[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 1364.444351][ T26] audit: type=1400 audit(1602448247.182:8): avc: denied { execmem } for pid=6878 comm="syz-executor026" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1364.473319][ T6878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1364.481612][ T6878] gfs2: fsid=syz:syz: Now mounting FS... [ 1364.490569][ T6878] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 1364.490569][ T6878] bh = 2072 (magic number) [ 1364.490569][ T6878] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 417 [ 1364.510919][ T6878] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1364.518909][ T6878] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 1364.530597][ T6878] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 1364.539010][ T6878] CPU: 0 PID: 6878 Comm: syz-executor026 Not tainted 5.9.0-rc8-syzkaller #0 [ 1364.547656][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.557752][ T6878] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 1364.563446][ T6878] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 b7 52 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 1364.583033][ T6878] RSP: 0018:ffffc900016673b8 EFLAGS: 00010202 [ 1364.589069][ T6878] RAX: dffffc0000000000 RBX: ffff88808e168000 RCX: ffffffff834ec45e [ 1364.597022][ T6878] RDX: 000000000000000e RSI: ffffffff834ec46f RDI: 0000000000000070 [ 1364.604964][ T6878] RBP: ffff88808e16826d R08: 0000000000000038 R09: ffff8880ae4318e7 [ 1364.612907][ T6878] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808e168050 [ 1364.620860][ T6878] R13: ffff88808e1682f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 1364.628814][ T6878] FS: 00000000020c6880(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 [ 1364.637711][ T6878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1364.644268][ T6878] CR2: 00007ffe5ca37000 CR3: 00000000a32a1000 CR4: 00000000001506f0 [ 1364.652218][ T6878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1364.660170][ T6878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1364.668109][ T6878] Call Trace: [ 1364.671377][ T6878] gfs2_meta_check_ii+0x68/0xa0 [ 1364.676251][ T6878] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 1364.681857][ T6878] ? gfs2_meta_wipe+0x1b0/0x1b0 [ 1364.686693][ T6878] ? lock_is_held_type+0xbb/0xf0 [ 1364.691638][ T6878] gfs2_inode_refresh+0x95/0xdf0 [ 1364.696556][ T6878] ? gfs2_glock2rgrp+0x60/0x60 [ 1364.701307][ T6878] ? lock_downgrade+0x830/0x830 [ 1364.706142][ T6878] ? lock_acquire+0x1f3/0xaf0 [ 1364.710789][ T6878] ? finish_xmote+0x65/0xf40 [ 1364.715364][ T6878] inode_go_lock+0x309/0x49f [ 1364.720003][ T6878] do_promote+0x4a0/0xc10 [ 1364.724310][ T6878] finish_xmote+0x4ed/0xf40 [ 1364.728787][ T6878] do_xmote+0x812/0xba0 [ 1364.732913][ T6878] run_queue+0x323/0x680 [ 1364.737127][ T6878] gfs2_glock_nq+0x716/0x11b0 [ 1364.741774][ T6878] gfs2_lookupi+0x314/0x630 [ 1364.746252][ T6878] ? gfs2_lookup_by_inum+0x100/0x100 [ 1364.751518][ T6878] ? gfs2_lookupi+0x30c/0x630 [ 1364.756217][ T6878] ? crc32_body+0x348/0x5f0 [ 1364.760707][ T6878] gfs2_lookup_simple+0x99/0xe0 [ 1364.765534][ T6878] ? gfs2_lookupi+0x630/0x630 [ 1364.770192][ T6878] ? do_raw_spin_lock+0x120/0x2b0 [ 1364.775189][ T6878] init_inodes+0x367/0x1f40 [ 1364.779710][ T6878] ? vsnprintf+0x2cc/0x14f0 [ 1364.784208][ T6878] ? pointer+0x970/0x970 [ 1364.788422][ T6878] ? end_bio_io_page+0x100/0x100 [ 