Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 52.588844][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor176' [ 52.631975][ T4996] loop0: detected capacity change from 0 to 8192 [ 52.642448][ T4996] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 52.655557][ T4996] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 52.665520][ T4996] REISERFS (device loop0): using ordered data mode [ 52.672090][ T4996] reiserfs: using flush barriers [ 52.677981][ T4996] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 52.694692][ T4996] REISERFS (device loop0): checking transaction log (loop0) [ 52.703925][ T4996] REISERFS (device loop0): Using r5 hash to sort names [ 52.711091][ T4996] ================================================================== [ 52.719146][ T4996] BUG: KASAN: use-after-free in strlen+0x7d/0xa0 [ 52.725470][ T4996] Read of size 1 at addr ffff88807242b0c4 by task syz-executor176/4996 [ 52.733696][ T4996] [ 52.736018][ T4996] CPU: 1 PID: 4996 Comm: syz-executor176 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 52.745894][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 52.755940][ T4996] Call Trace: [ 52.759206][ T4996] [ 52.762126][ T4996] dump_stack_lvl+0xd9/0x150 [ 52.766741][ T4996] print_address_description.constprop.0+0x2c/0x3c0 [ 52.773328][ T4996] ? strlen+0x7d/0xa0 [ 52.777308][ T4996] kasan_report+0x11c/0x130 [ 52.781817][ T4996] ? strlen+0x7d/0xa0 [ 52.785799][ T4996] strlen+0x7d/0xa0 [ 52.789605][ T4996] set_de_name_and_namelen+0x4c4/0x6a0 [ 52.795066][ T4996] reiserfs_find_entry.part.0+0x3db/0xdf0 [ 52.800794][ T4996] ? search_by_entry_key+0x960/0x960 [ 52.806083][ T4996] ? find_held_lock+0x2d/0x110 [ 52.810853][ T4996] reiserfs_lookup+0x24e/0x610 [ 52.815617][ T4996] ? reiserfs_unlink+0x760/0x760 [ 52.820569][ T4996] __lookup_slow+0x24c/0x460 [ 52.825164][ T4996] ? lookup_one_qstr_excl+0x180/0x180 [ 52.830541][ T4996] ? lock_downgrade+0x690/0x690 [ 52.835404][ T4996] ? d_lookup+0x105/0x170 [ 52.839739][ T4996] lookup_one_len+0x16e/0x1a0 [ 52.844419][ T4996] ? try_lookup_one_len+0x190/0x190 [ 52.849624][ T4996] reiserfs_lookup_privroot+0x96/0x210 [ 52.855099][ T4996] reiserfs_fill_super+0x1a8d/0x2eb0 [ 52.860397][ T4996] ? reiserfs_remount+0x1650/0x1650 [ 52.865608][ T4996] ? snprintf+0xbf/0x100 [ 52.869852][ T4996] ? vsprintf+0x30/0x30 [ 52.874006][ T4996] ? wait_for_completion_io_timeout+0x20/0x20 [ 52.880083][ T4996] mount_bdev+0x357/0x420 [ 52.884416][ T4996] ? reiserfs_remount+0x1650/0x1650 [ 52.889620][ T4996] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 52.894650][ T4996] legacy_get_tree+0x109/0x220 [ 52.899424][ T4996] vfs_get_tree+0x8d/0x350 [ 52.903846][ T4996] path_mount+0x134b/0x1e40 [ 52.908354][ T4996] ? kmem_cache_free+0xe9/0x480 [ 52.913197][ T4996] ? finish_automount+0x9b0/0x9b0 [ 52.918235][ T4996] ? putname+0x102/0x140 [ 52.922495][ T4996] __x64_sys_mount+0x283/0x300 [ 52.927264][ T4996] ? copy_mnt_ns+0xb30/0xb30 [ 52.931857][ T4996] ? syscall_enter_from_user_mode+0x26/0x80 [ 52.937752][ T4996] do_syscall_64+0x39/0xb0 [ 52.942175][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.948080][ T4996] RIP: 0033:0x7fbd2bd06afa [ 52.952489][ T4996] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.972092][ T4996] RSP: 002b:00007fff33009688 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 52.980500][ T4996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd2bd06afa [ 52.988464][ T4996] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007fff33009690 [ 52.996435][ T4996] RBP: 00007fff33009690 R08: 00007fff330096d0 R09: 000000000000111a [ 53.004398][ T4996] R10: 0000000000008001 R11: 0000000000000286 R12: 0000000000000004 [ 53.012361][ T4996] R13: 00005555574402c0 R14: 00007fff330096d0 R15: 0000000000000000 [ 53.020330][ T4996] [ 53.023338][ T4996] [ 53.025650][ T4996] The buggy address belongs to the physical page: [ 53.032045][ T4996] page:ffffea0001c90ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7242b [ 53.042191][ T4996] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.049393][ T4996] page_type: 0xffffffff() [ 53.053718][ T4996] raw: 00fff00000000000 ffffea0001c90b08 ffff8880b9943660 0000000000000000 [ 53.062293][ T4996] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 53.070864][ T4996] page dumped because: kasan: bad access detected [ 53.077261][ T4996] page_owner tracks the page as freed [ 53.082612][ T4996] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 13353093114, free_ts 14301663606 [ 53.097537][ T4996] post_alloc_hook+0x2db/0x350 [ 53.102300][ T4996] split_map_pages+0x1ef/0x520 [ 53.107068][ T4996] isolate_freepages_range+0x313/0x350 [ 53.112526][ T4996] alloc_contig_range+0x2fa/0x4a0 [ 53.117547][ T4996] alloc_contig_pages+0x361/0x4d0 [ 53.122568][ T4996] debug_vm_pgtable+0x91f/0x4210 [ 53.127505][ T4996] do_one_initcall+0x102/0x540 [ 53.132277][ T4996] kernel_init_freeable+0x5a4/0x890 [ 53.137469][ T4996] kernel_init+0x1e/0x2c0 [ 53.141798][ T4996] ret_from_fork+0x1f/0x30 [ 53.146217][ T4996] page last free stack trace: [ 53.150870][ T4996] free_unref_page_prepare+0x4dd/0xb90 [ 53.156321][ T4996] free_unref_page+0x33/0x370 [ 53.160994][ T4996] free_contig_range+0xb5/0x180 [ 53.165838][ T4996] destroy_args+0x6c4/0x920 [ 53.170341][ T4996] debug_vm_pgtable+0x2417/0x4210 [ 53.175364][ T4996] do_one_initcall+0x102/0x540 [ 53.180130][ T4996] kernel_init_freeable+0x5a4/0x890 [ 53.185320][ T4996] kernel_init+0x1e/0x2c0 [ 53.189647][ T4996] ret_from_fork+0x1f/0x30 [ 53.194078][ T4996] [ 53.196389][ T4996] Memory state around the buggy address: [ 53.202093][ T4996] ffff88807242af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.210145][ T4996] ffff88807242b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.218196][ T4996] >ffff88807242b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.226937][ T4996] ^ [ 53.233077][ T4996] ffff88807242b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.241129][ T4996] ffff88807242b180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.249176][ T4996] ================================================================== [ 53.257422][ T4996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.264626][ T4996] CPU: 0 PID: 4996 Comm: syz-executor176 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 53.274600][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 53.284646][ T4996] Call Trace: [ 53.287915][ T4996] [ 53.290838][ T4996] dump_stack_lvl+0xd9/0x150 [ 53.295442][ T4996] panic+0x686/0x730 [ 53.299343][ T4996] ? panic_smp_self_stop+0xa0/0xa0 [ 53.304462][ T4996] ? preempt_schedule_thunk+0x1a/0x20 [ 53.309842][ T4996] ? preempt_schedule_common+0x45/0xb0 [ 53.315302][ T4996] check_panic_on_warn+0xb1/0xc0 [ 53.320257][ T4996] end_report+0xe9/0x120 [ 53.324496][ T4996] ? strlen+0x7d/0xa0 [ 53.328483][ T4996] kasan_report+0xf9/0x130 [ 53.332897][ T4996] ? strlen+0x7d/0xa0 [ 53.336874][ T4996] strlen+0x7d/0xa0 [ 53.340678][ T4996] set_de_name_and_namelen+0x4c4/0x6a0 [ 53.346138][ T4996] reiserfs_find_entry.part.0+0x3db/0xdf0 [ 53.351862][ T4996] ? search_by_entry_key+0x960/0x960 [ 53.357146][ T4996] ? find_held_lock+0x2d/0x110 [ 53.361917][ T4996] reiserfs_lookup+0x24e/0x610 [ 53.366684][ T4996] ? reiserfs_unlink+0x760/0x760 [ 53.371636][ T4996] __lookup_slow+0x24c/0x460 [ 53.376229][ T4996] ? lookup_one_qstr_excl+0x180/0x180 [ 53.381601][ T4996] ? lock_downgrade+0x690/0x690 [ 53.386463][ T4996] ? d_lookup+0x105/0x170 [ 53.390798][ T4996] lookup_one_len+0x16e/0x1a0 [ 53.395476][ T4996] ? try_lookup_one_len+0x190/0x190 [ 53.400685][ T4996] reiserfs_lookup_privroot+0x96/0x210 [ 53.406147][ T4996] reiserfs_fill_super+0x1a8d/0x2eb0 [ 53.411441][ T4996] ? reiserfs_remount+0x1650/0x1650 [ 53.416651][ T4996] ? snprintf+0xbf/0x100 [ 53.420908][ T4996] ? vsprintf+0x30/0x30 [ 53.425064][ T4996] ? wait_for_completion_io_timeout+0x20/0x20 [ 53.431138][ T4996] mount_bdev+0x357/0x420 [ 53.435474][ T4996] ? reiserfs_remount+0x1650/0x1650 [ 53.440770][ T4996] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 53.445798][ T4996] legacy_get_tree+0x109/0x220 [ 53.450569][ T4996] vfs_get_tree+0x8d/0x350 [ 53.455003][ T4996] path_mount+0x134b/0x1e40 [ 53.459599][ T4996] ? kmem_cache_free+0xe9/0x480 [ 53.464446][ T4996] ? finish_automount+0x9b0/0x9b0 [ 53.469569][ T4996] ? putname+0x102/0x140 [ 53.473812][ T4996] __x64_sys_mount+0x283/0x300 [ 53.478582][ T4996] ? copy_mnt_ns+0xb30/0xb30 [ 53.483176][ T4996] ? syscall_enter_from_user_mode+0x26/0x80 [ 53.489073][ T4996] do_syscall_64+0x39/0xb0 [ 53.493497][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.499417][ T4996] RIP: 0033:0x7fbd2bd06afa [ 53.503840][ T4996] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.523459][ T4996] RSP: 002b:00007fff33009688 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 53.531975][ T4996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd2bd06afa [ 53.539954][ T4996] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007fff33009690 [ 53.547933][ T4996] RBP: 00007fff33009690 R08: 00007fff330096d0 R09: 000000000000111a [ 53.555900][ T4996] R10: 0000000000008001 R11: 0000000000000286 R12: 0000000000000004 [ 53.563967][ T4996] R13: 00005555574402c0 R14: 00007fff330096d0 R15: 0000000000000000 [ 53.571951][ T4996] [ 53.575141][ T4996] Kernel Offset: disabled [ 53.579463][ T4996] Rebooting in 86400 seconds..