Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. executing program [ 47.222973][ T4026] loop0: detected capacity change from 0 to 8192 [ 47.314055][ T4026] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 47.316548][ T4026] REISERFS (device loop0): using ordered data mode [ 47.318201][ T4026] reiserfs: using flush barriers [ 47.320698][ T4026] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.325445][ T4026] REISERFS (device loop0): checking transaction log (loop0) [ 47.329297][ T4026] REISERFS (device loop0): Using tea hash to sort names [ 47.331582][ T4026] ================================================================== [ 47.333664][ T4026] BUG: KASAN: use-after-free in search_by_entry_key+0x45c/0xe88 [ 47.335579][ T4026] Read of size 4 at addr ffff0000e14b77c4 by task syz-executor246/4026 [ 47.337658][ T4026] [ 47.338222][ T4026] CPU: 0 PID: 4026 Comm: syz-executor246 Not tainted 5.15.177-syzkaller #0 [ 47.340428][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.342901][ T4026] Call trace: [ 47.343730][ T4026] dump_backtrace+0x0/0x530 [ 47.344848][ T4026] show_stack+0x2c/0x3c [ 47.345912][ T4026] dump_stack_lvl+0x108/0x170 [ 47.347146][ T4026] print_address_description+0x7c/0x3f0 [ 47.348609][ T4026] kasan_report+0x174/0x1e4 [ 47.349757][ T4026] __asan_report_load_n_noabort+0x40/0x4c [ 47.351235][ T4026] search_by_entry_key+0x45c/0xe88 [ 47.352533][ T4026] reiserfs_find_entry+0x2a8/0x1624 [ 47.353789][ T4026] reiserfs_lookup+0x184/0x3c4 [ 47.354998][ T4026] __lookup_slow+0x250/0x388 [ 47.356155][ T4026] lookup_one_len+0x178/0x28c [ 47.357343][ T4026] reiserfs_lookup_privroot+0x8c/0x204 [ 47.358725][ T4026] reiserfs_fill_super+0x1aec/0x1e8c [ 47.360084][ T4026] mount_bdev+0x274/0x370 [ 47.361192][ T4026] get_super_block+0x44/0x58 [ 47.362407][ T4026] legacy_get_tree+0xd4/0x16c [ 47.363588][ T4026] vfs_get_tree+0x90/0x274 [ 47.364771][ T4026] do_new_mount+0x278/0x8fc [ 47.365907][ T4026] path_mount+0x594/0x101c [ 47.367128][ T4026] __arm64_sys_mount+0x510/0x5e0 [ 47.368422][ T4026] invoke_syscall+0x98/0x2b8 [ 47.369593][ T4026] el0_svc_common+0x138/0x258 [ 47.370709][ T4026] do_el0_svc+0x58/0x14c [ 47.371785][ T4026] el0_svc+0x7c/0x1f0 [ 47.372799][ T4026] el0t_64_sync_handler+0x84/0xe4 [ 47.374047][ T4026] el0t_64_sync+0x1a0/0x1a4 [ 47.375202][ T4026] [ 47.375785][ T4026] The buggy address belongs to the page: [ 47.377196][ T4026] page:00000000107f6921 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1214b7 [ 47.379851][ T4026] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 47.381649][ T4026] raw: 05ffc00000000000 fffffc0003852e08 ffff0001b418e520 0000000000000000 [ 47.383878][ T4026] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 47.386143][ T4026] page dumped because: kasan: bad access detected [ 47.387821][ T4026] [ 47.388443][ T4026] Memory state around the buggy address: [ 47.389911][ T4026] ffff0000e14b7680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.392004][ T4026] ffff0000e14b7700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.394134][ T4026] >ffff0000e14b7780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.396199][ T4026] ^ [ 47.397697][ T4026] ffff0000e14b7800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.399836][ T4026] ffff0000e14b7880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.401986][ T4026] ================================================================== [ 47.404016][ T4026] Disabling lock debugging due to kernel taint [ 47.405809][ T4026] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program