0x246/0x2b0
[ 60.209882][ T3547] __vm_munmap+0x268/0x370
[ 60.214300][ T3547] __x64_sys_munmap+0x5c/0x70
[ 60.218980][ T3547] do_syscall_64+0x3d/0xb0
[ 60.223401][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.229298][ T3547]
[ 60.231617][ T3547] Memory state around the buggy address:
[ 60.237239][ T3547] ffff888072077f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.245297][ T3547] ffff888072077f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.253349][ T3547] >ffff888072078000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.261399][ T3547] ^
[ 60.265460][ T3547] ffff888072078080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.273515][ T3547] ffff888072078100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.281567][ T3547] ==================================================================
[ 60.290701][ T3547] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 60.297920][ T3547] CPU: 1 PID: 3547 Comm: syz-executor317 Not tainted 6.1.58-syzkaller #0
[ 60.306351][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 60.316417][ T3547] Call Trace:
[ 60.319698][ T3547]
[ 60.322628][ T3547] dump_stack_lvl+0x1e3/0x2cb
[ 60.327317][ T3547] ? nf_tcp_handle_invalid+0x642/0x642
[ 60.332792][ T3547] ? panic+0x75d/0x75d
[ 60.336867][ T3547] ? vscnprintf+0x59/0x80
[ 60.341206][ T3547] panic+0x318/0x75d
[ 60.345103][ T3547] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 60.351267][ T3547] ? check_panic_on_warn+0x1d/0xa0
[ 60.356379][ T3547] ? memcpy_page_flushcache+0xfc/0xfc
[ 60.361749][ T3547] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 60.367728][ T3547] ? _raw_spin_unlock+0x40/0x40
[ 60.372596][ T3547] check_panic_on_warn+0x7e/0xa0
[ 60.377552][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 60.382936][ T3547] end_report+0x66/0x110
[ 60.387202][ T3547] kasan_report+0x143/0x160
[ 60.391728][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 60.397111][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 60.402487][ T3547] kasan_check_range+0x27f/0x290
[ 60.407431][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0
[ 60.412809][ T3547] memmove+0x25/0x60
[ 60.416714][ T3547] leaf_paste_in_buffer+0x1b8/0xab0
[ 60.421920][ T3547] balance_leaf+0x667c/0x12510
[ 60.426701][ T3547] ? print_irqtrace_events+0x210/0x210
[ 60.432176][ T3547] ? do_balance+0x8f0/0x8f0
[ 60.436702][ T3547] ? write_boundary_block+0xb0/0xb0
[ 60.441911][ T3547] ? do_raw_spin_lock+0x14a/0x370
[ 60.446942][ T3547] ? do_raw_spin_unlock+0x137/0x8a0
[ 60.452148][ T3547] ? __getblk_gfp+0x934/0xa20
[ 60.456852][ T3547] ? get_empty_nodes+0xad9/0xd70
[ 60.461788][ T3547] ? direntry_part_size+0xb0/0x1a0
[ 60.466913][ T3547] ? __wake_up+0x1c0/0x1c0
[ 60.471336][ T3547] ? get_neighbors+0x1010/0x1010
[ 60.476273][ T3547] ? is_leaf_removable+0x8c0/0x8c0
[ 60.481383][ T3547] ? get_neighbors+0x631/0x1010
[ 60.486235][ T3547] ? reiserfs_prepare_for_journal+0x269/0x280
[ 60.492313][ T3547] ? fix_nodes+0x7abc/0x8c70
[ 60.496903][ T3547] ? read_lock_is_recursive+0x10/0x10
[ 60.502296][ T3547] do_balance+0x309/0x8f0
[ 60.506639][ T3547] ? get_right_neighbor_position+0x210/0x210
[ 60.512627][ T3547] ? preempt_count_add+0x8f/0x180
[ 60.517693][ T3547] ? reiserfs_paste_into_item+0x3ef/0x880
[ 60.523418][ T3547] reiserfs_paste_into_item+0x73b/0x880
[ 60.528974][ T3547] ? reiserfs_cut_from_item+0x2580/0x2580
