Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
executing program
[ 52.915902][ T3540] loop0: detected capacity change from 0 to 8192
[ 52.926327][ T3540] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 52.939554][ T3540] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 52.948811][ T3540] REISERFS (device loop0): using ordered data mode
[ 52.955608][ T3540] reiserfs: using flush barriers
[ 52.962004][ T3540] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 52.978601][ T3540] REISERFS (device loop0): checking transaction log (loop0)
[ 52.987991][ T3540] REISERFS (device loop0): Using r5 hash to sort names
[ 52.995398][ T3540] ==================================================================
[ 53.003460][ T3540] BUG: KASAN: use-after-free in strlen+0x54/0x60
[ 53.009786][ T3540] Read of size 1 at addr ffff888072c857a3 by task syz-executor450/3540
[ 53.018012][ T3540]
[ 53.020314][ T3540] CPU: 0 PID: 3540 Comm: syz-executor450 Not tainted 6.1.39-syzkaller #0
[ 53.028702][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 53.038823][ T3540] Call Trace:
[ 53.042094][ T3540]
[ 53.045011][ T3540] dump_stack_lvl+0x1e3/0x2cb
[ 53.049685][ T3540] ? irq_work_queue+0xc6/0x150
[ 53.054431][ T3540] ? nf_tcp_handle_invalid+0x642/0x642
[ 53.059956][ T3540] ? panic+0x75d/0x75d
[ 53.064005][ T3540] ? _printk+0xd1/0x111
[ 53.068144][ T3540] ? _raw_spin_lock_irqsave+0xac/0x120
[ 53.073595][ T3540] print_report+0x15f/0x4f0
[ 53.078089][ T3540] ? __virt_addr_valid+0x22b/0x2e0
[ 53.083192][ T3540] ? __phys_addr+0xb6/0x170
[ 53.087675][ T3540] ? strlen+0x54/0x60
[ 53.091635][ T3540] kasan_report+0x136/0x160
[ 53.096220][ T3540] ? strlen+0x54/0x60
[ 53.100183][ T3540] strlen+0x54/0x60
[ 53.103974][ T3540] reiserfs_find_entry+0x97e/0x19b0
[ 53.109170][ T3540] ? reiserfs_get_parent+0x2c0/0x2c0
[ 53.114436][ T3540] ? mutex_lock_nested+0x17/0x20
[ 53.119353][ T3540] reiserfs_lookup+0x1e6/0x4b0
[ 53.124138][ T3540] ? reiserfs_find_entry+0x19b0/0x19b0
[ 53.130192][ T3540] ? d_hash_and_lookup+0x1b0/0x1b0
[ 53.135285][ T3540] ? __init_waitqueue_head+0xaa/0x140
[ 53.140635][ T3540] __lookup_slow+0x27e/0x3d0
[ 53.145219][ T3540] ? lookup_one_len+0x2d0/0x2d0
[ 53.150074][ T3540] lookup_one_len+0x187/0x2d0
[ 53.154842][ T3540] ? lookup_one_common+0x460/0x460
[ 53.159935][ T3540] reiserfs_lookup_privroot+0x85/0x1e0
[ 53.165372][ T3540] reiserfs_fill_super+0x1957/0x2620
[ 53.170656][ T3540] ? reiserfs_kill_sb+0x150/0x150
[ 53.175659][ T3540] ? snprintf+0xd6/0x120
[ 53.179887][ T3540] mount_bdev+0x2c9/0x3f0
[ 53.184199][ T3540] ? reiserfs_kill_sb+0x150/0x150
[ 53.189211][ T3540] legacy_get_tree+0xeb/0x180
[ 53.193972][ T3540] ? remove_save_link+0x540/0x540
[ 53.198975][ T3540] vfs_get_tree+0x88/0x270
[ 53.203460][ T3540] do_new_mount+0x28b/0xae0
[ 53.207952][ T3540] ? do_move_mount_old+0x160/0x160
[ 53.213043][ T3540] ? user_path_at_empty+0x12b/0x180
[ 53.218307][ T3540] __se_sys_mount+0x2d5/0x3c0
[ 53.222968][ T3540] ? __x64_sys_mount+0xc0/0xc0
[ 53.227800][ T3540] ? syscall_enter_from_user_mode+0x2e/0x220
[ 53.233781][ T3540] ? lockdep_hardirqs_on+0x94/0x130
[ 53.238967][ T3540] ? __x64_sys_mount+0x1c/0xc0
[ 53.243720][ T3540] do_syscall_64+0x3d/0xb0
[ 53.248119][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.254108][ T3540] RIP: 0033:0x7fee22b65daa
