[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.16' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.112657] audit: type=1400 audit(1602562875.966:8): avc: denied { execmem } for pid=6497 comm="syz-executor878" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.127717] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 41.140723] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 41.154436] F2FS-fs (loop0): invalid crc value [ 41.173508] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 41.181860] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 41.214901] ------------[ cut here ]------------ [ 41.219678] kernel BUG at fs/f2fs/inode.c:706! [ 41.225374] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.230765] CPU: 1 PID: 6497 Comm: syz-executor878 Not tainted 4.19.150-syzkaller #0 [ 41.238630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.248009] RIP: 0010:f2fs_evict_inode+0x10a1/0x1380 [ 41.253092] Code: de e8 13 b0 3f fe 85 db 0f 84 1a ff ff ff e9 08 ff ff ff e8 91 ae 3f fe 48 89 ef e8 e9 6d 03 00 e9 dd f3 ff ff e8 7f ae 3f fe <0f> 0b 48 c7 c7 e0 36 f1 89 e8 41 f8 83 00 4c 89 f7 e8 69 fd 78 fe [ 41.271990] RSP: 0018:ffff88808b5d7940 EFLAGS: 00010293 [ 41.277345] RAX: ffff8880a428e440 RBX: 0000000000000001 RCX: ffffffff833217b0 [ 41.284593] RDX: 0000000000000000 RSI: ffffffff833223e1 RDI: 0000000000000007 [ 41.291854] RBP: ffff8880800470c0 R08: 0000000000000000 R09: 0000000000000000 [ 41.299101] R10: 0000000000000007 R11: 00000000000005c9 R12: ffff8880a3ab9040 [ 41.306353] R13: ffff888080047490 R14: dffffc0000000000 R15: ffff8880a3ab9ee4 [ 41.313616] FS: 0000000000d94880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 41.321819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.327678] CR2: 000055a0f4c64750 CR3: 000000008fd80000 CR4: 00000000001406e0 [ 41.334930] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.342190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.349462] Call Trace: [ 41.352042] ? f2fs_write_inode+0x600/0x600 [ 41.356431] evict+0x2ed/0x780 [ 41.360408] iput+0x511/0x890 [ 41.363497] f2fs_fill_super+0x5b26/0x7920 [ 41.367722] ? snprintf+0xbb/0xf0 [ 41.371167] ? f2fs_commit_super+0x400/0x400 [ 41.375579] ? __mutex_add_waiter+0x160/0x160 [ 41.380056] ? set_blocksize+0x163/0x3f0 [ 41.384109] mount_bdev+0x2fc/0x3b0 [ 41.387722] ? f2fs_commit_super+0x400/0x400 [ 41.392115] mount_fs+0xa3/0x318 [ 41.395476] vfs_kern_mount.part.0+0x68/0x470 [ 41.399955] do_mount+0x51c/0x2f10 [ 41.403501] ? do_raw_spin_unlock+0x171/0x240 [ 41.407991] ? check_preemption_disabled+0x41/0x2b0 [ 41.412991] ? copy_mount_string+0x40/0x40 [ 41.417220] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 41.422053] ? copy_mount_options+0x261/0x370 [ 41.426532] ksys_mount+0xcf/0x130 [ 41.430056] __x64_sys_mount+0xba/0x150 [ 41.434026] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 41.438606] do_syscall_64+0xf9/0x670 [ 41.442399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.447570] RIP: 0033:0x44703a [ 41.450740] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 41.469624] RSP: 002b:00007ffd403e1128 EFLAGS: 00000297 ORIG_RAX: 00000000000000a5 [ 41.477313] RAX: ffffffffffffffda RBX: 00007ffd403e1180 RCX: 000000000044703a [ 41.484563] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd403e1140 [ 41.491829] RBP: 00007ffd403e1140 R08: 00007ffd403e1180 R09: 00007ffd00000015 [ 41.499103] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000008 [ 41.506352] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 41.513970] Modules linked in: [ 41.517587] ---[ end trace 59dc4f5a4e8716c6 ]--- [ 41.522880] RIP: 0010:f2fs_evict_inode+0x10a1/0x1380 [ 41.528078] Code: de e8 13 b0 3f fe 85 db 0f 84 1a ff ff ff e9 08 ff ff ff e8 91 ae 3f fe 48 89 ef e8 e9 6d 03 00 e9 dd f3 ff ff e8 7f ae 3f fe <0f> 0b 48 c7 c7 e0 36 f1 89 e8 41 f8 83 00 4c 89 f7 e8 69 fd 78 fe [ 41.547160] RSP: 0018:ffff88808b5d7940 EFLAGS: 00010293 [ 41.552526] RAX: ffff8880a428e440 RBX: 0000000000000001 RCX: ffffffff833217b0 [ 41.559880] RDX: 0000000000000000 RSI: ffffffff833223e1 RDI: 0000000000000007 [ 41.567242] RBP: ffff8880800470c0 R08: 0000000000000000 R09: 0000000000000000 [ 41.574520] R10: 0000000000000007 R11: 00000000000005c9 R12: ffff8880a3ab9040 [ 41.581871] R13: ffff888080047490 R14: dffffc0000000000 R15: ffff8880a3ab9ee4 [ 41.589240] FS: 0000000000d94880(0000) GS:ffff8880ae300000(0000) knlGS:0000000000000000 [ 41.597611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.603493] CR2: 000055a0f4c64750 CR3: 000000008fd80000 CR4: 00000000001406e0 [ 41.610877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.618193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.625463] Kernel panic - not syncing: Fatal exception [ 41.631819] Kernel Offset: disabled [ 41.635457] Rebooting in 86400 seconds..