./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1453991469 <...> Warning: Permanently added '10.128.1.158' (ECDSA) to the list of known hosts. execve("./syz-executor1453991469", ["./syz-executor1453991469"], 0x7ffdd6a0c610 /* 10 vars */) = 0 brk(NULL) = 0x55555720d000 brk(0x55555720dc40) = 0x55555720dc40 arch_prctl(ARCH_SET_FS, 0x55555720d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1453991469", 4096) = 28 brk(0x55555722ec40) = 0x55555722ec40 brk(0x55555722f000) = 0x55555722f000 mprotect(0x7fd880d27000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 4997 mkdir("./syzkaller.oq30s5", 0700) = 0 chmod("./syzkaller.oq30s5", 0777) = 0 chdir("./syzkaller.oq30s5") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555720d5d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4998] chdir("./0") = 0 [pid 4998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] setpgid(0, 0) = 0 [pid 4998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1000", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] memfd_create("syzkaller", 0) = 3 [pid 4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd87886a000 syzkaller login: [ 64.350859][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor145' [pid 4998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 4998] munmap(0x7fd87886a000, 4194304) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4998] close(3) = 0 [pid 4998] mkdir("./file2", 0777) = 0 [ 64.417692][ T4998] loop0: detected capacity change from 0 to 8192 [ 64.431644][ T4998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.445170][ T4998] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 64.454934][ T4998] REISERFS (device loop0): using ordered data mode [ 64.461615][ T4998] reiserfs: using flush barriers [ 64.468467][ T4998] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.485533][ T4998] REISERFS (device loop0): checking transaction log (loop0) [ 64.495755][ T4998] REISERFS (device loop0): Using tea hash to sort names [ 64.504131][ T4998] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [pid 4998] mount("/dev/loop0", "./file2", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_SILENT|MS_POSIXACL, "") = 0 [pid 4998] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] chdir("./file2") = 0 [pid 4998] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] close(4) = 0 [pid 4998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|FASYNC, 000) = 4 [pid 4998] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4998] write(5, "\x2e\x2f\x66\x69\x6c\x65\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x66\x69\x6c\x65\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 4998] ftruncate(5, 3676) = 0 [pid 4998] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [ 64.517020][ T4998] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 4998] write(6, "\x74\x61\x72\x67\x65\x74\x20\x64\x65\x66\x61\x75\x6c\x74\x00", 15) = 15 [pid 4998] exit_group(0) = ? [pid 4998] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4998, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555720e620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557216660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557216660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file2") = 0 getdents64(3, 0x55555720e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555720d5d0) = 5001 ./strace-static-x86_64: Process 5001 attached [pid 5001] chdir("./1") = 0 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1000", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] memfd_create("syzkaller", 0) = 3 [pid 5001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd87886a000 [pid 5001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5001] munmap(0x7fd87886a000, 