INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-2,10.128.15.193' (ECDSA) to the list of known hosts. net.ipv6.conf.syz5.accept_dad = 0 net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz3.accept_dad = 0 net.ipv6.conf.syz2.accept_dad = 0 net.ipv6.conf.syz6.accept_dad = 0 net.ipv6.conf.syz1.accept_dad = 0 net.ipv6.conf.syz7.accept_dad = 0 net.ipv6.conf.syz4.accept_dad = 0 net.ipv6.conf.syz5.router_solicitations = 0 net.ipv6.conf.syz6.router_solicitations = 0 net.ipv6.conf.syz3.router_solicitations = 0 net.ipv6.conf.syz2.router_solicitations = 0 net.ipv6.conf.syz7.router_solicitations = 0 net.ipv6.conf.syz1.router_solicitations = 0 net.ipv6.conf.syz0.router_solicitations = 0 net.ipv6.conf.syz4.router_solicitations = 0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 50.288188] ------------[ cut here ]------------ [ 50.289004] WARNING: CPU: 1 PID: 5124 at kernel/kthread.c:87 free_kthread_struct+0xa2/0xe0 [ 50.290417] Kernel panic - not syncing: panic_on_warn set ... [ 50.290417] [ 50.291451] CPU: 1 PID: 5124 Comm: syzkaller953061 Not tainted 4.14.0-rc5-mm1+ #20 [ 50.292524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.293783] Call Trace: [ 50.294146] [ 50.294466] dump_stack+0x194/0x257 [ 50.294996] ? arch_local_irq_restore+0x53/0x53 [ 50.295648] ? vsnprintf+0x1ed/0x1900 [ 50.296230] panic+0x1e4/0x41c [ 50.296803] ? refcount_error_report+0x214/0x214 [ 50.297542] ? show_regs_print_info+0x65/0x65 [ 50.298185] ? __warn+0x1a9/0x1e0 [ 50.298752] ? free_kthread_struct+0xa2/0xe0 [ 50.299357] __warn+0x1c4/0x1e0 [ 50.299821] ? free_kthread_struct+0xa2/0xe0 [ 50.300436] report_bug+0x211/0x2d0 [ 50.300953] fixup_bug+0x40/0x90 [ 50.301445] do_trap+0x260/0x390 [ 50.301946] do_error_trap+0x120/0x390 [ 50.302505] ? save_stack+0xa3/0xd0 [ 50.303020] ? do_trap+0x390/0x390 [ 50.303531] ? delayed_put_task_struct+0xca/0x3d0 [ 50.304194] ? free_kthread_struct+0xa2/0xe0 [ 50.304798] ? smp_apic_timer_interrupt+0x16b/0x700 [ 50.305497] ? apic_timer_interrupt+0x9d/0xb0 [ 50.306320] ? lock_release+0x505/0xa40 [ 50.307021] ? __unlock_page_memcg+0x72/0x100 [ 50.307657] ? unlock_page_memcg+0x2c/0x40 [ 50.308256] ? page_remove_rmap+0x3b7/0xcb0 [ 50.312354] ? unmap_page_range+0xfc3/0x22e0 [ 50.316767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.321623] do_invalid_op+0x1b/0x20 [ 50.325332] invalid_op+0x18/0x20 [ 50.328776] RIP: 0010:free_kthread_struct+0xa2/0xe0 executing program [ 50.333772] RSP: 0018:ffff8801db307768 EFLAGS: 00010206 [ 50.339126] RAX: ffff8801c1b38280 RBX: ffff8801d52b8b00 RCX: ffffffff8148d7e2 [ 50.346380] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8801d52b8bb8 [ 50.353637] RBP: ffff8801db307770 R08: 0000000000000001 R09: 1ffff1003b660edc [ 50.360897] R10: ffff8801db3076a8 R11: 0000000000000002 R12: 1ffff1003b660ef0 [ 50.368156] R13: 1ffff1003b660ef4 R14: 0000000000000000 R15: ffff8801db3077e0 [ 50.375441] ? free_kthread_struct+0xa2/0xe0 [ 50.379857] ? free_kthread_struct+0xa2/0xe0 [ 50.384256] free_task+0x134/0x1a0 [ 50.387788] ? arch_release_task_struct+0x10/0x10 [ 50.392631] ? atomic_notifier_call_chain+0xb9/0x140 [ 50.397740] __put_task_struct+0x229/0x3b0 [ 50.401966] ? free_task+0x1a0/0x1a0 [ 50.405691] delayed_put_task_struct+0xca/0x3d0 [ 50.410356] ? child_wait_callback+0x210/0x210 [ 50.414930] ? file_free_rcu+0x5c/0x70 [ 50.418810] ? task_active_pid_ns+0xd0/0xd0 [ 50.423137] ? rcu_read_lock_sched_held+0x108/0x120 [ 50.428149] ? kmem_cache_free+0x249/0x280 [ 50.432373] ? put_pid+0x1f0/0x1f0 executing program [ 50.435908] ? child_wait_callback+0x210/0x210 [ 50.440489] rcu_process_callbacks+0xd74/0x17d0 [ 50.445173] ? note_gp_changes+0x650/0x650 [ 50.449397] ? print_irqtrace_events+0x270/0x270 [ 50.454142] ? perf_trace_lock+0x860/0x860 [ 50.458389] ? enqueue_hrtimer+0x162/0x490 [ 50.462620] ? __remove_hrtimer+0x190/0x190 [ 50.466947] ? check_noncircular+0x20/0x20 [ 50.471180] ? find_held_lock+0x35/0x1d0 [ 50.475259] ? lock_downgrade+0x990/0x990 [ 50.479425] ? __lock_is_held+0xb6/0x140 [ 50.483509] __do_softirq+0x2d7/0xb85 [ 50.487316] ? lock_downgrade+0x990/0x990 [ 50.491470] ? __irqentry_text_end+0x4/0x4 [ 50.495701] ? do_raw_spin_trylock+0x190/0x190 [ 50.500276] ? do_timer+0x50/0x50 [ 50.503729] ? native_apic_msr_write+0x5c/0x80 [ 50.508318] ? lapic_next_event+0x54/0x80 [ 50.512468] ? clockevents_program_event+0x108/0x2e0 [ 50.517582] ? tick_program_event+0x7f/0xd0 [ 50.521929] ? __lock_is_held+0xb6/0x140 [ 50.526022] irq_exit+0x1cc/0x200 [ 50.529472] smp_apic_timer_interrupt+0x16b/0x700 [ 50.534308] ? smp_reschedule_interrupt+0xe6/0x670 executing program executing program executing program executing program [ 50.539228] ? smp_call_function_single_interrupt+0x640/0x640 [ 50.545117] ? _raw_spin_lock+0x32/0x40 [ 50.549102] ? handle_edge_irq+0x2b4/0x7c0 [ 50.553353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.558215] apic_timer_interrupt+0x9d/0xb0 [ 50.562522] [ 50.564756] RIP: 0010:lock_release+0x505/0xa40 [ 50.569327] RSP: 0018:ffff8801bf0e6e90 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff11 [ 50.577026] RAX: dffffc0000000000 RBX: ffff8801c1b38280 RCX: 1ffff1003836715c [ 50.584286] RDX: 1ffffffff0b58f39 RSI: 0000000000000002 RDI: 0000000000000282 [ 50.591550] RBP: ffff8801bf0e6fc0 R08: 0000000000000001 R09: 1ffff10037e1cddb [ 50.598814] R10: ffff8801bf0e6e10 R11: 0000000000000001 R12: 4029b9c22318321e [ 50.606084] R13: ffff8801c1b38280 R14: ffff8801bf0e6ed8 R15: 1ffff10037e1cdd7 [ 50.613405] ? __unlock_page_memcg+0x53/0x100 [ 50.617902] ? lock_downgrade+0x990/0x990 [ 50.622057] ? PageHuge+0x15c/0x270 [ 50.625687] ? linear_hugepage_index+0x1c0/0x1c0 [ 50.630442] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 executing program executing program [ 50.636505] __unlock_page_memcg+0x72/0x100 [ 50.640827] unlock_page_memcg+0x2c/0x40 [ 50.644881] page_remove_rmap+0x3b7/0xcb0 [ 50.649029] ? page_add_file_rmap+0xa90/0xa90 [ 50.653509] ? __lock_acquire+0x6aa/0x3d50 [ 50.657746] ? do_raw_spin_trylock+0x190/0x190 [ 50.662338] ? lock_acquire+0x1d5/0x580 [ 50.666302] ? lock_acquire+0x1d5/0x580 [ 50.670267] ? unmap_page_range+0xc5d/0x22e0 [ 50.674679] ? lock_release+0xa40/0xa40 [ 50.678659] ? alloc_pages_current+0xbe/0x1e0 [ 50.683140] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 executing program [ 50.689023] ? __get_free_pages+0xf/0x40 [ 50.693079] ? _vm_normal_page+0xd5/0x200 [ 50.697228] unmap_page_range+0xfc3/0x22e0 [ 50.701461] ? trace_hardirqs_on+0xd/0x10 [ 50.705642] ? vm_normal_page_pmd+0x280/0x280 [ 50.710137] ? perf_trace_lock_acquire+0xfe/0x900 [ 50.714988] ? __might_sleep+0x95/0x190 [ 50.718967] ? check_noncircular+0x20/0x20 [ 50.723201] ? perf_trace_lock+0x860/0x860 [ 50.727428] ? call_srcu+0x10/0x10 [ 50.730959] ? trace_raw_output_rcu_utilization+0xb0/0xb0 executing program executing program [ 50.736512] ? synchronize_srcu+0x3bf/0x560 [ 50.740845] ? find_held_lock+0x35/0x1d0 [ 50.744917] ? __mmu_notifier_invalidate_range_start+0x209/0x2d0 [ 50.751054] ? lock_downgrade+0x990/0x990 [ 50.755198] ? lock_release+0xa40/0xa40 [ 50.759184] ? __mmu_notifier_release+0x357/0x690 [ 50.764022] ? uprobe_munmap+0x127/0x430 [ 50.768087] ? uprobe_mmap+0xc90/0xc90 [ 50.771963] ? __mmu_notifier_invalidate_range_end+0x360/0x360 [ 50.777929] ? mmu_notifier_unregister+0x5c0/0x5c0 [ 50.782869] unmap_single_vma+0x15f/0x2d0 executing program [ 50.787013] unmap_vmas+0xf1/0x1b0 [ 50.790551] exit_mmap+0x232/0x530 [ 50.794082] ? SyS_munmap+0x30/0x30 [ 50.797701] ? __khugepaged_exit+0x42f/0x640 [ 50.802136] ? __might_sleep+0x95/0x190 [ 50.806117] mmput+0x223/0x6c0 [ 50.809305] ? get_task_exe_file+0xc0/0xc0 [ 50.813537] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 50.818365] ? do_exit+0x8f4/0x1ad0 [ 50.821985] ? lock_downgrade+0x990/0x990 [ 50.826131] ? do_raw_spin_trylock+0x190/0x190 [ 50.830701] ? down_read+0x96/0x150 [ 50.834309] ? do_exit+0x4ad/0x1ad0 executing program executing program [ 50.837927] ? __down_interruptible+0x6b0/0x6b0 [ 50.842586] ? trace_hardirqs_on+0xd/0x10 [ 50.846719] ? _raw_spin_unlock_irq+0x27/0x70 [ 50.851230] do_exit+0x904/0x1ad0 [ 50.854687] ? hrtimer_try_to_cancel+0x91/0x5c0 [ 50.859346] ? mm_update_next_owner+0x930/0x930 [ 50.863998] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 50.868925] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 50.874803] ? check_noncircular+0x20/0x20 [ 50.879029] ? rcu_note_context_switch+0x710/0x710 [ 50.883947] ? __might_sleep+0x95/0x190 executing program [ 50.887912] ? do_nanosleep+0x4f9/0x6e0 [ 50.891889] ? schedule_timeout_idle+0x90/0x90 [ 50.896494] ? memset+0x31/0x40 [ 50.899867] ? hrtimer_nanosleep+0x2cc/0x860 [ 50.904277] ? nanosleep_copyout+0x100/0x100 [ 50.908672] ? __might_sleep+0x95/0x190 [ 50.912648] ? kasan_check_write+0x14/0x20 [ 50.916893] ? _copy_from_user+0x99/0x110 [ 50.921043] ? __hrtimer_init+0x140/0x140 [ 50.925193] do_group_exit+0x149/0x400 [ 50.929077] ? SyS_exit+0x30/0x30 [ 50.933037] ? trace_hardirqs_on_caller+0x421/0x5c0 executing program [ 50.938047] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 50.942806] SyS_exit_group+0x1d/0x20 [ 50.946600] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 50.951342] RIP: 0033:0x44c739 [ 50.954513] RSP: 002b:00007fff2443dde8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 50.962209] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000044c739 [ 50.969463] RDX: 000000000044adc1 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.976718] RBP: 0000000000000082 R08: 00000000006dd1c0 R09: 0000000000000000 [ 50.983973] R10: 00000000006dd144 R11: 0000000000000206 R12: 0000000000000000 [ 50.991233] R13: 00007fff2443dd8f R14: 00007f9780f1f9c0 R15: 0000000000000000 [ 50.999138] Dumping ftrace buffer: [ 51.002724] (ftrace buffer empty) [ 51.006405] Kernel Offset: disabled [ 51.010002] Rebooting in 86400 seconds..