Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts.
executing program
[ 53.959001][ T3498] loop0: detected capacity change from 0 to 8192
[ 53.970274][ T3498] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 53.979791][ T3498] REISERFS (device loop0): using ordered data mode
[ 53.986350][ T3498] reiserfs: using flush barriers
[ 53.992703][ T3498] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 54.009488][ T3498] REISERFS (device loop0): checking transaction log (loop0)
[ 54.018972][ T3498] REISERFS (device loop0): Using r5 hash to sort names
[ 54.031954][ T3498] reiserfs: enabling write barrier flush mode
[ 54.047739][ T3498] ==================================================================
[ 54.055985][ T3498] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x95f/0x13a0
[ 54.063667][ T3498] Read of size 18446744073709551584 at addr ffff888070038fa4 by task syz-executor154/3498
[ 54.073561][ T3498]
[ 54.075884][ T3498] CPU: 0 PID: 3498 Comm: syz-executor154 Not tainted 5.15.124-syzkaller #0
[ 54.084556][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 54.094735][ T3498] Call Trace:
[ 54.098020][ T3498]
[ 54.101036][ T3498] dump_stack_lvl+0x1e3/0x2cb
[ 54.105717][ T3498] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 54.111382][ T3498] ? _printk+0xd1/0x111
[ 54.115634][ T3498] ? __wake_up_klogd+0xcc/0x100
[ 54.120527][ T3498] ? panic+0x84d/0x84d
[ 54.124613][ T3498] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 54.130082][ T3498] print_address_description+0x63/0x3b0
[ 54.135635][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.140924][ T3498] kasan_report+0x16b/0x1c0
[ 54.145520][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.150810][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.156123][ T3498] kasan_check_range+0x27e/0x290
[ 54.161061][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.166345][ T3498] memmove+0x25/0x60
[ 54.170239][ T3498] leaf_paste_entries+0x95f/0x13a0
[ 54.175366][ T3498] balance_leaf+0xbd1e/0x12510
[ 54.180140][ T3498] ? print_irqtrace_events+0x210/0x210
[ 54.185605][ T3498] ? do_raw_spin_unlock+0x137/0x8b0
[ 54.190892][ T3498] ? lockdep_hardirqs_on+0x94/0x130
[ 54.196106][ T3498] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 54.202013][ T3498] ? _raw_spin_unlock+0x40/0x40
[ 54.206869][ T3498] ? stack_trace_save+0x113/0x1c0
[ 54.211992][ T3498] ? do_balance+0x8f0/0x8f0
[ 54.216505][ T3498] ? __lock_acquire+0x1295/0x1ff0
[ 54.221626][ T3498] ? stack_depot_save+0x3db/0x440
[ 54.227097][ T3498] ? ____kasan_kmalloc+0xd1/0xf0
[ 54.232125][ T3498] ? ____kasan_kmalloc+0xba/0xf0
[ 54.237071][ T3498] ? __kmalloc+0x168/0x300
[ 54.241481][ T3498] ? fix_nodes+0x69aa/0x8c70
[ 54.246068][ T3498] ? reiserfs_paste_into_item+0x65d/0x880
[ 54.251783][ T3498] ? reiserfs_add_entry+0x9b8/0xd70
[ 54.256977][ T3498] ? reiserfs_mkdir+0x6bc/0x8f0
[ 54.261825][ T3498] ? reiserfs_xattr_init+0x348/0x730
[ 54.267107][ T3498] ? reiserfs_remount+0x12b8/0x18e0
[ 54.272300][ T3498] ? reconfigure_super+0x3c5/0x7c0
[ 54.277496][ T3498] ? path_mount+0xceb/0x10a0
[ 54.282091][ T3498] ? __se_sys_mount+0x2d5/0x3c0
[ 54.286953][ T3498] ? do_syscall_64+0x3d/0xb0
[ 54.291715][ T3498] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.297802][ T3498] ? get_parents+0x513/0xfa0
[ 54.302398][ T3498] ? __wake_up_bit+0x190/0x190
[ 54.307255][ T3498] ? set_parameters+0x8d0/0x8d0
[ 54.312109][ T3498] ? get_neighbors+0x631/0x1010
[ 54.316965][ T3498] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 54.323028][ T3498] ? fix_nodes+0x7abc/0x8c70
[ 54.327614][ T3498] ? __might_sleep+0xc0/0xc0
