[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 896.784216][ T8482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 896.793364][ T8482] gfs2: fsid=syz:syz: Now mounting FS... [ 896.802654][ T8482] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 896.802654][ T8482] bh = 2075 (magic number) [ 896.802654][ T8482] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 896.823106][ T8482] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 896.831139][ T8482] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 896.842884][ T8482] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 896.851355][ T8482] CPU: 0 PID: 8482 Comm: syz-executor573 Not tainted 5.10.0-rc3-next-20201113-syzkaller #0 [ 896.861325][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.871570][ T8482] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 896.877265][ T8482] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 88 83 fa f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 896.896874][ T8482] RSP: 0018:ffffc9000147f378 EFLAGS: 00010202 [ 896.902914][ T8482] RAX: dffffc0000000000 RBX: ffff88802fc00000 RCX: ffffffff88b8729d [ 896.911401][ T8482] RDX: 000000000000000e RSI: ffffffff88b872ae RDI: 0000000000000070 [ 896.919349][ T8482] RBP: ffff88802fc002c5 R08: 0000000000000038 R09: ffff8880b9e30967 [ 896.927306][ T8482] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802fc000a8 [ 896.935259][ T8482] R13: ffff88802fc00348 R14: ffffffff899067c0 R15: 0000000000000000 [ 896.943207][ T8482] FS: 0000000002615880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 896.952108][ T8482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.958678][ T8482] CR2: 00005571c5fee1a8 CR3: 00000000111d0000 CR4: 00000000001506f0 [ 896.966635][ T8482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.974597][ T8482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.982539][ T8482] Call Trace: [ 896.985923][ T8482] gfs2_meta_check_ii+0x68/0xa0 [ 896.990768][ T8482] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 896.996376][ T8482] ? gfs2_journal_wipe+0xc00/0xc00 [ 897.001460][ T8482] gfs2_inode_refresh+0x95/0xdf0 [ 897.006379][ T8482] ? inode_go_sync+0x560/0x560 [ 897.011583][ T8482] ? lock_downgrade+0x6d0/0x6d0 [ 897.016406][ T8482] inode_go_lock+0x309/0x4a0 [ 897.021001][ T8482] do_promote+0x4a0/0xb70 [ 897.025304][ T8482] finish_xmote+0x671/0xe40 [ 897.029807][ T8482] do_xmote+0x821/0xbc0 [ 897.033934][ T8482] run_queue+0x323/0x680 [ 897.038150][ T8482] gfs2_glock_nq+0x702/0x1190 [ 897.042836][ T8482] gfs2_lookupi+0x314/0x630 [ 897.047315][ T8482] ? gfs2_lookup_by_inum+0x100/0x100 [ 897.052574][ T8482] ? gfs2_lookupi+0x30c/0x630 [ 897.057326][ T8482] ? crc32_body+0x348/0x5f0 [ 897.061834][ T8482] gfs2_lookup_simple+0x99/0xe0 [ 897.066662][ T8482] ? gfs2_lookupi+0x630/0x630 [ 897.071398][ T8482] ? enable_ptr_key_workfn+0x30/0x30 [ 897.076661][ T8482] init_inodes+0x3cb/0x2650 [ 897.081149][ T8482] ? do_raw_spin_lock+0x120/0x2b0 [ 897.086154][ T8482] ? vsnprintf+0x2cc/0x14f0 [ 897.090635][ T8482] ? end_bio_io_page+0x100/0x100 [ 897.095549][ T8482] ? pointer+0x930/0x930 [ 897.099891][ T8482] ? gfs2_glock_dq_uninit+0x87/0x100 [ 897.105161][ T8482] ? init_sb+0x9c6/0xd30 [ 897.109702][ T8482] ? snprintf+0xbb/0xf0 [ 897.113858][ T8482] ? vsprintf+0x30/0x30 [ 897.117989][ T8482] ? gfs2_read_super+0x1140/0x1140 [ 897.123147][ T8482] ? __debugfs_create_file+0x33d/0x4c0 [ 897.128582][ T8482] gfs2_fill_super+0x199c/0x23f0 [ 897.133495][ T8482] ? gfs2_reconfigure+0x1030/0x1030 [ 897.138665][ T8482] ? lock_downgrade+0x6d0/0x6d0 [ 897.143489][ T8482] ? gfs2_glock_nq_num+0xf9/0x240 [ 897.148489][ T8482] ? snprintf+0xbb/0xf0 [ 897.152619][ T8482] ? vsprintf+0x30/0x30 [ 897.156812][ T8482] ? wait_for_completion_io+0x260/0x260 [ 897.162397][ T8482] ? set_blocksize+0x1c1/0x400 [ 897.167167][ T8482] get_tree_bdev+0x421/0x740 [ 897.171819][ T8482] ? gfs2_reconfigure+0x1030/0x1030 [ 897.177007][ T8482] gfs2_get_tree+0x4a/0x270 [ 897.181482][ T8482] vfs_get_tree+0x89/0x2f0 [ 897.185883][ T8482] path_mount+0x12ae/0x1e70 [ 897.190361][ T8482] ? strncpy_from_user+0x29e/0x3a0 [ 897.195449][ T8482] ? finish_automount+0xac0/0xac0 [ 897.200475][ T8482] ? getname_flags.part.0+0x1dd/0x4f0 [ 897.205842][ T8482] __x64_sys_mount+0x27f/0x300 [ 897.211081][ T8482] ? copy_mnt_ns+0xae0/0xae0 [ 897.215687][ T8482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 897.221588][ T8482] do_syscall_64+0x2d/0x70 [ 897.226013][ T8482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 897.231891][ T8482] RIP: 0033:0x45b4ca [ 897.235763][ T8482] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 897.255351][ T8482] RSP: 002b:00007ffc81671e68 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 897.263738][ T8482] RAX: ffffffffffffffda RBX: 00007ffc81671ec0 RCX: 000000000045b4ca [ 897.271682][ T8482] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc81671e80 [ 897.279637][ T8482] RBP: 00007ffc81671e80 R08: 00007ffc81671ec0 R09: 00007ffc00000015 [ 897.287580][ T8482] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 897.295523][ T8482] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 897.303480][ T8482] Modules linked in: [ 897.307868][ T8482] ---[ end trace 6211fd667a319f94 ]--- [ 897.313348][ T8482] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 897.319113][ T8482] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 88 83 fa f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 897.338755][ T8482] RSP: 0018:ffffc9000147f378 EFLAGS: 00010202 [ 897.344809][ T8482] RAX: dffffc0000000000 RBX: ffff88802fc00000 RCX: ffffffff88b8729d [ 897.352788][ T8482] RDX: 000000000000000e RSI: ffffffff88b872ae RDI: 0000000000000070 [ 897.360823][ T8482] RBP: ffff88802fc002c5 R08: 0000000000000038 R09: ffff8880b9e30967 [ 897.368816][ T8482] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802fc000a8 [ 897.376820][ T8482] R13: ffff88802fc00348 R14: ffffffff899067c0 R15: 0000000000000000 [ 897.384786][ T8482] FS: 0000000002615880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 897.393727][ T8482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.400356][ T8482] CR2: 00005571c5fee1a8 CR3: 00000000111d0000 CR4: 00000000001506f0 [ 897.408348][ T8482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.416307][ T8482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.424292][ T8482] Kernel panic - not syncing: Fatal exception [ 897.431082][ T8482] Kernel Offset: disabled [ 897.435398][ T8482] Rebooting in 86400 seconds..