./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2891469378 <...> Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. execve("./syz-executor2891469378", ["./syz-executor2891469378"], 0x7ffd23b35a40 /* 10 vars */) = 0 brk(NULL) = 0x555555e70000 brk(0x555555e70d00) = 0x555555e70d00 arch_prctl(ARCH_SET_FS, 0x555555e70380) = 0 set_tid_address(0x555555e70650) = 5032 set_robust_list(0x555555e70660, 24) = 0 rseq(0x555555e70ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2891469378", 4096) = 28 getrandom("\x81\x29\xbf\x4a\x26\x9f\xe3\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555e70d00 brk(0x555555e91d00) = 0x555555e91d00 brk(0x555555e92000) = 0x555555e92000 mprotect(0x7f06f8c1a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f06f0769000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [ 63.759117][ T5032] syz-executor289[5032]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set munmap(0x7f06f0769000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 63.807631][ T5032] loop0: detected capacity change from 0 to 8192 [ 63.819134][ T5032] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 63.832175][ T5032] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 63.841521][ T5032] REISERFS (device loop0): using ordered data mode [ 63.848041][ T5032] reiserfs: using flush barriers [ 63.854333][ T5032] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.870934][ T5032] REISERFS (device loop0): checking transaction log (loop0) [ 63.880217][ T5032] REISERFS (device loop0): Using tea hash to sort names [ 63.887933][ T5032] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) mount("/dev/loop0", "./file0", "reiserfs", MS_NODEV|MS_NOEXEC|MS_SILENT, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, ".", O_RDONLY) = 4 openat(4, "hugetlb.2MB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [ 63.901739][ T5032] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 63.929325][ T5032] ------------[ cut here ]------------ [ 63.934864][ T5032] kernel BUG at fs/reiserfs/journal.c:505! [ 63.940840][ T5032] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 63.946904][ T5032] CPU: 0 PID: 5032 Comm: syz-executor289 Not tainted 6.6.0-rc5-syzkaller-00055-g1c8b86a3799f #0 [ 63.957374][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 63.967414][ T5032] RIP: 0010:reiserfs_in_journal+0x238/0x720 [ 63.973300][ T5032] Code: 3e c3 5d ff 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 16 04 00 00 48 3b 5d 08 75 86 e8 1d c3 5d ff e8 18 c3 5d ff <0f> 0b e8 11 c3 5d ff e8 0c c3 5d ff 48 8b 9b 28 06 00 00 48 b8 00 [ 63.992886][ T5032] RSP: 0018:ffffc90003a7f3f8 EFLAGS: 00010293 [ 63.998937][ T5032] RAX: 0000000000000000 RBX: ffff88807aa64000 RCX: 0000000000000000 [ 64.006899][ T5032] RDX: ffff88801e881dc0 RSI: ffffffff822a0398 RDI: ffffc90003aa3050 [ 64.015029][ T5032] RBP: ffffc90003aa3048 R08: 0000000000000006 R09: 0000000000000213 [ 64.022973][ T5032] R10: 0000000000000213 R11: 0000000000000000 R12: 0000000000000213 [ 64.030918][ T5032] R13: 0000000000000213 R14: dffffc0000000000 R15: ffff88807e98e000 [ 64.038865][ T5032] FS: 0000555555e70380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 64.047788][ T5032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.054351][ T5032] CR2: 000000002000b000 CR3: 0000000019738000 CR4: 0000000000350ef0 [ 64.062304][ T5032] Call Trace: [ 64.065559][ T5032] [ 64.068466][ T5032] ? show_regs+0x8f/0xa0 [ 64.072780][ T5032] ? die+0x36/0xa0 [ 64.076478][ T5032] ? do_trap+0x22b/0x420 [ 64.080699][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.085966][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.091229][ T5032] ? do_error_trap+0xf4/0x230 [ 64.095882][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.101150][ T5032] ? handle_invalid_op+0x34/0x40 [ 64.106070][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.111332][ T5032] ? exc_invalid_op+0x2d/0x40 [ 64.115996][ T5032] ? asm_exc_invalid_op+0x1a/0x20 [ 64.121004][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.126266][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.131539][ T5032] ? reiserfs_in_journal+0x238/0x720 [ 64.136801][ T5032] scan_bitmap_block.constprop.0+0x4b7/0x1080 [ 64.142853][ T5032] ? reiserfs_discard_all_prealloc+0x180/0x180 [ 64.149077][ T5032] reiserfs_allocate_blocknrs+0x2c41/0x5770 [ 64.154953][ T5032] ? scan_bitmap_block.constprop.0+0x1080/0x1080 [ 64.161258][ T5032] ? journal_begin+0x215/0x400 [ 64.165998][ T5032] reiserfs_get_block+0xb13/0x47a0 [ 64.171092][ T5032] ? reiserfs_commit_write+0x6f0/0x6f0 [ 64.176526][ T5032] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 64.182488][ T5032] ? lock_acquire+0x1ae/0x510 [ 64.187329][ T5032] ? do_raw_spin_unlock+0x173/0x230 [ 64.192506][ T5032] ? reiserfs_commit_write+0x6f0/0x6f0 [ 64.197942][ T5032] __block_write_begin_int+0x3c0/0x1560 [ 64.203467][ T5032] ? reiserfs_commit_write+0x6f0/0x6f0 [ 64.208965][ T5032] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 64.214487][ T5032] ? folio_flags+0x71/0x1f0 [ 64.218980][ T5032] reiserfs_write_begin+0x351/0xa40 [ 64.224159][ T5032] generic_perform_write+0x278/0x600 [ 64.229448][ T5032] ? folio_add_wait_queue+0x1c0/0x1c0 [ 64.234799][ T5032] ? generic_write_checks+0x2b0/0x3f0 [ 64.240150][ T5032] __generic_file_write_iter+0x1f9/0x240 [ 64.245761][ T5032] generic_file_write_iter+0xe3/0x350 [ 64.251115][ T5032] vfs_write+0x650/0xe40 [ 64.255336][ T5032] ? kernel_write+0x6c0/0x6c0 [ 64.259987][ T5032] ? find_held_lock+0x2d/0x110 [ 64.264728][ T5032] ? reacquire_held_locks+0x4b0/0x4b0 [ 64.270092][ T5032] ? __fget_light+0x1fc/0x260 [ 64.274743][ T5032] ksys_write+0x12f/0x250 [ 64.279047][ T5032] ? __ia32_sys_read+0xb0/0xb0 [ 64.283787][ T5032] ? lockdep_hardirqs_on+0x7d/0x100 [ 64.288961][ T5032] ? _raw_spin_unlock_irq+0x2e/0x50 [ 64.294133][ T5032] ? ptrace_notify+0xf4/0x130 [ 64.298788][ T5032] do_syscall_64+0x38/0xb0 [ 64.303183][ T5032] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.309054][ T5032] RIP: 0033:0x7f06f8ba6679 [ 64.313442][ T5032] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.333023][ T5032] RSP: 002b:00007fff907ed538 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.341432][ T5032] RAX: ffffffffffffffda RBX: 00007fff907ed708 RCX: 00007f06f8ba6679 [ 64.349467][ T5032] RDX: 000000000000fea7 RSI: 0000000020000080 RDI: 0000000000000005 [ 64.357432][ T5032] RBP: 00007f06f8c1a610 R08: 00007fff907ed708 R09: 00007fff907ed708 [ 64.365471][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.373415][ T5032] R13: 00007fff907ed6f8 R14: 0000000000000001 R15: 0000000000000001 [ 64.381361][ T5032] [ 64.384439][ T5032] Modules linked in: [ 64.388640][ T5032] ---[ end trace 0000000000000000 ]--- [ 64.394105][ T5032] RIP: 0010:reiserfs_in_journal+0x238/0x720 [ 64.400064][ T5032] Code: 3e c3 5d ff 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 16 04 00 00 48 3b 5d 08 75 86 e8 1d c3 5d ff e8 18 c3 5d ff <0f> 0b e8 11 c3 5d ff e8 0c c3 5d ff 48 8b 9b 28 06 00 00 48 b8 00 [ 64.420149][ T5032] RSP: 0018:ffffc90003a7f3f8 EFLAGS: 00010293 [ 64.426207][ T5032] RAX: 0000000000000000 RBX: ffff88807aa64000 RCX: 0000000000000000 [ 64.434185][ T5032] RDX: ffff88801e881dc0 RSI: ffffffff822a0398 RDI: ffffc90003aa3050 [ 64.442165][ T5032] RBP: ffffc90003aa3048 R08: 0000000000000006 R09: 0000000000000213 [ 64.450144][ T5032] R10: 0000000000000213 R11: 0000000000000000 R12: 0000000000000213 [ 64.458110][ T5032] R13: 0000000000000213 R14: dffffc0000000000 R15: ffff88807e98e000 [ 64.466097][ T5032] FS: 0000555555e70380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 64.475108][ T5032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.481727][ T5032] CR2: 000000002000b000 CR3: 0000000019738000 CR4: 0000000000350ef0 [ 64.489712][ T5032] Kernel panic - not syncing: Fatal exception [ 64.496542][ T5032] Kernel Offset: disabled [ 64.500846][ T5032] Rebooting in 86400 seconds..