Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. executing program [ 58.822691][ T3547] loop0: detected capacity change from 0 to 8192 [ 58.833083][ T3547] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.847511][ T3547] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 58.857019][ T3547] REISERFS (device loop0): using ordered data mode [ 58.863526][ T3547] reiserfs: using flush barriers [ 58.870003][ T3547] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.886832][ T3547] REISERFS (device loop0): checking transaction log (loop0) [ 58.940124][ T3547] REISERFS (device loop0): Using r5 hash to sort names [ 58.947262][ T3547] REISERFS (device loop0): using 3.5.x disk format [ 58.954966][ T3547] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 58.971214][ T3547] ================================================================== [ 58.979320][ T3547] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1b8/0xab0 [ 58.987005][ T3547] Read of size 18446744073709551365 at addr ffff8880720d7000 by task syz-executor233/3547 [ 58.997095][ T3547] [ 58.999449][ T3547] CPU: 1 PID: 3547 Comm: syz-executor233 Not tainted 6.1.57-syzkaller #0 [ 59.007895][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 59.019261][ T3547] Call Trace: [ 59.022889][ T3547] [ 59.025818][ T3547] dump_stack_lvl+0x1e3/0x2cb [ 59.030520][ T3547] ? nf_tcp_handle_invalid+0x642/0x642 [ 59.036005][ T3547] ? panic+0x75d/0x75d [ 59.040082][ T3547] ? _printk+0xd1/0x111 [ 59.044243][ T3547] ? _raw_spin_lock_irqsave+0xac/0x120 [ 59.050835][ T3547] print_report+0x15f/0x4f0 [ 59.056051][ T3547] ? leaf_move_items+0x1c4c/0x28a0 [ 59.061161][ T3547] ? __virt_addr_valid+0x22b/0x2e0 [ 59.067151][ T3547] ? __phys_addr+0xb6/0x170 [ 59.071661][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 59.078164][ T3547] kasan_report+0x136/0x160 [ 59.082676][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 59.089958][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 59.095331][ T3547] kasan_check_range+0x27f/0x290 [ 59.100297][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 59.105669][ T3547] memmove+0x25/0x60 [ 59.109649][ T3547] leaf_paste_in_buffer+0x1b8/0xab0 [ 59.114859][ T3547] balance_leaf+0x667c/0x12510 [ 59.123657][ T3547] ? print_irqtrace_events+0x210/0x210 [ 59.130021][ T3547] ? do_balance+0x8f0/0x8f0 [ 59.136238][ T3547] ? write_boundary_block+0xb0/0xb0 [ 59.141636][ T3547] ? do_raw_spin_lock+0x14a/0x370 [ 59.147935][ T3547] ? do_raw_spin_unlock+0x137/0x8a0 [ 59.154451][ T3547] ? __getblk_gfp+0x934/0xa20 [ 59.160192][ T3547] ? get_empty_nodes+0xad9/0xd70 [ 59.165484][ T3547] ? direntry_part_size+0xb0/0x1a0 [ 59.170701][ T3547] ? __wake_up+0x1c0/0x1c0 [ 59.175127][ T3547] ? get_neighbors+0x1010/0x1010 [ 59.180158][ T3547] ? is_leaf_removable+0x8c0/0x8c0 [ 59.185762][ T3547] ? get_neighbors+0x631/0x1010 [ 59.191144][ T3547] ? reiserfs_prepare_for_journal+0x269/0x280 [ 59.199309][ T3547] ? fix_nodes+0x7abc/0x8c70 [ 59.205389][ T3547] ? read_lock_is_recursive+0x10/0x10 [ 59.211309][ T3547] do_balance+0x309/0x8f0 [ 59.216093][ T3547] ? get_right_neighbor_position+0x210/0x210 [ 59.223567][ T3547] ? reiserfs_paste_into_item+0x3ef/0x880 [ 59.230710][ T3547] reiserfs_paste_into_item+0x73b/0x880 [ 59.245657][ T3547] ? reiserfs_cut_from_item+0x2580/0x2580 [ 59.259775][ T3547] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 59.269674][ T3547] ? reiserfs_get_block+0x19b3/0x5150 [ 59.276311][ T3547] ? rcu_is_watching+0x11/0xb0 [ 59.281536][ T3547] ? __kmalloc+0xe2/0x230 [ 59.285913][ T3547] reiserfs_get_block+0x2259/0x5150 [ 59.293078][ T3547] ? make_le_item_head+0x5c0/0x5c0 [ 59.299446][ T3547] ? reiserfs_write_begin+0x249/0x510 [ 59.307578][ T3547] ? generic_cont_expand_simple+0x187/0x2a0 [ 59.315417][ T3547] ? reiserfs_setattr+0x606/0x11c0 [ 59.320750][ T3547] ? notify_change+0xce3/0xfc0 [ 59.325798][ T3547] ? do_truncate+0x21c/0x300 [ 59.330402][ T3547] ? do_sys_ftruncate+0x2e2/0x380 [ 59.335443][ T3547] ? do_syscall_64+0x3d/0xb0 [ 59.340061][ T3547] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.346149][ T3547] ? mark_lock+0x9a/0x340 [ 59.350500][ T3547] ? __lock_acquire+0x125b/0x1f80 [ 59.355661][ T3547] ? create_page_buffers+0x1d2/0x4b0 [ 59.360966][ T3547] ? __lock_acquire+0x1f80/0x1f80 [ 59.366010][ T3547] ? attach_page_private+0x110/0x300 [ 59.371369][ T3547] ? create_page_buffers+0x24e/0x4b0 [ 59.376737][ T3547] __block_write_begin_int+0x544/0x1a30 [ 59.382349][ T3547] ? xas_load+0x11a/0x140 [ 59.386708][ T3547] ? make_le_item_head+0x5c0/0x5c0 [ 59.391859][ T3547] ? page_zero_new_buffers+0x650/0x650 [ 59.397341][ T3547] ? __block_write_begin+0x61/0x150 [ 59.402587][ T3547] ? reiserfs_write_begin+0x17f/0x510 [ 59.407987][ T3547] reiserfs_write_begin+0x249/0x510 [ 59.413222][ T3547] ? reiserfs_write_lock+0x76/0xd0 [ 59.418344][ T3547] generic_cont_expand_simple+0x187/0x2a0 [ 59.424075][ T3547] ? submit_bh+0x20/0x20 [ 59.428325][ T3547] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 59.434337][ T3547] ? setattr_prepare+0x1e0/0xc20 [ 59.440872][ T3547] reiserfs_setattr+0x606/0x11c0 [ 59.446206][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0 [ 59.453816][ T3547] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 59.460615][ T3547] ? current_time+0x1d1/0x2f0 [ 59.465581][ T3547] ? atime_needs_update+0x7b0/0x7b0 [ 59.470902][ T3547] ? rwsem_write_trylock+0x166/0x210 [ 59.476239][ T3547] ? bpf_lsm_inode_setattr+0x5/0x10 [ 59.481459][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0 [ 59.486939][ T3547] notify_change+0xce3/0xfc0 [ 59.492039][ T3547] do_truncate+0x21c/0x300 [ 59.496502][ T3547] ? put_page_bootmem+0x2e0/0x2e0 [ 59.508034][ T3547] ? print_irqtrace_events+0x210/0x210 [ 59.519989][ T3547] ? print_irqtrace_events+0x210/0x210 [ 59.530256][ T3547] ? bpf_lsm_path_truncate+0x5/0x10 [ 59.541202][ T3547] do_sys_ftruncate+0x2e2/0x380 [ 59.547317][ T3547] do_syscall_64+0x3d/0xb0 [ 59.553776][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.561015][ T3547] RIP: 0033:0x7fa954ae2679 [ 59.565903][ T3547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.586823][ T3547] RSP: 002b:00007fff7186a0e8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 