[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 1180.820592][ T6863] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1180.828953][ T6863] gfs2: fsid=syz:syz: Now mounting FS... [ 1180.838553][ T6863] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 1180.838553][ T6863] bh = 2072 (magic number) [ 1180.838553][ T6863] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 417 [ 1180.860300][ T6863] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1180.867520][ T6863] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 1180.879210][ T6863] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 1180.887589][ T6863] CPU: 0 PID: 6863 Comm: syz-executor793 Not tainted 5.9.0-syzkaller #0 [ 1180.895877][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.906045][ T6863] RIP: 0010:gfs2_withdraw+0x2b0/0xe20 [ 1180.911389][ T6863] Code: e8 03 48 89 44 24 38 42 80 3c 38 00 74 08 48 89 ef e8 a4 e2 69 fe 48 89 6c 24 20 48 8b 6d 00 48 83 c5 70 48 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 ef e8 81 e2 69 fe 48 8b 45 00 48 89 44 [ 1180.930975][ T6863] RSP: 0018:ffffc900015774f0 EFLAGS: 00010202 [ 1180.937021][ T6863] RAX: 000000000000000e RBX: ffff888091200000 RCX: c8d7b93e243a8200 [ 1180.944975][ T6863] RDX: ffff888097136380 RSI: 0000000000000000 RDI: ffff888091200430 [ 1180.952935][ T6863] RBP: 0000000000000070 R08: ffffffff834b00cc R09: ffffed1015d041c3 [ 1180.960893][ T6863] R10: ffffed1015d041c3 R11: 0000000000000000 R12: 1ffff1101224004d [ 1180.968851][ T6863] R13: ffff888091200050 R14: ffff88809120026c R15: dffffc0000000000 [ 1180.976806][ T6863] FS: 000000000199f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1180.985703][ T6863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.992253][ T6863] CR2: 00007ffe45e85000 CR3: 00000000a431b000 CR4: 00000000001506f0 [ 1181.000196][ T6863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1181.008137][ T6863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1181.016085][ T6863] Call Trace: [ 1181.019565][ T6863] gfs2_meta_check_ii+0x70/0x80 [ 1181.024450][ T6863] gfs2_meta_indirect_buffer+0x29f/0x380 [ 1181.030075][ T6863] gfs2_inode_refresh+0x65/0xc00 [ 1181.034982][ T6863] inode_go_lock+0x12c/0x480 [ 1181.039561][ T6863] do_promote+0x4db/0xcd0 [ 1181.043861][ T6863] finish_xmote+0x907/0x1350 [ 1181.048419][ T6863] do_xmote+0xadb/0x14c0 [ 1181.052632][ T6863] gfs2_glock_nq+0xac3/0x14d0 [ 1181.057278][ T6863] gfs2_lookupi+0x36f/0x4f0 [ 1181.061751][ T6863] ? gfs2_lookupi+0x367/0x4f0 [ 1181.066395][ T6863] gfs2_lookup_simple+0xa4/0x100 [ 1181.071301][ T6863] init_journal+0x132/0x1970 [ 1181.075932][ T6863] ? vsnprintf+0x1a12/0x1aa0 [ 1181.080512][ T6863] ? snprintf+0x6f/0x90 [ 1181.084726][ T6863] ? _raw_spin_unlock+0x24/0x40 [ 1181.089563][ T6863] gfs2_fill_super+0x2717/0x3fe0 [ 1181.094488][ T6863] ? gfs2_glock_nq_num+0xaa/0x1d0 [ 1181.099493][ T6863] ? snprintf+0x6f/0x90 [ 1181.103702][ T6863] ? set_blocksize+0x1f5/0x3c0 [ 1181.108494][ T6863] get_tree_bdev+0x3e9/0x5f0 [ 1181.113070][ T6863] ? gfs2_reconfigure+0xe10/0xe10 [ 1181.118061][ T6863] gfs2_get_tree+0x4c/0x1f0 [ 1181.122539][ T6863] vfs_get_tree+0x88/0x270 [ 1181.126958][ T6863] path_mount+0x179d/0x29e0 [ 1181.131453][ T6863] __se_sys_mount+0x126/0x180 [ 1181.136100][ T6863] do_syscall_64+0x31/0x70 [ 1181.140489][ T6863] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1181.146350][ T6863] RIP: 0033:0x45b4ca [ 1181.150221][ T6863] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1181.169807][ T6863] RSP: 002b:00007ffe45e84198 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 1181.178196][ T6863] RAX: ffffffffffffffda RBX: 00007ffe45e841f0 RCX: 000000000045b4ca [ 1181.186135][ T6863] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe45e841b0 [ 1181.194074][ T6863] RBP: 00007ffe45e841b0 R08: 00007ffe45e841f0 R09: 00007ffe00000015 [ 1181.202014][ T6863] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 1181.209955][ T6863] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 1181.217900][ T6863] Modules linked in: [ 1181.221881][ T6863] ---[ end trace 30f650b98ce3effb ]--- [ 1181.227350][ T6863] RIP: 0010:gfs2_withdraw+0x2b0/0xe20 [ 1181.232754][ T6863] Code: e8 03 48 89 44 24 38 42 80 3c 38 00 74 08 48 89 ef e8 a4 e2 69 fe 48 89 6c 24 20 48 8b 6d 00 48 83 c5 70 48 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 ef e8 81 e2 69 fe 48 8b 45 00 48 89 44 [ 1181.252395][ T6863] RSP: 0018:ffffc900015774f0 EFLAGS: 00010202 [ 1181.258463][ T6863] RAX: 000000000000000e RBX: ffff888091200000 RCX: c8d7b93e243a8200 [ 1181.266457][ T6863] RDX: ffff888097136380 RSI: 0000000000000000 RDI: ffff888091200430 [ 1181.274466][ T6863] RBP: 0000000000000070 R08: ffffffff834b00cc R09: ffffed1015d041c3 [ 1181.282520][ T6863] R10: ffffed1015d041c3 R11: 0000000000000000 R12: 1ffff1101224004d [ 1181.290542][ T6863] R13: ffff888091200050 R14: ffff88809120026c R15: dffffc0000000000 [ 1181.298516][ T6863] FS: 000000000199f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1181.307476][ T6863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.314082][ T6863] CR2: 00007ffe45e85000 CR3: 00000000a431b000 CR4: 00000000001506f0 [ 1181.322104][ T6863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1181.330123][ T6863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1181.338080][ T6863] Kernel panic - not syncing: Fatal exception [ 1181.345253][ T6863] Kernel Offset: disabled [ 1181.349564][ T6863] Rebooting in 86400 seconds..