Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 47.140174] audit: type=1400 audit(1600727003.287:8): avc: denied { execmem } for pid=6360 comm="syz-executor055" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 47.186642] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 47.194262] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 47.205066] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 47.207972] REISERFS (device loop5): using ordered data mode [ 47.214443] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 47.229583] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 47.230466] reiserfs: using flush barriers [ 47.242820] REISERFS (device loop2): using ordered data mode [ 47.244330] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 47.249622] REISERFS (device loop4): using ordered data mode [ 47.265102] REISERFS (device loop0): using ordered data mode [ 47.269387] REISERFS (device loop3): using ordered data mode [ 47.280436] REISERFS (device loop1): using ordered data mode [ 47.286841] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.291995] reiserfs: using flush barriers [ 47.306929] reiserfs: using flush barriers [ 47.311402] reiserfs: using flush barriers [ 47.312973] reiserfs: using flush barriers [ 47.316615] reiserfs: using flush barriers [ 47.326648] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.329753] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.343351] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.367429] REISERFS (device loop5): checking transaction log (loop5) [ 47.374691] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.399465] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.422983] REISERFS (device loop0): checking transaction log (loop0) [ 47.427046] REISERFS (device loop3): checking transaction log (loop3) [ 47.437670] REISERFS (device loop2): checking transaction log (loop2) [ 47.468560] REISERFS (device loop1): checking transaction log (loop1) [ 47.494448] REISERFS (device loop4): checking transaction log (loop4) [ 47.629802] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 47.645296] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 47.668680] REISERFS (device loop2): Using tea hash to sort names [ 47.676680] REISERFS (device loop2): using 3.5.x disk format [ 47.688456] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 47.709231] REISERFS (device loop0): Using tea hash to sort names [ 47.715959] REISERFS (device loop0): using 3.5.x disk format [ 47.759687] REISERFS (device loop5): Using tea hash to sort names [ 47.771710] REISERFS warning (device loop3): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore executing program [ 47.797600] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 47.817863] REISERFS (device loop5): using 3.5.x disk format [ 47.824376] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 47.851356] REISERFS (device loop3): Using tea hash to sort names executing program [ 47.859589] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 47.860197] REISERFS (device loop1): Using tea hash to sort names [ 47.877788] REISERFS (device loop2): using ordered data mode [ 47.879412] REISERFS (device loop4): Using tea hash to sort names [ 47.894739] reiserfs: using flush barriers [ 47.899889] REISERFS (device loop3): using 3.5.x disk format executing program [ 47.907654] REISERFS (device loop4): using 3.5.x disk format [ 47.914607] REISERFS (device loop1): using 3.5.x disk format [ 47.942612] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.955329] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 47.958789] REISERFS (device loop2): checking transaction log (loop2) [ 47.967483] REISERFS (device loop0): using ordered data mode [ 47.997197] reiserfs: using flush barriers executing program executing program [ 48.043757] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 48.060472] REISERFS (device loop2): Using tea hash to sort names [ 48.071658] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.085923] REISERFS (device loop2): using 3.5.x disk format executing program [ 48.099297] REISERFS (device loop0): checking transaction log (loop0) [ 48.108728] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 48.126841] REISERFS (device loop5): using ordered data mode [ 48.129101] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 48.142451] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 48.146930] reiserfs: using flush barriers [ 48.165333] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 48.172125] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 48.177349] REISERFS (device loop1): using ordered data mode [ 48.183033] REISERFS (device loop2): using ordered data mode [ 48.193397] REISERFS (device loop3): using ordered data mode [ 48.207005] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.224694] reiserfs: using flush barriers [ 48.226898] REISERFS (device loop4): using ordered data mode [ 48.237887] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 48.241321] reiserfs: using flush barriers [ 48.255563] REISERFS (device loop0): Using tea hash to sort names [ 48.257731] reiserfs: using flush barriers [ 48.265447] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.275441] reiserfs: using flush barriers [ 48.284538] REISERFS (device loop0): using 3.5.x disk format [ 48.288750] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.295711] REISERFS (device loop2): checking transaction log (loop2) [ 48.324308] REISERFS (device loop5): checking transaction log (loop5) [ 48.338605] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 executing program [ 48.355331] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.405069] REISERFS (device loop1): checking transaction log (loop1) [ 48.424327] REISERFS (device loop4): checking transaction log (loop4) [ 48.432530] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 48.435458] REISERFS (device loop3): checking transaction log (loop3) [ 48.451444] REISERFS (device loop0): using ordered data mode [ 48.471214] reiserfs: using flush barriers [ 48.478222] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 48.496676] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.505272] REISERFS (device loop2): Using tea hash to sort names [ 48.559251] REISERFS warning (device loop4): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 48.574874] REISERFS (device loop2): using 3.5.x disk format [ 48.581752] ------------[ cut here ]------------ [ 48.586691] kernel BUG at fs/reiserfs/journal.c:3640! [ 48.592477] REISERFS (device loop4): Using tea hash to sort names [ 48.600027] REISERFS (device loop4): using 3.5.x disk format [ 48.604804] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 48.611256] Modules linked in: [ 48.614472] CPU: 0 PID: 6452 Comm: syz-executor055 Not tainted 4.14.198-syzkaller #0 [ 48.622359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.624313] init_special_inode: bogus i_mode (0) for inode loop1:2 [ 48.631711] task: ffff8880944f2680 task.stack: ffff88808a030000 [ 48.631726] RIP: 0010:do_journal_end+0x3081/0x41d0 [ 48.631729] RSP: 0018:ffff88808a0379f8 EFLAGS: 00010297 [ 48.638212] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 48.644120] RAX: ffff8880944f2680 RBX: ffffc90005c41000 RCX: 0000000000000000 [ 48.644124] RDX: 0000000000000000 RSI: ffff88808a037c30 RDI: ffff88808a037c3c [ 48.644127] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000004057d [ 48.644130] R10: ffff8880944f2f58 R11: ffff8880944f2680 R12: ffffc90005c41058 [ 48.644133] R13: ffffc90005c41048 R14: ffff88808a037c38 R15: ffff88809788a680 [ 48.644138] FS: 00007fc85f8aa700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 48.644142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.644145] CR2: 00007f1093776028 CR3: 00000000a50a8000 CR4: 00000000001406f0 [ 48.644151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.644154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.644158] Call Trace: [ 48.644185] ? reiserfs_info.cold+0x1d/0x67 [ 48.644195] ? __reiserfs_warning+0xb0/0xb0 [ 48.654997] REISERFS (device loop1): Using tea hash to sort names [ 48.669483] journal_end+0x259/0x300 [ 48.669494] reiserfs_fill_super+0x1ab8/0x28b6 [ 48.669502] ? reiserfs_remount+0x1390/0x1390 [ 48.669513] ? lock_downgrade+0x740/0x740 [ 48.669523] ? snprintf+0xa5/0xd0 [ 48.669535] mount_bdev+0x2b3/0x360 [ 48.669540] ? reiserfs_remount+0x1390/0x1390 [ 48.669546] mount_fs+0x92/0x2a0 [ 48.669555] vfs_kern_mount.part.0+0x5b/0x470 [ 48.669563] do_mount+0xe53/0x2a00 [ 48.669571] ? copy_mount_string+0x40/0x40 [ 48.669584] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 48.677169] REISERFS (device loop0): checking transaction log (loop0) [ 48.684137] ? copy_mnt_ns+0xa30/0xa30 [ 48.684145] ? copy_mount_options+0x1fa/0x2f0 [ 48.684150] ? copy_mnt_ns+0xa30/0xa30 [ 48.684155] SyS_mount+0xa8/0x120 [ 48.684161] ? copy_mnt_ns+0xa30/0xa30 [ 48.684171] do_syscall_64+0x1d5/0x640 [ 48.684181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 48.684190] RIP: 0033:0x44d5ca [ 48.698367] REISERFS (device loop1): using 3.5.x disk format [ 48.698900] RSP: 002b:00007fc85f8a9bf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 48.860784] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d5ca [ 48.868034] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fc85f8a9c10 [ 48.875324] RBP: 00007fc85f8a9c10 R08: 00007fc85f8a9c50 R09: 0000000000000000 [ 48.882585] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000005 [ 48.889853] R13: 00007fc85f8a9c50 R14: 00007fc85f8aa6d0 R15: 0000000000000005 [ 48.897197] Code: e8 45 23 ff ff e9 11 fa ff ff e8 5b 88 a1 ff 0f 0b e8 54 88 a1 ff 0f 0b e8 4d 88 a1 ff 0f 0b e8 46 88 a1 ff 0f 0b e8 3f 88 a1 ff <0f> 0b e8 38 88 a1 ff 48 8d bb d0 01 00 00 48 b8 00 00 00 00 00 [ 48.916815] RIP: do_journal_end+0x3081/0x41d0 RSP: ffff88808a0379f8 [ 48.929655] REISERFS warning (device loop5): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore executing program [ 48.965263] REISERFS (device loop5): Using tea hash to sort names [ 48.973871] REISERFS (device loop5): using 3.5.x disk format [ 49.013715] ---[ end trace feec114efbf99d40 ]--- [ 49.014804] init_special_inode: bogus i_mode (0) for inode loop0:2 [ 49.018940] Kernel panic - not syncing: Fatal exception [ 49.026009] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 49.046504] Kernel Offset: disabled [ 49.050122] Rebooting in 86400 seconds..