[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 44.536345] audit: type=1400 audit(1600649102.775:8): avc: denied { execmem } for pid=6492 comm="syz-executor072" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.580122] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 44.590589] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 44.592631] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 44.603662] REISERFS (device loop1): using ordered data mode [ 44.615446] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 44.620361] REISERFS (device loop5): using ordered data mode [ 44.624139] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 44.636005] reiserfs: using flush barriers [ 44.638490] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 44.650812] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.651276] REISERFS (device loop3): using ordered data mode [ 44.674450] REISERFS (device loop2): using ordered data mode [ 44.680841] REISERFS (device loop4): using ordered data mode [ 44.687132] reiserfs: using flush barriers [ 44.692007] REISERFS (device loop0): using ordered data mode [ 44.698363] reiserfs: using flush barriers [ 44.707702] reiserfs: using flush barriers [ 44.714162] reiserfs: using flush barriers [ 44.715420] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.720790] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.747364] REISERFS (device loop5): checking transaction log (loop5) [ 44.755065] reiserfs: using flush barriers [ 44.762599] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.779972] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.798778] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 44.809762] REISERFS (device loop1): checking transaction log (loop1) [ 44.821097] REISERFS (device loop3): checking transaction log (loop3) [ 44.828155] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.829080] REISERFS (device loop2): checking transaction log (loop2) [ 44.859056] REISERFS (device loop4): checking transaction log (loop4) [ 44.870003] REISERFS (device loop0): checking transaction log (loop0) [ 44.880064] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.882568] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.911275] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.917692] REISERFS (device loop5): Using rupasov hash to sort names [ 44.926940] REISERFS (device loop3): Using rupasov hash to sort names [ 44.940289] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.952354] REISERFS (device loop5): using 3.5.x disk format [ 44.956558] REISERFS (device loop0): Using rupasov hash to sort names [ 44.968334] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 44.984649] REISERFS (device loop3): using 3.5.x disk format [ 44.990954] REISERFS (device loop0): using 3.5.x disk format [ 44.998711] REISERFS (device loop4): Using rupasov hash to sort names [ 45.008884] REISERFS (device loop2): Using rupasov hash to sort names [ 45.013438] REISERFS (device loop1): Using rupasov hash to sort names [ 45.020142] REISERFS (device loop4): using 3.5.x disk format [ 45.029273] REISERFS (device loop2): using 3.5.x disk format [ 45.048317] REISERFS (device loop1): using 3.5.x disk format [ 45.179697] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 45.205015] REISERFS (device loop5): using ordered data mode [ 45.205329] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 45.225334] REISERFS (device loop3): using ordered data mode [ 45.229685] reiserfs: using flush barriers [ 45.231987] reiserfs: using flush barriers executing program executing program executing program executing program [ 45.273728] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.283730] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.306944] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 45.313338] REISERFS (device loop5): checking transaction log (loop5) [ 45.321013] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 45.331263] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 45.341693] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.347341] REISERFS (device loop3): checking transaction log (loop3) [ 45.366981] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 45.369682] REISERFS (device loop5): Using rupasov hash to sort names [ 45.377123] REISERFS (device loop1): using ordered data mode [ 45.389915] REISERFS (device loop2): using ordered data mode [ 45.394133] REISERFS (device loop5): using 3.5.x disk format [ 45.397545] REISERFS (device loop4): using ordered data mode [ 45.407513] REISERFS (device loop0): using ordered data mode [ 45.407518] reiserfs: using flush barriers [ 45.409625] ------------[ cut here ]------------ [ 45.414361] reiserfs: using flush barriers [ 45.417655] kernel BUG at fs/reiserfs/journal.c:3643! [ 45.420477] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.431327] reiserfs: using flush barriers [ 45.445127] REISERFS (device loop0): checking transaction log (loop0) [ 45.449264] reiserfs: using flush barriers [ 45.453042] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.458573] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.462606] CPU: 0 PID: 6548 Comm: syz-executor072 Not tainted 4.19.146-syzkaller #0 [ 45.462614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.462633] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 45.462647] Code: 42 ff 84 ff 0f 0b 48 c7 c7 a0 af 9f 89 e8 44 27 c9 01 e8 2f ff 84 ff 0f 0b 48 c7 c7 60 af 9f 89 e8 31 27 c9 01 e8 1c ff 84 ff <0f> 0b 48 c7 c7 20 af 9f 89 e8 1e 27 