[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 145.467558] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 145.476518] REISERFS (device loop0): using ordered data mode [ 145.482673] reiserfs: using flush barriers [ 145.488471] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 145.504710] REISERFS (device loop0): checking transaction log (loop0) [ 145.567711] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 145.583301] REISERFS (device loop0): Using r5 hash to sort names [ 145.589716] REISERFS (device loop0): using 3.5.x disk format [ 145.652158] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 145.661532] REISERFS (device loop0): using ordered data mode [ 145.668572] reiserfs: using flush barriers [ 145.675086] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 145.691740] REISERFS (device loop0): checking transaction log (loop0) executing program [ 145.752100] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 145.767265] REISERFS (device loop0): Using r5 hash to sort names [ 145.773529] REISERFS (device loop0): using 3.5.x disk format [ 145.837204] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 145.846089] REISERFS (device loop0): using ordered data mode [ 145.851904] reiserfs: using flush barriers [ 145.857818] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 145.873361] REISERFS (device loop0): checking transaction log (loop0) [ 145.932898] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 145.949360] REISERFS (device loop0): Using r5 hash to sort names [ 145.956071] REISERFS (device loop0): using 3.5.x disk format [ 146.023257] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 146.031929] REISERFS (device loop0): using ordered data mode [ 146.038536] reiserfs: using flush barriers [ 146.044953] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 146.060774] REISERFS (device loop0): checking transaction log (loop0) [ 146.120282] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 146.135503] REISERFS (device loop0): Using r5 hash to sort names [ 146.141698] REISERFS (device loop0): using 3.5.x disk format executing program [ 146.300034] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 146.309386] REISERFS (device loop0): using ordered data mode [ 146.315348] reiserfs: using flush barriers [ 146.320519] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 146.337774] REISERFS (device loop0): checking transaction log (loop0) [ 146.396127] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 146.411266] REISERFS (device loop0): Using r5 hash to sort names [ 146.417553] REISERFS (device loop0): using 3.5.x disk format [ 146.483787] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 146.492740] REISERFS (device loop0): using ordered data mode [ 146.498608] reiserfs: using flush barriers [ 146.505855] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 146.522043] REISERFS (device loop0): checking transaction log (loop0) [ 146.581872] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 146.597830] REISERFS (device loop0): Using r5 hash to sort names [ 146.604510] REISERFS (device loop0): using 3.5.x disk format executing program [ 146.714113] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 146.722945] REISERFS (device loop0): using ordered data mode [ 146.729094] reiserfs: using flush barriers [ 146.737813] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 146.754418] REISERFS (device loop0): checking transaction log (loop0) [ 146.818058] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 146.834190] REISERFS (device loop0): Using r5 hash to sort names [ 146.841221] REISERFS (device loop0): using 3.5.x disk format [ 146.894737] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 146.905445] REISERFS (device loop0): using ordered data mode [ 146.911558] reiserfs: using flush barriers [ 146.919730] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 146.936408] REISERFS (device loop0): checking transaction log (loop0) [ 146.996524] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 147.012379] REISERFS (device loop0): Using r5 hash to sort names [ 147.018664] REISERFS (device loop0): using 3.5.x disk format [ 147.025012] ------------[ cut here ]------------ [ 147.029849] kernel BUG at fs/reiserfs/journal.c:3643! [ 147.035125] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 