[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 751.448529][ T8483] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 751.457058][ T8483] gfs2: fsid=syz:syz: Now mounting FS... [ 751.478135][ T8483] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 751.478135][ T8483] bh = 2075 (magic number) [ 751.478135][ T8483] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 751.500559][ T8483] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 751.508346][ T8483] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 751.520056][ T8483] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 751.528438][ T8483] CPU: 1 PID: 8483 Comm: syz-executor585 Not tainted 5.10.0-rc4-syzkaller #0 [ 751.537161][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.547249][ T8483] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 751.552936][ T8483] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 66 8d fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 751.572510][ T8483] RSP: 0018:ffffc9000154f378 EFLAGS: 00010202 [ 751.578547][ T8483] RAX: dffffc0000000000 RBX: ffff88802f8c4000 RCX: ffffffff88b5165f [ 751.586502][ T8483] RDX: 000000000000000e RSI: ffffffff88b51670 RDI: 0000000000000070 [ 751.594465][ T8483] RBP: ffff88802f8c42c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 751.602405][ T8483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802f8c40a8 [ 751.610345][ T8483] R13: ffff88802f8c4348 R14: ffffffff899012a0 R15: 0000000000000000 [ 751.618289][ T8483] FS: 0000000000d39880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 751.627221][ T8483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.633774][ T8483] CR2: 000055c831e3f160 CR3: 0000000011e6a000 CR4: 00000000001506e0 [ 751.641747][ T8483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.649691][ T8483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.657632][ T8483] Call Trace: [ 751.660933][ T8483] gfs2_meta_check_ii+0x68/0xa0 [ 751.665816][ T8483] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 751.671421][ T8483] ? gfs2_journal_wipe+0xc00/0xc00 [ 751.676520][ T8483] gfs2_inode_refresh+0x95/0xdf0 [ 751.681430][ T8483] ? inode_go_sync+0x560/0x560 [ 751.686201][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 751.691028][ T8483] inode_go_lock+0x309/0x4a0 [ 751.695592][ T8483] do_promote+0x4a0/0xb70 [ 751.699895][ T8483] finish_xmote+0x671/0xe40 [ 751.704370][ T8483] do_xmote+0x821/0xbc0 [ 751.708497][ T8483] run_queue+0x323/0x680 [ 751.712713][ T8483] gfs2_glock_nq+0x702/0x1190 [ 751.717360][ T8483] gfs2_lookupi+0x314/0x630 [ 751.721851][ T8483] ? gfs2_lookup_by_inum+0x100/0x100 [ 751.727105][ T8483] ? gfs2_lookupi+0x30c/0x630 [ 751.731794][ T8483] ? crc32_body+0x348/0x5f0 [ 751.736382][ T8483] gfs2_lookup_simple+0x99/0xe0 [ 751.741202][ T8483] ? gfs2_lookupi+0x630/0x630 [ 751.745881][ T8483] ? enable_ptr_key_workfn+0x30/0x30 [ 751.751272][ T8483] init_inodes+0x3cb/0x2650 [ 751.755747][ T8483] ? do_raw_spin_lock+0x120/0x2b0 [ 751.760760][ T8483] ? vsnprintf+0x2cc/0x14f0 [ 751.765236][ T8483] ? end_bio_io_page+0x100/0x100 [ 751.770144][ T8483] ? pointer+0x930/0x930 [ 751.774357][ T8483] ? gfs2_glock_dq_uninit+0x87/0x100 [ 751.779607][ T8483] ? init_sb+0x9c6/0xd30 [ 751.783821][ T8483] ? snprintf+0xbb/0xf0 [ 751.787969][ T8483] ? vsprintf+0x30/0x30 [ 751.792101][ T8483] ? gfs2_read_super+0x1140/0x1140 [ 751.797232][ T8483] ? __debugfs_create_file+0x33d/0x4c0 [ 751.802663][ T8483] gfs2_fill_super+0x199c/0x23f0 [ 751.807573][ T8483] ? gfs2_reconfigure+0x1030/0x1030 [ 751.812741][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 751.817573][ T8483] ? gfs2_glock_nq_num+0xf9/0x240 [ 751.822577][ T8483] ? snprintf+0xbb/0xf0 [ 751.826702][ T8483] ? vsprintf+0x30/0x30 [ 751.830862][ T8483] ? wait_for_completion+0x260/0x260 [ 751.836148][ T8483] ? set_blocksize+0x1c1/0x400 [ 751.840907][ T8483] get_tree_bdev+0x421/0x740 [ 751.845466][ T8483] ? gfs2_reconfigure+0x1030/0x1030 [ 751.850631][ T8483] gfs2_get_tree+0x4a/0x270 [ 751.855102][ T8483] vfs_get_tree+0x89/0x2f0 [ 751.859495][ T8483] path_mount+0x13ad/0x20c0 [ 751.863967][ T8483] ? strncpy_from_user+0x29e/0x3a0 [ 751.869056][ T8483] ? finish_automount+0xac0/0xac0 [ 751.874069][ T8483] ? getname_flags.part.0+0x1dd/0x4f0 [ 751.879423][ T8483] __x64_sys_mount+0x27f/0x300 [ 751.884157][ T8483] ? copy_mnt_ns+0xa60/0xa60 [ 751.888725][ T8483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.894588][ T8483] do_syscall_64+0x2d/0x70 [ 751.899092][ T8483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 751.904952][ T8483] RIP: 0033:0x45b4ca [ 751.908822][ T8483] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 751.928394][ T8483] RSP: 002b:00007ffc4b916f18 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 751.936784][ T8483] RAX: ffffffffffffffda RBX: 00007ffc4b916f70 RCX: 000000000045b4ca [ 751.944724][ T8483] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc4b916f30 [ 751.952663][ T8483] RBP: 00007ffc4b916f30 R08: 00007ffc4b916f70 R09: 00007ffc00000015 [ 751.960604][ T8483] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 751.968547][ T8483] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 751.976491][ T8483] Modules linked in: [ 751.980838][ T8483] ---[ end trace 90178429f7f6adb3 ]--- [ 751.986732][ T8483] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 751.992470][ T8483] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 66 8d fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 752.012114][ T8483] RSP: 0018:ffffc9000154f378 EFLAGS: 00010202 [ 752.018208][ T8483] RAX: dffffc0000000000 RBX: ffff88802f8c4000 RCX: ffffffff88b5165f [ 752.026196][ T8483] RDX: 000000000000000e RSI: ffffffff88b51670 RDI: 0000000000000070 [ 752.034212][ T8483] RBP: ffff88802f8c42c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 752.042164][ T8483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802f8c40a8 [ 752.050144][ T8483] R13: ffff88802f8c4348 R14: ffffffff899012a0 R15: 0000000000000000 [ 752.058130][ T8483] FS: 0000000000d39880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 752.067104][ T8483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.073706][ T8483] CR2: 000055c831e3f160 CR3: 0000000011e6a000 CR4: 00000000001506e0 [ 752.081661][ T8483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 752.089643][ T8483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 752.097631][ T8483] Kernel panic - not syncing: Fatal exception [ 752.104371][ T8483] Kernel Offset: disabled [ 752.108684][ T8483] Rebooting in 86400 seconds..