[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.927786] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.935022] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 35.943595] F2FS-fs (loop0): invalid crc value [ 35.959825] attempt to access beyond end of device [ 35.965446] loop0: rw=12288, want=20488, limit=16479 [ 35.970603] attempt to access beyond end of device [ 35.975830] loop0: rw=12288, want=20496, limit=16479 [ 35.980985] attempt to access beyond end of device [ 35.986031] loop0: rw=12288, want=20504, limit=16479 [ 35.991213] attempt to access beyond end of device [ 35.996647] loop0: rw=12288, want=20512, limit=16479 [ 36.003149] attempt to access beyond end of device [ 36.008285] loop0: rw=12288, want=20520, limit=16479 [ 36.013452] attempt to access beyond end of device [ 36.018472] loop0: rw=12288, want=20528, limit=16479 [ 36.023926] attempt to access beyond end of device [ 36.028856] loop0: rw=12288, want=20536, limit=16479 [ 36.034178] attempt to access beyond end of device [ 36.039127] loop0: rw=12288, want=20544, limit=16479 [ 36.044592] attempt to access beyond end of device [ 36.049629] loop0: rw=12288, want=20488, limit=16479 [ 36.054870] attempt to access beyond end of device [ 36.059808] loop0: rw=12288, want=20488, limit=16479 [ 36.065039] attempt to access beyond end of device [ 36.070242] loop0: rw=12288, want=20488, limit=16479 [ 36.075482] attempt to access beyond end of device [ 36.080412] loop0: rw=12288, want=20488, limit=16479 [ 36.085674] attempt to access beyond end of device [ 36.090627] loop0: rw=12288, want=20488, limit=16479 [ 36.096562] attempt to access beyond end of device [ 36.101780] loop0: rw=12288, want=20488, limit=16479 [ 36.107111] attempt to access beyond end of device [ 36.112063] loop0: rw=12288, want=20488, limit=16479 [ 36.117278] attempt to access beyond end of device [ 36.122221] loop0: rw=12288, want=20488, limit=16479 [ 36.127539] attempt to access beyond end of device [ 36.132471] loop0: rw=12288, want=20488, limit=16479 [ 36.138136] ------------[ cut here ]------------ [ 36.142906] kernel BUG at fs/f2fs/checkpoint.c:127! [ 36.148028] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 36.153682] CPU: 1 PID: 8120 Comm: syz-executor481 Not tainted 4.19.168-syzkaller #0 [ 36.161832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.171193] RIP: 0010:f2fs_get_meta_page_nofail+0x12d/0x150 [ 36.176897] Code: e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 75 23 83 8b 84 00 00 00 08 4c 89 e6 4c 89 ef e8 0b 13 02 05 48 89 ef e8 83 a7 02 00 <0f> 0b e8 0c 16 84 fe eb 80 be 04 00 00 00 e8 f0 19 84 fe eb d1 0f [ 36.195971] RSP: 0018:ffff8880b0c3f8d0 EFLAGS: 00010293 [ 36.201353] RAX: ffff8880911fe440 RBX: ffff888094caa4c0 RCX: ffffffff83168141 [ 36.208621] RDX: 0000000000000000 RSI: ffffffff8313fa2d RDI: 0000000000000005 [ 36.215976] RBP: ffff888095f89140 R08: ffffffff8cd40820 R09: 0000000000000001 [ 36.223344] R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000286 [ 36.230607] R13: ffff888095f89638 R14: 0000000000000000 R15: ffff888095f89140 [ 36.237893] FS: 0000000002308880(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 36.246242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.252105] CR2: 00007f27ae9d5020 CR3: 000000009c24e000 CR4: 00000000001406e0 [ 36.259369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.266633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.275233] Call Trace: [ 36.277811] __f2fs_build_free_nids+0x338/0x1020 [ 36.282547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 36.287637] f2fs_build_node_manager+0x24c5/0x31d0 [ 36.292616] f2fs_fill_super+0x31fd/0x7050 [ 36.296846] ? snprintf+0xbb/0xf0 [ 36.300296] ? f2fs_commit_super+0x400/0x400 [ 36.304706] ? wait_for_completion_io+0x10/0x10 [ 36.309371] ? set_blocksize+0x163/0x3f0 [ 36.313416] mount_bdev+0x2fc/0x3b0 [ 36.317029] ? f2fs_commit_super+0x400/0x400 [ 36.321420] mount_fs+0xa3/0x310 [ 36.324767] vfs_kern_mount.part.0+0x68/0x470 [ 36.330120] do_mount+0x113c/0x2f10 [ 36.333729] ? lock_acquire+0x170/0x3c0 [ 36.337695] ? check_preemption_disabled+0x41/0x280 [ 36.342724] ? copy_mount_string+0x40/0x40 [ 36.346958] ? copy_mount_options+0x59/0x380 [ 36.351536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 36.356551] ? kmem_cache_alloc_trace+0x323/0x380 [ 36.361485] ? copy_mount_options+0x26f/0x380 [ 36.365962] ksys_mount+0xcf/0x130 [ 36.369494] __x64_sys_mount+0xba/0x150 [ 36.373462] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 36.378052] do_syscall_64+0xf9/0x620 [ 36.381837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.387005] RIP: 0033:0x4470ca [ 36.390187] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 36.409108] RSP: 002b:00007ffeb4c35d38 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 36.417706] RAX: ffffffffffffffda RBX: 00007ffeb4c35d90 RCX: 00000000004470ca [ 36.424957] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffeb4c35d50 [ 36.432217] RBP: 00007ffeb4c35d50 R08: 00007ffeb4c35d90 R09: 00007ffe00000015 [ 36.440333] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000e [ 36.447595] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 36.454846] Modules linked in: [ 36.458598] ---[ end trace 504b76a3de45e2ca ]--- [ 36.463414] RIP: 0010:f2fs_get_meta_page_nofail+0x12d/0x150 [ 36.469137] Code: e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 75 23 83 8b 84 00 00 00 08 4c 89 e6 4c 89 ef e8 0b 13 02 05 48 89 ef e8 83 a7 02 00 <0f> 0b e8 0c 16 84 fe eb 80 be 04 00 00 00 e8 f0 19 84 fe eb d1 0f [ 36.488297] RSP: 0018:ffff8880b0c3f8d0 EFLAGS: 00010293 [ 36.493725] RAX: ffff8880911fe440 RBX: ffff888094caa4c0 RCX: ffffffff83168141 [ 36.500990] RDX: 0000000000000000 RSI: ffffffff8313fa2d RDI: 0000000000000005 [ 36.508321] RBP: ffff888095f89140 R08: ffffffff8cd40820 R09: 0000000000000001 [ 36.515730] R10: 0000000000000005 R11: 0000000000000001 R12: 0000000000000286 [ 36.523007] R13: ffff888095f89638 R14: 0000000000000000 R15: ffff888095f89140 [ 36.530321] FS: 0000000002308880(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 36.538630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.544551] CR2: 00007f27ae9d5020 CR3: 000000009c24e000 CR4: 00000000001406e0 [ 36.551836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.559161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.567363] Kernel panic - not syncing: Fatal exception [ 36.573143] Kernel Offset: disabled [ 36.576759] Rebooting in 86400 seconds..