[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.253233] erofs: read_super, device -> /dev/loop0 [ 33.258867] erofs: options -> [ 33.263358] erofs: root inode @ nid 36 [ 33.268516] erofs: mounted on /dev/loop0 with opts: . [ 33.281678] attempt to access beyond end of device [ 33.286990] loop0: rw=4096, want=3272, limit=16 [ 33.291744] kasan: CONFIG_KASAN_INLINE enabled [ 33.296764] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 33.304138] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 33.310364] CPU: 0 PID: 8097 Comm: syz-executor600 Not tainted 4.19.211-syzkaller #0 [ 33.318276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.327625] RIP: 0010:z_erofs_map_blocks_iter+0x632/0x1aa0 [ 33.333237] Code: 0f b6 8c 24 9c 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 d3 e3 44 01 f3 81 e3 ff 0f 00 00 48 03 5c 24 30 48 89 d8 48 c1 e8 03 <0f> b6 0c 10 48 8d 43 01 48 89 c6 48 c1 ee 03 0f b6 14 16 48 89 de [ 33.352122] RSP: 0018:ffff8880b065f1e0 EFLAGS: 00010206 [ 33.357466] RAX: 0000a10ffffffe36 RBX: 0005087ffffff1b0 RCX: 0000000000000005 [ 33.364713] RDX: dffffc0000000000 RSI: 0000000000197d00 RDI: ffff8880a934f15c [ 33.371969] RBP: fffffffffffffffb R08: 0000000000000001 R09: 0000000000000000 [ 33.379222] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a934f0c0 [ 33.386596] R13: 0000000000000000 R14: 0000000000197d30 R15: ffff88808cbaf4c0 [ 33.393856] FS: 0000555556675300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 33.402071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.407928] CR2: 0000555d5db7c038 CR3: 000000009776e000 CR4: 00000000003406f0 [ 33.415192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.422440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.429697] Call Trace: [ 33.432274] ? check_preemption_disabled+0x41/0x280 [ 33.437270] erofs_map_blocks_iter+0x6d/0x3b0 [ 33.441745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.446751] z_erofs_do_read_page+0x670/0x2820 [ 33.451319] ? z_erofs_vle_work_add_page+0x8b0/0x8b0 [ 33.456401] ? check_preemption_disabled+0x41/0x280 [ 33.461398] z_erofs_vle_normalaccess_readpage+0x136/0x460 [ 33.467001] ? z_erofs_submit_and_unzip.isra.0+0x1930/0x1930 [ 33.472783] ? add_to_page_cache_locked+0x40/0x40 [ 33.477616] do_read_cache_page+0x533/0x1170 [ 33.482007] ? check_preemption_disabled+0x41/0x280 [ 33.487008] ? z_erofs_submit_and_unzip.isra.0+0x1930/0x1930 [ 33.492781] erofs_namei+0x1ab/0x1740 [ 33.496567] ? check_preemption_disabled+0x41/0x280 [ 33.501574] erofs_lookup+0x143/0x500 [ 33.505351] ? erofs_namei+0x1740/0x1740 [ 33.509392] ? __lockdep_init_map+0x100/0x5a0 [ 33.513864] ? __lockdep_init_map+0x100/0x5a0 [ 33.518340] __lookup_slow+0x246/0x4a0 [ 33.522206] ? follow_dotdot_rcu+0x1040/0x1040 [ 33.526766] ? lookup_fast+0x4e9/0x1080 [ 33.530718] ? walk_component+0x798/0xda0 [ 33.534845] walk_component+0x7ac/0xda0 [ 33.538813] ? lookup_fast+0x1080/0x1080 [ 33.542853] ? capable_wrt_inode_uidgid+0x1d2/0x220 [ 33.547845] ? generic_permission+0x116/0x4d0 [ 33.552318] ? security_inode_permission+0xc5/0xf0 [ 33.557356] ? inode_permission.part.0+0x10c/0x450 [ 33.562276] link_path_walk.part.0+0x901/0x1230 [ 33.566931] ? walk_component+0xda0/0xda0 [ 33.571187] ? depot_save_stack+0x258/0x410 [ 33.575536] path_parentat+0x51/0x140 [ 33.579332] filename_parentat+0x198/0x590 [ 33.583552] ? getname+0x20/0x20 [ 33.586904] ? cache_alloc_refill+0x2f8/0x340 [ 33.591385] ? do_raw_spin_lock+0xcb/0x220 [ 33.595599] ? do_raw_spin_unlock+0x171/0x230 [ 33.600073] filename_create+0x9e/0x490 [ 33.604137] ? kern_path_mountpoint+0x40/0x40 [ 33.608613] ? strncpy_from_user+0x2a2/0x350 [ 33.613003] ? getname_flags+0x25b/0x590 [ 33.617045] do_mknodat.part.0+0xcd/0x480 [ 33.621187] ? kern_path_create+0x40/0x40 [ 33.625841] ? fput+0x2b/0x190 [ 33.629014] __x64_sys_mknodat+0x116/0x160 [ 33.633236] do_syscall_64+0xf9/0x620 [ 33.637141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.642308] RIP: 0033:0x7f65676ece89 [ 33.646010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 33.665101] RSP: 002b:00007ffe535fde28 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 33.672809] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65676ece89 [ 33.680067] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000005 [ 33.687325] RBP: 00007f65676ac720 R08: 0000000000000000 R09: 0000000000000000 [ 33.694610] R10: 0000000000000701 R11: 0000000000000246 R12: 00007f65676ac7b0 [ 33.701861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 33.709110] Modules linked in: [ 33.712482] ---[ end trace 257c777502d8ae36 ]--- [ 33.717275] RIP: 0010:z_erofs_map_blocks_iter+0x632/0x1aa0 [ 33.722904] Code: 0f b6 8c 24 9c 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 d3 e3 44 01 f3 81 e3 ff 0f 00 00 48 03 5c 24 30 48 89 d8 48 c1 e8 03 <0f> b6 0c 10 48 8d 43 01 48 89 c6 48 c1 ee 03 0f b6 14 16 48 89 de [ 33.741936] RSP: 0018:ffff8880b065f1e0 EFLAGS: 00010206 [ 33.747329] RAX: 0000a10ffffffe36 RBX: 0005087ffffff1b0 RCX: 0000000000000005 [ 33.754605] RDX: dffffc0000000000 RSI: 0000000000197d00 RDI: ffff8880a934f15c [ 33.762067] RBP: fffffffffffffffb R08: 0000000000000001 R09: 0000000000000000 [ 33.769370] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880a934f0c0 [ 33.776669] R13: 0000000000000000 R14: 0000000000197d30 R15: ffff88808cbaf4c0 [ 33.783933] FS: 0000555556675300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 33.792183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.798346] CR2: 0000555d5db7c038 CR3: 000000009776e000 CR4: 00000000003406f0 [ 33.805618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.812936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.820242] Kernel panic - not syncing: Fatal exception [ 33.825691] Kernel Offset: disabled [ 33.829371] Rebooting in 86400 seconds..