Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. [ 81.571053][ T13] cfg80211: failed to load regulatory.db 2024/12/29 16:54:29 ignoring optional flag "sandboxArg"="0" 2024/12/29 16:54:29 ignoring optional flag "type"="gce" 2024/12/29 16:54:29 parsed 1 programs 2024/12/29 16:54:31 executed programs: 0 [ 84.664796][ T4437] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.830980][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 84.881118][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.888409][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.896320][ T4470] device bridge_slave_0 entered promiscuous mode [ 84.904887][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.912377][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.920706][ T4470] device bridge_slave_1 entered promiscuous mode [ 84.943313][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.954502][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.978912][ T4470] team0: Port device team_slave_0 added [ 84.986926][ T4470] team0: Port device team_slave_1 added [ 85.006129][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.013370][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.039523][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.051656][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.058675][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.084588][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.116368][ T4470] device hsr_slave_0 entered promiscuous mode [ 85.123432][ T4470] device hsr_slave_1 entered promiscuous mode [ 85.646573][ T4470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.656624][ T4470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.669348][ T4470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.680960][ T4470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.709740][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.716939][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.724405][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.731618][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.791659][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.807055][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.816481][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.826150][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.835827][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 85.849897][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.861249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.870887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.881484][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.888730][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.919755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.929243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.937815][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.944961][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.954131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.964415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.973607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.984157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.993646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.009405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.021383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.030233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.041007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.054176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.063257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.075590][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.189400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.196999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.212275][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.235817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.246554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.269006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.279301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.292601][ T4470] device veth0_vlan entered promiscuous mode [ 86.300163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.309324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.322387][ T4470] device veth1_vlan entered promiscuous mode [ 86.350415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.359542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.367831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.378334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.388140][ T4470] device veth0_macvtap entered promiscuous mode [ 86.402383][ T4470] device veth1_macvtap entered promiscuous mode [ 86.423056][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.431127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.441601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.451075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.461568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.474282][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.483532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.493685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.505498][ T4470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.516537][ T4470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.526471][ T4470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.538145][ T4470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615994][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.628417][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.641538][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.668109][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.676145][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.687621][ T1441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.768778][ T4183] Bluetooth: hci0: command 0x0409 tx timeout [ 86.805657][ T4558] loop0: detected capacity change from 0 to 8192 [ 86.910031][ T4558] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 86.920252][ T4558] REISERFS (device loop0): using ordered data mode [ 86.927025][ T4558] reiserfs: using flush barriers [ 86.937173][ T4558] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.956239][ T4558] REISERFS (device loop0): checking transaction log (loop0) [ 87.042004][ T4558] REISERFS (device loop0): Using tea hash to sort names [ 87.053376][ T4558] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 87.158733][ T4558] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024) [ 87.180348][ T4558] REISERFS (device loop0): Remounting filesystem read-only [ 87.188487][ T4558] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024) [ 87.200628][ T4558] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024) [ 87.212241][ T4558] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared [ 87.224482][ T4558] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared [ 87.235278][ T4558] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS [ 87.459433][ T4593] loop0: detected capacity change from 0 to 8192 [ 87.505815][ T4593] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 87.515403][ T4593] REISERFS (device loop0): using ordered data mode [ 87.522178][ T4593] reiserfs: using flush barriers [ 87.528880][ T4593] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.545760][ T4593] REISERFS (device loop0): checking transaction log (loop0) [ 87.620976][ T4593] REISERFS (device loop0): Using tea hash to sort names [ 87.628414][ T4593] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 87.695223][ T4593] ================================================================== [ 87.703862][ T4593] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x631/0xab0 [ 87.711769][ T4593] Read of size 48 at addr ffff88806e3e5ff0 by task syz-executor.0/4593 [ 87.720131][ T4593] [ 87.722528][ T4593] CPU: 0 PID: 4593 Comm: syz-executor.0 Not tainted 5.15.175-syzkaller #0 [ 87.731216][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.741406][ T4593] Call Trace: [ 87.744709][ T4593] [ 87.747690][ T4593] dump_stack_lvl+0x1e3/0x2d0 [ 87.752434][ T4593] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.758103][ T4593] ? _printk+0xd1/0x120 [ 87.762301][ T4593] ? __wake_up_klogd+0xcc/0x100 [ 87.767271][ T4593] ? panic+0x860/0x860 [ 87.771464][ T4593] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 87.777053][ T4593] ? validate_chain+0x112/0x5930 [ 87.782047][ T4593] print_address_description+0x63/0x3b0 [ 87.787646][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 87.793212][ T4593] kasan_report+0x16b/0x1c0 [ 87.797750][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 87.803335][ T4593] kasan_check_range+0x27e/0x290 [ 87.808437][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 87.813972][ T4593] memcpy+0x25/0x60 [ 87.817817][ T4593] leaf_paste_in_buffer+0x631/0xab0 [ 87.823108][ T4593] leaf_copy_dir_entries+0x71a/0xc60 [ 87.828434][ T4593] ? unwind_next_frame+0x1437/0x1fa0 [ 87.833766][ T4593] ? leaf_copy_items_entirely+0xee0/0xee0 [ 87.839698][ T4593] ? __lock_acquire+0x1295/0x1ff0 [ 87.844769][ T4593] leaf_copy_boundary_item+0xbbe/0x21b0 [ 87.850367][ T4593] ? get_right_neighbor_position+0x14f/0x210 [ 87.856394][ T4593] leaf_move_items+0xcd0/0x28a0 [ 87.861296][ T4593] ? journal_mark_dirty+0xb7e/0xe30 [ 87.866534][ T4593] ? reiserfs_convert_objectid_map_v1+0x450/0x450 [ 87.872990][ T4593] ? __lock_acquire+0x1295/0x1ff0 [ 87.878143][ T4593] ? do_raw_spin_unlock+0x137/0x8b0 [ 87.883683][ T4593] ? _raw_spin_unlock+0x24/0x40 [ 87.888804][ T4593] balance_leaf+0xd479/0x12510 [ 87.893750][ T4593] ? do_balance+0x8f0/0x8f0 [ 87.898338][ T4593] ? __mutex_trylock_common+0x17e/0x2e0 [ 87.904052][ T4593] ? __might_sleep+0xc0/0xc0 [ 87.908685][ T4593] ? rcu_lock_release+0x20/0x20 [ 87.913770][ T4593] ? ____kasan_kmalloc+0xd1/0xf0 [ 87.918744][ T4593] ? __mutex_lock_common+0x444/0x25a0 [ 87.924167][ T4593] ? __mutex_unlock_slowpath+0x218/0x750 [ 87.929847][ T4593] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 87.935613][ T4593] ? get_empty_nodes+0x7ec/0xd70 [ 87.940648][ T4593] ? mutex_lock_io_nested+0x60/0x60 [ 87.945896][ T4593] ? get_neighbors+0x1010/0x1010 [ 87.950868][ T4593] ? create_virtual_node+0x1b7/0x1bf0 [ 87.956401][ T4593] ? __wake_up_bit+0x190/0x190 [ 87.961222][ T4593] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 87.967065][ T4593] ? get_neighbors+0x631/0x1010 [ 87.971961][ T4593] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 87.978066][ T4593] ? fix_nodes+0x7abc/0x8c70 [ 87.982693][ T4593] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.989003][ T4593] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 87.995483][ T4593] do_balance+0x309/0x8f0 [ 87.999853][ T4593] ? get_right_neighbor_position+0x210/0x210 [ 88.006051][ T4593] ? reiserfs_delete_item+0x1030/0x1030 [ 88.011749][ T4593] reiserfs_cut_from_item+0x1945/0x2560 [ 88.017566][ T4593] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 88.023239][ T4593] ? search_by_key+0x4730/0x4730 [ 88.028372][ T4593] ? journal_transaction_should_end+0x298/0x3f0 [ 88.034674][ T4593] reiserfs_do_truncate+0xa12/0x15b0 [ 88.040179][ T4593] ? reiserfs_delete_object+0x1a0/0x1a0 [ 88.045792][ T4593] ? up_write+0x19d/0x580 [ 88.050165][ T4593] ? journal_begin+0x1ef/0x350 [ 88.054970][ T4593] reiserfs_truncate_file+0x638/0xda0 [ 88.060422][ T4593] ? reiserfs_new_symlink+0x760/0x760 [ 88.065887][ T4593] ? truncate_setsize+0xcb/0xf0 [ 88.070973][ T4593] reiserfs_setattr+0xa4d/0xf90 [ 88.075959][ T4593] ? reiserfs_commit_write+0x5a0/0x5a0 [ 88.081459][ T4593] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 