4194304) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5001] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5001] close(3) = 0 [pid 5001] mkdir("./file2", 0777) = 0 [ 64.746516][ T5001] loop0: detected capacity change from 0 to 8192 [ 64.757996][ T5001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.771136][ T5001] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 64.780467][ T5001] REISERFS (device loop0): using ordered data mode [ 64.787034][ T5001] reiserfs: using flush barriers [pid 5001] mount("/dev/loop0", "./file2", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_SILENT|MS_POSIXACL, "") = 0 [ 64.793057][ T5001] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.809574][ T5001] REISERFS (device loop0): checking transaction log (loop0) [ 64.817758][ T5001] REISERFS (device loop0): Using tea hash to sort names [ 64.825319][ T5001] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.838075][ T5001] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5001] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] chdir("./file2") = 0 [pid 5001] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] close(4) = 0 [pid 5001] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|FASYNC, 000) = 4 [pid 5001] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5001] write(5, "\x2e\x2f\x66\x69\x6c\x65\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x66\x69\x6c\x65\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5001] ftruncate(5, 3676) = 0 [pid 5001] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5001] write(6, "\x74\x61\x72\x67\x65\x74\x20\x64\x65\x66\x61\x75\x6c\x74\x00", 15) = 15 [pid 5001] exit_group(0) = ? [pid 5001] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555720e620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557216660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557216660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file2") = 0 getdents64(3, 0x55555720e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555720d5d0) = 5003 ./strace-static-x86_64: Process 5003 attached [pid 5003] chdir("./2") = 0 [pid 5003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] setpgid(0, 0) = 0 [pid 5003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5003] write(3, "1000", 4) = 4 [pid 5003] close(3) = 0 [pid 5003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] memfd_create("syzkaller", 0) = 3 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd87886a000 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5003] munmap(0x7fd87886a000, 4194304) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5003] close(3) = 0 [pid 5003] mkdir("./file2", 0777) = 0 [ 65.061463][ T5003] loop0: detected capacity change from 0 to 8192 [ 65.072595][ T5003] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.085999][ T5003] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 65.095614][ T5003] REISERFS (device loop0): using ordered data mode [ 65.102159][ T5003] reiserfs: using flush barriers [ 65.108865][ T5003] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.125518][ T5003] REISERFS (device loop0): checking transaction log (loop0) [ 65.134038][ T5003] REISERFS (device loop0): Using tea hash to sort names [ 65.141558][ T5003] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [pid 5003] mount("/dev/loop0", "./file2", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5003] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] chdir("./file2") = 0 [pid 5003] ioctl(4, LOOP_CLR_FD) = 0 [pid 5003] close(4) = 0 [pid 5003] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|FASYNC, 000) = 4 [pid 5003] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [ 65.154925][ T5003] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5003] write(5, "\x2e\x2f\x66\x69\x6c\x65\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x66\x69\x6c\x65\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5003] ftruncate(5, 3676) = 0 [pid 5003] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5003] write(6, "\x74\x61\x72\x67\x65\x74\x20\x64\x65\x66\x61\x75\x6c\x74\x00", 15) = 15 [pid 5003] exit_group(0) = ? [pid 5003] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5003, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555720e620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557216660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557216660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file2") = 0 getdents64(3, 0x55555720e620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555720d5d0) = 5005 ./strace-static-x86_64: Process 5005 attached [pid 5005] chdir("./3") = 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5005] setpgid(0, 0) = 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1000", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5005] memfd_create("syzkaller", 0) = 3 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd87886a000 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5005] munmap(0x7fd87886a000, 4194304) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5005] close(3) = 0 [pid 5005] mkdir("./file2", 0777) = 0 [ 65.364517][ T5005] loop0: detected capacity change from 0 to 8192 [ 65.374496][ T5005] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 65.387744][ T5005] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 65.397243][ T5005] REISERFS (device loop0): using ordered data mode [ 65.404331][ T5005] reiserfs: using flush barriers [ 65.410513][ T5005] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.427400][ T5005] REISERFS (device loop0): checking transaction log (loop0) [ 65.436181][ T5005] REISERFS (device loop0): Using tea hash to sort names [ 65.443766][ T5005] REISERFS warning (device loop0): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [pid 5005] mount("/dev/loop0", "./file2", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5005] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5005] chdir("./file2") = 0 [pid 5005] ioctl(4, LOOP_CLR_FD) = 0 [pid 5005] close(4) = 0 [pid 5005] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NOCTTY|O_LARGEFILE|O_NOFOLLOW|O_NOATIME|FASYNC, 000) = 4 [pid 5005] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5005] write(5, "\x2e\x2f\x66\x69\x6c\x65\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x66\x69\x6c\x65\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65191) = 65191 [pid 5005] ftruncate(5, 3676) = 0 [pid 5005] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [ 65.456620][ T5005] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 65.499682][ T5005] ================================================================== [ 65.507814][ T5005] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x635/0xab0 [ 65.515597][ T5005] Read of size 48 at addr ffff888072f36ff0 by task syz-executor145/5005 [ 65.524124][ T5005] [ 65.526463][ T5005] CPU: 0 PID: 5005 Comm: syz-executor145 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 [ 65.537068][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 65.547311][ T5005] Call Trace: [ 65.550603][ T5005] [ 65.553567][ T5005] dump_stack_lvl+0x1e7/0x2d0 [ 65.558291][ T5005] ? irq_work_queue+0xca/0x150 [ 65.563074][ T5005] ? nf_tcp_handle_invalid+0x650/0x650 [ 65.568552][ T5005] ? panic+0x770/0x770 [ 65.572721][ T5005] ? _printk+0xd5/0x120 [ 65.576889][ T5005] print_report+0x163/0x540 [ 65.581494][ T5005] ? __virt_addr_valid+0x22f/0x2e0 [ 65.586620][ T5005] ? __phys_addr+0xba/0x170 [ 