[ 54.332226][ T3498] do_balance+0x309/0x8f0
[ 54.336565][ T3498] ? get_right_neighbor_position+0x210/0x210
[ 54.342565][ T3498] ? reiserfs_paste_into_item+0x3ef/0x880
[ 54.348286][ T3498] reiserfs_paste_into_item+0x73b/0x880
[ 54.353841][ T3498] ? reiserfs_cut_from_item+0x2560/0x2560
[ 54.360915][ T3498] ? reiserfs_get_parent+0x2c0/0x2c0
[ 54.366196][ T3498] ? inode_get_bytes+0x72/0xa0
[ 54.370979][ T3498] ? _find_first_zero_bit+0x60/0xf0
[ 54.376178][ T3498] reiserfs_add_entry+0x9b8/0xd70
[ 54.381218][ T3498] ? drop_new_inode+0x60/0x60
[ 54.385916][ T3498] ? do_journal_begin_r+0xdad/0x1000
[ 54.391236][ T3498] ? journal_begin+0x1ef/0x350
[ 54.396021][ T3498] reiserfs_mkdir+0x6bc/0x8f0
[ 54.400693][ T3498] ? __might_sleep+0xc0/0xc0
[ 54.405301][ T3498] ? reiserfs_symlink+0x720/0x720
[ 54.410331][ T3498] ? down_write+0x10e/0x170
[ 54.414834][ T3498] ? mutex_unlock+0x10/0x10
[ 54.419360][ T3498] reiserfs_xattr_init+0x348/0x730
[ 54.424475][ T3498] reiserfs_remount+0x12b8/0x18e0
[ 54.429504][ T3498] ? reiserfs_statfs+0x380/0x380
[ 54.434442][ T3498] ? shrink_dcache_sb+0x3be/0x410
[ 54.439470][ T3498] ? dentry_lru_isolate+0x2f0/0x2f0
[ 54.444668][ T3498] ? kmem_cache_alloc_trace+0x143/0x290
[ 54.450247][ T3498] reconfigure_super+0x3c5/0x7c0
[ 54.455193][ T3498] path_mount+0xceb/0x10a0
[ 54.459630][ T3498] ? user_path_at_empty+0x12b/0x180
[ 54.464837][ T3498] __se_sys_mount+0x2d5/0x3c0
[ 54.469519][ T3498] ? __x64_sys_mount+0xc0/0xc0
[ 54.474284][ T3498] ? syscall_enter_from_user_mode+0x2e/0x230
[ 54.480260][ T3498] ? lockdep_hardirqs_on+0x94/0x130
[ 54.485456][ T3498] ? __x64_sys_mount+0x1c/0xc0
[ 54.490225][ T3498] do_syscall_64+0x3d/0xb0
[ 54.494646][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.500537][ T3498] RIP: 0033:0x7f4729fcdefa
[ 54.504952][ T3498] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.524553][ T3498] RSP: 002b:00007ffd34681498 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 54.533050][ T3498] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f4729fcdefa
[ 54.541027][ T3498] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000
[ 54.548992][ T3498] RBP: 00007ffd34681530 R08: 00007ffd34681530 R09: 0000000000000000
[ 54.556978][ T3498] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100
[ 54.564944][ T3498] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80
[ 54.572924][ T3498]
[ 54.575935][ T3498]
[ 54.578251][ T3498] The buggy address belongs to the page:
[ 54.583889][ T3498] page:ffffea0001c00e00 refcount:2 mapcount:0 mapping:ffff8881408937b0 index:0x213 pfn:0x70038
[ 54.594210][ T3498] memcg:ffff8881407a4000
[ 54.598442][ T3498] aops:def_blk_aops ino:700000
[ 54.603215][ T3498] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 54.612943][ T3498] raw: 00fff00000002032 ffffea0001c00ec8 ffffea00006bfac8 ffff8881408937b0
[ 54.621694][ T3498] raw: 0000000000000213 ffff888074385e80 00000002ffffffff ffff8881407a4000
[ 54.630275][ T3498] page dumped because: kasan: bad access detected
[ 54.636677][ T3498] page_owner tracks the page as allocated
[ 54.642391][ T3498] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 3498, ts 54018545913, free_ts 53899099281
[ 54.660440][ T3498] get_page_from_freelist+0x322a/0x33c0
[ 54.666003][ T3498] __alloc_pages+0x272/0x700
[ 54.670624][ T3498] __page_cache_alloc+0xd4/0x4a0
[ 54.676167][ T3498] pagecache_get_page+0xa91/0x1010
[ 54.681277][ T3498] __getblk_gfp+0x22a/0xaf0
[ 54.685799][ T3498] search_by_key+0x46d/0x4730
[ 54.690472][ T3498] reiserfs_read_locked_inode+0x23c/0x2950
[ 54.696270][ T3498] reiserfs_fill_super+0x11bf/0x2690
[ 54.701550][ T3498] mount_bdev+0x2c9/0x3f0