88.087706][ T4593] ? current_time+0x1dc/0x300 [ 88.092424][ T4593] ? atime_needs_update+0x7b0/0x7b0 [ 88.097659][ T4593] ? evm_inode_setattr+0xf7/0x5b0 [ 88.102726][ T4593] ? rwsem_write_trylock+0x166/0x210 [ 88.108053][ T4593] ? bpf_lsm_inode_setattr+0x5/0x10 [ 88.113290][ T4593] ? security_inode_setattr+0xce/0x120 [ 88.118782][ T4593] ? reiserfs_commit_write+0x5a0/0x5a0 [ 88.124370][ T4593] notify_change+0xc6d/0xf50 [ 88.129032][ T4593] do_truncate+0x21c/0x300 [ 88.133490][ T4593] ? rcu_lock_release+0x20/0x20 [ 88.138381][ T4593] ? ima_bprm_check+0x2b0/0x2b0 [ 88.143280][ T4593] ? bpf_lsm_path_truncate+0x5/0x10 [ 88.148522][ T4593] path_openat+0x28a3/0x2f20 [ 88.153391][ T4593] ? do_filp_open+0x460/0x460 [ 88.158125][ T4593] do_filp_open+0x21c/0x460 [ 88.162749][ T4593] ? vfs_tmpfile+0x2e0/0x2e0 [ 88.167425][ T4593] ? _raw_spin_unlock+0x24/0x40 [ 88.172334][ T4593] ? alloc_fd+0x598/0x630 [ 88.176726][ T4593] do_sys_openat2+0x13b/0x4f0 [ 88.181443][ T4593] ? read_lock_is_recursive+0x10/0x10 [ 88.186942][ T4593] ? do_sys_open+0x220/0x220 [ 88.191582][ T4593] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 88.197688][ T4593] __x64_sys_creat+0x11f/0x160 [ 88.202489][ T4593] ? __x64_compat_sys_openat+0x290/0x290 [ 88.208165][ T4593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.214280][ T4593] ? lockdep_hardirqs_on+0x94/0x130 [ 88.219517][ T4593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.225553][ T4593] do_syscall_64+0x3b/0xb0 [ 88.230009][ T4593] ? clear_bhb_loop+0x15/0x70 [ 88.234721][ T4593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.240669][ T4593] RIP: 0033:0x7fc1cb25cca9 [ 88.245120][ T4593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.264771][ T4593] RSP: 002b:00007fc1ca5dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 88.273343][ T4593] RAX: ffffffffffffffda RBX: 00007fc1cb38af80 RCX: 00007fc1cb25cca9 [ 88.281350][ T4593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 88.289360][ T4593] RBP: 00007fc1cb2a847e R08: 0000000000000000 R09: 0000000000000000 [ 88.297372][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.305377][ T4593] R13: 000000000000000b R14: 00007fc1cb38af80 R15: 00007ffee6de1d28 [ 88.313750][ T4593] [ 88.316800][ T4593] [ 88.319140][ T4593] The buggy address belongs to the page: [ 88.324795][ T4593] page:ffffea0001b8f940 refcount:2 mapcount:0 mapping:ffff8881408fcf30 index:0x224 pfn:0x6e3e5 [ 88.335670][ T4593] memcg:ffff88802c4e4000 [ 88.339931][ T4593] aops:def_blk_aops ino:700000 [ 88.344805][ T4593] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 88.354659][ T4593] raw: 00fff00000002032 ffffea0001b8f908 ffffea0001b8f848 ffff8881408fcf30 [ 88.363426][ T4593] raw: 0000000000000224 ffff888073462000 00000002ffffffff ffff88802c4e4000 [ 88.372026][ T4593] page dumped because: kasan: bad access detected [ 88.378898][ T4593] page_owner tracks the page as allocated [ 88.384718][ T4593] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4593, ts 87670914016, free_ts 87346714151 [ 88.401937][ T4593] get_page_from_freelist+0x3b78/0x3d40 [ 88.407527][ T4593] __alloc_pages+0x272/0x700 [ 88.412157][ T4593] __page_cache_alloc+0xd4/0x4a0 [ 88.417144][ T4593] pagecache_get_page+0xa91/0x1010 [ 88.422335][ T4593] __getblk_gfp+0x22a/0xaf0 [ 88.426872][ T4593] get_empty_nodes+0x8c1/0xd70 [ 88.431762][ T4593] fix_nodes+0x2615/0x8c70 [ 88.436208][ T4593] reiserfs_paste_into_item+0x65d/0x880 [ 88.441782][ T4593] reiserfs_get_block+0x226a/0x5390 [ 88.447026][ T4593] __block_write_begin_int+0x60b/0x1650 [ 88.452615][ T4593] reiserfs_write_begin+0x346/0x810 [ 88.457844][ T4593] generic_cont_expand_simple+0x144/0x230 [ 88.463597][ T4593] reiserfs_setattr+0x3ff/0xf90 [ 88.468646][ T4593] notify_change+0xc6d/0xf50 [ 88.473273][ T4593] do_truncate+0x21c/0x300 [ 88.477748][ T4593] do_sys_ftruncate+0x2eb/0x390 [ 88.482647][ T4593] page last free stack trace: [ 