[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ 54.016626][ T6841] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-rfkill/6841 [ 54.026318][ T6841] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 54.032714][ T6841] CPU: 0 PID: 6841 Comm: systemd-rfkill Not tainted 5.7.0-syzkaller #0 [ 54.041057][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.051212][ T6841] Call Trace: [ 54.054493][ T6841] dump_stack+0x188/0x20d [ 54.058809][ T6841] debug_smp_processor_id.cold+0x88/0x9b [ 54.064470][ T6841] ext4_mb_new_blocks+0xa77/0x3b30 [ 54.069585][ T6841] ? ext4_ext_search_right+0x2ca/0xb20 [ 54.075035][ T6841] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 54.080741][ T6841] ext4_ext_map_blocks+0x2044/0x3410 [ 54.086034][ T6841] ? ext4_ext_release+0x10/0x10 [ 54.090885][ T6841] ? __down_timeout+0x2d0/0x2d0 [ 54.095811][ T6841] ? ext4_es_lookup_extent+0x41d/0xd30 [ 54.101263][ T6841] ext4_map_blocks+0x4cb/0x1640 [ 54.106101][ T6841] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 54.111299][ T6841] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 54.116841][ T6841] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 54.122801][ T6841] ? prandom_u32_state+0xe/0x170 [ 54.127820][ T6841] ? __brelse+0x84/0xa0 [ 54.131959][ T6841] ? __ext4_new_inode+0x144/0x57c0 [ 54.137052][ T6841] ext4_getblk+0xad/0x520 [ 54.141365][ T6841] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 54.147152][ T6841] ? ext4_free_inode+0x17e0/0x17e0 [ 54.152245][ T6841] ext4_bread+0x7c/0x380 [ 54.156467][ T6841] ? ext4_getblk+0x520/0x520 [ 54.162081][ T6841] ? dqget+0xff0/0xff0 [ 54.166135][ T6841] ext4_append+0x153/0x360 [ 54.170534][ T6841] ext4_mkdir+0x5e0/0xdf0 [ 54.174846][ T6841] ? ext4_rmdir+0xde0/0xde0 [ 54.179339][ T6841] ? security_inode_permission+0xc4/0xf0 [ 54.184960][ T6841] vfs_mkdir+0x419/0x690 [ 54.189195][ T6841] do_mkdirat+0x21e/0x280 [ 54.193523][ T6841] ? __ia32_sys_mknod+0xb0/0xb0 [ 54.198438][ T6841] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 54.204407][ T6841] ? do_syscall_64+0x21/0x7d0 [ 54.209086][ T6841] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 54.215079][ T6841] do_syscall_64+0xf6/0x7d0 [ 54.219585][ T6841] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 54.225468][ T6841] RIP: 0033:0x7f7125707687 [ 54.229864][ T6841] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 54.249470][ T6841] RSP: 002b:00007ffc5edbe2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 54.258231][ T6841] RAX: ffffffffffffffda RBX: 0000558a93caf985 RCX: 00007f7125707687 [ 54.266204][ T6841] RDX: 00007ffc5edbe1c0 RSI: 00000000000001ed RDI: 0000558a93caf985 [ 54.274176][ T6841] RBP: 00007f7125707680 R08: 0000000000000100 R09: 0000000000000000 [ 54.282144][ T6841] R10: 0000558a93caf980 R11: 0000000000000246 R12: 00000000000001ed [ 54.290130][ T6841] R13: 00007ffc5edbe480 R14: 0000000000000000 R15: 0000000000000000 [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 57.259355][ T4339] BUG: using smp_processor_id() in preemptible [00000000] code: kworker/u4:6/4339 [ 57.268570][ T4339] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 57.274576][ T4339] CPU: 0 PID: 4339 Comm: kworker/u4:6 Not tainted 5.7.0-syzkaller #0 [ 57.282631][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.292852][ T4339] Workqueue: writeback wb_workfn (flush-8:0) [ 57.298831][ T4339] Call Trace: [ 57.302107][ T4339] dump_stack+0x188/0x20d [ 57.306416][ T4339] debug_smp_processor_id.cold+0x88/0x9b [ 57.312029][ T4339] ext4_mb_new_blocks+0xa77/0x3b30 [ 57.317129][ T4339] ? __kmalloc+0x62f/0x7a0 [ 57.321543][ T4339] ? ext4_ext_search_right+0x2ca/0xb20 [ 57.326995][ T4339] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 57.332870][ T4339] ext4_ext_map_blocks+0x2044/0x3410 [ 57.338137][ T4339] ? ext4_ext_release+0x10/0x10 [ 57.342976][ T4339] ? __down_timeout+0x2d0/0x2d0 [ 57.348423][ T4339] ? ext4_es_lookup_extent+0x41d/0xd30 [ 57.353863][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 57.359309][ T4339] ext4_map_blocks+0x4cb/0x1640 [ 57.364664][ T4339] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 57.370011][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 57.375623][ T4339] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.381158][ T4339] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 57.387119][ T4339] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 57.392560][ T4339] ext4_writepages+0x1ab7/0x3400 [ 57.397487][ T4339] ? __ext4_mark_inode_dirty+0x950/0x950 [ 57.403445][ T4339] ? __lock_acquire+0x2224/0x48a0 [ 57.408474][ T4339] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 57.414452][ T4339] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 57.420417][ T4339] ? __ext4_mark_inode_dirty+0x950/0x950 [ 57.426114][ T4339] ? do_writepages+0xfa/0x2a0 [ 57.430781][ T4339] do_writepages+0xfa/0x2a0 [ 57.435263][ T4339] ? page_writeback_cpu_online+0x10/0x10 [ 57.440877][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 57.446327][ T4339] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.451865][ T4339] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 57.457821][ T4339] ? lock_downgrade+0x840/0x840 [ 57.462678][ T4339] __writeback_single_inode+0x12a/0x1410 [ 57.468315][ T4339] ? _raw_spin_unlock+0x24/0x40 [ 57.473246][ T4339] ? wbc_attach_and_unlock_inode+0x60a/0x9c0 [ 57.479208][ T4339] writeback_sb_inodes+0x515/0xdd0 [ 57.484323][ T4339] ? __writeback_single_inode+0x1410/0x1410 [ 57.490213][ T4339] __writeback_inodes_wb+0xc3/0x250 [ 57.495391][ T4339] wb_writeback+0x910/0xd90 [ 57.500250][ T4339] ? print_usage_bug+0x240/0x240 [ 57.505203][ T4339] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 57.511524][ T4339] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 57.517397][ T4339] ? cpumask_next+0x3c/0x40 [ 57.521879][ T4339] ? get_nr_dirty_inodes+0xd6/0x130 [ 57.527063][ T4339] wb_workfn+0xadf/0x10d0 [ 57.531398][ T4339] ? inode_wait_for_writeback+0x30/0x30 [ 57.536932][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 57.542370][ T4339] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.547977][ T4339] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 57.553942][ T4339] process_one_work+0x965/0x16a0 [ 57.558871][ T4339] ? lock_release+0x800/0x800 [ 57.563529][ T4339] ? pwq_dec_nr_in_flight+0x310/0x310 [ 57.568897][ T4339] ? rwlock_bug.part.0+0x90/0x90 [ 57.573837][ T4339] worker_thread+0x96/0xe10 [ 57.578350][ T4339] ? process_one_work+0x16a0/0x16a0 [ 57.583548][ T4339] kthread+0x388/0x470 [ 57.587699][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 57.593930][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 57.599630][ T4339] ret_from_fork+0x24/0x30 Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2020/06/12 21:21:52 fuzzer started 2020/06/12 21:21:52 connecting to host at 10.128.0.26:45727 2020/06/12 21:21:52 checking machine... 2020/06/12 21:21:52 checking revisions... 2020/06/12 21:21:52 testing simple program... [ 59.665195][ T1154] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1154 [ 59.674464][ T1154] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 59.680452][ T1154] CPU: 1 PID: 1154 Comm: khugepaged Not tainted 5.7.0-syzkaller #0 [ 59.688339][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.698395][ T1154] Call Trace: [ 59.701707][ T1154] dump_stack+0x188/0x20d [ 59.706043][ T1154] debug_smp_processor_id.cold+0x88/0x9b [ 59.711703][ T1154] ext4_mb_new_blocks+0xa77/0x3b30 [ 59.716815][ T1154] ? __kmalloc+0x62f/0x7a0 [ 59.721250][ T1154] ? ext4_ext_search_right+0x2ca/0xb20 [ 59.726737][ T1154] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 59.732553][ T1154] ext4_ext_map_blocks+0x2044/0x3410 [ 59.737847][ T1154] ? ext4_ext_release+0x10/0x10 [ 59.742806][ T1154] ? __down_timeout+0x2d0/0x2d0 [ 59.747656][ T1154] ? ext4_es_lookup_extent+0x41d/0xd30 [ 59.753135][ T1154] ext4_map_blocks+0x4cb/0x1640 [ 59.758008][ T1154] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 59.763218][ T1154] ? debug_smp_processor_id+0x2f/0x185 [ 59.768705][ T1154] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.774262][ T1154] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 59.780418][ T1154] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 59.785893][ T1154] ext4_writepages+0x1ab7/0x3400 [ 59.790839][ T1154] ? mark_lock+0x30/0xdd0 [ 59.795188][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 59.800849][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 59.806483][ T1154] ? do_writepages+0xfa/0x2a0 [ 59.811162][ T1154] do_writepages+0xfa/0x2a0 [ 59.817151][ T1154] ? page_writeback_cpu_online+0x10/0x10 [ 59.822896][ T1154] ? do_raw_spin_lock+0x129/0x2e0 [ 59.827923][ T1154] ? do_raw_spin_unlock+0x171/0x260 [ 59.833127][ T1154] ? _raw_spin_unlock+0x24/0x40 [ 59.834543][ T6914] BUG: using smp_processor_id() in preemptible [00000000] code: syz-fuzzer/6914 [ 59.837994][ T1154] __filemap_fdatawrite_range+0x2aa/0x390 [ 59.847109][ T6914] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 59.853150][ T1154] ? collapse_file+0x3575/0x4300 [ 59.853165][ T1154] ? delete_from_page_cache_batch+0xec0/0xec0 [ 59.853188][ T1154] ? _raw_spin_unlock_irq+0x1f/0x80 [ 59.853204][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 59.853223][ T1154] collapse_file+0x357f/0x4300 [ 59.853253][ T1154] ? collapse_huge_page+0x4370/0x4370 [ 59.891298][ T1154] ? khugepaged+0x24fa/0x3f80 [ 59.895975][ T1154] khugepaged+0x3049/0x3f80 [ 59.900499][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 59.906216][ T1154] ? lock_downgrade+0x840/0x840 [ 59.911051][ T1154] ? finish_wait+0x260/0x260 [ 59.915637][ T1154] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 59.921428][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 59.927481][ T1154] ? __kthread_parkme+0x13f/0x1e0 [ 59.932501][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 59.938131][ T1154] kthread+0x388/0x470 [ 59.942182][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 59.947879][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 59.953583][ T1154] ret_from_fork+0x24/0x30 [ 59.957996][ T6914] CPU: 0 PID: 6914 Comm: syz-fuzzer Not tainted 5.7.0-syzkaller #0 [ 59.965986][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.976245][ T6914] Call Trace: [ 59.979542][ T6914] dump_stack+0x188/0x20d [ 59.983878][ T6914] debug_smp_processor_id.cold+0x88/0x9b [ 59.989523][ T6914] ext4_mb_new_blocks+0xa77/0x3b30 [ 59.994658][ T6914] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.000116][ T6914] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 60.005839][ T6914] ext4_ext_map_blocks+0x2044/0x3410 [ 60.011123][ T6914] ? ext4_ext_release+0x10/0x10 [ 60.016180][ T6914] ? __down_timeout+0x2d0/0x2d0 [ 60.021031][ T6914] ? ext4_es_lookup_extent+0x41d/0xd30 [ 60.026521][ T6914] ext4_map_blocks+0x4cb/0x1640 [ 60.027439][ T1154] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1154 [ 60.031370][ T6914] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.031383][ T6914] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.031398][ T6914] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.031412][ T6914] ? prandom_u32_state+0xe/0x170 [ 60.031427][ T6914] ? __brelse+0x84/0xa0 [ 60.031441][ T6914] ? __ext4_new_inode+0x144/0x57c0 [ 60.031459][ T6914] ext4_getblk+0xad/0x520 [ 60.031475][ T6914] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 60.031495][ T6914] ? ext4_free_inode+0x17e0/0x17e0 [ 60.031513][ T6914] ext4_bread+0x7c/0x380 [ 60.031528][ T6914] ? ext4_getblk+0x520/0x520 [ 60.031541][ T6914] ? dqget+0xff0/0xff0 [ 60.031563][ T6914] ext4_append+0x153/0x360 [ 60.031581][ T6914] ext4_mkdir+0x5e0/0xdf0 [ 60.040613][ T1154] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 60.045764][ T6914] ? ext4_rmdir+0xde0/0xde0 [ 60.119510][ T6914] ? security_inode_permission+0xc4/0xf0 [ 60.125149][ T6914] vfs_mkdir+0x419/0x690 [ 60.129379][ T6914] do_mkdirat+0x21e/0x280 [ 60.133692][ T6914] ? __ia32_sys_mknod+0xb0/0xb0 [ 60.138531][ T6914] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.144495][ T6914] ? do_syscall_64+0x21/0x7d0 [ 60.149166][ T6914] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.155156][ T6914] do_syscall_64+0xf6/0x7d0 [ 60.159664][ T6914] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.166610][ T6914] RIP: 0033:0x4b02a0 [ 60.170489][ T6914] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 60.190075][ T6914] RSP: 002b:000000c00004f4b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000102 [ 60.198479][ T6914] RAX: ffffffffffffffda RBX: 000000c00002e500 RCX: 00000000004b02a0 [ 60.206430][ T6914] RDX: 00000000000001c0 RSI: 000000c000320920 RDI: ffffffffffffff9c [ 60.214530][ T6914] RBP: 000000c00004f510 R08: 0000000000000000 R09: 0000000000000000 [ 60.222582][ T6914] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 60.230677][ T6914] R13: 000000000000004a R14: 0000000000000049 R15: 0000000000000100 [ 60.238689][ T1154] CPU: 1 PID: 1154 Comm: khugepaged Not tainted 5.7.0-syzkaller #0 [ 60.246582][ T6924] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6924 [ 60.246604][ T6924] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 60.256032][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.256037][ T1154] Call Trace: [ 60.256056][ T1154] dump_stack+0x188/0x20d [ 60.256073][ T1154] debug_smp_processor_id.cold+0x88/0x9b [ 60.256086][ T1154] ext4_mb_new_blocks+0xa77/0x3b30 [ 60.256111][ T1154] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.256128][ T1154] ? ext4_ext_next_allocated_block+0x221/0x2d0 [ 60.256141][ T1154] ext4_ext_map_blocks+0x2044/0x3410 [ 60.256164][ T1154] ? ext4_ext_release+0x10/0x10 [ 60.312353][ T1154] ? __down_timeout+0x2d0/0x2d0 [ 60.317187][ T1154] ? ext4_es_lookup_extent+0x41d/0xd30 [ 60.322638][ T1154] ext4_map_blocks+0x4cb/0x1640 [ 60.327489][ T1154] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.332670][ T1154] ? debug_smp_processor_id+0x2f/0x185 [ 60.338137][ T1154] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.343667][ T1154] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.349661][ T1154] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 60.355192][ T1154] ext4_writepages+0x1ab7/0x3400 [ 60.360118][ T1154] ? mark_lock+0x30/0xdd0 [ 60.364457][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 60.370090][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 60.375792][ T1154] ? do_writepages+0xfa/0x2a0 [ 60.380449][ T1154] do_writepages+0xfa/0x2a0 [ 60.384949][ T1154] ? page_writeback_cpu_online+0x10/0x10 [ 60.390572][ T1154] ? do_raw_spin_lock+0x129/0x2e0 [ 60.395576][ T1154] ? do_raw_spin_unlock+0x171/0x260 [ 60.400780][ T1154] ? _raw_spin_unlock+0x24/0x40 [ 60.405708][ T1154] __filemap_fdatawrite_range+0x2aa/0x390 [ 60.411410][ T1154] ? collapse_file+0x3575/0x4300 [ 60.416344][ T1154] ? delete_from_page_cache_batch+0xec0/0xec0 [ 60.422409][ T1154] ? _raw_spin_unlock_irq+0x1f/0x80 [ 60.427588][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.433568][ T1154] collapse_file+0x357f/0x4300 [ 60.438338][ T1154] ? collapse_huge_page+0x4370/0x4370 [ 60.443707][ T1154] ? khugepaged+0x24fa/0x3f80 [ 60.448401][ T1154] khugepaged+0x3049/0x3f80 [ 60.452920][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 60.458533][ T1154] ? lock_downgrade+0x840/0x840 [ 60.463364][ T1154] ? finish_wait+0x260/0x260 [ 60.467944][ T1154] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 60.473744][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.479710][ T1154] ? __kthread_parkme+0x13f/0x1e0 [ 60.484732][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 60.490366][ T1154] kthread+0x388/0x470 [ 60.494426][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 60.500136][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 60.505937][ T1154] ret_from_fork+0x24/0x30 [ 60.510353][ T6924] CPU: 0 PID: 6924 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 60.518619][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.528764][ T6924] Call Trace: [ 60.532102][ T6924] dump_stack+0x188/0x20d [ 60.536446][ T6924] debug_smp_processor_id.cold+0x88/0x9b [ 60.542086][ T6924] ext4_mb_new_blocks+0xa77/0x3b30 [ 60.547239][ T6924] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.552714][ T6924] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 60.558438][ T6924] ext4_ext_map_blocks+0x2044/0x3410 [ 60.563813][ T6924] ? ext4_ext_release+0x10/0x10 [ 60.568681][ T6924] ? __down_timeout+0x2d0/0x2d0 [ 60.573625][ T6924] ? ext4_es_lookup_extent+0x41d/0xd30 [ 60.579095][ T6924] ext4_map_blocks+0x4cb/0x1640 [ 60.583945][ T6924] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.589128][ T6924] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.590636][ T1154] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1154 [ 60.594679][ T6924] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.603720][ T1154] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 60.609630][ T6924] ? prandom_u32_state+0xe/0x170 [ 60.609646][ T6924] ? __brelse+0x84/0xa0 [ 60.609660][ T6924] ? __ext4_new_inode+0x144/0x57c0 [ 60.609679][ T6924] ext4_getblk+0xad/0x520 [ 60.609695][ T6924] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 60.609715][ T6924] ? ext4_free_inode+0x17e0/0x17e0 [ 60.644902][ T6924] ext4_bread+0x7c/0x380 [ 60.649127][ T6924] ? ext4_getblk+0x520/0x520 [ 60.653696][ T6924] ? dqget+0xff0/0xff0 [ 60.657767][ T6924] ext4_append+0x153/0x360 [ 60.662169][ T6924] ext4_mkdir+0x5e0/0xdf0 [ 60.666511][ T6924] ? ext4_rmdir+0xde0/0xde0 [ 60.671031][ T6924] ? security_inode_permission+0xc4/0xf0 [ 60.676662][ T6924] vfs_mkdir+0x419/0x690 [ 60.680890][ T6924] do_mkdirat+0x21e/0x280 [ 60.685218][ T6924] ? __ia32_sys_mknod+0xb0/0xb0 [ 60.690052][ T6924] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.696036][ T6924] ? do_syscall_64+0x21/0x7d0 [ 60.700699][ T6924] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.706680][ T6924] do_syscall_64+0xf6/0x7d0 [ 60.711267][ T6924] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.718095][ T6924] RIP: 0033:0x45bee7 [ 60.721977][ T6924] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.741587][ T6924] RSP: 002b:00007ffc7932f5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 