[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 50.032411] audit: type=1400 audit(1601946921.576:8): avc: denied { execmem } for pid=6496 comm="syz-executor563" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 50.076678] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 50.085161] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 50.085257] REISERFS (device loop2): using ordered data mode [ 50.085262] reiserfs: using flush barriers [ 50.086464] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.097230] REISERFS (device loop5): using ordered data mode [ 50.099866] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 50.106352] reiserfs: using flush barriers [ 50.120067] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 50.139244] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.149126] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 50.172137] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 50.181014] REISERFS (device loop0): using ordered data mode [ 50.187086] reiserfs: using flush barriers [ 50.191708] REISERFS (device loop3): using ordered data mode [ 50.199018] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.215243] REISERFS (device loop1): using ordered data mode [ 50.221604] reiserfs: using flush barriers [ 50.226325] REISERFS (device loop4): using ordered data mode [ 50.226691] REISERFS (device loop2): checking transaction log (loop2) [ 50.232500] reiserfs: using flush barriers [ 50.246916] reiserfs: using flush barriers [ 50.251593] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.274165] REISERFS (device loop3): checking transaction log (loop3) [ 50.286051] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.287901] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.301870] REISERFS (device loop2): Using rupasov hash to sort names [ 50.317505] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.324123] REISERFS (device loop2): using 3.5.x disk format [ 50.343358] REISERFS (device loop0): checking transaction log (loop0) [ 50.352350] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.353606] REISERFS (device loop5): checking transaction log (loop5) [ 50.375566] REISERFS (device loop3): Using rupasov hash to sort names [ 50.386864] REISERFS (device loop4): checking transaction log (loop4) [ 50.394222] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.416545] REISERFS (device loop3): using 3.5.x disk format [ 50.424288] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.427795] REISERFS (device loop1): checking transaction log (loop1) [ 50.444985] REISERFS (device loop0): Using rupasov hash to sort names [ 50.454504] REISERFS (device loop0): using 3.5.x disk format [ 50.460454] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.462157] REISERFS (device loop4): Using rupasov hash to sort names [ 50.483301] REISERFS (device loop5): Using rupasov hash to sort names [ 50.496394] REISERFS (device loop5): using 3.5.x disk format [ 50.501225] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.508669] REISERFS (device loop4): using 3.5.x disk format executing program executing program [ 50.518525] REISERFS (device loop1): Using rupasov hash to sort names [ 50.533015] REISERFS (device loop1): using 3.5.x disk format [ 50.539615] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 50.551678] REISERFS (device loop2): using ordered data mode [ 50.557559] reiserfs: using flush barriers [ 50.594951] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.612887] REISERFS (device loop2): checking transaction log (loop2) [ 50.622814] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore executing program [ 50.639451] REISERFS (device loop2): Using rupasov hash to sort names [ 50.653979] REISERFS (device loop2): using 3.5.x disk format [ 50.668136] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 50.680180] REISERFS (device loop1): using ordered data mode executing program [ 50.693898] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 50.696445] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 50.710384] REISERFS (device loop0): using ordered data mode [ 50.720331] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 50.731488] reiserfs: using flush barriers [ 50.733748] reiserfs: using flush barriers executing program executing program [ 50.737500] REISERFS (device loop3): using ordered data mode [ 50.753013] REISERFS (device loop5): using ordered data mode [ 50.760390] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.785625] REISERFS (device loop1): checking transaction log (loop1) executing program [ 50.795854] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.800706] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 50.814872] REISERFS (device loop1): Using rupasov hash to sort names [ 50.837624] REISERFS (device loop1): using 3.5.x disk format [ 50.839635] reiserfs: using flush barriers [ 50.845272] ------------[ cut here ]------------ [ 50.849353] reiserfs: using flush barriers [ 50.852794] kernel BUG at fs/reiserfs/journal.c:3643! [ 