Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.92' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.335172] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 32.344088] REISERFS (device loop0): using ordered data mode [ 32.351201] reiserfs: using flush barriers [ 32.357196] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 32.372939] REISERFS (device loop0): checking transaction log (loop0) [ 32.381617] REISERFS (device loop0): Using r5 hash to sort names [ 32.389374] reiserfs: enabling write barrier flush mode [ 32.401517] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 32.448755] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 32.463910] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 32.473763] REISERFS (device loop0): Remounting filesystem read-only [ 32.480357] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 2 0x0 SD] stat data [ 32.493069] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 32.507731] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 32.517682] kasan: CONFIG_KASAN_INLINE enabled [ 32.522312] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.529732] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 32.535953] CPU: 1 PID: 8097 Comm: syz-executor303 Not tainted 4.19.211-syzkaller #0 [ 32.543810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 32.553147] RIP: 0010:prepare_for_delete_or_cut+0x12a/0x1b00 [ 32.558920] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 57 19 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 1b 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 69 18 00 00 48 8b 4b 28 49 63 c4 48 8d 44 40 03 [ 32.577796] RSP: 0018:ffff8880aeec7318 EFLAGS: 00010206 [ 32.583132] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880aeec7998 [ 32.590376] RDX: 0000000000000005 RSI: ffffffff81d4eb6f RDI: 0000000000000028 [ 32.597624] RBP: ffff8880aeec7518 R08: ffff8880aeec7528 R09: ffff8880aeec7518 [ 32.604872] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 32.612116] R13: ffff88808ac47780 R14: 1ffff11015dd8f3b R15: ffff8880aeec7528 [ 32.619364] FS: 0000555556e61300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 32.627566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.633422] CR2: 00007f2280a96ec8 CR3: 0000000009e6d000 CR4: 00000000003406e0 [ 32.640670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.647914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.655158] Call Trace: [ 32.657728] ? search_by_key+0x3f10/0x3f10 [ 32.661939] ? reiserfs_unmap_buffer+0x420/0x420 [ 32.666670] ? comp_items+0x1d0/0x1d0 [ 32.670449] ? memset+0x20/0x40 [ 32.673704] reiserfs_cut_from_item+0x1ef/0x1960 [ 32.678451] ? reiserfs_delete_solid_item+0xb40/0xb40 [ 32.683627] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 32.688793] ? search_by_key+0x22c3/0x3f10 [ 32.693711] ? mutex_trylock+0x1a0/0x1a0 [ 32.697762] ? do_journal_begin_r+0x298/0x10b0 [ 32.702332] ? mutex_trylock+0x1a0/0x1a0 [ 32.706371] ? __mutex_unlock_slowpath+0xea/0x610 [ 32.711194] ? wait_for_completion_io+0x10/0x10 [ 32.715842] ? make_cpu_key+0x22/0x2a0 [ 32.719710] reiserfs_do_truncate+0x64a/0x10c0 [ 32.724275] ? reiserfs_cut_from_item+0x1960/0x1960 [ 32.729277] reiserfs_truncate_file+0x1b1/0x1030 [ 32.734015] ? reiserfs_write_inode+0x2d0/0x2d0 [ 32.738668] reiserfs_file_release+0x982/0xd90 [ 32.743233] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 32.748324] ? reiserfs_sync_file+0x320/0x320 [ 32.752798] ? integrity_iint_find+0x123/0x150 [ 32.757357] ? ima_file_free+0xdd/0x460 [ 32.761324] ? reiserfs_sync_file+0x320/0x320 [ 32.765809] __fput+0x2ce/0x890 [ 32.769079] task_work_run+0x148/0x1c0 [ 32.772954] do_exit+0xbf3/0x2be0 [ 32.776395] ? lock_downgrade+0x720/0x720 [ 32.780522] ? mm_update_next_owner+0x650/0x650 [ 32.785170] ? up_read+0x17/0x110 [ 32.788601] ? __do_page_fault+0x180/0xd60 [ 32.792837] do_group_exit+0x125/0x310 [ 32.796707] __x64_sys_exit_group+0x3a/0x50 [ 32.801012] do_syscall_64+0xf9/0x620 [ 32.804796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.809963] RIP: 0033:0x7f2280a52cd9 [ 32.813654] Code: Bad RIP value. [ 32.816994] RSP: 002b:00007fffd563e1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.824774] RAX: ffffffffffffffda RBX: 00007f2280ac8430 RCX: 00007f2280a52cd9 [ 32.832076] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 32.839330] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000 [ 32.846583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2280ac8430 [ 32.853833] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 32.861084] Modules linked in: [ 32.864557] ---[ end trace 40c03b297533e20e ]--- [ 32.869348] RIP: 0010:prepare_for_delete_or_cut+0x12a/0x1b00 [ 32.875153] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 57 19 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 1b 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 69 18 00 00 48 8b 4b 28 49 63 c4 48 8d 44 40 03 [ 32.894107] RSP: 0018:ffff8880aeec7318 EFLAGS: 00010206 [ 32.899502] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880aeec7998 [ 32.906809] RDX: 0000000000000005 RSI: ffffffff81d4eb6f RDI: 0000000000000028 [ 32.914071] RBP: ffff8880aeec7518 R08: ffff8880aeec7528 R09: ffff8880aeec7518 [ 32.921360] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 32.928672] R13: ffff88808ac47780 R14: 1ffff11015dd8f3b R15: ffff8880aeec7528 [ 32.935965] FS: 0000555556e61300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 32.944186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.950091] CR2: 00007f2280a52caf CR3: 0000000009e6d000 CR4: 00000000003406e0 [ 32.957533] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.964804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.972104] Kernel panic - not syncing: Fatal exception [ 32.977616] Kernel Offset: disabled [ 32.981225] Rebooting in 86400 seconds..