[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 628.684611][ T8475] loop0: detected capacity change from 37488 to 0 [ 628.707145][ T8475] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 628.723643][ T8475] gfs2: fsid=syz:syz: Now mounting FS... [ 628.734008][ T8475] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 628.734008][ T8475] bh = 2075 (magic number) [ 628.734008][ T8475] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 628.754617][ T8475] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 628.761949][ T8475] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 628.773668][ T8475] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 628.782435][ T8475] CPU: 0 PID: 8475 Comm: syz-executor937 Not tainted 5.11.0-rc1-syzkaller #0 [ 628.792480][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.802760][ T8475] RIP: 0010:gfs2_withdraw.cold+0xff/0xbee [ 628.808482][ T8475] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 10 7e f9 f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 628.828078][ T8475] RSP: 0018:ffffc9000110f370 EFLAGS: 00010212 [ 628.834123][ T8475] RAX: dffffc0000000000 RBX: ffff888018348000 RCX: 0000000000000000 [ 628.842072][ T8475] RDX: 000000000000000e RSI: ffffffff88bb89c6 RDI: 0000000000000070 [ 628.850026][ T8475] RBP: ffff8880183482c5 R08: 0000000000000038 R09: 0000000000000000 [ 628.857985][ T8475] R10: ffffffff88bb89b5 R11: 0000000000000000 R12: ffff8880183480a8 [ 628.865959][ T8475] R13: ffff888018348348 R14: ffffffff8990ea40 R15: 0000000000000000 [ 628.873911][ T8475] FS: 0000000000b34880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 628.882950][ T8475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.889512][ T8475] CR2: 000055d3242ec160 CR3: 00000000143c5000 CR4: 0000000000350ef0 [ 628.897463][ T8475] Call Trace: [ 628.900835][ T8475] gfs2_meta_check_ii+0x68/0xa0 [ 628.905844][ T8475] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 628.911457][ T8475] ? gfs2_journal_wipe+0xc00/0xc00 [ 628.916549][ T8475] gfs2_inode_refresh+0x95/0xdf0 [ 628.921463][ T8475] ? inode_go_sync+0x560/0x560 [ 628.926201][ T8475] ? lock_downgrade+0x6d0/0x6d0 [ 628.931033][ T8475] inode_go_lock+0x309/0x4a0 [ 628.935620][ T8475] do_promote+0x4a0/0xb70 [ 628.939940][ T8475] finish_xmote+0x671/0xe40 [ 628.944417][ T8475] do_xmote+0x821/0xbc0 [ 628.948547][ T8475] run_queue+0x323/0x680 [ 628.952781][ T8475] gfs2_glock_nq+0x70a/0x11a0 [ 628.957434][ T8475] gfs2_lookupi+0x314/0x630 [ 628.961922][ T8475] ? gfs2_lookup_by_inum+0x100/0x100 [ 628.967196][ T8475] ? gfs2_lookupi+0x30c/0x630 [ 628.972993][ T8475] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 628.979070][ T8475] ? crc32_body+0x348/0x5f0 [ 628.983553][ T8475] gfs2_lookup_simple+0x99/0xe0 [ 628.988382][ T8475] ? gfs2_rename2+0xa0/0xa0 [ 628.992969][ T8475] ? enable_ptr_key_workfn+0x30/0x30 [ 628.998232][ T8475] init_inodes+0x3cb/0x2650 [ 629.002717][ T8475] ? do_raw_spin_lock+0x120/0x2b0 [ 629.007719][ T8475] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 629.013938][ T8475] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 629.020171][ T8475] ? vsnprintf+0x2cc/0x14f0 [ 629.024664][ T8475] ? end_bio_io_page+0x100/0x100 [ 629.029580][ T8475] ? pointer+0x930/0x930 [ 629.033795][ T8475] ? gfs2_glock_dq_uninit+0x87/0x100 [ 629.039072][ T8475] ? init_sb+0x9c0/0xd30 [ 629.043291][ T8475] ? snprintf+0xbb/0xf0 [ 629.047422][ T8475] ? vsprintf+0x30/0x30 [ 629.051637][ T8475] ? gfs2_read_super+0x1140/0x1140 [ 629.056731][ T8475] ? __debugfs_create_file+0x33d/0x4c0 [ 629.062184][ T8475] gfs2_fill_super+0x1a84/0x24e0 [ 629.067111][ T8475] ? gfs2_reconfigure+0x1030/0x1030 [ 629.072286][ T8475] ? lock_downgrade+0x6d0/0x6d0 [ 629.077126][ T8475] ? gfs2_glock_nq_num+0xf9/0x240 [ 629.082124][ T8475] ? snprintf+0xbb/0xf0 [ 629.086253][ T8475] ? vsprintf+0x30/0x30 [ 629.090397][ T8475] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 629.096288][ T8475] ? set_blocksize+0x1bb/0x400 [ 629.101030][ T8475] get_tree_bdev+0x421/0x740 [ 629.105599][ T8475] ? gfs2_reconfigure+0x1030/0x1030 [ 629.110790][ T8475] gfs2_get_tree+0x4a/0x270 [ 629.115271][ T8475] vfs_get_tree+0x89/0x2f0 [ 629.119665][ T8475] path_mount+0x13ad/0x20c0 [ 629.124248][ T8475] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 629.130554][ T8475] ? strncpy_from_user+0x2a0/0x3e0 [ 629.135641][ T8475] ? finish_automount+0xac0/0xac0 [ 629.140642][ T8475] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 629.146873][ T8475] ? getname_flags.part.0+0x1dd/0x4f0 [ 629.152228][ T8475] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 629.158448][ T8475] __x64_sys_mount+0x27f/0x300 [ 629.163190][ T8475] ? copy_mnt_ns+0xae0/0xae0 [ 629.167760][ T8475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 629.173642][ T8475] do_syscall_64+0x2d/0x70 [ 629.178052][ T8475] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 629.183926][ T8475] RIP: 0033:0x45b45a [ 629.187811][ T8475] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 629.207401][ T8475] RSP: 002b:00007ffe227b2028 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 629.215808][ T8475] RAX: ffffffffffffffda RBX: 00007ffe227b2080 RCX: 000000000045b45a [ 629.223935][ T8475] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe227b2040 [ 629.231901][ T8475] RBP: 00007ffe227b2040 R08: 00007ffe227b2080 R09: 00007ffe00000015 [ 629.239860][ T8475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000919 [ 629.247805][ T8475] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 629.255755][ T8475] Modules linked in: [ 629.260416][ T8475] ---[ end trace 08f1e840d7d342c3 ]--- [ 629.265910][ T8475] RIP: 0010:gfs2_withdraw.cold+0xff/0xbee [ 629.271629][ T8475] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 10 7e f9 f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 629.291413][ T8475] RSP: 0018:ffffc9000110f370 EFLAGS: 00010212 [ 629.297495][ T8475] RAX: dffffc0000000000 RBX: ffff888018348000 RCX: 0000000000000000 [ 629.305496][ T8475] RDX: 000000000000000e RSI: ffffffff88bb89c6 RDI: 0000000000000070 [ 629.313507][ T8475] RBP: ffff8880183482c5 R08: 0000000000000038 R09: 0000000000000000 [ 629.321474][ T8475] R10: ffffffff88bb89b5 R11: 0000000000000000 R12: ffff8880183480a8 [ 629.329488][ T8475] R13: ffff888018348348 R14: ffffffff8990ea40 R15: 0000000000000000 [ 629.337511][ T8475] FS: 0000000000b34880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 629.346485][ T8475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.353091][ T8475] CR2: 000055d3242ec160 CR3: 00000000143c5000 CR4: 0000000000350ef0 [ 629.361056][ T8475] Kernel panic - not syncing: Fatal exception [ 629.370116][ T8475] Kernel Offset: disabled [ 629.374429][ T8475] Rebooting in 86400 seconds..