Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts.
executing program
[ 43.646853][ T3496] loop0: detected capacity change from 0 to 8192
[ 43.656701][ T3496] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 43.666335][ T3496] REISERFS (device loop0): using ordered data mode
[ 43.672875][ T3496] reiserfs: using flush barriers
[ 43.678617][ T3496] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 43.695097][ T3496] REISERFS (device loop0): checking transaction log (loop0)
[ 43.703843][ T3496] REISERFS (device loop0): Using r5 hash to sort names
[ 43.711209][ T3496] ==================================================================
[ 43.719303][ T3496] BUG: KASAN: use-after-free in search_by_entry_key+0x575/0x1380
[ 43.727014][ T3496] Read of size 4 at addr ffff888071638004 by task syz-executor404/3496
[ 43.735225][ T3496]
[ 43.737527][ T3496] CPU: 1 PID: 3496 Comm: syz-executor404 Not tainted 5.15.114-syzkaller #0
[ 43.746083][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 43.756110][ T3496] Call Trace:
[ 43.759367][ T3496]
[ 43.762281][ T3496] dump_stack_lvl+0x1e3/0x2cb
[ 43.766939][ T3496] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 43.772545][ T3496] ? _printk+0xd1/0x111
[ 43.776677][ T3496] ? __wake_up_klogd+0xcc/0x100
[ 43.781501][ T3496] ? panic+0x84d/0x84d
[ 43.785542][ T3496] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 43.790979][ T3496] print_address_description+0x63/0x3b0
[ 43.796503][ T3496] ? search_by_entry_key+0x575/0x1380
[ 43.801849][ T3496] kasan_report+0x16b/0x1c0
[ 43.806325][ T3496] ? search_by_entry_key+0x575/0x1380
[ 43.811674][ T3496] search_by_entry_key+0x575/0x1380
[ 43.816849][ T3496] ? pathrelse+0xe9/0x140
[ 43.821154][ T3496] reiserfs_find_entry+0xf47/0x19b0
[ 43.826341][ T3496] ? reiserfs_get_parent+0x2c0/0x2c0
[ 43.831602][ T3496] ? mutex_lock_nested+0x17/0x20
[ 43.836518][ T3496] reiserfs_lookup+0x1e6/0x4b0
[ 43.841260][ T3496] ? reiserfs_find_entry+0x19b0/0x19b0
[ 43.846707][ T3496] ? d_hash_and_lookup+0x1b0/0x1b0
[ 43.851796][ T3496] ? __init_waitqueue_head+0xaa/0x140
[ 43.857148][ T3496] __lookup_slow+0x275/0x3d0
[ 43.861721][ T3496] ? lookup_one_len+0x2d0/0x2d0
[ 43.866559][ T3496] lookup_one_len+0x187/0x2d0
[ 43.871214][ T3496] ? lookup_one_common+0x460/0x460
[ 43.876305][ T3496] reiserfs_lookup_privroot+0x85/0x1e0
[ 43.881739][ T3496] reiserfs_fill_super+0x191e/0x2690
[ 43.887009][ T3496] ? reiserfs_kill_sb+0x150/0x150
[ 43.892011][ T3496] ? snprintf+0xd6/0x120
[ 43.896242][ T3496] mount_bdev+0x2c9/0x3f0
[ 43.900549][ T3496] ? reiserfs_kill_sb+0x150/0x150
[ 43.905549][ T3496] legacy_get_tree+0xeb/0x180
[ 43.910203][ T3496] ? remove_save_link+0x540/0x540
[ 43.915207][ T3496] vfs_get_tree+0x88/0x270
[ 43.919600][ T3496] do_new_mount+0x28b/0xae0
[ 43.924083][ T3496] ? do_move_mount_old+0x160/0x160
[ 43.929173][ T3496] ? user_path_at_empty+0x12b/0x180
[ 43.934350][ T3496] __se_sys_mount+0x2d5/0x3c0
[ 43.939007][ T3496] ? __x64_sys_mount+0xc0/0xc0
[ 43.943763][ T3496] ? syscall_enter_from_user_mode+0x2e/0x230
[ 43.949719][ T3496] ? lockdep_hardirqs_on+0x94/0x130
[ 43.954893][ T3496] ? __x64_sys_mount+0x1c/0xc0
[ 43.959631][ T3496] do_syscall_64+0x3d/0xb0
[ 43.964025][ T3496] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.969893][ T3496] RIP: 0033:0x7f4274179afa