65.591143][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 65.596546][ T5005] kasan_report+0x176/0x1b0 [ 65.601082][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 65.606486][ T5005] kasan_check_range+0x283/0x290 [ 65.611438][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 65.616835][ T5005] __asan_memcpy+0x29/0x70 [ 65.621267][ T5005] leaf_paste_in_buffer+0x635/0xab0 [ 65.626485][ T5005] leaf_copy_dir_entries+0x71e/0xc60 [ 65.631876][ T5005] ? leaf_copy_items_entirely+0xee0/0xee0 [ 65.637610][ T5005] ? mark_lock+0x9a/0x340 [ 65.641959][ T5005] ? __lock_acquire+0x1316/0x2070 [ 65.647001][ T5005] leaf_copy_boundary_item+0xbbe/0x21b0 [ 65.652575][ T5005] leaf_move_items+0xd1a/0x2960 [ 65.657532][ T5005] ? __lock_acquire+0x1316/0x2070 [ 65.662577][ T5005] ? reiserfs_convert_objectid_map_v1+0x460/0x460 [ 65.669009][ T5005] ? reacquire_held_locks+0x660/0x660 [ 65.674493][ T5005] ? read_lock_is_recursive+0x20/0x20 [ 65.679876][ T5005] ? __lock_acquire+0x2070/0x2070 [ 65.684916][ T5005] leaf_shift_left+0xbe/0x430 [ 65.689609][ T5005] balance_leaf+0x15d1/0x12510 [ 65.694384][ T5005] ? __lock_acquire+0x1316/0x2070 [ 65.699434][ T5005] ? do_balance+0x8f0/0x8f0 [ 65.703948][ T5005] ? __mutex_trylock_common+0x182/0x2e0 [ 65.709506][ T5005] ? __might_sleep+0xc0/0xc0 [ 65.714112][ T5005] ? trace_raw_output_contention_end+0xd0/0xd0 [ 65.720280][ T5005] ? rcu_is_watching+0x15/0xb0 [ 65.725070][ T5005] ? trace_contention_end+0x3c/0xf0 [ 65.730275][ T5005] ? __mutex_lock_common+0x42d/0x2530 [ 65.735656][ T5005] ? __mutex_unlock_slowpath+0x21c/0x750 [ 65.741465][ T5005] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 65.747196][ T5005] ? get_empty_nodes+0x7f0/0xd70 [ 65.752142][ T5005] ? mutex_lock_io_nested+0x60/0x60 [ 65.757347][ T5005] ? __wake_up+0x1d0/0x1d0 [ 65.761775][ T5005] ? get_neighbors+0x1010/0x1010 [ 65.766724][ T5005] ? mutex_lock_nested+0x1b/0x20 [ 65.771749][ T5005] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 65.777475][ T5005] ? get_neighbors+0xab3/0x1010 [ 65.782434][ T5005] ? reiserfs_prepare_for_journal+0x26d/0x280 [ 65.788507][ T5005] ? fix_nodes+0x7aff/0x8ce0 [ 65.793109][ T5005] ? __might_sleep+0xc0/0xc0 [ 65.797728][ T5005] do_balance+0x30d/0x8f0 [ 65.802067][ T5005] ? get_right_neighbor_position+0x210/0x210 [ 65.808061][ T5005] ? reiserfs_insert_item+0x60e/0xc30 [ 65.813437][ T5005] reiserfs_insert_item+0xacc/0xc30 [ 65.818645][ T5005] ? reiserfs_paste_into_item+0x870/0x870 [ 65.824399][ T5005] ? show_alloc_options+0xc00/0xc00 [ 65.829690][ T5005] ? journal_begin+0x1f3/0x360 [ 65.834468][ T5005] ? copy_item_head+0x22/0x30 [ 65.839145][ T5005] ? reiserfs_get_block+0x1fe4/0x5130 [ 65.844536][ T5005] reiserfs_get_block+0x20ae/0x5130 [ 65.849850][ T5005] ? make_le_item_head+0x570/0x570 [ 65.854971][ T5005] ? register_lock_class+0x104/0x990 [ 65.860263][ T5005] ? generic_file_write_iter+0xaf/0x310 [ 65.865810][ T5005] ? vfs_write+0x790/0xb20 [ 65.870234][ T5005] ? ksys_write+0x1a0/0x2c0 [ 65.874748][ T5005] ? do_syscall_64+0x41/0xc0 [ 65.879344][ T5005] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.885425][ T5005] ? is_dynamic_key+0x1f0/0x1f0 [ 65.890288][ T5005] ? mark_lock+0x9a/0x340 [ 65.894632][ T5005] ? __lock_acquire+0x1316/0x2070 [ 65.899684][ T5005] ? __lock_acquire+0x2070/0x2070 [ 65.904811][ T5005] ? folio_attach_private+0xce/0x1f0 [ 65.910100][ T5005] ? do_raw_spin_unlock+0x13b/0x8b0 [ 65.915318][ T5005] ? _raw_spin_unlock+0x28/0x40 [ 65.920174][ T5005] ? folio_create_buffers+0x132/0x250 [ 65.925552][ T5005] __block_write_begin_int+0x548/0x1a50 [ 65.931101][ T5005] ? folio_add_lru+0x353/0x6f0 [ 65.935884][ T5005] ? make_le_item_head+0x570/0x570 [ 65.941001][ T5005] ? PageUptodate+0x290/0x290 [ 65.945683][ T5005] ? folio_test_hugetlb+0xa0/0x1d0 [ 65.950808][ T5005] ? __block_write_begin+0x65/0x160 [ 65.956009][ T5005] ? reiserfs_write_begin+0x183/0x520 [ 65.961392][ T5005] reiserfs_write_begin+0x24d/0x520 [ 65.966603][ T5005] generic_perform_write+0x300/0x5e0 [ 65.971901][ T5005] ? generic_file_direct_write+0x460/0x460 [ 65.977716][ T5005] ? __file_remove_privs+0x640/0x640 [ 65.983009][ T5005] ? generic_write_checks+0x160/0x1c0 [ 65.988388][ T5005] __generic_file_write_iter+0x17a/0x400 [ 65.994032][ T5005] generic_file_write_iter+0xaf/0x310 [ 65.999410][ T5005] vfs_write+0x790/0xb20 [ 66.003676][ T5005] ? file_end_write+0x250/0x250 [ 66.008548][ T5005] ? lockdep_hardirqs_on+0x98/0x140 [ 66.013752][ T5005] ? __fdget_pos+0x265/0x2f0 [ 66.018345][ T5005] ksys_write+0x1a0/0x2c0 [ 66.022693][ T5005] ? __ia32_sys_read+0x90/0x90 [ 66.027559][ T5005] ? syscall_enter_from_user_mode+0x32/0x230 [ 66.033550][ T5005] ? syscall_enter_from_user_mode+0x8c/0x230 [ 66.039556][ T5005] do_syscall_64+0x41/0xc0 [ 66.043979][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.049967][ T5005] RIP: 0033:0x7fd880cb7a19 [ 66.054478][ T5005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.074085][ T5005] RSP: 002b:00007ffe3d3d76b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.082608][ T5005] RAX: ffffffffffffffda RBX: 000000000000fdad RCX: 00007fd880cb7a19 [ 66.090585][ T5005] RDX: 000000000000000f RSI: 0000000020000100 RDI: 0000000000000006 [ 66.098589][ T5005] RBP: 0000000000000000 R08: 00007ffe3d3d76e0 R09: 00007ffe3d3d76e0 [ 66.106573][ T5005] R10: 00007ffe3d3d76e0 R11: 0000000000000246 R12: 00007ffe3d3d76dc [ 66.114555][ T5005] R13: 00007ffe3d3d7710 R14: 00007ffe3d3d76f0 R15: 0000000000000003 [ 66.122542][ T5005] [ 66.125564][ T5005] [ 66.127889][ T5005] The buggy address belongs to the physical page: [ 66.134303][ T5005] page:ffffea0001cbcd80 refcount:3 mapcount:0 mapping:ffff888148c8c9e8 index:0x214 pfn:0x72f36 [ 66.144635][ T5005] memcg:ffff888141264000 [ 66.148878][ T5005] aops:def_blk_aops ino:700000 [ 66.153653][ T5005] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 66.163028][ T5005] page_type: 0xffffffff() [ 66.167363][ T5005] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff888148c8c9e8 [ 66.176038][ T5005] raw: 0000000000000214 ffff888074a63570 00000003ffffffff ffff888141264000 [ 66.184629][ T5005] page dumped because: kasan: bad access detected [ 66.191059][ T5005] page_owner tracks the page as allocated [ 66.196787][ T5005] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5005, tgid 5005 (syz-executor145), ts 65496090521, free_ts 65495795076 [ 66.217378][ T5005] post_alloc_hook+0x1e6/0x210 [ 66.222156][ T5005] get_page_from_freelist+0x321c/0x33a0 [ 66.227706][ T5005] __alloc_pages+0x255/0x670 [ 66.232306][ T5005] folio_alloc+0x1e/0x60 [ 66.236552][ T5005] filemap_alloc_folio+0xde/0x500 [ 66.241579][ T5005] __filemap_get_folio+0x323/0xa00 [ 66.246694][ T5005] pagecache_get_page+0x2e/0x220 [ 66.251639][ T5005] __getblk_gfp+0x211/0xcc0 [ 66.256162][ T5005] get_empty_nodes+0x8c5/0xd70 [ 66.260933][ T5005] fix_nodes+0x2617/0x8ce0 [ 66.265353][ T5005] reiserfs_insert_item+0x9e8/0xc30 [ 66.270548][ T5005] indirect2direct+0x699/0xc00 [ 66.275312][ T5005] reiserfs_cut_from_item+0xba6/0x2580 [ 66.280858][ T5005] reiserfs_do_truncate+0xa16/0x15c0 [ 66.286143][ T5005] reiserfs_truncate_file+0x4da/0x820 [ 66.291516][ T5005] reiserfs_setattr+0xbc9/0x1140 [ 66.296554][ T5005] page last free stack trace: [ 66.301230][ T5005] free_unref_page_prepare+0x903/0xa30 [ 66.306723][ T5005] free_unref_page_list+0x596/0x830 [ 66.312195][ T5005] release_pages+0x2193/0x2470 [ 66.316969][ T5005] __pagevec_release+0x84/0x100 [ 66.321823][ T5005] truncate_inode_pages_range+0x45d/0x11b0 [ 66.327900][ T5005] truncate_setsize+0xcf/0xf0 [ 66.332581][ T5005] reiserfs_setattr+0xbbc/0x1140 [ 66.337527][ T5005] notify_change+0xc8b/0xf40 [ 66.342125][ T5005] do_truncate+0x220/0x300 [ 66.346545][ T5005] do_sys_ftruncate+0x2e4/0x380 [ 66.351401][ T5005] do_syscall_64+0x41/0xc0 [ 66.355830][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.361739][ T5005] [ 66.364069][ T5005] Memory state around the buggy address: [ 66.369697][ T5005] ffff888072f36f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.377777][ T5005] ffff888072f36f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.385878][ T5005] >ffff888072f37000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.394203][ T5005] ^ [ 66.398271][ T5005] ffff888072f37080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.406435][ T5005] ffff888072f37100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.414512][ T5005] ================================================================== [ 66.423756][ T5005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.431066][ T5005] CPU: 1 PID: 5005 Comm: syz-executor145 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 [ 66.441487][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 66.451568][ T5005] Call Trace: [ 66.454855][ T5005] [ 66.457786][ T5005] dump_stack_lvl+0x1e7/0x2d0 [ 66.462470][ T5005] ? nf_tcp_handle_invalid+0x650/0x650 [ 66.467930][ T5005] ? panic+0x770/0x770 [ 66.472005][ T5005] ? preempt_schedule_common+0x83/0xc0 [ 66.477476][ T5005] ? vscnprintf+0x5d/0x80 [ 66.481816][ T5005] panic+0x30f/0x770 [ 66.485730][ T5005] ? check_panic_on_warn+0x21/0xa0 [ 66.490851][ T5005] ? __memcpy_flushcache+0x2b0/0x2b0 [ 66.496155][ T5005] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 66.502141][ T5005] ? _raw_spin_unlock+0x40/0x40 [ 66.507005][ T5005] ? print_report+0x4fb/0x540 [ 66.511780][ T5005] check_panic_on_warn+0x82/0xa0 [ 66.516731][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 66.522132][ T5005] end_report+0x63/0x110 [ 66.526402][ T5005] kasan_report+0x183/0x1b0 [ 66.530942][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 66.536345][ T5005] kasan_check_range+0x283/0x290 [ 66.541299][ T5005] ? leaf_paste_in_buffer+0x635/0xab0 [ 66.546775][ T5005] __asan_memcpy+0x29/0x70 [ 66.551252][ T5005] leaf_paste_in_buffer+0x635/0xab0 [ 66.556562][ T5005] leaf_copy_dir_entries+0x71e/0xc60 [ 66.561869][ T5005] ? leaf_copy_items_entirely+0xee0/0xee0 [ 66.567605][ T5005] ? mark_lock+0x9a/0x340 [ 66.571952][ T5005] ? __lock_acquire+0x1316/0x2070 [ 66.576987][ T5005] leaf_copy_boundary_item+0xbbe/0x21b0 [ 66.582559][ T5005] leaf_move_items+0xd1a/0x2960 [ 66.587514][ T5005] ? __lock_acquire+0x1316/0x2070 [ 66.592559][ T5005] ? reiserfs_convert_objectid_map_v1+0x460/0x460 [ 66.599341][ T5005] ? reacquire_held_locks+0x660/0x660 [ 66.604812][ T5005] ? read_lock_is_recursive+0x20/0x20 [ 66.610370][ T5005] ? __lock_acquire+0x2070/0x2070 [ 66.615409][ T5005] leaf_shift_left+0xbe/0x430 [ 66.620099][ T5005] balance_leaf+0x15d1/0x12510 [ 66.624874][ T5005] ? __lock_acquire+0x1316/0x2070 [ 66.629922][ T5005] ? do_balance+0x8f0/0x8f0 [ 66.634431][ T5005] ? __mutex_trylock_common+0x182/0x2e0 [ 66.640069][ T5005] ? __might_sleep+0xc0/0xc0 [ 66.644678][ T5005] ? trace_raw_output_contention_end+0xd0/0xd0 [ 66.650844][ T5005] ? rcu_is_watching+0x15/0xb0 [ 66.655613][ T5005] ? trace_contention_end+0x3c/0xf0 [ 66.660823][ T5005] ? __mutex_lock_common+0x42d/0x2530 [ 66.666289][ T5005] ? __mutex_unlock_slowpath+0x21c/0x750 [ 66.671926][ T5005] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 66.677668][ T5005] ? get_empty_nodes+0x7f0/0xd70 [ 66.682617][ T5005] ? mutex_lock_io_nested+0x60/0x60 [ 66.687826][ T5005] ? __wake_up+0x1d0/0x1d0 [ 66.692253][ T5005] ? get_neighbors+0x1010/0x1010 [ 66.697205][ T5005] ? mutex_lock_nested+0x1b/0x20 [ 66.702142][ T5005] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 66.707874][ T5005] ? get_neighbors+0xab3/0x1010 [ 66.712739][ T5005] ? reiserfs_prepare_for_journal+0x26d/0x280 [ 66.718815][ T5005] ? fix_nodes+0x7aff/0x8ce0 [ 66.723415][ T5005] ? __might_sleep+0xc0/0xc0 [ 66.728026][ T5005] do_balance+0x30d/0x8f0 [ 66.732367][ T5005] ? get_right_neighbor_position+0x210/0x210 [ 66.738532][ T5005] ? reiserfs_insert_item+0x60e/0xc30 [ 66.743912][ T5005] reiserfs_insert_item+0xacc/0xc30 [ 66.749119][ T5005] ? reiserfs_paste_into_item+0x870/0x870 [ 66.754878][ T5005] ? show_alloc_options+0xc00/0xc00 [ 66.760086][ T5005] ? journal_begin+0x1f3/0x360 [ 66.764857][ T5005] ? copy_item_head+0x22/0x30 [ 66.769535][ T5005] ? reiserfs_get_block+0x1fe4/0x5130 [ 66.774925][ T5005] reiserfs_get_block+0x20ae/0x5130 [ 66.780158][ T5005] ? make_le_item_head+0x570/0x570 [ 66.785283][ T5005] ? register_lock_class+0x104/0x990 [ 66.790578][ T5005] ? generic_file_write_iter+0xaf/0x310 [ 66.796129][ T5005] ? vfs_write+0x790/0xb20 [ 66.800564][ T5005] ? ksys_write+0x1a0/0x2c0 [ 66.805080][ T5005] ? do_syscall_64+0x41/0xc0 [ 66.809674][ T5005] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.815760][ T5005] ? is_dynamic_key+0x1f0/0x1f0 [ 66.820884][ T5005] ? mark_lock+0x9a/0x340 [ 66.825241][ T5005] ? __lock_acquire+0x1316/0x2070 [ 66.830302][ T5005] ? __lock_acquire+0x2070/0x2070 [ 66.835426][ T5005] ? folio_attach_private+0xce/0x1f0 [ 66.840719][ T5005] ? do_raw_spin_unlock+0x13b/0x8b0 [ 66.845934][ T5005] ? _raw_spin_unlock+0x28/0x40 [ 66.850792][ T5005] ? folio_create_buffers+0x132/0x250 [ 66.856170][ T5005] __block_write_begin_int+0x548/0x1a50 [ 66.861728][ T5005] ? folio_add_lru+0x353/0x6f0 [ 66.866511][ T5005] ? make_le_item_head+0x570/0x570 [ 66.871642][ T5005] ? PageUptodate+0x290/0x290 [ 66.876373][ T5005] ? folio_test_hugetlb+0xa0/0x1d0 [ 66.881498][ T5005] ? __block_write_begin+0x65/0x160 [ 66.886700][ T5005] ? reiserfs_write_begin+0x183/0x520 [ 66.892080][ T5005] reiserfs_write_begin+0x24d/0x520 [ 66.897381][ T5005] generic_perform_write+0x300/0x5e0 [ 66.902682][ T5005] ? generic_file_direct_write+0x460/0x460 [ 66.908496][ T5005] ? __file_remove_privs+0x640/0x640 [ 66.913885][ T5005] ? generic_write_checks+0x160/0x1c0 [ 66.919389][ T5005] __generic_file_write_iter+0x17a/0x400 [ 66.925126][ T5005] generic_file_write_iter+0xaf/0x310 [ 66.930510][ T5005] vfs_write+0x790/0xb20 [ 66.934859][ T5005] ? file_end_write+0x250/0x250 [ 66.939729][ T5005] ? lockdep_hardirqs_on+0x98/0x140 [ 66.944943][ T5005] ? __fdget_pos+0x265/0x2f0 [ 66.949633][ T5005] ksys_write+0x1a0/0x2c0 [ 66.953983][ T5005] ? __ia32_sys_read+0x90/0x90 [ 66.958760][ T5005] ? syscall_enter_from_user_mode+0x32/0x230 [ 66.964754][ T5005] ? syscall_enter_from_user_mode+0x8c/0x230 [ 66.970746][ T5005] do_syscall_64+0x41/0xc0 [ 66.975173][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.981163][ T5005] RIP: 0033:0x7fd880cb7a19 [ 66.985578][ T5005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.005187][ T5005] RSP: 002b:00007ffe3d3d76b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.013609][ T5005] RAX: ffffffffffffffda RBX: 000000000000fdad RCX: 00007fd880cb7a19 [ 67.021605][ T5005] RDX: 000000000000000f RSI: 0000000020000100 RDI: 0000000000000006 [ 67.029587][ T5005] RBP: 0000000000000000 R08: 00007ffe3d3d76e0 R09: 00007ffe3d3d76e0 [ 67.037569][ T5005] R10: 00007ffe3d3d76e0 R11: 0000000000000246 R12: 00007ffe3d3d76dc [ 67.045560][ T5005] R13: 00007ffe3d3d7710 R14: 00007ffe3d3d76f0 R15: 0000000000000003 [ 67.053547][ T5005] [ 67.056856][ T5005] Kernel Offset: disabled [ 67.061272][ T5005] Rebooting in 86400 seconds..