./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1402216247 <...> Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. execve("./syz-executor1402216247", ["./syz-executor1402216247"], 0x7ffe236a8f90 /* 10 vars */) = 0 brk(NULL) = 0x55555631b000 brk(0x55555631bd00) = 0x55555631bd00 arch_prctl(ARCH_SET_FS, 0x55555631b380) = 0 set_tid_address(0x55555631b650) = 5039 set_robust_list(0x55555631b660, 24) = 0 rseq(0x55555631bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1402216247", 4096) = 28 getrandom("\xda\x03\x7a\x21\xc2\xee\xfd\xfa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555631bd00 brk(0x55555633cd00) = 0x55555633cd00 brk(0x55555633d000) = 0x55555633d000 mprotect(0x7f0d1db1b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.yIeaWj", 0700) = 0 chmod("./syzkaller.yIeaWj", 0777) = 0 chdir("./syzkaller.yIeaWj") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555631b650) = 5040 ./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x55555631b660, 24) = 0 [pid 5040] chdir("./0") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] memfd_create("syzkaller", 0) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d15667000 [ 72.769646][ T5040] syz-executor140[5040]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5040] munmap(0x7f0d15667000, 4194304) = 0 [pid 5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5040] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5040] close(3) = 0 [pid 5040] mkdir("./file0", 0777) = 0 [ 72.849169][ T5040] loop0: detected capacity change from 0 to 8192 [ 72.862519][ T5040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 72.875750][ T5040] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 72.885793][ T5040] REISERFS (device loop0): using ordered data mode [ 72.892573][ T5040] reiserfs: using flush barriers [ 72.899654][ T5040] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.917305][ T5040] REISERFS (device loop0): checking transaction log (loop0) [ 72.927903][ T5040] REISERFS (device loop0): Using r5 hash to sort names [ 72.935085][ T5040] REISERFS (device loop0): using 3.5.x disk format [pid 5040] mount("/dev/loop0", "./file0", "reiserfs", 0, "") = 0 [pid 5040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5040] chdir("./file0") = 0 [pid 5040] ioctl(4, LOOP_CLR_FD) = 0 [pid 5040] close(4) = 0 [pid 5040] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5040] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5040] creat("./file0", 000) = 6 [pid 5040] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5040] ftruncate(5, 3676) = 0 [ 72.943064][ T5040] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5040] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [ 72.999904][ T5040] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.016334][ T5040] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 73.028066][ T5040] REISERFS (device loop0): Remounting filesystem read-only [ 73.035392][ T5040] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [pid 5040] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 5040] exit_group(0) = ? [ 73.049676][ T5040] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 73.065422][ T5040] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.081531][ T5040] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [pid 5040] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555631c6f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556324730 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556324730 /* 0 entries */, 32768) = 0 close(4) = 0 [ 73.092615][ T5040] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data rmdir("./0/file0") = 0 getdents64(3, 0x55555631c6f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5043 