[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 40.271506] audit: type=1400 audit(1600521827.504:8): avc: denied { execmem } for pid=6356 comm="syz-executor380" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.289940] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 40.303691] REISERFS (device loop3): using ordered data mode [ 40.314131] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 40.323233] reiserfs: using flush barriers [ 40.329576] REISERFS (device loop5): using ordered data mode [ 40.339151] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.346008] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 40.356531] reiserfs: using flush barriers [ 40.367650] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 40.368196] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 40.385981] REISERFS (device loop4): using ordered data mode [ 40.386049] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.394992] REISERFS (device loop0): using ordered data mode [ 40.407859] REISERFS (device loop3): checking transaction log (loop3) [ 40.420405] REISERFS (device loop1): using ordered data mode [ 40.426631] reiserfs: using flush barriers [ 40.428200] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 40.435803] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.442085] reiserfs: using flush barriers [ 40.455737] REISERFS (device loop5): checking transaction log (loop5) [ 40.470671] REISERFS (device loop2): using ordered data mode [ 40.489791] reiserfs: using flush barriers [ 40.496839] reiserfs: using flush barriers [ 40.506778] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.523146] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.529873] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.547164] REISERFS (device loop1): checking transaction log (loop1) [ 40.571763] REISERFS (device loop4): checking transaction log (loop4) [ 40.613300] REISERFS (device loop0): checking transaction log (loop0) [ 40.669398] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.692486] REISERFS (device loop2): checking transaction log (loop2) [ 40.780062] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.801719] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.832275] REISERFS (device loop3): Using rupasov hash to sort names [ 40.832296] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.855008] REISERFS (device loop0): Using rupasov hash to sort names [ 40.874242] REISERFS (device loop4): Using rupasov hash to sort names executing program [ 40.894072] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.926270] REISERFS (device loop5): Using rupasov hash to sort names [ 40.945631] REISERFS (device loop1): Using rupasov hash to sort names [ 40.963675] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 40.978900] REISERFS (device loop2): Using rupasov hash to sort names executing program executing program executing program executing program [ 41.031571] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.046160] REISERFS (device loop0): using ordered data mode [ 41.053191] reiserfs: using flush barriers executing program executing program [ 41.075342] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.104704] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 41.111796] REISERFS (device loop0): checking transaction log (loop0) [ 41.121624] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 41.125659] REISERFS (device loop3): using ordered data mode [ 41.136251] REISERFS (device loop4): using ordered data mode [ 41.145708] reiserfs: using flush barriers [ 41.152510] reiserfs: using flush barriers [ 41.157771] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 41.166831] REISERFS (device loop5): using ordered data mode [ 41.173371] reiserfs: using flush barriers [ 41.191527] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.210116] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.229609] REISERFS (device loop3): checking transaction log (loop3) [ 41.232502] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal executing program [ 41.265956] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.345529] REISERFS (device loop1): using ordered data mode [ 41.351894] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 41.362581] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 41.368948] REISERFS (device loop4): checking transaction log (loop4) [ 41.380619] REISERFS (device loop2): using ordered data mode [ 41.391941] reiserfs: using flush barriers [ 41.396956] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 41.397902] REISERFS (device loop3): Using rupasov hash