Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. 2024/01/10 06:12:40 ignoring optional flag "sandboxArg"="0" 2024/01/10 06:12:40 parsed 1 programs 2024/01/10 06:12:40 executed programs: 0 [ 48.153569][ T1584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.876978][ T2000] loop0: detected capacity change from 0 to 8192 [ 52.884654][ T2000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.898469][ T2000] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 52.908134][ T2000] REISERFS (device loop0): using ordered data mode [ 52.915023][ T2000] reiserfs: using flush barriers [ 52.921088][ T2000] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.938267][ T2000] REISERFS (device loop0): checking transaction log (loop0) [ 52.967461][ T2000] REISERFS (device loop0): Using r5 hash to sort names [ 52.974654][ T2000] REISERFS (device loop0): using 3.5.x disk format [ 52.981776][ T2000] ================================================================== [ 52.990920][ T2000] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x483/0x1320 [ 52.998642][ T2000] Read of size 18446744073709551584 at addr ffff88806a383fa4 by task syz-executor.0/2000 [ 53.008468][ T2000] [ 53.010863][ T2000] CPU: 0 PID: 2000 Comm: syz-executor.0 Not tainted 6.1.71-syzkaller #0 [ 53.019188][ T2000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 53.029684][ T2000] Call Trace: [ 53.032952][ T2000] [ 53.035997][ T2000] dump_stack_lvl+0xf4/0x251 [ 53.040653][ T2000] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 53.046089][ T2000] ? panic+0x3f7/0x3f7 [ 53.050266][ T2000] ? _printk+0xca/0x10a [ 53.054412][ T2000] print_report+0x15f/0x4f0 [ 53.058900][ T2000] ? leaf_paste_entries+0x483/0x1320 [ 53.064353][ T2000] kasan_report+0x136/0x160 [ 53.068832][ T2000] ? leaf_paste_entries+0x483/0x1320 [ 53.074096][ T2000] ? leaf_paste_entries+0x483/0x1320 [ 53.079451][ T2000] kasan_check_range+0x27f/0x290 [ 53.084387][ T2000] ? leaf_paste_entries+0x483/0x1320 [ 53.089759][ T2000] memmove+0x25/0x60 [ 53.093992][ T2000] leaf_paste_entries+0x483/0x1320 [ 53.099357][ T2000] ? leaf_paste_in_buffer+0x5e2/0xa30 [ 53.104970][ T2000] do_balance+0x6fe1/0xe950 [ 53.109451][ T2000] ? stack_trace_save+0x113/0x1c0 [ 53.114563][ T2000] ? __stack_depot_save+0x346/0x460 [ 53.119912][ T2000] ? __kasan_kmalloc+0x97/0xb0 [ 53.124804][ T2000] ? __kmalloc+0xa6/0x1c0 [ 53.129207][ T2000] ? fix_nodes+0x6c3/0xda60 [ 53.133778][ T2000] ? reiserfs_paste_into_item+0x569/0x740 [ 53.140046][ T2000] ? reiserfs_add_entry+0x7cf/0xbd0 [ 53.145413][ T2000] ? reiserfs_mkdir+0x657/0x870 [ 53.150680][ T2000] ? reiserfs_fill_super+0x1b96/0x2070 [ 53.156386][ T2000] ? mount_bdev+0x26b/0x340 [ 53.160893][ T2000] ? legacy_get_tree+0xe5/0x170 [ 53.165718][ T2000] ? vfs_get_tree+0x7a/0x170 [ 53.170372][ T2000] ? do_new_mount+0x1e1/0x8f0 [ 53.175025][ T2000] ? __se_sys_mount+0x23e/0x2d0 [ 53.179929][ T2000] ? do_syscall_64+0x3d/0x80 [ 53.184593][ T2000] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.190817][ T2000] ? get_right_neighbor_position+0x120/0x120 [ 53.197036][ T2000] ? __wake_up+0x1c0/0x1c0 [ 53.201520][ T2000] ? unfix_nodes+0x830/0x830 [ 53.206533][ T2000] ? fix_nodes+0x6c3/0xda60 [ 53.211027][ T2000] ? reiserfs_prepare_for_journal+0x166/0x180 [ 53.217254][ T2000] ? fix_nodes+0xcf78/0xda60 [ 53.222010][ T2000] ? make_empty_dir_item+0x740/0x740 [ 53.227470][ T2000] ? reiserfs_paste_into_item+0x36c/0x740 [ 53.234071][ T2000] reiserfs_paste_into_item+0x66e/0x740 [ 53.239951][ T2000] ? reiserfs_cut_from_item+0x1e90/0x1e90 [ 53.246137][ T2000] ? reiserfs_get_parent+0x270/0x270 [ 53.251731][ T2000] ? inode_get_bytes+0x6d/0x90 [ 53.256664][ T2000] reiserfs_add_entry+0x7cf/0xbd0 [ 53.261852][ T2000] ? drop_new_inode+0x50/0x50 [ 53.266688][ T2000] ? do_journal_begin_r+0xba9/0xdd0 [ 53.272405][ T2000] ? journal_begin+0x13b/0x2f0 [ 53.277771][ T2000] reiserfs_mkdir+0x657/0x870 [ 53.282901][ T2000] ? reiserfs_symlink+0x6b0/0x6b0 [ 53.288180][ T2000] ? __down_write_common+0x12a/0x1e0 [ 53.293829][ T2000] ? up_write+0x137/0x300 [ 53.298160][ T2000] ? __up_read+0x360/0x360 [ 53.302824][ T2000] reiserfs_xattr_init+0x286/0x5f0 [ 53.308000][ T2000] reiserfs_fill_super+0x1b96/0x2070 [ 53.313280][ T2000] ? reiserfs_kill_sb+0x140/0x140 [ 53.318600][ T2000] ? __down_write_common+0x12a/0x1e0 [ 53.324041][ T2000] ? snprintf+0xcc/0x110 [ 53.328259][ T2000] ? __up_read+0x360/0x360 [ 53.332651][ T2000] mount_bdev+0x26b/0x340 [ 53.336967][ T2000] ? reiserfs_kill_sb+0x140/0x140 [ 53.342153][ T2000] legacy_get_tree+0xe5/0x170 [ 53.346922][ T2000] ? remove_save_link+0x4e0/0x4e0 [ 53.352022][ T2000] vfs_get_tree+0x7a/0x170 [ 53.356534][ T2000] do_new_mount+0x1e1/0x8f0 [ 53.361020][ T2000] ? do_move_mount_old+0x120/0x120 [ 53.366288][ T2000] __se_sys_mount+0x23e/0x2d0 [ 53.371133][ T2000] ? __x64_sys_mount+0xc0/0xc0 [ 53.376042][ T2000] ? fpregs_assert_state_consistent+0x43/0x50 [ 53.382177][ T2000] do_syscall_64+0x3d/0x80 [ 53.386744][ T2000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.392721][ T2000] RIP: 0033:0x7f3e7467e1ea [ 53.397206][ T2000] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.417060][ T2000] RSP: 002b:00007f3e753b7ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.425519][ T2000] RAX: ffffffffffffffda RBX: 00007f3e753b7f80 RCX: 00007f3e7467e1ea [ 53.433574][ T2000] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007f3e753b7f40 [ 53.441546][ T2000] RBP: 0000000020001100 R08: 00007f3e753b7f80 R09: 0000000000000080 [ 53.449797][ T2000] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040 [ 53.457935][ T2000] R13: 00007f3e753b7f40 R14: 00000000000010fa R15: 0000000020000000 [ 53.465903][ T2000] [ 53.468991][ T2000] [ 53.471299][ T2000] The buggy address belongs to the physical page: [ 53.477812][ T2000] page:ffffea0001a8e0c0 refcount:3 mapcount:0 mapping:ffff8880095007f0 index:0x213 pfn:0x6a383 [ 53.488113][ T2000] memcg:ffff888079d48000 [ 53.492484][ T2000] aops:def_blk_aops ino:700000 [ 53.497323][ T2000] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 53.506684][ T2000] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff8880095007f0 [ 53.515349][ T2000] raw: 0000000000000213 ffff88806f692ae0 00000003ffffffff ffff888079d48000 [ 53.524097][ T2000] page dumped because: kasan: bad access detected [ 53.530501][ T2000] page_owner tracks the page as allocated [ 53.536220][ T2000] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 2000, tgid 1999 (syz-executor.0), ts 52967352778, free_ts 6387484271 [ 53.557753][ T2000] post_alloc_hook+0x286/0x2b0 [ 53.562871][ T2000] get_page_from_freelist+0x2fdd/0x3170 [ 53.568651][ T2000] __alloc_pages+0x251/0x640 [ 53.573233][ T2000] folio_alloc+0xf/0x30 [ 53.577403][ T2000] filemap_alloc_folio+0xc2/0x390 [ 53.582584][ T2000] __filemap_get_folio+0x6ca/0x970 [ 53.587763][ T2000] pagecache_get_page+0x10/0x160 [ 53.592791][ T2000] __getblk_gfp+0x1b5/0x810 [ 53.597553][ T2000] search_by_key+0x3bd/0x3d90 [ 53.602216][ T2000] reiserfs_read_locked_inode+0x211/0x2290 [ 53.608013][ T2000] reiserfs_fill_super+0xfed/0x2070 [ 53.613272][ T2000] mount_bdev+0x26b/0x340 [ 53.617592][ T2000] legacy_get_tree+0xe5/0x170 [ 53.622247][ T2000] vfs_get_tree+0x7a/0x170 [ 53.626754][ T2000] do_new_mount+0x1e1/0x8f0 [ 53.631230][ T2000] __se_sys_mount+0x23e/0x2d0 [ 53.635901][ T2000] page last free stack trace: [ 53.640723][ T2000] free_unref_page_prepare+0xd4b/0xee0 [ 53.646153][ T2000] free_unref_page+0x33/0x390 [ 53.651144][ T2000] free_contig_range+0x8d/0x130 [ 53.656151][ T2000] destroy_args+0xde/0x79f [ 53.660556][ T2000] debug_vm_pgtable+0x373/0x5ad [ 53.665393][ T2000] do_one_initcall+0x19f/0x4c0 [ 53.670133][ T2000] do_initcall_level+0x11e/0x1cd [ 53.675044][ T2000] do_initcalls+0x46/0x74 [ 53.679458][ T2000] kernel_init_freeable+0x375/0x4e4 [ 53.684987][ T2000] kernel_init+0x14/0x190 [ 53.689316][ T2000] ret_from_fork+0x1f/0x30 [ 53.693808][ T2000] [ 53.696109][ T2000] Memory state around the buggy address: [ 53.701969][ T2000] ffff88806a383e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.710114][ T2000] ffff88806a383f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.718939][ T2000] >ffff88806a383f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.726980][ T2000] ^ [ 53.732174][ T2000] ffff88806a384000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.740235][ T2000] ffff88806a384080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.748802][ T2000] ================================================================== [ 53.759751][ T2000] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.767578][ T2000] Kernel Offset: disabled [ 53.771904][ T2000] Rebooting in 86400 seconds..