./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4094498677 <...> Warning: Permanently added '10.128.0.104' (ECDSA) to the list of known hosts. execve("./syz-executor4094498677", ["./syz-executor4094498677"], 0x7fff5554a1f0 /* 10 vars */) = 0 brk(NULL) = 0x5555563fd000 brk(0x5555563fdc40) = 0x5555563fdc40 arch_prctl(ARCH_SET_FS, 0x5555563fd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4094498677", 4096) = 28 brk(0x55555641ec40) = 0x55555641ec40 brk(0x55555641f000) = 0x55555641f000 mprotect(0x7fcced406000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5075 mkdir("./syzkaller.pwnhqY", 0700) = 0 chmod("./syzkaller.pwnhqY", 0777) = 0 chdir("./syzkaller.pwnhqY") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563fd5d0) = 5076 ./strace-static-x86_64: Process 5076 attached [pid 5076] chdir("./0") = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] memfd_create("syzkaller", 0) = 3 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcce4f48000 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5076] munmap(0x7fcce4f48000, 4194304) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5076] close(3) = 0 [pid 5076] mkdir("./file0", 0777) = 0 syzkaller login: [ 50.395968][ T5076] loop0: detected capacity change from 0 to 8192 [ 50.409471][ T5076] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.422572][ T5076] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.431949][ T5076] REISERFS (device loop0): using ordered data mode [ 50.438468][ T5076] reiserfs: using flush barriers [ 50.446205][ T5076] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.462858][ T5076] REISERFS (device loop0): checking transaction log (loop0) [pid 5076] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] chdir("./file0") = 0 [pid 5076] ioctl(4, LOOP_CLR_FD) = 0 [pid 5076] close(4) = 0 [pid 5076] creat("./file0", 000) = 4 [pid 5076] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5076] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5076] dup2(5, 4) = 4 [pid 5076] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5076] ftruncate(6, 33587195) = 0 [pid 5076] exit_group(0) = ? [pid 5076] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [ 50.513043][ T5076] REISERFS (device loop0): Using r5 hash to sort names [ 50.521178][ T5076] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555563fe620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556406660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556406660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x5555563fe620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563fd5d0) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5079] chdir("./1") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcce4f48000 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5079] munmap(0x7fcce4f48000, 4194304) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] mkdir("./file0", 0777) = 0 [ 50.687168][ T5079] loop0: detected capacity change from 0 to 8192 [ 50.708506][ T5079] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.721593][ T5079] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.730783][ T5079] REISERFS (device loop0): using ordered data mode [ 50.737388][ T5079] reiserfs: using flush barriers [ 50.743590][ T5079] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.760061][ T5079] REISERFS (device