[ 54.705880][ T3498] legacy_get_tree+0xeb/0x180
[ 54.710548][ T3498] vfs_get_tree+0x88/0x270
[ 54.714962][ T3498] do_new_mount+0x28b/0xae0
[ 54.719460][ T3498] __se_sys_mount+0x2d5/0x3c0
[ 54.724143][ T3498] do_syscall_64+0x3d/0xb0
[ 54.728555][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.734465][ T3498] page last free stack trace:
[ 54.739131][ T3498] free_unref_page_prepare+0xc34/0xcf0
[ 54.744587][ T3498] free_unref_page_list+0x1f7/0x8e0
[ 54.749789][ T3498] release_pages+0x1bb9/0x1f40
[ 54.754560][ T3498] tlb_finish_mmu+0x177/0x320
[ 54.759247][ T3498] exit_mmap+0x3cd/0x670
[ 54.763547][ T3498] __mmput+0x112/0x3b0
[ 54.767623][ T3498] exec_mmap+0x543/0x630
[ 54.771866][ T3498] begin_new_exec+0x75d/0xfe0
[ 54.776625][ T3498] load_elf_binary+0x945/0x2750
[ 54.781479][ T3498] bprm_execve+0x8fd/0x17c0
[ 54.785992][ T3498] do_execveat_common+0x583/0x720
[ 54.791012][ T3498] __x64_sys_execve+0x8e/0xa0
[ 54.795785][ T3498] do_syscall_64+0x3d/0xb0
[ 54.800202][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.806094][ T3498]
[ 54.808414][ T3498] Memory state around the buggy address:
[ 54.814033][ T3498] ffff888070038e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.822106][ T3498] ffff888070038f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.830177][ T3498] >ffff888070038f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.838240][ T3498] ^
[ 54.843378][ T3498] ffff888070039000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.851536][ T3498] ffff888070039080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.859611][ T3498] ==================================================================
[ 54.867669][ T3498] Disabling lock debugging due to kernel taint
[ 54.874177][ T3498] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 54.881403][ T3498] CPU: 0 PID: 3498 Comm: syz-executor154 Tainted: G B 5.15.124-syzkaller #0
[ 54.891405][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 54.901535][ T3498] Call Trace:
[ 54.904814][ T3498]
[ 54.907742][ T3498] dump_stack_lvl+0x1e3/0x2cb
[ 54.912423][ T3498] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 54.918079][ T3498] ? panic+0x84d/0x84d
[ 54.922148][ T3498] ? rcu_is_watching+0x11/0xa0
[ 54.926905][ T3498] ? preempt_schedule_common+0xa6/0xd0
[ 54.932361][ T3498] panic+0x318/0x84d
[ 54.936247][ T3498] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 54.942394][ T3498] ? check_panic_on_warn+0x1d/0xa0
[ 54.947498][ T3498] ? fb_is_primary_device+0xcc/0xcc
[ 54.952796][ T3498] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 54.958784][ T3498] ? _raw_spin_unlock+0x40/0x40
[ 54.963642][ T3498] check_panic_on_warn+0x7e/0xa0
[ 54.968585][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.973876][ T3498] end_report+0x6d/0xf0
[ 54.978029][ T3498] kasan_report+0x18e/0x1c0
[ 54.982624][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.987927][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 54.993224][ T3498] kasan_check_range+0x27e/0x290
[ 54.998172][ T3498] ? leaf_paste_entries+0x95f/0x13a0
[ 55.003535][ T3498] memmove+0x25/0x60
[ 55.007451][ T3498] leaf_paste_entries+0x95f/0x13a0
[ 55.012607][ T3498] balance_leaf+0xbd1e/0x12510
[ 55.017374][ T3498] ? print_irqtrace_events+0x210/0x210
[ 55.022835][ T3498] ? do_raw_spin_unlock+0x137/0x8b0
[ 55.028033][ T3498] ? lockdep_hardirqs_on+0x94/0x130
[ 55.033228][ T3498] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 55.039120][ T3498] ? _raw_spin_unlock+0x40/0x40
[ 55.043969][ T3498] ? stack_trace_save+0x113/0x1c0
[ 55.048997][ T3498] ? do_balance+0x8f0/0x8f0
[ 55.053511][ T3498] ? __lock_acquire+0x1295/0x1ff0
