Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 43.439923][ T6847] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 43.450704][ T6847] REISERFS (device loop0): using ordered data mode [ 43.458859][ T6847] reiserfs: using flush barriers [ 43.465059][ T6847] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 43.487634][ T6847] REISERFS (device loop0): checking transaction log (loop0) [ 45.035050][ T6847] REISERFS (device loop0): Using r5 hash to sort names [ 45.042722][ T6847] REISERFS (device loop0): using 3.5.x disk format [ 45.051130][ T6847] ================================================================== [ 45.059256][ T6847] BUG: KASAN: use-after-free in search_by_entry_key+0x450/0xad0 [ 45.066868][ T6847] Read of size 4 at addr ffff88807cd0b7bd by task syz-executor710/6847 [ 45.075108][ T6847] [ 45.077415][ T6847] CPU: 1 PID: 6847 Comm: syz-executor710 Not tainted 5.9.0-rc8-syzkaller #0 [ 45.086051][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.096077][ T6847] Call Trace: [ 45.099351][ T6847] dump_stack+0x1d6/0x29e [ 45.103656][ T6847] print_address_description+0x66/0x620 [ 45.109178][ T6847] ? printk+0x62/0x83 [ 45.113132][ T6847] ? vprintk_emit+0x2f0/0x370 [ 45.117824][ T6847] kasan_report+0x132/0x1d0 [ 45.122301][ T6847] ? search_by_entry_key+0x450/0xad0 [ 45.127558][ T6847] search_by_entry_key+0x450/0xad0 [ 45.132647][ T6847] reiserfs_find_entry+0x246/0x1260 [ 45.137862][ T6847] ? reiserfs_write_lock+0x77/0xd0 [ 45.142957][ T6847] reiserfs_lookup+0x156/0x3a0 [ 45.147695][ T6847] ? d_alloc_parallel+0x12da/0x13c0 [ 45.152876][ T6847] __lookup_slow+0x240/0x370 [ 45.157454][ T6847] lookup_one_len+0x10e/0x200 [ 45.162146][ T6847] reiserfs_lookup_privroot+0x85/0x1e0 [ 45.167583][ T6847] reiserfs_fill_super+0x2b51/0x3240 [ 45.172869][ T6847] ? vsnprintf+0x1a12/0x1aa0 [ 45.177446][ T6847] ? snprintf+0x6f/0x90 [ 45.181574][ T6847] ? set_blocksize+0x1f5/0x3c0 [ 45.186313][ T6847] mount_bdev+0x24f/0x360 [ 45.190735][ T6847] ? reiserfs_kill_sb+0x150/0x150 [ 45.195734][ T6847] legacy_get_tree+0xea/0x180 [ 45.200382][ T6847] ? remove_save_link+0x3e0/0x3e0 [ 45.205379][ T6847] vfs_get_tree+0x88/0x270 [ 45.209816][ T6847] path_mount+0x179d/0x29e0 [ 45.214299][ T6847] __se_sys_mount+0x126/0x180 [ 45.218952][ T6847] do_syscall_64+0x31/0x70 [ 45.223338][ T6847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.229221][ T6847] RIP: 0033:0x447d9a [ 45.233088][ T6847] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d a3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a a3 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 45.252749][ T6847] RSP: 002b:00007ffc5d05d468 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 45.261131][ T6847] RAX: ffffffffffffffda RBX: 00007ffc5d05d4c0 RCX: 0000000000447d9a [ 45.269102][ T6847] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc5d05d480 [ 45.277062][ T6847] RBP: 00007ffc5d05d480 R08: 00007ffc5d05d4c0 R09: 0000000000000000 [ 45.285005][ T6847] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000006 [ 45.292962][ T6847] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 45.300921][ T6847] [ 45.303232][ T6847] The buggy address belongs to the page: [ 45.308845][ T6847] page:0000000023b676e0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7cd0b [ 45.318958][ T6847] flags: 0xfffe0000000000() [ 45.323435][ T6847] raw: 00fffe0000000000 ffffea0001f34308 ffffea0001f34288 0000000000000000 [ 45.332000][ T6847] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 45.340556][ T6847] page dumped because: kasan: bad access detected [ 45.346940][ T6847] [ 45.349239][ T6847] Memory state around the buggy address: [ 45.354847][ T6847] ffff88807cd0b680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.362890][ T6847] ffff88807cd0b700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.370917][ T6847] >ffff88807cd0b780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.378959][ T6847] ^ [ 45.384827][ T6847] ffff88807cd0b800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.392855][ T6847] ffff88807cd0b880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.400892][ T6847] ================================================================== [ 45.408919][ T6847] Disabling lock debugging due to kernel taint [ 45.425755][ T6847] Kernel panic - not syncing: panic_on_warn set ... [ 45.432337][ T6847] CPU: 1 PID: 6847 Comm: syz-executor710 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 45.442361][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.452382][ T6847] Call Trace: [ 45.455645][ T6847] dump_stack+0x1d6/0x29e [ 45.459945][ T6847] panic+0x2c0/0x800 [ 45.463807][ T6847] ? trace_hardirqs_on+0x30/0x80 [ 45.468712][ T6847] kasan_report+0x1c9/0x1d0 [ 45.473185][ T6847] ? search_by_entry_key+0x450/0xad0 [ 45.478440][ T6847] search_by_entry_key+0x450/0xad0 [ 45.483522][ T6847] reiserfs_find_entry+0x246/0x1260 [ 45.488688][ T6847] ? reiserfs_write_lock+0x77/0xd0 [ 45.493871][ T6847] reiserfs_lookup+0x156/0x3a0 [ 45.498605][ T6847] ? d_alloc_parallel+0x12da/0x13c0 [ 45.504033][ T6847] __lookup_slow+0x240/0x370 [ 45.508594][ T6847] lookup_one_len+0x10e/0x200 [ 45.513241][ T6847] reiserfs_lookup_privroot+0x85/0x1e0 [ 45.518665][ T6847] reiserfs_fill_super+0x2b51/0x3240 [ 45.523926][ T6847] ? vsnprintf+0x1a12/0x1aa0 [ 45.528486][ T6847] ? snprintf+0x6f/0x90 [ 45.532612][ T6847] ? set_blocksize+0x1f5/0x3c0 [ 45.537345][ T6847] mount_bdev+0x24f/0x360 [ 45.541653][ T6847] ? reiserfs_kill_sb+0x150/0x150 [ 45.546654][ T6847] legacy_get_tree+0xea/0x180 [ 45.551301][ T6847] ? remove_save_link+0x3e0/0x3e0 [ 45.556291][ T6847] vfs_get_tree+0x88/0x270 [ 45.560697][ T6847] path_mount+0x179d/0x29e0 [ 45.565171][ T6847] __se_sys_mount+0x126/0x180 [ 45.569832][ T6847] do_syscall_64+0x31/0x70 [ 45.574216][ T6847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.580091][ T6847] RIP: 0033:0x447d9a [ 45.583953][ T6847] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d a3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a a3 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 45.603537][ T6847] RSP: 002b:00007ffc5d05d468 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 45.611915][ T6847] RAX: ffffffffffffffda RBX: 00007ffc5d05d4c0 RCX: 0000000000447d9a [ 45.619855][ T6847] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc5d05d480 [ 45.627795][ T6847] RBP: 00007ffc5d05d480 R08: 00007ffc5d05d4c0 R09: 0000000000000000 [ 45.635745][ T6847] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000006 [ 45.643699][ T6847] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 45.652955][ T6847] Kernel Offset: disabled [ 45.657261][ T6847] Rebooting in 86400 seconds..