[ 53.258509][ T3540] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.278365][ T3540] RSP: 002b:00007ffeaf2a66b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 53.286761][ T3540] RAX: ffffffffffffffda RBX: 00007ffeaf2a66c0 RCX: 00007fee22b65daa
[ 53.294731][ T3540] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007ffeaf2a66c0
[ 53.302683][ T3540] RBP: 0000000000000004 R08: 00007ffeaf2a6700 R09: 000000000000111c
[ 53.310629][ T3540] R10: 0000000000008001 R11: 0000000000000286 R12: 00007ffeaf2a6700
[ 53.318605][ T3540] R13: 0000000000000003 R14: 0000000000400000 R15: 00007fee22bad03b
[ 53.326574][ T3540]
[ 53.329586][ T3540]
[ 53.331888][ T3540] The buggy address belongs to the physical page:
[ 53.338273][ T3540] page:ffffea0001cb2140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x72c85
[ 53.348485][ T3540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 53.355572][ T3540] raw: 00fff00000000000 ffffea0001cb2188 ffff8880b98405e0 0000000000000000
[ 53.364133][ T3540] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 53.372687][ T3540] page dumped because: kasan: bad access detected
[ 53.379071][ T3540] page_owner tracks the page as freed
[ 53.384498][ T3540] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 3539, tgid 3539 (sshd), ts 52830659224, free_ts 52831671242
[ 53.401502][ T3540] post_alloc_hook+0x18d/0x1b0
[ 53.406256][ T3540] get_page_from_freelist+0x32ed/0x3480
[ 53.411783][ T3540] __alloc_pages+0x28d/0x770
[ 53.416349][ T3540] __folio_alloc+0xf/0x30
[ 53.420654][ T3540] vma_alloc_folio+0x486/0x990
[ 53.425610][ T3540] wp_page_copy+0x292/0x17d0
[ 53.430194][ T3540] handle_mm_fault+0x2522/0x5330
[ 53.435127][ T3540] exc_page_fault+0x26f/0x660
[ 53.439783][ T3540] asm_exc_page_fault+0x22/0x30
[ 53.444700][ T3540] page last free stack trace:
[ 53.449350][ T3540] free_unref_page_prepare+0xf63/0x1120
[ 53.454876][ T3540] free_unref_page_list+0x107/0x810
[ 53.460052][ T3540] release_pages+0x2836/0x2b40
[ 53.464810][ T3540] tlb_flush_mmu+0xfc/0x210
[ 53.469331][ T3540] tlb_finish_mmu+0xce/0x1f0
[ 53.474081][ T3540] unmap_region+0x29f/0x2f0
[ 53.478695][ T3540] do_mas_align_munmap+0xe93/0x15c0
[ 53.483872][ T3540] do_mas_munmap+0x246/0x2b0
[ 53.488711][ T3540] __vm_munmap+0x268/0x370
[ 53.493194][ T3540] __x64_sys_munmap+0x5c/0x70
[ 53.497853][ T3540] do_syscall_64+0x3d/0xb0
[ 53.502246][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.508120][ T3540]
[ 53.510550][ T3540] Memory state around the buggy address:
[ 53.516244][ T3540] ffff888072c85680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 53.524279][ T3540] ffff888072c85700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 53.532313][ T3540] >ffff888072c85780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 53.540347][ T3540] ^
[ 53.545436][ T3540] ffff888072c85800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 53.553488][ T3540] ffff888072c85880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 53.561619][ T3540] ==================================================================
[ 53.569964][ T3540] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 53.577275][ T3540] CPU: 0 PID: 3540 Comm: syz-executor450 Not tainted 6.1.39-syzkaller #0