[ 55.058541][ T3498] ? stack_depot_save+0x3db/0x440
[ 55.063586][ T3498] ? ____kasan_kmalloc+0xd1/0xf0
[ 55.068531][ T3498] ? ____kasan_kmalloc+0xba/0xf0
[ 55.073484][ T3498] ? __kmalloc+0x168/0x300
[ 55.078267][ T3498] ? fix_nodes+0x69aa/0x8c70
[ 55.082865][ T3498] ? reiserfs_paste_into_item+0x65d/0x880
[ 55.088593][ T3498] ? reiserfs_add_entry+0x9b8/0xd70
[ 55.093795][ T3498] ? reiserfs_mkdir+0x6bc/0x8f0
[ 55.098793][ T3498] ? reiserfs_xattr_init+0x348/0x730
[ 55.104083][ T3498] ? reiserfs_remount+0x12b8/0x18e0
[ 55.109366][ T3498] ? reconfigure_super+0x3c5/0x7c0
[ 55.114478][ T3498] ? path_mount+0xceb/0x10a0
[ 55.119071][ T3498] ? __se_sys_mount+0x2d5/0x3c0
[ 55.123916][ T3498] ? do_syscall_64+0x3d/0xb0
[ 55.128501][ T3498] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 55.134572][ T3498] ? get_parents+0x513/0xfa0
[ 55.139163][ T3498] ? __wake_up_bit+0x190/0x190
[ 55.143947][ T3498] ? set_parameters+0x8d0/0x8d0
[ 55.148793][ T3498] ? get_neighbors+0x631/0x1010
[ 55.153642][ T3498] ? reiserfs_prepare_for_journal+0x26b/0x280
[ 55.159704][ T3498] ? fix_nodes+0x7abc/0x8c70
[ 55.164287][ T3498] ? __might_sleep+0xc0/0xc0
[ 55.168878][ T3498] do_balance+0x309/0x8f0
[ 55.173202][ T3498] ? get_right_neighbor_position+0x210/0x210
[ 55.179180][ T3498] ? reiserfs_paste_into_item+0x3ef/0x880
[ 55.184896][ T3498] reiserfs_paste_into_item+0x73b/0x880
[ 55.190446][ T3498] ? reiserfs_cut_from_item+0x2560/0x2560
[ 55.196181][ T3498] ? reiserfs_get_parent+0x2c0/0x2c0
[ 55.201460][ T3498] ? inode_get_bytes+0x72/0xa0
[ 55.206356][ T3498] ? _find_first_zero_bit+0x60/0xf0
[ 55.211573][ T3498] reiserfs_add_entry+0x9b8/0xd70
[ 55.216631][ T3498] ? drop_new_inode+0x60/0x60
[ 55.221322][ T3498] ? do_journal_begin_r+0xdad/0x1000
[ 55.226631][ T3498] ? journal_begin+0x1ef/0x350
[ 55.231419][ T3498] reiserfs_mkdir+0x6bc/0x8f0
[ 55.236093][ T3498] ? __might_sleep+0xc0/0xc0
[ 55.240677][ T3498] ? reiserfs_symlink+0x720/0x720
[ 55.245700][ T3498] ? down_write+0x10e/0x170
[ 55.250218][ T3498] ? mutex_unlock+0x10/0x10
[ 55.254720][ T3498] reiserfs_xattr_init+0x348/0x730
[ 55.259830][ T3498] reiserfs_remount+0x12b8/0x18e0
[ 55.264854][ T3498] ? reiserfs_statfs+0x380/0x380
[ 55.269790][ T3498] ? shrink_dcache_sb+0x3be/0x410
[ 55.274829][ T3498] ? dentry_lru_isolate+0x2f0/0x2f0
[ 55.280025][ T3498] ? kmem_cache_alloc_trace+0x143/0x290
[ 55.285569][ T3498] reconfigure_super+0x3c5/0x7c0
[ 55.290504][ T3498] path_mount+0xceb/0x10a0
[ 55.294918][ T3498] ? user_path_at_empty+0x12b/0x180
[ 55.300110][ T3498] __se_sys_mount+0x2d5/0x3c0
[ 55.304787][ T3498] ? __x64_sys_mount+0xc0/0xc0
[ 55.309549][ T3498] ? syscall_enter_from_user_mode+0x2e/0x230
[ 55.315528][ T3498] ? lockdep_hardirqs_on+0x94/0x130
[ 55.320719][ T3498] ? __x64_sys_mount+0x1c/0xc0
[ 55.325477][ T3498] do_syscall_64+0x3d/0xb0
[ 55.329914][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 55.335805][ T3498] RIP: 0033:0x7f4729fcdefa
[ 55.340214][ T3498] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 55.359811][ T3498] RSP: 002b:00007ffd34681498 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 55.368218][ T3498] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f4729fcdefa
[ 55.376181][ T3498] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000
[ 55.384171][ T3498] RBP: 00007ffd34681530 R08: 00007ffd34681530 R09: 0000000000000000
[ 55.392137][ T3498] R10: 0000000001a484bc R11: 0000000000000286 R12: 0000000020000100
[ 55.400130][ T3498] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000d80
[ 55.408113][ T3498]
[ 55.411235][ T3498] Kernel Offset: disabled
[ 55.415559][ T3498] Rebooting in 86400 seconds..