[ 61.577420][ T21] process_one_work+0x965/0x1690 [ 61.582378][ T21] ? lock_release+0x800/0x800 [ 61.587064][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 61.592445][ T21] ? rwlock_bug.part.0+0x90/0x90 [ 61.597399][ T21] worker_thread+0x96/0xe10 [ 61.601925][ T21] ? process_one_work+0x1690/0x1690 [ 61.607132][ T21] kthread+0x3b5/0x4a0 [ 61.611246][ T21] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 61.617001][ T21] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 61.622741][ T21] ret_from_fork+0x24/0x30 [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ 68.342356][ T6735] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-rfkill/6735 [ 68.351909][ T6735] caller is ext4_mb_new_blocks+0xa54/0x3af0 [ 68.351924][ T6735] CPU: 0 PID: 6735 Comm: systemd-rfkill Not tainted 5.7.0-syzkaller #0 [ 68.351953][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.376158][ T6735] Call Trace: [ 68.379553][ T6735] dump_stack+0x18f/0x20d [ 68.383909][ T6735] debug_smp_processor_id.cold+0x88/0x9b [[ 68.389578][ T6735] ext4_mb_new_blocks+0xa54/0x3af0 [ 68.394783][ T6735] ? ext4_ext_search_right+0x2ca/0xb20 [ 68.400242][ T6735] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 68.405974][ T6735] ext4_ext_map_blocks+0x201b/0x33e0  OK [0[ 68.411453][ T6735] ? ext4_ext_release+0x10/0x10 [ 68.417714][ T6735] ? __down_timeout+0x2d0/0x2d0 [ 68.422567][ T6735] ? ext4_es_lookup_extent+0x41d/0xd10 m] [ 68.428127][ T6735] ext4_map_blocks+0x4cb/0x1640 [ 68.433213][ T6735] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 68.438408][ T6735] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 68.443971][ T6735] ? rcu_read_lock_any_held.part.0+0x50/0x50 Started Update U[ 68.449966][ T6735] ? prandom_u32_state+0xe/0x170 [ 68.456542][ T6735] ? __brelse+0x84/0xa0 TMP about System[ 68.460716][ T6735] ? __ext4_new_inode+0x144/0x57a0 [ 68.468259][ T6735] ext4_getblk+0xad/0x520 Runlevel Change[ 68.472591][ T6735] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 68.479776][ T6735] ? ext4_free_inode+0x17e0/0x17e0 [ 68.484902][ T6735] ext4_bread+0x7c/0x380 s. [ 68.489167][ T6735] ? ext4_getblk+0x520/0x520 [ 68.494124][ T6735] ? dqget+0x1020/0x1020 [ 68.498389][ T6735] ext4_append+0x153/0x360 [ 68.502819][ T6735] ext4_mkdir+0x5e0/0xdf0 [ 68.507171][ T6735] ? ext4_rmdir+0xde0/0xde0 [ 68.511694][ T6735] vfs_mkdir+0x419/0x690 [ 68.515952][ T6735] do_mkdirat+0x21e/0x280 [ 68.520297][ T6735] ? __ia32_sys_mknod+0xb0/0xb0 [ 68.525138][ T6735] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 68.531103][ T6735] ? do_syscall_64+0x21/0x7d0 [ 68.535769][ T6735] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 68.541739][ T6735] do_syscall_64+0xf6/0x7d0 [ 68.546226][ T6735] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 68.552115][ T6735] RIP: 0033:0x7f0f0d144687 [ 68.556501][ T6735] Code: Bad RIP value. [ 68.560554][ T6735] RSP: 002b:00007ffeaa544db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 68.568976][ T6735] RAX: ffffffffffffffda RBX: 000055c5dfc62985 RCX: 00007f0f0d144687 [ 68.576952][ T6735] RDX: 00007ffeaa544c80 RSI: 00000000000001ed RDI: 000055c5dfc62985 [ 68.584900][ T6735] RBP: 00007f0f0d144680 R08: 0000000000000100 R09: 0000000000000000 [ 68.592859][ T6735] R10: 000055c5dfc62980 R11: 0000000000000246 R12: 00000000000001ed [ 68.600821][ T6735] R13: 00007ffeaa544f40 R14: 0000000000000000 R15: 0000000000000000 [ OK ] Started Load/Save RF Kill Switch Status. Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. Debian GNU/Linux 9 syzkaller ttyS0 2020/06/11 22:56:01 fuzzer started 2020/06/11 22:56:01 connecting to host at 10.128.0.26:43219 2020/06/11 22:56:01 checking machine... 2020/06/11 22:56:01 checking revisions... 2020/06/11 22:56:01 testing simple program... syzkaller login: [ 70.875197][ T6823] BUG: using smp_processor_id() in preemptible [00000000] code: syz-fuzzer/6823 [ 70.884393][ T6823] caller is ext4_mb_new_blocks+0xa54/0x3af0 [ 70.890281][ T6823] CPU: 0 PID: 6823 Comm: syz-fuzzer Not tainted 5.7.0-syzkaller #0 [ 70.898156][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.908294][ T6823] Call Trace: [ 70.911571][ T6823] dump_stack+0x18f/0x20d [ 70.916277][ T6823] debug_smp_processor_id.cold+0x88/0x9b [ 70.921898][ T6823] ext4_mb_new_blocks+0xa54/0x3af0 [ 70.927104][ T6823] ? ext4_ext_search_right+0x2ca/0xb20 [ 70.932548][ T6823] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 70.938248][ T6823] ext4_ext_map_blocks+0x201b/0x33e0 [ 70.943643][ T6823] ? ext4_ext_release+0x10/0x10 [ 70.948504][ T6823] ? __down_timeout+0x2d0/0x2d0 [ 70.953341][ T6823] ? ext4_es_lookup_extent+0x41d/0xd10 [ 70.958794][ T6823] ext4_map_blocks+0x4cb/0x1640 [ 70.963627][ T6823] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 70.968801][ T6823] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 70.974550][ T6823] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 70.980653][ T6823] ? prandom_u32_state+0xe/0x170 [ 70.985624][ T6823] ? __brelse+0x84/0xa0 [ 70.989762][ T6823] ? __ext4_new_inode+0x144/0x57a0 [ 70.995943][ T6823] ext4_getblk+0xad/0x520 [ 71.000263][ T6823] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 71.006023][ T6823] ? ext4_free_inode+0x17e0/0x17e0 [ 71.011218][ T6823] ext4_bread+0x7c/0x380 [ 71.015468][ T6823] ? ext4_getblk+0x520/0x520 [ 71.020043][ T6823] ? dqget+0x1020/0x1020 [ 71.024281][ T6823] ext4_append+0x153/0x360 [ 71.028677][ T6823] ext4_mkdir+0x5e0/0xdf0 [ 71.033358][ T6823] ? ext4_rmdir+0xde0/0xde0 [ 71.037944][ T6823] vfs_mkdir+0x419/0x690 [ 71.042177][ T6823] do_mkdirat+0x21e/0x280 [ 71.046677][ T6823] ? __ia32_sys_mknod+0xb0/0xb0 [ 71.051503][ T6823] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.057460][ T6823] ? do_syscall_64+0x21/0x7d0 [ 71.062112][ T6823] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.068083][ T6823] do_syscall_64+0xf6/0x7d0 [ 71.072568][ T6823] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 71.078435][ T6823] RIP: 0033:0x4b02a0 [ 71.082309][ T6823] Code: Bad RIP value. [ 71.086361][ T6823] RSP: 002b:000000c0001054b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000102 [ 71.094755][ T6823] RAX: ffffffffffffffda RBX: 000000c00002e500 RCX: 00000000004b02a0 [ 71.104022][ T6823] RDX: 00000000000001c0 RSI: 000000c0000265a0 RDI: ffffffffffffff9c [ 71.111968][ T6823] RBP: 