[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.154453][ T27] audit: type=1800 audit(1583781778.880:25): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.188246][ T27] audit: type=1800 audit(1583781778.880:26): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.235287][ T27] audit: type=1800 audit(1583781778.880:27): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2020/03/09 19:23:09 fuzzer started syzkaller login: [ 88.018389][ T9715] check_preemption_disabled: 3 callbacks suppressed [ 88.018409][ T9715] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9715 [ 88.034754][ T9715] caller is __mod_memcg_state+0x27/0x1a0 [ 88.041094][ T9715] CPU: 1 PID: 9715 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.050657][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.060719][ T9715] Call Trace: [ 88.064002][ T9715] dump_stack+0x188/0x20d [ 88.068390][ T9715] __this_cpu_preempt_check.cold+0x84/0x90 [ 88.074189][ T9715] __mod_memcg_state+0x27/0x1a0 [ 88.079065][ T9715] split_huge_page_to_list+0x124b/0x3380 [ 88.084734][ T9715] ? madvise_free_huge_pmd+0x869/0xb90 [ 88.090232][ T9715] ? can_split_huge_page+0x480/0x480 [ 88.095593][ T9715] ? pmd_val+0x7c/0xf0 [ 88.099655][ T9715] ? enabled_store+0x190/0x190 [ 88.104407][ T9715] madvise_free_huge_pmd+0x873/0xb90 [ 88.109686][ T9715] madvise_free_pte_range+0x6ff/0x2650 [ 88.115143][ T9715] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 88.121161][ T9715] ? __lock_acquire+0x190f/0x53a0 [ 88.126465][ T9715] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 88.133150][ T9715] __walk_page_range+0xcfb/0x2070 [ 88.138194][ T9715] ? walk_page_test+0x78/0x180 [ 88.142945][ T9715] walk_page_range+0x1bd/0x3a0 [ 88.147696][ T9715] ? __walk_page_range+0x2070/0x2070 [ 88.152984][ T9715] ? madvise_free_single_vma+0x2c1/0x550 [ 88.158610][ T9715] madvise_free_single_vma+0x384/0x550 [ 88.164067][ T9715] ? madvise_pageout+0x3b0/0x3b0 [ 88.168993][ T9715] ? lock_acquire+0x197/0x420 [ 88.173651][ T9715] ? userfaultfd_remove+0xf0/0x2b0 [ 88.178762][ T9715] ? vmacache_find+0x62/0x300 [ 88.183453][ T9715] ? find_vma+0x2b/0x170 [ 88.187687][ T9715] do_madvise+0x5ba/0x1b80 [ 88.192105][ T9715] ? lock_downgrade+0x7f0/0x7f0 [ 88.196948][ T9715] ? madvise_free_pte_range+0x2650/0x2650 [ 88.202670][ T9715] ? ktime_get+0x1f8/0x2f0 [ 88.207085][ T9715] ? __x64_sys_futex+0x376/0x4f0 [ 88.212203][ T9715] ? do_futex+0x1b90/0x1b90 [ 88.216706][ T9715] ? switch_fpu_return+0x1db/0x4b0 [ 88.221825][ T9715] ? fpregs_mark_activate+0x320/0x320 [ 88.227191][ T9715] ? __x64_sys_madvise+0xae/0x120 [ 88.232205][ T9715] __x64_sys_madvise+0xae/0x120 [ 88.237058][ T9715] ? lockdep_hardirqs_on+0x417/0x5d0 [ 88.242330][ T9715] do_syscall_64+0xf6/0x7d0 [ 88.246819][ T9715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.252702][ T9715] RIP: 0033:0x460bf7 [ 88.256706][ T9715] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 88.276676][ T9715] RSP: 002b:00007fffa883fea0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.285076][ T9715] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 88.293048][ T9715] RDX: 0000000000000008 RSI: 0000000000018000 RDI: 000000c000296000 [ 88.301003][ T9715] RBP: 00007fffa883fee0 R08: 000000c000200000 R09: 000000c0002ae000 [ 88.309495][ T9715] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 88.317465][ T9715] R13: 000000c0003be950 R14: 0000000000000001 R15: 0000000000000008 [ 88.326307][ T9715] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9715 [ 88.335478][ T9715] caller is __mod_memcg_state+0xca/0x1a0 [ 88.341152][ T9715] CPU: 1 PID: 9715 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.351393][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.361445][ T9715] Call Trace: [ 88.364730][ T9715] dump_stack+0x188/0x20d [ 88.369051][ T9715] __this_cpu_preempt_check.cold+0x84/0x90 [ 88.374849][ T9715] __mod_memcg_state+0xca/0x1a0 [ 88.379890][ T9715] split_huge_page_to_list+0x124b/0x3380 [ 88.385517][ T9715] ? madvise_free_huge_pmd+0x869/0xb90 [ 88.391080][ T9715] ? can_split_huge_page+0x480/0x480 [ 88.396353][ T9715] ? pmd_val+0x7c/0xf0 [ 88.400503][ T9715] ? enabled_store+0x190/0x190 [ 88.405257][ T9715] madvise_free_huge_pmd+0x873/0xb90 [ 88.410538][ T9715] madvise_free_pte_range+0x6ff/0x2650 [ 88.415980][ T9715] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 88.421784][ T9715] ? __lock_acquire+0x190f/0x53a0 [ 88.426789][ T9715] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 88.433450][ T9715] __walk_page_range+0xcfb/0x2070 [ 88.438550][ T9715] ? walk_page_test+0x78/0x180 [ 88.443323][ T9715] walk_page_range+0x1bd/0x3a0 [ 88.448089][ T9715] ? __walk_page_range+0x2070/0x2070 [ 88.453549][ T9715] ? madvise_free_single_vma+0x2c1/0x550 [ 88.459190][ T9715] madvise_free_single_vma+0x384/0x550 [ 88.464669][ T9715] ? madvise_pageout+0x3b0/0x3b0 [ 88.469602][ T9715] ? lock_acquire+0x197/0x420 [ 88.474554][ T9715] ? userfaultfd_remove+0xf0/0x2b0 [ 88.479676][ T9715] ? vmacache_find+0x62/0x300 [ 88.484407][ T9715] ? find_vma+0x2b/0x170 [ 88.488640][ T9715] do_madvise+0x5ba/0x1b80 [ 88.493647][ T9715] ? lock_downgrade+0x7f0/0x7f0 [ 88.498492][ T9715] ? madvise_free_pte_range+0x2650/0x2650 [ 88.504193][ T9715] ? ktime_get+0x1f8/0x2f0 [ 88.509387][ T9715] ? __x64_sys_futex+0x376/0x4f0 [ 88.514327][ T9715] ? do_futex+0x1b90/0x1b90 [ 88.518834][ T9715] ? switch_fpu_return+0x1db/0x4b0 [ 88.523938][ T9715] ? fpregs_mark_activate+0x320/0x320 [ 88.529302][ T9715] ? __x64_sys_madvise+0xae/0x120 [ 88.534412][ T9715] __x64_sys_madvise+0xae/0x120 [ 88.539252][ T9715] ? lockdep_hardirqs_on+0x417/0x5d0 [ 88.544521][ T9715] do_syscall_64+0xf6/0x7d0 [ 88.549079][ T9715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.555087][ T9715] RIP: 0033:0x460bf7 [ 88.558971][ T9715] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 88.578561][ T9715] RSP: 002b:00007fffa883fea0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.586976][ T9715] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 88.594931][ T9715] RDX: 0000000000000008 RSI: 0000000000018000 RDI: 000000c000296000 [ 88.602915][ T9715] RBP: 00007fffa883fee0 R08: 000000c000200000 R09: 000000c0002ae000 [ 88.610881][ T9715] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 88.619185][ T9715] R13: 000000c0003be950 R14: 0000000000000001 R15: 0000000000000008 [ 88.627221][ T9715] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9715 [ 88.637240][ T9715] caller is __mod_memcg_state+0x87/0x1a0 [ 88.642901][ T9715] CPU: 1 PID: 9715 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.652347][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.662594][ T9715] Call Trace: [ 88.665872][ T9715] dump_stack+0x188/0x20d [ 88.670188][ T9715] __this_cpu_preempt_check.cold+0x84/0x90 [ 88.675991][ T9715] __mod_memcg_state+0x87/0x1a0 [ 88.680843][ T9715] split_huge_page_to_list+0x124b/0x3380 [ 88.686535][ T9715] ? madvise_free_huge_pmd+0x869/0xb90 [ 88.691978][ T9715] ? can_split_huge_page+0x480/0x480 [ 88.697502][ T9715] ? pmd_val+0x7c/0xf0 [ 88.701600][ T9715] ? enabled_store+0x190/0x190 [ 88.706446][ T9715] madvise_free_huge_pmd+0x873/0xb90 [ 88.711852][ T9715] madvise_free_pte_range+0x6ff/0x2650 [ 88.717315][ T9715] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 88.723120][ T9715] ? __lock_acquire+0x190f/0x53a0 [ 88.728160][ T9715] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 88.734933][ T9715] __walk_page_range+0xcfb/0x2070 [ 88.739987][ T9715] ? walk_page_test+0x78/0x180 [ 88.744748][ T9715] walk_page_range+0x1bd/0x3a0 [ 88.749507][ T9715] ? __walk_page_range+0x2070/0x2070 [ 88.754963][ T9715] ? madvise_free_single_vma+0x2c1/0x550 [ 88.760605][ T9715] madvise_free_single_vma+0x384/0x550 [ 88.766069][ T9715] ? madvise_pageout+0x3b0/0x3b0 [ 88.771064][ T9715] ? lock_acquire+0x197/0x420 [ 88.775792][ T9715] ? userfaultfd_remove+0xf0/0x2b0 [ 88.780914][ T9715] ? vmacache_find+0x62/0x300 [ 88.785609][ T9715] ? find_vma+0x2b/0x170 [ 88.790835][ T9715] do_madvise+0x5ba/0x1b80 [ 88.795248][ T9715] ? lock_downgrade+0x7f0/0x7f0 [ 88.800175][ T9715] ? madvise_free_pte_range+0x2650/0x2650 [ 88.805991][ T9715] ? ktime_get+0x1f8/0x2f0 [ 88.810454][ T9715] ? __x64_sys_futex+0x376/0x4f0 [ 88.815703][ T9715] ? do_futex+0x1b90/0x1b90 [ 88.820316][ T9715] ? switch_fpu_return+0x1db/0x4b0 [ 88.825603][ T9715] ? fpregs_mark_activate+0x320/0x320 [ 88.830987][ T9715] ? __x64_sys_madvise+0xae/0x120 [ 88.836000][ T9715] __x64_sys_madvise+0xae/0x120 [ 88.840854][ T9715] ? lockdep_hardirqs_on+0x417/0x5d0 [ 88.846150][ T9715] do_syscall_64+0xf6/0x7d0 [ 88.850713][ T9715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.856615][ T9715] RIP: 0033:0x460bf7 [ 88.860503][ T9715] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 88.880544][ T9715] RSP: 002b:00007fffa883fea0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.889924][ T9715] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 88.897899][ T9715] RDX: 0000000000000008 RSI: 0000000000018000 RDI: 000000c000296000 [ 88.905862][ T9715] RBP: 00007fffa883fee0 R08: 000000c000200000 R09: 000000c0002ae000 [ 88.914060][ T9715] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 88.922306][ T9715] R13: 000000c0003be950 R14: 0000000000000001 R15: 0000000000000008 2020/03/09 19:23:11 connecting to host at 10.128.0.26:35309 2020/03/09 19:23:11 checking machine... 2020/03/09 19:23:11 checking revisions... 2020/03/09 19:23:11 testing simple program... [ 90.173448][ T9733] IPVS: ftp: loaded support on port[0] = 21 2020/03/09 19:23:11 building call list... [ 90.358562][ T210] [ 90.361317][ T210] ============================= [ 90.366164][ T210] WARNING: suspicious RCU usage [ 90.388293][ T210] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 90.395082][ T210] ----------------------------- [ 90.400628][ T210] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!! [ 90.410993][ T9738] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9738 [ 90.420028][ T9738] caller is __mod_memcg_state+0x27/0x1a0 [ 90.425682][ T9738] CPU: 1 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 90.435145][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.445216][ T9738] Call Trace: [ 90.448521][ T9738] dump_stack+0x188/0x20d [ 90.452878][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 90.458698][ T9738] __mod_memcg_state+0x27/0x1a0 [ 90.463684][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 90.469364][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 90.474836][ T9738] ? can_split_huge_page+0x480/0x480 [ 90.480133][ T9738] ? pmd_val+0x7c/0xf0 [ 90.484231][ T9738] ? enabled_store+0x190/0x190 [ 90.489034][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 90.494343][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 90.499829][ T9738] ? mark_lock+0xbc/0x1220 [ 90.504277][ T9738] ? mark_held_locks+0x9f/0xe0 [ 90.509056][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 90.515744][ T9738] __walk_page_range+0xcfb/0x2070 [ 90.520818][ T9738] ? walk_page_test+0x78/0x180 [ 90.525596][ T9738] walk_page_range+0x1bd/0x3a0 [ 90.530363][ T9738] ? __walk_page_range+0x2070/0x2070 [ 90.535659][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 90.541316][ T9738] madvise_free_single_vma+0x384/0x550 [ 90.546779][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 90.551724][ T9738] ? lock_acquire+0x197/0x420 [ 90.556410][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 90.561537][ T9738] ? vmacache_find+0x62/0x300 [ 90.566216][ T9738] ? vmacache_update+0xce/0x140 [ 90.571266][ T9738] ? find_vma+0x2b/0x170 [ 90.575531][ T9738] do_madvise+0x5ba/0x1b80 [ 90.579976][ T9738] ? retint_kernel+0x2b/0x2b [ 90.584609][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 90.590336][ T9738] ? _raw_spin_unlock_irq+0x4b/0x80 [ 90.595556][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 90.597908][ T210] [ 90.597908][ T210] other info that might help us debug this: [ 90.597908][ T210] [ 90.600500][ T9738] ? switch_fpu_return+0x1db/0x4b0 [ 90.615861][ T9738] ? fpregs_mark_activate+0x320/0x320 [ 90.621245][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 90.626282][ T9738] __x64_sys_madvise+0xae/0x120 [ 90.627958][ T210] [ 90.627958][ T210] rcu_scheduler_active = 2, debug_locks = 1 [ 90.631146][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 90.631163][ T9738] do_syscall_64+0xf6/0x7d0 [ 90.631184][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.647892][ T210] 3 locks held by kworker/u4:5/210: [ 90.649002][ T9738] RIP: 0033:0x460bf7 [ 90.664326][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 90.665243][ T210] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 90.683933][ T9738] RSP: 002b:000000c000107e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 90.683945][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 90.683952][ T9738] RDX: 0000000000000008 RSI: 0000000000008000 RDI: 000000c000460000 [ 90.683959][ T9738] RBP: 000000c000107eb0 R08: 000000c000400000 R09: 000000c000468000 [ 90.683966][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.683973][ T9738] R13: 00007f3e23675008 R14: 0000000000001000 R15: 0000000000000001 [ 90.684106][ T9738] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9738 [ 90.724419][ T210] #1: ffffc90001857dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 90.726182][ T9738] caller is __mod_memcg_state+0xca/0x1a0 [ 90.744683][ T210] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 90.751141][ T9738] CPU: 1 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 90.751149][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.751159][ T9738] Call Trace: [ 90.771095][ T210] [ 90.771095][ T210] stack backtrace: [ 90.775050][ T9738] dump_stack+0x188/0x20d [ 90.808009][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 90.813819][ T9738] __mod_memcg_state+0xca/0x1a0 [ 90.818676][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 90.824333][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 90.829792][ T9738] ? can_split_huge_page+0x480/0x480 [ 90.835181][ T9738] ? pmd_val+0x7c/0xf0 [ 90.839395][ T9738] ? enabled_store+0x190/0x190 [ 90.844193][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 90.849503][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 90.854961][ T9738] ? mark_lock+0xbc/0x1220 [ 90.859387][ T9738] ? mark_held_locks+0x9f/0xe0 [ 90.864237][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 90.870916][ T9738] __walk_page_range+0xcfb/0x2070 [ 90.875989][ T9738] ? walk_page_test+0x78/0x180 [ 90.881215][ T9738] walk_page_range+0x1bd/0x3a0 [ 90.885994][ T9738] ? __walk_page_range+0x2070/0x2070 [ 90.891296][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 90.896944][ T9738] madvise_free_single_vma+0x384/0x550 [ 90.902413][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 90.907356][ T9738] ? lock_acquire+0x197/0x420 [ 90.912024][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 90.917145][ T9738] ? vmacache_find+0x62/0x300 [ 90.921942][ T9738] ? vmacache_update+0xce/0x140 [ 90.926918][ T9738] ? find_vma+0x2b/0x170 [ 90.931188][ T9738] do_madvise+0x5ba/0x1b80 [ 90.935608][ T9738] ? retint_kernel+0x2b/0x2b [ 90.940223][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 90.945949][ T9738] ? _raw_spin_unlock_irq+0x4b/0x80 [ 90.951153][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 90.956088][ T9738] ? switch_fpu_return+0x1db/0x4b0 [ 90.961194][ T9738] ? fpregs_mark_activate+0x320/0x320 [ 90.966578][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 90.971604][ T9738] __x64_sys_madvise+0xae/0x120 [ 90.976444][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 90.981723][ T9738] do_syscall_64+0xf6/0x7d0 [ 90.986250][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.992138][ T9738] RIP: 0033:0x460bf7 [ 90.996021][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 91.015612][ T9738] RSP: 002b:000000c000107e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 91.024015][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 91.031983][ T9738] RDX: 0000000000000008 RSI: 0000000000008000 RDI: 000000c000460000 [ 91.039946][ T9738] RBP: 000000c000107eb0 R08: 000000c000400000 R09: 000000c000468000 [ 91.047926][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.047933][ T9738] R13: 00007f3e23675008 R14: 0000000000001000 R15: 0000000000000001 [ 91.048197][ T9738] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9738 [ 91.056182][ T210] CPU: 0 PID: 210 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.064160][ T9738] caller is __mod_memcg_state+0x87/0x1a0 [ 91.073133][ T210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.073147][ T210] Workqueue: netns cleanup_net [ 91.073161][ T210] Call Trace: [ 91.106330][ T210] dump_stack+0x188/0x20d [ 91.110653][ T210] ovs_ct_exit+0x3db/0x558 [ 91.115066][ T210] ovs_exit_net+0x1df/0xba0 [ 91.119566][ T210] ? ovs_dp_cmd_del+0x270/0x270 [ 91.124405][ T210] ? __mutex_unlock_slowpath+0xe2/0x660 [ 91.129945][ T210] ? ovs_dp_cmd_del+0x270/0x270 [ 91.134783][ T210] ops_exit_list.isra.0+0xa8/0x150 [ 91.139888][ T210] cleanup_net+0x511/0xa50 [ 91.144298][ T210] ? unregister_pernet_device+0x70/0x70 [ 91.149859][ T210] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 91.155851][ T210] process_one_work+0x94b/0x1690 [ 91.160790][ T210] ? pwq_dec_nr_in_flight+0x310/0x310 [ 91.166156][ T210] ? do_raw_spin_lock+0x129/0x2e0 [ 91.171182][ T210] worker_thread+0x96/0xe20 [ 91.175704][ T210] ? process_one_work+0x1690/0x1690 [ 91.180890][ T210] kthread+0x357/0x430 [ 91.184975][ T210] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 91.190703][ T210] ret_from_fork+0x24/0x30 [ 91.195136][ T9738] CPU: 1 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.204728][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.214796][ T9738] Call Trace: [ 91.218114][ T9738] dump_stack+0x188/0x20d [ 91.222490][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.228353][ T9738] __mod_memcg_state+0x87/0x1a0 [ 91.233245][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 91.238941][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.244429][ T9738] ? can_split_huge_page+0x480/0x480 [ 91.249763][ T9738] ? pmd_val+0x7c/0xf0 [ 91.253875][ T9738] ? enabled_store+0x190/0x190 [ 91.258678][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 91.263987][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 91.269538][ T9738] ? mark_lock+0xbc/0x1220 [ 91.274140][ T9738] ? mark_held_locks+0x9f/0xe0 [ 91.278910][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.285627][ T9738] __walk_page_range+0xcfb/0x2070 [ 91.290709][ T9738] ? walk_page_test+0x78/0x180 [ 91.295611][ T9738] walk_page_range+0x1bd/0x3a0 [ 91.300484][ T9738] ? __walk_page_range+0x2070/0x2070 [ 91.305789][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 91.311443][ T9738] madvise_free_single_vma+0x384/0x550 [ 91.316923][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 91.321887][ T9738] ? lock_acquire+0x197/0x420 [ 91.326568][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 91.331726][ T9738] ? vmacache_find+0x62/0x300 [ 91.336406][ T9738] ? vmacache_update+0xce/0x140 [ 91.341272][ T9738] ? find_vma+0x2b/0x170 [ 91.346204][ T9738] do_madvise+0x5ba/0x1b80 [ 91.350634][ T9738] ? retint_kernel+0x2b/0x2b [ 91.356651][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 91.362475][ T9738] ? _raw_spin_unlock_irq+0x4b/0x80 [ 91.367701][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 91.372665][ T9738] ? switch_fpu_return+0x1db/0x4b0 [ 91.377789][ T9738] ? fpregs_mark_activate+0x320/0x320 [ 91.383193][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 91.388233][ T9738] __x64_sys_madvise+0xae/0x120 [ 91.393104][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 91.398407][ T9738] do_syscall_64+0xf6/0x7d0 [ 91.402947][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.408887][ T9738] RIP: 0033:0x460bf7 [ 91.412792][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 91.432495][ T9738] RSP: 002b:000000c000107e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 91.441107][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 91.449105][ T9738] RDX: 0000000000000008 RSI: 0000000000008000 RDI: 000000c000460000 [ 91.457086][ T9738] RBP: 000000c000107eb0 R08: 000000c000400000 R09: 000000c000468000 [ 91.465328][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.473315][ T9738] R13: 00007f3e23675008 R14: 0000000000001000 R15: 0000000000000001 [ 91.506977][ T9720] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9720 [ 91.516051][ T9720] caller is __mod_memcg_state+0x27/0x1a0 [ 91.521748][ T9720] CPU: 0 PID: 9720 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.531213][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.541273][ T9720] Call Trace: [ 91.544601][ T9720] dump_stack+0x188/0x20d [ 91.548961][ T9720] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.554780][ T9720] __mod_memcg_state+0x27/0x1a0 [ 91.559662][ T9720] split_huge_page_to_list+0x124b/0x3380 [ 91.565361][ T9720] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.570854][ T9720] ? can_split_huge_page+0x480/0x480 [ 91.576249][ T9720] ? pmd_val+0x7c/0xf0 [ 91.580333][ T9720] ? enabled_store+0x190/0x190 [ 91.585116][ T9720] madvise_free_huge_pmd+0x873/0xb90 [ 91.590421][ T9720] madvise_free_pte_range+0x6ff/0x2650 [ 91.595881][ T9720] ? mark_lock+0xbc/0x1220 [ 91.600306][ T9720] ? mark_held_locks+0x9f/0xe0 [ 91.605070][ T9720] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.611756][ T9720] __walk_page_range+0xcfb/0x2070 [ 91.616835][ T9720] ? walk_page_test+0x78/0x180 [ 91.621618][ T9720] walk_page_range+0x1bd/0x3a0 [ 91.626392][ T9720] ? __walk_page_range+0x2070/0x2070 [ 91.631753][ T9720] ? madvise_free_single_vma+0x2c1/0x550 [ 91.637417][ T9720] madvise_free_single_vma+0x384/0x550 [ 91.642887][ T9720] ? madvise_pageout+0x3b0/0x3b0 [ 91.648064][ T9720] ? lock_acquire+0x197/0x420 [ 91.652762][ T9720] ? userfaultfd_remove+0xf0/0x2b0 [ 91.657952][ T9720] ? vmacache_find+0x62/0x300 [ 91.662645][ T9720] ? vmacache_update+0xce/0x140 [ 91.667521][ T9720] ? find_vma+0x2b/0x170 [ 91.671795][ T9720] do_madvise+0x5ba/0x1b80 [ 91.676222][ T9720] ? do_page_fault+0x58b/0x12da [ 91.681105][ T9720] ? madvise_free_pte_range+0x2650/0x2650 [ 91.686833][ T9720] ? up_read+0x1a8/0x750 [ 91.691089][ T9720] ? handle_mm_fault+0x29e/0x660 [ 91.696037][ T9720] ? __x64_sys_madvise+0xae/0x120 [ 91.701084][ T9720] __x64_sys_madvise+0xae/0x120 [ 91.705940][ T9720] ? lockdep_hardirqs_on+0x417/0x5d0 [ 91.711225][ T9720] do_syscall_64+0xf6/0x7d0 [ 91.715739][ T9720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.721629][ T9720] RIP: 0033:0x460bf7 [ 91.725538][ T9720] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 91.745325][ T9720] RSP: 002b:000000c00010bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 91.753739][ T9720] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 91.761711][ T9720] RDX: 0000000000000008 RSI: 0000000000072000 RDI: 000000c0001da000 [ 91.773500][ T9720] RBP: 000000c00010bc90 R08: 000000c000000000 R09: 000000c00024c000 [ 91.781469][ T9720] R10: 000000000007fe00 R11: 0000000000000246 R12: 0000000000000040 [ 91.789436][ T9720] R13: 0000000000000040 R14: 0000000000000002 R15: 0000000000000002 [ 91.797574][ T9720] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9720 [ 91.806529][ T9720] caller is __mod_memcg_state+0xca/0x1a0 [ 91.812267][ T9720] CPU: 0 PID: 9720 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.821725][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.831785][ T9720] Call Trace: [ 91.835350][ T9720] dump_stack+0x188/0x20d [ 91.839694][ T9720] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.845587][ T9720] __mod_memcg_state+0xca/0x1a0 [ 91.850461][ T9720] split_huge_page_to_list+0x124b/0x3380 [ 91.856204][ T9720] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.861676][ T9720] ? can_split_huge_page+0x480/0x480 [ 91.866958][ T9720] ? pmd_val+0x7c/0xf0 [ 91.871469][ T9720] ? enabled_store+0x190/0x190 [ 91.876254][ T9720] madvise_free_huge_pmd+0x873/0xb90 [ 91.881561][ T9720] madvise_free_pte_range+0x6ff/0x2650 [ 91.888062][ T9720] ? mark_lock+0xbc/0x1220 [ 91.892489][ T9720] ? mark_held_locks+0x9f/0xe0 [ 91.897258][ T9720] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.904025][ T9720] __walk_page_range+0xcfb/0x2070 [ 91.909109][ T9720] ? walk_page_test+0x78/0x180 [ 91.913901][ T9720] walk_page_range+0x1bd/0x3a0 [ 91.918772][ T9720] ? __walk_page_range+0x2070/0x2070 [ 91.925101][ T9720] ? madvise_free_single_vma+0x2c1/0x550 [ 91.930844][ T9720] madvise_free_single_vma+0x384/0x550 [ 91.936322][ T9720] ? madvise_pageout+0x3b0/0x3b0 [ 91.942078][ T9720] ? lock_acquire+0x197/0x420 [ 91.946858][ T9720] ? userfaultfd_remove+0xf0/0x2b0 [ 91.952027][ T9720] ? vmacache_find+0x62/0x300 [ 91.956726][ T9720] ? vmacache_update+0xce/0x140 [ 91.961695][ T9720] ? find_vma+0x2b/0x170 [ 91.965960][ T9720] do_madvise+0x5ba/0x1b80 [ 91.970473][ T9720] ? do_page_fault+0x58b/0x12da [ 91.975348][ T9720] ? madvise_free_pte_range+0x2650/0x2650 [ 91.981278][ T9720] ? up_read+0x1a8/0x750 [ 91.985542][ T9720] ? handle_mm_fault+0x29e/0x660 [ 91.990513][ T9720] ? __x64_sys_madvise+0xae/0x120 [ 