[ 53.211105][ T983] device veth1_macvtap left promiscuous mode [ 53.217680][ T983] device veth0_macvtap left promiscuous mode [ 53.223766][ T983] device veth1_vlan left promiscuous mode [ 53.230990][ T983] device veth0_vlan left promiscuous mode [ 53.424729][ T983] team0 (unregistering): Port device team_slave_1 removed [ 53.437471][ T983] team0 (unregistering): Port device team_slave_0 removed [ 53.448912][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.462052][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.507754][ T983] bond0 (unregistering): Released all slaves [ 55.470201][ T26] audit: type=1400 audit(1642016465.000:189): avc: denied { transition } for pid=3870 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. [ 66.877515][ T4060] loop0: detected capacity change from 0 to 252287 [ 66.885573][ T26] audit: type=1400 audit(1642016476.410:190): avc: denied { mounton } for pid=4060 comm="syz-executor392" path="/root/file0" dev="sda1" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.910202][ T4060] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 66.920565][ T4060] REISERFS (device loop0): using ordered data mode [ 66.927158][ T4060] reiserfs: using flush barriers [ 66.934594][ T4060] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 66.958663][ T4060] REISERFS (device loop0): checking transaction log (loop0) [ 67.952233][ T4060] REISERFS (device loop0): Using tea hash to sort names [ 67.960284][ T4060] ================================================================== [ 67.968424][ T4060] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x405/0xa10 [ 67.975895][ T4060] Read of size 18446744073709551584 at addr ffff888061e70fa4 by task syz-executor392/4060 [ 67.985759][ T4060] [ 67.988060][ T4060] CPU: 1 PID: 4060 Comm: syz-executor392 Not tainted 5.16.0-syzkaller #0 [ 67.996450][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.006488][ T4060] Call Trace: [ 68.009754][ T4060] [ 68.012668][ T4060] dump_stack_lvl+0x57/0x7d [ 68.017153][ T4060] print_address_description.constprop.0.cold+0x8d/0x303 [ 68.024171][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.029364][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.034546][ T4060] kasan_report.cold+0x83/0xdf [ 68.039291][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.044469][ T4060] kasan_check_range+0x13d/0x180 [ 68.049392][ T4060] memmove+0x20/0x60 [ 68.053269][ T4060] leaf_paste_entries+0x405/0xa10 [ 68.058264][ T4060] balance_leaf+0x8d17/0xd3d0 [ 68.062924][ T4060] ? fix_nodes+0x2954/0x80e0 [ 68.067514][ T4060] ? replace_key+0x160/0x160 [ 68.072092][ T4060] do_balance+0x2ee/0x760 [ 68.076488][ T4060] ? get_right_neighbor_position+0x170/0x170 [ 68.082463][ T4060] ? wait_for_completion_io+0x270/0x270 [ 68.088022][ T4060] reiserfs_paste_into_item+0x63c/0x7b0 [ 68.093558][ T4060] ? reiserfs_delete_object+0x1b0/0x1b0 [ 68.099077][ T4060] ? search_by_entry_key+0x980/0x980 [ 68.104348][ T4060] ? reiserfs_new_inode+0xeb3/0x1e80 [ 68.109603][ T4060] reiserfs_add_entry+0x7fb/0xc50 [ 68.114598][ T4060] ? reiserfs_lookup+0x3e0/0x3e0 [ 68.119507][ T4060] ? do_journal_begin_r+0x721/0xe50 [ 68.124772][ T4060] reiserfs_mkdir+0x5a3/0x860 [ 68.129513][ T4060] ? reiserfs_mknod+0x660/0x660 [ 68.134335][ T4060] ? down_write+0xdf/0x150 [ 68.138722][ T4060] ? down_write_killable_nested+0x180/0x180 [ 68.144585][ T4060] reiserfs_xattr_init+0x412/0xa60 [ 68.149674][ T4060] reiserfs_fill_super+0x1c65/0x2780 [ 68.154934][ T4060] ? reiserfs_remount+0x1290/0x1290 [ 68.160122][ T4060] ? pointer+0x710/0x710 [ 68.164369][ T4060] ? sget+0x3d6/0x4d0 [ 68.168330][ T4060] mount_bdev+0x2cb/0x3b0 [ 68.172627][ T4060] ? reiserfs_remount+0x1290/0x1290 [ 68.177882][ T4060] ? reiserfs_kill_sb+0x1d0/0x1d0 [ 68.182897][ T4060] legacy_get_tree+0xfa/0x1f0 [ 68.187581][ T4060] vfs_get_tree+0x7f/0x2c0 [ 68.191996][ T4060] path_mount+0x7e8/0x1a40 [ 68.196387][ T4060] ? debug_check_no_obj_freed+0x20c/0x420 [ 68.202081][ T4060] ? finish_automount+0x900/0x900 [ 68.207077][ T4060] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 68.213034][ T4060] ? kmem_cache_free.part.0+0xe1/0x200 [ 68.218464][ T4060] ? lockdep_hardirqs_on+0x79/0x100 [ 68.224155][ T4060] __x64_sys_mount+0x1f5/0x260 [ 68.228904][ T4060] ? copy_mnt_ns+0xd20/0xd20 [ 68.233481][ T4060] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 68.239437][ T4060] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.245307][ T4060] do_syscall_64+0x35/0xb0 [ 68.249702][ T4060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.255567][ T4060] RIP: 0033:0x7f91736b2d0a [ 68.259954][ T4060] Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.279551][ T4060] RSP: 002b:00007fffe274fb98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 68.288035][ T4060] RAX: ffffffffffffffda RBX: 00007fffe274fbf0 RCX: 00007f91736b2d0a [ 68.296003][ T4060] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffe274fbb0 [ 68.304117][ T4060] RBP: 00007fffe274fbb0 R08: 00007fffe274fbf0 R09: 0000000000000000 [ 68.312247][ T4060] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000200002a8 [ 68.320189][ T4060] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000007 [ 68.328154][ T4060] [ 68.331155][ T4060] [ 68.333457][ T4060] The buggy address belongs to the page: [ 68.339061][ T4060] page:ffffea0001879c00 refcount:3 mapcount:0 mapping:ffff88801613e948 index:0x3d97 pfn:0x61e70 [ 68.349438][ T4060] memcg:ffff888010490000 [ 68.353647][ T4060] aops:def_blk_aops ino:700000 [ 68.358382][ T4060] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 68.367722][ T4060] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff88801613e948 [ 68.376276][ T4060] raw: 0000000000003d97 ffff8880628483e0 00000003ffffffff ffff888010490000 [ 68.384827][ T4060] page dumped because: kasan: bad access detected [ 68.391206][ T4060] page_owner tracks the page as allocated [ 68.396891][ T4060] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 4060, ts 67951866095, free_ts 9222131239 [ 68.414823][ T4060] get_page_from_freelist+0xa6f/0x2f10 [ 68.420268][ T4060] __alloc_pages+0x1b2/0x500 [ 68.424860][ T4060] folio_alloc+0x12/0x40 [ 68.429176][ T4060] __filemap_get_folio+0x3b9/0x940 [ 68.434279][ T4060] pagecache_get_page+0x10/0x100 [ 68.439287][ T4060] __getblk_slow+0x187/0x830 [ 68.443852][ T4060] search_by_key+0x35c/0x4380 [ 68.448497][ T4060] reiserfs_read_locked_inode+0x144/0x21c0 [ 68.454273][ T4060] reiserfs_fill_super+0x12e7/0x2780 [ 68.459529][ T4060] mount_bdev+0x2cb/0x3b0 [ 68.463825][ T4060] legacy_get_tree+0xfa/0x1f0 [ 68.468469][ T4060] vfs_get_tree+0x7f/0x2c0 [ 68.472857][ T4060] path_mount+0x7e8/0x1a40 [ 68.477245][ T4060] __x64_sys_mount+0x1f5/0x260 [ 68.481987][ T4060] do_syscall_64+0x35/0xb0 [ 68.486385][ T4060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.492261][ T4060] page last free stack trace: [ 68.496914][ T4060] free_pcp_prepare+0x374/0x870 [ 68.501742][ T4060] free_unref_page+0x19/0x690 [ 68.506388][ T4060] free_contig_range+0xa8/0xf0 [ 68.511124][ T4060] destroy_args+0x7e/0x503 [ 68.515514][ T4060] debug_vm_pgtable+0x1eb5/0x1f39 [ 68.520508][ T4060] do_one_initcall+0xbe/0x440 [ 68.525159][ T4060] kernel_init_freeable+0x5ab/0x605 [ 68.530337][ T4060] kernel_init+0x14/0x130 [ 68.534658][ T4060] ret_from_fork+0x1f/0x30 [ 68.539048][ T4060] [ 68.541349][ T4060] Memory state around the buggy address: [ 68.546954][ T4060] ffff888061e70e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.554985][ T4060] ffff888061e70f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.563029][ T4060] >ffff888061e70f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.571062][ T4060] ^ [ 68.576142][ T4060] ffff888061e71000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.584173][ T4060] ffff888061e71080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.592204][ T4060] ================================================================== [ 