[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about Sys[ 69.527698][ T6742] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-rfkill/6742 tem Runlevel Cha[ 69.537920][ T6742] caller is ext4_mb_new_blocks+0xa4d/0x3b70 nges. [ 69.545238][ T6742] CPU: 0 PID: 6742 Comm: systemd-rfkill Not tainted 5.8.0-rc1-syzkaller #0 [ 69.554441][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.564497][ T6742] Call Trace: [ 69.567811][ T6742] dump_stack+0x18f/0x20d [ 69.572159][ T6742] check_preemption_disabled+0x20d/0x220 [ 69.577807][ T6742] ext4_mb_new_blocks+0xa4d/0x3b70 [ 69.582949][ T6742] ? ext4_ext_search_right+0x2ca/0xb20 [ 69.588389][ T6742] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 69.594092][ T6742] ext4_ext_map_blocks+0x201b/0x33e0 [ 69.599452][ T6742] ? ext4_ext_release+0x10/0x10 [ 69.604340][ T6742] ? down_write_killable+0x170/0x170 [ 69.609612][ T6742] ? ext4_es_lookup_extent+0x41d/0xd10 [ 69.615153][ T6742] ext4_map_blocks+0x4cb/0x1640 [ 69.620006][ T6742] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 69.625270][ T6742] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 69.630801][ T6742] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 69.636761][ T6742] ? prandom_u32_state+0xe/0x170 [ 69.642039][ T6742] ? __brelse+0x84/0xa0 [ 69.646174][ T6742] ? __ext4_new_inode+0x144/0x55e0 [ 69.651267][ T6742] ext4_getblk+0xad/0x520 [ 69.655579][ T6742] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 69.661294][ T6742] ? ext4_free_inode+0x1700/0x1700 [ 69.666388][ T6742] ext4_bread+0x7c/0x380 [ 69.670609][ T6742] ? ext4_getblk+0x520/0x520 [ 69.675176][ T6742] ? dquot_get_next_dqblk+0x180/0x180 [ 69.680550][ T6742] ext4_append+0x153/0x360 [ 69.684948][ T6742] ext4_mkdir+0x5e0/0xdf0 [ 69.689484][ T6742] ? ext4_rmdir+0xde0/0xde0 [ 69.693986][ T6742] vfs_mkdir+0x419/0x690 [ 69.698223][ T6742] do_mkdirat+0x21e/0x280 [ 69.702533][ T6742] ? __ia32_sys_mknod+0xb0/0xb0 [ 69.707365][ T6742] ? do_syscall_64+0x1c/0xe0 [ 69.711951][ T6742] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 69.717910][ T6742] do_syscall_64+0x60/0xe0 [ 69.722309][ T6742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.728626][ T6742] RIP: 0033:0x7effafe76687 [ 69.733012][ T6742] Code: Bad RIP value. [ 69.737055][ T6742] RSP: 002b:00007fff53744328 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 69.745528][ T6742] RAX: ffffffffffffffda RBX: 00005582b3328985 RCX: 00007effafe76687 [ 69.753492][ T6742] RDX: 00007fff537441f0 RSI: 00000000000001ed RDI: 00005582b3328985 [ 69.761447][ T6742] RBP: 00007effafe76680 R08: 0000000000000100 R09: 0000000000000000 [ 69.769413][ T6742] R10: 00005582b3328980 R11: 0000000000000246 R12: 00000000000001ed [ 69.777449][ T6742] R13: 00007fff537444b0 R14: 0000000000000000 R15: 0000000000000000 [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. 2020/06/15 16:58:58 fuzzer started 2020/06/15 16:58:59 connecting to host at 10.128.0.26:33135 2020/06/15 16:58:59 checking machine... 2020/06/15 16:58:59 checking revisions... 2020/06/15 16:58:59 testing simple program... syzkaller login: [ 72.755942][ T6808] BUG: using smp_processor_id() in preemptible [00000000] code: syz-fuzzer/6808 [ 72.765162][ T6808] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 72.771063][ T6808] CPU: 1 PID: 6808 Comm: syz-fuzzer Not tainted 5.8.0-rc1-syzkaller #0 [ 72.779277][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.789325][ T6808] Call Trace: [ 72.792618][ T6808] dump_stack+0x18f/0x20d [ 72.796951][ T6808] check_preemption_disabled+0x20d/0x220 [ 72.802564][ T6808] ext4_mb_new_blocks+0xa4d/0x3b70 [ 72.807664][ T6808] ? ext4_ext_search_right+0x2ca/0xb20 [ 72.813101][ T6808] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 72.818803][ T6808] ext4_ext_map_blocks+0x201b/0x33e0 [ 72.824100][ T6808] ? ext4_ext_release+0x10/0x10 [ 72.828946][ T6808] ? down_write_killable+0x170/0x170 [ 72.834212][ T6808] ? ext4_es_lookup_extent+0x41d/0xd10 [ 72.839662][ T6808] ext4_map_blocks+0x4cb/0x1640 [ 72.844525][ T6808] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 72.849716][ T6808] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 72.855261][ T6808] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 72.861484][ T6808] ? prandom_u32_state+0xe/0x170 [ 72.866419][ T6808] ? __brelse+0x84/0xa0 [ 72.870568][ T6808] ? __ext4_new_inode+0x144/0x55e0 [ 72.875660][ T6808] ext4_getblk+0xad/0x520 [ 72.879969][ T6808] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 72.885674][ T6808] ? ext4_free_inode+0x1700/0x1700 [ 72.890782][ T6808] ext4_bread+0x7c/0x380 [ 72.895315][ T6808] ? ext4_getblk+0x520/0x520 [ 72.899983][ T6808] ? dquot_get_next_dqblk+0x180/0x180 [ 72.905392][ T6808] ext4_append+0x153/0x360 [ 72.910240][ T6808] ext4_mkdir+0x5e0/0xdf0 [ 72.914574][ T6808] ? ext4_rmdir+0xde0/0xde0 [ 72.919062][ T6808] vfs_mkdir+0x419/0x690 [ 72.923291][ T6808] do_mkdirat+0x21e/0x280 [ 72.927605][ T6808] ? __ia32_sys_mknod+0xb0/0xb0 [ 72.932563][ T6808] ? do_syscall_64+0x1c/0xe0 [ 72.937175][ T6808] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 72.943166][ T6808] do_syscall_64+0x60/0xe0 [ 72.947587][ T6808] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.953467][ T6808] RIP: 0033:0x4b02a0 [ 72.957421][ T6808] Code: Bad RIP value. [ 72.961492][ T6808] RSP: 002b:000000c0000df4b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000102 [ 72.969890][ T6808] RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b02a0 [ 72.977856][ T6808] RDX: 00000000000001c0 RSI: 000000c00009ee80 RDI: ffffffffffffff9c [ 72.986281][ T6808] RBP: 000000c0000df510 R08: 0000000000000000 R09: 0000000000000000 [ 72.994932][ T6808] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 73.002971][ T6808] R13: 0000000000000075 R14: 0000000000000074 R15: 0000000000000100 [ 73.030037][ T29] audit: type=1400 audit(1592240339.689:8): avc: denied { execmem } for pid=6817 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.030945][ T6817] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6817 [ 73.060241][ T6817] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.066218][ T6817] CPU: 0 PID: 6817 Comm: syz-executor.0 Not tainted 5.8.0-rc1-syzkaller #0 [ 73.074909][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.085349][ T6817] Call Trace: [ 73.088673][ T6817] dump_stack+0x18f/0x20d [ 73.092991][ T6817] check_preemption_disabled+0x20d/0x220 [ 73.098609][ T6817] ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.104159][ T6817] ? ext4_ext_search_right+0x2ca/0xb20 [ 73.109705][ T6817] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 73.115434][ T6817] ext4_ext_map_blocks+0x201b/0x33e0 [ 73.120799][ T6817] ? ext4_ext_release+0x10/0x10 [ 73.125837][ T6817] ? down_write_killable+0x170/0x170 [ 73.131101][ T6817] ? ext4_es_lookup_extent+0x41d/0xd10 [ 73.136545][ T6817] ext4_map_blocks+0x4cb/0x1640 [ 73.141384][ T6817] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 73.146564][ T6817] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 73.152125][ T6817] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 73.158097][ T6817] ? prandom_u32_state+0xe/0x170 [ 73.163018][ T6817] ? __brelse+0x84/0xa0 [ 73.167170][ T6817] ? __ext4_new_inode+0x144/0x55e0 [ 73.172267][ T6817] ext4_getblk+0xad/0x520 [ 73.176579][ T6817] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 73.183247][ T6817] ? ext4_free_inode+0x1700/0x1700 [ 73.188353][ T6817] ext4_bread+0x7c/0x380 [ 73.192587][ T6817] ? ext4_getblk+0x520/0x520 [ 73.197180][ T6817] ? dquot_get_next_dqblk+0x180/0x180 [ 73.202532][ T6817] ? security_transition_sid+0x123/0x190 [ 73.208145][ T6817] ? security_transition_sid+0xed/0x190 [ 73.213672][ T6817] ext4_append+0x153/0x360 [ 73.218073][ T6817] ext4_mkdir+0x5e0/0xdf0 [ 73.222399][ T6817] ? ext4_rmdir+0xde0/0xde0 [ 73.226892][ T6817] vfs_mkdir+0x419/0x690 [ 73.231117][ T6817] do_mkdirat+0x21e/0x280 [ 73.235454][ T6817] ? __ia32_sys_mknod+0xb0/0xb0 [ 73.240286][ T6817] ? do_syscall_64+0x1c/0xe0 [ 73.244880][ T6817] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 73.250857][ T6817] do_syscall_64+0x60/0xe0 [ 73.255258][ T6817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.261143][ T6817] RIP: 0033:0x45bed7 [ 73.265029][ T6817] Code: Bad RIP value. [ 73.269079][ T6817] RSP: 002b:00007fffe94a7568 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 73.277467][ T6817] RAX: ffffffffffffffda RBX: 000000000003a2f8 RCX: 000000000045bed7 [ 73.286075][ T6817] RDX: 0000000000000003 RSI: 00000000000001c0 RDI: 00007fffe94a7740 [ 73.294045][ T6817] RBP: 0000000000000001 R08: 000000000000f8c0 R09: 0000000000003cc0 [ 73.302001][ T6817] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000000c2 [ 73.309980][ T6817] R13: 00007fffe94a7740 R14: 8421084210842109 R15: 00007fffe94a774c [ 73.398235][ T6818] IPVS: ftp: loaded support on port[0] = 21 [ 73.437146][ T6818] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6818 [ 73.446917][ T6818] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.454070][ T6818] CPU: 1 PID: 6818 Comm: syz-executor.0 Not tainted 5.8.0-rc1-syzkaller #0 [ 73.462648][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.473291][ T6818] Call Trace: [ 73.476570][ T6818] dump_stack+0x18f/0x20d [ 73.480949][ T6818] check_preemption_disabled+0x20d/0x220 [ 73.486790][ T6818] ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.491937][ T6818] ? ext4_ext_search_right+0x2ca/0xb20 [ 73.497402][ T6818] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 73.503465][ T6818] ext4_ext_map_blocks+0x201b/0x33e0 [ 73.508740][ T6818] ? ext4_ext_release+0x10/0x10 [ 73.513607][ T6818] ? down_write_killable+0x170/0x170 [ 73.518870][ T6818] ? ext4_es_lookup_extent+0x41d/0xd10 [ 73.524600][ T6818] ext4_map_blocks+0x4cb/0x1640 [ 73.529448][ T6818] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 73.534646][ T6818] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 73.540170][ T6818] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 73.546128][ T6818] ? prandom_u32_state+0xe/0x170 [ 73.551045][ T6818] ? __brelse+0x84/0xa0 [ 73.555441][ T6818] ? __ext4_new_inode+0x144/0x55e0 [ 73.560548][ T6818] ext4_getblk+0xad/0x520 [ 73.564884][ T6818] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 73.570710][ T6818] ? ext4_free_inode+0x1700/0x1700 [ 73.576089][ T6818] ext4_bread+0x7c/0x380 [ 73.580584][ T6818] ? ext4_getblk+0x520/0x520 [ 73.585194][ T6818] ? dquot_get_next_dqblk+0x180/0x180 [ 73.590565][ T6818] ? security_transition_sid+0x123/0x190 [ 73.596178][ T6818] ? security_transition_sid+0xed/0x190 [ 73.601721][ T6818] ext4_append+0x153/0x360 [ 73.606499][ T6818] ext4_mkdir+0x5e0/0xdf0 [ 73.610825][ T6818] ? ext4_rmdir+0xde0/0xde0 [ 73.615317][ T6818] vfs_mkdir+0x419/0x690 [ 73.619540][ T6818] do_mkdirat+0x21e/0x280 [ 73.623854][ T6818] ? __ia32_sys_mknod+0xb0/0xb0 [ 73.628685][ T6818] ? do_syscall_64+0x1c/0xe0 [ 73.633256][ T6818] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 73.639215][ T6818] do_syscall_64+0x60/0xe0 [ 73.643639][ T6818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.649517][ T6818] RIP: 0033:0x45bed7 [ 73.653388][ T6818] Code: Bad RIP value. [ 73.657447][ T6818] RSP: 002b:00007fffe94a7458 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 73.665841][ T6818] RAX: ffffffffffffffda RBX: 000000000078c988 RCX: 000000000045bed7 [ 73.673792][ T6818] RDX: 00007fffe94a74a3 RSI: 00000000000001ff RDI: 00007fffe94a74a0 [ 73.681742][ T6818] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000003 [ 73.689691][ T6818] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000004185c0 [ 73.697899][ T6818] R13: 00007fffe94a7490 R14: 0000000000000000 R15: 00007fffe94a74a0 [ 73.755139][ T6818] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6818 [ 73.764668][ T6818] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.770573][ T6818] CPU: 0 PID: 6818 Comm: syz-executor.0 Not tainted 5.8.0-rc1-syzkaller #0 [ 73.779162][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.789222][ T6818] Call Trace: [ 