[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 636.650967][ T8483] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 636.660058][ T8483] gfs2: fsid=syz:syz: Now mounting FS... [ 636.669111][ T8483] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 636.669111][ T8483] bh = 2072 (magic number) [ 636.669111][ T8483] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 636.690199][ T8483] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 636.697795][ T8483] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 636.709618][ T8483] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 636.718007][ T8483] CPU: 1 PID: 8483 Comm: syz-executor020 Not tainted 5.10.0-rc1-next-20201102-syzkaller #0 [ 636.728014][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.738155][ T8483] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 636.743851][ T8483] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 3b d8 fb f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 636.763430][ T8483] RSP: 0018:ffffc900013bf378 EFLAGS: 00010202 [ 636.769470][ T8483] RAX: dffffc0000000000 RBX: ffff888019634000 RCX: ffffffff88b5eaba [ 636.777418][ T8483] RDX: 000000000000000e RSI: ffffffff88b5eacb RDI: 0000000000000070 [ 636.785364][ T8483] RBP: ffff8880196342c5 R08: 0000000000000038 R09: ffff8880b9f309e7 [ 636.793320][ T8483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880196340a8 [ 636.801280][ T8483] R13: ffff888019634348 R14: ffffffff89900c80 R15: 0000000000000000 [ 636.809232][ T8483] FS: 0000000000c01880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 636.818135][ T8483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.824692][ T8483] CR2: 00007fde53b616c0 CR3: 00000000131d8000 CR4: 00000000001506e0 [ 636.832638][ T8483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.840581][ T8483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.848523][ T8483] Call Trace: [ 636.851853][ T8483] gfs2_meta_check_ii+0x68/0xa0 [ 636.856696][ T8483] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 636.862300][ T8483] ? gfs2_journal_wipe+0xc00/0xc00 [ 636.867419][ T8483] gfs2_inode_refresh+0x95/0xdf0 [ 636.872329][ T8483] ? inode_go_sync+0x560/0x560 [ 636.877130][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 636.881964][ T8483] inode_go_lock+0x309/0x4a0 [ 636.886541][ T8483] do_promote+0x4a0/0xb70 [ 636.890856][ T8483] finish_xmote+0x671/0xe40 [ 636.895357][ T8483] do_xmote+0x821/0xbc0 [ 636.899488][ T8483] run_queue+0x323/0x680 [ 636.903717][ T8483] gfs2_glock_nq+0x702/0x1190 [ 636.908375][ T8483] gfs2_lookupi+0x314/0x630 [ 636.912852][ T8483] ? gfs2_lookup_by_inum+0x100/0x100 [ 636.918107][ T8483] ? gfs2_lookupi+0x30c/0x630 [ 636.922799][ T8483] ? crc32_body+0x348/0x5f0 [ 636.927276][ T8483] gfs2_lookup_simple+0x99/0xe0 [ 636.932184][ T8483] ? gfs2_lookupi+0x630/0x630 [ 636.936895][ T8483] ? enable_ptr_key_workfn+0x30/0x30 [ 636.942154][ T8483] init_inodes+0x3cb/0x2650 [ 636.946630][ T8483] ? do_raw_spin_lock+0x120/0x2b0 [ 636.951637][ T8483] ? vsnprintf+0x2cc/0x14f0 [ 636.956112][ T8483] ? end_bio_io_page+0x100/0x100 [ 636.961020][ T8483] ? pointer+0x930/0x930 [ 636.965238][ T8483] ? gfs2_glock_dq_uninit+0x87/0x100 [ 636.970507][ T8483] ? init_sb+0x9c6/0xd30 [ 636.974736][ T8483] ? snprintf+0xbb/0xf0 [ 636.978862][ T8483] ? vsprintf+0x30/0x30 [ 636.982990][ T8483] ? gfs2_read_super+0x1140/0x1140 [ 636.988120][ T8483] ? __debugfs_create_file+0x33d/0x4c0 [ 636.993549][ T8483] gfs2_fill_super+0x199c/0x23f0 [ 636.998474][ T8483] ? gfs2_reconfigure+0x1030/0x1030 [ 637.003641][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 637.008464][ T8483] ? gfs2_glock_nq_num+0xf9/0x240 [ 637.013461][ T8483] ? snprintf+0xbb/0xf0 [ 637.017586][ T8483] ? vsprintf+0x30/0x30 [ 637.021766][ T8483] ? wait_for_completion_io+0x260/0x260 [ 637.027376][ T8483] ? set_blocksize+0x1c1/0x400 [ 637.032135][ T8483] get_tree_bdev+0x421/0x740 [ 637.036698][ T8483] ? gfs2_reconfigure+0x1030/0x1030 [ 637.041867][ T8483] gfs2_get_tree+0x4a/0x270 [ 637.046345][ T8483] vfs_get_tree+0x89/0x2f0 [ 637.050757][ T8483] path_mount+0x12ae/0x1e70 [ 637.055261][ T8483] ? strncpy_from_user+0x29e/0x3a0 [ 637.060354][ T8483] ? finish_automount+0xac0/0xac0 [ 637.065375][ T8483] ? getname_flags.part.0+0x1dd/0x4f0 [ 637.070719][ T8483] __x64_sys_mount+0x27f/0x300 [ 637.075453][ T8483] ? copy_mnt_ns+0xae0/0xae0 [ 637.080036][ T8483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 637.085931][ T8483] do_syscall_64+0x2d/0x70 [ 637.090324][ T8483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 637.096185][ T8483] RIP: 0033:0x458e1a [ 637.100489][ T8483] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 637.120165][ T8483] RSP: 002b:00007ffcca233b88 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 637.128562][ T8483] RAX: ffffffffffffffda RBX: 00007ffcca233be0 RCX: 0000000000458e1a [ 637.136507][ T8483] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffcca233ba0 [ 637.144467][ T8483] RBP: 00007ffcca233ba0 R08: 00007ffcca233be0 R09: 00007ffc00000015 [ 637.152418][ T8483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000809 [ 637.160366][ T8483] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 637.168318][ T8483] Modules linked in: [ 637.172494][ T8483] ---[ end trace 83978a39cfded970 ]--- [ 637.177993][ T8483] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 637.183771][ T8483] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 3b d8 fb f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 637.203416][ T8483] RSP: 0018:ffffc900013bf378 EFLAGS: 00010202 [ 637.209747][ T8483] RAX: dffffc0000000000 RBX: ffff888019634000 RCX: ffffffff88b5eaba [ 637.217748][ T8483] RDX: 000000000000000e RSI: ffffffff88b5eacb RDI: 0000000000000070 [ 637.225759][ T8483] RBP: ffff8880196342c5 R08: 0000000000000038 R09: ffff8880b9f309e7 [ 637.233759][ T8483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880196340a8 [ 637.241805][ T8483] R13: ffff888019634348 R14: ffffffff89900c80 R15: 0000000000000000 [ 637.249807][ T8483] FS: 0000000000c01880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 637.258762][ T8483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.265397][ T8483] CR2: 00007fde53b616c0 CR3: 00000000131d8000 CR4: 00000000001506e0 [ 637.273405][ T8483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.281366][ T8483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.289373][ T8483] Kernel panic - not syncing: Fatal exception [ 637.296263][ T8483] Kernel Offset: disabled [ 637.300574][ T8483] Rebooting in 86400 seconds..