60.749988][ T6924] RAX: ffffffffffffffda RBX: 000000000003a2f8 RCX: 000000000045bee7 [ 60.757945][ T6924] RDX: 0000000000000002 RSI: 00000000000001c0 RDI: 00007ffc7932f790 [ 60.765898][ T6924] RBP: 0000000000000001 R08: 000000000000f8c0 R09: 0000000000002a00 [ 60.773850][ T6924] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000000c2 [ 60.781814][ T6924] R13: 00007ffc7932f790 R14: 8421084210842109 R15: 00007ffc7932f79c [ 60.789791][ T1154] CPU: 1 PID: 1154 Comm: khugepaged Not tainted 5.7.0-syzkaller #0 [ 60.797691][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.807743][ T1154] Call Trace: [ 60.811043][ T1154] dump_stack+0x188/0x20d [ 60.815381][ T1154] debug_smp_processor_id.cold+0x88/0x9b [ 60.821022][ T1154] ext4_mb_new_blocks+0xa77/0x3b30 [ 60.826156][ T1154] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.831626][ T1154] ? ext4_ext_next_allocated_block+0x221/0x2d0 [ 60.837784][ T1154] ext4_ext_map_blocks+0x2044/0x3410 [ 60.843080][ T1154] ? ext4_ext_release+0x10/0x10 [ 60.847957][ T1154] ? __down_timeout+0x2d0/0x2d0 [ 60.852808][ T1154] ? ext4_es_lookup_extent+0x41d/0xd30 [ 60.858387][ T1154] ext4_map_blocks+0x4cb/0x1640 [ 60.863246][ T1154] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.868468][ T1154] ? debug_smp_processor_id+0x2f/0x185 [ 60.873937][ T1154] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.879487][ T1154] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.885437][ T6925] IPVS: ftp: loaded support on port[0] = 21 [ 60.891343][ T1154] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 60.896812][ T1154] ext4_writepages+0x1ab7/0x3400 [ 60.901757][ T1154] ? mark_lock+0x30/0xdd0 [ 60.906144][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 60.911809][ T1154] ? __ext4_mark_inode_dirty+0x950/0x950 [ 60.917480][ T1154] ? do_writepages+0xfa/0x2a0 [ 60.922168][ T1154] do_writepages+0xfa/0x2a0 [ 60.924299][ T6925] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6925 [ 60.926692][ T1154] ? page_writeback_cpu_online+0x10/0x10 [ 60.936139][ T6925] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 60.941668][ T1154] ? do_raw_spin_lock+0x129/0x2e0 [ 60.941682][ T1154] ? do_raw_spin_unlock+0x171/0x260 [ 60.941697][ T1154] ? _raw_spin_unlock+0x24/0x40 [ 60.941719][ T1154] __filemap_fdatawrite_range+0x2aa/0x390 [ 60.973050][ T1154] ? collapse_file+0x3575/0x4300 [ 60.977972][ T1154] ? delete_from_page_cache_batch+0xec0/0xec0 [ 60.984034][ T1154] ? _raw_spin_unlock_irq+0x1f/0x80 [ 60.989324][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.995313][ T1154] collapse_file+0x357f/0x4300 [ 61.000163][ T1154] ? collapse_huge_page+0x4370/0x4370 [ 61.005529][ T1154] ? khugepaged+0x24fa/0x3f80 [ 61.010219][ T1154] khugepaged+0x3049/0x3f80 [ 61.014738][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 61.020354][ T1154] ? lock_downgrade+0x840/0x840 [ 61.025187][ T1154] ? finish_wait+0x260/0x260 [ 61.029763][ T1154] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 61.035573][ T1154] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.041716][ T1154] ? __kthread_parkme+0x13f/0x1e0 [ 61.046741][ T1154] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 61.052372][ T1154] kthread+0x388/0x470 [ 61.056424][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 61.062125][ T1154] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 61.067827][ T1154] ret_from_fork+0x24/0x30 [ 61.072251][ T6925] CPU: 0 PID: 6925 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 61.080501][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.090584][ T6925] Call Trace: [ 61.094242][ T6925] dump_stack+0x188/0x20d [ 61.098672][ T6925] debug_smp_processor_id.cold+0x88/0x9b [ 61.104305][ T6925] ext4_mb_new_blocks+0xa77/0x3b30 [ 61.109620][ T6925] ? ext4_ext_search_right+0x2ca/0xb20 [ 61.115100][ T6925] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 61.120840][ T6925] ext4_ext_map_blocks+0x2044/0x3410 [ 61.126136][ T6925] ? ext4_ext_release+0x10/0x10 [ 61.131007][ T6925] ? __down_timeout+0x2d0/0x2d0 [ 61.136300][ T6925] ? ext4_es_lookup_extent+0x41d/0xd30 [ 61.141777][ T6925] ext4_map_blocks+0x4cb/0x1640 [ 61.146672][ T6925] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 61.151873][ T6925] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 61.157429][ T6925] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 61.163422][ T6925] ? prandom_u32_state+0xe/0x170 [ 61.168368][ T6925] ? __brelse+0x84/0xa0 [ 61.172526][ T6925] ? __ext4_new_inode+0x144/0x57c0 [ 61.177771][ T6925] ext4_getblk+0xad/0x520 [ 61.182242][ T6925] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 61.188042][ T6925] ? ext4_free_inode+0x17e0/0x17e0 [ 61.193149][ T6925] ext4_bread+0x7c/0x380 [ 61.197381][ T6925] ? ext4_getblk+0x520/0x520 [ 61.202066][ T6925] ? dqget+0xff0/0xff0 [ 61.206221][ T6925] ext4_append+0x153/0x360 [ 61.210647][ T6925] ext4_mkdir+0x5e0/0xdf0 [ 61.214971][ T6925] ? ext4_rmdir+0xde0/0xde0 [ 61.219470][ T6925] ? security_inode_permission+0xc4/0xf0 [ 61.225096][ T6925] vfs_mkdir+0x419/0x690 [ 61.229441][ T6925] do_mkdirat+0x21e/0x280 [ 61.233772][ T6925] ? __ia32_sys_mknod+0xb0/0xb0 [ 61.238611][ T6925] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.244587][ T6925] ? do_syscall_64+0x21/0x7d0 [ 61.249257][ T6925] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.255231][ T6925] do_syscall_64+0xf6/0x7d0 [ 61.259840][ T6925] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.266500][ T6925] RIP: 0033:0x45bee7 [ 61.270375][ T6925] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.289981][ T6925] RSP: 002b:00007ffc7932f4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 61.298396][ T6925] RAX: ffffffffffffffda RBX: 000000000078c988 RCX: 000000000045bee7 [ 61.307253][ T6925] RDX: 00007ffc7932f4f3 RSI: 00000000000001ff RDI: 00007ffc7932f4f0 [ 61.315229][ T6925] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000003 [ 61.323199][ T6925] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000004185d0 [ 61.331683][ T6925] R13: 00007ffc7932f4e0 R14: 0000000000000000 R15: 00007ffc7932f4f0 [ 61.395282][ T6925] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6925 [ 61.404791][ T6925] caller is ext4_mb_new_blocks+0xa77/0x3b30 [ 61.410821][ T6925] CPU: 0 PID: 6925 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 61.419246][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.429305][ T6925] Call Trace: [ 61.432749][ T6925] dump_stack+0x188/0x20d [ 61.437260][ T6925] debug_smp_processor_id.cold+0x88/0x9b [ 61.443115][ T6925] ext4_mb_new_blocks+0xa77/0x3b30 [ 61.448362][ T6925] ? ext4_ext_search_right+0x2ca/0xb20 [ 61.453986][ T6925] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 61.459904][ T6925] ext4_ext_map_blocks+0x2044/0x3410 [ 61.465182][ T6925] ? ext4_ext_release+0x10/0x10 [ 61.470026][ T6925] ? __down_timeout+0x2d0/0x2d0 [ 61.474856][ T6925] ? ext4_es_lookup_extent+0x41d/0xd30 [ 61.480321][ T6925] ext4_map_blocks+0x4cb/0x1640 [ 61.485172][ T6925] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 61.490351][ T6925] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 61.496153][ T6925] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 61.502131][ T6925] ? prandom_u32_state+0xe/0x170 [ 61.507065][ T6925] ? __brelse+0x84/0xa0 [ 61.511202][ T6925] ? __ext4_new_inode+0x144/0x57c0 [ 61.516328][ T6925] ext4_getblk+0xad/0x520 [ 61.520744][ T6925] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 61.526458][ T6925] ? ext4_free_inode+0x17e0/0x17e0 [ 61.531549][ T6925] ext4_bread+0x7c/0x380 [ 61.535784][ T6925] ? ext4_getblk+0x520/0x520 [ 61.540351][ T6925] ? dqget+0xff0/0xff0 [ 61.544403][ T6925] ext4_append+0x153/0x360 [ 61.548803][ T6925] ext4_mkdir+0x5e0/0xdf0 [ 61.553134][ T6925] ? ext4_rmdir+0xde0/0xde0 [ 61.557619][ T6925] ? security_inode_permission+0xc4/0xf0 [ 61.563254][ T6925] vfs_mkdir+0x419/0x690 [ 61.567484][ T6925] do_mkdirat+0x21e/0x280 [ 61.571794][ T6925] ? __ia32_sys_mknod+0xb0/0xb0 [ 61.576633][ T6925] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.582594][ T6925] ? do_syscall_64+0x21/0x7d0 [ 61.587263][ T6925] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.593225][ T6925] do_syscall_64+0xf6/0x7d0 [ 61.597708][ T6925] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.603577][ T6925] RIP: 0033:0x45bee7 [ 61.607446][ T6925] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.627052][ T6925] RSP: 002b:00007ffc7932f4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 61.635463][ T6925] RAX: ffffffffffffffda RBX: 000000000000efc4 RCX: 000000000045bee7 2020/06/12 21:21:54 building call list... [ 61.644281][ T6925] RDX: 00007ffc7932f4f3 RSI: 00000000000001ff RDI: 00007ffc7932f4f0 [ 61.652332][ T6925] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 [ 61.660280][ T6925] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000003 [ 61.668246][ T6925] R13: 00007ffc7932f4e0 R14: 000000000000efb3 R15: 00007ffc7932f4f0 [ 61.958253][ T4339] tipc: TX() has been purged, node left! [ 62.491330][ T4339] ================================================================== [ 62.499559][ T4339] BUG: KASAN: use-after-free in afs_wake_up_async_call+0x7a7/0x880 [ 62.507440][ T4339] Write of size 1 at addr ffff8880968031e4 by task kworker/u4:6/4339 [ 62.515485][ T4339] [ 62.517815][ T4339] CPU: 1 PID: 4339 Comm: kworker/u4:6 Not tainted 5.7.0-syzkaller #0 [ 62.525870][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.535930][ T4339] Workqueue: netns cleanup_net [ 62.540775][ T4339] Call Trace: [ 62.544077][ T4339] dump_stack+0x188/0x20d [ 62.548409][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 62.553951][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 62.559581][ T4339] ? afs_put_call+0xa70/0xa70 [ 62.564258][ T4339] print_address_description.constprop.0.cold+0xd3/0x413 [ 62.571371][ T4339] ? vprintk_func+0x97/0x1a6 [ 62.575962][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 62.581502][ T4339] kasan_report.cold+0x1f/0x37 [ 62.586268][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 62.591813][ T4339] afs_wake_up_async_call+0x7a7/0x880 [ 62.597185][ T4339] ? do_raw_spin_lock+0x129/0x2e0 [ 62.602347][ T4339] ? afs_close_socket+0x320/0x320 [ 62.607366][ T4339] ? rwlock_bug.part.0+0x90/0x90 [ 62.612301][ T4339] ? rcu_read_lock_held+0x9c/0xb0 [ 62.617407][ T4339] ? rcu_read_lock_held_common+0xa0/0xa0 [ 62.623068][ T4339] ? afs_close_socket+0x320/0x320 [ 62.628100][ T4339] ? afs_put_call+0xa70/0xa70 [ 62.632773][ T4339] rxrpc_notify_socket+0x1e5/0x5e0 [ 62.637888][ T4339] ? afs_put_call+0xa70/0xa70 [ 62.642568][ T4339] __rxrpc_set_call_completion.part.0+0x172/0x420 [ 62.649446][ T4339] rxrpc_call_completed+0xca/0xf0 [ 62.654498][ T4339] rxrpc_discard_prealloc+0x786/0xac0 [ 62.659897][ T4339] ? lock_sock_nested+0x94/0x110 [ 62.665032][ T4339] rxrpc_listen+0x147/0x360 [ 62.669565][ T4339] afs_close_socket+0x95/0x320 [ 62.674329][ T4339] ? afs_purge_servers+0x16d/0x300 [ 62.679479][ T4339] ? afs_rx_discard_new_call+0x50/0x50 [ 62.684935][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 62.690396][ T4339] ? init_wait_var_entry+0x200/0x200 [ 62.695685][ T4339] ? rcu_read_lock_held_common+0xa0/0xa0 [ 62.701333][ T4339] afs_net_exit+0x1bc/0x310 [ 62.705841][ T4339] ? afs_net_init+0xe30/0xe30 [ 62.710516][ T4339] ops_exit_list.isra.0+0xa8/0x150 [ 62.715632][ T4339] cleanup_net+0x511/0xa50 [ 62.720051][ T4339] ? unregister_pernet_device+0x70/0x70 [ 62.725596][ T4339] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 62.731595][ T4339] process_one_work+0x965/0x16a0 [ 62.736546][ T4339] ? lock_release+0x800/0x800 [ 62.741226][ T4339] ? pwq_dec_nr_in_flight+0x310/0x310 [ 62.746603][ T4339] ? rwlock_bug.part.0+0x90/0x90 [ 62.751918][ T4339] worker_thread+0x96/0xe10 [ 62.756436][ T4339] ? process_one_work+0x16a0/0x16a0 [ 62.761643][ T4339] kthread+0x388/0x470 [ 62.765710][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 62.771452][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 62.777176][ T4339] ret_from_fork+0x24/0x30 [ 62.781599][ T4339] [ 62.783920][ T4339] Allocated by task 6925: [ 62.788250][ T4339] save_stack+0x1b/0x40 [ 62.792426][ T4339] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 62.798056][ T4339] kmem_cache_alloc_trace+0x153/0x7d0 [ 62.803425][ T4339] afs_alloc_call+0x55/0x640 [ 62.808011][ T4339] afs_charge_preallocation+0xe9/0x2d0 [ 62.813462][ T4339] afs_open_socket+0x292/0x360 [ 62.818310][ T4339] afs_net_init+0xa6c/0xe30 [ 62.822807][ T4339] ops_init+0xaf/0x420 [ 62.826874][ T4339] setup_net+0x2de/0x860 [ 62.831117][ T4339] copy_net_ns+0x293/0x590 [ 62.835530][ T4339] create_new_namespaces+0x3fb/0xb30 [ 62.840811][ T4339] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 62.846449][ T4339] ksys_unshare+0x43d/0x8e0 [ 62.850953][ T4339] __x64_sys_unshare+0x2d/0x40 [ 62.855720][ T4339] do_syscall_64+0xf6/0x7d0 [ 62.860225][ T4339] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 62.866103][ T4339] [ 62.868425][ T4339] Freed by task 4339: [ 62.872430][ T4339] save_stack+0x1b/0x40 [ 62.876592][ T4339] __kasan_slab_free+0xf7/0x140 [ 62.881458][ T4339] kfree+0x109/0x2b0 [ 62.885352][ T4339] afs_put_call+0x59b/0xa70 [ 62.889855][ T4339] rxrpc_discard_prealloc+0x769/0xac0 [ 62.895222][ T4339] rxrpc_listen+0x147/0x360 [ 62.899722][ T4339] afs_close_socket+0x95/0x320 [ 62.904482][ T4339] afs_net_exit+0x1bc/0x310 [ 62.909008][ T4339] ops_exit_list.isra.0+0xa8/0x150 [ 62.914113][ T4339] cleanup_net+0x511/0xa50 [ 62.918526][ T4339] process_one_work+0x965/0x16a0 [ 62.923491][ T4339] worker_thread+0x96/0xe10 [ 62.928515][ T4339] kthread+0x388/0x470 [ 62.932583][ T4339] ret_from_fork+0x24/0x30 [ 62.936985][ T4339] [ 62.939319][ T4339] The buggy address belongs to the object at ffff888096803000 [ 62.939319][ T4339] which belongs to the cache kmalloc-1k of size 1024 [ 62.953372][ T4339] The buggy address is located 484 bytes inside of [ 62.953372][ T4339] 1024-byte region [ffff888096803000, ffff888096803400) [ 62.966720][ T4339] The buggy address belongs to the page: [ 62.972361][ T4339] page:ffffea00025a00c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 62.981497][ T4339] flags: 0xfffe0000000200(slab) [ 62.986347][ T4339] raw: 00fffe0000000200 ffffea0002766748 ffffea0002601948 ffff8880aa000c40 [ 62.994936][ T4339] raw: 0000000000000000 ffff888096803000 0000000100000002 0000000000000000 [ 63.003510][ T4339] page dumped because: kasan: bad access detected [ 63.009910][ T4339] [ 63.012232][ T4339] Memory state around the buggy address: [ 63.017854][ T4339] ffff888096803080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.025914][ T4339] ffff888096803100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.033972][ T4339] >ffff888096803180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.042029][ T4339] ^ [ 63.049248][ T4339] ffff888096803200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.057310][ T4339] ffff888096803280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.065367][ T4339] ================================================================== [ 63.073530][ T4339] Disabling lock debugging due to kernel taint [ 63.079723][ T4339] Kernel panic - not syncing: panic_on_warn set ... [ 63.086504][ T4339] CPU: 1 PID: 4339 Comm: kworker/u4:6 Tainted: G B 5.7.0-syzkaller #0 [ 63.095965][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.106045][ T4339] Workqueue: netns cleanup_net [ 63.110797][ T4339] Call Trace: [ 63.114082][ T4339] dump_stack+0x188/0x20d [ 63.119449][ T4339] ? afs_wake_up_async_call+0x6b0/0x880 [ 63.125086][ T4339] ? afs_put_call+0xa70/0xa70 [ 63.129751][ T4339] panic+0x2e3/0x75c [ 63.133641][ T4339] ? add_taint.cold+0x16/0x16 [ 63.138305][ T4339] ? retint_kernel+0x2b/0x2b [ 63.142897][ T4339] ? trace_hardirqs_on+0x55/0x230 [ 63.147915][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 63.153450][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 63.159011][ T4339] ? afs_put_call+0xa70/0xa70 [ 63.163686][ T4339] end_report+0x4d/0x53 [ 63.167865][ T4339] kasan_report.cold+0xd/0x37 [ 63.172559][ T4339] ? afs_wake_up_async_call+0x7a7/0x880 [ 63.178095][ T4339] afs_wake_up_async_call+0x7a7/0x880 [ 63.183461][ T4339] ? do_raw_spin_lock+0x129/0x2e0 [ 63.188475][ T4339] ? afs_close_socket+0x320/0x320 [ 63.193513][ T4339] ? rwlock_bug.part.0+0x90/0x90 [ 63.198457][ T4339] ? rcu_read_lock_held+0x9c/0xb0 [ 63.203489][ T4339] ? rcu_read_lock_held_common+0xa0/0xa0 [ 63.209245][ T4339] ? afs_close_socket+0x320/0x320 [ 63.214274][ T4339] ? afs_put_call+0xa70/0xa70 [ 63.218949][ T4339] rxrpc_notify_socket+0x1e5/0x5e0 [ 63.224067][ T4339] ? afs_put_call+0xa70/0xa70 [ 63.231960][ T4339] __rxrpc_set_call_completion.part.0+0x172/0x420 [ 63.238375][ T4339] rxrpc_call_completed+0xca/0xf0 [ 63.243408][ T4339] rxrpc_discard_prealloc+0x786/0xac0 [ 63.248783][ T4339] ? lock_sock_nested+0x94/0x110 [ 63.253820][ T4339] rxrpc_listen+0x147/0x360 [ 63.258338][ T4339] afs_close_socket+0x95/0x320 [ 63.263251][ T4339] ? afs_purge_servers+0x16d/0x300 [ 63.268358][ T4339] ? afs_rx_discard_new_call+0x50/0x50 [ 63.273922][ T4339] ? debug_smp_processor_id+0x2f/0x185 [ 63.279414][ T4339] ? init_wait_var_entry+0x200/0x200 [ 63.284699][ T4339] ? rcu_read_lock_held_common+0xa0/0xa0 [ 63.290333][ T4339] afs_net_exit+0x1bc/0x310 executing program [ 63.294835][ T4339] ? afs_net_init+0xe30/0xe30 [ 63.299508][ T4339] ops_exit_list.isra.0+0xa8/0x150 [ 63.304644][ T4339] cleanup_net+0x511/0xa50 [ 63.309058][ T4339] ? unregister_pernet_device+0x70/0x70 [ 63.314617][ T4339] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 63.321015][ T4339] process_one_work+0x965/0x16a0 [ 63.325939][ T4339] ? lock_release+0x800/0x800 [ 63.330702][ T4339] ? pwq_dec_nr_in_flight+0x310/0x310 [ 63.336067][ T4339] ? rwlock_bug.part.0+0x90/0x90 [ 63.340985][ T4339] worker_thread+0x96/0xe10 [ 63.345465][ T4339] ? process_one_work+0x16a0/0x16a0 [ 63.350639][ T4339] kthread+0x388/0x470 [ 63.354705][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 63.360412][ T4339] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 63.366106][ T4339] ret_from_fork+0x24/0x30 [ 63.371991][ T4339] Kernel Offset: disabled [ 63.376318][ T4339] Rebooting in 86400 seconds..