[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 728.151542][ T8472] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 728.160310][ T8472] gfs2: fsid=syz:syz: Now mounting FS... [ 728.171035][ T8472] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 728.171035][ T8472] bh = 2075 (magic number) [ 728.171035][ T8472] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 728.196495][ T8472] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 728.203739][ T8472] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 728.215551][ T8472] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 728.223940][ T8472] CPU: 1 PID: 8472 Comm: syz-executor938 Not tainted 5.10.0-rc6-syzkaller #0 [ 728.232674][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.242735][ T8472] RIP: 0010:gfs2_withdraw+0x2d6/0x13c0 [ 728.248257][ T8472] Code: c1 e8 03 48 89 44 24 28 80 3c 18 00 74 08 48 89 ef e8 6e 34 5d fe 48 89 6c 24 20 48 8b 6d 00 48 83 c5 70 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 4c 34 5d fe 48 8b 45 00 48 89 44 24 [ 728.267850][ T8472] RSP: 0018:ffffc9000d91f488 EFLAGS: 00010202 [ 728.273893][ T8472] RAX: 000000000000000e RBX: dffffc0000000000 RCX: 71fd05a8cb77d900 [ 728.281847][ T8472] RDX: ffff8880204e9a40 RSI: 0000000000000000 RDI: ffff88802ad78488 [ 728.289807][ T8472] RBP: 0000000000000070 R08: ffffffff8359e9e3 R09: ffffed10173a3ffc [ 728.297758][ T8472] R10: ffffed10173a3ffc R11: 0000000000000000 R12: ffffffff89fde320 [ 728.305879][ T8472] R13: ffff88802ad780a8 R14: 1ffff110055af058 R15: ffff88802ad78000 [ 728.313837][ T8472] FS: 0000000001da6880(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 728.322911][ T8472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.329471][ T8472] CR2: 000055fd5d05f160 CR3: 00000000147e8000 CR4: 00000000001506e0 [ 728.337443][ T8472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.345568][ T8472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 728.353687][ T8472] Call Trace: [ 728.356953][ T8472] ? gfs2_lm+0x16c/0x1a0 [ 728.361170][ T8472] gfs2_meta_check_ii+0x70/0x80 [ 728.365994][ T8472] gfs2_meta_indirect_buffer+0x29a/0x370 [ 728.371600][ T8472] gfs2_inode_refresh+0x65/0xc30 [ 728.376942][ T8472] inode_go_lock+0x12c/0x480 [ 728.381501][ T8472] do_promote+0x4db/0xcb0 [ 728.385809][ T8472] finish_xmote+0x88d/0x12d0 [ 728.390368][ T8472] do_xmote+0xad9/0x14c0 [ 728.394607][ T8472] gfs2_glock_nq+0xbd3/0x16a0 [ 728.399255][ T8472] ? do_raw_spin_unlock+0x134/0x8c0 [ 728.404421][ T8472] gfs2_lookupi+0x36f/0x4f0 [ 728.408894][ T8472] ? gfs2_lookupi+0x367/0x4f0 [ 728.413566][ T8472] gfs2_lookup_simple+0xa4/0x100 [ 728.418472][ T8472] init_journal+0xff/0x2110 [ 728.422956][ T8472] ? vsnprintf+0x19f5/0x1a90 [ 728.427516][ T8472] ? snprintf+0x6f/0x90 [ 728.431652][ T8472] ? _raw_spin_unlock+0x24/0x40 [ 728.436474][ T8472] gfs2_fill_super+0x2725/0x3db0 [ 728.441384][ T8472] ? gfs2_glock_nq_num+0xaa/0x1d0 [ 728.446386][ T8472] ? snprintf+0x6f/0x90 [ 728.452017][ T8472] ? set_blocksize+0x1f5/0x3c0 [ 728.457446][ T8472] get_tree_bdev+0x3e9/0x5f0 [ 728.462015][ T8472] ? gfs2_reconfigure+0xdc0/0xdc0 [ 728.467066][ T8472] gfs2_get_tree+0x4c/0x1f0 [ 728.471892][ T8472] vfs_get_tree+0x88/0x270 [ 728.476871][ T8472] path_mount+0x17b4/0x2a20 [ 728.481604][ T8472] ? getname_flags+0x1fb/0x630 [ 728.486340][ T8472] __se_sys_mount+0x28c/0x320 [ 728.491004][ T8472] ? lockdep_hardirqs_on+0x8d/0x130 [ 728.496271][ T8472] do_syscall_64+0x2d/0x70 [ 728.500759][ T8472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 728.510715][ T8472] RIP: 0033:0x45b45a [ 728.514599][ T8472] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 728.534255][ T8472] RSP: 002b:00007ffce7778578 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 728.542662][ T8472] RAX: ffffffffffffffda RBX: 00007ffce77785d0 RCX: 000000000045b45a [ 728.551482][ T8472] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffce7778590 [ 728.559516][ T8472] RBP: 00007ffce7778590 R08: 00007ffce77785d0 R09: 00007ffc00000015 [ 728.569456][ T8472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000919 [ 728.577400][ T8472] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 728.585350][ T8472] Modules linked in: [ 728.589397][ T8472] ---[ end trace 9bf7d70ece13650a ]--- [ 728.596041][ T8472] RIP: 0010:gfs2_withdraw+0x2d6/0x13c0 [ 728.602527][ T8472] Code: c1 e8 03 48 89 44 24 28 80 3c 18 00 74 08 48 89 ef e8 6e 34 5d fe 48 89 6c 24 20 48 8b 6d 00 48 83 c5 70 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 4c 34 5d fe 48 8b 45 00 48 89 44 24 [ 728.622215][ T8472] RSP: 0018:ffffc9000d91f488 EFLAGS: 00010202 [ 728.628329][ T8472] RAX: 000000000000000e RBX: dffffc0000000000 RCX: 71fd05a8cb77d900 [ 728.636442][ T8472] RDX: ffff8880204e9a40 RSI: 0000000000000000 RDI: ffff88802ad78488 [ 728.644399][ T8472] RBP: 0000000000000070 R08: ffffffff8359e9e3 R09: ffffed10173a3ffc [ 728.652846][ T8472] R10: ffffed10173a3ffc R11: 0000000000000000 R12: ffffffff89fde320 [ 728.661402][ T8472] R13: ffff88802ad780a8 R14: 1ffff110055af058 R15: ffff88802ad78000 [ 728.671935][ T8472] FS: 0000000001da6880(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 728.681837][ T8472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.688461][ T8472] CR2: 000055fd5d05f160 CR3: 00000000147e8000 CR4: 00000000001506e0 [ 728.696638][ T8472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.704665][ T8472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 728.712680][ T8472] Kernel panic - not syncing: Fatal exception [ 728.721071][ T8472] Kernel Offset: disabled [ 728.725401][ T8472] Rebooting in 86400 seconds..