attached , child_tidptr=0x55555631b650) = 5043 [pid 5043] set_robust_list(0x55555631b660, 24) = 0 [pid 5043] chdir("./1") = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5043] setpgid(0, 0) = 0 [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1000", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5043] memfd_create("syzkaller", 0) = 3 [pid 5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d15667000 [pid 5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5043] munmap(0x7f0d15667000, 4194304) = 0 [pid 5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5043] close(3) = 0 [pid 5043] mkdir("./file0", 0777) = 0 [ 73.258349][ T5043] loop0: detected capacity change from 0 to 8192 [ 73.270414][ T5043] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.283609][ T5043] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 73.292990][ T5043] REISERFS (device loop0): using ordered data mode [ 73.299595][ T5043] reiserfs: using flush barriers [pid 5043] mount("/dev/loop0", "./file0", "reiserfs", 0, "") = 0 [pid 5043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5043] chdir("./file0") = 0 [pid 5043] ioctl(4, LOOP_CLR_FD) = 0 [pid 5043] close(4) = 0 [pid 5043] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5043] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [ 73.306709][ T5043] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.323356][ T5043] REISERFS (device loop0): checking transaction log (loop0) [ 73.332283][ T5043] REISERFS (device loop0): Using r5 hash to sort names [ 73.339636][ T5043] REISERFS (device loop0): using 3.5.x disk format [ 73.346468][ T5043] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5043] creat("./file0", 000) = 6 [pid 5043] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5043] ftruncate(5, 3676) = 0 [pid 5043] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [ 73.401457][ T5043] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.417684][ T5043] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 73.428311][ T5043] REISERFS (device loop0): Remounting filesystem read-only [ 73.435561][ T5043] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [pid 5043] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 5043] exit_group(0) = ? [ 73.449398][ T5043] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 73.464233][ T5043] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.480469][ T5043] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [pid 5043] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5043, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555631c6f0 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 [ 73.491127][ T5043] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556324730 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556324730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x55555631c6f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5045 attached , child_tidptr=0x55555631b650) = 5045 [pid 5045] set_robust_list(0x55555631b660, 24) = 0 [pid 5045] chdir("./2") = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5045] memfd_create("syzkaller", 0) = 3 [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d15667000 [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5045] munmap(0x7f0d15667000, 4194304) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5045] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5045] close(3) = 0 [pid 5045] mkdir("./file0", 0777) = 0 [ 73.637087][ T5045] loop0: detected capacity change from 0 to 8192 [ 73.649493][ T5045] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.662723][ T5045] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 73.672080][ T5045] REISERFS (device loop0): using