[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 58.365026] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.373780] REISERFS (device loop0): using ordered data mode [ 58.381140] reiserfs: using flush barriers [ 58.386354] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.403702] REISERFS (device loop0): checking transaction log (loop0) [ 58.464780] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 58.480780] REISERFS (device loop0): Using tea hash to sort names [ 58.539956] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.549201] REISERFS (device loop0): using ordered data mode [ 58.556268] reiserfs: using flush barriers [ 58.562316] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.578514] REISERFS (device loop0): checking transaction log (loop0) [ 58.637702] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 58.653585] REISERFS (device loop0): Using tea hash to sort names executing program [ 58.725373] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.734182] REISERFS (device loop0): using ordered data mode [ 58.742573] reiserfs: using flush barriers [ 58.748274] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.765228] REISERFS (device loop0): checking transaction log (loop0) [ 58.824956] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 58.840925] REISERFS (device loop0): Using tea hash to sort names [ 58.901188] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.913877] REISERFS (device loop0): using ordered data mode [ 58.920612] reiserfs: using flush barriers [ 58.925827] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.942833] REISERFS (device loop0): checking transaction log (loop0) [ 59.006643] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 59.022405] REISERFS (device loop0): Using tea hash to sort names executing program [ 59.171049] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.179822] REISERFS (device loop0): using ordered data mode [ 59.185684] reiserfs: using flush barriers [ 59.200262] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.216389] REISERFS (device loop0): checking transaction log (loop0) [ 59.275727] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 59.290852] REISERFS (device loop0): Using tea hash to sort names [ 59.343311] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.352196] REISERFS (device loop0): using ordered data mode [ 59.358989] reiserfs: using flush barriers [ 59.372463] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.401378] REISERFS (device loop0): checking transaction log (loop0) [ 59.466002] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 59.481943] REISERFS (device loop0): Using tea hash to sort names executing program [ 59.625508] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.634205] REISERFS (device loop0): using ordered data mode [ 59.641247] reiserfs: using flush barriers [ 59.650272] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.666810] REISERFS (device loop0): checking transaction log (loop0) [ 59.727344] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 59.743152] REISERFS (device loop0): Using tea hash to sort names [ 59.817029] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 59.825636] REISERFS (device loop0): using ordered data mode [ 59.842641] reiserfs: using flush barriers [ 59.847511] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.864636] REISERFS (device loop0): checking transaction log (loop0) [ 59.922506] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 59.938099] REISERFS (device loop0): Using tea hash to sort names executing program [ 60.003792] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.012466] REISERFS (device loop0): using ordered data mode [ 60.018365] reiserfs: using flush barriers [ 60.026573] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.050224] REISERFS (device loop0): checking transaction log (loop0) [ 60.109189] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 60.124306] REISERFS (device loop0): Using tea hash to sort names [ 60.182387] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.193770] REISERFS (device loop0): using ordered data mode [ 60.200051] reiserfs: using flush barriers [ 60.205071] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.221875] REISERFS (device loop0): checking transaction log (loop0) [ 60.280976] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 60.296076] REISERFS (device loop0): Using tea hash to sort names executing program [ 60.364174] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.372865] REISERFS (device loop0): using ordered data mode [ 60.378819] reiserfs: using flush barriers [ 60.386814] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.410353] REISERFS (device