Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program [ 46.546811] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.555824] REISERFS (device loop0): using ordered data mode [ 46.561727] reiserfs: using flush barriers [ 46.569656] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.585820] REISERFS (device loop0): checking transaction log (loop0) executing program [ 46.594458] REISERFS (device loop0): Using r5 hash to sort names [ 46.601267] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.672817] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.681670] REISERFS (device loop0): using ordered data mode [ 46.688310] reiserfs: using flush barriers [ 46.693467] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.709611] REISERFS (device loop0): checking transaction log (loop0) [ 46.717444] REISERFS (device loop0): Using r5 hash to sort names [ 46.724177] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 46.815716] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.824650] REISERFS (device loop0): using ordered data mode [ 46.830671] reiserfs: using flush barriers [ 46.837164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.853580] REISERFS (device loop0): checking transaction log (loop0) executing program [ 46.861060] REISERFS (device loop0): Using r5 hash to sort names [ 46.868133] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.952519] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.961209] REISERFS (device loop0): using ordered data mode [ 46.968153] reiserfs: using flush barriers [ 46.979489] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.995465] REISERFS (device loop0): checking transaction log (loop0) [ 47.002643] REISERFS (device loop0): Using r5 hash to sort names [ 47.008951] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.117426] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.126331] REISERFS (device loop0): using ordered data mode [ 47.133531] reiserfs: using flush barriers [ 47.138697] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.155721] REISERFS (device loop0): checking transaction log (loop0) [ 47.163522] REISERFS (device loop0): Using r5 hash to sort names [ 47.169818] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.271415] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.280765] REISERFS (device loop0): using ordered data mode [ 47.286698] reiserfs: using flush barriers [ 47.291988] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.307625] REISERFS (device loop0): checking transaction log (loop0) [ 47.314990] REISERFS (device loop0): Using r5 hash to sort names [ 47.321548] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.404799] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.413916] REISERFS (device loop0): using ordered data mode [ 47.421546] reiserfs: using flush barriers [ 47.429101] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.445445] REISERFS (device loop0): checking transaction log (loop0) [ 47.453064] REISERFS (device loop0): Using r5 hash to sort names [ 47.459370] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.565577] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.574391] REISERFS (device loop0): using ordered data mode [ 47.580293] reiserfs: using flush barriers [ 47.586838] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.602904] REISERFS (device loop0): checking transaction log (loop0) [ 47.610127] REISERFS (device loop0): Using r5 hash to sort names [ 47.617154] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.705122] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.714053] REISERFS (device loop0): using ordered data mode [ 47.722608] reiserfs: using flush barriers [ 47.727967] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.744011] REISERFS (device loop0): checking transaction log (loop0) executing program [ 47.751027] REISERFS (device loop0): Using r5 hash to sort names [ 47.757436] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.830695] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.839769] REISERFS (device loop0): using ordered data mode [ 47.847070] reiserfs: using flush barriers [ 47.852417] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.868045] REISERFS (device loop0): checking transaction log (loop0) [ 47.876038] REISERFS (device loop0): Using r5 hash to sort names [ 47.882932] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 47.986458] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.997431] REISERFS (device loop0): using ordered data mode [ 48.004459] reiserfs: using flush barriers [ 48.009507] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.025499] REISERFS (device loop0): checking transaction log (loop0) [ 48.033015] REISERFS (device loop0): Using r5 hash to sort names [ 48.039356] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 48.049419] ================================================================== [ 48.056917] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x47e/0x740 [ 48.064459] Read of size 14568 at addr ffff88809006a0d0 by task syz-executor387/8181 [ 48.072337] [ 48.073979] CPU: 1 PID: 8181 Comm: syz-executor387 Not tainted 4.19.211-syzkaller #0 [ 48.081857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.091204] Call Trace: [ 48.093782] dump_stack+0x1fc/0x2ef [ 48.097391] print_address_description.cold+0x54/0x219 [ 48.102648] kasan_report_error.cold+0x8a/0x1b9 [ 48.107299] ? reiserfs_release_objectid+0x47e/0x740 [ 48.112383] kasan_report+0x8f/0xa0 [ 48.115992] ? journal_mark_dirty+0x7b0/0xc80 [ 48.120478] ? reiserfs_release_objectid+0x47e/0x740 [ 48.125576] memmove+0x20/0x50 [ 48.128816] reiserfs_release_objectid+0x47e/0x740 [ 48.133736] remove_save_link+0x21c/0x3f0 [ 48.137863] ? add_save_link+0x620/0x620 [ 48.141999] reiserfs_evict_inode+0x489/0x540 [ 48.146479] ? evict+0x2b7/0x760 [ 48.149825] ? inode2sd_v1+0x930/0x930 [ 48.153698] ? inode2sd_v1+0x930/0x930 [ 48.157565] evict+0x2ed/0x760 [ 48.160737] iput+0x4f1/0x860 [ 48.163827] dentry_unlink_inode+0x265/0x320 [ 48.168214] __dentry_kill+0x3c0/0x640 [ 48.172087] dentry_kill+0xc4/0x510 [ 48.175693] ? dput+0x31/0x640 [ 48.178866] dput+0x55f/0x640 [ 48.181957] do_renameat2+0xb69/0xc70 [ 48.185745] ? do_mknodat.part.0+0x480/0x480 [ 48.190306] ? mntput+0x67/0x90 [ 48.193583] ? do_mkdirat+0x1d2/0x2d0 [ 48.197364] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 48.202864] ? trace_hardirqs_off_caller+0x6e/0x210 [ 48.207886] __x64_sys_rename+0x5d/0x80 [ 48.211849] do_syscall_64+0xf9/0x620 [ 48.215644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.220813] RIP: 0033:0x7f9ed81e0989 [ 48.224506] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.243385] RSP: 002b:00007fffdaa63988 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 48.251074] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f9ed81e0989 [ 48.258327] RDX: 00007f9ed81e0989 RSI: 0000000020000200 RDI: 0000000020000140 [ 48.265750] RBP: 0000000000000000 R08: 00007fffdaa639b0 R09: 00007fffdaa639b0 [ 48.272996] R10: 00007fffdaa639b0 R11: 0000000000000246 R12: 00007fffdaa639ac [ 48.280244] R13: 00007fffdaa639e0 R14: 00007fffdaa639c0 R15: 000000000000000a [ 48.287500] [ 48.289111] The buggy address belongs to the page: [ 48.294040] page:ffffea0002401a80 count:2 mapcount:0 mapping:ffff8880addcc560 index:0x10 [ 48.302260] flags: 0xfff0000001106c(referenced|uptodate|lru|active|private|mappedtodisk) [ 48.310470] raw: 00fff0000001106c ffffea0002290408 ffffea0002d3c848 ffff8880addcc560 [ 48.318343] raw: 0000000000000010 ffff88808ac4c498 00000002ffffffff ffff8880b59f68c0 [ 48.326195] page dumped because: kasan: bad access detected [ 48.331879] page->mem_cgroup:ffff8880b59f68c0 [ 48.336346] [ 48.337951] Memory state around the buggy address: [ 48.342857] ffff88809006af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.350192] ffff88809006af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.357526] >ffff88809006b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.364857] ^ [ 48.368197] ffff88809006b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.375534] ffff88809006b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.382871] ================================================================== [ 48.390204] Disabling lock debugging due to kernel taint [ 48.399014] Kernel panic - not syncing: panic_on_warn set ... [ 48.399014] [ 48.406403] CPU: 1 PID: 8181 Comm: syz-executor387 Tainted: G B 4.19.211-syzkaller #0 [ 48.415696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.425114] Call Trace: [ 48.427683] dump_stack+0x1fc/0x2ef [ 48.431374] panic+0x26a/0x50e [ 48.434552] ? __warn_printk+0xf3/0xf3 [ 48.438418] ? preempt_schedule_common+0x45/0xc0 [ 48.443153] ? ___preempt_schedule+0x16/0x18 [ 48.447539] ? trace_hardirqs_on+0x55/0x210 [ 48.451840] kasan_end_report+0x43/0x49 [ 48.455799] kasan_report_error.cold+0xa7/0x1b9 [ 48.460449] ? reiserfs_release_objectid+0x47e/0x740 [ 48.465528] kasan_report+0x8f/0xa0 [ 48.469135] ? journal_mark_dirty+0x7b0/0xc80 [ 48.473610] ? reiserfs_release_objectid+0x47e/0x740 [ 48.478691] memmove+0x20/0x50 [ 48.481865] reiserfs_release_objectid+0x47e/0x740 [ 48.486779] remove_save_link+0x21c/0x3f0 [ 48.490946] ? add_save_link+0x620/0x620 [ 48.494997] reiserfs_evict_inode+0x489/0x540 [ 48.499534] ? evict+0x2b7/0x760 [ 48.502881] ? inode2sd_v1+0x930/0x930 [ 48.506753] ? inode2sd_v1+0x930/0x930 [ 48.510619] evict+0x2ed/0x760 [ 48.513800] iput+0x4f1/0x860 [ 48.516916] dentry_unlink_inode+0x265/0x320 [ 48.521316] __dentry_kill+0x3c0/0x640 [ 48.525208] dentry_kill+0xc4/0x510 [ 48.528841] ? dput+0x31/0x640 [ 48.532018] dput+0x55f/0x640 [ 48.535106] do_renameat2+0xb69/0xc70 [ 48.538897] ? do_mknodat.part.0+0x480/0x480 [ 48.543285] ? mntput+0x67/0x90 [ 48.546543] ? do_mkdirat+0x1d2/0x2d0 [ 48.550323] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 48.555675] ? trace_hardirqs_off_caller+0x6e/0x210 [ 48.560673] __x64_sys_rename+0x5d/0x80 [ 48.564635] do_syscall_64+0xf9/0x620 [ 48.568417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.573585] RIP: 0033:0x7f9ed81e0989 [ 48.577278] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.596158] RSP: 002b:00007fffdaa63988 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 48.603844] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f9ed81e0989 [ 48.611094] RDX: 00007f9ed81e0989 RSI: 0000000020000200 RDI: 0000000020000140 [ 48.618339] RBP: 0000000000000000 R08: 00007fffdaa639b0 R09: 00007fffdaa639b0 [ 48.625584] R10: 00007fffdaa639b0 R11: 0000000000000246 R12: 00007fffdaa639ac [ 48.632830] R13: 00007fffdaa639e0 R14: 00007fffdaa639c0 R15: 000000000000000a [ 48.640249] Kernel Offset: disabled [ 48.643856] Rebooting in 86400 seconds..