73.792527][ T6818] dump_stack+0x18f/0x20d [ 73.796875][ T6818] check_preemption_disabled+0x20d/0x220 [ 73.802551][ T6818] ext4_mb_new_blocks+0xa4d/0x3b70 [ 73.807689][ T6818] ? ext4_ext_search_right+0x2ca/0xb20 [ 73.813163][ T6818] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 73.819111][ T6818] ext4_ext_map_blocks+0x201b/0x33e0 [ 73.824512][ T6818] ? ext4_ext_release+0x10/0x10 [ 73.829365][ T6818] ? down_write_killable+0x170/0x170 [ 73.834635][ T6818] ? ext4_es_lookup_extent+0x41d/0xd10 [ 73.840187][ T6818] ext4_map_blocks+0x4cb/0x1640 [ 73.845027][ T6818] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 73.850292][ T6818] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 73.856169][ T6818] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 73.862126][ T6818] ? prandom_u32_state+0xe/0x170 [ 73.867042][ T6818] ? __brelse+0x84/0xa0 [ 73.871192][ T6818] ? __ext4_new_inode+0x144/0x55e0 [ 73.876285][ T6818] ext4_getblk+0xad/0x520 [ 73.880613][ T6818] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 73.886336][ T6818] ? ext4_free_inode+0x1700/0x1700 [ 73.891519][ T6818] ext4_bread+0x7c/0x380 [ 73.895749][ T6818] ? ext4_getblk+0x520/0x520 [ 73.900335][ T6818] ? dquot_get_next_dqblk+0x180/0x180 [ 73.905707][ T6818] ? security_transition_sid+0x123/0x190 [ 73.911332][ T6818] ? security_transition_sid+0xed/0x190 [ 73.916877][ T6818] ext4_append+0x153/0x360 [ 73.921399][ T6818] ext4_mkdir+0x5e0/0xdf0 [ 73.925825][ T6818] ? ext4_rmdir+0xde0/0xde0 [ 73.930334][ T6818] vfs_mkdir+0x419/0x690 [ 73.934588][ T6818] do_mkdirat+0x21e/0x280 [ 73.938913][ T6818] ? __ia32_sys_mknod+0xb0/0xb0 [ 73.943746][ T6818] ? do_syscall_64+0x1c/0xe0 [ 73.948347][ T6818] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 73.954310][ T6818] do_syscall_64+0x60/0xe0 [ 73.958707][ T6818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.964582][ T6818] RIP: 0033:0x45bed7 [ 73.968469][ T6818] Code: Bad RIP value. [ 73.972512][ T6818] RSP: 002b:00007fffe94a7458 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 73.980918][ T6818] RAX: ffffffffffffffda RBX: 0000000000012006 RCX: 000000000045bed7 [ 73.988890][ T6818] RDX: 00007fffe94a74a3 RSI: 00000000000001ff RDI: 00007fffe94a74a0 [ 73.996844][ T6818] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 2020/06/15 16:59:00 building call list... [ 74.004806][ T6818] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000003 [ 74.012766][ T6818] R13: 00007fffe94a7490 R14: 0000000000011ff1 R15: 00007fffe94a74a0 [ 74.281925][ T313] tipc: TX() has been purged, node left! [ 74.473906][ T1157] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1157 [ 74.483994][ T1157] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 74.489892][ T1157] CPU: 1 PID: 1157 Comm: khugepaged Not tainted 5.8.0-rc1-syzkaller #0 [ 74.498125][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.508188][ T1157] Call Trace: [ 74.511496][ T1157] dump_stack+0x18f/0x20d [ 74.515834][ T1157] check_preemption_disabled+0x20d/0x220 [ 74.521474][ T1157] ext4_mb_new_blocks+0xa4d/0x3b70 [ 74.526584][ T1157] ? ext4_find_extent+0x81a/0xad0 [ 74.531616][ T1157] ? ext4_ext_search_right+0x2ca/0xb20 [ 74.537074][ T1157] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 74.542802][ T1157] ext4_ext_map_blocks+0x201b/0x33e0 [ 74.548096][ T1157] ? ext4_ext_release+0x10/0x10 [ 74.552966][ T1157] ? down_write_killable+0x170/0x170 [ 74.558255][ T1157] ? ext4_es_lookup_extent+0x41d/0xd10 [ 74.563719][ T1157] ext4_map_blocks+0x4cb/0x1640 [ 74.568578][ T1157] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 74.573785][ T1157] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 74.579418][ T1157] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 74.585406][ T1157] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 74.590870][ T1157] ext4_writepages+0x1a7b/0x33c0 [ 74.595836][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 74.601504][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 74.607165][ T1157] ? do_writepages+0xfa/0x2a0 [ 74.611868][ T1157] do_writepages+0xfa/0x2a0 [ 74.616388][ T1157] ? page_writeback_cpu_online+0x10/0x10 [ 74.622055][ T1157] ? do_raw_spin_lock+0x120/0x2d0 [ 74.627114][ T1157] ? do_raw_spin_unlock+0x171/0x260 [ 74.632324][ T1157] ? _raw_spin_unlock+0x24/0x40 [ 74.637191][ T1157] __filemap_fdatawrite_range+0x2aa/0x390 [ 74.643045][ T1157] ? collapse_file+0x35a2/0x4330 [ 74.648002][ T1157] ? delete_from_page_cache_batch+0xeb0/0xeb0 [ 74.654173][ T1157] ? _raw_spin_unlock_irq+0x1f/0x80 [ 74.659418][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 74.665438][ T1157] collapse_file+0x35ac/0x4330 [ 74.670247][ T1157] ? collapse_huge_page+0x4350/0x4350 [ 74.675633][ T1157] ? khugepaged+0x2506/0x3fc0 [ 74.680339][ T1157] ? xas_find+0x31a/0x880 [ 74.684677][ T1157] ? check_preemption_disabled+0x38/0x220 [ 74.690426][ T1157] khugepaged+0x3041/0x3fc0 [ 74.694967][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 74.700620][ T1157] ? lock_downgrade+0x840/0x840 [ 74.705553][ T1157] ? finish_wait+0x260/0x260 [ 74.710170][ T1157] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 74.716025][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 74.722040][ T1157] ? __kthread_parkme+0x13f/0x1e0 [ 74.727085][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 74.732724][ T1157] kthread+0x3b5/0x4a0 [ 74.736791][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 74.743462][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 74.749193][ T1157] ret_from_fork+0x1f/0x30 [ 75.080740][ T1157] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1157 [ 75.090099][ T1157] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 75.096181][ T1157] CPU: 1 PID: 1157 Comm: khugepaged Not tainted 5.8.0-rc1-syzkaller #0 [ 75.104442][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.114548][ T1157] Call Trace: [ 75.117956][ T1157] dump_stack+0x18f/0x20d [ 75.122309][ T1157] check_preemption_disabled+0x20d/0x220 [ 75.127958][ T1157] ext4_mb_new_blocks+0xa4d/0x3b70 [ 75.133437][ T1157] ? ext4_ext_search_right+0x2ca/0xb20 [ 75.138940][ T1157] ? ext4_ext_next_allocated_block+0x221/0x2d0 [ 75.145099][ T1157] ext4_ext_map_blocks+0x201b/0x33e0 [ 75.150411][ T1157] ? ext4_ext_release+0x10/0x10 [ 75.155320][ T1157] ? down_write_killable+0x170/0x170 [ 75.160734][ T1157] ? ext4_es_lookup_extent+0x41d/0xd10 [ 75.166232][ T1157] ext4_map_blocks+0x4cb/0x1640 [ 75.171127][ T1157] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 75.176679][ T1157] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 75.182252][ T1157] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 75.188265][ T1157] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 75.193737][ T1157] ext4_writepages+0x1a7b/0x33c0 [ 75.198707][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 75.204407][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 75.210050][ T1157] ? do_writepages+0xfa/0x2a0 [ 75.214741][ T1157] do_writepages+0xfa/0x2a0 [ 75.219257][ T1157] ? page_writeback_cpu_online+0x10/0x10 [ 75.224903][ T1157] ? do_raw_spin_lock+0x120/0x2d0 [ 75.230025][ T1157] ? do_raw_spin_unlock+0x171/0x260 [ 75.235233][ T1157] ? _raw_spin_unlock+0x24/0x40 [ 75.240088][ T1157] __filemap_fdatawrite_range+0x2aa/0x390 [ 75.246429][ T1157] ? collapse_file+0x35a2/0x4330 [ 75.251399][ T1157] ? delete_from_page_cache_batch+0xeb0/0xeb0 [ 75.257504][ T1157] ? _raw_spin_unlock_irq+0x1f/0x80 [ 75.262819][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 75.269438][ T1157] collapse_file+0x35ac/0x4330 [ 75.274265][ T1157] ? collapse_huge_page+0x4350/0x4350 [ 75.279646][ T1157] ? khugepaged+0x2506/0x3fc0 [ 75.284341][ T1157] ? xas_find+0x31a/0x880 [ 75.288694][ T1157] ? check_preemption_disabled+0x38/0x220 [ 75.294716][ T1157] khugepaged+0x3041/0x3fc0 [ 75.299271][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 75.305013][ T1157] ? lock_downgrade+0x840/0x840 [ 75.309871][ T1157] ? finish_wait+0x260/0x260 [ 75.314476][ T1157] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 