[ 49.727140][ T6749] RDX: 00007fff5ca04f30 RSI: 00000000000001ed RDI: 00005586017cd985 [ 49.735089][ T6749] RBP: 00007f66861ae680 R08: 0000000000000100 R09: 0000000000000000 [ 49.743040][ T6749] R10: 00005586017cd980 R11: 0000000000000246 R12: 00000000000001ed [ 49.750989][ T6749] R13: 00007fff5ca051f0 R14: 0000000000000000 R15: 0000000000000000 Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 51.959017][ T4842] systemd-udevd (4842) used greatest stack depth: 21504 bytes left [ 53.110967][ T6764] scp (6764) used greatest stack depth: 21456 bytes left [ 56.787055][ T46] BUG: using smp_processor_id() in preemptible [00000000] code: kworker/u4:3/46 [ 56.796121][ T46] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 56.802119][ T46] CPU: 1 PID: 46 Comm: kworker/u4:3 Not tainted 5.7.0-next-20200602-syzkaller #0 [ 56.811218][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.821259][ T46] Workqueue: writeback wb_workfn (flush-8:0) [ 56.827386][ T46] Call Trace: [ 56.830752][ T46] dump_stack+0x18f/0x20d [ 56.835079][ T46] check_preemption_disabled+0x20d/0x220 [ 56.840706][ T46] ext4_mb_new_blocks+0xa4d/0x3b70 [ 56.845796][ T46] ? ext4_find_extent+0x81a/0xad0 [ 56.850802][ T46] ? ext4_ext_search_right+0x2ca/0xb20 [ 56.856238][ T46] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 56.861966][ T46] ext4_ext_map_blocks+0x201b/0x33e0 [ 56.867232][ T46] ? ext4_ext_release+0x10/0x10 [ 56.872083][ T46] ? down_write_killable+0x170/0x170 [ 56.877345][ T46] ? ext4_es_lookup_extent+0x41d/0xd10 [ 56.882783][ T46] ext4_map_blocks+0x4cb/0x1640 [ 56.887618][ T46] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 56.892795][ T46] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.898318][ T46] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 56.904273][ T46] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 56.909731][ T46] ext4_writepages+0x1ab5/0x3400 [ 56.914656][ T46] ? __ext4_mark_inode_dirty+0x940/0x940 [ 56.920285][ T46] ? __lock_acquire+0x2224/0x48b0 [ 56.925293][ T46] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 56.931251][ T46] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 56.937222][ T46] ? __ext4_mark_inode_dirty+0x940/0x940 [ 56.942829][ T46] ? do_writepages+0xfa/0x2a0 [ 56.947480][ T46] do_writepages+0xfa/0x2a0 [ 56.951964][ T46] ? page_writeback_cpu_online+0x10/0x10 [ 56.957577][ T46] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 56.963113][ T46] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 56.969068][ T46] ? lock_downgrade+0x840/0x840 [ 56.973900][ T46] __writeback_single_inode+0x12a/0x13d0 [ 56.979526][ T46] ? _raw_spin_unlock+0x24/0x40 [ 56.984354][ T46] ? wbc_attach_and_unlock_inode+0x60a/0x9c0 [ 56.990311][ T46] writeback_sb_inodes+0x515/0xdc0 [ 56.995403][ T46] ? __writeback_single_inode+0x13d0/0x13d0 [ 57.001300][ T46] __writeback_inodes_wb+0xc3/0x250 [ 57.006486][ T46] wb_writeback+0x8db/0xd50 [ 57.010972][ T46] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 57.017296][ T46] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 57.023165][ T46] ? cpumask_next+0x3c/0x40 [ 57.027647][ T46] ? get_nr_dirty_inodes+0xd6/0x130 [ 57.032824][ T46] wb_workfn+0xab3/0x1090 [ 57.037133][ T46] ? inode_wait_for_writeback+0x30/0x30 [ 57.042655][ T46] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 57.048177][ T46] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 57.054134][ T46] process_one_work+0x965/0x1690 [ 57.059052][ T46] ? lock_release+0x800/0x800 [ 57.063703][ T46] ? pwq_dec_nr_in_flight+0x310/0x310 [ 57.069052][ T46] ? rwlock_bug.part.0+0x90/0x90 [ 57.073970][ T46] worker_thread+0x96/0xe10 [ 57.078459][ T46] ? process_one_work+0x1690/0x1690 [ 57.083632][ T46] kthread+0x3b5/0x4a0 [ 57.087675][ T46] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 57.093367][ T46] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 57.099063][ T46] ret_from_fork+0x1f/0x30 Warning: Permanently added '10.128.0.151' (ECDSA) to the list of known hosts. 