[ 43.974285][ T3496] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.993863][ T3496] RSP: 002b:00007ffc35c67508 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 44.002252][ T3496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4274179afa
[ 44.010201][ T3496] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 00007ffc35c67510
[ 44.018153][ T3496] RBP: 00007ffc35c67510 R08: 00007ffc35c67550 R09: 000000000000111a
[ 44.026099][ T3496] R10: 000000000120c083 R11: 0000000000000286 R12: 0000000000000004
[ 44.034045][ T3496] R13: 00005555564f82c0 R14: 00007ffc35c67550 R15: 0000000000000000
[ 44.042002][ T3496]
[ 44.045001][ T3496]
[ 44.047302][ T3496] The buggy address belongs to the page:
[ 44.052905][ T3496] page:ffffea0001c58e00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x71638
[ 44.063028][ T3496] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 44.070202][ T3496] raw: 00fff00000000000 ffffea0001c58e48 ffff8880b9b3fd20 0000000000000000
[ 44.078760][ T3496] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 44.087312][ T3496] page dumped because: kasan: bad access detected
[ 44.093697][ T3496] page_owner tracks the page as freed
[ 44.099047][ T3496] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, ts 9037548298, free_ts 10141374469
[ 44.112126][ T3496] split_map_pages+0x246/0x510
[ 44.116880][ T3496] isolate_freepages_range+0x47c/0x4e0
[ 44.122313][ T3496] alloc_contig_range+0xc2b/0xf90
[ 44.127317][ T3496] alloc_contig_pages+0x3ea/0x4e0
[ 44.132315][ T3496] debug_vm_pgtable_alloc_huge_page+0xb9/0x108
[ 44.138447][ T3496] init_args+0xa3e/0xdb5
[ 44.142663][ T3496] debug_vm_pgtable+0xaa/0x462
[ 44.147400][ T3496] do_one_initcall+0x22b/0x7a0
[ 44.152144][ T3496] do_initcall_level+0x157/0x207
[ 44.157057][ T3496] do_initcalls+0x49/0x86
[ 44.161361][ T3496] kernel_init_freeable+0x43c/0x5c5
[ 44.166534][ T3496] kernel_init+0x19/0x290
[ 44.170867][ T3496] ret_from_fork+0x1f/0x30
[ 44.175259][ T3496] page last free stack trace:
[ 44.179908][ T3496] free_unref_page_prepare+0xc34/0xcf0
[ 44.185346][ T3496] free_unref_page+0x95/0x2d0
[ 44.189997][ T3496] free_contig_range+0x95/0xf0
[ 44.194735][ T3496] destroy_args+0xfe/0x97f
[ 44.199127][ T3496] debug_vm_pgtable+0x40d/0x462
[ 44.203955][ T3496] do_one_initcall+0x22b/0x7a0
[ 44.208694][ T3496] do_initcall_level+0x157/0x207
[ 44.213605][ T3496] do_initcalls+0x49/0x86
[ 44.217909][ T3496] kernel_init_freeable+0x43c/0x5c5
[ 44.223081][ T3496] kernel_init+0x19/0x290
[ 44.227389][ T3496] ret_from_fork+0x1f/0x30
[ 44.231779][ T3496]
[ 44.234079][ T3496] Memory state around the buggy address:
[ 44.239685][ T3496] ffff888071637f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.247722][ T3496] ffff888071637f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.255756][ T3496] >ffff888071638000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 44.263792][ T3496] ^
[ 44.267834][ T3496] ffff888071638080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 44.275871][ T3496] ffff888071638100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 44.283902][ T3496] ==================================================================
[ 44.291938][ T3496] Disabling lock debugging due to kernel taint
[ 44.298215][ T3496] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 44.305396][ T3496] CPU: 1 PID: 3496 Comm: syz-executor404 Tainted: G B 5.15.114-syzkaller #0
