Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. executing program [ 972.250084][ T28] audit: type=1400 audit(1602115042.279:8): avc: denied { execmem } for pid=6875 comm="syz-executor635" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 972.276207][ T6875] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 972.286101][ T6875] gfs2: fsid=syz:syz: Now mounting FS... [ 972.296328][ T6875] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 972.296328][ T6875] bh = 2072 (magic number) [ 972.296328][ T6875] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 417 [ 972.317689][ T6875] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 972.325005][ T6875] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 972.336748][ T6875] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 972.345158][ T6875] CPU: 1 PID: 6875 Comm: syz-executor635 Not tainted 5.9.0-rc8-syzkaller #0 [ 972.353959][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.364237][ T6875] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 972.369960][ T6875] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 87 55 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 972.389544][ T6875] RSP: 0018:ffffc900053173b8 EFLAGS: 00010202 [ 972.395586][ T6875] RAX: dffffc0000000000 RBX: ffff88809f7f0000 RCX: ffffffff834ec08e [ 972.403534][ T6875] RDX: 000000000000000e RSI: ffffffff834ec09f RDI: 0000000000000070 [ 972.411484][ T6875] RBP: ffff88809f7f026d R08: 0000000000000038 R09: ffff8880ae520f8b [ 972.419432][ T6875] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809f7f0050 [ 972.427392][ T6875] R13: ffff88809f7f02f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 972.435355][ T6875] FS: 0000000002193880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 972.444274][ T6875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.451121][ T6875] CR2: 0000561c992eab30 CR3: 00000000a3ce9000 CR4: 00000000001506e0 [ 972.459078][ T6875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 972.467027][ T6875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 972.474972][ T6875] Call Trace: [ 972.478260][ T6875] gfs2_meta_check_ii+0x68/0xa0 [ 972.483169][ T6875] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 972.488787][ T6875] ? gfs2_meta_wipe+0x1b0/0x1b0 [ 972.493663][ T6875] ? lock_is_held_type+0xbb/0xf0 [ 972.498690][ T6875] gfs2_inode_refresh+0x95/0xdf0 [ 972.503619][ T6875] ? gfs2_glock2rgrp+0x60/0x60 [ 972.508376][ T6875] ? lock_downgrade+0x830/0x830 [ 972.513216][ T6875] ? lock_acquire+0x1f3/0xaf0 [ 972.517878][ T6875] ? finish_xmote+0x65/0xf40 [ 972.522463][ T6875] inode_go_lock+0x309/0x49f [ 972.527091][ T6875] do_promote+0x4a0/0xc10 [ 972.531411][ T6875] finish_xmote+0x4ed/0xf40 [ 972.535890][ T6875] do_xmote+0x812/0xba0 [ 972.540021][ T6875] run_queue+0x323/0x680 [ 972.544236][ T6875] gfs2_glock_nq+0x716/0x11b0 [ 972.548889][ T6875] gfs2_lookupi+0x314/0x630 [ 972.553387][ T6875] ? gfs2_lookup_by_inum+0x100/0x100 [ 972.558644][ T6875] ? gfs2_lookupi+0x30c/0x630 [ 972.563353][ T6875] ? crc32_body+0x348/0x5f0 [ 972.567838][ T6875] gfs2_lookup_simple+0x99/0xe0 [ 972.572682][ T6875] ? gfs2_lookupi+0x630/0x630 [ 972.577339][ T6875] ? do_raw_spin_lock+0x120/0x2b0 [ 972.582340][ T6875] init_inodes+0x367/0x1f40 [ 972.586867][ T6875] ? vsnprintf+0x2cc/0x14f0 [ 972.591358][ T6875] ? pointer+0x970/0x970 [ 972.595580][ T6875] ? end_bio_io_page+0x100/0x100 [ 972.600503][ T6875] ? init_sb+0x9ba/0xd30 [ 972.604743][ T6875] ? snprintf+0xbb/0xf0 [ 972.608874][ T6875] ? vsprintf+0x30/0x30 [ 972.613009][ T6875] ? gfs2_read_super+0x1080/0x1080 [ 972.618144][ T6875] ? __debugfs_create_file+0x36b/0x4f0 [ 972.623582][ T6875] gfs2_fill_super+0x195e/0x254a [ 972.628499][ T6875] ? gfs2_reconfigure+0x1020/0x1020 [ 972.633676][ T6875] ? lock_downgrade+0x830/0x830 [ 972.638500][ T6875] ? gfs2_glock_nq_num+0xf9/0x240 [ 972.643516][ T6875] ? snprintf+0xbb/0xf0 [ 972.647646][ T6875] ? vsprintf+0x30/0x30 [ 972.651832][ T6875] ? wait_for_completion+0x260/0x260 [ 972.657102][ T6875] ? set_blocksize+0x1c1/0x400 [ 972.661842][ T6875] get_tree_bdev+0x421/0x740 [ 972.666427][ T6875] ? gfs2_reconfigure+0x1020/0x1020 [ 972.671602][ T6875] gfs2_get_tree+0x4a/0x270 [ 972.676084][ T6875] vfs_get_tree+0x89/0x2f0 [ 972.680480][ T6875] path_mount+0x1387/0x20a0 [ 972.685011][ T6875] ? strncpy_from_user+0x2bf/0x3e0 [ 972.690117][ T6875] ? copy_mount_string+0x40/0x40 [ 972.695032][ T6875] ? getname_flags.part.0+0x1dd/0x4f0 [ 972.700398][ T6875] __x64_sys_mount+0x27f/0x300 [ 972.705311][ T6875] ? copy_mnt_ns+0xa60/0xa60 [ 972.709899][ T6875] ? check_preemption_disabled+0x50/0x130 [ 972.715599][ T6875] ? syscall_enter_from_user_mode+0x1d/0x60 [ 972.721476][ T6875] do_syscall_64+0x2d/0x70 [ 972.725951][ T6875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.731980][ T6875] RIP: 0033:0x458e1a [ 972.735861][ T6875] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 972.755451][ T6875] RSP: 002b:00007ffc485298b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 972.764091][ T6875] RAX: ffffffffffffffda RBX: 00007ffc48529910 RCX: 0000000000458e1a [ 972.772059][ T6875] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc485298d0 [ 972.780024][ T6875] RBP: 00007ffc485298d0 R08: 00007ffc48529910 R09: 00007ffc00000015 [ 972.787984][ T6875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000809 [ 972.795932][ T6875] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 972.803880][ T6875] Modules linked in: [ 972.817117][ T6875] ---[ end trace d8ad6dbc6997a749 ]--- [ 972.822613][ T6875] RIP: 0010:gfs2_withdraw.cold+0xff/0xc0e [ 972.828748][ T6875] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 19 02 00 00 4c 8b bb a0 08 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 87 55 68 fe 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 972.848664][ T6875] RSP: 0018:ffffc900053173b8 EFLAGS: 00010202 [ 972.854760][ T6875] RAX: dffffc0000000000 RBX: ffff88809f7f0000 RCX: ffffffff834ec08e [ 972.862774][ T6875] RDX: 000000000000000e RSI: ffffffff834ec09f RDI: 0000000000000070 [ 972.870825][ T6875] RBP: ffff88809f7f026d R08: 0000000000000038 R09: ffff8880ae520f8b [ 972.878854][ T6875] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809f7f0050 [ 972.886833][ T6875] R13: ffff88809f7f02f0 R14: ffffffff88cc15e0 R15: 0000000000000000 [ 972.894884][ T6875] FS: 0000000002193880(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 972.903856][ T6875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.910551][ T6875] CR2: 00007f60d0cdb000 CR3: 00000000a3ce9000 CR4: 00000000001506e0 [ 972.918596][ T6875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 972.926564][ T6875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 972.934587][ T6875] Kernel panic - not syncing: Fatal exception [ 972.941879][ T6875] Kernel Offset: disabled [ 972.946203][ T6875] Rebooting in 86400 seconds..