loop0): checking transaction log (loop0) [pid 5079] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file0") = 0 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4) = 0 [pid 5079] creat("./file0", 000) = 4 [pid 5079] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5079] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5079] dup2(5, 4) = 4 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5079] ftruncate(6, 33587195) = 0 [pid 5079] exit_group(0) = ? [pid 5079] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555563fe620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 50.802022][ T5079] REISERFS (device loop0): Using r5 hash to sort names [ 50.809084][ T5079] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556406660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556406660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x5555563fe620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563fd5d0) = 5081 ./strace-static-x86_64: Process 5081 attached [pid 5081] chdir("./2") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] memfd_create("syzkaller", 0) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcce4f48000 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5081] munmap(0x7fcce4f48000, 4194304) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./file0", 0777) = 0 [ 50.963676][ T5081] loop0: detected capacity change from 0 to 8192 [ 50.973966][ T5081] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 50.987052][ T5081] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 50.996524][ T5081] REISERFS (device loop0): using ordered data mode [ 51.003252][ T5081] reiserfs: using flush barriers [ 51.009150][ T5081] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.025860][ T5081] REISERFS (device loop0): checking transaction log (loop0) [pid 5081] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file0") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(4) = 0 [pid 5081] creat("./file0", 000) = 4 [pid 5081] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5081] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5081] dup2(5, 4) = 4 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5081] ftruncate(6, 33587195) = 0 [pid 5081] exit_group(0) = ? [pid 5081] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555563fe620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 51.073056][ T5081] REISERFS (device loop0): Using r5 hash to sort names [ 51.080394][ T5081] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556406660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556406660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x5555563fe620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached , child_tidptr=0x5555563fd5d0) = 5083 [pid 5083] chdir("./3") = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcce4f48000 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5083] munmap(0x7fcce4f48000, 4194304) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [ 51.232237][ T5083] loop0: detected capacity change from 0 to 8192 [ 51.242744][ T5083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.255846][ T5083] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.266102][ T5083] REISERFS (device loop0): using ordered data mode [ 51.272672][ T5083] reiserfs: using flush barriers [ 51.278480][ T5083] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.294983][ T5083] REISERFS (device loop0): checking transaction log (loop0) [pid 5083] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file0") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5083] close(4) = 0 [pid 5083] creat("./file0", 000) = 4 [pid 5083] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5083] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5083] dup2(5, 4) = 4 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [ 51.342203][ T5083] REISERFS (device loop0): Using r5 hash to sort names [ 51.349567][ T5083] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 51.386115][ T5083] ================================================================== [ 51.394212][ T5083] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x739/0xca0 [ 51.401947][ T5083] Read of size 104 at addr ffff888072d5dfd8 by task syz-executor409/5083 [ 51.410373][ T5083] [ 51.412695][ T5083] CPU: 1 PID: 5083 Comm: syz-executor409 Not tainted 6.1.0-syzkaller-14321-g0a924817d2ed #0 [ 51.422749][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.432801][ T5083] Call Trace: [ 51.436075][ T5083] [ 51.439013][ T5083] dump_stack_lvl+0x1b1/0x290 [ 51.443700][ T5083] ? nf_tcp_handle_invalid+0x630/0x630 [ 51.449172][ T5083] ? __wake_up_klogd+0xcd/0x100 [ 51.454040][ T5083] ? panic+0x710/0x710 [ 51.458096][ T5083] ? _printk+0xc0/0x100 [ 51.462268][ T5083] print_address_description+0x74/0x340 [ 51.467806][ T5083] print_report+0x107/0x1f0 [ 51.472316][ T5083] ? _raw_spin_lock+0x40/0x40 [ 51.477013][ T5083] ? validate_chain+0x177/0x6ae0 [ 51.481965][ T5083] ? __virt_addr_valid+0x21b/0x2d0 [ 51.487077][ T5083] ? __phys_addr+0xb5/0x160 [ 51.491592][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 51.496977][ T5083] kasan_report+0xcd/0x100 [ 51.501421][ T5083] ? reacquire_held_locks+0x650/0x650 [ 51.506801][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 51.512239][ T5083] kasan_check_range+0x2a7/0x2e0 [ 51.517205][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 51.522572][ T5083] memcpy+0x25/0x60 [ 51.526389][ T5083] leaf_paste_in_buffer+0x739/0xca0 [ 51.531624][ T5083] leaf_copy_dir_entries+0x6e2/0xbf0 [ 51.537007][ T5083] ? reacquire_held_locks+0x650/0x650 [ 51.542376][ T5083] ? leaf_item_bottle+0x19a0/0x19a0 [ 51.547576][ T5083] ? validate_chain+0x177/0x6ae0 [ 51.552521][ T5083] ? validate_chain+0x177/0x6ae0 [ 51.557447][ T5083] leaf_copy_boundary_item+0xb7c/0x20f0 [ 51.562989][ T5083] leaf_move_items+0xc74/0x1330 [ 51.567838][ T5083] ? reiserfs_convert_objectid_map_v1+0x6d0/0x6d0 [ 51.574256][ T5083] ? read_lock_is_recursive+0x10/0x10 [ 51.579715][ T5083] leaf_shift_left+0xb7/0x420 [ 51.584556][ T5083] balance_leaf+0x1579/0x123a0 [ 51.589321][ T5083] ? __lock_acquire+0x1292/0x1f60 [ 51.594345][ T5083] ? do_balance+0x8d0/0x8d0 [ 51.598847][ T5083] ? rcu_read_lock_sched_held+0x87/0x110 [ 51.604495][ T5083] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 51.610499][ T5083] ? trace_raw_output_contention_end+0xd0/0xd0 [ 51.616640][ T5083] ? trace_contention_end+0x72/0x1d0 [ 51.621910][ T5083] ? __mutex_lock_common+0x45f/0x26e0 [ 51.627269][ T5083] ? write_boundary_block+0xb0/0xb0 [ 51.632476][ T5083] ? __mutex_unlock_slowpath+0x222/0x770 [ 51.638095][ T5083] ? __might_sleep+0xc0/0xc0 [ 51.642676][ T5083] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 