50.854667] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.867699] CPU: 0 PID: 6552 Comm: syz-executor563 Not tainted 4.19.149-syzkaller #0 [ 50.875573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.884937] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 50.889868] Code: 72 e7 84 ff 0f 0b 48 c7 c7 20 b5 9f 89 e8 d4 32 c9 01 e8 5f e7 84 ff 0f 0b 48 c7 c7 e0 b4 9f 89 e8 c1 32 c9 01 e8 4c e7 84 ff <0f> 0b 48 c7 c7 a0 b4 9f 89 e8 ae 32 c9 01 e8 39 e7 84 ff 0f 0b 48 [ 50.892520] REISERFS (device loop0): checking transaction log (loop0) [ 50.908774] RSP: 0018:ffff8880891bf990 EFLAGS: 00010293 [ 50.908785] RAX: ffff8880a3fcc280 RBX: ffffc90006b6d000 RCX: ffffffff81ecba13 [ 50.908791] RDX: 0000000000000000 RSI: ffffffff81eceb14 RDI: 0000000000000007 [ 50.908798] RBP: ffff88808896ed40 R08: 0000000000000001 R09: 0000000000000000 [ 50.908805] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 50.908811] R13: ffffc90006b6d058 R14: ffff8880891bfbd0 R15: 0000000000000000 [ 50.908822] FS: 00007f0e4f533700(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 50.908830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.908837] CR2: 00000000004c204c CR3: 000000009263a000 CR4: 00000000001406f0 [ 50.908846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.908852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.908856] Call Trace: [ 50.908881] ? reiserfs_info.cold+0x1d/0x7c [ 50.908898] ? __reiserfs_warning+0xc0/0xc0 [ 50.916187] init_special_inode: bogus i_mode (0) for inode loop0:2 [ 50.920828] journal_end+0x277/0x310 [ 50.920844] reiserfs_fill_super+0x21be/0x2e60 [ 50.920858] ? reiserfs_remount+0x1640/0x1640 [ 50.920872] ? lock_downgrade+0x750/0x750 [ 50.920893] ? snprintf+0xbb/0xf0 [ 50.928311] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 50.935408] ? __mutex_add_waiter+0x160/0x160 [ 50.935428] mount_bdev+0x2fc/0x3b0 [ 50.935440] ? reiserfs_remount+0x1640/0x1640 [ 50.935453] mount_fs+0xa3/0x318 [ 50.935468] vfs_kern_mount.part.0+0x68/0x470 [ 50.935491] do_mount+0x51c/0x2f10 [ 50.942957] REISERFS (device loop0): Using rupasov hash to sort names [ 50.950006] ? check_preemption_disabled+0x41/0x2b0 [ 50.950019] ? copy_mount_string+0x40/0x40 [ 50.950037] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 50.950057] ? _copy_from_user+0xd2/0x130 [ 50.957475] REISERFS (device loop0): using 3.5.x disk format [ 50.965524] ? copy_mount_options+0x261/0x370 [ 50.965538] ksys_mount+0xcf/0x130 [ 50.965551] __x64_sys_mount+0xba/0x150 [ 50.965564] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 50.965579] do_syscall_64+0xf9/0x670 [ 50.965594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.965604] RIP: 0033:0x44d4fa [ 50.965621] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad a0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a a0 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 51.121355] REISERFS warning (device loop5): sh-458 journal_init_dev: cannot init journal device 'unknown-block(7,5)': -4 [ 51.122509] RSP: 002b:00007f0e4f532bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 51.122522] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d4fa [ 51.122534] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f0e4f532c10 [ 51.127734] REISERFS warning (device loop5): sh-462 journal_init: unable to initialize journal device [ 51.130901] RBP: 00007f0e4f532c10 R08: 00007f0e4f532c50 R09: 0000000000000000 [ 51.130907] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 [ 51.130913] R13: 00007f0e4f532c50 R14: 00007f0e4f5336d0 R15: 0000000000000005 [ 51.130925] Modules linked in: [ 51.131674] ---[ end trace 4751d1d9ee2028c4 ]--- [ 51.155378] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 51.161435] RIP: 0010:do_journal_end+0x3724/0x48c0 [ 51.210401] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 51.215515] Code: 72 e7 84 ff 0f 0b 48 c7 c7 20 b5 9f 89 e8 d4 32 c9 01 e8 5f e7 84 ff 0f 0b 48 c7 c7 e0 b4 9f 89 e8 c1 32 c9 01 e8 4c e7 84 ff <0f> 0b 48 c7 c7 a0 b4 9f 89 e8 ae 32 c9 01 e8 39 e7 84 ff 0f 0b 48 [ 51.218681] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 51.222902] RSP: 0018:ffff8880891bf990 EFLAGS: 00010293 [ 51.222914] RAX: ffff8880a3fcc280 RBX: ffffc90006b6d000 RCX: ffffffff81ecba13 [ 51.222921] RDX: 0000000000000000 RSI: ffffffff81eceb14 RDI: 0000000000000007 [ 51.222929] RBP: ffff88808896ed40 R08: 0000000000000001 R09: 0000000000000000 [ 51.222936] R10: 0000000000000007 R11: 0000000000000002 R12: 0000000000000000 [ 51.222944] R13: ffffc90006b6d058 R14: ffff8880891bfbd0 R15: 0000000000000000 [ 51.222954] FS: 00007f0e4f533700(0000) GS:ffff8880ae200000(0000) knlGS:0000000000000000 [ 51.222962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.222970] CR2: 00000000004c204c CR3: 000000009263a000 CR4: 00000000001406f0 [ 51.222980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.222988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.222994] Kernel panic - not syncing: Fatal exception [ 51.224070] Kernel Offset: disabled [ 51.373632] Rebooting in 86400 seconds..