Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. 2024/10/18 23:42:11 ignoring optional flag "sandboxArg"="0" 2024/10/18 23:42:11 ignoring optional flag "type"="gce" 2024/10/18 23:42:11 parsed 1 programs 2024/10/18 23:42:11 executed programs: 0 [ 51.251819][ T1509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.180938][ T1934] loop0: detected capacity change from 0 to 8192 [ 56.190257][ T1934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.204214][ T1934] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.213694][ T1934] REISERFS (device loop0): using ordered data mode [ 56.220307][ T1934] reiserfs: using flush barriers [ 56.225985][ T1934] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.242731][ T1934] REISERFS (device loop0): checking transaction log (loop0) [ 56.271766][ T1934] REISERFS (device loop0): Using rupasov hash to sort names [ 56.279611][ T1934] ================================================================== [ 56.287797][ T1934] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x483/0x1320 [ 56.295369][ T1934] Read of size 18446744073709551584 at addr ffff88806a4c1fa4 by task syz-executor.0/1934 [ 56.305231][ T1934] [ 56.307540][ T1934] CPU: 0 PID: 1934 Comm: syz-executor.0 Not tainted 6.1.113-syzkaller #0 [ 56.316022][ T1934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.326067][ T1934] Call Trace: [ 56.329423][ T1934] [ 56.332332][ T1934] dump_stack_lvl+0xf4/0x251 [ 56.336912][ T1934] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 56.342354][ T1934] ? panic+0x3fe/0x3fe [ 56.346404][ T1934] ? lock_acquire+0xbe/0x390 [ 56.351003][ T1934] ? read_lock_is_recursive+0x10/0x10 [ 56.356353][ T1934] ? __virt_addr_valid+0x139/0x270 [ 56.361447][ T1934] ? __virt_addr_valid+0x221/0x270 [ 56.366528][ T1934] print_report+0x15f/0x4f0 [ 56.371000][ T1934] ? __virt_addr_valid+0x139/0x270 [ 56.376083][ T1934] ? __virt_addr_valid+0x221/0x270 [ 56.381375][ T1934] ? leaf_paste_entries+0x483/0x1320 [ 56.386633][ T1934] kasan_report+0x136/0x160 [ 56.391126][ T1934] ? leaf_paste_entries+0x483/0x1320 [ 56.396399][ T1934] ? leaf_paste_entries+0x483/0x1320 [ 56.401669][ T1934] kasan_check_range+0x27f/0x290 [ 56.406731][ T1934] ? leaf_paste_entries+0x483/0x1320 [ 56.412089][ T1934] memmove+0x25/0x60 [ 56.415964][ T1934] leaf_paste_entries+0x483/0x1320 [ 56.421164][ T1934] ? leaf_paste_in_buffer+0x5e2/0xa30 [ 56.426522][ T1934] do_balance+0x6fe1/0xe950 [ 56.431016][ T1934] ? stack_trace_save+0x113/0x1c0 [ 56.436130][ T1934] ? __stack_depot_save+0x346/0x460 [ 56.441403][ T1934] ? __kasan_kmalloc+0x97/0xb0 [ 56.446179][ T1934] ? __kmalloc+0xa6/0x1c0 [ 56.450495][ T1934] ? fix_nodes+0x6c3/0xda60 [ 56.454975][ T1934] ? reiserfs_paste_into_item+0x569/0x740 [ 56.460789][ T1934] ? reiserfs_add_entry+0x7cf/0xbd0 [ 56.465975][ T1934] ? reiserfs_mkdir+0x657/0x870 [ 56.470821][ T1934] ? reiserfs_fill_super+0x1b96/0x2070 [ 56.476280][ T1934] ? mount_bdev+0x26b/0x340 [ 56.480781][ T1934] ? legacy_get_tree+0xe5/0x170 [ 56.485629][ T1934] ? vfs_get_tree+0x7a/0x170 [ 56.490217][ T1934] ? do_new_mount+0x21a/0x910 [ 56.494909][ T1934] ? __se_sys_mount+0x23e/0x2d0 [ 56.499744][ T1934] ? do_syscall_64+0x3b/0x80 [ 56.504312][ T1934] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.510373][ T1934] ? get_right_neighbor_position+0x120/0x120 [ 56.516355][ T1934] ? __wake_up+0x1c0/0x1c0 [ 56.520744][ T1934] ? unfix_nodes+0x830/0x830 [ 56.525396][ T1934] ? fix_nodes+0x6c3/0xda60 [ 56.529886][ T1934] ? reiserfs_prepare_for_journal+0x166/0x180 [ 56.536014][ T1934] ? fix_nodes+0xcf78/0xda60 [ 56.540775][ T1934] ? make_empty_dir_item+0x740/0x740 [ 56.546057][ T1934] ? reiserfs_paste_into_item+0x36c/0x740 [ 56.551772][ T1934] reiserfs_paste_into_item+0x66e/0x740 [ 56.557287][ T1934] ? reiserfs_cut_from_item+0x1e90/0x1e90 [ 56.562986][ T1934] ? reiserfs_get_parent+0x270/0x270 [ 56.568282][ T1934] ? inode2sd+0x333/0x9a0 [ 56.572583][ T1934] reiserfs_add_entry+0x7cf/0xbd0 [ 56.577582][ T1934] ? drop_new_inode+0x50/0x50 [ 56.582252][ T1934] ? do_journal_begin_r+0xba9/0xdd0 [ 56.587511][ T1934] ? journal_begin+0x13b/0x2f0 [ 56.592248][ T1934] reiserfs_mkdir+0x657/0x870 [ 56.596912][ T1934] ? reiserfs_symlink+0x6b0/0x6b0 [ 56.602180][ T1934] ? down_write+0x146/0x1d0 [ 56.606662][ T1934] ? up_write+0x137/0x300 [ 56.610963][ T1934] ? __up_read+0x360/0x360 [ 56.615347][ T1934] reiserfs_xattr_init+0x286/0x5f0 [ 56.620447][ T1934] reiserfs_fill_super+0x1b96/0x2070 [ 56.625705][ T1934] ? reiserfs_kill_sb+0x140/0x140 [ 56.630787][ T1934] ? snprintf+0xcc/0x110 [ 56.635003][ T1934] ? __up_read+0x360/0x360 [ 56.639391][ T1934] mount_bdev+0x26b/0x340 [ 56.643778][ T1934] ? reiserfs_kill_sb+0x140/0x140 [ 56.648861][ T1934] legacy_get_tree+0xe5/0x170 [ 56.653518][ T1934] ? remove_save_link+0x4e0/0x4e0 [ 56.658523][ T1934] vfs_get_tree+0x7a/0x170 [ 56.662910][ T1934] do_new_mount+0x21a/0x910 [ 56.667388][ T1934] ? do_move_mount_old+0x120/0x120 [ 56.672643][ T1934] __se_sys_mount+0x23e/0x2d0 [ 56.677380][ T1934] ? __x64_sys_mount+0xc0/0xc0 [ 56.682289][ T1934] ? fpregs_assert_state_consistent+0x43/0x50 [ 56.688328][ T1934] do_syscall_64+0x3b/0x80 [ 56.692721][ T1934] ? clear_bhb_loop+0x45/0xa0 [ 56.697490][ T1934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.703366][ T1934] RIP: 0033:0x7fd467c7f4aa [ 56.707847][ T1934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 56.727513][ T1934] RSP: 002b:00007fd46891fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.735911][ T1934] RAX: ffffffffffffffda RBX: 00007fd46891ff80 RCX: 00007fd467c7f4aa [ 56.743940][ T1934] RDX: 0000000020001100 RSI: 0000000020001140 RDI: 00007fd46891ff40 [ 56.751889][ T1934] RBP: 0000000020001100 R08: 00007fd46891ff80 R09: 0000000000200808 [ 56.759832][ T1934] R10: 0000000000200808 R11: 0000000000000246 R12: 0000000020001140 [ 56.767947][ T1934] R13: 00007fd46891ff40 R14: 00000000000010eb R15: 0000000020000180 [ 56.775894][ T1934] [ 56.779023][ T1934] [ 