[ 65.147790][ T27] audit: type=1800 audit(1583936651.482:25): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.187012][ T27] audit: type=1800 audit(1583936651.482:26): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.215748][ T27] audit: type=1800 audit(1583936651.482:27): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 65.259670][ T27] audit: type=1800 audit(1583936651.482:28): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. 2020/03/11 14:24:21 fuzzer started syzkaller login: [ 75.124888][ T8894] check_preemption_disabled: 2 callbacks suppressed [ 75.124902][ T8894] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8894 [ 75.140675][ T8894] caller is __mod_memcg_state+0x27/0x1a0 [ 75.146352][ T8894] CPU: 1 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 75.155900][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.166052][ T8894] Call Trace: [ 75.169353][ T8894] dump_stack+0x188/0x20d [ 75.173694][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 75.179541][ T8894] __mod_memcg_state+0x27/0x1a0 [ 75.184397][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 75.190036][ T8894] ? mark_held_locks+0xe0/0xe0 [ 75.194933][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.199797][ T8894] ? can_split_huge_page+0x480/0x480 [ 75.206154][ T8894] ? pmd_val+0x7c/0xf0 [ 75.210663][ T8894] ? pmd_pfn+0x125/0x1c0 [ 75.214921][ T8894] ? enabled_store+0x190/0x190 [ 75.219702][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 75.225315][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 75.230962][ T8894] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 75.237000][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 75.243896][ T8894] __walk_page_range+0xcfb/0x2070 [ 75.248953][ T8894] ? walk_page_test+0x78/0x180 [ 75.253843][ T8894] walk_page_range+0x1bd/0x3a0 [ 75.258983][ T8894] ? __walk_page_range+0x2070/0x2070 [ 75.264286][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 75.269945][ T8894] madvise_free_single_vma+0x384/0x550 [ 75.275409][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 75.280870][ T8894] ? lock_acquire+0x197/0x420 [ 75.285561][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 75.290675][ T8894] ? vmacache_find+0x62/0x300 [ 75.295525][ T8894] ? find_vma+0x2b/0x170 [ 75.299774][ T8894] do_madvise+0x5ba/0x1b80 [ 75.304187][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.309045][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 75.314765][ T8894] ? ktime_get+0x1f8/0x2f0 [ 75.319217][ T8894] ? __x64_sys_futex+0x376/0x4f0 [ 75.324171][ T8894] ? switch_fpu_return+0x1db/0x4b0 [ 75.329300][ T8894] ? fpregs_mark_activate+0x320/0x320 [ 75.334709][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 75.339764][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 75.345255][ T8894] __x64_sys_madvise+0xae/0x120 [ 75.353942][ T8894] do_syscall_64+0xf6/0x7d0 [ 75.358719][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.364608][ T8894] RIP: 0033:0x460bf7 [ 75.368514][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 75.388118][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 75.396614][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 75.404690][ T8894] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 75.412772][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000200000 R09: 000000c0002a4000 [ 75.420743][ T8894] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000fb [ 75.428796][ T8894] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 75.437070][ T8894] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8894 [ 75.446119][ T8894] caller is __mod_memcg_state+0xca/0x1a0 [ 75.451807][ T8894] CPU: 1 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 75.461252][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.471302][ T8894] Call Trace: [ 75.474633][ T8894] dump_stack+0x188/0x20d [ 75.478998][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 75.485099][ T8894] __mod_memcg_state+0xca/0x1a0 [ 75.489991][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 75.495748][ T8894] ? mark_held_locks+0xe0/0xe0 [ 75.500614][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.505906][ T8894] ? can_split_huge_page+0x480/0x480 [ 75.511363][ T8894] ? pmd_val+0x7c/0xf0 [ 75.515446][ T8894] ? pmd_pfn+0x125/0x1c0 [ 75.519699][ T8894] ? enabled_store+0x190/0x190 [ 75.524496][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 75.529890][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 75.535556][ T8894] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 75.541369][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 75.548047][ T8894] __walk_page_range+0xcfb/0x2070 [ 75.553086][ T8894] ? walk_page_test+0x78/0x180 [ 75.557852][ T8894] walk_page_range+0x1bd/0x3a0 [ 75.562616][ T8894] ? __walk_page_range+0x2070/0x2070 [ 75.567909][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 75.573634][ T8894] madvise_free_single_vma+0x384/0x550 [ 75.579136][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 75.584095][ T8894] ? lock_acquire+0x197/0x420 [ 75.588778][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 75.594041][ T8894] ? vmacache_find+0x62/0x300 [ 75.598847][ T8894] ? find_vma+0x2b/0x170 [ 75.603099][ T8894] do_madvise+0x5ba/0x1b80 [ 75.607543][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.612410][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 75.618126][ T8894] ? ktime_get+0x1f8/0x2f0 [ 75.622548][ T8894] ? __x64_sys_futex+0x376/0x4f0 [ 75.627491][ T8894] ? switch_fpu_return+0x1db/0x4b0 [ 75.632609][ T8894] ? fpregs_mark_activate+0x320/0x320 [ 75.637984][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 75.643017][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 75.648215][ T8894] __x64_sys_madvise+0xae/0x120 [ 75.653078][ T8894] do_syscall_64+0xf6/0x7d0 [ 75.657585][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.663493][ T8894] RIP: 0033:0x460bf7 [ 75.667404][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 75.687546][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 75.695965][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 75.703943][ T8894] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 75.712000][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000200000 R09: 000000c0002a4000 [ 75.719985][ T8894] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000fb [ 75.728047][ T8894] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 75.736127][ T8894] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8894 [ 75.745220][ T8894] caller is __mod_memcg_state+0x87/0x1a0 [ 75.750914][ T8894] CPU: 1 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 75.761053][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.771203][ T8894] Call Trace: [ 75.774528][ T8894] dump_stack+0x188/0x20d [ 75.778908][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 75.784761][ T8894] __mod_memcg_state+0x87/0x1a0 [ 75.789659][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 75.795335][ T8894] ? mark_held_locks+0xe0/0xe0 [ 75.800119][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.804995][ T8894] ? can_split_huge_page+0x480/0x480 [ 75.810296][ T8894] ? pmd_val+0x7c/0xf0 [ 75.814408][ T8894] ? pmd_pfn+0x125/0x1c0 [ 75.818701][ T8894] ? enabled_store+0x190/0x190 [ 75.823510][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 75.828835][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 75.834320][ T8894] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 75.840178][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 75.847041][ T8894] __walk_page_range+0xcfb/0x2070 [ 75.852138][ T8894] ? walk_page_test+0x78/0x180 [ 75.858432][ T8894] walk_page_range+0x1bd/0x3a0 [ 75.863293][ T8894] ? __walk_page_range+0x2070/0x2070 [ 75.869454][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 75.875264][ T8894] madvise_free_single_vma+0x384/0x550 [ 75.880741][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 75.885689][ T8894] ? lock_acquire+0x197/0x420 [ 75.890374][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 75.895490][ T8894] ? vmacache_find+0x62/0x300 [ 75.900190][ T8894] ? find_vma+0x2b/0x170 [ 75.904434][ T8894] do_madvise+0x5ba/0x1b80 [ 75.908936][ T8894] ? lock_downgrade+0x7f0/0x7f0 [ 75.913836][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 75.919759][ T8894] ? ktime_get+0x1f8/0x2f0 [ 75.924199][ T8894] ? __x64_sys_futex+0x376/0x4f0 [ 75.929146][ T8894] ? switch_fpu_return+0x1db/0x4b0 [ 75.934288][ T8894] ? fpregs_mark_activate+0x320/0x320 [ 75.939682][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 75.944704][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 75.949727][ T8894] __x64_sys_madvise+0xae/0x120 [ 75.954613][ T8894] do_syscall_64+0xf6/0x7d0 [ 75.959138][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.965038][ T8894] RIP: 0033:0x460bf7 [ 75.968942][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 75.988554][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 75.996968][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.004934][ T8894] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 76.013187][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000200000 R09: 000000c0002a4000 [ 76.021165][ T8894] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000fb [ 76.029345][ T8894] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 76.044247][ T8894] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8894 [ 76.053264][ T8894] caller is __mod_memcg_state+0x27/0x1a0 [ 76.058965][ T8894] CPU: 0 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 76.068417][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.078569][ T8894] Call Trace: [ 76.081994][ T8894] dump_stack+0x188/0x20d [ 76.086372][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 76.092224][ T8894] __mod_memcg_state+0x27/0x1a0 [ 