[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.415505] audit: type=1400 audit(1601445607.360:8): avc: denied { execmem } for pid=6350 comm="syz-executor951" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.425604] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 32.445133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 32.453479] F2FS-fs (loop0): invalid crc value [ 32.507112] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 32.513793] F2FS-fs (loop0): Mounted with checkpoint version = 27d57943 [ 32.522030] SELinux: (dev loop0, type f2fs) getxattr errno 2 [ 32.528413] ------------[ cut here ]------------ [ 32.533155] kernel BUG at fs/f2fs/inode.c:600! [ 32.538930] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 32.544275] Modules linked in: [ 32.547441] CPU: 0 PID: 6350 Comm: syz-executor951 Not tainted 4.14.198-syzkaller #0 [ 32.555290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.564618] task: ffff88809b4ce540 task.stack: ffff888086440000 [ 32.570650] RIP: 0010:f2fs_evict_inode+0xd97/0x1070 [ 32.575634] RSP: 0018:ffff888086447aa0 EFLAGS: 00010297 [ 32.580968] RAX: ffff88809b4ce540 RBX: ffff888097fb6600 RCX: 0000000000000001 [ 32.589181] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888097fb6684 [ 32.596457] RBP: ffff888082aa6000 R08: 0000000000000001 R09: 0000000000000001 [ 32.603700] R10: 0000000000000000 R11: ffff88809b4ce540 R12: ffff888097faa2c0 [ 32.610940] R13: ffff888097fab068 R14: ffff888082aa63d0 R15: dffffc0000000000 [ 32.618214] FS: 0000000001d1f880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 32.626440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.632298] CR2: 0000561cb953b4d0 CR3: 00000000a9b11000 CR4: 00000000001406f0 [ 32.639554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.646796] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.654049] Call Trace: [ 32.656612] ? f2fs_write_inode+0x1d0/0x1d0 [ 32.660906] evict+0x2c8/0x700 [ 32.664070] iput+0x458/0x7e0 [ 32.667147] ? f2fs_show_options+0xdf0/0xdf0 [ 32.671526] dentry_unlink_inode+0x25c/0x310 [ 32.675919] __dentry_kill+0x320/0x550 [ 32.679777] ? dput.part.0+0x27/0x710 [ 32.683546] dput.part.0+0x56f/0x710 [ 32.687244] shrink_dcache_for_umount+0xcb/0x270 [ 32.691972] generic_shutdown_super+0x68/0x370 [ 32.696528] kill_block_super+0x95/0xe0 [ 32.700474] deactivate_locked_super+0x6c/0xd0 [ 32.705028] mount_fs+0x23a/0x2a0 [ 32.708453] vfs_kern_mount.part.0+0x5b/0x470 [ 32.712922] do_mount+0xe53/0x2a00 [ 32.716433] ? copy_mount_string+0x40/0x40 [ 32.720638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 32.725622] ? copy_mnt_ns+0xa30/0xa30 [ 32.729494] ? copy_mount_options+0x1fa/0x2f0 [ 32.733972] ? copy_mnt_ns+0xa30/0xa30 [ 32.737829] SyS_mount+0xa8/0x120 [ 32.741252] ? copy_mnt_ns+0xa30/0xa30 [ 32.745112] do_syscall_64+0x1d5/0x640 [ 32.748974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 32.754133] RIP: 0033:0x44703a [ 32.757296] RSP: 002b:00007ffcb92c5f08 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 32.764976] RAX: ffffffffffffffda RBX: 00007ffcb92c5f60 RCX: 000000000044703a [ 32.772220] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffcb92c5f20 [ 32.779461] RBP: 00007ffcb92c5f20 R08: 00007ffcb92c5f60 R09: 00007ffc00000015 [ 32.786712] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000008 [ 32.793962] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 32.801208] Code: ad fe 48 c7 c2 e0 3d db 86 be 18 01 00 00 48 c7 c7 40 3e db 86 c6 05 55 d5 df 05 01 e8 ac fe 98 fe e9 35 fc ff ff e8 c9 1b ad fe <0f> 0b 48 8b 7c 24 28 e8 8d ee d6 fe e9 ec f2 ff ff e8 83 ee d6 [ 32.820266] RIP: f2fs_evict_inode+0xd97/0x1070 RSP: ffff888086447aa0 [ 32.828146] ---[ end trace f3b06f564c5dba73 ]--- [ 32.832900] Kernel panic - not syncing: Fatal exception [ 32.839269] Kernel Offset: disabled [ 32.842875] Rebooting in 86400 seconds..