./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3668505343 <...> Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. execve("./syz-executor3668505343", ["./syz-executor3668505343"], 0x7ffc9862d340 /* 10 vars */) = 0 brk(NULL) = 0x55555670e000 brk(0x55555670ec40) = 0x55555670ec40 arch_prctl(ARCH_SET_FS, 0x55555670e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3668505343", 4096) = 28 brk(0x55555672fc40) = 0x55555672fc40 brk(0x555556730000) = 0x555556730000 mprotect(0x7fc833390000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5069 mkdir("./syzkaller.oQmFRt", 0700) = 0 chmod("./syzkaller.oQmFRt", 0777) = 0 chdir("./syzkaller.oQmFRt") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555670e5d0) = 5071 ./strace-static-x86_64: Process 5071 attached [pid 5071] chdir("./0") = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] memfd_create("syzkaller", 0) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc82aed2000 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5071] munmap(0x7fc82aed2000, 4194304) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5071] close(3) = 0 [pid 5071] mkdir("./file0", 0777) = 0 [ 56.830771][ T5071] loop0: detected capacity change from 0 to 8192 [ 56.843205][ T5071] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 56.856299][ T5071] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 56.865662][ T5071] REISERFS (device loop0): using ordered data mode [ 56.872213][ T5071] reiserfs: using flush barriers [ 56.878361][ T5071] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.894951][ T5071] REISERFS (device loop0): checking transaction log (loop0) [pid 5071] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./file0") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4) = 0 [pid 5071] creat("./file0", 000) = 4 [pid 5071] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5071] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5071] dup2(5, 4) = 4 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5071] ftruncate(6, 33587195) = 0 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555670f620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 56.938814][ T5071] REISERFS (device loop0): Using r5 hash to sort names [ 56.946604][ T5071] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556717660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556717660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x55555670f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555670e5d0) = 5073 ./strace-static-x86_64: Process 5073 attached [pid 5073] chdir("./1") = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setpgid(0, 0) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc82aed2000 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5073] munmap(0x7fc82aed2000, 4194304) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5073] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] close(3) = 0 [pid 5073] mkdir("./file0", 0777) = 0 [ 57.110428][ T5073] loop0: detected capacity change from 0 to 8192 [ 57.121323][ T5073] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.134345][ T5073] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.143577][ T5073] REISERFS (device loop0): using ordered data mode [ 57.150142][ T5073] reiserfs: using flush barriers [ 57.155973][ T5073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.172834][ T5073] REISERFS (device loop0): checking transaction log (loop0) [pid 5073] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./file0") = 