1364.793343][ T6878] ? init_sb+0x9ba/0xd30 [ 1364.797555][ T6878] ? snprintf+0xbb/0xf0 [ 1364.801690][ T6878] ? vsprintf+0x30/0x30 [ 1364.805818][ T6878] ? gfs2_read_super+0x1080/0x1080 [ 1364.810959][ T6878] ? __debugfs_create_file+0x36b/0x4f0 [ 1364.816392][ T6878] gfs2_fill_super+0x195e/0x254a [ 1364.821303][ T6878] ? gfs2_reconfigure+0x1020/0x1020 [ 1364.826483][ T6878] ? lock_downgrade+0x830/0x830 [ 1364.831304][ T6878] ? gfs2_glock_nq_num+0xf9/0x240 [ 1364.836299][ T6878] ? snprintf+0xbb/0xf0 [ 1364.840422][ T6878] ? vsprintf+0x30/0x30 [ 1364.844600][ T6878] ? wait_for_completion+0x260/0x260 [ 1364.849868][ T6878] ? set_blocksize+0x1c1/0x400 [ 1364.854605][ T6878] get_tree_bdev+0x421/0x740 [ 1364.859213][ T6878] ? gfs2_reconfigure+0x1020/0x1020 [ 1364.864388][ T6878] gfs2_get_tree+0x4a/0x270 [ 1364.868863][ T6878] vfs_get_tree+0x89/0x2f0 [ 1364.873256][ T6878] path_mount+0x1387/0x20a0 [ 1364.877803][ T6878] ? strncpy_from_user+0x2bf/0x3e0 [ 1364.882891][ T6878] ? copy_mount_string+0x40/0x40 [ 1364.887810][ T6878] ? getname_flags.part.0+0x1dd/0x4f0 [ 1364.893154][ T6878] __x64_sys_mount+0x27f/0x300 [ 1364.897896][ T6878] ? copy_mnt_ns+0xa60/0xa60 [ 1364.902462][ T6878] ? check_preemption_disabled+0x50/0x130 [ 1364.908176][ T6878] ? syscall_enter_from_user_mode+0x1d/0x60 [ 1364.914041][ T6878] do_syscall_64+0x2d/0x70 [ 1364.918430][ T6878] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1364.924293][ T6878] RIP: 0033:0x45b4ca [ 1364.928171][ T6878] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1364.947763][ T6878] RSP: 002b:00007ffe5ca36aa8 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 1364.956146][ T6878] RAX: ffffffffffffffda RBX: 00007ffe5ca36b00 RCX: 000000000045b4ca [ 1364.964088][ T6878] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe5ca36ac0 [ 1364.972047][ T6878] RBP: 00007ffe5ca36ac0 R08: 00007ffe5ca36b00 R09: 00007ffe00000015 [ 1364.980000][ T6878] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 1364.987988][ T6878] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 1364.995950][ T6878] Modules linked in: [ 1365.000670][ T6878] ---[ end trace b2eb8b3035cb510c ]--- [ 1365.006163][ T6878] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 1365.011883][ T6878] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 b7 52 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 1365.031544][ T6878] RSP: 0018:ffffc900016673b8 EFLAGS: 00010202 [ 1365.037646][ T6878] RAX: dffffc0000000000 RBX: ffff88808e168000 RCX: ffffffff834ec45e [ 1365.045956][ T6878] RDX: 000000000000000e RSI: ffffffff834ec46f RDI: 0000000000000070 [ 1365.053981][ T6878] RBP: ffff88808e16826d R08: 0000000000000038 R09: ffff8880ae4318e7 [ 1365.061941][ T6878] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808e168050 [ 1365.069932][ T6878] R13: ffff88808e1682f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 1365.077954][ T6878] FS: 00000000020c6880(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 [ 1365.086915][ T6878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.093638][ T6878] CR2: 00007ffe5ca37000 CR3: 00000000a32a1000 CR4: 00000000001506f0 [ 1365.101611][ T6878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1365.109602][ T6878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1365.117596][ T6878] Kernel panic - not syncing: Fatal exception [ 1365.124759][ T6878] Kernel Offset: disabled [ 1365.129069][ T6878] Rebooting in 86400 seconds..