76.097084][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 76.102845][ T8894] ? mark_held_locks+0xe0/0xe0 [ 76.107661][ T8894] ? can_split_huge_page+0x480/0x480 [ 76.113048][ T8894] ? pmd_val+0x7c/0xf0 [ 76.117161][ T8894] ? pmd_pfn+0x125/0x1c0 [ 76.121406][ T8894] ? enabled_store+0x190/0x190 [ 76.126617][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 76.131924][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 76.137640][ T8894] ? kmem_cache_free+0x7f/0x320 [ 76.142489][ T8894] ? do_madvise+0xbb3/0x1b80 [ 76.147073][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.152103][ T8894] ? mem_cgroup_uncharge+0xf0/0xf0 [ 76.157226][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 76.163922][ T8894] __walk_page_range+0xcfb/0x2070 [ 76.168967][ T8894] ? walk_page_test+0x78/0x180 [ 76.173735][ T8894] walk_page_range+0x1bd/0x3a0 [ 76.178494][ T8894] ? __walk_page_range+0x2070/0x2070 [ 76.183781][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 76.189431][ T8894] madvise_free_single_vma+0x384/0x550 [ 76.194889][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 76.199856][ T8894] ? lock_acquire+0x197/0x420 [ 76.204552][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 76.209692][ T8894] ? vmacache_find+0x62/0x300 [ 76.214496][ T8894] ? vmacache_update+0xce/0x140 [ 76.219379][ T8894] ? find_vma+0x2b/0x170 [ 76.223645][ T8894] do_madvise+0x5ba/0x1b80 [ 76.228168][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 76.233892][ T8894] ? up_read+0x1a8/0x750 [ 76.238241][ T8894] ? handle_mm_fault+0x29e/0x660 [ 76.243178][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.248207][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 76.253314][ T8894] __x64_sys_madvise+0xae/0x120 [ 76.258187][ T8894] do_syscall_64+0xf6/0x7d0 [ 76.262702][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.268632][ T8894] RIP: 0033:0x460bf7 [ 76.272594][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 76.292398][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.301013][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.308985][ T8894] RDX: 0000000000000008 RSI: 000000000007e000 RDI: 000000c000140000 [ 76.317040][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000000000 R09: 000000c0001be000 [ 76.325003][ T8894] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000040 [ 76.332968][ T8894] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 [ 76.341079][ T8894] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8894 [ 76.350010][ T8894] caller is __mod_memcg_state+0xca/0x1a0 [ 76.355642][ T8894] CPU: 0 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 76.365188][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.375242][ T8894] Call Trace: [ 76.378537][ T8894] dump_stack+0x188/0x20d [ 76.382873][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 76.388679][ T8894] __mod_memcg_state+0xca/0x1a0 [ 76.393532][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 76.399637][ T8894] ? mark_held_locks+0xe0/0xe0 [ 76.404598][ T8894] ? can_split_huge_page+0x480/0x480 [ 76.409969][ T8894] ? pmd_val+0x7c/0xf0 [ 76.414042][ T8894] ? pmd_pfn+0x125/0x1c0 [ 76.418311][ T8894] ? enabled_store+0x190/0x190 [ 76.423279][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 76.428607][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 76.434201][ T8894] ? kmem_cache_free+0x7f/0x320 [ 76.439504][ T8894] ? do_madvise+0xbb3/0x1b80 [ 76.444117][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.449146][ T8894] ? mem_cgroup_uncharge+0xf0/0xf0 [ 76.454349][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 76.461031][ T8894] __walk_page_range+0xcfb/0x2070 [ 76.466076][ T8894] ? walk_page_test+0x78/0x180 [ 76.471027][ T8894] walk_page_range+0x1bd/0x3a0 [ 76.476617][ T8894] ? __walk_page_range+0x2070/0x2070 [ 76.481916][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 76.488260][ T8894] madvise_free_single_vma+0x384/0x550 [ 76.493726][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 76.498705][ T8894] ? lock_acquire+0x197/0x420 [ 76.503382][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 76.508516][ T8894] ? vmacache_find+0x62/0x300 [ 76.513230][ T8894] ? vmacache_update+0xce/0x140 [ 76.518101][ T8894] ? find_vma+0x2b/0x170 [ 76.522357][ T8894] do_madvise+0x5ba/0x1b80 [ 76.528181][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 76.533903][ T8894] ? up_read+0x1a8/0x750 [ 76.538752][ T8894] ? handle_mm_fault+0x29e/0x660 [ 76.543720][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.549226][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 76.555389][ T8894] __x64_sys_madvise+0xae/0x120 [ 76.560246][ T8894] do_syscall_64+0xf6/0x7d0 [ 76.565152][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.571302][ T8894] RIP: 0033:0x460bf7 [ 76.575455][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 76.595642][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.604167][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.612412][ T8894] RDX: 0000000000000008 RSI: 000000000007e000 RDI: 000000c000140000 [ 76.620488][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000000000 R09: 000000c0001be000 [ 76.628616][ T8894] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000040 [ 76.636852][ T8894] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 [ 76.645245][ T8894] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8894 [ 76.654431][ T8894] caller is __mod_memcg_state+0x87/0x1a0 [ 76.660550][ T8894] CPU: 0 PID: 8894 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 76.670414][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.681327][ T8894] Call Trace: [ 76.684661][ T8894] dump_stack+0x188/0x20d [ 76.689013][ T8894] __this_cpu_preempt_check.cold+0x84/0x90 [ 76.694823][ T8894] __mod_memcg_state+0x87/0x1a0 [ 76.699793][ T8894] split_huge_page_to_list+0x124b/0x3380 [ 76.705545][ T8894] ? mark_held_locks+0xe0/0xe0 [ 76.710331][ T8894] ? can_split_huge_page+0x480/0x480 [ 76.715987][ T8894] ? pmd_val+0x7c/0xf0 [ 76.720083][ T8894] ? pmd_pfn+0x125/0x1c0 [ 76.724389][ T8894] ? enabled_store+0x190/0x190 [ 76.729161][ T8894] madvise_free_huge_pmd+0x873/0xb90 [ 76.734675][ T8894] madvise_free_pte_range+0x6ff/0x2650 [ 76.740162][ T8894] ? kmem_cache_free+0x7f/0x320 [ 76.745061][ T8894] ? do_madvise+0xbb3/0x1b80 [ 76.749667][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.754691][ T8894] ? mem_cgroup_uncharge+0xf0/0xf0 [ 76.759804][ T8894] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 76.766590][ T8894] __walk_page_range+0xcfb/0x2070 [ 76.771625][ T8894] ? walk_page_test+0x78/0x180 [ 76.776388][ T8894] walk_page_range+0x1bd/0x3a0 [ 76.781256][ T8894] ? __walk_page_range+0x2070/0x2070 [ 76.786545][ T8894] ? madvise_free_single_vma+0x2c1/0x550 [ 76.792344][ T8894] madvise_free_single_vma+0x384/0x550 [ 76.797825][ T8894] ? madvise_pageout+0x3b0/0x3b0 [ 76.802882][ T8894] ? lock_acquire+0x197/0x420 [ 76.807566][ T8894] ? userfaultfd_remove+0xf0/0x2b0 [ 76.812783][ T8894] ? vmacache_find+0x62/0x300 [ 76.817488][ T8894] ? vmacache_update+0xce/0x140 [ 76.822400][ T8894] ? find_vma+0x2b/0x170 [ 76.826743][ T8894] do_madvise+0x5ba/0x1b80 [ 76.831178][ T8894] ? madvise_free_pte_range+0x2650/0x2650 [ 76.836991][ T8894] ? up_read+0x1a8/0x750 [ 76.841246][ T8894] ? handle_mm_fault+0x29e/0x660 [ 76.846186][ T8894] ? __x64_sys_madvise+0xae/0x120 [ 76.851226][ T8894] ? trace_hardirqs_on+0x55/0x220 [ 76.856272][ T8894] __x64_sys_madvise+0xae/0x120 [ 76.861141][ T8894] do_syscall_64+0xf6/0x7d0 [ 76.865850][ T8894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.871752][ T8894] RIP: 0033:0x460bf7 [ 76.875657][ T8894] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 76.895436][ T8894] RSP: 002b:00007ffedf1a4000 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.903847][ T8894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.911991][ T8894] RDX: 0000000000000008 RSI: 000000000007e000 RDI: 000000c000140000 [ 76.919973][ T8894] RBP: 00007ffedf1a4040 R08: 000000c000000000 R09: 000000c0001be000 [ 76.927952][ T8894] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000040 [ 76.936044][ T8894] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 2020/03/11 14:24:24 connecting to host at 10.128.0.26:36819 2020/03/11 14:24:24 checking machine... 2020/03/11 14:24:24 checking revisions... 2020/03/11 14:24:24 testing simple program... [ 78.701504][ T8913] IPVS: ftp: loaded support on port[0] = 21 2020/03/11 14:24:25 building call list... [ 78.922790][ T8902] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8902 [ 78.931941][ T8902] caller is __mod_memcg_state+0x27/0x1a0 [ 78.937599][ T8902] CPU: 1 PID: 8902 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 78.947047][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.957087][ T8902] Call Trace: [ 78.960489][ T8902] dump_stack+0x188/0x20d [ 78.964815][ T8902] __this_cpu_preempt_check.cold+0x84/0x90 [ 78.970816][ T8902] __mod_memcg_state+0x27/0x1a0 [ 78.975669][ T8902] split_huge_page_to_list+0x124b/0x3380 [ 78.981297][ T8902] ? mark_held_locks+0xe0/0xe0 [ 78.986047][ T8902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.991507][ T8902] ? can_split_huge_page+0x480/0x480 [ 78.996793][ T8902] ? pmd_val+0x7c/0xf0 [ 79.002024][ T8902] ? pmd_pfn+0x125/0x1c0 [ 79.006260][ T8902] ? enabled_store+0x190/0x190 [ 79.011038][ T8902] madvise_free_huge_pmd+0x873/0xb90 [ 79.016318][ T8902] madvise_free_pte_range+0x6ff/0x2650 [ 79.021967][ T8902] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 79.028623][ T8902] __walk_page_range+0xcfb/0x2070 [ 79.033637][ T8902] ? walk_page_test+0x78/0x180 [ 79.038573][ T8902] walk_page_range+0x1bd/0x3a0 [ 79.043413][ T8902] ? __walk_page_range+0x2070/0x2070 [ 79.048692][ T8902] ? madvise_free_single_vma+0x2c1/0x550 [ 79.054309][ T8902] madvise_free_single_vma+0x384/0x550 [ 79.059780][ T8902] ? madvise_pageout+0x3b0/0x3b0 [ 79.064723][ T8902] ? lock_acquire+0x197/0x420 [ 79.069392][ T8902] ? userfaultfd_remove+0xf0/0x2b0 [ 79.074517][ T8902] ? vmacache_find+0x62/0x300 [ 79.079188][ T8902] ? find_vma+0x2b/0x170 [ 79.083418][ T8902] do_madvise+0x5ba/0x1b80 [ 79.087834][ T8902] ? unuse_pde+0x2c/0x80 [ 79.092079][ T8902] ? madvise_free_pte_range+0x2650/0x2650 [ 79.098011][ T8902] ? __x64_sys_futex+0x376/0x4f0 [ 79.102961][ T8902] ? fput_many+0x2f/0x1a0 [ 79.107286][ T8902] ? do_futex+0x1b10/0x1b10 [ 79.111781][ T8902] ? ksys_read+0x19f/0x250 [ 79.116195][ T8902] ? kernel_write+0x120/0x120 [ 79.120867][ T8902] ? __x64_sys_madvise+0xae/0x120 [ 79.125917][ T8902] ? trace_hardirqs_on+0x55/0x220 [ 79.130935][ T8902] __x64_sys_madvise+0xae/0x120 [ 79.135771][ T8902] do_syscall_64+0xf6/0x7d0 [ 79.140274][ T8902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.146415][ T8902] RIP: 0033:0x460bf7 [ 79.150394][ T8902] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 79.170035][ T8902] RSP: 002b:000000c0000e3c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 79.178444][ T8902] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 79.186509][ T8902] RDX: 0000000000000008 RSI: 0000000000070000 RDI: 000000c0003c4000 [ 79.194477][ T8902] RBP: 000000c0000e3c90 R08: 000000c000200000 R09: 000000c000434000 [ 79.202446][ T8902] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 79.210400][ T8902] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 79.218454][ T8902] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8902 [ 79.227490][ T8902] caller is __mod_memcg_state+0xca/0x1a0 [ 79.233527][ T8902] CPU: 1 PID: 8902 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 79.242965][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.253017][ T8902] Call Trace: [ 79.256310][ T8902] dump_stack+0x188/0x20d [ 79.260629][ T8902] __this_cpu_preempt_check.cold+0x84/0x90 [ 79.266437][ T8902] __mod_memcg_state+0xca/0x1a0 [ 79.271304][ T8902] split_huge_page_to_list+0x124b/0x3380 [ 79.276940][ T8902] ? mark_held_locks+0xe0/0xe0 [ 79.281701][ T8902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 79.287152][ T8902] ? can_split_huge_page+0x480/0x480 [ 79.292422][ T8902] ? pmd_val+0x7c/0xf0 [ 79.296469][ T8902] ? pmd_pfn+0x125/0x1c0 [ 79.300774][ T8902] ? enabled_store+0x190/0x190 [ 79.305542][ T8902] madvise_free_huge_pmd+0x873/0xb90 [ 79.310936][ T8902] madvise_free_pte_range+0x6ff/0x2650 [ 79.316411][ T8902] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 79.323344][ T8902] __walk_page_range+0xcfb/0x2070 [ 79.328370][ T8902] ? walk_page_test+0x78/0x180 [ 79.333127][ T8902] walk_page_range+0x1bd/0x3a0 [ 79.337878][ T8902] ? __walk_page_range+0x2070/0x2070 [ 79.343273][ T8902] ? madvise_free_single_vma+0x2c1/0x550 [ 79.348903][ T8902] madvise_free_single_vma+0x384/0x550 [ 79.354562][ T8902] ? madvise_pageout+0x3b0/0x3b0 [ 79.359505][ T8902] ? lock_acquire+0x197/0x420 [ 79.364264][ T8902] ? userfaultfd_remove+0xf0/0x2b0 [ 79.369373][ T8902] ? vmacache_find+0x62/0x300 [ 79.374033][ T8902] ? find_vma+0x2b/0x170 [ 79.378288][ T8902] do_madvise+0x5ba/0x1b80 [ 79.382707][ T8902] ? unuse_pde+0x2c/0x80 [ 79.386955][ T8902] ? madvise_free_pte_range+0x2650/0x2650 [ 79.392668][ T8902] ? __x64_sys_futex+0x376/0x4f0 [ 79.397731][ T8902] ? fput_many+0x2f/0x1a0 [ 79.402150][ T8902] ? do_futex+0x1b10/0x1b10 [ 79.406665][ T8902] ? ksys_read+0x19f/0x250 [ 79.411070][ T8902] ? kernel_write+0x120/0x120 [ 79.415735][ T8902] ? __x64_sys_madvise+0xae/0x120 [ 79.420899][ T8902] ? trace_hardirqs_on+0x55/0x220 [ 79.426311][ T8902] __x64_sys_madvise+0xae/0x120 [ 79.431220][ T8902] do_syscall_64+0xf6/0x7d0 [ 79.435794][ T8902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.441964][ T8902] RIP: 0033:0x460bf7 [ 79.446180][ T8902] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 79.466392][ T8902] RSP: 002b:000000c0000e3c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 79.474799][ T8902] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 79.482985][ T8902] RDX: 0000000000000008 RSI: 0000000000070000 RDI: 000000c0003c4000 [ 79.491429][ T8902] RBP: 000000c0000e3c90 R08: 000000c000200000 R09: 000000c000434000 [ 79.499708][ T8902] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 79.507764][ T8902] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 79.515890][ T8902] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8902 [ 79.525011][ T8902] caller is __mod_memcg_state+0x87/0x1a0 [ 79.530823][ T8902] CPU: 1 PID: 8902 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 79.540277][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.550483][ T8902] Call Trace: [ 79.553954][ T8902] dump_stack+0x188/0x20d [ 79.558994][ T8902] __this_cpu_preempt_check.cold+0x84/0x90 [ 79.564822][ T8902] __mod_memcg_state+0x87/0x1a0 [ 79.569872][ T8902] split_huge_page_to_list+0x124b/0x3380 [ 79.575996][ T8902] ? mark_held_locks+0xe0/0xe0 [ 79.580967][ T8902] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 79.586784][ T8902] ? can_split_huge_page+0x480/0x480 [ 79.592187][ T8902] ? pmd_val+0x7c/0xf0 [ 79.596277][ T8902] ? pmd_pfn+0x125/0x1c0 [ 79.600547][ T8902] ? enabled_store+0x190/0x190 [ 79.605442][ T8902] madvise_free_huge_pmd+0x873/0xb90 [ 79.610785][ T8902] madvise_free_pte_range+0x6ff/0x2650 [ 79.616363][ T8902] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 79.623243][ T8902] __walk_page_range+0xcfb/0x2070 [ 79.628286][ T8902] ? walk_page_test+0x78/0x180 [ 79.633059][ T8902] walk_page_range+0x1bd/0x3a0 [ 79.637817][ T8902] ? __walk_page_range+0x2070/0x2070 [ 79.643100][ T8902] ? madvise_free_single_vma+0x2c1/0x550 [ 79.648942][ T8902] madvise_free_single_vma+0x384/0x550 [ 79.654542][ T8902] ? madvise_pageout+0x3b0/0x3b0 [ 79.659568][ T8902] ? lock_acquire+0x197/0x420 [ 79.664246][ T8902] ? userfaultfd_remove+0xf0/0x2b0 [ 79.669377][ T8902] ? vmacache_find+0x62/0x300 [ 79.674135][ T8902] ? find_vma+0x2b/0x170 [ 79.678450][ T8902] do_madvise+0x5ba/0x1b80 [ 79.682882][ T8902] ? unuse_pde+0x2c/0x80 [ 79.687122][ T8902] ? madvise_free_pte_range+0x2650/0x2650 [ 79.692925][ T8902] ? __x64_sys_futex+0x376/0x4f0 [ 79.697846][ T8902] ? fput_many+0x2f/0x1a0 [ 79.702170][ T8902] ? do_futex+0x1b10/0x1b10 [ 79.706650][ T8902] ? ksys_read+0x19f/0x250 [ 79.711196][ T8902] ? kernel_write+0x120/0x120 [ 79.715870][ T8902] ? __x64_sys_madvise+0xae/0x120 [ 79.720893][ T8902] ? trace_hardirqs_on+0x55/0x220 [ 79.725938][ T8902] __x64_sys_madvise+0xae/0x120 [ 79.730878][ T8902] do_syscall_64+0xf6/0x7d0 [ 79.735686][ T8902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.742619][ T8902] RIP: 0033:0x460bf7 [ 79.746518][ T8902] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 79.766393][ T8902] RSP: 002b:000000c0000e3c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 79.776822][ T8902] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 79.784795][ T8902] RDX: 0000000000000008 RSI: 0000000000070000 RDI: 000000c0003c4000 [ 79.793239][ T8902] RBP: 000000c0000e3c90 R08: 000000c000200000 R09: 000000c000434000 [ 79.801518][ T8902] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 79.809738][ T8902] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 79.947005][ T21] tipc: TX() has been purged, node left! [ 80.537359][ T8904] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8904 [ 80.546352][ T8904] caller is __mod_memcg_state+0x27/0x1a0 [ 80.552780][ T8904] CPU: 1 PID: 8904 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 80.562331][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.572829][ T8904] Call Trace: [ 80.576117][ T8904] dump_stack+0x188/0x20d [ 80.580562][ T8904] __this_cpu_preempt_check.cold+0x84/0x90 [ 80.586960][ T8904] __mod_memcg_state+0x27/0x1a0 [ 80.591817][ T8904] split_huge_page_to_list+0x124b/0x3380 [ 80.597567][ T8904] ? mark_held_locks+0xe0/0xe0 [ 80.602326][ T8904] ? release_pages+0x656/0x19b0 [ 80.607294][ T8904] ? can_split_huge_page+0x480/0x480 [ 80.612570][ T8904] ? pmd_val+0x7c/0xf0 [ 80.616866][ T8904] ? pmd_pfn+0x125/0x1c0 [ 80.624682][ T8904] ? enabled_store+0x190/0x190 [ 80.629467][ T8904] madvise_free_huge_pmd+0x873/0xb90 [ 80.634868][ T8904] madvise_free_pte_range+0x6ff/0x2650 [ 80.640335][ T8904] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 80.647159][ T8904] __walk_page_range+0xcfb/0x2070 [ 80.652350][ T8904] ? walk_page_test+0x78/0x180 [ 80.657142][ T8904] walk_page_range+0x1bd/0x3a0 [ 80.662056][ T8904] ? __walk_page_range+0x2070/0x2070 [ 80.667352][ T8904] ? madvise_free_single_vma+0x2c1/0x550 [ 80.673307][ T8904] madvise_free_single_vma+0x384/0x550 [ 80.679084][ T8904] ? madvise_pageout+0x3b0/0x3b0 [ 80.684455][ T8904] ? lock_acquire+0x197/0x420 [ 80.689584][ T8904] ? userfaultfd_remove+0xf0/0x2b0 [ 80.694987][ T8904] ? vmacache_find+0x62/0x300 [ 80.700003][ T8904] ? vmacache_update+0xce/0x140 [ 80.705001][ T8904] ? find_vma+0x2b/0x170 [ 80.709254][ T8904] do_madvise+0x5ba/0x1b80 [ 80.713718][ T8904] ? unuse_pde+0x2c/0x80 [ 80.717953][ T8904] ? madvise_free_pte_range+0x2650/0x2650 [ 80.723822][ T8904] ? __x64_sys_futex+0x376/0x4f0 [ 80.728867][ T8904] ? fput_many+0x2f/0x1a0 [ 80.733332][ T8904] ? do_futex+0x1b10/0x1b10 [ 80.737838][ T8904] ? ksys_read+0x19f/0x250 [ 80.742282][ T8904] ? kernel_write+0x120/0x120 [ 80.746982][ T8904] ? __x64_sys_madvise+0xae/0x120 [ 80.752034][ T8904] ? trace_hardirqs_on+0x55/0x220 [ 80.757060][ T8904] __x64_sys_madvise+0xae/0x120 [ 80.762018][ T8904] do_syscall_64+0xf6/0x7d0 [ 80.775346][ T8904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.781257][ T8904] RIP: 0033:0x460bf7 [ 80.785134][ T8904] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 80.804821][ T8904] RSP: 002b:000000c0000e7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 80.813250][ T8904] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 80.821210][ T8904] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005b4000 [ 80.829166][ T8904] RBP: 000000c0000e7c90 R08: 000000c000400000 R09: 000000c0007b4000 [ 80.837476][ T8904] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 80.845456][ T8904] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 [ 80.853678][ T8904] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8904 [ 80.864950][ T8904] caller is __mod_memcg_state+0xca/0x1a0 [ 80.870733][ T8904] CPU: 1 PID: 8904 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 80.880199][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.890270][ T8904] Call Trace: [ 80.893682][ T8904] dump_stack+0x188/0x20d [ 80.898359][ T8904] __this_cpu_preempt_check.cold+0x84/0x90 [ 80.904192][ T8904] __mod_memcg_state+0xca/0x1a0 [ 80.909147][ T8904] split_huge_page_to_list+0x124b/0x3380 [ 80.914773][ T8904] ? mark_held_locks+0xe0/0xe0 [ 80.919538][ T8904] ? release_pages+0x656/0x19b0 [ 80.924382][ T8904] ? can_split_huge_page+0x480/0x480 [ 80.929670][ T8904] ? pmd_val+0x7c/0xf0 [ 80.933738][ T8904] ? pmd_pfn+0x125/0x1c0 [ 80.937977][ T8904] ? enabled_store+0x190/0x190 [ 80.942728][ T8904] madvise_free_huge_pmd+0x873/0xb90 [ 80.948017][ T8904] madvise_free_pte_range+0x6ff/0x2650 [ 80.953604][ T8904] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 80.960293][ T8904] __walk_page_range+0xcfb/0x2070 [ 80.965314][ T8904] ? walk_page_test+0x78/0x180 [ 80.970281][ T8904] walk_page_range+0x1bd/0x3a0 [ 80.975262][ T8904] ? __walk_page_range+0x2070/0x2070 [ 80.980876][ T8904] ? madvise_free_single_vma+0x2c1/0x550 [ 80.986533][ T8904] madvise_free_single_vma+0x384/0x550 [ 80.992016][ T8904] ? madvise_pageout+0x3b0/0x3b0 [ 80.996954][ T8904] ? lock_acquire+0x197/0x420 [ 81.001658][ T8904] ? userfaultfd_remove+0xf0/0x2b0 [ 81.007083][ T8904] ? vmacache_find+0x62/0x300 [ 81.011921][ T8904] ? vmacache_update+0xce/0x140 [ 81.017562][ T8904] ? find_vma+0x2b/0x170 [ 81.022196][ T8904] do_madvise+0x5ba/0x1b80 [ 81.026781][ T8904] ? unuse_pde+0x2c/0x80 [ 81.031045][ T8904] ? madvise_free_pte_range+0x2650/0x2650 [ 81.036755][ T8904] ? __x64_sys_futex+0x376/0x4f0 [ 81.042435][ T8904] ? fput_many+0x2f/0x1a0 [ 81.047319][ T8904] ? do_futex+0x1b10/0x1b10 [ 81.052036][ T8904] ? ksys_read+0x19f/0x250 [ 81.056452][ T8904] ? kernel_write+0x120/0x120 [ 81.061121][ T8904] ? __x64_sys_madvise+0xae/0x120 [ 81.066505][ T8904] ? trace_hardirqs_on+0x55/0x220 [ 81.071628][ T8904] __x64_sys_madvise+0xae/0x120 [ 81.077007][ T8904] do_syscall_64+0xf6/0x7d0 [ 81.081501][ T8904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.087585][ T8904] RIP: 0033:0x460bf7 [ 81.091668][ T8904] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 81.111412][ T8904] RSP: 002b:000000c0000e7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 81.120163][ T8904] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 81.128130][ T8904] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005b4000 [ 81.136095][ T8904] RBP: 000000c0000e7c90 R08: 000000c000400000 R09: 000000c0007b4000 [ 81.144061][ T8904] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 81.152342][ T8904] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 [ 81.160490][ T8904] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8904 [ 81.169851][ T8904] caller is __mod_memcg_state+0x87/0x1a0 [ 81.175768][ T8904] CPU: 1 PID: 8904 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 81.185214][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.195785][ T8904] Call Trace: [ 81.199189][ T8904] dump_stack+0x188/0x20d [ 81.203749][ T8904] __this_cpu_preempt_check.cold+0x84/0x90 [ 81.209679][ T8904] __mod_memcg_state+0x87/0x1a0 [ 81.214628][ T8904] split_huge_page_to_list+0x124b/0x3380 [ 81.220504][ T8904] ? mark_held_locks+0xe0/0xe0 [ 81.225499][ T8904] ? release_pages+0x656/0x19b0 [ 81.231273][ T8904] ? can_split_huge_page+0x480/0x480 [ 81.239939][ T8904] ? pmd_val+0x7c/0xf0 [ 81.244102][ T8904] ? pmd_pfn+0x125/0x1c0 [ 81.248491][ T8904] ? enabled_store+0x190/0x190 [ 81.253264][ T8904] madvise_free_huge_pmd+0x873/0xb90 [ 81.258680][ T8904] madvise_free_pte_range+0x6ff/0x2650 [ 81.264223][ T8904] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 81.270917][ T8904] __walk_page_range+0xcfb/0x2070 [ 81.275963][ T8904] ? walk_page_test+0x78/0x180 [ 81.280740][ T8904] walk_page_range+0x1bd/0x3a0 [ 81.285504][ T8904] ? __walk_page_range+0x2070/0x2070 [ 81.290884][ T8904] ? madvise_free_single_vma+0x2c1/0x550 [ 81.296539][ T8904] madvise_free_single_vma+0x384/0x550 [ 81.302009][ T8904] ? madvise_pageout+0x3b0/0x3b0 [ 81.307049][ T8904] ? lock_acquire+0x197/0x420 [ 81.311762][ T8904] ? userfaultfd_remove+0xf0/0x2b0 [ 81.316916][ T8904] ? vmacache_find+0x62/0x300 [ 81.321591][ T8904] ? vmacache_update+0xce/0x140 [ 81.326442][ T8904] ? find_vma+0x2b/0x170 [ 81.330677][ T8904] do_madvise+0x5ba/0x1b80 [ 81.335078][ T8904] ? unuse_pde+0x2c/0x80 [ 81.339322][ T8904] ? madvise_free_pte_range+0x2650/0x2650 [ 81.345066][ T8904] ? __x64_sys_futex+0x376/0x4f0 [ 81.350092][ T8904] ? fput_many+0x2f/0x1a0 [ 81.354491][ T8904] ? do_futex+0x1b10/0x1b10 [ 81.359007][ T8904] ? ksys_read+0x19f/0x250 [ 81.363414][ T8904] ? kernel_write+0x120/0x120 [ 81.368087][ T8904] ? __x64_sys_madvise+0xae/0x120 [ 81.373187][ T8904] ? trace_hardirqs_on+0x55/0x220 [ 81.378227][ T8904] __x64_sys_madvise+0xae/0x120 [ 81.383091][ T8904] do_syscall_64+0xf6/0x7d0 [ 81.387873][ T8904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.394279][ T8904] RIP: 0033:0x460bf7 [ 81.398161][ T8904] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 81.417754][ T8904] RSP: 002b:000000c0000e7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 81.426551][ T8904] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 81.434509][ T8904] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005b4000 [ 81.442486][ T8904] RBP: 000000c0000e7c90 R08: 000000c000400000 R09: 000000c0007b4000 [ 81.450572][ T8904] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 81.458547][ T8904] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 executing program [ 81.824184][ T8904] ------------[ cut here ]------------ [ 81.830159][ T8904] WARNING: CPU: 1 PID: 8904 at sound/core/oss/pcm_plugin.c:126 snd_pcm_plug_alloc+0x29a/0x330 [ 81.841105][ T8904] Kernel panic - not syncing: panic_on_warn set ... [ 81.847786][ T8904] CPU: 1 PID: 8904 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 81.857236][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.867300][ T8904] Call Trace: [ 81.870578][ T8904] dump_stack+0x188/0x20d [ 81.874898][ T8904] ? snd_pcm_plug_alloc+0x250/0x330 [ 81.880089][ T8904] panic+0x2e3/0x75c [ 81.883966][ T8904] ? add_taint.cold+0x16/0x16 [ 81.888634][ T8904] ? printk+0xba/0xed [ 81.892593][ T8904] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 81.898028][ T8904] ? __warn.cold+0x14/0x35 [ 81.902422][ T8904] ? __warn+0xd5/0x1c8 [ 81.906470][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 81.911644][ T8904] __warn.cold+0x2f/0x35 [ 81.915881][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 81.921058][ T8904] report_bug+0x27b/0x2f0 [ 81.925366][ T8904] do_error_trap+0x12b/0x220 [ 81.930022][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 81.935205][ T8904] do_invalid_op+0x32/0x40 [ 81.939600][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 81.945386][ T8904] invalid_op+0x23/0x30 [ 81.949531][ T8904] RIP: 0010:snd_pcm_plug_alloc+0x29a/0x330 [ 81.955362][ T8904] Code: ff ff 45 31 e4 e8 46 f2 7f fb 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 e8 35 f2 7f fb 0f 0b 41 bc fa ff ff ff eb e0 e8 26 f2 7f fb <0f> 0b 41 bc fa ff ff ff eb d1 e8 17 f2 7f fb 0f 0b 41 bc fa ff ff [ 81.974973][ T8904] RSP: 0018:ffffc90002227b88 EFLAGS: 00010293 [ 81.981039][ T8904] RAX: ffff88808a80c4c0 RBX: ffff8880a6a7e800 RCX: ffffffff85f2d2c6 [ 81.989121][ T8904] RDX: 0000000000000000 RSI: ffffffff85f2d44a RDI: 0000000000000007 [ 81.997086][ T8904] RBP: 0000000000000000 R08: ffff88808a80c4c0 R09: ffffed101349611f [ 82.005161][ T8904] R10: ffff88809a4b08f3 R11: ffffed101349611e R12: ffff8880a6a7e858 [ 82.013118][ T8904] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88809a4b0800 [ 82.021108][ T8904] ? snd_pcm_plug_alloc+0x116/0x330 [ 82.026290][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 82.031537][ T8904] ? snd_pcm_plug_alloc+0x29a/0x330 [ 82.036905][ T8904] snd_pcm_oss_change_params_locked+0x1c05/0x34b0 [ 82.043363][ T8904] ? _snd_pcm_hw_param_set.constprop.0+0x510/0x510 [ 82.049881][ T8904] ? trace_hardirqs_off+0x50/0x220 [ 82.054980][ T8904] ? trace_hardirqs_on+0x55/0x220 [ 82.060115][ T8904] ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0 [ 82.065771][ T8904] snd_pcm_oss_change_params+0x76/0xd0 [ 82.071248][ T8904] snd_pcm_oss_make_ready+0xb7/0x170 [ 82.076526][ T8904] snd_pcm_oss_sync.isra.0+0x1be/0x7d0 [ 82.081978][ T8904] ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0 [ 82.087598][ T8904] snd_pcm_oss_release+0x210/0x280 [ 82.092695][ T8904] __fput+0x2da/0x850 [ 82.096671][ T8904] task_work_run+0xf4/0x1b0 [ 82.101295][ T8904] exit_to_usermode_loop+0x2fa/0x360 [ 82.106585][ T8904] do_syscall_64+0x6b1/0x7d0 [ 82.111176][ T8904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.117068][ T8904] RIP: 0033:0x4afb40 [ 82.120961][ T8904] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 82.140555][ T8904] RSP: 002b:000000c000117588 EFLAGS: 00000212 ORIG_RAX: 0000000000000003 [ 82.148969][ T8904] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 82.156933][ T8904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.164906][ T8904] RBP: 000000c0001175c8 R08: 0000000000000000 R09: 0000000000000000 [ 82.172870][ T8904] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000006 [ 82.180825][ T8904] R13: 0000000000000005 R14: 0000000000000200 R15: 0000000000000000 [ 82.190400][ T8904] Kernel Offset: disabled [ 82.194744][ T8904] Rebooting in 86400 seconds..