51.648389][ T5083] ? mutex_lock_io_nested+0x60/0x60 [ 51.653583][ T5083] ? get_empty_nodes+0x5a3/0xd00 [ 51.658538][ T5083] ? indirect_part_size+0x8/0x10 [ 51.663487][ T5083] ? __wake_up+0x1f0/0x1f0 [ 51.667924][ T5083] ? get_neighbors+0x1020/0x1020 [ 51.672960][ T5083] ? mutex_lock_nested+0x17/0x20 [ 51.677889][ T5083] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 51.683603][ T5083] ? reiserfs_prepare_for_journal+0x239/0x250 [ 51.689662][ T5083] ? fix_nodes+0x73e4/0x8560 [ 51.694266][ T5083] do_balance+0x2d6/0x8d0 [ 51.698597][ T5083] ? get_right_neighbor_position+0x200/0x200 [ 51.704584][ T5083] ? reiserfs_insert_item+0x67b/0xcb0 [ 51.709969][ T5083] reiserfs_insert_item+0xb54/0xcb0 [ 51.715177][ T5083] ? reiserfs_paste_into_item+0x880/0x880 [ 51.720939][ T5083] ? show_alloc_options+0xbd0/0xbd0 [ 51.726178][ T5083] ? journal_begin+0x1f1/0x350 [ 51.731028][ T5083] ? copy_item_head+0x1e/0x30 [ 51.735786][ T5083] ? reiserfs_get_block+0x1fda/0x5180 [ 51.741149][ T5083] reiserfs_get_block+0x20a2/0x5180 [ 51.746352][ T5083] ? make_le_item_head+0x5b0/0x5b0 [ 51.751550][ T5083] ? register_lock_class+0xc2/0x930 [ 51.756760][ T5083] ? create_page_buffers+0x1c8/0x4b0 [ 51.762051][ T5083] ? __block_write_begin_int+0x1e0/0x1a80 [ 51.767761][ T5083] ? reiserfs_write_begin+0x247/0x510 [ 51.773122][ T5083] ? generic_cont_expand_simple+0x151/0x250 [ 51.779016][ T5083] ? reiserfs_setattr+0x642/0x1200 [ 51.784143][ T5083] ? do_truncate+0x200/0x2f0 [ 51.788820][ T5083] ? do_sys_ftruncate+0x2b0/0x350 [ 51.793843][ T5083] ? is_dynamic_key+0x1f0/0x1f0 [ 51.798770][ T5083] ? mark_lock+0x9a/0x350 [ 51.803183][ T5083] ? __lock_acquire+0x1292/0x1f60 [ 51.808220][ T5083] ? rcu_read_lock_sched_held+0x22/0x110 [ 51.813952][ T5083] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 51.819941][ T5083] ? __lock_acquire+0x1f60/0x1f60 [ 51.825047][ T5083] ? alloc_page_buffers+0x326/0x460 [ 51.830251][ T5083] ? do_raw_spin_unlock+0x134/0x8a0 [ 51.835447][ T5083] ? create_page_buffers+0x244/0x4b0 [ 51.840723][ T5083] __block_write_begin_int+0x54c/0x1a80 [ 51.846260][ T5083] ? xas_load+0x127/0x150 [ 51.850580][ T5083] ? make_le_item_head+0x5b0/0x5b0 [ 51.855683][ T5083] ? page_zero_new_buffers+0x940/0x940 [ 51.861163][ T5083] ? __block_write_begin+0x51/0x150 [ 51.866365][ T5083] ? reiserfs_write_begin+0x180/0x510 [ 51.871728][ T5083] reiserfs_write_begin+0x247/0x510 [ 51.876918][ T5083] generic_cont_expand_simple+0x151/0x250 [ 51.882632][ T5083] ? submit_bh+0x20/0x20 [ 51.886964][ T5083] ? mutex_lock_nested+0x17/0x20 [ 51.891901][ T5083] reiserfs_setattr+0x642/0x1200 [ 51.897384][ T5083] ? reiserfs_commit_write+0x580/0x580 [ 51.902861][ T5083] ? ktime_get_coarse_real_ts64+0x12c/0x140 [ 51.908763][ T5083] ? current_time+0x1ea/0x300 [ 51.913454][ T5083] ? atime_needs_update+0x780/0x780 [ 51.918640][ T5083] ? security_inode_setattr+0x109/0x150 [ 51.924176][ T5083] ? reiserfs_commit_write+0x580/0x580 [ 51.929630][ T5083] notify_change+0xe50/0x1100 [ 51.934300][ T5083] do_truncate+0x200/0x2f0 [ 51.938705][ T5083] ? put_page_bootmem+0x2d0/0x2d0 [ 51.943719][ T5083] do_sys_ftruncate+0x2b0/0x350 [ 51.948567][ T5083] do_syscall_64+0x3d/0xb0 [ 51.953165][ T5083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.959057][ T5083] RIP: 0033:0x7fcced3959e9 [ 51.963458][ T5083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.983055][ T5083] RSP: 002b:00007ffe158631c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 51.991464][ T5083] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fcced3959e9 [ 51.999448][ T5083] RDX: 00007fcced3959e9 RSI: 0000000002007ffb RDI: 0000000000000006 [ 52.007408][ T5083] RBP: 0000000000000000 R08: 00007ffe158631f0 R09: 00007ffe158631f0 [ 52.015378][ T5083] R10: 00007ffe158631f0 R11: 0000000000000246 R12: 00007ffe158631ec [ 52.023357][ T5083] R13: 00007ffe15863220 R14: 00007ffe15863200 R15: 0000000000000003 [ 52.031349][ T5083] [ 52.034362][ T5083] [ 52.036670][ T5083] The buggy address belongs to the physical page: [ 52.043068][ T5083] page:ffffea0001cb5740 refcount:2 mapcount:0 mapping:ffff88801e4949f8 index:0x213 pfn:0x72d5d [ 52.053402][ T5083] memcg:ffff888140148000 [ 52.057626][ T5083] aops:def_blk_aops ino:700000 [ 52.062383][ T5083] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 52.072122][ T5083] raw: 00fff00000002032 ffffea0001cb5708 ffffea0000723c88 ffff88801e4949f8 [ 52.080703][ T5083] raw: 0000000000000213 ffff888073cfbd98 00000002ffffffff ffff888140148000 [ 52.089267][ T5083] page dumped because: kasan: bad access detected [ 52.095677][ T5083] page_owner tracks the page as allocated [ 52.101392][ T5083] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5083, tgid 5083 (syz-executor409), ts 51341998489, free_ts 13209412147 [ 52.122065][ T5083] get_page_from_freelist+0x742/0x7c0 [ 52.127461][ T5083] __alloc_pages+0x259/0x560 [ 52.132053][ T5083] folio_alloc+0x1a/0x50 [ 52.136284][ T5083] filemap_alloc_folio+0xca/0x2c0 [ 52.141306][ T5083] __filemap_get_folio+0x892/0x1250 [ 52.146551][ T5083] pagecache_get_page+0x28/0x250 [ 52.151480][ T5083] grow_dev_page+0xba/0x920 [ 52.155969][ T5083] __getblk_gfp+0x16c/0x290 [ 52.160488][ T5083] search_by_key+0x406/0x49c0 [ 52.165157][ T5083] reiserfs_read_locked_inode+0x223/0x2990 [ 52.170967][ T5083] reiserfs_fill_super+0x128a/0x24a0 [ 52.176244][ T5083] mount_bdev+0x26c/0x3a0 [ 52.180592][ T5083] legacy_get_tree+0xea/0x180 [ 52.185258][ T5083] vfs_get_tree+0x88/0x270 [ 52.189657][ T5083] do_new_mount+0x289/0xad0 [ 52.194152][ T5083] __se_sys_mount+0x2d3/0x3c0 [ 52.198829][ T5083] page last free stack trace: [ 52.203579][ T5083] free_pcp_prepare+0x751/0x780 [ 52.208421][ T5083] free_unref_page+0x19/0x4c0 [ 52.213176][ T5083] free_contig_range+0xa3/0x160 [ 52.218117][ T5083] destroy_args+0xfe/0x940 [ 52.222542][ T5083] debug_vm_pgtable+0x43d/0x4a0 [ 52.227384][ T5083] do_one_initcall+0x1d1/0x410 [ 52.232162][ T5083] do_initcall_level+0x168/0x220 [ 52.237093][ T5083] do_initcalls+0x43/0x90 [ 52.241414][ T5083] kernel_init_freeable+0x428/0x5e0 [ 52.246724][ T5083] kernel_init+0x19/0x2b0 [ 52.251041][ T5083] ret_from_fork+0x1f/0x30 [ 52.255456][ T5083] [ 52.257861][ T5083] Memory state around the buggy address: [ 52.263472][ T5083] ffff888072d5df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.271520][ T5083] ffff888072d5df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.279567][ T5083] >ffff888072d5e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.287616][ T5083] ^ [ 52.291686][ T5083] ffff888072d5e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.299847][ T5083] ffff888072d5e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.307903][ T5083] ================================================================== [ 52.316345][ T5083] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.323645][ T5083] CPU: 0 PID: 5083 Comm: syz-executor409 Not tainted 6.1.0-syzkaller-14321-g0a924817d2ed #0 [ 52.333698][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.343743][ T5083] Call Trace: [ 52.347014][ T5083] [ 52.349938][ T5083] dump_stack_lvl+0x1b1/0x290 [ 52.354972][ T5083] ? nf_tcp_handle_invalid+0x630/0x630 [ 52.360428][ T5083] ? panic+0x710/0x710 [ 52.364487][ T5083] ? lock_release+0x81/0x820 [ 52.369073][ T5083] ? vscnprintf+0x59/0x80 [ 52.373412][ T5083] panic+0x2d6/0x710 [ 52.377297][ T5083] ? check_panic_on_warn+0x1d/0xa0 [ 52.382408][ T5083] ? memcpy_page_flushcache+0x100/0x100 [ 52.387946][ T5083] ? _raw_spin_unlock_irqrestore+0x110/0x120 [ 52.393924][ T5083] ? _raw_spin_unlock+0x40/0x40 [ 52.398767][ T5083] ? print_report+0x1b4/0x1f0 [ 52.403447][ T5083] check_panic_on_warn+0x80/0xa0 [ 52.408381][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 52.413753][ T5083] end_report+0x47/0x90 [ 52.417906][ T5083] kasan_report+0xda/0x100 [ 52.422323][ T5083] ? reacquire_held_locks+0x650/0x650 [ 52.427692][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 52.433074][ T5083] kasan_check_range+0x2a7/0x2e0 [ 52.438028][ T5083] ? leaf_paste_in_buffer+0x739/0xca0 [ 52.443497][ T5083] memcpy+0x25/0x60 [ 52.447306][ T5083] leaf_paste_in_buffer+0x739/0xca0 [ 52.452522][ T5083] leaf_copy_dir_entries+0x6e2/0xbf0 [ 52.457917][ T5083] ? reacquire_held_locks+0x650/0x650 [ 52.463293][ T5083] ? leaf_item_bottle+0x19a0/0x19a0 [ 52.468484][ T5083] ? validate_chain+0x177/0x6ae0 [ 52.473415][ T5083] ? validate_chain+0x177/0x6ae0 [ 52.478345][ T5083] leaf_copy_boundary_item+0xb7c/0x20f0 [ 52.483894][ T5083] leaf_move_items+0xc74/0x1330 [ 52.488743][ T5083] ? reiserfs_convert_objectid_map_v1+0x6d0/0x6d0 [ 52.495174][ T5083] ? read_lock_is_recursive+0x10/0x10 [ 52.500555][ T5083] leaf_shift_left+0xb7/0x420 [ 52.505242][ T5083] balance_leaf+0x1579/0x123a0 [ 52.510010][ T5083] ? __lock_acquire+0x1292/0x1f60 [ 52.515034][ T5083] ? do_balance+0x8d0/0x8d0 [ 52.519539][ T5083] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.525249][ T5083] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.531222][ T5083] ? trace_raw_output_contention_end+0xd0/0xd0 [ 52.537374][ T5083] ? trace_contention_end+0x72/0x1d0 [ 52.542654][ T5083] ? __mutex_lock_common+0x45f/0x26e0 [ 52.548017][ T5083] ? write_boundary_block+0xb0/0xb0 [ 52.553206][ T5083] ? __mutex_unlock_slowpath+0x222/0x770 [ 52.558827][ T5083] ? __might_sleep+0xc0/0xc0 [ 52.563406][ T5083] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 52.569119][ T5083] ? mutex_lock_io_nested+0x60/0x60 [ 52.574304][ T5083] ? get_empty_nodes+0x5a3/0xd00 [ 52.579234][ T5083] ? indirect_part_size+0x8/0x10 [ 52.584163][ T5083] ? __wake_up+0x1f0/0x1f0 [ 52.588573][ T5083] ? get_neighbors+0x1020/0x1020 [ 52.593500][ T5083] ? mutex_lock_nested+0x17/0x20 [ 52.598429][ T5083] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 52.604143][ T5083] ? reiserfs_prepare_for_journal+0x239/0x250 [ 52.610200][ T5083] ? fix_nodes+0x73e4/0x8560 [ 52.614788][ T5083] do_balance+0x2d6/0x8d0 [ 52.619111][ T5083] ? get_right_neighbor_position+0x200/0x200 [ 52.625083][ T5083] ? reiserfs_insert_item+0x67b/0xcb0 [ 52.630447][ T5083] reiserfs_insert_item+0xb54/0xcb0 [ 52.635635][ T5083] ? reiserfs_paste_into_item+0x880/0x880 [ 52.641379][ T5083] ? show_alloc_options+0xbd0/0xbd0 [ 52.646567][ T5083] ? journal_begin+0x1f1/0x350 [ 52.651320][ T5083] ? copy_item_head+0x1e/0x30 [ 52.655992][ T5083] ? reiserfs_get_block+0x1fda/0x5180 [ 52.661355][ T5083] reiserfs_get_block+0x20a2/0x5180 [ 52.666565][ T5083] ? make_le_item_head+0x5b0/0x5b0 [ 52.671668][ T5083] ? register_lock_class+0xc2/0x930 [ 52.676858][ T5083] ? create_page_buffers+0x1c8/0x4b0 [ 52.682134][ T5083] ? __block_write_begin_int+0x1e0/0x1a80 [ 52.687862][ T5083] ? reiserfs_write_begin+0x247/0x510 [ 52.693232][ T5083] ? generic_cont_expand_simple+0x151/0x250 [ 52.699128][ T5083] ? reiserfs_setattr+0x642/0x1200 [ 52.704242][ T5083] ? do_truncate+0x200/0x2f0 [ 52.708828][ T5083] ? do_sys_ftruncate+0x2b0/0x350 [ 52.713847][ T5083] ? is_dynamic_key+0x1f0/0x1f0 [ 52.718691][ T5083] ? mark_lock+0x9a/0x350 [ 52.723014][ T5083] ? __lock_acquire+0x1292/0x1f60 [ 52.728068][ T5083] ? rcu_read_lock_sched_held+0x22/0x110 [ 52.733804][ T5083] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.739811][ T5083] ? __lock_acquire+0x1f60/0x1f60 [ 52.744841][ T5083] ? alloc_page_buffers+0x326/0x460 [ 52.750066][ T5083] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.755300][ T5083] ? create_page_buffers+0x244/0x4b0 [ 52.760592][ T5083] __block_write_begin_int+0x54c/0x1a80 [ 52.766147][ T5083] ? xas_load+0x127/0x150 [ 52.770485][ T5083] ? make_le_item_head+0x5b0/0x5b0 [ 52.775692][ T5083] ? page_zero_new_buffers+0x940/0x940 [ 52.781161][ T5083] ? __block_write_begin+0x51/0x150 [ 52.786365][ T5083] ? reiserfs_write_begin+0x180/0x510 [ 52.791746][ T5083] reiserfs_write_begin+0x247/0x510 [ 52.796948][ T5083] generic_cont_expand_simple+0x151/0x250 [ 52.802679][ T5083] ? submit_bh+0x20/0x20 [ 52.806922][ T5083] ? mutex_lock_nested+0x17/0x20 [ 52.811853][ T5083] reiserfs_setattr+0x642/0x1200 [ 52.816787][ T5083] ? reiserfs_commit_write+0x580/0x580 [ 52.822242][ T5083] ? ktime_get_coarse_real_ts64+0x12c/0x140 [ 52.828131][ T5083] ? current_time+0x1ea/0x300 [ 52.832800][ T5083] ? atime_needs_update+0x780/0x780 [ 52.837990][ T5083] ? security_inode_setattr+0x109/0x150 [ 52.843532][ T5083] ? reiserfs_commit_write+0x580/0x580 [ 52.849073][ T5083] notify_change+0xe50/0x1100 [ 52.853766][ T5083] do_truncate+0x200/0x2f0 [ 52.858180][ T5083] ? put_page_bootmem+0x2d0/0x2d0 [ 52.863211][ T5083] do_sys_ftruncate+0x2b0/0x350 [ 52.868067][ T5083] do_syscall_64+0x3d/0xb0 [ 52.872578][ T5083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.878479][ T5083] RIP: 0033:0x7fcced3959e9 [ 52.882889][ T5083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.902490][ T5083] RSP: 002b:00007ffe158631c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 52.910926][ T5083] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fcced3959e9 [ 52.918909][ T5083] RDX: 00007fcced3959e9 RSI: 0000000002007ffb RDI: 0000000000000006 [ 52.926874][ T5083] RBP: 0000000000000000 R08: 00007ffe158631f0 R09: 00007ffe158631f0 [ 52.934841][ T5083] R10: 00007ffe158631f0 R11: 0000000000000246 R12: 00007ffe158631ec [ 52.942804][ T5083] R13: 00007ffe15863220 R14: 00007ffe15863200 R15: 0000000000000003 [ 52.950862][ T5083] [ 52.954078][ T5083] Kernel Offset: disabled [ 52.958422][ T5083] Rebooting in 86400 seconds..