Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. executing program [ 1183.875367][ T27] audit: type=1400 audit(1602118409.579:8): avc: denied { execmem } for pid=6890 comm="syz-executor137" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1183.905467][ T6890] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1183.914372][ T6890] gfs2: fsid=syz:syz: Now mounting FS... [ 1183.922953][ T6890] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 1183.922953][ T6890] bh = 2075 (magic number) [ 1183.922953][ T6890] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 417 [ 1183.943162][ T6890] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1183.950676][ T6890] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 1183.962405][ T6890] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 1183.970791][ T6890] CPU: 0 PID: 6890 Comm: syz-executor137 Not tainted 5.9.0-rc8-syzkaller #0 [ 1183.979428][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.989574][ T6890] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 1183.995268][ T6890] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 87 55 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 1184.014861][ T6890] RSP: 0018:ffffc900013f73b8 EFLAGS: 00010202 [ 1184.020926][ T6890] RAX: dffffc0000000000 RBX: ffff88809dc58000 RCX: ffffffff834ec08e [ 1184.028871][ T6890] RDX: 000000000000000e RSI: ffffffff834ec09f RDI: 0000000000000070 [ 1184.036817][ T6890] RBP: ffff88809dc5826d R08: 0000000000000038 R09: ffff8880ae4318e7 [ 1184.044773][ T6890] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809dc58050 [ 1184.052732][ T6890] R13: ffff88809dc582f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 1184.060678][ T6890] FS: 0000000001f0c880(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 [ 1184.069590][ T6890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.076144][ T6890] CR2: 00007f431d1856c0 CR3: 0000000093899000 CR4: 00000000001506f0 [ 1184.084090][ T6890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1184.092058][ T6890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1184.100000][ T6890] Call Trace: [ 1184.103270][ T6890] gfs2_meta_check_ii+0x68/0xa0 [ 1184.108151][ T6890] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 1184.113770][ T6890] ? gfs2_meta_wipe+0x1b0/0x1b0 [ 1184.118668][ T6890] ? lock_is_held_type+0xbb/0xf0 [ 1184.123579][ T6890] gfs2_inode_refresh+0x95/0xdf0 [ 1184.128490][ T6890] ? gfs2_glock2rgrp+0x60/0x60 [ 1184.133390][ T6890] ? lock_downgrade+0x830/0x830 [ 1184.138254][ T6890] ? lock_acquire+0x1f3/0xaf0 [ 1184.142918][ T6890] ? finish_xmote+0x65/0xf40 [ 1184.147485][ T6890] inode_go_lock+0x309/0x49f [ 1184.152108][ T6890] do_promote+0x4a0/0xc10 [ 1184.156436][ T6890] finish_xmote+0x4ed/0xf40 [ 1184.160925][ T6890] do_xmote+0x812/0xba0 [ 1184.165069][ T6890] run_queue+0x323/0x680 [ 1184.169286][ T6890] gfs2_glock_nq+0x716/0x11b0 [ 1184.173996][ T6890] gfs2_lookupi+0x314/0x630 [ 1184.178498][ T6890] ? gfs2_lookup_by_inum+0x100/0x100 [ 1184.183773][ T6890] ? gfs2_lookupi+0x30c/0x630 [ 1184.188512][ T6890] ? crc32_body+0x348/0x5f0 [ 1184.193035][ T6890] gfs2_lookup_simple+0x99/0xe0 [ 1184.197879][ T6890] ? gfs2_lookupi+0x630/0x630 [ 1184.202546][ T6890] ? do_raw_spin_lock+0x120/0x2b0 [ 1184.207547][ T6890] init_inodes+0x367/0x1f40 [ 1184.212105][ T6890] ? vsnprintf+0x2cc/0x14f0 [ 1184.216607][ T6890] ? pointer+0x970/0x970 [ 1184.220841][ T6890] ? end_bio_io_page+0x100/0x100 [ 1184.225770][ T6890] ? init_sb+0x9ba/0xd30 [ 1184.230105][ T6890] ? snprintf+0xbb/0xf0 [ 1184.234269][ T6890] ? vsprintf+0x30/0x30 [ 1184.238422][ T6890] ? gfs2_read_super+0x1080/0x1080 [ 1184.243581][ T6890] ? __debugfs_create_file+0x36b/0x4f0 [ 1184.249019][ T6890] gfs2_fill_super+0x195e/0x254a [ 1184.253939][ T6890] ? gfs2_reconfigure+0x1020/0x1020 [ 1184.259129][ T6890] ? lock_downgrade+0x830/0x830 [ 1184.263955][ T6890] ? gfs2_glock_nq_num+0xf9/0x240 [ 1184.268954][ T6890] ? snprintf+0xbb/0xf0 [ 1184.273098][ T6890] ? vsprintf+0x30/0x30 [ 1184.277268][ T6890] ? wait_for_completion+0x260/0x260 [ 1184.282610][ T6890] ? set_blocksize+0x1c1/0x400 [ 1184.287389][ T6890] get_tree_bdev+0x421/0x740 [ 1184.291953][ T6890] ? gfs2_reconfigure+0x1020/0x1020 [ 1184.297129][ T6890] gfs2_get_tree+0x4a/0x270 [ 1184.301628][ T6890] vfs_get_tree+0x89/0x2f0 [ 1184.306077][ T6890] path_mount+0x1387/0x20a0 [ 1184.310631][ T6890] ? strncpy_from_user+0x2bf/0x3e0 [ 1184.315715][ T6890] ? copy_mount_string+0x40/0x40 [ 1184.320643][ T6890] ? getname_flags.part.0+0x1dd/0x4f0 [ 1184.326012][ T6890] __x64_sys_mount+0x27f/0x300 [ 1184.330756][ T6890] ? copy_mnt_ns+0xa60/0xa60 [ 1184.335321][ T6890] ? check_preemption_disabled+0x50/0x130 [ 1184.341028][ T6890] ? syscall_enter_from_user_mode+0x1d/0x60 [ 1184.346903][ T6890] do_syscall_64+0x2d/0x70 [ 1184.351369][ T6890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1184.357263][ T6890] RIP: 0033:0x45b4aa [ 1184.361133][ T6890] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1184.380765][ T6890] RSP: 002b:00007ffec55afc58 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 1184.389156][ T6890] RAX: ffffffffffffffda RBX: 00007ffec55afcb0 RCX: 000000000045b4aa [ 1184.397120][ T6890] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffec55afc70 [ 1184.405066][ T6890] RBP: 00007ffec55afc70 R08: 00007ffec55afcb0 R09: 00007ffe00000015 [ 1184.413012][ T6890] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091b [ 1184.420964][ T6890] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 1184.428911][ T6890] Modules linked in: [ 1184.433442][ T6890] ---[ end trace da2a38ad978cce7f ]--- [ 1184.438963][ T6890] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 1184.444683][ T6890] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 87 55 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 1184.464583][ T6890] RSP: 0018:ffffc900013f73b8 EFLAGS: 00010202 [ 1184.470710][ T6890] RAX: dffffc0000000000 RBX: ffff88809dc58000 RCX: ffffffff834ec08e [ 1184.478756][ T6890] RDX: 000000000000000e RSI: ffffffff834ec09f RDI: 0000000000000070 [ 1184.486707][ T6890] RBP: ffff88809dc5826d R08: 0000000000000038 R09: ffff8880ae4318e7 [ 1184.494702][ T6890] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809dc58050 [ 1184.502714][ T6890] R13: ffff88809dc582f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 1184.510731][ T6890] FS: 0000000001f0c880(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 [ 1184.519683][ T6890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.526266][ T6890] CR2: 00007f431d1856c0 CR3: 0000000093899000 CR4: 00000000001506f0 [ 1184.534261][ T6890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1184.542272][ T6890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1184.550277][ T6890] Kernel panic - not syncing: Fatal exception [ 1184.558047][ T6890] Kernel Offset: disabled [ 1184.562366][ T6890] Rebooting in 86400 seconds..