[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.060399] audit: type=1400 audit(1600738725.273:8): avc: denied { execmem } for pid=6362 comm="syz-executor923" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.077470] REISERFS (device loop0): found reiserfs format "3.6" with standard journal [ 35.092359] REISERFS (device loop0): using ordered data mode [ 35.098444] reiserfs: using flush barriers [ 35.104303] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 35.121677] REISERFS (device loop0): checking transaction log (loop0) [ 35.716516] REISERFS (device loop0): Using tea hash to sort names [ 35.723086] kasan: CONFIG_KASAN_INLINE enabled [ 35.727702] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 35.735148] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 35.741381] Modules linked in: [ 35.744552] CPU: 1 PID: 6362 Comm: syz-executor923 Not tainted 4.14.198-syzkaller #0 [ 35.752410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.761744] task: ffff888084600440 task.stack: ffff888092890000 [ 35.767785] RIP: 0010:open_xa_dir+0xdf/0x600 [ 35.772163] RSP: 0018:ffff8880928977f8 EFLAGS: 00010202 [ 35.777506] RAX: ffff88809754ac80 RBX: ffff88807c811748 RCX: 000000000000000b [ 35.784765] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff8880862baf48 [ 35.792012] RBP: ffff8880862bad80 R08: ffff88809754b300 R09: 0000000000000002 [ 35.799271] R10: 0000000000000000 R11: ffff888084600440 R12: 1ffff11012512f01 [ 35.806786] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000058 [ 35.814043] FS: 0000000002144880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 35.822337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.828202] CR2: 0000557769261970 CR3: 000000009fdea000 CR4: 00000000001406e0 [ 35.835929] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.843197] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.850460] Call Trace: [ 35.853035] ? trace_hardirqs_on+0x10/0x10 [ 35.857260] ? xattr_mkdir.constprop.0+0xb0/0xb0 [ 35.861997] xattr_lookup+0x1f/0x350 [ 35.865702] ? reiserfs_set_acl+0x570/0x570 [ 35.870018] reiserfs_xattr_get+0x8b/0x840 [ 35.874272] ? lock_downgrade+0x740/0x740 [ 35.878406] ? reiserfs_set_acl+0x570/0x570 [ 35.882711] reiserfs_get_acl+0x48/0x520 [ 35.886750] ? get_cached_acl+0x5d/0x320 [ 35.890785] ? get_cached_acl+0x17e/0x320 [ 35.894911] ? reiserfs_set_acl+0x570/0x570 [ 35.899219] get_acl+0x11f/0x210 [ 35.902575] generic_permission+0x31e/0x3c0 [ 35.906884] ? reiserfs_listxattr+0x270/0x270 [ 35.911371] reiserfs_permission+0x53/0x70 [ 35.915583] __inode_permission+0x1f1/0x2f0 [ 35.919893] lookup_one_len+0x25d/0x3a0 [ 35.924021] ? lookup_one_len_unlocked+0x410/0x410 [ 35.928950] reiserfs_lookup_privroot+0x92/0x270 [ 35.933688] reiserfs_fill_super+0x1ad8/0x28b6 [ 35.938259] ? reiserfs_remount+0x1390/0x1390 [ 35.942753] ? lock_downgrade+0x740/0x740 [ 35.947143] ? snprintf+0xa5/0xd0 [ 35.950574] mount_bdev+0x2b3/0x360 [ 35.954190] ? reiserfs_remount+0x1390/0x1390 [ 35.958672] mount_fs+0x92/0x2a0 [ 35.962015] vfs_kern_mount.part.0+0x5b/0x470 [ 35.966511] do_mount+0xe53/0x2a00 [ 35.970027] ? do_raw_spin_unlock+0x164/0x220 [ 35.974779] ? copy_mount_string+0x40/0x40 [ 35.978992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 35.983996] ? copy_mnt_ns+0xa30/0xa30 [ 35.987860] ? copy_mount_options+0x1fa/0x2f0 [ 35.992349] ? copy_mnt_ns+0xa30/0xa30 [ 35.996216] SyS_mount+0xa8/0x120 [ 35.999646] ? copy_mnt_ns+0xa30/0xa30 [ 36.003512] do_syscall_64+0x1d5/0x640 [ 36.007385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 36.012550] RIP: 0033:0x446f6a [ 36.015726] RSP: 002b:00007ffd51f04728 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 36.023422] RAX: ffffffffffffffda RBX: 00007ffd51f04780 RCX: 0000000000446f6a [ 36.030688] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd51f04740 [ 36.037946] RBP: 00007ffd51f04740 R08: 00007ffd51f04780 R09: 00007ffd00000015 [ 36.045192] R10: 0000000000010000 R11: 0000000000000297 R12: 0000000000000007 [ 36.052440] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 36.059709] Code: f9 48 c1 e9 03 80 3c 11 00 0f 85 67 04 00 00 4c 8b ad c8 01 00 00 48 ba 00 00 00 00 00 fc ff df 4d 8d 7d 58 4c 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 04 00 00 49 8b 6d 58 4c 89 44 24 08 48 89 [ 36.079315] RIP: open_xa_dir+0xdf/0x600 RSP: ffff8880928977f8 [ 36.085441] ---[ end trace 3b87c4858f8bb4bd ]--- [ 36.090189] Kernel panic - not syncing: Fatal exception [ 36.096569] Kernel Offset: disabled [ 36.100180] Rebooting in 86400 seconds..