88.487345][ T4593] free_unref_page_prepare+0xc34/0xcf0 [ 88.492839][ T4593] free_unref_page_list+0x1f7/0x8e0 [ 88.498306][ T4593] release_pages+0x1bb9/0x1f40 [ 88.503112][ T4593] __pagevec_release+0x80/0xf0 [ 88.507991][ T4593] shmem_undo_range+0x67a/0x1b50 [ 88.513215][ T4593] shmem_evict_inode+0x21b/0xa00 [ 88.518181][ T4593] evict+0x529/0x930 [ 88.522109][ T4593] __dentry_kill+0x436/0x650 [ 88.526732][ T4593] dentry_kill+0xbb/0x290 [ 88.531178][ T4593] dput+0xd8/0x1a0 [ 88.534924][ T4593] __fput+0x636/0x8e0 [ 88.538935][ T4593] task_work_run+0x129/0x1a0 [ 88.543556][ T4593] exit_to_user_mode_loop+0x106/0x130 [ 88.548954][ T4593] exit_to_user_mode_prepare+0xb1/0x140 [ 88.554967][ T4593] syscall_exit_to_user_mode+0x5d/0x240 [ 88.560632][ T4593] do_syscall_64+0x47/0xb0 [ 88.565081][ T4593] [ 88.567424][ T4593] Memory state around the buggy address: [ 88.573071][ T4593] ffff88806e3e5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.581171][ T4593] ffff88806e3e5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.589258][ T4593] >ffff88806e3e6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.597601][ T4593] ^ [ 88.601698][ T4593] ffff88806e3e6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.609784][ T4593] ffff88806e3e6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.617868][ T4593] ================================================================== [ 88.625944][ T4593] Disabling lock debugging due to kernel taint [ 88.644688][ T4593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.651917][ T4593] CPU: 0 PID: 4593 Comm: syz-executor.0 Tainted: G B 5.15.175-syzkaller #0 [ 88.661823][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.671898][ T4593] Call Trace: [ 88.675197][ T4593] [ 88.678236][ T4593] dump_stack_lvl+0x1e3/0x2d0 [ 88.682950][ T4593] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 88.688615][ T4593] ? panic+0x860/0x860 [ 88.692713][ T4593] ? preempt_schedule_common+0xa6/0xd0 [ 88.698201][ T4593] ? preempt_schedule+0xd9/0xe0 [ 88.703191][ T4593] panic+0x318/0x860 [ 88.707200][ T4593] ? check_panic_on_warn+0x1d/0xa0 [ 88.712449][ T4593] ? fb_is_primary_device+0xd0/0xd0 [ 88.717685][ T4593] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 88.723779][ T4593] ? _raw_spin_unlock+0x40/0x40 [ 88.728749][ T4593] check_panic_on_warn+0x7e/0xa0 [ 88.733745][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 88.739150][ T4593] end_report+0x6d/0xf0 [ 88.743422][ T4593] kasan_report+0x18e/0x1c0 [ 88.748058][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 88.753471][ T4593] kasan_check_range+0x27e/0x290 [ 88.758523][ T4593] ? leaf_paste_in_buffer+0x631/0xab0 [ 88.763927][ T4593] memcpy+0x25/0x60 [ 88.767849][ T4593] leaf_paste_in_buffer+0x631/0xab0 [ 88.773059][ T4593] leaf_copy_dir_entries+0x71a/0xc60 [ 88.778342][ T4593] ? unwind_next_frame+0x1437/0x1fa0 [ 88.783924][ T4593] ? leaf_copy_items_entirely+0xee0/0xee0 [ 88.789684][ T4593] ? __lock_acquire+0x1295/0x1ff0 [ 88.794729][ T4593] leaf_copy_boundary_item+0xbbe/0x21b0 [ 88.800289][ T4593] ? get_right_neighbor_position+0x14f/0x210 [ 88.806314][ T4593] leaf_move_items+0xcd0/0x28a0 [ 88.811182][ T4593] ? journal_mark_dirty+0xb7e/0xe30 [ 88.816579][ T4593] ? reiserfs_convert_objectid_map_v1+0x450/0x450 [ 88.823008][ T4593] ? __lock_acquire+0x1295/0x1ff0 [ 88.828209][ T4593] ? do_raw_spin_unlock+0x137/0x8b0 [ 88.833486][ T4593] ? _raw_spin_unlock+0x24/0x40 [ 88.838352][ T4593] balance_leaf+0xd479/0x12510 [ 88.843130][ T4593] ? do_balance+0x8f0/0x8f0 [ 88.847803][ T4593] ? __mutex_trylock_common+0x17e/0x2e0 [ 88.853367][ T4593] ? __might_sleep+0xc0/0xc0 [ 88.857972][ T4593] ? rcu_lock_release+0x20/0x20 [ 88.862835][ T4593] ? ____kasan_kmalloc+0xd1/0xf0 [ 88.867788][ T4593] ? __mutex_lock_common+0x444/0x25a0 [ 88.873161][ T4593] ? __mutex_unlock_slowpath+0x218/0x750 [ 88.878965][ T4593] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 