[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. syzkaller login: [ 34.391720] audit: type=1400 audit(1600736334.967:8): avc: denied { execmem } for pid=6354 comm="syz-executor260" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.408770] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 34.422068] REISERFS (device loop5): using ordered data mode [ 34.429233] reiserfs: using flush barriers [ 34.438314] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.448094] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 34.464257] REISERFS (device loop5): checking transaction log (loop5) [ 34.466466] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 34.480010] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.492488] REISERFS (device loop3): using ordered data mode [ 34.498219] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 34.508804] REISERFS (device loop4): using ordered data mode [ 34.513601] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 34.528426] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 34.531723] reiserfs: using flush barriers [ 34.543315] REISERFS (device loop0): using ordered data mode [ 34.548577] reiserfs: using flush barriers [ 34.553937] REISERFS (device loop1): using ordered data mode [ 34.559405] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.561434] REISERFS (device loop2): using ordered data mode [ 34.587538] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.591720] reiserfs: using flush barriers [ 34.613786] reiserfs: using flush barriers [ 34.621308] REISERFS (device loop5): Using r5 hash to sort names [ 34.641559] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.656046] REISERFS (device loop4): checking transaction log (loop4) [ 34.669921] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.672798] REISERFS (device loop3): checking transaction log (loop3) [ 34.687523] reiserfs: using flush barriers [ 34.703149] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.721439] REISERFS (device loop1): checking transaction log (loop1) [ 34.736804] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.757422] REISERFS (device loop4): Using r5 hash to sort names [ 34.774141] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.797385] REISERFS (device loop0): checking transaction log (loop0) [ 34.811646] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 34.812486] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.839629] REISERFS (device loop5): using ordered data mode [ 34.851398] REISERFS (device loop2): checking transaction log (loop2) [ 34.860021] REISERFS (device loop1): Using r5 hash to sort names [ 34.866888] reiserfs: using flush barriers [ 34.868191] REISERFS (device loop3): Using r5 hash to sort names [ 34.880965] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.881571] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 34.896449] REISERFS (device loop0): Using r5 hash to sort names [ 34.927412] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 34.968292] REISERFS (device loop2): Using r5 hash to sort names [ 34.982848] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 35.004658] REISERFS (device loop5): checking transaction log (loop5) [ 35.012376] REISERFS (device loop4): using ordered data mode [ 35.034602] reiserfs: using flush barriers [ 35.044775] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.064338] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.086398] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 35.097161] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 35.103357] REISERFS (device loop3): using ordered data mode [ 35.120846] REISERFS (device loop0): using ordered data mode [ 35.124453] reiserfs: using flush barriers [ 35.127743] REISERFS (device loop5): Using r5 hash to sort names [ 35.140570] reiserfs: using flush barriers [ 35.149354] REISERFS (device loop4): checking transaction log (loop4) [ 35.157027] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.175764] REISERFS (device loop4): Using r5 hash to sort names [ 35.186848] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.187309] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.207084] REISERFS (device loop0): checking transaction log (loop0) [ 35.227872] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.247554] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 35.262280] REISERFS (device loop0): Using r5 hash to sort names [ 35.262574] REISERFS (device loop3): checking transaction log (loop3) [ 35.272955] REISERFS (device loop1): using ordered data mode [ 35.286073] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.306302] REISERFS (device loop3): Using r5 hash to sort names [ 35.313992] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 35.331423] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 35.345501] REISERFS (device loop2): using ordered data mode [ 35.349864] REISERFS (device loop4): using ordered data mode [ 35.356690] reiserfs: using flush barriers [ 35.359517] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 35.376413] REISERFS (device loop3): using ordered data mode [ 35.378729] reiserfs: using flush barriers [ 35.383124] reiserfs: using flush barriers [ 35.391274] reiserfs: using flush barriers [ 