[ OK ] Found device /dev/ttyS0. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 28.633330] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 28.642483] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 28.654094] REISERFS (device loop0): using ordered data mode [ 28.661156] REISERFS (device loop1): using ordered data mode [ 28.676898] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 28.680429] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 28.693827] REISERFS (device loop2): using ordered data mode [ 28.694441] reiserfs: using flush barriers [ 28.704116] reiserfs: using flush barriers [ 28.706896] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 28.710619] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.718499] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 28.733225] REISERFS (device loop3): using ordered data mode [ 28.746262] reiserfs: using flush barriers [ 28.746737] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.770949] reiserfs: using flush barriers [ 28.771825] REISERFS (device loop4): using ordered data mode [ 28.776311] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.783871] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.797185] REISERFS (device loop1): checking transaction log (loop1) [ 28.819615] REISERFS (device loop0): checking transaction log (loop0) [ 28.821257] reiserfs: using flush barriers [ 28.829905] REISERFS (device loop3): checking transaction log (loop3) [ 28.846676] REISERFS (device loop5): using ordered data mode [ 28.858533] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.876560] REISERFS (device loop4): checking transaction log (loop4) [ 28.890008] reiserfs: using flush barriers [ 28.946047] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.961877] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 28.999999] REISERFS (device loop4): Using r5 hash to sort names [ 29.012078] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.029243] REISERFS (device loop0): Using r5 hash to sort names [ 29.033163] REISERFS (device loop2): checking transaction log (loop2) executing program executing program [ 29.089924] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.105680] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.119342] REISERFS (device loop5): checking transaction log (loop5) [ 29.160251] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 29.169724] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 29.194392] REISERFS (device loop3): Using r5 hash to sort names [ 29.201699] REISERFS (device loop4): using ordered data mode [ 29.210910] REISERFS (device loop1): Using r5 hash to sort names [ 29.217479] reiserfs: using flush barriers [ 29.218618] REISERFS (device loop0): using ordered data mode [ 29.237096] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.260984] REISERFS (device loop4): checking transaction log (loop4) [ 29.267491] reiserfs: using flush barriers [ 29.283418] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore executing program [ 29.318054] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.338571] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.357238] REISERFS (device loop4): Using r5 hash to sort names [ 29.363405] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.365871] REISERFS (device loop0): checking transaction log (loop0) [ 29.379393] REISERFS (device loop2): Using r5 hash to sort names [ 29.393551] REISERFS (device loop5): Using r5 hash to sort names executing program [ 29.420148] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 29.430459] REISERFS (device loop3): using ordered data mode [ 29.445939] reiserfs: using flush barriers [ 29.460521] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.478369] REISERFS (device loop0): Using r5 hash to sort names executing program executing program [ 29.522922] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.549259] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 29.562096] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 29.562575] REISERFS (device loop1): using ordered data mode [ 29.582533] REISERFS (device loop3): checking transaction log (loop3) [ 29.591722] REISERFS (device loop4): using ordered data mode [ 29.591970] reiserfs: using flush barriers [ 29.603537] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 29.604480] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 29.630425] reiserfs: using flush barriers [ 29.638478] REISERFS (device loop2): using ordered data mode [ 29.638792] REISERFS (device loop5): using ordered data mode [ 29.652071] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 executing program [ 29.652836] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.667784] reiserfs: using flush barriers [ 29.699116] reiserfs: using flush barriers [ 29.709356] REISERFS (device loop4): checking transaction log (loop4) [ 