88.884860][ T4593] ? get_empty_nodes+0x7ec/0xd70 [ 88.889832][ T4593] ? mutex_lock_io_nested+0x60/0x60 [ 88.895032][ T4593] ? get_neighbors+0x1010/0x1010 [ 88.900053][ T4593] ? create_virtual_node+0x1b7/0x1bf0 [ 88.905448][ T4593] ? __wake_up_bit+0x190/0x190 [ 88.910205][ T4593] ? reiserfs_write_lock_nested+0x5b/0xd0 [ 88.915923][ T4593] ? get_neighbors+0x631/0x1010 [ 88.920801][ T4593] ? reiserfs_prepare_for_journal+0x26b/0x280 [ 88.926977][ T4593] ? fix_nodes+0x7abc/0x8c70 [ 88.931584][ T4593] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.937861][ T4593] ? reiserfs_restore_prepared_buffer+0x2de/0x300 [ 88.944308][ T4593] do_balance+0x309/0x8f0 [ 88.948650][ T4593] ? get_right_neighbor_position+0x210/0x210 [ 88.954640][ T4593] ? reiserfs_delete_item+0x1030/0x1030 [ 88.960191][ T4593] reiserfs_cut_from_item+0x1945/0x2560 [ 88.965831][ T4593] ? reiserfs_do_truncate+0x15b0/0x15b0 [ 88.971396][ T4593] ? search_by_key+0x4730/0x4730 [ 88.976377][ T4593] ? journal_transaction_should_end+0x298/0x3f0 [ 88.982617][ T4593] reiserfs_do_truncate+0xa12/0x15b0 [ 88.987907][ T4593] ? reiserfs_delete_object+0x1a0/0x1a0 [ 88.993627][ T4593] ? up_write+0x19d/0x580 [ 88.998086][ T4593] ? journal_begin+0x1ef/0x350 [ 89.002865][ T4593] reiserfs_truncate_file+0x638/0xda0 [ 89.008248][ T4593] ? reiserfs_new_symlink+0x760/0x760 [ 89.013627][ T4593] ? truncate_setsize+0xcb/0xf0 [ 89.018605][ T4593] reiserfs_setattr+0xa4d/0xf90 [ 89.023572][ T4593] ? reiserfs_commit_write+0x5a0/0x5a0 [ 89.029029][ T4593] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 89.035009][ T4593] ? current_time+0x1dc/0x300 [ 89.039699][ T4593] ? atime_needs_update+0x7b0/0x7b0 [ 89.044897][ T4593] ? evm_inode_setattr+0xf7/0x5b0 [ 89.049943][ T4593] ? rwsem_write_trylock+0x166/0x210 [ 89.055335][ T4593] ? bpf_lsm_inode_setattr+0x5/0x10 [ 89.060617][ T4593] ? security_inode_setattr+0xce/0x120 [ 89.066094][ T4593] ? reiserfs_commit_write+0x5a0/0x5a0 [ 89.071550][ T4593] notify_change+0xc6d/0xf50 [ 89.076243][ T4593] do_truncate+0x21c/0x300 [ 89.080700][ T4593] ? rcu_lock_release+0x20/0x20 [ 89.085549][ T4593] ? ima_bprm_check+0x2b0/0x2b0 [ 89.090420][ T4593] ? bpf_lsm_path_truncate+0x5/0x10 [ 89.095635][ T4593] path_openat+0x28a3/0x2f20 [ 89.100248][ T4593] ? do_filp_open+0x460/0x460 [ 89.104929][ T4593] do_filp_open+0x21c/0x460 [ 89.109523][ T4593] ? vfs_tmpfile+0x2e0/0x2e0 [ 89.114118][ T4593] ? _raw_spin_unlock+0x24/0x40 [ 89.118968][ T4593] ? alloc_fd+0x598/0x630 [ 89.123304][ T4593] do_sys_openat2+0x13b/0x4f0 [ 89.127980][ T4593] ? read_lock_is_recursive+0x10/0x10 [ 89.133355][ T4593] ? do_sys_open+0x220/0x220 [ 89.137943][ T4593] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 89.143928][ T4593] __x64_sys_creat+0x11f/0x160 [ 89.148699][ T4593] ? __x64_compat_sys_openat+0x290/0x290 [ 89.154351][ T4593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 89.160413][ T4593] ? lockdep_hardirqs_on+0x94/0x130 [ 89.165630][ T4593] ? syscall_enter_from_user_mode+0x2e/0x240 [ 89.171617][ T4593] do_syscall_64+0x3b/0xb0 [ 89.176050][ T4593] ? clear_bhb_loop+0x15/0x70 [ 89.180725][ T4593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.186618][ T4593] RIP: 0033:0x7fc1cb25cca9 [ 89.191028][ T4593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.210628][ T4593] RSP: 002b:00007fc1ca5dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 89.219083][ T4593] RAX: ffffffffffffffda RBX: 00007fc1cb38af80 RCX: 00007fc1cb25cca9 [ 89.227086][ T4593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 89.235067][ T4593] RBP: 00007fc1cb2a847e R08: 0000000000000000 R09: 0000000000000000 [ 89.243050][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.251029][ T4593] R13: 000000000000000b R14: 00007fc1cb38af80 R15: 00007ffee6de1d28 [ 89.259008][ T4593] [ 89.262272][ T4593] Kernel Offset: disabled [ 89.266625][ T4593] Rebooting in 86400 seconds..