[ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.059277] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.066605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.080609] F2FS-fs (loop0): invalid crc value [ 35.091927] attempt to access beyond end of device [ 35.097550] loop0: rw=12288, want=24584, limit=24560 [ 35.102784] attempt to access beyond end of device [ 35.108333] loop0: rw=12288, want=24592, limit=24560 [ 35.113488] attempt to access beyond end of device [ 35.119146] loop0: rw=12288, want=24600, limit=24560 [ 35.124400] attempt to access beyond end of device [ 35.129324] loop0: rw=12288, want=24608, limit=24560 [ 35.134601] attempt to access beyond end of device [ 35.139531] loop0: rw=12288, want=24616, limit=24560 [ 35.144788] attempt to access beyond end of device [ 35.149709] loop0: rw=12288, want=24624, limit=24560 [ 35.155053] attempt to access beyond end of device [ 35.159983] loop0: rw=12288, want=24632, limit=24560 [ 35.165232] attempt to access beyond end of device [ 35.170305] loop0: rw=12288, want=24640, limit=24560 [ 35.175723] attempt to access beyond end of device [ 35.180743] loop0: rw=12288, want=24584, limit=24560 [ 35.185968] attempt to access beyond end of device [ 35.190891] loop0: rw=12288, want=24584, limit=24560 [ 35.196093] attempt to access beyond end of device [ 35.201013] loop0: rw=12288, want=24584, limit=24560 [ 35.206222] attempt to access beyond end of device [ 35.211147] loop0: rw=12288, want=24584, limit=24560 [ 35.216352] attempt to access beyond end of device [ 35.221283] loop0: rw=12288, want=24584, limit=24560 [ 35.226700] attempt to access beyond end of device [ 35.231626] loop0: rw=12288, want=24584, limit=24560 [ 35.236923] attempt to access beyond end of device [ 35.241945] loop0: rw=12288, want=24584, limit=24560 [ 35.247262] attempt to access beyond end of device [ 35.256095] loop0: rw=12288, want=24584, limit=24560 [ 35.261292] attempt to access beyond end of device [ 35.266301] loop0: rw=12288, want=24584, limit=24560 [ 35.271728] ------------[ cut here ]------------ [ 35.276465] kernel BUG at fs/f2fs/checkpoint.c:127! [ 35.281563] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 35.286927] CPU: 1 PID: 8093 Comm: syz-executor740 Not tainted 4.19.211-syzkaller #0 [ 35.295847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.305193] RIP: 0010:f2fs_get_meta_page_nofail+0x12d/0x150 [ 35.310891] Code: e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 75 23 83 8b 84 00 00 00 08 4c 89 e6 4c 89 ef e8 3b d2 03 05 48 89 ef e8 f3 a7 02 00 <0f> 0b e8 1c e4 82 fe eb 80 be 04 00 00 00 e8 00 e8 82 fe eb d1 66 [ 35.329867] RSP: 0018:ffff8880a25c78d0 EFLAGS: 00010293 [ 35.335208] RAX: ffff8880b325a380 RBX: ffff888095270800 RCX: ffffffff831805c1 [ 35.342460] RDX: 0000000000000000 RSI: ffffffff83157e3d RDI: 0000000000000005 [ 35.349727] RBP: ffff888091ee8340 R08: ffffffff8cd50d18 R09: 0000000000000001 [ 35.356985] R10: 0000000000000005 R11: 0000000000074071 R12: 0000000000000286 [ 35.364232] R13: ffff888091ee8838 R14: 0000000000000000 R15: ffff888091ee8340 [ 35.371482] FS: 0000555557403300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 35.379697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.385567] CR2: 0000563ec9529160 CR3: 00000000b2941000 CR4: 00000000003406e0 [ 35.392817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.400065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.407309] Call Trace: [ 35.409882] __f2fs_build_free_nids+0x338/0x1020 [ 35.414616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 35.419612] f2fs_build_node_manager+0x24c5/0x31d0 [ 35.424522] f2fs_fill_super+0x31fd/0x7050 [ 35.428837] ? snprintf+0xbb/0xf0 [ 35.432271] ? f2fs_commit_super+0x400/0x400 [ 35.436659] ? wait_for_completion_io+0x10/0x10 [ 35.441305] ? set_blocksize+0x163/0x3f0 [ 35.445356] mount_bdev+0x2fc/0x3b0 [ 35.448959] ? f2fs_commit_super+0x400/0x400 [ 35.453430] mount_fs+0xa3/0x310 [ 35.456788] vfs_kern_mount.part.0+0x68/0x470 [ 35.461304] do_mount+0x115c/0x2f50 [ 35.464922] ? do_raw_spin_unlock+0x171/0x230 [ 35.469410] ? check_preemption_disabled+0x41/0x280 [ 35.474424] ? copy_mount_string+0x40/0x40 [ 35.478638] ? copy_mount_options+0x59/0x380 [ 35.483024] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 35.488034] ? kmem_cache_alloc_trace+0x323/0x380 [ 35.492855] ? copy_mount_options+0x26f/0x380 [ 35.497327] ksys_mount+0xcf/0x130 [ 35.500848] __x64_sys_mount+0xba/0x150 [ 35.504801] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 35.509360] do_syscall_64+0xf9/0x620 [ 35.513140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.518394] RIP: 0033:0x7f64bdc106da [ 35.522085] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.541205] RSP: 002b:00007ffce7e5d848 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 35.548993] RAX: ffffffffffffffda RBX: 00007ffce7e5d8a0 RCX: 00007f64bdc106da [ 35.556270] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffce7e5d860 [ 35.563529] RBP: 00007ffce7e5d860 R08: 00007ffce7e5d8a0 R09: 0000000000000000 [ 35.570783] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000458 [ 35.578030] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000019 [ 35.585283] Modules linked in: [ 35.588547] ---[ end trace 7a94f4de565d4d1f ]--- [ 35.593315] RIP: 0010:f2fs_get_meta_page_nofail+0x12d/0x150 [ 35.599088] Code: e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 75 23 83 8b 84 00 00 00 08 4c 89 e6 4c 89 ef e8 3b d2 03 05 48 89 ef e8 f3 a7 02 00 <0f> 0b e8 1c e4 82 fe eb 80 be 04 00 00 00 e8 00 e8 82 fe eb d1 66 [ 35.618099] RSP: 0018:ffff8880a25c78d0 EFLAGS: 00010293 [ 35.623456] RAX: ffff8880b325a380 RBX: ffff888095270800 RCX: ffffffff831805c1 [ 35.630765] RDX: 0000000000000000 RSI: ffffffff83157e3d RDI: 0000000000000005 [ 35.638098] RBP: ffff888091ee8340 R08: ffffffff8cd50d18 R09: 0000000000000001 [ 35.645391] R10: 0000000000000005 R11: 0000000000074071 R12: 0000000000000286 [ 35.652651] R13: ffff888091ee8838 R14: 0000000000000000 R15: ffff888091ee8340 [ 35.659968] FS: 0000555557403300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 35.668254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.674186] CR2: 0000563ec9529160 CR3: 00000000b2941000 CR4: 00000000003406e0 [ 35.681491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.688790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.696114] Kernel panic - not syncing: Fatal exception [ 35.701765] Kernel Offset: disabled [ 35.705375] Rebooting in 86400 seconds..