gfs2: fsid=syz:syz.0: Error -5 writing to journal, jid=0
CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
gfs2_withdraw+0xc3/0x1b0 fs/gfs2/util.c:248
gfs2_end_log_write+0xcf/0x7c0 fs/gfs2/lops.c:214
gfs2_log_submit_write+0x7e/0xb0 fs/gfs2/lops.c:247
__gfs2_log_flush+0xaed/0x1d90 fs/gfs2/log.c:1142
gfs2_log_flush+0x34/0x50 fs/gfs2/log.c:1217
gfs2_trans_end+0x372/0x550 fs/gfs2/trans.c:163
do_grow fs/gfs2/bmap.c:2158 [inline]
gfs2_setattr_size+0xeba/0x1270 fs/gfs2/bmap.c:2198
gfs2_setattr+0x269/0x430 fs/gfs2/inode.c:2135
notify_change+0xbba/0xea0 fs/attr.c:556
do_truncate+0x1c2/0x250 fs/open.c:68
do_ftruncate+0x4d7/0x580 fs/open.c:194
ksys_ftruncate fs/open.c:206 [inline]
__do_sys_ftruncate fs/open.c:211 [inline]
__se_sys_ftruncate fs/open.c:209 [inline]
__x64_sys_ftruncate+0x8f/0xe0 fs/open.c:209
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe23bf9f559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe23ce1efe8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007fe23c226090 RCX: 00007fe23bf9f559
RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 0000000000000009
RBP: 00007fe23c036b50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe23c226128 R14: 00007fe23c226090 R15: 00007fff57aefff8
gfs2: fsid=syz:syz.0: about to withdraw this file system
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:kasan_byte_accessible+0x12/0x30 mm/kasan/generic.c:210
Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 4a c8 09 cc 66 66 66 66 66 66 2e
RSP: 0018:ffffc9000fa7fa58 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffffffff8c09aaee RCX: 8000000000000002
RDX: 0000000000000000 RSI: ffffffff8c09aaee RDI: 0000000000000007
RBP: ffffc9000fa7fc80 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed100a2f6005 R12: 0000000000000038
R13: 0000000000000000 R14: 0000000000000038 R15: 0000000000000001
FS: 00007fe23ce1f6c0(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe23ce1eff8 CR3: 000000000fc3c000 CR4: 0000000000352ef0
Call Trace:
__kasan_check_byte+0x12/0x40 mm/kasan/common.c:584
kasan_check_byte include/linux/kasan.h:402 [inline]
lock_acquire+0x7d/0x350 kernel/locking/lockdep.c:5916
__raw_spin_lock include/linux/spinlock_api_smp.h:190 [inline]
_raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:173
spin_lock include/linux/spinlock.h:347 [inline]
gfs2_glock_dq+0xbc/0xa80 fs/gfs2/glock.c:1596
gfs2_glock_dq_uninit+0x27/0xe0 fs/gfs2/glock.c:1654
gfs2_seek_hole+0x17f/0x250 fs/gfs2/inode.c:2277
gfs2_llseek+0x140/0x280 fs/gfs2/file.c:79
vfs_llseek fs/read_write.c:391 [inline]
ksys_lseek fs/read_write.c:404 [inline]
__do_sys_lseek fs/read_write.c:414 [inline]
__se_sys_lseek fs/read_write.c:412 [inline]
__x64_sys_lseek+0x14f/0x1e0 fs/read_write.c:412
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe23bf9f559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe23ce1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
RAX: ffffffffffffffda RBX: 00007fe23c226090 RCX: 00007fe23bf9f559
RDX: 0000000000000004 RSI: 00000000007ffff3 RDI: 0000000000000005
RBP: 00007fe23c036b50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe23c226128 R14: 00007fe23c226090 R15: 00007fff57aefff8
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:kasan_byte_accessible+0x12/0x30 mm/kasan/generic.c:210
Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 4a c8 09 cc 66 66 66 66 66 66 2e
RSP: 0018:ffffc9000fa7fa58 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffffffff8c09aaee RCX: 8000000000000002
RDX: 0000000000000000 RSI: ffffffff8c09aaee RDI: 0000000000000007
RBP: ffffc9000fa7fc80 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed100a2f6005 R12: 0000000000000038
R13: 0000000000000000 R14: 0000000000000038 R15: 0000000000000001
FS: 00007fe23ce1f6c0(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe23ce1eff8 CR3: 000000000fc3c000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess), 4 bytes skipped:
0: 0f 1f 40 00 nopl 0x0(%rax)
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 90 nop
9: 90 nop
a: 90 nop
b: 90 nop
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 0f 1f 40 d6 nopl -0x2a(%rax)
18: 48 c1 ef 03 shr $0x3,%rdi
1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
23: fc ff df
* 26: 0f b6 04 07 movzbl (%rdi,%rax,1),%eax <-- trapping instruction
2a: 3c 08 cmp $0x8,%al
2c: 0f 92 c0 setb %al
2f: e9 00 4a c8 09 jmp 0x9c84a34
34: cc int3
35: 66 data16
36: 66 data16
37: 66 data16
38: 66 data16
39: 66 data16
3a: 66 data16
3b: 2e cs