[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 43.326116] audit: type=1400 audit(1601986993.566:8): avc: denied { execmem } for pid=6490 comm="syz-executor724" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.361608] IPVS: ftp: loaded support on port[0] = 21 [ 43.417219] REISERFS (device loop0): found reiserfs format "3.6" with standard journal [ 43.425733] REISERFS (device loop0): using ordered data mode [ 43.431985] reiserfs: using flush barriers [ 43.437475] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 43.457840] REISERFS (device loop0): checking transaction log (loop0) [ 43.468826] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 43.484410] REISERFS (device loop0): Using tea hash to sort names [ 43.551421] REISERFS (device loop0): found reiserfs format "3.6" with standard journal [ 43.559936] REISERFS (device loop0): using ordered data mode [ 43.565848] reiserfs: using flush barriers [ 43.571587] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 43.589517] REISERFS (device loop0): checking transaction log (loop0) [ 43.597860] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 43.615163] REISERFS (device loop0): Using tea hash to sort names [ 43.622568] ------------[ cut here ]------------ [ 43.627443] kernel BUG at fs/reiserfs/journal.c:3643! [ 43.634268] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 43.639644] CPU: 0 PID: 6515 Comm: syz-executor724 Not tainted 4.19.149-syzkaller #0 [ 43.647521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.656877] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 43.661802] Code: 72 e7 84 ff 0f 0b 48 c7 c7 20 b5 9f 89 e8 d4 32 c9 01 e8 5f e7 84 ff 0f 0b 48 c7 c7 e0 b4 9f 89 e8 c1 32 c9 01 e8 4c e7 84 ff <0f> 0b 48 c7 c7 a0 b4 9f 89 e8 ae 32 c9 01 e8 39 e7 84 ff 0f 0b 48 [ 43.680698] RSP: 0018:ffff8880a3dff990 EFLAGS: 00010293 [ 43.686093] RAX: ffff8880a6326400 RBX: ffffc90005c49000 RCX: ffffffff81ecba13 [ 43.693356] RDX: 0000000000000000 RSI: ffffffff81eceb14 RDI: 0000000000000007 [ 43.700612] RBP: ffff8880a36b4780 R08: 0000000000000001 R09: 0000000000000000 [ 43.707904] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 43.715175] R13: ffffc90005c49058 R14: ffff8880a3dffbd0 R15: 0000000000000000 [ 43.722448] FS: 00007f5ba5294700(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 43.730664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.736537] CR2: 00007f0e6f636000 CR3: 00000000a7a70000 CR4: 00000000001406f0 [ 43.743799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.751045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.758293] Call Trace: [ 43.760880] ? reiserfs_info.cold+0x1d/0x7c [ 43.765181] ? wake_up_var+0x110/0x110 [ 43.769048] journal_end+0x277/0x310 [ 43.772739] reiserfs_fill_super+0x21be/0x2e60 [ 43.777298] ? reiserfs_remount+0x1640/0x1640 [ 43.781775] ? lock_downgrade+0x750/0x750 [ 43.785903] ? snprintf+0xbb/0xf0 [ 43.789338] ? __mutex_add_waiter+0x160/0x160 [ 43.793813] mount_bdev+0x2fc/0x3b0 [ 43.797418] ? reiserfs_remount+0x1640/0x1640 [ 43.801892] mount_fs+0xa3/0x318 [ 43.805245] vfs_kern_mount.part.0+0x68/0x470 [ 43.809739] do_mount+0x51c/0x2f10 [ 43.813258] ? check_preemption_disabled+0x41/0x2b0 [ 43.818253] ? copy_mount_string+0x40/0x40 [ 43.822469] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 43.827307] ? _copy_from_user+0xd2/0x130 [ 43.831455] ? copy_mount_options+0x261/0x370 [ 43.835926] ksys_mount+0xcf/0x130 [ 43.839460] __x64_sys_mount+0xba/0x150 [ 43.843413] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 43.847973] do_syscall_64+0xf9/0x670 [ 43.851773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.856939] RIP: 0033:0x44e6ca [ 43.860113] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d 9f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 1a 9f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 43.879006] RSP: 002b:00007f5ba5293bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 43.886690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000044e6ca [ 43.893937] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5ba5293c10 [ 43.901186] RBP: 00007f5ba5293c10 R08: 00007f5ba5293c50 R09: 0000000000000000 [ 43.908448] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 [ 43.915695] R13: 00007f5ba5293c50 R14: 00007f5ba52946d0 R15: 0000000000000003 [ 43.922946] Modules linked in: [ 43.928146] ---[ end trace fdb84bdec58456d3 ]--- [ 43.932976] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 43.937955] Code: 72 e7 84 ff 0f 0b 48 c7 c7 20 b5 9f 89 e8 d4 32 c9 01 e8 5f e7 84 ff 0f 0b 48 c7 c7 e0 b4 9f 89 e8 c1 32 c9 01 e8 4c e7 84 ff <0f> 0b 48 c7 c7 a0 b4 9f 89 e8 ae 32 c9 01 e8 39 e7 84 ff 0f 0b 48 [ 43.957658] RSP: 0018:ffff8880a3dff990 EFLAGS: 00010293 [ 43.963089] RAX: ffff8880a6326400 RBX: ffffc90005c49000 RCX: ffffffff81ecba13 [ 43.970416] RDX: 0000000000000000 RSI: ffffffff81eceb14 RDI: 0000000000000007 [ 43.977696] RBP: ffff8880a36b4780 R08: 0000000000000001 R09: 0000000000000000 [ 43.984997] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 43.992390] R13: ffffc90005c49058 R14: ffff8880a3dffbd0 R15: 0000000000000000 [ 43.999724] FS: 00007f5ba5294700(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 44.007955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.013863] CR2: 00005575b9546d50 CR3: 00000000a7a70000 CR4: 00000000001406e0 [ 44.021195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.028513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.035780] Kernel panic - not syncing: Fatal exception [ 44.042159] Kernel Offset: disabled [ 44.045790] Rebooting in 86400 seconds..