[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.86' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.417579] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 34.426404] REISERFS (device loop0): using ordered data mode [ 34.432697] reiserfs: using flush barriers [ 34.438096] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.453884] REISERFS (device loop0): checking transaction log (loop0) [ 34.462021] REISERFS (device loop0): Using rupasov hash to sort names [ 34.473315] BUG: unable to handle kernel paging request at ffff8880913af000 [ 34.480409] PGD de01067 P4D de01067 PUD 23ffff067 PMD 913ad063 PTE ffe2002e00000000 [ 34.488191] Oops: 0002 [#1] PREEMPT SMP KASAN [ 34.492668] CPU: 0 PID: 8117 Comm: syz-executor301 Not tainted 4.19.211-syzkaller #0 [ 34.500522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 34.509859] RIP: 0010:__memmove+0x24/0x1a0 [ 34.514130] syz-executor301[8116]: segfault at 20000 ip 00007fb7ae90de53 sp 00007fff5d1165c8 error 4 in syz-executor3016693707[7fb7ae90a000+9a000] [ 34.514207] Code: 90 90 90 90 90 90 48 89 f8 48 83 fa 20 0f 82 03 01 00 00 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f 9f 00 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 3b 48 83 ea 20 48 [ 34.529799] Code: 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 00 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 00 00 00 00 2e 00 e2 ff 2e 72 65 <69> 2e 2e 00 00 00 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 00 [ 34.548585] RSP: 0018:ffff888094906f78 EFLAGS: 00010293 [ 34.548595] RAX: ffff888090ac4fb4 RBX: 0000000000000002 RCX: ffffffffff715fb0 [ 34.548601] RDX: fffffffffffffffc RSI: ffff8880913aeff0 RDI: ffff8880913af000 [ 34.548606] RBP: 0000000000000020 R08: ffff888090ac4fa0 R09: ffffed10121589f5 [ 34.548613] R10: ffff888090ac4faf R11: 00002e2e0004003c R12: 0000000000000001 [ 34.548619] R13: 000000000000001c R14: ffff888090ac4fa4 R15: 0000000000000010 [ 34.548627] FS: 00007fb7ae900700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 34.548634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.548641] CR2: ffff8880913af000 CR3: 00000000b452b000 CR4: 00000000003406f0 [ 34.548650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.548662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.598794] in:imklog[7783]: segfault at 0 ip 00005594b2c31f18 sp 00007f51ebeaf458 error 6 in rsyslogd[5594b2c1e000+95000] [ 34.601975] Call Trace: [ 34.609298] Code: e2 ff 2e 72 65 69 2e 2e 00 00 00 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 00 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 <00> 00 00 00 2e 00 e2 ff 2e 72 65 69 2e 2e 00 00 00 00 00 00 2e 00 [ 34.617452] leaf_paste_entries+0x449/0x910 [ 34.628775] traps: systemd[1] general protection ip:7f7b552fe25b sp:7fff34941af0 error:0 in libc-2.24.so[7f7b55287000+195000] [ 34.630566] balance_leaf+0x8fd7/0xca70 [ 34.697455] ? replace_key+0x160/0x160 [ 34.701359] do_balance+0x30a/0x760 [ 34.704992] ? get_right_neighbor_position+0x170/0x170 [ 34.710268] ? __mutex_unlock_slowpath+0xea/0x610 [ 34.715093] ? memset+0x20/0x40 [ 34.718357] reiserfs_paste_into_item+0x636/0x7d0 [ 34.723195] ? reiserfs_delete_object+0x200/0x200 [ 34.728038] ? search_by_entry_key+0xf30/0xf30 [ 34.732597] ? yura_hash+0x1b3/0x2a0 [ 34.736293] ? make_cpu_key+0x22/0x2a0 [ 34.740161] reiserfs_add_entry+0x89a/0xcc0 [ 34.744471] ? reiserfs_lookup+0x490/0x490 [ 34.748685] ? wait_for_completion_io+0x10/0x10 [ 34.753335] ? do_journal_begin_r+0xd10/0x10b0 [ 34.757904] ? dquot_initialize_needed+0x290/0x290 [ 34.762816] reiserfs_mkdir+0x66e/0x980 [ 34.766770] ? reiserfs_mknod+0x700/0x700 [ 34.770898] ? lock_acquire+0x171/0x3c0 [ 34.774855] reiserfs_xattr_init+0x406/0xae0 [ 34.779244] reiserfs_fill_super+0x1f54/0x2d80 [ 34.783809] ? reiserfs_remount+0x1540/0x1540 [ 34.788373] ? lock_downgrade+0x720/0x720 [ 34.792508] ? snprintf+0xbb/0xf0 [ 34.795944] ? wait_for_completion_io+0x10/0x10 [ 34.800602] mount_bdev+0x2fc/0x3b0 [ 34.804382] ? reiserfs_remount+0x1540/0x1540 [ 34.808865] mount_fs+0xa3/0x310 [ 34.812225] vfs_kern_mount.part.0+0x68/0x470 [ 34.816701] do_mount+0x115c/0x2f50 [ 34.820311] ? lock_acquire+0x170/0x3c0 [ 34.824267] ? check_preemption_disabled+0x41/0x280 [ 34.829266] ? copy_mount_string+0x40/0x40 [ 34.833514] ? copy_mount_options+0x59/0x380 [ 34.837905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 34.842904] ? kmem_cache_alloc_trace+0x323/0x380 [ 34.847738] ? copy_mount_options+0x26f/0x380 [ 34.852216] ksys_mount+0xcf/0x130 [ 34.855742] __x64_sys_mount+0xba/0x150 [ 34.859702] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 34.864273] do_syscall_64+0xf9/0x620 [ 34.868070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.873241] RIP: 0033:0x7fb7ae95407a [ 34.876940] Code: 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 34.895962] RSP: 002b:00007fb7ae900168 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 34.903649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb7ae95407a [ 34.910900] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fb7ae900180 [ 34.918159] RBP: 0000000000000004 R08: 00007fb7ae9001c0 R09: 00007fb7ae9006b8 [ 34.919476] systemd: 45 output lines suppressed due to ratelimiting [ 34.925425] R10: 000000000020441a R11: 0000000000000286 R12: 00007fb7ae9001c0 [ 34.939090] R13: 0000000000000008 R14: 00007fb7ae900180 R15: 0000000020000600 [ 34.946365] Modules linked in: [ 34.949553] CR2: ffff8880913af000 [ 34.953004] ---[ end trace 2affd36cd395dc8a ]--- [ 34.957790] RIP: 0010:__memmove+0x24/0x1a0 [ 34.962002] Code: 90 90 90 90 90 90 48 89 f8 48 83 fa 20 0f 82 03 01 00 00 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f 9f 00 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 3b 48 83 ea 20 48 [ 34.980998] RSP: 0018:ffff888094906f78 EFLAGS: 00010293 [ 34.986360] RAX: ffff888090ac4fb4 RBX: 0000000000000002 RCX: ffffffffff715fb0 [ 34.993610] RDX: fffffffffffffffc RSI: ffff8880913aeff0 RDI: ffff8880913af000 [ 35.000863] RBP: 0000000000000020 R08: ffff888090ac4fa0 R09: ffffed10121589f5 [ 35.008110] R10: ffff888090ac4faf R11: 00002e2e0004003c R12: 0000000000000001 [ 35.015358] R13: 000000000000001c R14: ffff888090ac4fa4 R15: 0000000000000010 [ 35.022792] FS: 00007fb7ae900700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 35.030997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.036857] CR2: ffff8880913af000 CR3: 00000000b452b000 CR4: 00000000003406f0 [ 35.044108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.051356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.058603] Kernel panic - not syncing: Fatal exception [ 35.064105] Kernel Offset: disabled [ 35.067717] Rebooting in 86400 seconds..