0 [pid 5073] ioctl(4, LOOP_CLR_FD) = 0 [pid 5073] close(4) = 0 [pid 5073] creat("./file0", 000) = 4 [pid 5073] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5073] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5073] dup2(5, 4) = 4 [pid 5073] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5073] ftruncate(6, 33587195) = 0 [pid 5073] exit_group(0) = ? [pid 5073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555670f620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 57.219732][ T5073] REISERFS (device loop0): Using r5 hash to sort names [ 57.227077][ T5073] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556717660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556717660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x55555670f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555670e5d0) = 5075 ./strace-static-x86_64: Process 5075 attached [pid 5075] chdir("./2") = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc82aed2000 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5075] munmap(0x7fc82aed2000, 4194304) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5075] close(3) = 0 [pid 5075] mkdir("./file0", 0777) = 0 [ 57.376528][ T5075] loop0: detected capacity change from 0 to 8192 [ 57.387522][ T5075] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.400632][ T5075] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.409833][ T5075] REISERFS (device loop0): using ordered data mode [ 57.416408][ T5075] reiserfs: using flush barriers [ 57.422627][ T5075] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.439101][ T5075] REISERFS (device loop0): checking transaction log (loop0) [pid 5075] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [pid 5075] ioctl(4, LOOP_CLR_FD) = 0 [pid 5075] close(4) = 0 [pid 5075] creat("./file0", 000) = 4 [pid 5075] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5075] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5075] dup2(5, 4) = 4 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [pid 5075] ftruncate(6, 33587195) = 0 [pid 5075] exit_group(0) = ? [pid 5075] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555670f620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 57.487025][ T5075] REISERFS (device loop0): Using r5 hash to sort names [ 57.494146][ T5075] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556717660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556717660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x55555670f620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555670e5d0) = 5077 ./strace-static-x86_64: Process 5077 attached [pid 5077] chdir("./3") = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] setpgid(0, 0) = 0 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] write(3, "1000", 4) = 4 [pid 5077] close(3) = 0 [pid 5077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc82aed2000 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5077] munmap(0x7fc82aed2000, 4194304) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5077] close(3) = 0 [pid 5077] mkdir("./file0", 0777) = 0 [ 57.631001][ T5077] loop0: detected capacity change from 0 to 8192 [ 57.641109][ T5077] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 57.654181][ T5077] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 57.663491][ T5077] REISERFS (device loop0): using ordered data mode [ 57.670065][ T5077] reiserfs: using flush barriers [ 57.675976][ T5077] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 57.692530][ T5077] REISERFS (device loop0): checking transaction log (loop0) [pid 5077] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5077] chdir("./file0") = 0 [pid 5077] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] close(4) = 0 [pid 5077] creat("./file0", 000) = 4 [pid 5077] writev(4, [{iov_base="\xd1\xff\xac\xd5\x16\xde\x50\xac\x9d\x15\xbc\x75\x31\x6d\xa4\xde\xfa\x1e\x72\xf6\x5a\x65\xcd\xd2\x6d\xcc\x38\x9a\xac\xf7\x85\x6d\xa9\xae\xcf\x37\x65\xd4\xc0\x32\xe1\x96\x0f\xaf\x25\xba\xd9\x06\xb7\xd3\x44\x0b\x6e\x71\xa8\x2f\x1d\x8f\x8b\x8d\xb3\x5b\x60\x91\xf3\xaf\x94\xc6\xb4\x6b\x9a\xb1\x0f\xe3\x92\x3f\x26\x87\x71\x07\x8d\x26\x68\xbe\x7b\xd3\xeb\x94\x1d\x4b\xb5\xba\xa8\x54\x7e\x36\x28\x3a\x06\x5c"..., iov_len=3617}], 1) = 3617 [pid 5077] openat(AT_FDCWD, "/proc/thread-self/attr/exec", O_RDWR) = 5 [pid 5077] dup2(5, 4) = 4 [pid 5077] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOFOLLOW|FASYNC, 000) = 6 [ 57.739917][ T5077] REISERFS (device loop0): Using r5 hash to sort names [ 57.747375][ T5077] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 57.763122][ T5077] ================================================================== [ 57.771210][ T5077] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x739/0xca0 [ 57.778958][ T5077] Read of size 104 at addr ffff8880729f6fd8 by task syz-executor366/5077 [ 57.787350][ T5077] [ 57.789657][ T5077] CPU: 1 PID: 5077 Comm: syz-executor366 Not tainted 6.1.0-syzkaller-14446-g8395ae05cb5a #0 [ 57.799696][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.809730][ T5077] Call Trace: [ 57.812992][ T5077] [ 57.815909][ T5077] dump_stack_lvl+0x1b1/0x290 [ 57.820591][ T5077] ? nf_tcp_handle_invalid+0x630/0x630 [ 57.826069][ T5077] ? __wake_up_klogd+0xcd/0x100 [ 57.830932][ T5077] ? panic+0x710/0x710 [ 57.834989][ T5077] ? _printk+0xc0/0x100 [ 57.839130][ T5077] print_address_description+0x74/0x340 [ 57.844679][ T5077] print_report+0x107/0x1f0 [ 57.849172][ T5077] ? _raw_spin_lock+0x40/0x40 [ 57.853846][ T5077] ? validate_chain+0x177/0x6ae0 [ 57.858778][ T5077] ? __virt_addr_valid+0x21b/0x2d0 [ 57.863892][ T5077] ? __phys_addr+0xb5/0x160 [ 57.868387][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 57.873750][ T5077] kasan_report+0xcd/0x100 [ 57.878160][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 57.883535][ T5077] kasan_check_range+0x2a7/0x2e0 [ 57.888479][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 57.893847][ T5077] memcpy+0x25/0x60 [ 57.897655][ T5077] leaf_paste_in_buffer+0x739/0xca0 [ 57.902846][ T5077] leaf_copy_dir_entries+0x6e2/0xbf0 [ 57.908136][ T5077] ? reacquire_held_locks+0x650/0x650 [ 57.913507][ T5077] ? leaf_item_bottle+0x19a0/0x19a0 [ 57.918713][ T5077] ? validate_chain+0x177/0x6ae0 [ 57.923640][ T5077] ? validate_chain+0x177/0x6ae0 [ 57.928572][ T5077] leaf_copy_boundary_item+0xb7c/0x20f0 [ 57.934137][ T5077] leaf_move_items+0xc74/0x1330 [ 57.938994][ T5077] ? reiserfs_convert_objectid_map_v1+0x6d0/0x6d0 [ 57.945408][ T5077] ? read_lock_is_recursive+0x10/0x10 [ 57.950796][ T5077] leaf_shift_left+0xb7/0x420 [ 57.955478][ T5077] balance_leaf+0x1579/0x123a0 [ 57.960229][ T5077] ? __lock_acquire+0x1292/0x1f60 [ 57.965249][ T5077] ? do_balance+0x8d0/0x8d0 [ 57.969739][ T5077] ? rcu_read_lock_sched_held+0x87/0x110 [ 57.975358][ T5077] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 57.981332][ T5077] ? trace_raw_output_contention_end+0xd0/0xd0 [ 57.987485][ T5077] ? trace_contention_end+0x72/0x1d0 [ 57.992758][ T5077] ? __mutex_lock_common+0x45f/0x26e0 [ 57.998125][ T5077] ? write_boundary_block+0xb0/0xb0 [ 58.003324][ T5077] ? __mutex_unlock_slowpath+0x222/0x770 [ 58.008946][ T5077] ? __might_sleep+0xc0/0xc0 [ 58.013535][ T5077] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 58.019242][ T5077] ? mutex_lock_io_nested+0x60/0x60 [ 58.024439][ T5077] ? get_empty_nodes+0x5a3/0xd00 [ 58.029373][ T5077] ? indirect_part_size+0x8/0x10 [ 58.034312][ T5077] ? __wake_up+0x1f0/0x1f0 [ 58.038712][ T5077] ? get_neighbors+0x1020/0x1020 [ 58.043636][ T5077] ? mutex_lock_nested+0x17/0x20 [ 58.048560][ T5077] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 58.054274][ T5077] ? reiserfs_prepare_for_journal+0x239/0x250 [ 58.060339][ T5077] ? fix_nodes+0x73e4/0x8560 [ 58.064920][ T5077] do_balance+0x2d6/0x8d0 [ 58.069238][ T5077] ? get_right_neighbor_position+0x200/0x200 [ 58.075217][ T5077] ? reiserfs_insert_item+0x67b/0xcb0 [ 58.080585][ T5077] reiserfs_insert_item+0xb54/0xcb0 [ 58.085779][ T5077] ? reiserfs_paste_into_item+0x880/0x880 [ 58.091498][ T5077] ? show_alloc_options+0xbd0/0xbd0 [ 58.096677][ T5077] ? journal_begin+0x1f1/0x350 [ 58.101434][ T5077] ? copy_item_head+0x1e/0x30 [ 58.106114][ T5077] ? reiserfs_get_block+0x1fda/0x5180 [ 58.111474][ T5077] reiserfs_get_block+0x20a2/0x5180 [ 58.116687][ T5077] ? make_le_item_head+0x5b0/0x5b0 [ 58.121799][ T5077] ? register_lock_class+0xc2/0x930 [ 58.126984][ T5077] ? create_page_buffers+0x1c8/0x4b0 [ 58.132255][ T5077] ? __block_write_begin_int+0x1e0/0x1a80 [ 58.137957][ T5077] ? reiserfs_write_begin+0x247/0x510 [ 58.143312][ T5077] ? generic_cont_expand_simple+0x151/0x250 [ 58.149191][ T5077] ? reiserfs_setattr+0x642/0x1200 [ 58.154295][ T5077] ? do_truncate+0x200/0x2f0 [ 58.158879][ T5077] ? do_sys_ftruncate+0x2b0/0x350 [ 58.163894][ T5077] ? is_dynamic_key+0x1f0/0x1f0 [ 58.168744][ T5077] ? mark_lock+0x9a/0x350 [ 58.173083][ T5077] ? __lock_acquire+0x1292/0x1f60 [ 58.178093][ T5077] ? rcu_read_lock_sched_held+0x22/0x110 [ 58.183711][ T5077] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 58.189681][ T5077] ? __lock_acquire+0x1f60/0x1f60 [ 58.194691][ T5077] ? alloc_page_buffers+0x326/0x460 [ 58.199893][ T5077] ? do_raw_spin_unlock+0x134/0x8a0 [ 58.205097][ T5077] ? create_page_buffers+0x244/0x4b0 [ 58.210368][ T5077] __block_write_begin_int+0x54c/0x1a80 [ 58.215902][ T5077] ? xas_load+0x127/0x150 [ 58.220223][ T5077] ? make_le_item_head+0x5b0/0x5b0 [ 58.225321][ T5077] ? page_zero_new_buffers+0x940/0x940 [ 58.230766][ T5077] ? __block_write_begin+0x51/0x150 [ 58.235955][ T5077] ? reiserfs_write_begin+0x180/0x510 [ 58.241346][ T5077] reiserfs_write_begin+0x247/0x510 [ 58.246546][ T5077] generic_cont_expand_simple+0x151/0x250 [ 58.252251][ T5077] ? submit_bh+0x20/0x20 [ 58.256480][ T5077] ? mutex_lock_nested+0x17/0x20 [ 58.261402][ T5077] reiserfs_setattr+0x642/0x1200 [ 58.266339][ T5077] ? reiserfs_commit_write+0x580/0x580 [ 58.271809][ T5077] ? ktime_get_coarse_real_ts64+0x12c/0x140 [ 58.277709][ T5077] ? current_time+0x1ea/0x300 [ 58.282370][ T5077] ? atime_needs_update+0x780/0x780 [ 58.287555][ T5077] ? security_inode_setattr+0x109/0x150 [ 58.293087][ T5077] ? reiserfs_commit_write+0x580/0x580 [ 58.298536][ T5077] notify_change+0xe50/0x1100 [ 58.303201][ T5077] do_truncate+0x200/0x2f0 [ 58.307609][ T5077] ? put_page_bootmem+0x2d0/0x2d0 [ 58.312622][ T5077] do_sys_ftruncate+0x2b0/0x350 [ 58.317459][ T5077] do_syscall_64+0x3d/0xb0 [ 58.321880][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.327779][ T5077] RIP: 0033:0x7fc83331f9e9 [ 58.332176][ T5077] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.351767][ T5077] RSP: 002b:00007ffdd3843518 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 58.360166][ T5077] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fc83331f9e9 [ 58.368124][ T5077] RDX: 00007fc83331f9e9 RSI: 0000000002007ffb RDI: 0000000000000006 [ 58.376088][ T5077] RBP: 0000000000000000 R08: 00007ffdd3843540 R09: 00007ffdd3843540 [ 58.384053][ T5077] R10: 00007ffdd3843540 R11: 0000000000000246 R12: 00007ffdd384353c [ 58.392018][ T5077] R13: 00007ffdd3843570 R14: 00007ffdd3843550 R15: 0000000000000003 [ 58.399989][ T5077] [ 58.403000][ T5077] [ 58.405306][ T5077] The buggy address belongs to the physical page: [ 58.411697][ T5077] page:ffffea0001ca7d80 refcount:2 mapcount:0 mapping:ffff888140d3bef8 index:0x213 pfn:0x729f6 [ 58.422006][ T5077] memcg:ffff88813fe70000 [ 58.426225][ T5077] aops:def_blk_aops ino:700000 [ 58.430972][ T5077] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 58.440672][ T5077] raw: 00fff00000002032 ffffea0001cacb08 ffffea0000817c08 ffff888140d3bef8 [ 58.449245][ T5077] raw: 0000000000000213 ffff888072d1c1d0 00000002ffffffff ffff88813fe70000 [ 58.457827][ T5077] page dumped because: kasan: bad access detected [ 58.464228][ T5077] page_owner tracks the page as allocated [ 58.469922][ T5077] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5077, tgid 5077 (syz-executor366), ts 57739720943, free_ts 57554460694 [ 58.490504][ T5077] get_page_from_freelist+0x742/0x7c0 [ 58.495864][ T5077] __alloc_pages+0x259/0x560 [ 58.500438][ T5077] folio_alloc+0x1a/0x50 [ 58.504669][ T5077] filemap_alloc_folio+0xca/0x2c0 [ 58.509695][ T5077] __filemap_get_folio+0x892/0x1250 [ 58.514877][ T5077] pagecache_get_page+0x28/0x250 [ 58.519800][ T5077] grow_dev_page+0xba/0x920 [ 58.524295][ T5077] __getblk_gfp+0x16c/0x290 [ 58.528798][ T5077] search_by_key+0x406/0x49c0 [ 58.533461][ T5077] reiserfs_read_locked_inode+0x223/0x2990 [ 58.539247][ T5077] reiserfs_fill_super+0x128a/0x24a0 [ 58.544515][ T5077] mount_bdev+0x26c/0x3a0 [ 58.548831][ T5077] legacy_get_tree+0xea/0x180 [ 58.553499][ T5077] vfs_get_tree+0x88/0x270 [ 58.557909][ T5077] do_new_mount+0x289/0xad0 [ 58.562397][ T5077] __se_sys_mount+0x2d3/0x3c0 [ 58.567070][ T5077] page last free stack trace: [ 58.571741][ T5077] free_pcp_prepare+0x751/0x780 [ 58.576582][ T5077] free_unref_page_list+0xb2/0x830 [ 58.581677][ T5077] release_pages+0x233e/0x25e0 [ 58.586430][ T5077] __pagevec_release+0x7d/0xf0 [ 58.591179][ T5077] truncate_inode_pages_range+0x452/0x1690 [ 58.596969][ T5077] blkdev_flush_mapping+0x153/0x2c0 [ 58.602155][ T5077] blkdev_put+0x4a5/0x730 [ 58.606481][ T5077] deactivate_locked_super+0xa7/0xf0 [ 58.611760][ T5077] cleanup_mnt+0x494/0x520 [ 58.616172][ T5077] task_work_run+0x243/0x300 [ 58.620746][ T5077] ptrace_notify+0x29a/0x340 [ 58.625316][ T5077] syscall_exit_work+0x8c/0xe0 [ 58.630070][ T5077] syscall_exit_to_user_mode_prepare+0x63/0xc0 [ 58.636209][ T5077] syscall_exit_to_user_mode+0xa/0x60 [ 58.641565][ T5077] do_syscall_64+0x49/0xb0 [ 58.645963][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.651840][ T5077] [ 58.654148][ T5077] Memory state around the buggy address: [ 58.659757][ T5077] ffff8880729f6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.667798][ T5077] ffff8880729f6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.675849][ T5077] >ffff8880729f7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.683935][ T5077] ^ [ 58.687999][ T5077] ffff8880729f7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.696045][ T5077] ffff8880729f7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.704088][ T5077] ================================================================== [ 58.712794][ T5077] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.719994][ T5077] CPU: 1 PID: 5077 Comm: syz-executor366 Not tainted 6.1.0-syzkaller-14446-g8395ae05cb5a #0 [ 58.730053][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 58.740096][ T5077] Call Trace: [ 58.743367][ T5077] [ 58.746290][ T5077] dump_stack_lvl+0x1b1/0x290 [ 58.750969][ T5077] ? nf_tcp_handle_invalid+0x630/0x630 [ 58.756423][ T5077] ? panic+0x710/0x710 [ 58.760478][ T5077] ? lock_release+0x81/0x820 [ 58.765064][ T5077] ? vscnprintf+0x59/0x80 [ 58.769386][ T5077] panic+0x2d6/0x710 [ 58.773273][ T5077] ? check_panic_on_warn+0x1d/0xa0 [ 58.778378][ T5077] ? memcpy_page_flushcache+0x100/0x100 [ 58.783915][ T5077] ? _raw_spin_unlock_irqrestore+0x110/0x120 [ 58.789887][ T5077] ? _raw_spin_unlock+0x40/0x40 [ 58.794730][ T5077] ? print_report+0x1b4/0x1f0 [ 58.799405][ T5077] check_panic_on_warn+0x80/0xa0 [ 58.804332][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 58.809701][ T5077] end_report+0x47/0x90 [ 58.813850][ T5077] kasan_report+0xda/0x100 [ 58.818260][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 58.823628][ T5077] kasan_check_range+0x2a7/0x2e0 [ 58.828562][ T5077] ? leaf_paste_in_buffer+0x739/0xca0 [ 58.833930][ T5077] memcpy+0x25/0x60 [ 58.837728][ T5077] leaf_paste_in_buffer+0x739/0xca0 [ 58.842925][ T5077] leaf_copy_dir_entries+0x6e2/0xbf0 [ 58.848215][ T5077] ? reacquire_held_locks+0x650/0x650 [ 58.853578][ T5077] ? leaf_item_bottle+0x19a0/0x19a0 [ 58.858768][ T5077] ? validate_chain+0x177/0x6ae0 [ 58.863697][ T5077] ? validate_chain+0x177/0x6ae0 [ 58.868629][ T5077] leaf_copy_boundary_item+0xb7c/0x20f0 [ 58.874172][ T5077] leaf_move_items+0xc74/0x1330 [ 58.879036][ T5077] ? reiserfs_convert_objectid_map_v1+0x6d0/0x6d0 [ 58.885459][ T5077] ? read_lock_is_recursive+0x10/0x10 [ 58.890829][ T5077] leaf_shift_left+0xb7/0x420 [ 58.895509][ T5077] balance_leaf+0x1579/0x123a0 [ 58.900276][ T5077] ? __lock_acquire+0x1292/0x1f60 [ 58.905311][ T5077] ? do_balance+0x8d0/0x8d0 [ 58.909809][ T5077] ? rcu_read_lock_sched_held+0x87/0x110 [ 58.915436][ T5077] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 58.921413][ T5077] ? trace_raw_output_contention_end+0xd0/0xd0 [ 58.927562][ T5077] ? trace_contention_end+0x72/0x1d0 [ 58.932839][ T5077] ? __mutex_lock_common+0x45f/0x26e0 [ 58.938207][ T5077] ? write_boundary_block+0xb0/0xb0 [ 58.943398][ T5077] ? __mutex_unlock_slowpath+0x222/0x770 [ 58.949023][ T5077] ? __might_sleep+0xc0/0xc0 [ 58.953606][ T5077] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 58.959316][ T5077] ? mutex_lock_io_nested+0x60/0x60 [ 58.964505][ T5077] ? get_empty_nodes+0x5a3/0xd00 [ 58.969434][ T5077] ? indirect_part_size+0x8/0x10 [ 58.974363][ T5077] ? __wake_up+0x1f0/0x1f0 [ 58.978784][ T5077] ? get_neighbors+0x1020/0x1020 [ 58.983715][ T5077] ? mutex_lock_nested+0x17/0x20 [ 58.988641][ T5077] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 58.994354][ T5077] ? reiserfs_prepare_for_journal+0x239/0x250 [ 59.000414][ T5077] ? fix_nodes+0x73e4/0x8560 [ 59.005022][ T5077] do_balance+0x2d6/0x8d0 [ 59.009358][ T5077] ? get_right_neighbor_position+0x200/0x200 [ 59.015351][ T5077] ? reiserfs_insert_item+0x67b/0xcb0 [ 59.020733][ T5077] reiserfs_insert_item+0xb54/0xcb0 [ 59.025935][ T5077] ? reiserfs_paste_into_item+0x880/0x880 [ 59.031670][ T5077] ? show_alloc_options+0xbd0/0xbd0 [ 59.036861][ T5077] ? journal_begin+0x1f1/0x350 [ 59.041614][ T5077] ? copy_item_head+0x1e/0x30 [ 59.046293][ T5077] ? reiserfs_get_block+0x1fda/0x5180 [ 59.051661][ T5077] reiserfs_get_block+0x20a2/0x5180 [ 59.056871][ T5077] ? make_le_item_head+0x5b0/0x5b0 [ 59.061975][ T5077] ? register_lock_class+0xc2/0x930 [ 59.067162][ T5077] ? create_page_buffers+0x1c8/0x4b0 [ 59.072439][ T5077] ? __block_write_begin_int+0x1e0/0x1a80 [ 59.078150][ T5077] ? reiserfs_write_begin+0x247/0x510 [ 59.083515][ T5077] ? generic_cont_expand_simple+0x151/0x250 [ 59.089415][ T5077] ? reiserfs_setattr+0x642/0x1200 [ 59.094527][ T5077] ? do_truncate+0x200/0x2f0 [ 59.099101][ T5077] ? do_sys_ftruncate+0x2b0/0x350 [ 59.104116][ T5077] ? is_dynamic_key+0x1f0/0x1f0 [ 59.108960][ T5077] ? mark_lock+0x9a/0x350 [ 59.113282][ T5077] ? __lock_acquire+0x1292/0x1f60 [ 59.118389][ T5077] ? rcu_read_lock_sched_held+0x22/0x110 [ 59.124014][ T5077] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 59.129999][ T5077] ? __lock_acquire+0x1f60/0x1f60 [ 59.135011][ T5077] ? alloc_page_buffers+0x326/0x460 [ 59.140202][ T5077] ? do_raw_spin_unlock+0x134/0x8a0 [ 59.145396][ T5077] ? create_page_buffers+0x244/0x4b0 [ 59.150677][ T5077] __block_write_begin_int+0x54c/0x1a80 [ 59.156214][ T5077] ? xas_load+0x127/0x150 [ 59.160540][ T5077] ? make_le_item_head+0x5b0/0x5b0 [ 59.165641][ T5077] ? page_zero_new_buffers+0x940/0x940 [ 59.171092][ T5077] ? __block_write_begin+0x51/0x150 [ 59.176282][ T5077] ? reiserfs_write_begin+0x180/0x510 [ 59.181647][ T5077] reiserfs_write_begin+0x247/0x510 [ 59.186842][ T5077] generic_cont_expand_simple+0x151/0x250 [ 59.192557][ T5077] ? submit_bh+0x20/0x20 [ 59.196802][ T5077] ? mutex_lock_nested+0x17/0x20 [ 59.201738][ T5077] reiserfs_setattr+0x642/0x1200 [ 59.206669][ T5077] ? reiserfs_commit_write+0x580/0x580 [ 59.212119][ T5077] ? ktime_get_coarse_real_ts64+0x12c/0x140 [ 59.218181][ T5077] ? current_time+0x1ea/0x300 [ 59.222848][ T5077] ? atime_needs_update+0x780/0x780 [ 59.228040][ T5077] ? security_inode_setattr+0x109/0x150 [ 59.233580][ T5077] ? reiserfs_commit_write+0x580/0x580 [ 59.239028][ T5077] notify_change+0xe50/0x1100 [ 59.243699][ T5077] do_truncate+0x200/0x2f0 [ 59.248104][ T5077] ? put_page_bootmem+0x2d0/0x2d0 [ 59.253121][ T5077] do_sys_ftruncate+0x2b0/0x350 [ 59.257959][ T5077] do_syscall_64+0x3d/0xb0 [ 59.262379][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.268263][ T5077] RIP: 0033:0x7fc83331f9e9 [ 59.272668][ T5077] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.292262][ T5077] RSP: 002b:00007ffdd3843518 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 59.300663][ T5077] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fc83331f9e9 [ 59.308624][ T5077] RDX: 00007fc83331f9e9 RSI: 0000000002007ffb RDI: 0000000000000006 [ 59.316587][ T5077] RBP: 0000000000000000 R08: 00007ffdd3843540 R09: 00007ffdd3843540 [ 59.324549][ T5077] R10: 00007ffdd3843540 R11: 0000000000000246 R12: 00007ffdd384353c [ 59.332511][ T5077] R13: 00007ffdd3843570 R14: 00007ffdd3843550 R15: 0000000000000003 [ 59.340484][ T5077] [ 59.343636][ T5077] Kernel Offset: disabled [ 59.347949][ T5077] Rebooting in 86400 seconds..