000000c000105510 R08: 0000000000000000 R09: 0000000000000000 [ 71.119916][ T6823] R10: 0000000000000000 R11: 0000000000000212 R12: ffffffffffffffff [ 71.127869][ T6823] R13: 000000000000002e R14: 000000000000002d R15: 0000000000000100 [ 71.155731][ T29] audit: type=1400 audit(1591916162.116:8): avc: denied { execmem } for pid=6825 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 71.156489][ T6825] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6825 [ 71.185884][ T6825] caller is ext4_mb_new_blocks+0xa54/0x3af0 [ 71.191783][ T6825] CPU: 0 PID: 6825 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 71.200008][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.210197][ T6825] Call Trace: [ 71.213594][ T6825] dump_stack+0x18f/0x20d [ 71.217927][ T6825] debug_smp_processor_id.cold+0x88/0x9b [ 71.223555][ T6825] ext4_mb_new_blocks+0xa54/0x3af0 [ 71.228677][ T6825] ? ext4_ext_search_right+0x2ca/0xb20 [ 71.234142][ T6825] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 71.239851][ T6825] ext4_ext_map_blocks+0x201b/0x33e0 [ 71.245121][ T6825] ? ext4_ext_release+0x10/0x10 [ 71.249983][ T6825] ? __down_timeout+0x2d0/0x2d0 [ 71.254814][ T6825] ? ext4_es_lookup_extent+0x41d/0xd10 [ 71.260269][ T6825] ext4_map_blocks+0x4cb/0x1640 [ 71.265192][ T6825] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 71.270378][ T6825] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 71.275912][ T6825] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 71.281868][ T6825] ? prandom_u32_state+0xe/0x170 [ 71.286793][ T6825] ? __brelse+0x84/0xa0 [ 71.290938][ T6825] ? __ext4_new_inode+0x144/0x57a0 [ 71.296038][ T6825] ext4_getblk+0xad/0x520 [ 71.300349][ T6825] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 71.306061][ T6825] ? ext4_free_inode+0x17e0/0x17e0 [ 71.311153][ T6825] ext4_bread+0x7c/0x380 [ 71.315384][ T6825] ? ext4_getblk+0x520/0x520 [ 71.319967][ T6825] ? dqget+0x1020/0x1020 [ 71.324205][ T6825] ? security_transition_sid+0x123/0x190 [ 71.329836][ T6825] ? security_transition_sid+0xed/0x190 [ 71.335366][ T6825] ext4_append+0x153/0x360 [ 71.339765][ T6825] ext4_mkdir+0x5e0/0xdf0 [ 71.344074][ T6825] ? ext4_rmdir+0xde0/0xde0 [ 71.348582][ T6825] vfs_mkdir+0x419/0x690 [ 71.352837][ T6825] do_mkdirat+0x21e/0x280 [ 71.357150][ T6825] ? __ia32_sys_mknod+0xb0/0xb0 [ 71.361990][ T6825] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.367960][ T6825] ? do_syscall_64+0x21/0x7d0 [ 71.372619][ T6825] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.378577][ T6825] do_syscall_64+0xf6/0x7d0 [ 71.383074][ T6825] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 71.388954][ T6825] RIP: 0033:0x45bee7 [ 71.392826][ T6825] Code: Bad RIP value. [ 71.396865][ T6825] RSP: 002b:00007ffc3e0606c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 71.405259][ T6825] RAX: ffffffffffffffda RBX: 000000000003a2f8 RCX: 000000000045bee7 [ 71.413215][ T6825] RDX: 0000000000000003 RSI: 00000000000001c0 RDI: 00007ffc3e0608a0 [ 71.421161][ T6825] RBP: 0000000000000001 R08: 000000000000f8c0 R09: 0000000000003040 [ 71.429106][ T6825] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000000c2 [ 71.437077][ T6825] R13: 00007ffc3e0608a0 R14: 8421084210842109 R15: 00007ffc3e0608ac [ 71.523112][ T6826] IPVS: ftp: loaded support on port[0] = 21 [ 71.561270][ T6826] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6826 [ 71.571084][ T6826] caller is ext4_mb_new_blocks+0xa54/0x3af0 [ 71.577207][ T6826] CPU: 1 PID: 6826 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 71.585549][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.595582][ T6826] Call Trace: [ 71.598864][ T6826] dump_stack+0x18f/0x20d [ 71.603179][ T6826] debug_smp_processor_id.cold+0x88/0x9b [ 71.608788][ T6826] ext4_mb_new_blocks+0xa54/0x3af0 [ 71.613896][ T6826] ? ext4_ext_search_right+0x2ca/0xb20 [ 71.619342][ T6826] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 71.625053][ T6826] ext4_ext_map_blocks+0x201b/0x33e0 [ 71.630328][ T6826] ? ext4_ext_release+0x10/0x10 [ 71.635267][ T6826] ? __down_timeout+0x2d0/0x2d0 [ 71.640102][ T6826] ? ext4_es_lookup_extent+0x41d/0xd10 [ 71.645541][ T6826] ext4_map_blocks+0x4cb/0x1640 [ 71.650383][ T6826] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 71.655569][ T6826] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 71.661104][ T6826] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 71.667059][ T6826] ? prandom_u32_state+0xe/0x170 [ 71.671972][ T6826] ? __brelse+0x84/0xa0 [ 71.676178][ T6826] ? __ext4_new_inode+0x144/0x57a0 [ 71.681325][ T6826] ext4_getblk+0xad/0x520 [ 71.685659][ T6826] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 71.691371][ T6826] ? ext4_free_inode+0x17e0/0x17e0 [ 71.697081][ T6826] ext4_bread+0x7c/0x380 [ 71.701301][ T6826] ? ext4_getblk+0x520/0x520 [ 71.705868][ T6826] ? dqget+0x1020/0x1020 [ 71.710211][ T6826] ? security_transition_sid+0x123/0x190 [ 71.715835][ T6826] ? security_transition_sid+0xed/0x190 [ 71.721368][ T6826] ext4_append+0x153/0x360 [ 71.725838][ T6826] ext4_mkdir+0x5e0/0xdf0 [ 71.730154][ T6826] ? ext4_rmdir+0xde0/0xde0 [ 71.734654][ T6826] vfs_mkdir+0x419/0x690 [ 71.738976][ T6826] do_mkdirat+0x21e/0x280 [ 71.743300][ T6826] ? __ia32_sys_mknod+0xb0/0xb0 [ 71.748152][ T6826] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.754113][ T6826] ? do_syscall_64+0x21/0x7d0 [ 71.758786][ T6826] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 71.764752][ T6826] do_syscall_64+0xf6/0x7d0 [ 71.769248][ T6826] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 71.775114][ T6826] RIP: 0033:0x45bee7 [ 71.778978][ T6826] Code: Bad RIP value. [ 71.783017][ T6826] RSP: 002b:00007ffc3e0605b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 71.791411][ T6826] RAX: ffffffffffffffda RBX: 000000000078c988 RCX: 000000000045bee7 [ 71.799369][ T6826] RDX: 00007ffc3e060603 RSI: 00000000000001ff RDI: 00007ffc3e060600 [ 71.807315][ T6826] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000003 [ 71.815262][ T6826] R10: 0000000000000064 R11: 0000000000000206 R12: 00000000004185d0 [ 71.823229][ T6826] R13: 00007ffc3e0605f0 R14: 0000000000000000 R15: 00007ffc3e060600 [ 71.880335][ T6826] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/6826 [ 71.890026][ T6826] caller is ext4_mb_new_blocks+0xa54/0x3af0 [ 71.896033][ T6826] CPU: 1 PID: 6826 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 71.904271][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.914343][ T6826] Call Trace: [ 71.917639][ T6826] dump_stack+0x18f/0x20d [ 71.921978][ T6826] debug_smp_processor_id.cold+0x88/0x9b [ 71.927619][ T6826] ext4_mb_new_blocks+0xa54/0x3af0 [ 71.932753][ T6826] ? ext4_ext_search_right+0x2ca/0xb20 [ 71.938226][ T6826] ? ext4_inode_to_goal_block+0x2df/0x3f0 [ 71.943968][ T6826] ext4_ext_map_blocks+0x201b/0x33e0 [ 71.949297][ T6826] ? ext4_ext_release+0x10/0x10 [ 71.954177][ T6826] ? __down_timeout+0x2d0/0x2d0 [ 71.959030][ T6826] ? ext4_es_lookup_extent+0x41d/0xd10 [ 71.964527][ T6826] ext4_map_blocks+0x4cb/0x1640 [ 71.969387][ T6826] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 71.974602][ T6826] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 71.980156][ T6826] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 71.986119][ T6826] ? prandom_u32_state+0xe/0x170 [ 71.991036][ T6826] ? __brelse+0x84/0xa0 [ 71.995175][ T6826] ? __ext4_new_inode+0x144/0x57a0 [ 72.000279][ T6826] ext4_getblk+0xad/0x520 [ 72.004611][ T6826] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 72.010320][ T6826] ? ext4_free_inode+0x17e0/0x17e0 [ 72.015433][ T6826] ext4_bread+0x7c/0x380 [ 72.019656][ T6826] ? ext4_getblk+0x520/0x520 [ 72.024301][ T6826] ? dqget+0x1020/0x1020 [ 72.028558][ T6826] ? security_transition_sid+0x123/0x190 [ 72.034322][ T6826] ? security_transition_sid+0xed/0x190 [ 72.040128][ T6826] ext4_append+0x153/0x360 [ 72.044535][ T6826] ext4_mkdir+0x5e0/0xdf0 [ 72.048981][ T6826] ? ext4_rmdir+0xde0/0xde0 [ 72.053488][ T6826] vfs_mkdir+0x419/0x690 [ 72.057733][ T6826] do_mkdirat+0x21e/0x280 [ 72.062056][ T6826] ? __ia32_sys_mknod+0xb0/0xb0 [ 72.066992][ T6826] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 72.072982][ T6826] ? do_syscall_64+0x21/0x7d0 [ 72.077639][ T6826] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 72.083613][ T6826] do_syscall_64+0xf6/0x7d0 [ 72.088106][ T6826] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 72.093986][ T6826] RIP: 0033:0x45bee7 [ 72.098910][ T6826] Code: Bad RIP value. [ 72.102954][ T6826] RSP: 002b:00007ffc3e0605b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 72.111354][ T6826] RAX: ffffffffffffffda RBX: 00000000000118b8 RCX: 000000000045bee7 [ 72.119315][ T6826] RDX: 00007ffc3e060603 RSI: 00000000000001ff RDI: 00007ffc3e060600 [ 72.127280][ T6826] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 [ 72.135229][ T6826] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000003 [ 72.143186][ T6826] R13: 00007ffc3e0605f0 R14: 00000000000118a4 R15: 00007ffc3e060600 2020/06/11 22:56:03 building call list... [ 72.382584][ T272] tipc: TX() has been purged, node left! executing program [ 74.249965][ T6810] can: request_module (can-proto-0) failed. [ 74.589537][ T6810] can: request_module (can-proto-0) failed. [ 74.604243][ T6810] can: request_module (can-proto-0) failed. [ 74.657910][ T29] audit: type=1400 audit(1591916165.616:9): avc: denied { create } for pid=6807 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1