to sort names [ 41.419344] reiserfs: using flush barriers [ 41.420573] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.423994] REISERFS (device loop5): checking transaction log (loop5) executing program executing program [ 41.446413] REISERFS (device loop2): checking transaction log (loop2) [ 41.454911] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.457348] REISERFS (device loop0): Using rupasov hash to sort names executing program [ 41.534573] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 41.551014] REISERFS (device loop3): using ordered data mode [ 41.568827] reiserfs: using flush barriers executing program [ 41.578063] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 41.595598] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.611100] REISERFS (device loop1): checking transaction log (loop1) [ 41.611724] REISERFS (device loop2): Using rupasov hash to sort names [ 41.625267] REISERFS (device loop3): checking transaction log (loop3) [ 41.663120] ------------[ cut here ]------------ [ 41.668001] kernel BUG at fs/reiserfs/journal.c:3640! [ 41.722510] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.727900] Modules linked in: [ 41.731097] CPU: 1 PID: 6450 Comm: syz-executor380 Not tainted 4.14.198-syzkaller #0 [ 41.738968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.745872] init_special_inode: bogus i_mode (0) for inode loop4:2 [ 41.748318] task: ffff88809484c5c0 task.stack: ffff8880961a0000 [ 41.748331] RIP: 0010:do_journal_end+0x3081/0x41d0 [ 41.748335] RSP: 0018:ffff8880961a79f8 EFLAGS: 00010297 [ 41.748342] RAX: ffff88809484c5c0 RBX: ffffc90005c7d000 RCX: 0000000000000000 [ 41.748350] RDX: 0000000000000000 RSI: ffff8880961a7c30 RDI: ffff8880961a7c3c [ 41.774662] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 41.778216] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057a [ 41.778220] R10: ffff88809484ce98 R11: ffff88809484c5c0 R12: ffffc90005c7d058 [ 41.778224] R13: ffffc90005c7d048 R14: ffff8880961a7c38 R15: ffff88809473ccc0 [ 41.778231] FS: 00007fcf40e0f700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 41.778235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.778240] CR2: 00007fcf40dede78 CR3: 00000000a4eb6000 CR4: 00000000001406e0 [ 41.778247] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.778255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.792293] init_special_inode: bogus i_mode (0) for inode loop1:2 [ 41.800520] Call Trace: [ 41.800543] ? do_journal_end+0x41d0/0x41d0 [ 41.800549] ? reiserfs_info.cold+0x1d/0x67 [ 41.800555] ? __reiserfs_warning+0xb0/0xb0 [ 41.800561] ? __wake_up_bit+0xd0/0xd0 [ 41.800568] journal_end+0x259/0x300 [ 41.800576] reiserfs_fill_super+0x1ab8/0x28b6 [ 41.800585] ? reiserfs_remount+0x1390/0x1390 [ 41.800595] ? lock_downgrade+0x740/0x740 [ 41.800604] ? snprintf+0xa5/0xd0 [ 41.800617] mount_bdev+0x2b3/0x360 [ 41.800627] ? reiserfs_remount+0x1390/0x1390 [ 41.808532] REISERFS (device loop4): Using rupasov hash to sort names [ 41.815165] mount_fs+0x92/0x2a0 [ 41.815177] vfs_kern_mount.part.0+0x5b/0x470 [ 41.815185] do_mount+0xe53/0x2a00 [ 41.815194] ? copy_mount_string+0x40/0x40 [ 41.815203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 41.815209] ? copy_mnt_ns+0xa30/0xa30 [ 41.815215] ? copy_mount_options+0x1fa/0x2f0 [ 41.815221] ? copy_mnt_ns+0xa30/0xa30 [ 41.815226] SyS_mount+0xa8/0x120 [ 41.815231] ? copy_mnt_ns+0xa30/0xa30 [ 41.815241] do_syscall_64+0x1d5/0x640 [ 41.815252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 41.837485] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 41.844576] RIP: 0033:0x44d5da [ 41.844580] RSP: 002b:00007fcf40e0ebf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 41.844587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000044d5da [ 41.844591] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fcf40e0ec10 [ 41.844595] RBP: 00007fcf40e0ec10 R08: 00007fcf40e0ec50 R09: 0000000000000000 [ 41.844599] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000006 [ 41.844602] R13: 00007fcf40e0ec50 R14: 00007fcf40e0f6d0 R15: 0000000000000003 [ 41.844611] Code: e8 45 23 ff ff e9 11 fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff [ 41.860794] REISERFS (device loop1): Using rupasov hash to sort names [ 41.865504] 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb d0 01 00 00 48 b8 00 00 00 00 00 [ 42.058247] RIP: do_journal_end+0x3081/0x41d0 RSP: ffff8880961a79f8 [ 42.088924] ---[ end trace 5f6d6f9fd3c21562 ]--- [ 42.095415] Kernel panic - not syncing: Fatal exception [ 42.101865] Kernel Offset: disabled [ 42.105488] Rebooting in 86400 seconds..