[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 722.343744][ T8489] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 722.352467][ T8489] gfs2: fsid=syz:syz: Now mounting FS... [ 722.361542][ T8489] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 722.361542][ T8489] bh = 2072 (magic number) [ 722.361542][ T8489] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 722.382009][ T8489] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 722.390215][ T8489] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 722.401931][ T8489] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 722.410332][ T8489] CPU: 1 PID: 8489 Comm: syz-executor692 Not tainted 5.10.0-rc3-syzkaller #0 [ 722.419079][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.429160][ T8489] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 722.434868][ T8489] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 fc 91 fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 722.454468][ T8489] RSP: 0018:ffffc9000160f378 EFLAGS: 00010202 [ 722.460508][ T8489] RAX: dffffc0000000000 RBX: ffff8880278fc000 RCX: ffffffff88b506d9 [ 722.468455][ T8489] RDX: 000000000000000e RSI: ffffffff88b506ea RDI: 0000000000000070 [ 722.476437][ T8489] RBP: ffff8880278fc2c5 R08: 0000000000000038 R09: ffff8880b9f309e7 [ 722.484383][ T8489] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880278fc0a8 [ 722.492339][ T8489] R13: ffff8880278fc348 R14: ffffffff89901220 R15: 0000000000000000 [ 722.500286][ T8489] FS: 00000000018f2880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 722.509188][ T8489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.515745][ T8489] CR2: 00007f7622cde000 CR3: 000000002500c000 CR4: 00000000001506e0 [ 722.523693][ T8489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.531639][ T8489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.539597][ T8489] Call Trace: [ 722.542926][ T8489] gfs2_meta_check_ii+0x68/0xa0 [ 722.547750][ T8489] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 722.553356][ T8489] ? gfs2_journal_wipe+0xc00/0xc00 [ 722.558485][ T8489] gfs2_inode_refresh+0x95/0xdf0 [ 722.563400][ T8489] ? inode_go_sync+0x560/0x560 [ 722.568176][ T8489] ? lock_downgrade+0x6d0/0x6d0 [ 722.573004][ T8489] inode_go_lock+0x309/0x4a0 [ 722.577576][ T8489] do_promote+0x4a0/0xb70 [ 722.581897][ T8489] finish_xmote+0x671/0xe40 [ 722.586375][ T8489] do_xmote+0x821/0xbc0 [ 722.590507][ T8489] run_queue+0x323/0x680 [ 722.594724][ T8489] gfs2_glock_nq+0x702/0x1190 [ 722.599376][ T8489] gfs2_lookupi+0x314/0x630 [ 722.603852][ T8489] ? gfs2_lookup_by_inum+0x100/0x100 [ 722.609110][ T8489] ? gfs2_lookupi+0x30c/0x630 [ 722.613790][ T8489] ? crc32_body+0x348/0x5f0 [ 722.618267][ T8489] gfs2_lookup_simple+0x99/0xe0 [ 722.623089][ T8489] ? gfs2_lookupi+0x630/0x630 [ 722.627777][ T8489] ? enable_ptr_key_workfn+0x30/0x30 [ 722.633035][ T8489] init_inodes+0x3cb/0x2650 [ 722.637527][ T8489] ? do_raw_spin_lock+0x120/0x2b0 [ 722.642526][ T8489] ? vsnprintf+0x2cc/0x14f0 [ 722.647001][ T8489] ? end_bio_io_page+0x100/0x100 [ 722.651910][ T8489] ? pointer+0x930/0x930 [ 722.656151][ T8489] ? gfs2_glock_dq_uninit+0x87/0x100 [ 722.661415][ T8489] ? init_sb+0x9c6/0xd30 [ 722.665628][ T8489] ? snprintf+0xbb/0xf0 [ 722.669752][ T8489] ? vsprintf+0x30/0x30 [ 722.673877][ T8489] ? gfs2_read_super+0x1140/0x1140 [ 722.679022][ T8489] ? __debugfs_create_file+0x33d/0x4c0 [ 722.684463][ T8489] gfs2_fill_super+0x199c/0x23f0 [ 722.689385][ T8489] ? gfs2_reconfigure+0x1030/0x1030 [ 722.694554][ T8489] ? lock_downgrade+0x6d0/0x6d0 [ 722.699415][ T8489] ? gfs2_glock_nq_num+0xf9/0x240 [ 722.704429][ T8489] ? snprintf+0xbb/0xf0 [ 722.708554][ T8489] ? vsprintf+0x30/0x30 [ 722.712719][ T8489] ? wait_for_completion+0x260/0x260 [ 722.717994][ T8489] ? set_blocksize+0x1c1/0x400 [ 722.722748][ T8489] get_tree_bdev+0x421/0x740 [ 722.727308][ T8489] ? gfs2_reconfigure+0x1030/0x1030 [ 722.732474][ T8489] gfs2_get_tree+0x4a/0x270 [ 722.736944][ T8489] vfs_get_tree+0x89/0x2f0 [ 722.741355][ T8489] path_mount+0x13ad/0x20c0 [ 722.745860][ T8489] ? strncpy_from_user+0x29e/0x3a0 [ 722.750944][ T8489] ? finish_automount+0xac0/0xac0 [ 722.755957][ T8489] ? getname_flags.part.0+0x1dd/0x4f0 [ 722.761303][ T8489] __x64_sys_mount+0x27f/0x300 [ 722.766070][ T8489] ? copy_mnt_ns+0xa60/0xa60 [ 722.770656][ T8489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.776534][ T8489] do_syscall_64+0x2d/0x70 [ 722.780924][ T8489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 722.786784][ T8489] RIP: 0033:0x45b4ca [ 722.790668][ T8489] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 722.810244][ T8489] RSP: 002b:00007ffccb3bae98 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 722.818629][ T8489] RAX: ffffffffffffffda RBX: 00007ffccb3baef0 RCX: 000000000045b4ca [ 722.826576][ T8489] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffccb3baeb0 [ 722.834529][ T8489] RBP: 00007ffccb3baeb0 R08: 00007ffccb3baef0 R09: 00007ffc00000015 [ 722.842481][ T8489] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 722.850452][ T8489] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 722.858399][ T8489] Modules linked in: [ 722.862579][ T8489] ---[ end trace 3219952eaf659924 ]--- [ 722.868042][ T8489] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 722.873905][ T8489] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 fc 91 fc f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 722.893615][ T8489] RSP: 0018:ffffc9000160f378 EFLAGS: 00010202 [ 722.899699][ T8489] RAX: dffffc0000000000 RBX: ffff8880278fc000 RCX: ffffffff88b506d9 [ 722.907649][ T8489] RDX: 000000000000000e RSI: ffffffff88b506ea RDI: 0000000000000070 [ 722.915644][ T8489] RBP: ffff8880278fc2c5 R08: 0000000000000038 R09: ffff8880b9f309e7 [ 722.923658][ T8489] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880278fc0a8 [ 722.931652][ T8489] R13: ffff8880278fc348 R14: ffffffff89901220 R15: 0000000000000000 [ 722.939648][ T8489] FS: 00000000018f2880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 722.948563][ T8489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.955162][ T8489] CR2: 00007f7622cde000 CR3: 000000002500c000 CR4: 00000000001506e0 [ 722.963155][ T8489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.971150][ T8489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.979146][ T8489] Kernel panic - not syncing: Fatal exception [ 722.985862][ T8489] Kernel Offset: disabled [ 722.990171][ T8489] Rebooting in 86400 seconds..