68.600237][ T4060] Disabling lock debugging due to kernel taint [ 68.609823][ T4060] Kernel panic - not syncing: panic_on_warn set ... [ 68.616407][ T4060] CPU: 1 PID: 4060 Comm: syz-executor392 Tainted: G B 5.16.0-syzkaller #0 [ 68.626183][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.636209][ T4060] Call Trace: [ 68.639465][ T4060] [ 68.642375][ T4060] dump_stack_lvl+0x57/0x7d [ 68.646850][ T4060] panic+0x214/0x49f [ 68.650711][ T4060] ? __warn_printk+0xee/0xee [ 68.655267][ T4060] ? preempt_schedule_common+0x59/0xc0 [ 68.660721][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.665899][ T4060] ? preempt_schedule_thunk+0x16/0x18 [ 68.671251][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.676423][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.681598][ T4060] end_report.cold+0x63/0x6f [ 68.686157][ T4060] kasan_report.cold+0x71/0xdf [ 68.690899][ T4060] ? leaf_paste_entries+0x405/0xa10 [ 68.696062][ T4060] kasan_check_range+0x13d/0x180 [ 68.700970][ T4060] memmove+0x20/0x60 [ 68.704832][ T4060] leaf_paste_entries+0x405/0xa10 [ 68.709832][ T4060] balance_leaf+0x8d17/0xd3d0 [ 68.714477][ T4060] ? fix_nodes+0x2954/0x80e0 [ 68.719039][ T4060] ? replace_key+0x160/0x160 [ 68.723597][ T4060] do_balance+0x2ee/0x760 [ 68.727898][ T4060] ? get_right_neighbor_position+0x170/0x170 [ 68.733842][ T4060] ? wait_for_completion_io+0x270/0x270 [ 68.739357][ T4060] reiserfs_paste_into_item+0x63c/0x7b0 [ 68.744886][ T4060] ? reiserfs_delete_object+0x1b0/0x1b0 [ 68.750400][ T4060] ? search_by_entry_key+0x980/0x980 [ 68.755651][ T4060] ? reiserfs_new_inode+0xeb3/0x1e80 [ 68.760904][ T4060] reiserfs_add_entry+0x7fb/0xc50 [ 68.765894][ T4060] ? reiserfs_lookup+0x3e0/0x3e0 [ 68.770799][ T4060] ? do_journal_begin_r+0x721/0xe50 [ 68.775978][ T4060] reiserfs_mkdir+0x5a3/0x860 [ 68.780621][ T4060] ? reiserfs_mknod+0x660/0x660 [ 68.785435][ T4060] ? down_write+0xdf/0x150 [ 68.789818][ T4060] ? down_write_killable_nested+0x180/0x180 [ 68.795676][ T4060] reiserfs_xattr_init+0x412/0xa60 [ 68.800756][ T4060] reiserfs_fill_super+0x1c65/0x2780 [ 68.806009][ T4060] ? reiserfs_remount+0x1290/0x1290 [ 68.811175][ T4060] ? pointer+0x710/0x710 [ 68.815388][ T4060] ? sget+0x3d6/0x4d0 [ 68.819334][ T4060] mount_bdev+0x2cb/0x3b0 [ 68.823628][ T4060] ? reiserfs_remount+0x1290/0x1290 [ 68.828813][ T4060] ? reiserfs_kill_sb+0x1d0/0x1d0 [ 68.833801][ T4060] legacy_get_tree+0xfa/0x1f0 [ 68.838448][ T4060] vfs_get_tree+0x7f/0x2c0 [ 68.842830][ T4060] path_mount+0x7e8/0x1a40 [ 68.847213][ T4060] ? debug_check_no_obj_freed+0x20c/0x420 [ 68.852903][ T4060] ? finish_automount+0x900/0x900 [ 68.857891][ T4060] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 68.863837][ T4060] ? kmem_cache_free.part.0+0xe1/0x200 [ 68.869270][ T4060] ? lockdep_hardirqs_on+0x79/0x100 [ 68.874434][ T4060] __x64_sys_mount+0x1f5/0x260 [ 68.879174][ T4060] ? copy_mnt_ns+0xd20/0xd20 [ 68.883730][ T4060] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 68.889675][ T4060] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.895622][ T4060] do_syscall_64+0x35/0xb0 [ 68.900008][ T4060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.905867][ T4060] RIP: 0033:0x7f91736b2d0a [ 68.910253][ T4060] Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.929917][ T4060] RSP: 002b:00007fffe274fb98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 68.938394][ T4060] RAX: ffffffffffffffda RBX: 00007fffe274fbf0 RCX: 00007f91736b2d0a [ 68.946345][ T4060] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffe274fbb0 [ 68.954645][ T4060] RBP: 00007fffe274fbb0 R08: 00007fffe274fbf0 R09: 0000000000000000 [ 68.962585][ T4060] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000200002a8 [ 68.970525][ T4060] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000007 [ 68.978474][ T4060] [ 68.981743][ T4060] Kernel Offset: disabled [ 68.986060][ T4060] Rebooting in 86400 seconds..