[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 726.129252][ T8491] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 726.138335][ T8491] gfs2: fsid=syz:syz: Now mounting FS... [ 726.147029][ T8491] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 726.147029][ T8491] bh = 2072 (magic number) [ 726.147029][ T8491] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 726.168041][ T8491] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 726.178199][ T8491] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 726.190832][ T8491] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 726.199232][ T8491] CPU: 1 PID: 8491 Comm: syz-executor268 Not tainted 5.10.0-rc7-syzkaller #0 [ 726.207971][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.218052][ T8491] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 726.223764][ T8491] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 89 69 fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 726.243634][ T8491] RSP: 0018:ffffc9000168f378 EFLAGS: 00010212 [ 726.249699][ T8491] RAX: dffffc0000000000 RBX: ffff88802ab6c000 RCX: ffffffff88b517cc [ 726.257676][ T8491] RDX: 000000000000000e RSI: ffffffff88b517dd RDI: 0000000000000070 [ 726.265634][ T8491] RBP: ffff88802ab6c2c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 726.273593][ T8491] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ab6c0a8 [ 726.281563][ T8491] R13: ffff88802ab6c348 R14: ffffffff89901360 R15: 0000000000000000 [ 726.289518][ T8491] FS: 0000000001019880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 726.298450][ T8491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.305021][ T8491] CR2: 000055f407aad160 CR3: 00000000200a7000 CR4: 0000000000350ee0 [ 726.312978][ T8491] Call Trace: [ 726.316257][ T8491] gfs2_meta_check_ii+0x68/0xa0 [ 726.321092][ T8491] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 726.326700][ T8491] ? gfs2_journal_wipe+0xc00/0xc00 [ 726.331788][ T8491] gfs2_inode_refresh+0x95/0xdf0 [ 726.336711][ T8491] ? inode_go_sync+0x560/0x560 [ 726.341455][ T8491] ? lock_downgrade+0x6d0/0x6d0 [ 726.346309][ T8491] inode_go_lock+0x309/0x4a0 [ 726.350874][ T8491] do_promote+0x4a0/0xb70 [ 726.355181][ T8491] finish_xmote+0x671/0xe40 [ 726.359681][ T8491] do_xmote+0x821/0xbc0 [ 726.363821][ T8491] run_queue+0x323/0x680 [ 726.368041][ T8491] gfs2_glock_nq+0x70a/0x11a0 [ 726.372701][ T8491] gfs2_lookupi+0x314/0x630 [ 726.377191][ T8491] ? gfs2_lookup_by_inum+0x100/0x100 [ 726.382466][ T8491] ? gfs2_lookupi+0x30c/0x630 [ 726.387219][ T8491] ? crc32_body+0x348/0x5f0 [ 726.391790][ T8491] gfs2_lookup_simple+0x99/0xe0 [ 726.396624][ T8491] ? gfs2_lookupi+0x630/0x630 [ 726.401282][ T8491] ? enable_ptr_key_workfn+0x30/0x30 [ 726.406552][ T8491] init_inodes+0x3cb/0x2650 [ 726.411074][ T8491] ? do_raw_spin_lock+0x120/0x2b0 [ 726.416328][ T8491] ? vsnprintf+0x2cc/0x14f0 [ 726.421066][ T8491] ? end_bio_io_page+0x100/0x100 [ 726.425984][ T8491] ? pointer+0x930/0x930 [ 726.430207][ T8491] ? gfs2_glock_dq_uninit+0x87/0x100 [ 726.435579][ T8491] ? init_sb+0x9c6/0xd30 [ 726.439806][ T8491] ? snprintf+0xbb/0xf0 [ 726.444143][ T8491] ? vsprintf+0x30/0x30 [ 726.448392][ T8491] ? gfs2_read_super+0x1140/0x1140 [ 726.453491][ T8491] ? __debugfs_create_file+0x33d/0x4c0 [ 726.458933][ T8491] gfs2_fill_super+0x199c/0x23f0 [ 726.463862][ T8491] ? gfs2_reconfigure+0x1030/0x1030 [ 726.469043][ T8491] ? lock_downgrade+0x6d0/0x6d0 [ 726.473879][ T8491] ? gfs2_glock_nq_num+0xf9/0x240 [ 726.478881][ T8491] ? snprintf+0xbb/0xf0 [ 726.483010][ T8491] ? vsprintf+0x30/0x30 [ 726.487162][ T8491] ? wait_for_completion+0x260/0x260 [ 726.492506][ T8491] ? set_blocksize+0x1c1/0x400 [ 726.497253][ T8491] get_tree_bdev+0x421/0x740 [ 726.501824][ T8491] ? gfs2_reconfigure+0x1030/0x1030 [ 726.506999][ T8491] gfs2_get_tree+0x4a/0x270 [ 726.511488][ T8491] vfs_get_tree+0x89/0x2f0 [ 726.515877][ T8491] path_mount+0x13ad/0x20c0 [ 726.520353][ T8491] ? strncpy_from_user+0x2a0/0x3e0 [ 726.525436][ T8491] ? finish_automount+0xac0/0xac0 [ 726.530438][ T8491] ? getname_flags.part.0+0x1dd/0x4f0 [ 726.535975][ T8491] __x64_sys_mount+0x27f/0x300 [ 726.540738][ T8491] ? copy_mnt_ns+0xa60/0xa60 [ 726.545417][ T8491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.551558][ T8491] do_syscall_64+0x2d/0x70 [ 726.555973][ T8491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 726.561847][ T8491] RIP: 0033:0x45b4ca [ 726.565720][ T8491] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 726.587213][ T8491] RSP: 002b:00007ffe81e91bf8 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 726.595616][ T8491] RAX: ffffffffffffffda RBX: 00007ffe81e91c50 RCX: 000000000045b4ca [ 726.604105][ T8491] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe81e91c10 [ 726.612118][ T8491] RBP: 00007ffe81e91c10 R08: 00007ffe81e91c50 R09: 00007ffe00000015 [ 726.620065][ T8491] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 726.628018][ T8491] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 726.635969][ T8491] Modules linked in: [ 726.639933][ T8491] ---[ end trace d16480423a8450da ]--- [ 726.645728][ T8491] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 726.651976][ T8491] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 89 69 fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 726.671641][ T8491] RSP: 0018:ffffc9000168f378 EFLAGS: 00010212 [ 726.677896][ T8491] RAX: dffffc0000000000 RBX: ffff88802ab6c000 RCX: ffffffff88b517cc [ 726.685904][ T8491] RDX: 000000000000000e RSI: ffffffff88b517dd RDI: 0000000000000070 [ 726.693996][ T8491] RBP: ffff88802ab6c2c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 726.702294][ T8491] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ab6c0a8 [ 726.710291][ T8491] R13: ffff88802ab6c348 R14: ffffffff89901360 R15: 0000000000000000 [ 726.718247][ T8491] FS: 0000000001019880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 726.727192][ T8491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.733799][ T8491] CR2: 000055f407aad160 CR3: 00000000200a7000 CR4: 0000000000350ee0 [ 726.741788][ T8491] Kernel panic - not syncing: Fatal exception [ 726.751065][ T8491] Kernel Offset: disabled [ 726.755378][ T8491] Rebooting in 86400 seconds..