75.320828][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 75.326875][ T1157] ? __kthread_parkme+0x13f/0x1e0 [ 75.331904][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 75.337537][ T1157] kthread+0x3b5/0x4a0 [ 75.341604][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 75.347319][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 75.353049][ T1157] ret_from_fork+0x1f/0x30 executing program [ 75.577310][ T1157] BUG: using smp_processor_id() in preemptible [00000000] code: khugepaged/1157 [ 75.586451][ T1157] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 75.592717][ T1157] CPU: 1 PID: 1157 Comm: khugepaged Not tainted 5.8.0-rc1-syzkaller #0 [ 75.600985][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.611036][ T1157] Call Trace: [ 75.614330][ T1157] dump_stack+0x18f/0x20d [ 75.618665][ T1157] check_preemption_disabled+0x20d/0x220 [ 75.624318][ T1157] ext4_mb_new_blocks+0xa4d/0x3b70 [ 75.629441][ T1157] ? ext4_ext_search_right+0x2ca/0xb20 [ 75.634903][ T1157] ? ext4_ext_next_allocated_block+0x221/0x2d0 [ 75.641064][ T1157] ext4_ext_map_blocks+0x201b/0x33e0 [ 75.646360][ T1157] ? ext4_ext_release+0x10/0x10 [ 75.651230][ T1157] ? down_write_killable+0x170/0x170 [ 75.656527][ T1157] ? ext4_es_lookup_extent+0x41d/0xd10 [ 75.662081][ T1157] ext4_map_blocks+0x4cb/0x1640 [ 75.666941][ T1157] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 75.672143][ T1157] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 75.677865][ T1157] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 75.683847][ T1157] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 75.689321][ T1157] ext4_writepages+0x1a7b/0x33c0 [ 75.694316][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 75.699985][ T1157] ? __ext4_mark_inode_dirty+0x940/0x940 [ 75.705638][ T1157] ? do_writepages+0xfa/0x2a0 [ 75.710312][ T1157] do_writepages+0xfa/0x2a0 [ 75.714823][ T1157] ? page_writeback_cpu_online+0x10/0x10 [ 75.720461][ T1157] ? do_raw_spin_lock+0x120/0x2d0 [ 75.725483][ T1157] ? do_raw_spin_unlock+0x171/0x260 [ 75.730680][ T1157] ? _raw_spin_unlock+0x24/0x40 [ 75.735535][ T1157] __filemap_fdatawrite_range+0x2aa/0x390 [ 75.741252][ T1157] ? collapse_file+0x35a2/0x4330 [ 75.746276][ T1157] ? delete_from_page_cache_batch+0xeb0/0xeb0 [ 75.752354][ T1157] ? _raw_spin_unlock_irq+0x1f/0x80 [ 75.757572][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 75.763558][ T1157] collapse_file+0x35ac/0x4330 [ 75.768341][ T1157] ? collapse_huge_page+0x4350/0x4350 [ 75.773712][ T1157] ? khugepaged+0x2506/0x3fc0 [ 75.778401][ T1157] ? xas_find+0x31a/0x880 [ 75.782820][ T1157] ? check_preemption_disabled+0x38/0x220 [ 75.788547][ T1157] khugepaged+0x3041/0x3fc0 [ 75.793075][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 75.798706][ T1157] ? lock_downgrade+0x840/0x840 [ 75.803559][ T1157] ? finish_wait+0x260/0x260 [ 75.808197][ T1157] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 75.814008][ T1157] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 75.820003][ T1157] ? __kthread_parkme+0x13f/0x1e0 [ 75.825131][ T1157] ? collapse_pte_mapped_thp+0xbf0/0xbf0 [ 75.830774][ T1157] kthread+0x3b5/0x4a0 [ 75.834853][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 75.840583][ T1157] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 75.846314][ T1157] ret_from_fork+0x1f/0x30 [ 76.014022][ T313] ================================================================== [ 76.022342][ T313] BUG: KASAN: use-after-free in afs_wake_up_async_call+0x6aa/0x770 [ 76.030590][ T313] Write of size 1 at addr ffff88808c5351e4 by task kworker/u4:7/313 [ 76.030603][ T313] [ 76.030617][ T313] CPU: 0 PID: 313 Comm: kworker/u4:7 Not tainted 5.8.0-rc1-syzkaller #0 [ 76.030631][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.059417][ T313] Workqueue: netns cleanup_net [ 76.059427][ T313] Call Trace: [ 76.059450][ T313] dump_stack+0x18f/0x20d [ 76.059471][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.077341][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.077354][ T313] ? afs_put_call+0xa40/0xa40 [ 76.077377][ T313] print_address_description.constprop.0.cold+0xd3/0x413 [ 76.094551][ T313] ? vprintk_func+0x97/0x1a6 [ 76.099143][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.104689][ T313] kasan_report.cold+0x1f/0x37 [ 76.109452][ T313] ? rcu_read_lock_held_common+0x51/0xa0 [ 76.115070][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.120600][ T313] afs_wake_up_async_call+0x6aa/0x770 [ 76.125955][ T313] ? afs_close_socket+0x320/0x320 [ 76.130969][ T313] ? afs_put_call+0xa40/0xa40 [ 76.135726][ T313] rxrpc_notify_socket+0x1db/0x5d0 [ 76.140818][ T313] ? afs_put_call+0xa40/0xa40 [ 76.145475][ T313] __rxrpc_set_call_completion.part.0+0x172/0x410 [ 76.151885][ T313] rxrpc_call_completed+0xca/0xf0 [ 76.156907][ T313] rxrpc_discard_prealloc+0x781/0xab0 [ 76.162273][ T313] ? lock_sock_nested+0x94/0x110 [ 76.167195][ T313] rxrpc_listen+0x147/0x360 [ 76.171679][ T313] afs_close_socket+0x95/0x320 [ 76.176418][ T313] ? afs_purge_servers+0x16d/0x300 [ 76.181516][ T313] ? afs_rx_discard_new_call+0x50/0x50 [ 76.186959][ T313] ? init_wait_var_entry+0x200/0x200 [ 76.192226][ T313] ? rcu_read_lock_held_common+0xa0/0xa0 [ 76.197850][ T313] ? check_preemption_disabled+0x38/0x220 [ 76.203565][ T313] afs_net_exit+0x1bc/0x310 [ 76.208045][ T313] ? afs_net_init+0xe30/0xe30 [ 76.212700][ T313] ops_exit_list.isra.0+0xa8/0x150 [ 76.217789][ T313] cleanup_net+0x511/0xa50 [ 76.222284][ T313] ? unregister_pernet_device+0x70/0x70 [ 76.227821][ T313] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 76.233799][ T313] process_one_work+0x965/0x1690 [ 76.238721][ T313] ? lock_release+0x800/0x800 [ 76.245042][ T313] ? pwq_dec_nr_in_flight+0x310/0x310 [ 76.250395][ T313] ? rwlock_bug.part.0+0x90/0x90 [ 76.255403][ T313] worker_thread+0x96/0xe10 [ 76.259904][ T313] ? process_one_work+0x1690/0x1690 [ 76.265088][ T313] kthread+0x3b5/0x4a0 [ 76.269136][ T313] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 76.274833][ T313] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 76.280547][ T313] ret_from_fork+0x1f/0x30 [ 76.284970][ T313] [ 76.287291][ T313] Allocated by task 6818: [ 76.291607][ T313] save_stack+0x1b/0x40 [ 76.295763][ T313] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 76.301396][ T313] kmem_cache_alloc_trace+0x153/0x7d0 [ 76.306807][ T313] afs_alloc_call+0x55/0x630 [ 76.311384][ T313] afs_charge_preallocation+0xe9/0x2d0 [ 76.316827][ T313] afs_open_socket+0x292/0x360 [ 76.321581][ T313] afs_net_init+0xa6c/0xe30 [ 76.326079][ T313] ops_init+0xaf/0x420 [ 76.330141][ T313] setup_net+0x2de/0x860 [ 76.334372][ T313] copy_net_ns+0x293/0x590 [ 76.338776][ T313] create_new_namespaces+0x3fb/0xb30 [ 76.344053][ T313] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 76.350095][ T313] ksys_unshare+0x43d/0x8e0 [ 76.354617][ T313] __x64_sys_unshare+0x2d/0x40 [ 76.359495][ T313] do_syscall_64+0x60/0xe0 [ 76.363930][ T313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 76.369818][ T313] [ 76.372163][ T313] Freed by task 313: [ 76.377109][ T313] save_stack+0x1b/0x40 [ 76.381287][ T313] __kasan_slab_free+0xf7/0x140 [ 76.386131][ T313] kfree+0x109/0x2b0 [ 76.390006][ T313] afs_put_call+0x585/0xa40 [ 76.394493][ T313] rxrpc_discard_prealloc+0x764/0xab0 [ 76.399859][ T313] rxrpc_listen+0x147/0x360 [ 76.404363][ T313] afs_close_socket+0x95/0x320 [ 76.409174][ T313] afs_net_exit+0x1bc/0x310 [ 76.413677][ T313] ops_exit_list.isra.0+0xa8/0x150 [ 76.418904][ T313] cleanup_net+0x511/0xa50 [ 76.423316][ T313] process_one_work+0x965/0x1690 [ 76.428237][ T313] worker_thread+0x96/0xe10 [ 76.433239][ T313] kthread+0x3b5/0x4a0 [ 76.437294][ T313] ret_from_fork+0x1f/0x30 [ 76.441691][ T313] [ 76.444038][ T313] The buggy address belongs to the object at ffff88808c535000 [ 76.444038][ T313] which belongs to the cache kmalloc-1k of size 1024 [ 76.458685][ T313] The buggy address is located 484 bytes inside of [ 76.458685][ T313] 1024-byte region [ffff88808c535000, ffff88808c535400) [ 76.472041][ T313] The buggy address belongs to the page: [ 76.477665][ T313] page:ffffea0002314d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 76.486754][ T313] flags: 0xfffe0000000200(slab) [ 76.491589][ T313] raw: 00fffe0000000200 ffffea000289ca88 ffffea000289ca08 ffff8880aa000c40 [ 76.500154][ T313] raw: 0000000000000000 ffff88808c535000 0000000100000002 0000000000000000 [ 76.508735][ T313] page dumped because: kasan: bad access detected [ 76.515128][ T313] [ 76.517434][ T313] Memory state around the buggy address: [ 76.523046][ T313] ffff88808c535080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.531101][ T313] ffff88808c535100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.539266][ T313] >ffff88808c535180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.547440][ T313] ^ [ 76.554808][ T313] ffff88808c535200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.562896][ T313] ffff88808c535280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.570934][ T313] ================================================================== [ 76.579068][ T313] Disabling lock debugging due to kernel taint [ 76.585364][ T313] Kernel panic - not syncing: panic_on_warn set ... [ 76.591979][ T313] CPU: 0 PID: 313 Comm: kworker/u4:7 Tainted: G B 5.8.0-rc1-syzkaller #0 [ 76.601688][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.612221][ T313] Workqueue: netns cleanup_net [ 76.616979][ T313] Call Trace: [ 76.620264][ T313] dump_stack+0x18f/0x20d [ 76.624603][ T313] ? afs_wake_up_async_call+0x670/0x770 [ 76.630131][ T313] ? afs_put_call+0xa40/0xa40 [ 76.634786][ T313] panic+0x2e3/0x75c [ 76.638657][ T313] ? __warn_printk+0xf3/0xf3 [ 76.643249][ T313] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 76.649380][ T313] ? trace_hardirqs_on+0x55/0x220 [ 76.654397][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.662698][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.668660][ T313] ? afs_put_call+0xa40/0xa40 [ 76.673314][ T313] end_report+0x4d/0x53 [ 76.677459][ T313] kasan_report.cold+0xd/0x37 [ 76.682144][ T313] ? rcu_read_lock_held_common+0x51/0xa0 [ 76.687883][ T313] ? afs_wake_up_async_call+0x6aa/0x770 [ 76.693537][ T313] afs_wake_up_async_call+0x6aa/0x770 [ 76.698987][ T313] ? afs_close_socket+0x320/0x320 [ 76.703989][ T313] ? afs_put_call+0xa40/0xa40 [ 76.708657][ T313] rxrpc_notify_socket+0x1db/0x5d0 [ 76.713839][ T313] ? afs_put_call+0xa40/0xa40 [ 76.718577][ T313] __rxrpc_set_call_completion.part.0+0x172/0x410 [ 76.724996][ T313] rxrpc_call_completed+0xca/0xf0 [ 76.730020][ T313] rxrpc_discard_prealloc+0x781/0xab0 [ 76.735480][ T313] ? lock_sock_nested+0x94/0x110 [ 76.740410][ T313] rxrpc_listen+0x147/0x360 [ 76.744905][ T313] afs_close_socket+0x95/0x320 [ 76.749732][ T313] ? afs_purge_servers+0x16d/0x300 [ 76.754842][ T313] ? afs_rx_discard_new_call+0x50/0x50 [ 76.760369][ T313] ? init_wait_var_entry+0x200/0x200 [ 76.765729][ T313] ? rcu_read_lock_held_common+0xa0/0xa0 [ 76.771374][ T313] ? check_preemption_disabled+0x38/0x220 [ 76.777078][ T313] afs_net_exit+0x1bc/0x310 [ 76.781626][ T313] ? afs_net_init+0xe30/0xe30 [ 76.786330][ T313] ops_exit_list.isra.0+0xa8/0x150 [ 76.791419][ T313] cleanup_net+0x511/0xa50 [ 76.795815][ T313] ? unregister_pernet_device+0x70/0x70 [ 76.801347][ T313] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 76.807321][ T313] process_one_work+0x965/0x1690 [ 76.812239][ T313] ? lock_release+0x800/0x800 [ 76.816889][ T313] ? pwq_dec_nr_in_flight+0x310/0x310 [ 76.822246][ T313] ? rwlock_bug.part.0+0x90/0x90 [ 76.827959][ T313] worker_thread+0x96/0xe10 [ 76.832439][ T313] ? process_one_work+0x1690/0x1690 [ 76.837620][ T313] kthread+0x3b5/0x4a0 [ 76.841665][ T313] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 76.847374][ T313] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 76.853077][ T313] ret_from_fork+0x1f/0x30 [ 76.858986][ T313] Kernel Offset: disabled [ 76.863322][ T313] Rebooting in 86400 seconds..