[ 53.585698][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 53.595744][ T3540] Call Trace:
[ 53.599014][ T3540]
[ 53.601934][ T3540] dump_stack_lvl+0x1e3/0x2cb
[ 53.606610][ T3540] ? nf_tcp_handle_invalid+0x642/0x642
[ 53.612060][ T3540] ? panic+0x75d/0x75d
[ 53.616114][ T3540] ? preempt_schedule_common+0xa6/0xd0
[ 53.621624][ T3540] ? vscnprintf+0x59/0x80
[ 53.626026][ T3540] panic+0x318/0x75d
[ 53.629922][ T3540] ? check_panic_on_warn+0x1d/0xa0
[ 53.635370][ T3540] ? memcpy_page_flushcache+0xfc/0xfc
[ 53.640745][ T3540] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 53.646739][ T3540] ? _raw_spin_unlock+0x40/0x40
[ 53.651606][ T3540] ? print_report+0x4a3/0x4f0
[ 53.656308][ T3540] check_panic_on_warn+0x7e/0xa0
[ 53.661247][ T3540] ? strlen+0x54/0x60
[ 53.665219][ T3540] end_report+0x66/0x110
[ 53.669445][ T3540] kasan_report+0x143/0x160
[ 53.673962][ T3540] ? strlen+0x54/0x60
[ 53.677946][ T3540] strlen+0x54/0x60
[ 53.681741][ T3540] reiserfs_find_entry+0x97e/0x19b0
[ 53.687147][ T3540] ? reiserfs_get_parent+0x2c0/0x2c0
[ 53.692422][ T3540] ? mutex_lock_nested+0x17/0x20
[ 53.697344][ T3540] reiserfs_lookup+0x1e6/0x4b0
[ 53.702111][ T3540] ? reiserfs_find_entry+0x19b0/0x19b0
[ 53.707651][ T3540] ? d_hash_and_lookup+0x1b0/0x1b0
[ 53.712754][ T3540] ? __init_waitqueue_head+0xaa/0x140
[ 53.718121][ T3540] __lookup_slow+0x27e/0x3d0
[ 53.722787][ T3540] ? lookup_one_len+0x2d0/0x2d0
[ 53.727640][ T3540] lookup_one_len+0x187/0x2d0
[ 53.732307][ T3540] ? lookup_one_common+0x460/0x460
[ 53.737417][ T3540] reiserfs_lookup_privroot+0x85/0x1e0
[ 53.742865][ T3540] reiserfs_fill_super+0x1957/0x2620
[ 53.748165][ T3540] ? reiserfs_kill_sb+0x150/0x150
[ 53.753178][ T3540] ? snprintf+0xd6/0x120
[ 53.757414][ T3540] mount_bdev+0x2c9/0x3f0
[ 53.761739][ T3540] ? reiserfs_kill_sb+0x150/0x150
[ 53.766797][ T3540] legacy_get_tree+0xeb/0x180
[ 53.771482][ T3540] ? remove_save_link+0x540/0x540
[ 53.776865][ T3540] vfs_get_tree+0x88/0x270
[ 53.781368][ T3540] do_new_mount+0x28b/0xae0
[ 53.785867][ T3540] ? do_move_mount_old+0x160/0x160
[ 53.790966][ T3540] ? user_path_at_empty+0x12b/0x180
[ 53.796325][ T3540] __se_sys_mount+0x2d5/0x3c0
[ 53.800991][ T3540] ? __x64_sys_mount+0xc0/0xc0
[ 53.805744][ T3540] ? syscall_enter_from_user_mode+0x2e/0x220
[ 53.811890][ T3540] ? lockdep_hardirqs_on+0x94/0x130
[ 53.817103][ T3540] ? __x64_sys_mount+0x1c/0xc0
[ 53.821871][ T3540] do_syscall_64+0x3d/0xb0
[ 53.826283][ T3540] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.832167][ T3540] RIP: 0033:0x7fee22b65daa
[ 53.836567][ T3540] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.856167][ T3540] RSP: 002b:00007ffeaf2a66b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 53.864565][ T3540] RAX: ffffffffffffffda RBX: 00007ffeaf2a66c0 RCX: 00007fee22b65daa
[ 53.872696][ T3540] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007ffeaf2a66c0
[ 53.880742][ T3540] RBP: 0000000000000004 R08: 00007ffeaf2a6700 R09: 000000000000111c
[ 53.888792][ T3540] R10: 0000000000008001 R11: 0000000000000286 R12: 00007ffeaf2a6700
[ 53.896762][ T3540] R13: 0000000000000003 R14: 0000000000400000 R15: 00007fee22bad03b
[ 53.904740][ T3540]
[ 53.907838][ T3540] Kernel Offset: disabled
[ 53.912157][ T3540] Rebooting in 86400 seconds..