ordered data mode [ 73.678880][ T5045] reiserfs: using flush barriers [pid 5045] mount("/dev/loop0", "./file0", "reiserfs", 0, "") = 0 [pid 5045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5045] chdir("./file0") = 0 [pid 5045] ioctl(4, LOOP_CLR_FD) = 0 [pid 5045] close(4) = 0 [pid 5045] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5045] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5045] creat("./file0", 000) = 6 [pid 5045] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5045] ftruncate(5, 3676) = 0 [pid 5045] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [ 73.685562][ T5045] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.702231][ T5045] REISERFS (device loop0): checking transaction log (loop0) [ 73.710863][ T5045] REISERFS (device loop0): Using r5 hash to sort names [ 73.717844][ T5045] REISERFS (device loop0): using 3.5.x disk format [ 73.725133][ T5045] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 73.761030][ T5045] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.777338][ T5045] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 73.788254][ T5045] REISERFS (device loop0): Remounting filesystem read-only [ 73.795865][ T5045] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [pid 5045] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 5045] exit_group(0) = ? [ 73.809664][ T5045] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 73.824584][ T5045] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 73.840608][ T5045] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [pid 5045] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555631c6f0 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 [ 73.851566][ T5045] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556324730 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556324730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x55555631c6f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555631b650) = 5047 ./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x55555631b660, 24) = 0 [pid 5047] chdir("./3") = 0 [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setpgid(0, 0) = 0 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1000", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5047] memfd_create("syzkaller", 0) = 3 [pid 5047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d15667000 [pid 5047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5047] munmap(0x7f0d15667000, 4194304) = 0 [pid 5047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5047] close(3) = 0 [pid 5047] mkdir("./file0", 0777) = 0 [ 74.003376][ T5047] loop0: detected capacity change from 0 to 8192 [ 74.014971][ T5047] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.028829][ T5047] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.038255][ T5047] REISERFS (device loop0): using ordered data mode [ 74.044778][ T5047] reiserfs: using flush barriers [pid 5047] mount("/dev/loop0", "./file0", "reiserfs", 0, "") = 0 [pid 5047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5047] chdir("./file0") = 0 [pid 5047] ioctl(4, LOOP_CLR_FD) = 0 [pid 5047] close(4) = 0 [pid 5047] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5047] openat(4, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5047] creat("./file0", 000) = 6 [pid 5047] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [ 74.051688][ T5047] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.068171][ T5047] REISERFS (device loop0): checking transaction log (loop0) [ 74.076524][ T5047] REISERFS (device loop0): Using r5 hash to sort names [ 74.083470][ T5047] REISERFS (device loop0): using 3.5.x disk format [ 74.090465][ T5047] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5047] ftruncate(5, 3676) = 0 [pid 5047] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [ 74.144347][ T5047] ================================================================== [ 74.152466][ T5047] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x635/0xab0 [ 74.160256][ T5047] Read of size 48 at addr ffff888073c29ff0 by task syz-executor140/5047 [ 74.168581][ T5047] [ 74.170933][ T5047] CPU: 0 PID: 5047 Comm: syz-executor140 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0 [ 74.181461][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 74.191541][ T5047] Call Trace: [ 74.194829][ T5047] [ 74.197781][ T5047] dump_stack_lvl+0x1e7/0x2d0 [ 74.202495][ T5047] ? nf_tcp_handle_invalid+0x650/0x650 [ 74.207974][ T5047] ? panic+0x770/0x770 [ 74.212144][ T5047] ? _printk+0xd5/0x120 [ 74.216309][ T5047] print_report+0x163/0x540 [ 74.220823][ T5047] ? __virt_addr_valid+0x22f/0x2e0 [ 74.225942][ T5047] ? __phys_addr+0xba/0x170 [ 74.230450][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 74.235898][ T5047] kasan_report+0x175/0x1b0 [ 74.240433][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 74.245823][ T5047] kasan_check_range+0x27e/0x290 [ 74.250794][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 74.256171][ T5047] __asan_memcpy+0x29/0x70 [ 74.260604][ T5047] leaf_paste_in_buffer+0x635/0xab0 [ 74.265810][ T5047] leaf_copy_dir_entries+0x71e/0xc60 [ 74.271211][ T5047] ? leaf_copy_items_entirely+0xee0/0xee0 [ 74.276933][ T5047] ? __lock_acquire+0x1345/0x7f70 [ 74.281973][ T5047] leaf_copy_boundary_item+0xbbe/0x21b0 [ 74.287541][ T5047] ? is_bpf_text_address+0x26/0x2a0 [ 74.292755][ T5047] leaf_move_items+0xd1a/0x2960 [ 74.297627][ T5047] ? reiserfs_convert_objectid_map_v1+0x460/0x460 [ 74.304042][ T5047] ? xfd_validate_state+0x6e/0x150 [ 74.309270][ T5047] ? __switch_to+0xe3f/0x1be0 [ 74.313980][ T5047] leaf_shift_left+0xbe/0x430 [ 74.318665][ T5047] balance_leaf+0x15d1/0x12510 [ 74.323438][ T5047] ? finish_task_switch+0x1ca/0x830 [ 74.328644][ T5047] ? finish_task_switch+0x1ca/0x830 [ 74.333857][ T5047] ? __schedule+0x1974/0x4af0 [ 74.338539][ T5047] ? do_balance+0x8f0/0x8f0 [ 74.343048][ T5047] ? __mutex_trylock_common+0x182/0x2e0 [ 74.348630][ T5047] ? release_firmware_map_entry+0x190/0x190 [ 74.354548][ T5047] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.360537][ T5047] ? mark_lock+0x9a/0x340 [ 74.364869][ T5047] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 74.370849][ T5047] ? print_irqtrace_events+0x220/0x220 [ 74.376316][ T5047] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 74.381966][ T5047] ? lockdep_hardirqs_on+0x98/0x140 [ 74.387209][ T5047] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 74.392858][ T5047] ? fix_nodes+0x7376/0x8ce0 [ 74.397473][ T5047] ? fix_nodes+0x7b03/0x8ce0 [ 74.402083][ T5047] ? mark_lock+0x9a/0x340 [ 74.406454][ T5047] do_balance+0x30d/0x8f0 [ 74.410819][ T5047] ? get_right_neighbor_position+0x210/0x210 [ 74.416853][ T5047] ? reiserfs_insert_item+0x60e/0xc30 [ 74.422241][ T5047] reiserfs_insert_item+0xacc/0xc30 [ 74.427475][ T5047] ? reiserfs_paste_into_item+0x870/0x870 [ 74.433220][ T5047] ? mutex_unlock+0x10/0x10 [ 74.437727][ T5047] ? make_le_item_head+0x1e7/0x570 [ 74.442868][ T5047] add_save_link+0x479/0x7c0 [ 74.447497][ T5047] ? reiserfs_cancel_old_flush+0xb0/0xb0 [ 74.453146][ T5047] ? journal_join_abort+0xe0/0xe0 [ 74.458187][ T5047] ? journal_begin+0x1f3/0x360 [ 74.462991][ T5047] reiserfs_truncate_file+0x4bd/0x820 [ 74.468408][ T5047] ? reiserfs_new_symlink+0x770/0x770 [ 74.473785][ T5047] ? unmap_mapping_range+0xf8/0x290 [ 74.479008][ T5047] ? truncate_setsize+0xcf/0xf0 [ 74.483876][ T5047] reiserfs_setattr+0xbc9/0x1140 [ 74.488845][ T5047] ? reiserfs_commit_write+0x5b0/0x5b0 [ 74.494312][ T5047] ? current_time+0x1e0/0x2b0 [ 74.498998][ T5047] ? inode_set_ctime_current+0x2f0/0x2f0 [ 74.504658][ T5047] ? evm_inode_setattr+0x100/0x740 [ 74.509782][ T5047] ? bpf_lsm_inode_setattr+0x9/0x10 [ 74.515002][ T5047] ? security_inode_setattr+0xd7/0x130 [ 74.520506][ T5047] ? reiserfs_commit_write+0x5b0/0x5b0 [ 74.525990][ T5047] notify_change+0xb99/0xe60 [ 74.530602][ T5047] do_truncate+0x220/0x300 [ 74.535026][ T5047] ? put_page_bootmem+0x2e0/0x2e0 [ 74.540081][ T5047] ? ima_bprm_check+0x2b0/0x2b0 [ 74.544957][ T5047] path_openat+0x2959/0x3180 [ 74.549631][ T5047] ? getname_flags+0xbc/0x4e0 [ 74.554359][ T5047] ? do_filp_open+0x490/0x490 [ 74.559185][ T5047] do_filp_open+0x234/0x490 [ 74.563733][ T5047] ? vfs_tmpfile+0x4b0/0x4b0 [ 74.568354][ T5047] ? _raw_spin_unlock+0x28/0x40 [ 74.573224][ T5047] ? alloc_fd+0x59c/0x640 [ 74.577579][ T5047] do_sys_openat2+0x13e/0x1d0 [ 74.582292][ T5047] ? do_sys_open+0x230/0x230 [ 74.586927][ T5047] ? lockdep_hardirqs_on+0x98/0x140 [ 74.592154][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.597399][ T5047] ? ptrace_notify+0x278/0x380 [ 74.602200][ T5047] __x64_sys_openat+0x247/0x290 [ 74.607084][ T5047] ? __ia32_sys_open+0x270/0x270 [ 74.612053][ T5047] ? syscall_enter_from_user_mode+0x32/0x230 [ 74.618080][ T5047] ? syscall_enter_from_user_mode+0x8c/0x230 [ 74.624102][ T5047] do_syscall_64+0x41/0xc0 [ 74.628561][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.634491][ T5047] RIP: 0033:0x7f0d1daa6229 [ 74.638931][ T5047] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.658579][ T5047] RSP: 002b:00007ffc16842658 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.667023][ T5047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d1daa6229 [ 74.675009][ T5047] RDX: 000000000000275a RSI: 0000000020000200 RDI: 0000000000000004 [ 74.682993][ T5047] RBP: 0000000000000000 R08: 00007ffc16842690 R09: 00007ffc16842690 [ 74.690977][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1684267c [ 74.698964][ T5047] R13: 0000000000000003 R14: 431bde82d7b634db R15: 00007ffc168426b0 [ 74.706960][ T5047] [ 74.709999][ T5047] [ 74.712356][ T5047] The buggy address belongs to the physical page: [ 74.718779][ T5047] page:ffffea0001cf0a40 refcount:2 mapcount:0 mapping:ffff888148974d78 index:0x214 pfn:0x73c29 [ 74.729148][ T5047] memcg:ffff888015e52000 [ 74.733402][ T5047] aops:def_blk_aops ino:700000 [ 74.738199][ T5047] flags: 0xfff00000008124(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 74.748277][ T5047] page_type: 0xffffffff() [ 74.752629][ T5047] raw: 00fff00000008124 ffffea0001d397c8 ffffea0001cf0e88 ffff888148974d78 [ 74.761235][ T5047] raw: 0000000000000214 ffff888076ea5910 00000002ffffffff ffff888015e52000 [ 74.769828][ T5047] page dumped because: kasan: bad access detected [ 74.776257][ T5047] page_owner tracks the page as allocated [ 74.781988][ T5047] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5047, tgid 5047 (syz-executor140), ts 74127507592, free_ts 74127042651 [ 74.802601][ T5047] post_alloc_hook+0x1e6/0x210 [ 74.807402][ T5047] get_page_from_freelist+0x31db/0x3360 [ 74.813000][ T5047] __alloc_pages+0x255/0x670 [ 74.817616][ T5047] folio_alloc+0x1e/0x60 [ 74.821966][ T5047] filemap_alloc_folio+0xde/0x500 [ 74.827019][ T5047] __filemap_get_folio+0x431/0xbb0 [ 74.832141][ T5047] __getblk_gfp+0x218/0x630 [ 74.836674][ T5047] get_empty_nodes+0x8c5/0xd70 [ 74.841451][ T5047] fix_nodes+0x261b/0x8ce0 [ 74.845879][ T5047] reiserfs_insert_item+0x9e8/0xc30 [ 74.851089][ T5047] indirect2direct+0x699/0xc00 [ 74.855868][ T5047] reiserfs_cut_from_item+0xba6/0x2580 [ 74.861333][ T5047] reiserfs_do_truncate+0x9b9/0x14c0 [ 74.866636][ T5047] reiserfs_truncate_file+0x4da/0x820 [ 74.872013][ T5047] reiserfs_setattr+0xbc9/0x1140 [ 74.876951][ T5047] notify_change+0xb99/0xe60 [ 74.881545][ T5047] page last free stack trace: [ 74.886209][ T5047] free_unref_page_prepare+0x8c3/0x9f0 [ 74.891676][ T5047] free_unref_page_list+0x596/0x830 [ 74.896929][ T5047] release_pages+0x2113/0x23f0 [ 74.901707][ T5047] __folio_batch_release+0x84/0x100 [ 74.906912][ T5047] truncate_inode_pages_range+0x45d/0x11a0 [ 74.912743][ T5047] truncate_setsize+0xcf/0xf0 [ 74.917454][ T5047] reiserfs_setattr+0xbbc/0x1140 [ 74.922411][ T5047] notify_change+0xb99/0xe60 [ 74.927010][ T5047] do_truncate+0x220/0x300 [ 74.931439][ T5047] do_sys_ftruncate+0x2f3/0x390 [ 74.936310][ T5047] do_syscall_64+0x41/0xc0 [ 74.940725][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.946617][ T5047] [ 74.948944][ T5047] Memory state around the buggy address: [ 74.954590][ T5047] ffff888073c29f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.962790][ T5047] ffff888073c29f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.970885][ T5047] >ffff888073c2a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 74.978970][ T5047] ^ [ 74.983145][ T5047] ffff888073c2a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 74.991234][ T5047] ffff888073c2a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 74.999311][ T5047] ================================================================== [ 75.007862][ T5047] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.015078][ T5047] CPU: 0 PID: 5047 Comm: syz-executor140 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0 [ 75.025495][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 75.035667][ T5047] Call Trace: [ 75.038959][ T5047] [ 75.041911][ T5047] dump_stack_lvl+0x1e7/0x2d0 [ 75.046618][ T5047] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.052104][ T5047] ? panic+0x770/0x770 [ 75.056209][ T5047] ? preempt_schedule_common+0x83/0xc0 [ 75.061681][ T5047] ? vscnprintf+0x5d/0x80 [ 75.066047][ T5047] panic+0x30f/0x770 [ 75.069970][ T5047] ? check_panic_on_warn+0x21/0xa0 [ 75.075102][ T5047] ? __memcpy_flushcache+0x2b0/0x2b0 [ 75.080415][ T5047] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 75.086430][ T5047] ? _raw_spin_unlock+0x40/0x40 [ 75.091303][ T5047] ? print_report+0x4fb/0x540 [ 75.096088][ T5047] check_panic_on_warn+0x82/0xa0 [ 75.101665][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 75.107050][ T5047] end_report+0x6e/0x130 [ 75.111325][ T5047] kasan_report+0x186/0x1b0 [ 75.115854][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 75.121249][ T5047] kasan_check_range+0x27e/0x290 [ 75.126219][ T5047] ? leaf_paste_in_buffer+0x635/0xab0 [ 75.131599][ T5047] __asan_memcpy+0x29/0x70 [ 75.136034][ T5047] leaf_paste_in_buffer+0x635/0xab0 [ 75.141247][ T5047] leaf_copy_dir_entries+0x71e/0xc60 [ 75.146547][ T5047] ? leaf_copy_items_entirely+0xee0/0xee0 [ 75.152274][ T5047] ? __lock_acquire+0x1345/0x7f70 [ 75.157332][ T5047] leaf_copy_boundary_item+0xbbe/0x21b0 [ 75.162910][ T5047] ? is_bpf_text_address+0x26/0x2a0 [ 75.168140][ T5047] leaf_move_items+0xd1a/0x2960 [ 75.173012][ T5047] ? reiserfs_convert_objectid_map_v1+0x460/0x460 [ 75.179446][ T5047] ? xfd_validate_state+0x6e/0x150 [ 75.184596][ T5047] ? __switch_to+0xe3f/0x1be0 [ 75.189292][ T5047] leaf_shift_left+0xbe/0x430 [ 75.193986][ T5047] balance_leaf+0x15d1/0x12510 [ 75.198785][ T5047] ? finish_task_switch+0x1ca/0x830 [ 75.204340][ T5047] ? finish_task_switch+0x1ca/0x830 [ 75.209630][ T5047] ? __schedule+0x1974/0x4af0 [ 75.214330][ T5047] ? do_balance+0x8f0/0x8f0 [ 75.218931][ T5047] ? __mutex_trylock_common+0x182/0x2e0 [ 75.224491][ T5047] ? release_firmware_map_entry+0x190/0x190 [ 75.230391][ T5047] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 75.236384][ T5047] ? mark_lock+0x9a/0x340 [ 75.240724][ T5047] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 75.246707][ T5047] ? print_irqtrace_events+0x220/0x220 [ 75.252172][ T5047] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 75.257812][ T5047] ? lockdep_hardirqs_on+0x98/0x140 [ 75.263017][ T5047] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 75.268657][ T5047] ? fix_nodes+0x7376/0x8ce0 [ 75.273260][ T5047] ? fix_nodes+0x7b03/0x8ce0 [ 75.277862][ T5047] ? mark_lock+0x9a/0x340 [ 75.282213][ T5047] do_balance+0x30d/0x8f0 [ 75.286553][ T5047] ? get_right_neighbor_position+0x210/0x210 [ 75.292547][ T5047] ? reiserfs_insert_item+0x60e/0xc30 [ 75.297930][ T5047] reiserfs_insert_item+0xacc/0xc30 [ 75.303141][ T5047] ? reiserfs_paste_into_item+0x870/0x870 [ 75.309338][ T5047] ? mutex_unlock+0x10/0x10 [ 75.313856][ T5047] ? make_le_item_head+0x1e7/0x570 [ 75.320025][ T5047] add_save_link+0x479/0x7c0 [ 75.324632][ T5047] ? reiserfs_cancel_old_flush+0xb0/0xb0 [ 75.330281][ T5047] ? journal_join_abort+0xe0/0xe0 [ 75.335323][ T5047] ? journal_begin+0x1f3/0x360 [ 75.340092][ T5047] reiserfs_truncate_file+0x4bd/0x820 [ 75.345477][ T5047] ? reiserfs_new_symlink+0x770/0x770 [ 75.350856][ T5047] ? unmap_mapping_range+0xf8/0x290 [ 75.356069][ T5047] ? truncate_setsize+0xcf/0xf0 [ 75.360926][ T5047] reiserfs_setattr+0xbc9/0x1140 [ 75.365875][ T5047] ? reiserfs_commit_write+0x5b0/0x5b0 [ 75.371347][ T5047] ? current_time+0x1e0/0x2b0 [ 75.376033][ T5047] ? inode_set_ctime_current+0x2f0/0x2f0 [ 75.381674][ T5047] ? evm_inode_setattr+0x100/0x740 [ 75.386903][ T5047] ? bpf_lsm_inode_setattr+0x9/0x10 [ 75.392116][ T5047] ? security_inode_setattr+0xd7/0x130 [ 75.397583][ T5047] ? reiserfs_commit_write+0x5b0/0x5b0 [ 75.403050][ T5047] notify_change+0xb99/0xe60 [ 75.407655][ T5047] do_truncate+0x220/0x300 [ 75.412082][ T5047] ? put_page_bootmem+0x2e0/0x2e0 [ 75.417135][ T5047] ? ima_bprm_check+0x2b0/0x2b0 [ 75.422018][ T5047] path_openat+0x2959/0x3180 [ 75.426655][ T5047] ? getname_flags+0xbc/0x4e0 [ 75.431429][ T5047] ? do_filp_open+0x490/0x490 [ 75.436122][ T5047] do_filp_open+0x234/0x490 [ 75.440647][ T5047] ? vfs_tmpfile+0x4b0/0x4b0 [ 75.445257][ T5047] ? _raw_spin_unlock+0x28/0x40 [ 75.450126][ T5047] ? alloc_fd+0x59c/0x640 [ 75.454475][ T5047] do_sys_openat2+0x13e/0x1d0 [ 75.459164][ T5047] ? do_sys_open+0x230/0x230 [ 75.463780][ T5047] ? lockdep_hardirqs_on+0x98/0x140 [ 75.468985][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.474193][ T5047] ? ptrace_notify+0x278/0x380 [ 75.478969][ T5047] __x64_sys_openat+0x247/0x290 [ 75.483834][ T5047] ? __ia32_sys_open+0x270/0x270 [ 75.488784][ T5047] ? syscall_enter_from_user_mode+0x32/0x230 [ 75.494953][ T5047] ? syscall_enter_from_user_mode+0x8c/0x230 [ 75.500944][ T5047] do_syscall_64+0x41/0xc0 [ 75.505365][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.511349][ T5047] RIP: 0033:0x7f0d1daa6229 [ 75.515770][ T5047] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.535396][ T5047] RSP: 002b:00007ffc16842658 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.543849][ T5047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d1daa6229 [ 75.551826][ T5047] RDX: 000000000000275a RSI: 0000000020000200 RDI: 0000000000000004 [ 75.559799][ T5047] RBP: 0000000000000000 R08: 00007ffc16842690 R09: 00007ffc16842690 [ 75.567773][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1684267c [ 75.575835][ T5047] R13: 0000000000000003 R14: 431bde82d7b634db R15: 00007ffc168426b0 [ 75.583922][ T5047] [ 75.587231][ T5047] Kernel Offset: disabled [ 75.591558][ T5047] Rebooting in 86400 seconds..