29.722982] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 29.732402] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.739255] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.776314] REISERFS (device loop0): using ordered data mode [ 29.782702] reiserfs: using flush barriers [ 29.789964] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.807585] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 29.824018] REISERFS (device loop0): checking transaction log (loop0) [ 29.841960] REISERFS (device loop1): checking transaction log (loop1) [ 29.871485] REISERFS (device loop2): checking transaction log (loop2) [ 29.902947] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 29.919439] REISERFS (device loop0): Using r5 hash to sort names [ 29.930685] REISERFS (device loop5): checking transaction log (loop5) [ 29.942106] REISERFS (device loop3): Using r5 hash to sort names [ 29.984070] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore executing program [ 30.061448] REISERFS (device loop4): Using r5 hash to sort names [ 30.090751] ------------[ cut here ]------------ [ 30.095638] kernel BUG at fs/reiserfs/journal.c:3654! [ 30.107375] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 30.124277] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 30.140804] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 30.146171] Modules linked in: [ 30.149360] CPU: 0 PID: 8051 Comm: syz-executor837 Not tainted 4.14.241-syzkaller #0 [ 30.157321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.166666] task: ffff8880945e4280 task.stack: ffff888094470000 [ 30.172717] RIP: 0010:do_journal_end+0x30ee/0x4260 [ 30.177634] RSP: 0018:ffff8880944779f8 EFLAGS: 00010297 [ 30.182989] RAX: ffff8880945e4280 RBX: ffffc90005f05000 RCX: 0000000000000000 [ 30.190247] RDX: 0000000000000000 RSI: ffff888094477c30 RDI: ffff888094477c3c [ 30.197506] RBP: ffff8880af7b4b00 R08: 0000000000000000 R09: 000000000004057d [ 30.201497] init_special_inode: bogus i_mode (0) for inode loop5:2 [ 30.204870] R10: ffff8880945e4b58 R11: ffff8880945e4280 R12: 0000000000000000 [ 30.204875] R13: ffffc90005f05058 R14: ffffc90005f05048 R15: ffff888094477c38 [ 30.204881] FS: 00007fd7ce9ad700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 30.204885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.204889] CR2: 00007f3eb3c0c000 CR3: 00000000a194d000 CR4: 00000000001406f0 [ 30.204896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.204899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.204901] Call Trace: [ 30.204917] ? do_journal_end+0x4260/0x4260 [ 30.204925] ? reiserfs_info.cold+0x1d/0x67 [ 30.204936] ? do_raw_spin_unlock+0x164/0x220 [ 30.223356] REISERFS (device loop1): Using r5 hash to sort names [ 30.226171] journal_end+0x259/0x300 [ 30.226181] reiserfs_fill_super+0x1ac0/0x28c0 [ 30.226190] ? reiserfs_remount+0x1390/0x1390 [ 30.226199] ? lock_downgrade+0x740/0x740 [ 30.226207] ? snprintf+0xa5/0xd0 [ 30.226219] mount_bdev+0x2b3/0x360 [ 30.241067] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 30.247567] ? reiserfs_remount+0x1390/0x1390 [ 30.247581] mount_fs+0x92/0x2a0 [ 30.247589] vfs_kern_mount.part.0+0x5b/0x470 [ 30.247597] do_mount+0xe53/0x2a00 [ 30.247607] ? retint_kernel+0x2d/0x2d [ 30.247615] ? copy_mount_string+0x40/0x40 [ 30.346744] ? memset+0x20/0x40 [ 30.350002] ? copy_mount_options+0x1fa/0x2f0 [ 30.354475] ? copy_mnt_ns+0xa30/0xa30 [ 30.358342] SyS_mount+0xa8/0x120 [ 30.361848] ? copy_mnt_ns+0xa30/0xa30 [ 30.365714] do_syscall_64+0x1d5/0x640 [ 30.369589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.374765] RIP: 0033:0x44b90a [ 30.377934] RSP: 002b:00007fd7ce9ad178 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 30.385634] RAX: ffffffffffffffda RBX: 00007fd7ce9ad1d0 RCX: 000000000044b90a [ 30.392894] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fd7ce9ad190 [ 30.400141] RBP: 0000000000000006 R08: 00007fd7ce9ad1d0 R09: 00007fd7ce9ad6b8 executing program [ 30.407386] R10: 0000000000000000 R11: 0000000000000286 R12: 00007fd7ce9ad190 [ 30.414636] R13: 0000000020000290 R14: 0000000000000005 R15: 0000000000000006 [ 30.421888] Code: e8 38 20 ff ff e9 11 fa ff ff e8 ce 5b a2 ff 0f 0b e8 c7 5b a2 ff 0f 0b e8 c0 5b a2 ff 0f 0b e8 b9 5b a2 ff 0f 0b e8 b2 5b a2 ff <0f> 0b e8 ab 5b a2 ff 48 8d bb d0 01 00 00 48 b8 00 00 00 00 00 [ 30.440983] RIP: do_journal_end+0x30ee/0x4260 RSP: ffff8880944779f8 [ 30.449084] REISERFS (device loop5): Using r5 hash to sort names [ 30.459250] REISERFS (device loop2): Using r5 hash to sort names [ 30.467375] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 30.483568] REISERFS (device loop0): using ordered data mode [ 30.492658] ---[ end trace d134cd54d6c8ace0 ]--- [ 30.497910] reiserfs: using flush barriers [ 30.499529] Kernel panic - not syncing: Fatal exception [ 30.509607] Kernel Offset: disabled [ 30.513217] Rebooting in 86400 seconds..