REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using r5 hash to sort names REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. ================================================================== BUG: KASAN: use-after-free in strlen+0x79/0x90 lib/string.c:539 Read of size 1 at addr ffff88808b4be9cc by task syz-executor261/7951 CPU: 1 PID: 7951 Comm: syz-executor261 Not tainted 4.14.300-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 print_address_description.cold+0x54/0x1d3 mm/kasan/report.c:252 kasan_report_error.cold+0x8a/0x191 mm/kasan/report.c:351 kasan_report mm/kasan/report.c:409 [inline] __asan_report_load1_noabort+0x68/0x70 mm/kasan/report.c:427 strlen+0x79/0x90 lib/string.c:539 strlen include/linux/string.h:298 [inline] set_de_name_and_namelen fs/reiserfs/namei.c:82 [inline] search_by_entry_key+0x8b8/0xf50 fs/reiserfs/namei.c:171 reiserfs_readdir_inode+0x232/0x12a0 fs/reiserfs/dir.c:98 iterate_dir+0x1a0/0x5e0 fs/readdir.c:52 SYSC_getdents64 fs/readdir.c:358 [inline] SyS_getdents64+0x125/0x230 fs/readdir.c:339 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 The buggy address belongs to the page: page:ffffea00022d2f80 count:0 mapcount:0 mapping: (null) index:0x1 flags: 0xfff00000000000() raw: 00fff00000000000 0000000000000000 0000000000000001 00000000ffffffff raw: ffffea00022d2f60 ffffea00022d2fe0 0000000000000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff88808b4be880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88808b4be900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff88808b4be980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88808b4bea00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88808b4bea80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================