147.040522] CPU: 1 PID: 8182 Comm: syz-executor067 Not tainted 4.19.152-syzkaller #0 [ 147.048380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.057736] RIP: 0010:do_journal_end+0x3601/0x4840 [ 147.062646] Code: 05 0f ff ff e9 9a f9 ff ff e8 2b 19 8a ff 0f 0b e8 24 19 8a ff 0f 0b e8 1d 19 8a ff 0f 0b e8 16 19 8a ff 0f 0b e8 0f 19 8a ff <0f> 0b e8 08 19 8a ff 0f 0b e8 01 19 8a ff 48 8b 44 24 08 48 8b 54 [ 147.081535] RSP: 0018:ffff8880b135f998 EFLAGS: 00010293 [ 147.086880] RAX: ffff8880abe161c0 RBX: ffffc90005c87000 RCX: ffffffff81da83c3 [ 147.094153] RDX: 0000000000000000 RSI: ffffffff81dab3a1 RDI: 0000000000000007 [ 147.101439] RBP: ffff888093d86680 R08: 0000000000000001 R09: 0000000000000000 [ 147.108687] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 147.115936] R13: ffffc90005c87058 R14: ffff8880b135fbc8 R15: 0000000000000000 [ 147.123191] FS: 00007f33b1d9c700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 147.131394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.137258] CR2: 00007ff87f293020 CR3: 000000009839e000 CR4: 00000000001406e0 [ 147.144527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.153949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.161209] Call Trace: [ 147.163794] ? reiserfs_info.cold+0x1d/0x7c [ 147.168114] journal_end+0x277/0x310 [ 147.171835] reiserfs_fill_super+0x2002/0x2ce4 [ 147.176408] ? reiserfs_remount+0x1540/0x1540 [ 147.180893] ? lock_downgrade+0x720/0x720 [ 147.185030] ? snprintf+0xbb/0xf0 [ 147.188472] ? wait_for_completion_io+0x10/0x10 [ 147.193137] mount_bdev+0x2fc/0x3b0 [ 147.196747] ? reiserfs_remount+0x1540/0x1540 [ 147.201240] mount_fs+0xa3/0x30c [ 147.204601] vfs_kern_mount.part.0+0x68/0x470 [ 147.209089] do_mount+0x113c/0x2f10 [ 147.212724] ? lock_acquire+0x170/0x3c0 [ 147.216694] ? check_preemption_disabled+0x41/0x280 [ 147.221702] ? copy_mount_string+0x40/0x40 [ 147.226021] ? copy_mount_options+0x59/0x380 [ 147.230429] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 147.235437] ? kmem_cache_alloc_trace+0x323/0x380 [ 147.240284] ? copy_mount_options+0x26f/0x380 [ 147.244762] ksys_mount+0xcf/0x130 [ 147.248284] __x64_sys_mount+0xba/0x150 [ 147.252248] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 147.256833] do_syscall_64+0xf9/0x620 [ 147.260632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 147.265802] RIP: 0033:0x44d43a [ 147.268999] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 5d a1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 3a a1 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 147.288164] RSP: 002b:00007f33b1d9bbf8 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 147.295860] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000044d43a [ 147.303116] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f33b1d9bc10 [ 147.310373] RBP: 00007f33b1d9bc10 R08: 00007f33b1d9bc50 R09: 0000000000000000 [ 147.317636] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000004 [ 147.324901] R13: 00007f33b1d9bc50 R14: 00007f33b1d9c6d0 R15: 0000000000000005 [ 147.332159] Modules linked in: [ 147.336370] ---[ end trace 19bf299bd50840af ]--- [ 147.341155] RIP: 0010:do_journal_end+0x3601/0x4840 [ 147.346135] Code: 05 0f ff ff e9 9a f9 ff ff e8 2b 19 8a ff 0f 0b e8 24 19 8a ff 0f 0b e8 1d 19 8a ff 0f 0b e8 16 19 8a ff 0f 0b e8 0f 19 8a ff <0f> 0b e8 08 19 8a ff 0f 0b e8 01 19 8a ff 48 8b 44 24 08 48 8b 54 [ 147.365183] RSP: 0018:ffff8880b135f998 EFLAGS: 00010293 [ 147.370557] RAX: ffff8880abe161c0 RBX: ffffc90005c87000 RCX: ffffffff81da83c3 [ 147.377888] RDX: 0000000000000000 RSI: ffffffff81dab3a1 RDI: 0000000000000007 [ 147.385225] RBP: ffff888093d86680 R08: 0000000000000001 R09: 0000000000000000 [ 147.392553] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 147.399825] R13: ffffc90005c87058 R14: ffff8880b135fbc8 R15: 0000000000000000 [ 147.407171] FS: 00007f33b1d9c700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 147.415461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.421338] CR2: 00007ff87f293020 CR3: 000000009839e000 CR4: 00000000001406e0 [ 147.428667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.435983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.443452] Kernel panic - not syncing: Fatal exception [ 147.449254] Kernel Offset: disabled [ 147.452867] Rebooting in 86400 seconds..