c9 01 e8 09 ff 84 ff 0f 0b 48 [ 45.470745] REISERFS (device loop2): checking transaction log (loop2) [ 45.483482] RSP: 0018:ffff88809de37990 EFLAGS: 00010293 [ 45.483492] RAX: ffff8880a3d405c0 RBX: ffffc900068e4000 RCX: ffffffff81ec92c3 [ 45.483500] RDX: 0000000000000000 RSI: ffffffff81ecc3c4 RDI: 0000000000000007 [ 45.483507] RBP: ffff8880886082c0 R08: 0000000000000001 R09: 0000000000000000 [ 45.483513] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 45.483521] R13: ffffc900068e4058 R14: ffff88809de37bd0 R15: 0000000000000000 [ 45.483529] FS: 00007fd405c23700(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 45.483535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.483542] CR2: 00007fbf115c6000 CR3: 00000000968c1000 CR4: 00000000001406f0 [ 45.483551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.483557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.483560] Call Trace: [ 45.483589] ? reiserfs_info.cold+0x1d/0x7c [ 45.492702] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.500791] ? __reiserfs_warning+0xc0/0xc0 [ 45.500810] journal_end+0x277/0x310 [ 45.500824] reiserfs_fill_super+0x21be/0x2e60 [ 45.500839] ? reiserfs_remount+0x1640/0x1640 [ 45.500850] ? lock_downgrade+0x750/0x750 [ 45.500867] ? snprintf+0xbb/0xf0 [ 45.506912] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 45.524689] ? __mutex_add_waiter+0x160/0x160 [ 45.524709] mount_bdev+0x2fc/0x3b0 [ 45.524719] ? reiserfs_remount+0x1640/0x1640 [ 45.524731] mount_fs+0xa3/0x318 [ 45.524746] vfs_kern_mount.part.0+0x68/0x470 [ 45.524758] do_mount+0x51c/0x2f10 [ 45.524769] ? do_raw_spin_unlock+0x171/0x240 [ 45.524780] ? check_preemption_disabled+0x41/0x2b0 [ 45.524794] ? copy_mount_string+0x40/0x40 [ 45.593426] init_special_inode: bogus i_mode (0) for inode loop3:2 [ 45.594479] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 45.594497] ? copy_mount_options+0x261/0x370 [ 45.601766] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.609008] ksys_mount+0xcf/0x130 [ 45.609021] __x64_sys_mount+0xba/0x150 [ 45.609033] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 45.609046] do_syscall_64+0xf9/0x670 [ 45.609063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.612783] init_special_inode: bogus i_mode (0) for inode loop0:2 [ 45.615923] RIP: 0033:0x44d4fa [ 45.615937] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad a0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a a0 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 45.615943] RSP: 002b:00007fd405c22bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 45.615953] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d4fa [ 45.615959] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fd405c22c10 [ 45.615967] RBP: 00007fd405c22c10 R08: 00007fd405c22c50 R09: 0000000000000000 [ 45.615973] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 [ 45.615979] R13: 00007fd405c22c50 R14: 00007fd405c236d0 R15: 0000000000000005 [ 45.615989] Modules linked in: [ 45.645982] REISERFS (device loop3): Using rupasov hash to sort names [ 45.671873] ---[ end trace 68b783f3b3b09c30 ]--- [ 45.691195] REISERFS (device loop4): checking transaction log (loop4) [ 45.692763] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 45.707679] init_special_inode: bogus i_mode (0) for inode loop4:2 [ 45.711182] Code: 42 ff 84 ff 0f 0b 48 c7 c7 a0 af 9f 89 e8 44 27 c9 01 e8 2f ff 84 ff 0f 0b 48 c7 c7 60 af 9f 89 e8 31 27 c9 01 e8 1c ff 84 ff <0f> 0b 48 c7 c7 20 af 9f 89 e8 1e 27 c9 01 e8 09 ff 84 ff 0f 0b 48 [ 45.716403] init_special_inode: bogus i_mode (0) for inode loop2:2 [ 45.721888] RSP: 0018:ffff88809de37990 EFLAGS: 00010293 [ 45.727562] REISERFS (device loop1): checking transaction log (loop1) [ 45.742075] RAX: ffff8880a3d405c0 RBX: ffffc900068e4000 RCX: ffffffff81ec92c3 [ 45.750267] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.753796] RDX: 0000000000000000 RSI: ffffffff81ecc3c4 RDI: 0000000000000007 [ 45.757653] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.762863] RBP: ffff8880886082c0 R08: 0000000000000001 R09: 0000000000000000 [ 45.777998] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.791809] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 45.807905] REISERFS (device loop0): Using rupasov hash to sort names [ 45.814728] R13: ffffc900068e4058 R14: ffff88809de37bd0 R15: 0000000000000000 [ 45.826187] REISERFS (device loop2): Using rupasov hash to sort names [ 45.828457] FS: 00007fd405c23700(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 45.851060] init_special_inode: bogus i_mode (0) for inode loop1:2 [ 45.856883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.878307] REISERFS (device loop0): using 3.5.x disk format [ 45.886652] CR2: 00007fbf115ce000 CR3: 00000000968c1000 CR4: 00000000001406f0 [ 45.894742] REISERFS (device loop2): using 3.5.x disk format [ 45.898364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.909142] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 45.912261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.927965] REISERFS (device loop1): Using rupasov hash to sort names [ 45.936005] REISERFS (device loop3): using 3.5.x disk format [ 45.950181] REISERFS (device loop1): using 3.5.x disk format [ 45.960811] REISERFS (device loop4): Using rupasov hash to sort names [ 45.989262] Kernel panic - not syncing: Fatal exception [ 45.998264] ------------[ cut here ]------------ [ 46.103412] kernel BUG at fs/reiserfs/journal.c:3643! [ 46.109662] Kernel Offset: disabled [ 46.113276] Rebooting in 86400 seconds..