2020/06/02 11:03:52 fuzzer started 2020/06/02 11:03:52 connecting to host at 10.128.0.26:40495 2020/06/02 11:03:52 checking machine... 2020/06/02 11:03:52 checking revisions... 2020/06/02 11:03:52 testing simple program... [ 59.714245][ T6784] BUG: using smp_processor_id() in preemptible [00000000] code: syz-fuzzer/6784 [ 59.723330][ T6784] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 59.729310][ T6784] CPU: 1 PID: 6784 Comm: syz-fuzzer Not tainted 5.7.0-next-20200602-syzkaller #0 [ 59.738399][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.748430][ T6784] Call Trace: [ 59.751767][ T6784] dump_stack+0x18f/0x20d [ 59.756081][ T6784] check_preemption_disabled+0x20d/0x220 [ 59.761693][ T6784] ext4_mb_new_blocks+0xa4d/0x3b70 [ 59.766788][ T6784] ? ext4_ext_search_right+0x2ca/0xb20 [ 59.772220][ T6784] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 59.777919][ T6784] ext4_ext_map_blocks+0x201b/0x33e0 [ 59.783215][ T6784] ? ext4_ext_release+0x10/0x10 [ 59.788054][ T6784] ? down_write_killable+0x170/0x170 [ 59.793314][ T6784] ? ext4_es_lookup_extent+0x41d/0xd10 [ 59.798754][ T6784] ext4_map_blocks+0x4cb/0x1640 [ 59.803582][ T6784] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 59.808756][ T6784] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.814294][ T6784] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 59.820267][ T6784] ? prandom_u32_state+0xe/0x170 [ 59.825180][ T6784] ? __brelse+0x84/0xa0 [ 59.829321][ T6784] ? __ext4_new_inode+0x144/0x55e0 [ 59.834409][ T6784] ext4_getblk+0xad/0x520 [ 59.838745][ T6784] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 59.844459][ T6784] ? ext4_free_inode+0x1700/0x1700 [ 59.849565][ T6784] ext4_bread+0x7c/0x380 [ 59.853798][ T6784] ? ext4_getblk+0x520/0x520 [ 59.858368][ T6784] ? dquot_get_next_dqblk+0x180/0x180 [ 59.863720][ T6784] ext4_append+0x153/0x360 [ 59.868135][ T6784] ext4_mkdir+0x5e0/0xdf0 [ 59.872445][ T6784] ? ext4_rmdir+0xde0/0xde0 [ 59.876926][ T6784] ? security_inode_permission+0xc4/0xf0 [ 59.882550][ T6784] vfs_mkdir+0x419/0x690 [ 59.886772][ T6784] do_mkdirat+0x21e/0x280 [ 59.891076][ T6784] ? __ia32_sys_mknod+0xb0/0xb0 [ 59.895905][ T6784] ? do_syscall_64+0x1c/0xe0 [ 59.900470][ T6784] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 59.906427][ T6784] do_syscall_64+0x60/0xe0 [ 59.910818][ T6784] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 59.916684][ T6784] RIP: 0033:0x4b02a0 [ 59.920553][ T6784] Code: Bad RIP value. [ 59.924592][ T6784] RSP: 002b:000000c00004f4b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000102 [ 59.932977][ T6784] RAX: ffffffffffffffda RBX: 000000c00002e500 RCX: 00000000004b02a0 [ 59.940925][ T6784] RDX: 00000000000001c0 RSI: 000000c00009cae0 RDI: ffffffffffffff9c [ 59.948871][ T6784] RBP: 000000c00004f510 R08: 0000000000000000 R09: 0000000000000000 [ 59.956819][ T6784] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 59.964771][ T6784] R13: 0000000000000058 R14: 0000000000000057 R15: 0000000000000100 [ 59.988381][ T6797] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6797 [ 59.998000][ T6797] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.003925][ T6797] CPU: 0 PID: 6797 Comm: syz-executor.0 Not tainted 5.7.0-next-20200602-syzkaller #0 [ 60.013353][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.023389][ T6797] Call Trace: [ 60.026664][ T6797] dump_stack+0x18f/0x20d [ 60.030994][ T6797] check_preemption_disabled+0x20d/0x220 [ 60.036661][ T6797] ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.041755][ T6797] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.047192][ T6797] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 60.052891][ T6797] ext4_ext_map_blocks+0x201b/0x33e0 [ 60.058159][ T6797] ? ext4_ext_release+0x10/0x10 [ 60.062995][ T6797] ? down_write_killable+0x170/0x170 [ 60.068253][ T6797] ? ext4_es_lookup_extent+0x41d/0xd10 [ 60.074043][ T6797] ext4_map_blocks+0x4cb/0x1640 [ 60.078934][ T6797] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.084107][ T6797] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.089646][ T6797] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.095603][ T6797] ? prandom_u32_state+0xe/0x170 [ 60.100579][ T6797] ? __brelse+0x84/0xa0 [ 60.104730][ T6797] ? __ext4_new_inode+0x144/0x55e0 [ 60.109820][ T6797] ext4_getblk+0xad/0x520 [ 60.114129][ T6797] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 60.119829][ T6797] ? ext4_free_inode+0x1700/0x1700 [ 60.124918][ T6797] ext4_bread+0x7c/0x380 [ 60.129141][ T6797] ? ext4_getblk+0x520/0x520 [ 60.133709][ T6797] ? dquot_get_next_dqblk+0x180/0x180 [ 60.139063][ T6797] ext4_append+0x153/0x360 [ 60.143461][ T6797] ext4_mkdir+0x5e0/0xdf0 [ 60.147772][ T6797] ? ext4_rmdir+0xde0/0xde0 [ 60.152253][ T6797] ? security_inode_permission+0xc4/0xf0 [ 60.157865][ T6797] vfs_mkdir+0x419/0x690 [ 60.162084][ T6797] do_mkdirat+0x21e/0x280 [ 60.166394][ T6797] ? __ia32_sys_mknod+0xb0/0xb0 [ 60.171814][ T6797] ? do_syscall_64+0x1c/0xe0 [ 60.176384][ T6797] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.182340][ T6797] do_syscall_64+0x60/0xe0 [ 60.186736][ T6797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.192601][ T6797] RIP: 0033:0x45bee7 [ 60.196469][ T6797] Code: Bad RIP value. [ 60.200525][ T6797] RSP: 002b:00007ffc53815988 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 60.208909][ T6797] RAX: ffffffffffffffda RBX: 000000000003a2f8 RCX: 000000000045bee7 [ 60.216855][ T6797] RDX: 0000000000000002 RSI: 00000000000001c0 RDI: 00007ffc53815b60 [ 60.224800][ T6797] RBP: 0000000000000001 R08: 000000000000f8c0 R09: 00000000000027c0 [ 60.232757][ T6797] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000000c2 [ 60.240711][ T6797] R13: 00007ffc53815b60 R14: 8421084210842109 R15: 00007ffc53815b6c [ 60.324425][ T6798] IPVS: ftp: loaded support on port[0] = 21 [ 60.360972][ T6798] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6798 [ 60.370552][ T6798] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.376625][ T6798] CPU: 1 PID: 6798 Comm: syz-executor.0 Not tainted 5.7.0-next-20200602-syzkaller #0 [ 60.386066][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.396109][ T6798] Call Trace: [ 60.399377][ T6798] dump_stack+0x18f/0x20d [ 60.403684][ T6798] check_preemption_disabled+0x20d/0x220 [ 60.409296][ T6798] ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.414395][ T6798] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.419830][ T6798] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 60.425545][ T6798] ext4_ext_map_blocks+0x201b/0x33e0 [ 60.430817][ T6798] ? ext4_ext_release+0x10/0x10 [ 60.435655][ T6798] ? down_write_killable+0x170/0x170 [ 60.441870][ T6798] ? ext4_es_lookup_extent+0x41d/0xd10 [ 60.447309][ T6798] ext4_map_blocks+0x4cb/0x1640 [ 60.452140][ T6798] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.457314][ T6798] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.462833][ T6798] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.468793][ T6798] ? prandom_u32_state+0xe/0x170 [ 60.473707][ T6798] ? __brelse+0x84/0xa0 [ 60.477855][ T6798] ? __ext4_new_inode+0x144/0x55e0 [ 60.482942][ T6798] ext4_getblk+0xad/0x520 [ 60.487251][ T6798] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 60.492947][ T6798] ? ext4_free_inode+0x1700/0x1700 [ 60.498056][ T6798] ext4_bread+0x7c/0x380 [ 60.502276][ T6798] ? ext4_getblk+0x520/0x520 [ 60.506842][ T6798] ? dquot_get_next_dqblk+0x180/0x180 [ 60.512193][ T6798] ext4_append+0x153/0x360 [ 60.516587][ T6798] ext4_mkdir+0x5e0/0xdf0 [ 60.520896][ T6798] ? ext4_rmdir+0xde0/0xde0 [ 60.525376][ T6798] ? security_inode_permission+0xc4/0xf0 [ 60.530989][ T6798] vfs_mkdir+0x419/0x690 [ 60.535207][ T6798] do_mkdirat+0x21e/0x280 [ 60.539516][ T6798] ? __ia32_sys_mknod+0xb0/0xb0 [ 60.544357][ T6798] ? do_syscall_64+0x1c/0xe0 [ 60.548927][ T6798] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.554883][ T6798] do_syscall_64+0x60/0xe0 [ 60.559278][ T6798] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.565157][ T6798] RIP: 0033:0x45bee7 [ 60.569024][ T6798] Code: Bad RIP value. [ 60.573063][ T6798] RSP: 002b:00007ffc53815878 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 60.581446][ T6798] RAX: ffffffffffffffda RBX: 000000000078c988 RCX: 000000000045bee7 [ 60.589393][ T6798] RDX: 00007ffc538158c3 RSI: 00000000000001ff RDI: 00007ffc538158c0 [ 60.597341][ T6798] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000003 [ 60.605319][ T6798] R10: 0000000000000064 R11: 0000000000000206 R12: 00000000004185d0 [ 60.613282][ T6798] R13: 00007ffc538158b0 R14: 0000000000000000 R15: 00007ffc538158c0 [ 60.667499][ T6798] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6798 [ 60.676981][ T6798] caller is ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.682881][ T6798] CPU: 1 PID: 6798 Comm: syz-executor.0 Not tainted 5.7.0-next-20200602-syzkaller #0 [ 60.692332][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.702387][ T6798] Call Trace: [ 60.705681][ T6798] dump_stack+0x18f/0x20d [ 60.710021][ T6798] check_preemption_disabled+0x20d/0x220 [ 60.715652][ T6798] ext4_mb_new_blocks+0xa4d/0x3b70 [ 60.720746][ T6798] ? ext4_ext_search_right+0x2ca/0xb20 [ 60.726182][ T6798] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 60.731878][ T6798] ext4_ext_map_blocks+0x201b/0x33e0 [ 60.737144][ T6798] ? ext4_ext_release+0x10/0x10 [ 60.741994][ T6798] ? down_write_killable+0x170/0x170 [ 60.747256][ T6798] ? ext4_es_lookup_extent+0x41d/0xd10 [ 60.752695][ T6798] ext4_map_blocks+0x4cb/0x1640 [ 60.757526][ T6798] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 60.762700][ T6798] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.768221][ T6798] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.774174][ T6798] ? prandom_u32_state+0xe/0x170 [ 60.779104][ T6798] ? __brelse+0x84/0xa0 [ 60.783236][ T6798] ? __ext4_new_inode+0x144/0x55e0 [ 60.788332][ T6798] ext4_getblk+0xad/0x520 [ 60.792638][ T6798] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 60.798335][ T6798] ? ext4_free_inode+0x1700/0x1700 [ 60.803423][ T6798] ext4_bread+0x7c/0x380 [ 60.807644][ T6798] ? ext4_getblk+0x520/0x520 [ 60.812210][ T6798] ? dquot_get_next_dqblk+0x180/0x180 [ 60.817561][ T6798] ext4_append+0x153/0x360 [ 60.821954][ T6798] ext4_mkdir+0x5e0/0xdf0 [ 60.826281][ T6798] ? ext4_rmdir+0xde0/0xde0 [ 60.830764][ T6798] ? security_inode_permission+0xc4/0xf0 [ 60.836379][ T6798] vfs_mkdir+0x419/0x690 [ 60.840620][ T6798] do_mkdirat+0x21e/0x280 [ 60.844939][ T6798] ? __ia32_sys_mknod+0xb0/0xb0 [ 60.850027][ T6798] ? do_syscall_64+0x1c/0xe0 [ 60.854617][ T6798] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 60.860587][ T6798] do_syscall_64+0x60/0xe0 [ 60.864978][ T6798] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 60.870851][ T6798] RIP: 0033:0x45bee7 [ 60.874755][ T6798] Code: Bad RIP value. [ 60.878798][ T6798] RSP: 002b:00007ffc53815878 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 60.887201][ T6798] RAX: ffffffffffffffda RBX: 000000000000ecf1 RCX: 000000000045bee7 [ 60.895148][ T6798] RDX: 00007ffc538158c3 RSI: 00000000000001ff RDI: 00007ffc538158c0 [ 60.903109][ T6798] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 2020/06/02 11:03:53 building call list... [ 60.911057][ T6798] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000003 [ 60.919003][ T6798] R13: 00007ffc538158b0 R14: 000000000000ecdc R15: 00007ffc538158c0 [ 61.175597][ T46] tipc: TX() has been purged, node left! executing program [ 62.601017][ T6785] can: request_module (can-proto-0) failed. [ 63.189959][ T6785] can: request_module (can-proto-0) failed. [ 63.202000][ T6785] can: request_module (can-proto-0) failed.