[ 44.315346][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 44.325378][ T3496] Call Trace:
[ 44.328637][ T3496]
[ 44.331549][ T3496] dump_stack_lvl+0x1e3/0x2cb
[ 44.336207][ T3496] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 44.341815][ T3496] ? panic+0x84d/0x84d
[ 44.345870][ T3496] ? preempt_schedule_common+0xa6/0xd0
[ 44.351315][ T3496] ? preempt_schedule+0xd9/0xe0
[ 44.356142][ T3496] panic+0x318/0x84d
[ 44.360011][ T3496] ? check_panic_on_warn+0x1d/0xa0
[ 44.365099][ T3496] ? fb_is_primary_device+0xcc/0xcc
[ 44.370276][ T3496] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 44.376233][ T3496] ? _raw_spin_unlock+0x40/0x40
[ 44.381067][ T3496] check_panic_on_warn+0x7e/0xa0
[ 44.385979][ T3496] ? search_by_entry_key+0x575/0x1380
[ 44.391325][ T3496] end_report+0x6d/0xf0
[ 44.395458][ T3496] kasan_report+0x18e/0x1c0
[ 44.399934][ T3496] ? search_by_entry_key+0x575/0x1380
[ 44.405281][ T3496] search_by_entry_key+0x575/0x1380
[ 44.410453][ T3496] ? pathrelse+0xe9/0x140
[ 44.414760][ T3496] reiserfs_find_entry+0xf47/0x19b0
[ 44.419936][ T3496] ? reiserfs_get_parent+0x2c0/0x2c0
[ 44.425196][ T3496] ? mutex_lock_nested+0x17/0x20
[ 44.430111][ T3496] reiserfs_lookup+0x1e6/0x4b0
[ 44.434863][ T3496] ? reiserfs_find_entry+0x19b0/0x19b0
[ 44.440301][ T3496] ? d_hash_and_lookup+0x1b0/0x1b0
[ 44.445393][ T3496] ? __init_waitqueue_head+0xaa/0x140
[ 44.450742][ T3496] __lookup_slow+0x275/0x3d0
[ 44.455310][ T3496] ? lookup_one_len+0x2d0/0x2d0
[ 44.460137][ T3496] lookup_one_len+0x187/0x2d0
[ 44.464793][ T3496] ? lookup_one_common+0x460/0x460
[ 44.469882][ T3496] reiserfs_lookup_privroot+0x85/0x1e0
[ 44.475318][ T3496] reiserfs_fill_super+0x191e/0x2690
[ 44.480582][ T3496] ? reiserfs_kill_sb+0x150/0x150
[ 44.485581][ T3496] ? snprintf+0xd6/0x120
[ 44.489803][ T3496] mount_bdev+0x2c9/0x3f0
[ 44.494112][ T3496] ? reiserfs_kill_sb+0x150/0x150
[ 44.499114][ T3496] legacy_get_tree+0xeb/0x180
[ 44.503768][ T3496] ? remove_save_link+0x540/0x540
[ 44.508767][ T3496] vfs_get_tree+0x88/0x270
[ 44.513164][ T3496] do_new_mount+0x28b/0xae0
[ 44.517646][ T3496] ? do_move_mount_old+0x160/0x160
[ 44.522735][ T3496] ? user_path_at_empty+0x12b/0x180
[ 44.527908][ T3496] __se_sys_mount+0x2d5/0x3c0
[ 44.532560][ T3496] ? __x64_sys_mount+0xc0/0xc0
[ 44.537298][ T3496] ? syscall_enter_from_user_mode+0x2e/0x230
[ 44.543253][ T3496] ? lockdep_hardirqs_on+0x94/0x130
[ 44.548424][ T3496] ? __x64_sys_mount+0x1c/0xc0
[ 44.553171][ T3496] do_syscall_64+0x3d/0xb0
[ 44.557565][ T3496] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 44.563432][ T3496] RIP: 0033:0x7f4274179afa
[ 44.567828][ T3496] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 44.587411][ T3496] RSP: 002b:00007ffc35c67508 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 44.595806][ T3496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4274179afa
[ 44.603756][ T3496] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 00007ffc35c67510
[ 44.611706][ T3496] RBP: 00007ffc35c67510 R08: 00007ffc35c67550 R09: 000000000000111a
[ 44.619656][ T3496] R10: 000000000120c083 R11: 0000000000000286 R12: 0000000000000004
[ 44.627604][ T3496] R13: 00005555564f82c0 R14: 00007ffc35c67550 R15: 0000000000000000
[ 44.635557][ T3496]
[ 44.638744][ T3496] Kernel Offset: disabled
[ 44.643052][ T3496] Rebooting in 86400 seconds..