59.595510][ T3547] RAX: ffffffffffffffda RBX: 00007fff7186a2b8 RCX: 00007fa954ae2679 [ 59.603575][ T3547] RDX: 00007fa954ae2679 RSI: 0000000002007ffb RDI: 0000000000000005 [ 59.612385][ T3547] RBP: 00007fa954b56610 R08: 00007fff7186a2b8 R09: 00007fff7186a2b8 [ 59.620818][ T3547] R10: 00007fff7186a2b8 R11: 0000000000000246 R12: 0000000000000001 [ 59.628823][ T3547] R13: 00007fff7186a2a8 R14: 0000000000000001 R15: 0000000000000001 [ 59.636834][ T3547] [ 59.639860][ T3547] [ 59.642195][ T3547] The buggy address belongs to the physical page: [ 59.649932][ T3547] page:ffffea0001c835c0 refcount:3 mapcount:0 mapping:ffff8880731b90f8 index:0x0 pfn:0x720d7 [ 59.661309][ T3547] memcg:ffff888140058000 [ 59.665548][ T3547] aops:reiserfs_address_space_operations ino:2 dentry name:"bus" [ 59.674842][ T3547] flags: 0xfff0000000200c(uptodate|dirty|private|node=0|zone=1|lastcpupid=0x7ff) [ 59.684076][ T3547] raw: 00fff0000000200c 0000000000000000 dead000000000122 ffff8880731b90f8 [ 59.692662][ T3547] raw: 0000000000000000 ffff8880704211d0 00000003ffffffff ffff888140058000 [ 59.701238][ T3547] page dumped because: kasan: bad access detected [ 59.708950][ T3547] page_owner tracks the page as allocated [ 59.715877][ T3547] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), pid 3547, tgid 3547 (syz-executor233), ts 58968220156, free_ts 51098659079 [ 59.741090][ T3547] post_alloc_hook+0x18d/0x1b0 [ 59.749746][ T3547] get_page_from_freelist+0x31a1/0x3320 [ 59.755329][ T3547] __alloc_pages+0x28d/0x770 [ 59.760038][ T3547] folio_alloc+0x1a/0x50 [ 59.766706][ T3547] filemap_alloc_folio+0xda/0x4f0 [ 59.771957][ T3547] __filemap_get_folio+0x749/0xe80 [ 59.777358][ T3547] pagecache_get_page+0x28/0x250 [ 59.782418][ T3547] reiserfs_write_begin+0x51/0x510 [ 59.788608][ T3547] generic_perform_write+0x2fc/0x5e0 [ 59.794094][ T3547] __generic_file_write_iter+0x176/0x400 [ 59.799902][ T3547] generic_file_write_iter+0xab/0x310 [ 59.807975][ T3547] vfs_write+0x7ae/0xba0 [ 59.814541][ T3547] ksys_write+0x19c/0x2c0 [ 59.819391][ T3547] do_syscall_64+0x3d/0xb0 [ 59.823929][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.829855][ T3547] page last free stack trace: [ 59.834537][ T3547] free_unref_page_prepare+0xf63/0x1120 [ 59.840106][ T3547] free_unref_page_list+0x663/0x900 [ 59.845323][ T3547] release_pages+0x2836/0x2b40 [ 59.850106][ T3547] tlb_flush_mmu+0xfc/0x210 [ 59.854616][ T3547] tlb_finish_mmu+0xce/0x1f0 [ 59.859213][ T3547] unmap_region+0x29f/0x2f0 [ 59.863730][ T3547] do_mas_align_munmap+0xec8/0x15f0 [ 59.868944][ T3547] do_mas_munmap+0x246/0x2b0 [ 59.873553][ T3547] __vm_munmap+0x268/0x370 [ 59.877987][ T3547] __x64_sys_munmap+0x5c/0x70 [ 59.882682][ T3547] do_syscall_64+0x3d/0xb0 [ 59.887116][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.893022][ T3547] [ 59.895523][ T3547] Memory state around the buggy address: [ 59.901243][ T3547] ffff8880720d6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.909309][ T3547] ffff8880720d6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.917383][ T3547] >ffff8880720d7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.926492][ T3547] ^ [ 59.933605][ T3547] ffff8880720d7080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.943583][ T3547] ffff8880720d7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.951647][ T3547] ================================================================== [ 59.960271][ T3547] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.967761][ T3547] CPU: 1 PID: 3547 Comm: syz-executor233 Not tainted 6.1.57-syzkaller #0 [ 59.977597][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 59.987837][ T3547] Call Trace: [ 59.991126][ T3547] [ 59.994062][ T3547] dump_stack_lvl+0x1e3/0x2cb [ 59.998856][ T3547] ? nf_tcp_handle_invalid+0x642/0x642 [ 60.004331][ T3547] ? panic+0x75d/0x75d [ 60.008414][ T3547] ? vscnprintf+0x59/0x80 [ 60.013018][ T3547] panic+0x318/0x75d [ 60.016925][ T3547] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 60.023103][ T3547] ? check_panic_on_warn+0x1d/0xa0 [ 60.028225][ T3547] ? memcpy_page_flushcache+0xfc/0xfc [ 60.033612][ T3547] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 60.039605][ T3547] ? _raw_spin_unlock+0x40/0x40 [ 60.044472][ T3547] check_panic_on_warn+0x7e/0xa0 [ 60.049423][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 60.054820][ T3547] end_report+0x66/0x110 [ 60.059080][ T3547] kasan_report+0x143/0x160 [ 60.063602][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 60.068979][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 60.074357][ T3547] kasan_check_range+0x27f/0x290 [ 60.079304][ T3547] ? leaf_paste_in_buffer+0x1b8/0xab0 [ 60.084684][ T3547] memmove+0x25/0x60 [ 60.088689][ T3547] leaf_paste_in_buffer+0x1b8/0xab0 [ 60.093929][ T3547] balance_leaf+0x667c/0x12510 [ 60.099042][ T3547] ? print_irqtrace_events+0x210/0x210 [ 60.104550][ T3547] ? do_balance+0x8f0/0x8f0 [ 60.109087][ T3547] ? write_boundary_block+0xb0/0xb0 [ 60.114312][ T3547] ? do_raw_spin_lock+0x14a/0x370 [ 60.119360][ T3547] ? do_raw_spin_unlock+0x137/0x8a0 [ 60.124580][ T3547] ? __getblk_gfp+0x934/0xa20 [ 60.129289][ T3547] ? get_empty_nodes+0xad9/0xd70 [ 60.134239][ T3547] ? direntry_part_size+0xb0/0x1a0 [ 60.139375][ T3547] ? __wake_up+0x1c0/0x1c0 [ 60.143810][ T3547] ? get_neighbors+0x1010/0x1010 [ 60.148759][ T3547] ? is_leaf_removable+0x8c0/0x8c0 [ 60.157014][ T3547] ? get_neighbors+0x631/0x1010 [ 60.161883][ T3547] ? reiserfs_prepare_for_journal+0x269/0x280 [ 60.167988][ T3547] ? fix_nodes+0x7abc/0x8c70 [ 60.172601][ T3547] ? read_lock_is_recursive+0x10/0x10 [ 60.178006][ T3547] do_balance+0x309/0x8f0 [ 60.182364][ T3547] ? get_right_neighbor_position+0x210/0x210 [ 60.188388][ T3547] ? reiserfs_paste_into_item+0x3ef/0x880 [ 60.195568][ T3547] reiserfs_paste_into_item+0x73b/0x880 [ 60.201946][ T3547] ? reiserfs_cut_from_item+0x2580/0x2580 [ 60.208840][ T3547] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 60.215067][ T3547] ? reiserfs_get_block+0x19b3/0x5150 [ 60.220663][ T3547] ? rcu_is_watching+0x11/0xb0 [ 60.225645][ T3547] ? __kmalloc+0xe2/0x230 [ 60.230014][ T3547] reiserfs_get_block+0x2259/0x5150 [ 60.235274][ T3547] ? make_le_item_head+0x5c0/0x5c0 [ 60.240417][ T3547] ? reiserfs_write_begin+0x249/0x510 [ 60.245820][ T3547] ? generic_cont_expand_simple+0x187/0x2a0 [ 60.251721][ T3547] ? reiserfs_setattr+0x606/0x11c0 [ 60.256845][ T3547] ? notify_change+0xce3/0xfc0 [ 60.261710][ T3547] ? do_truncate+0x21c/0x300 [ 60.266312][ T3547] ? do_sys_ftruncate+0x2e2/0x380 [ 60.271348][ T3547] ? do_syscall_64+0x3d/0xb0 [ 60.275952][ T3547] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.282031][ T3547] ? mark_lock+0x9a/0x340 [ 60.286374][ T3547] ? __lock_acquire+0x125b/0x1f80 [ 60.291427][ T3547] ? create_page_buffers+0x1d2/0x4b0 [ 60.297068][ T3547] ? __lock_acquire+0x1f80/0x1f80 [ 60.302114][ T3547] ? attach_page_private+0x110/0x300 [ 60.307420][ T3547] ? create_page_buffers+0x24e/0x4b0 [ 60.313595][ T3547] __block_write_begin_int+0x544/0x1a30 [ 60.319156][ T3547] ? xas_load+0x11a/0x140 [ 60.323500][ T3547] ? make_le_item_head+0x5c0/0x5c0 [ 60.328707][ T3547] ? page_zero_new_buffers+0x650/0x650 [ 60.334177][ T3547] ? __block_write_begin+0x61/0x150 [ 60.339393][ T3547] ? reiserfs_write_begin+0x17f/0x510 [ 60.344862][ T3547] reiserfs_write_begin+0x249/0x510 [ 60.350070][ T3547] ? reiserfs_write_lock+0x76/0xd0 [ 60.355183][ T3547] generic_cont_expand_simple+0x187/0x2a0 [ 60.361000][ T3547] ? submit_bh+0x20/0x20 [ 60.365266][ T3547] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 60.371108][ T3547] ? setattr_prepare+0x1e0/0xc20 [ 60.376162][ T3547] reiserfs_setattr+0x606/0x11c0 [ 60.381149][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0 [ 60.386647][ T3547] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 60.392559][ T3547] ? current_time+0x1d1/0x2f0 [ 60.397780][ T3547] ? atime_needs_update+0x7b0/0x7b0 [ 60.402994][ T3547] ? rwsem_write_trylock+0x166/0x210 [ 60.408301][ T3547] ? bpf_lsm_inode_setattr+0x5/0x10 [ 60.413503][ T3547] ? reiserfs_commit_write+0x5a0/0x5a0 [ 60.418981][ T3547] notify_change+0xce3/0xfc0 [ 60.423614][ T3547] do_truncate+0x21c/0x300 [ 60.428040][ T3547] ? put_page_bootmem+0x2e0/0x2e0 [ 60.433070][ T3547] ? print_irqtrace_events+0x210/0x210 [ 60.438541][ T3547] ? print_irqtrace_events+0x210/0x210 [ 60.444111][ T3547] ? bpf_lsm_path_truncate+0x5/0x10 [ 60.449329][ T3547] do_sys_ftruncate+0x2e2/0x380 [ 60.454215][ T3547] do_syscall_64+0x3d/0xb0 [ 60.458665][ T3547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.464692][ T3547] RIP: 0033:0x7fa954ae2679 [ 60.469185][ T3547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.488993][ T3547] RSP: 002b:00007fff7186a0e8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 60.498139][ T3547] RAX: ffffffffffffffda RBX: 00007fff7186a2b8 RCX: 00007fa954ae2679 [ 60.506139][ T3547] RDX: 00007fa954ae2679 RSI: 0000000002007ffb RDI: 0000000000000005 [ 60.514130][ T3547] RBP: 00007fa954b56610 R08: 00007fff7186a2b8 R09: 00007fff7186a2b8 [ 60.522192][ T3547] R10: 00007fff7186a2b8 R11: 0000000000000246 R12: 0000000000000001 [ 60.530448][ T3547] R13: 00007fff7186a2a8 R14: 0000000000000001 R15: 0000000000000001 [ 60.538443][ T3547] [ 60.541586][ T3547] Kernel Offset: disabled [ 60.545924][ T3547] Rebooting in 86400 seconds..