56.781331][ T1934] The buggy address belongs to the physical page: [ 56.787742][ T1934] page:ffffea0001a93040 refcount:3 mapcount:0 mapping:ffff8880094412f0 index:0x213 pfn:0x6a4c1 [ 56.798049][ T1934] memcg:ffff88807973a000 [ 56.802261][ T1934] aops:def_blk_aops ino:700000 [ 56.806994][ T1934] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 56.816691][ T1934] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff8880094412f0 [ 56.825261][ T1934] raw: 0000000000000213 ffff88806f498910 00000003ffffffff ffff88807973a000 [ 56.833830][ T1934] page dumped because: kasan: bad access detected [ 56.840315][ T1934] page_owner tracks the page as allocated [ 56.846003][ T1934] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 1934, tgid 1933 (syz-executor.0), ts 56271553697, free_ts 6172437818 [ 56.866470][ T1934] post_alloc_hook+0x286/0x2b0 [ 56.871221][ T1934] get_page_from_freelist+0x2fe5/0x3170 [ 56.876734][ T1934] __alloc_pages+0x251/0x640 [ 56.881293][ T1934] folio_alloc+0xf/0x30 [ 56.885449][ T1934] filemap_alloc_folio+0xc2/0x390 [ 56.890457][ T1934] __filemap_get_folio+0x6ca/0x970 [ 56.895644][ T1934] pagecache_get_page+0x10/0x160 [ 56.900653][ T1934] __getblk_gfp+0x1b5/0x810 [ 56.905131][ T1934] search_by_key+0x3bd/0x3d90 [ 56.909780][ T1934] reiserfs_read_locked_inode+0x211/0x2290 [ 56.915569][ T1934] reiserfs_fill_super+0xfed/0x2070 [ 56.920763][ T1934] mount_bdev+0x26b/0x340 [ 56.925100][ T1934] legacy_get_tree+0xe5/0x170 [ 56.929768][ T1934] vfs_get_tree+0x7a/0x170 [ 56.934176][ T1934] do_new_mount+0x21a/0x910 [ 56.938742][ T1934] __se_sys_mount+0x23e/0x2d0 [ 56.943403][ T1934] page last free stack trace: [ 56.948052][ T1934] free_unref_page_prepare+0xd6c/0xf00 [ 56.953490][ T1934] free_unref_page+0x33/0x390 [ 56.958137][ T1934] free_contig_range+0x8d/0x130 [ 56.962961][ T1934] destroy_args+0xde/0x79f [ 56.967380][ T1934] debug_vm_pgtable+0x373/0x5ad [ 56.972199][ T1934] do_one_initcall+0x19f/0x4c0 [ 56.976933][ T1934] do_initcall_level+0x11e/0x1cd [ 56.981841][ T1934] do_initcalls+0x46/0x74 [ 56.986140][ T1934] kernel_init_freeable+0x375/0x4e4 [ 56.991310][ T1934] kernel_init+0x14/0x190 [ 56.995610][ T1934] ret_from_fork+0x1f/0x30 [ 56.999998][ T1934] [ 57.002299][ T1934] Memory state around the buggy address: [ 57.007908][ T1934] ffff88806a4c1e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.016134][ T1934] ffff88806a4c1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.024190][ T1934] >ffff88806a4c1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.032271][ T1934] ^ [ 57.037379][ T1934] ffff88806a4c2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 57.045530][ T1934] ffff88806a4c2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 57.053664][ T1934] ================================================================== [ 57.062613][ T1934] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.070273][ T1934] Kernel Offset: disabled [ 57.074680][ T1934] Rebooting in 86400 seconds..