[ 60.534742][ T3547] ? reiserfs_get_block+0x19b3/0x5150
[ 60.540120][ T3547] ? rcu_is_watching+0x11/0xb0
[ 60.544891][ T3547] ? __kmalloc+0xe2/0x230
[ 60.549231][ T3547] reiserfs_get_block+0x2259/0x5150
[ 60.554470][ T3547] ? make_le_item_head+0x5c0/0x5c0
[ 60.559591][ T3547] ? register_lock_class+0x100/0x990
[ 60.564897][ T3547] ? generic_cont_expand_simple+0x187/0x2a0
[ 60.570801][ T3547] ? reiserfs_setattr+0x606/0x11c0
[ 60.575929][ T3547] ? notify_change+0xce3/0xfc0
[ 60.580705][ T3547] ? do_truncate+0x21c/0x300
[ 60.585308][ T3547] ? do_sys_ftruncate+0x2e2/0x380
[ 60.590344][ T3547] ? do_syscall_64+0x3d/0xb0
[ 60.594946][ T3547] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.601026][ T3547] ? is_dynamic_key+0x260/0x260
[ 60.605907][ T3547] ? mark_lock+0x9a/0x340
[ 60.610250][ T3547] ? __lock_acquire+0x125b/0x1f80
[ 60.615311][ T3547] ? create_page_buffers+0x1d2/0x4b0
[ 60.620699][ T3547] ? __lock_acquire+0x1f80/0x1f80
[ 60.625744][ T3547] ? create_page_buffers+0x24e/0x4b0
[ 60.631040][ T3547] __block_write_begin_int+0x544/0x1a30
[ 60.636597][ T3547] ? xas_load+0x11a/0x140
[ 60.640954][ T3547] ? make_le_item_head+0x5c0/0x5c0
[ 60.646074][ T3547] ? page_zero_new_buffers+0x650/0x650
[ 60.651543][ T3547] ? __block_write_begin+0x61/0x150
[ 60.656757][ T3547] ? reiserfs_write_begin+0x17f/0x510
[ 60.662138][ T3547] reiserfs_write_begin+0x249/0x510
[ 60.667354][ T3547] ? reiserfs_write_lock+0x76/0xd0
[ 60.672466][ T3547] generic_cont_expand_simple+0x187/0x2a0
[ 60.678191][ T3547] ? submit_bh+0x20/0x20
[ 60.682435][ T3547] ? ktime_get_coarse_real_ts64+0x36/0x120
[ 60.688248][ T3547] ? setattr_prepare+0x1e0/0xc20
[ 60.693198][ T3547] reiserfs_setattr+0x606/0x11c0
[ 60.698154][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0
[ 60.703624][ T3547] ? ktime_get_coarse_real_ts64+0x107/0x120
[ 60.709529][ T3547] ? current_time+0x1d1/0x2f0
[ 60.714216][ T3547] ? atime_needs_update+0x7b0/0x7b0
[ 60.719428][ T3547] ? rwsem_write_trylock+0x166/0x210
[ 60.724726][ T3547] ? bpf_lsm_inode_setattr+0x5/0x10
[ 60.729923][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0
[ 60.735394][ T3547] notify_change+0xce3/0xfc0
[ 60.740021][ T3547] do_truncate+0x21c/0x300
[ 60.744533][ T3547] ? put_page_bootmem+0x2e0/0x2e0
[ 60.749564][ T3547] ? print_irqtrace_events+0x210/0x210
[ 60.755030][ T3547] ? print_irqtrace_events+0x210/0x210
[ 60.760498][ T3547] ? bpf_lsm_path_truncate+0x5/0x10
[ 60.765697][ T3547] do_sys_ftruncate+0x2e2/0x380
[ 60.770556][ T3547] do_syscall_64+0x3d/0xb0
[ 60.774981][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.780886][ T3547] RIP: 0033:0x7f112b474679
[ 60.785301][ T3547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 60.804922][ T3547] RSP: 002b:00007ffcf2207b08 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 60.813339][ T3547] RAX: ffffffffffffffda RBX: 00007ffcf2207cd8 RCX: 00007f112b474679
[ 60.821331][ T3547] RDX: 00007f112b474679 RSI: 0000000002007fff RDI: 0000000000000005
[ 60.829303][ T3547] RBP: 00007f112b4e8610 R08: 00007ffcf2207cd8 R09: 00007ffcf2207cd8
[ 60.837274][ T3547] R10: 00007ffcf2207cd8 R11: 0000000000000246 R12: 0000000000000001
[ 60.845244][ T3547] R13: 00007ffcf2207cc8 R14: 0000000000000001 R15: 0000000000000001
[ 60.853220][ T3547]
[ 60.856536][ T3547] Kernel Offset: disabled
[ 60.860858][ T3547] Rebooting in 86400 seconds..