loop0): checking transaction log (loop0) [ 60.468404] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 60.483530] REISERFS (device loop0): Using tea hash to sort names [ 60.542273] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.554566] REISERFS (device loop0): using ordered data mode [ 60.560758] reiserfs: using flush barriers [ 60.565785] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.582759] REISERFS (device loop0): checking transaction log (loop0) [ 60.642155] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 60.658050] REISERFS (device loop0): Using tea hash to sort names executing program [ 60.723837] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.732387] REISERFS (device loop0): using ordered data mode [ 60.738184] reiserfs: using flush barriers [ 60.746293] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.762467] REISERFS (device loop0): checking transaction log (loop0) [ 60.821838] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 60.837156] REISERFS (device loop0): Using tea hash to sort names [ 60.900072] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 60.908725] REISERFS (device loop0): using ordered data mode [ 60.915775] reiserfs: using flush barriers [ 60.921086] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 60.944579] REISERFS (device loop0): checking transaction log (loop0) [ 61.006855] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 61.022657] REISERFS (device loop0): Using tea hash to sort names executing program [ 61.085876] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.094782] REISERFS (device loop0): using ordered data mode [ 61.101033] reiserfs: using flush barriers [ 61.106443] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.123427] REISERFS (device loop0): checking transaction log (loop0) [ 61.182890] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 61.198118] REISERFS (device loop0): Using tea hash to sort names [ 61.251944] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.264384] REISERFS (device loop0): using ordered data mode [ 61.271146] reiserfs: using flush barriers [ 61.276188] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.292789] REISERFS (device loop0): checking transaction log (loop0) [ 61.351949] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 61.368377] REISERFS (device loop0): Using tea hash to sort names executing program [ 61.432743] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.442273] REISERFS (device loop0): using ordered data mode [ 61.448075] reiserfs: using flush barriers [ 61.463538] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.479906] REISERFS (device loop0): checking transaction log (loop0) [ 61.538969] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 61.554151] REISERFS (device loop0): Using tea hash to sort names [ 61.641886] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.650449] REISERFS (device loop0): using ordered data mode [ 61.656244] reiserfs: using flush barriers [ 61.663196] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.679986] REISERFS (device loop0): checking transaction log (loop0) [ 61.739611] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 61.756097] REISERFS (device loop0): Using tea hash to sort names executing program [ 61.925698] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 61.934431] REISERFS (device loop0): using ordered data mode [ 61.950258] reiserfs: using flush barriers [ 61.957156] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.973929] REISERFS (device loop0): checking transaction log (loop0) [ 62.033148] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 62.049161] REISERFS (device loop0): Using tea hash to sort names [ 62.111220] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.119914] REISERFS (device loop0): using ordered data mode [ 62.125990] reiserfs: using flush barriers [ 62.131223] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.147567] REISERFS (device loop0): checking transaction log (loop0) [ 62.209292] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 62.224419] REISERFS (device loop0): Using tea hash to sort names executing program [ 62.354111] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.363417] REISERFS (device loop0): using ordered data mode [ 62.369373] reiserfs: using flush barriers [ 62.374539] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.390168] REISERFS (device loop0): checking transaction log (loop0) [ 62.449863] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 62.465715] REISERFS (device loop0): Using tea hash to sort names [ 62.528808] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 62.537496] REISERFS (device loop0): using ordered data mode [ 62.544293] reiserfs: using flush barriers [ 62.550142] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.565794] REISERFS (device loop0): checking transaction log (loop0) [ 62.625167] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 62.641099] REISERFS (device loop0): Using tea hash to sort names [ 62.647467] ------------[ cut here ]------------ [ 62.652331] kernel BUG at fs/reiserfs/journal.c:3643! [ 62.658568] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 62.663940] CPU: 1 PID: 8239 Comm: syz-executor245 Not tainted 4.19.161-syzkaller #0 [ 62.671797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.681138] RIP: 0010:do_journal_end+0x3601/0x4840 [ 62.686067] Code: 05 0f ff ff e9 9a f9 ff ff e8 bb 15 8a ff 0f 0b e8 b4 15 8a ff 0f 0b e8 ad 15 8a ff 0f 0b e8 a6 15 8a ff 0f 0b e8 9f 15 8a ff <0f> 0b e8 98 15 8a ff 0f 0b e8 91 15 8a ff 48 8b 44 24 08 48 8b 54 [ 62.704946] RSP: 0018:ffff8880917f7998 EFLAGS: 00010293 [ 62.710285] RAX: ffff8880a5f58340 RBX: ffffc9000600e000 RCX: ffffffff81da8a73 [ 62.717532] RDX: 0000000000000000 RSI: ffffffff81daba51 RDI: 0000000000000007 [ 62.724781] RBP: ffff8880a69f0780 R08: 0000000000000001 R09: 0000000000000000 [ 62.732026] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 62.739291] R13: ffffc9000600e058 R14: ffff8880917f7bc8 R15: 0000000000000000 [ 62.746540] FS: 00007f03bb592700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 62.754749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.760626] CR2: 00007fb4c6a91000 CR3: 00000000a96c0000 CR4: 00000000001406e0 [ 62.767880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.775131] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.782378] Call Trace: [ 62.784950] ? reiserfs_info.cold+0x1d/0x7c [ 62.789264] ? wake_up_var+0x110/0x110 [ 62.793145] journal_end+0x277/0x310 [ 62.796842] reiserfs_fill_super+0x2002/0x2ce4 [ 62.801411] ? reiserfs_remount+0x1540/0x1540 [ 62.805885] ? lock_downgrade+0x720/0x720 [ 62.810015] ? snprintf+0xbb/0xf0 [ 62.813465] ? wait_for_completion_io+0x10/0x10 [ 62.818117] mount_bdev+0x2fc/0x3b0 [ 62.821737] ? reiserfs_remount+0x1540/0x1540 [ 62.826214] mount_fs+0xa3/0x30c [ 62.829568] vfs_kern_mount.part.0+0x68/0x470 [ 62.834046] do_mount+0x113c/0x2f10 [ 62.837668] ? do_raw_spin_unlock+0x171/0x230 [ 62.842142] ? check_preemption_disabled+0x41/0x280 [ 62.847152] ? copy_mount_string+0x40/0x40 [ 62.851366] ? copy_mount_options+0x59/0x380 [ 62.855755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 62.860749] ? kmem_cache_alloc_trace+0x323/0x380 [ 62.865586] ? copy_mount_options+0x26f/0x380 [ 62.870062] ksys_mount+0xcf/0x130 [ 62.873583] __x64_sys_mount+0xba/0x150 [ 62.877541] ? ksys_mount+0x130/0x130 [ 62.881340] do_syscall_64+0xf9/0x620 [ 62.885131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 62.890301] RIP: 0033:0x44d4fa [ 62.893491] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 5d a1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 3a a1 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 62.912385] RSP: 002b:00007f03bb591bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 62.920068] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d4fa [ 62.927316] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f03bb591c10 [ 62.934563] RBP: 00007f03bb591c10 R08: 00007f03bb591c50 R09: 0000000000000000 [ 62.941812] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000006 [ 62.949061] R13: 00007f03bb591c50 R14: 00007f03bb5926d0 R15: 0000000000000005 [ 62.956311] Modules linked in: [ 62.968990] ---[ end trace 8e5d2df40a3e3239 ]--- [ 62.973788] RIP: 0010:do_journal_end+0x3601/0x4840 [ 62.978760] Code: 05 0f ff ff e9 9a f9 ff ff e8 bb 15 8a ff 0f 0b e8 b4 15 8a ff 0f 0b e8 ad 15 8a ff 0f 0b e8 a6 15 8a ff 0f 0b e8 9f 15 8a ff <0f> 0b e8 98 15 8a ff 0f 0b e8 91 15 8a ff 48 8b 44 24 08 48 8b 54 [ 62.997727] RSP: 0018:ffff8880917f7998 EFLAGS: 00010293 [ 63.003171] RAX: ffff8880a5f58340 RBX: ffffc9000600e000 RCX: ffffffff81da8a73 [ 63.010479] RDX: 0000000000000000 RSI: ffffffff81daba51 RDI: 0000000000000007 [ 63.017742] RBP: ffff8880a69f0780 R08: 0000000000000001 R09: 0000000000000000 [ 63.025086] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 63.032409] R13: ffffc9000600e058 R14: ffff8880917f7bc8 R15: 0000000000000000 [ 63.039713] FS: 00007f03bb592700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 63.047938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.053863] CR2: 00007f0ff415d000 CR3: 00000000a96c0000 CR4: 00000000001406f0 [ 63.061204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.068464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.075774] Kernel panic - not syncing: Fatal exception [ 63.081589] Kernel Offset: disabled [ 63.085204] Rebooting in 86400 seconds..