35.408391] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.408454] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.425731] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 35.442636] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.452223] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.470145] REISERFS (device loop3): checking transaction log (loop3) [ 35.515764] REISERFS (device loop4): checking transaction log (loop4) [ 35.524113] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 35.553861] REISERFS (device loop5): using ordered data mode [ 35.561786] REISERFS (device loop1): checking transaction log (loop1) [ 35.572481] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.578819] REISERFS (device loop0): using ordered data mode [ 35.591585] reiserfs: using flush barriers [ 35.600825] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.620712] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.646571] REISERFS (device loop4): Using r5 hash to sort names [ 35.646604] REISERFS (device loop2): checking transaction log (loop2) [ 35.658542] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.663917] reiserfs: using flush barriers [ 35.677504] ------------[ cut here ]------------ [ 35.686793] kernel BUG at fs/reiserfs/journal.c:3640! [ 35.697233] REISERFS (device loop5): checking transaction log (loop5) [ 35.705878] REISERFS (device loop3): Using r5 hash to sort names [ 35.708504] REISERFS (device loop1): Using r5 hash to sort names [ 35.713073] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 35.724612] Modules linked in: [ 35.728098] CPU: 0 PID: 6452 Comm: syz-executor260 Not tainted 4.14.198-syzkaller #0 [ 35.736661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.745935] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 35.747220] task: ffff88809520c340 task.stack: ffff888095e80000 [ 35.747232] RIP: 0010:do_journal_end+0x3081/0x41d0 [ 35.747235] RSP: 0018:ffff888095e879f8 EFLAGS: 00010297 [ 35.747242] RAX: ffff88809520c340 RBX: ffffc900071fc000 RCX: 0000000000000000 [ 35.747246] RDX: 0000000000000000 RSI: ffff888095e87c30 RDI: ffff888095e87c3c [ 35.747249] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057a [ 35.747258] R10: ffff88809520cc18 R11: ffff88809520c340 R12: ffffc900071fc058 [ 35.819613] R13: ffffc900071fc048 R14: ffff888095e87c38 R15: ffff888094dbebc0 [ 35.828094] FS: 00007f518f9cb700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 35.828206] REISERFS (device loop0): checking transaction log (loop0) [ 35.838497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.838502] CR2: 00007f518f9a9e78 CR3: 00000000a02df000 CR4: 00000000001406f0 [ 35.838508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.838511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.838515] Call Trace: [ 35.838536] ? do_journal_end+0x41d0/0x41d0 [ 35.838543] ? reiserfs_info.cold+0x1d/0x67 [ 35.838554] ? __reiserfs_warning+0xb0/0xb0 [ 35.845886] init_special_inode: bogus i_mode (0) for inode loop0:2 [ 35.851806] ? __wake_up_bit+0xd0/0xd0 [ 35.851815] journal_end+0x259/0x300 [ 35.851825] reiserfs_fill_super+0x1ab8/0x28b6 [ 35.851833] ? reiserfs_remount+0x1390/0x1390 [ 35.851842] ? lock_downgrade+0x740/0x740 [ 35.851851] ? snprintf+0xa5/0xd0 [ 35.851864] mount_bdev+0x2b3/0x360 [ 35.865641] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.866900] ? reiserfs_remount+0x1390/0x1390 [ 35.866911] mount_fs+0x92/0x2a0 [ 35.866926] vfs_kern_mount.part.0+0x5b/0x470 [ 35.876636] REISERFS (device loop0): Using r5 hash to sort names [ 35.877272] do_mount+0xe53/0x2a00 [ 35.891292] init_special_inode: bogus i_mode (0) for inode loop2:2 [ 35.892543] ? do_raw_spin_unlock+0x164/0x220 [ 35.892555] ? copy_mount_string+0x40/0x40 [ 35.924537] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 35.926591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 35.926602] ? copy_mnt_ns+0xa30/0xa30 [ 35.940018] REISERFS (device loop2): Using r5 hash to sort names [ 35.951804] ? copy_mount_options+0x1fa/0x2f0 [ 35.951811] ? copy_mnt_ns+0xa30/0xa30 [ 35.951817] SyS_mount+0xa8/0x120 [ 35.951824] ? copy_mnt_ns+0xa30/0xa30 [ 35.951833] do_syscall_64+0x1d5/0x640 [ 35.951844] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 35.951855] RIP: 0033:0x44d50a [ 36.058371] RSP: 002b:00007f518f9cabf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 36.066767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000044d50a [ 36.074634] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f518f9cac10 [ 36.084738] RBP: 00007f518f9cac10 R08: 00007f518f9cac50 R09: 0000000000000000 [ 36.095211] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000005 [ 36.104701] R13: 00007f518f9cac50 R14: 00007f518f9cb6d0 R15: 0000000000000003 [ 36.112214] Code: e8 45 23 ff ff e9 11 fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb d0 01 00 00 48 b8 00 00 00 00 00 [ 36.132277] RIP: do_journal_end+0x3081/0x41d0 RSP: ffff888095e879f8 [ 36.139649] init_special_inode: bogus i_mode (0) for inode loop5:2 [ 36.146636] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 36.149355] ---[ end trace aad24f8a704b4565 ]--- [ 36.164263] REISERFS (device loop5): Using r5 hash to sort names [ 36.169369] Kernel panic - not syncing: Fatal exception [ 36.182413] Kernel Offset: disabled [ 36.186101] Rebooting in 86400 seconds..