Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. [ 36.046099][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.048132][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.051717][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.061922][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.064157][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.066490][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 36.071882][ T5968] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5968 'syz-executor215' [ 36.115568][ T5968] loop0: detected capacity change from 0 to 8192 [ 36.142642][ T5968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.145937][ T5968] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 36.148214][ T5968] REISERFS (device loop0): using ordered data mode [ 36.149830][ T5968] reiserfs: using flush barriers [ 36.151623][ T5968] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.155813][ T5968] REISERFS (device loop0): checking transaction log (loop0) [ 36.159295][ T5968] REISERFS (device loop0): Using r5 hash to sort names [ 36.161582][ T5968] ================================================================== [ 36.163508][ T5968] BUG: KASAN: use-after-free in strlen+0x54/0x70 [ 36.165117][ T5968] Read of size 1 at addr ffff0000e22207a3 by task syz-executor215/5968 [ 36.167084][ T5968] [ 36.167657][ T5968] CPU: 0 PID: 5968 Comm: syz-executor215 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 36.170130][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 36.172625][ T5968] Call trace: [ 36.173439][ T5968] dump_backtrace+0x1b8/0x1e4 [ 36.174578][ T5968] show_stack+0x2c/0x44 [ 36.175588][ T5968] dump_stack_lvl+0xd0/0x124 [ 36.176705][ T5968] print_report+0x174/0x514 [ 36.177780][ T5968] kasan_report+0xd4/0x130 [ 36.178845][ T5968] __asan_report_load1_noabort+0x20/0x2c [ 36.180143][ T5968] strlen+0x54/0x70 [ 36.181053][ T5968] reiserfs_find_entry+0x898/0x149c [ 36.182276][ T5968] reiserfs_lookup+0x17c/0x45c [ 36.183403][ T5968] __lookup_slow+0x250/0x374 [ 36.184559][ T5968] lookup_one_len+0x178/0x28c [ 36.185662][ T5968] reiserfs_lookup_privroot+0x8c/0x184 [ 36.187001][ T5968] reiserfs_fill_super+0x15b4/0x2028 [ 36.188298][ T5968] mount_bdev+0x26c/0x368 [ 36.189372][ T5968] get_super_block+0x44/0x58 [ 36.190437][ T5968] legacy_get_tree+0xd4/0x16c [ 36.191571][ T5968] vfs_get_tree+0x90/0x274 [ 36.192623][ T5968] do_new_mount+0x25c/0x8c8 [ 36.193688][ T5968] path_mount+0x590/0xe04 [ 36.194728][ T5968] __arm64_sys_mount+0x45c/0x594 [ 36.195907][ T5968] invoke_syscall+0x98/0x2c0 [ 36.197096][ T5968] el0_svc_common+0x138/0x258 [ 36.198200][ T5968] do_el0_svc+0x64/0x198 [ 36.199229][ T5968] el0_svc+0x4c/0x15c [ 36.200136][ T5968] el0t_64_sync_handler+0x84/0xf0 [ 36.201348][ T5968] el0t_64_sync+0x190/0x194 [ 36.202445][ T5968] [ 36.202992][ T5968] The buggy address belongs to the physical page: [ 36.204462][ T5968] page:00000000e80ca32f refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x122220 [ 36.207010][ T5968] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 36.208821][ T5968] page_type: 0xffffffff() [ 36.209882][ T5968] raw: 05ffc00000000000 fffffc0003888848 ffff0001b423dfa0 0000000000000000 [ 36.211961][ T5968] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 36.213993][ T5968] page dumped because: kasan: bad access detected [ 36.215520][ T5968] [ 36.216102][ T5968] Memory state around the buggy address: [ 36.217476][ T5968] ffff0000e2220680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.219467][ T5968] ffff0000e2220700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.221423][ T5968] >ffff0000e2220780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.223369][ T5968] ^ [ 36.224583][ T5968] ffff0000e2220800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.226525][ T5968] ffff0000e2220880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 36.228444][ T5968] ================================================================== [ 36.230645][ T5968] Disabling lock debugging due to kernel taint