91.995574][ T9720] __x64_sys_madvise+0xae/0x120 [ 92.000559][ T9720] ? lockdep_hardirqs_on+0x417/0x5d0 [ 92.005878][ T9720] do_syscall_64+0xf6/0x7d0 [ 92.010405][ T9720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.016992][ T9720] RIP: 0033:0x460bf7 [ 92.020889][ T9720] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 92.040582][ T9720] RSP: 002b:000000c00010bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 92.049003][ T9720] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 92.057336][ T9720] RDX: 0000000000000008 RSI: 0000000000072000 RDI: 000000c0001da000 [ 92.065304][ T9720] RBP: 000000c00010bc90 R08: 000000c000000000 R09: 000000c00024c000 [ 92.073288][ T9720] R10: 000000000007fe00 R11: 0000000000000246 R12: 0000000000000040 [ 92.081348][ T9720] R13: 0000000000000040 R14: 0000000000000002 R15: 0000000000000002 [ 92.089805][ T9720] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9720 [ 92.099156][ T9720] caller is __mod_memcg_state+0x87/0x1a0 [ 92.104898][ T9720] CPU: 0 PID: 9720 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.114350][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.124406][ T9720] Call Trace: [ 92.127705][ T9720] dump_stack+0x188/0x20d [ 92.135433][ T9720] __this_cpu_preempt_check.cold+0x84/0x90 [ 92.141676][ T9720] __mod_memcg_state+0x87/0x1a0 [ 92.146540][ T9720] split_huge_page_to_list+0x124b/0x3380 [ 92.152201][ T9720] ? madvise_free_huge_pmd+0x869/0xb90 [ 92.157671][ T9720] ? can_split_huge_page+0x480/0x480 [ 92.163226][ T9720] ? pmd_val+0x7c/0xf0 [ 92.167304][ T9720] ? enabled_store+0x190/0x190 [ 92.172088][ T9720] madvise_free_huge_pmd+0x873/0xb90 [ 92.177434][ T9720] madvise_free_pte_range+0x6ff/0x2650 [ 92.182897][ T9720] ? mark_lock+0xbc/0x1220 [ 92.187330][ T9720] ? mark_held_locks+0x9f/0xe0 [ 92.192360][ T9720] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 92.199054][ T9720] __walk_page_range+0xcfb/0x2070 [ 92.204311][ T9720] ? walk_page_test+0x78/0x180 [ 92.209084][ T9720] walk_page_range+0x1bd/0x3a0 [ 92.213868][ T9720] ? __walk_page_range+0x2070/0x2070 [ 92.219176][ T9720] ? madvise_free_single_vma+0x2c1/0x550 [ 92.224844][ T9720] madvise_free_single_vma+0x384/0x550 [ 92.230321][ T9720] ? madvise_pageout+0x3b0/0x3b0 [ 92.235282][ T9720] ? lock_acquire+0x197/0x420 [ 92.239961][ T9720] ? userfaultfd_remove+0xf0/0x2b0 [ 92.245097][ T9720] ? vmacache_find+0x62/0x300 [ 92.249780][ T9720] ? vmacache_update+0xce/0x140 [ 92.254634][ T9720] ? find_vma+0x2b/0x170 [ 92.258889][ T9720] do_madvise+0x5ba/0x1b80 [ 92.263316][ T9720] ? do_page_fault+0x58b/0x12da [ 92.268402][ T9720] ? madvise_free_pte_range+0x2650/0x2650 [ 92.274213][ T9720] ? up_read+0x1a8/0x750 [ 92.278468][ T9720] ? handle_mm_fault+0x29e/0x660 [ 92.283422][ T9720] ? __x64_sys_madvise+0xae/0x120 [ 92.288535][ T9720] __x64_sys_madvise+0xae/0x120 [ 92.293493][ T9720] ? lockdep_hardirqs_on+0x417/0x5d0 [ 92.298879][ T9720] do_syscall_64+0xf6/0x7d0 [ 92.303703][ T9720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.309602][ T9720] RIP: 0033:0x460bf7 [ 92.313504][ T9720] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 92.333244][ T9720] RSP: 002b:000000c00010bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 92.341668][ T9720] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 92.349648][ T9720] RDX: 0000000000000008 RSI: 0000000000072000 RDI: 000000c0001da000 [ 92.357621][ T9720] RBP: 000000c00010bc90 R08: 000000c000000000 R09: 000000c00024c000 [ 92.365594][ T9720] R10: 000000000007fe00 R11: 0000000000000246 R12: 0000000000000040 [ 92.373571][ T9720] R13: 0000000000000040 R14: 0000000000000002 R15: 0000000000000002 [ 92.568015][ T210] tipc: TX() has been purged, node left! [ 92.620243][ T210] [ 92.622790][ T210] ============================= [ 92.627634][ T210] WARNING: suspicious RCU usage [ 92.633084][ T210] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 92.640298][ T210] ----------------------------- [ 92.645257][ T210] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!! [ 92.654631][ T210] [ 92.654631][ T210] other info that might help us debug this: [ 92.654631][ T210] [ 92.665425][ T210] [ 92.665425][ T210] rcu_scheduler_active = 2, debug_locks = 1 [ 92.674051][ T210] 4 locks held by kworker/u4:5/210: [ 92.679674][ T210] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 92.689948][ T210] #1: ffffc90001857dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 92.699765][ T210] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 92.708996][ T210] #3: ffffffff8a552d00 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700 [ 92.718869][ T210] [ 92.718869][ T210] stack backtrace: [ 92.724826][ T210] CPU: 1 PID: 210 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.734370][ T210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.744455][ T210] Workqueue: netns cleanup_net [ 92.749218][ T210] Call Trace: [ 92.752515][ T210] dump_stack+0x188/0x20d [ 92.756856][ T210] ipmr_device_event+0x240/0x2b0 [ 92.761796][ T210] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 92.767698][ T210] notifier_call_chain+0xc0/0x230 [ 92.772751][ T210] call_netdevice_notifiers_info+0xb5/0x130 [ 92.778665][ T210] rollback_registered_many+0x75c/0xe70 [ 92.784236][ T210] ? netif_set_real_num_tx_queues+0x700/0x700 [ 92.790439][ T210] ? lock_downgrade+0x7f0/0x7f0 [ 92.795328][ T210] unregister_netdevice_many.part.0+0x16/0x1e0 [ 92.801614][ T210] unregister_netdevice_many+0x36/0x50 [ 92.807084][ T210] ip6gre_exit_batch_net+0x4e8/0x700 [ 92.812407][ T210] ? ip6gre_tunnel_link+0xf0/0xf0 [ 92.817448][ T210] ? rcu_read_lock_held_common+0x130/0x130 [ 92.823294][ T210] ? ip6gre_tunnel_link+0xf0/0xf0 [ 92.828518][ T210] ops_exit_list.isra.0+0x103/0x150 [ 92.834557][ T210] cleanup_net+0x511/0xa50 [ 92.839005][ T210] ? unregister_pernet_device+0x70/0x70 [ 92.845413][ T210] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 92.851414][ T210] process_one_work+0x94b/0x1690 [ 92.856367][ T210] ? pwq_dec_nr_in_flight+0x310/0x310 [ 92.861993][ T210] ? do_raw_spin_lock+0x129/0x2e0 [ 92.867031][ T210] worker_thread+0x96/0xe20 [ 92.871546][ T210] ? process_one_work+0x1690/0x1690 [ 92.876760][ T210] kthread+0x357/0x430 [ 92.880855][ T210] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 92.886614][ T210] ret_from_fork+0x24/0x30 executing program [ 93.277622][ T9738] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9738 [ 93.286680][ T9738] caller is __mod_memcg_state+0x27/0x1a0 [ 93.292364][ T9738] CPU: 0 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.301812][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.311880][ T9738] Call Trace: [ 93.315265][ T9738] dump_stack+0x188/0x20d [ 93.319602][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.325421][ T9738] __mod_memcg_state+0x27/0x1a0 [ 93.330408][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 93.336060][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.341519][ T9738] ? can_split_huge_page+0x480/0x480 [ 93.346790][ T9738] ? pmd_val+0x7c/0xf0 [ 93.350844][ T9738] ? enabled_store+0x190/0x190 [ 93.356161][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 93.361458][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 93.366914][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.373590][ T9738] __walk_page_range+0xcfb/0x2070 [ 93.378630][ T9738] ? walk_page_test+0x78/0x180 [ 93.383413][ T9738] walk_page_range+0x1bd/0x3a0 [ 93.388166][ T9738] ? __walk_page_range+0x2070/0x2070 [ 93.393456][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 93.399127][ T9738] madvise_free_single_vma+0x384/0x550 [ 93.404658][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 93.409597][ T9738] ? lock_acquire+0x197/0x420 [ 93.414261][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 93.419380][ T9738] ? vmacache_find+0x62/0x300 [ 93.424057][ T9738] ? vmacache_update+0xce/0x140 [ 93.428906][ T9738] ? find_vma+0x2b/0x170 [ 93.433136][ T9738] do_madvise+0x5ba/0x1b80 [ 93.437535][ T9738] ? unuse_pde+0x2c/0x80 [ 93.441779][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 93.447486][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 93.452408][ T9738] ? fput_many+0x2f/0x1a0 [ 93.456831][ T9738] ? do_futex+0x1b90/0x1b90 [ 93.461325][ T9738] ? ksys_read+0x19f/0x250 [ 93.465728][ T9738] ? kernel_write+0x120/0x120 [ 93.470484][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 93.475488][ T9738] __x64_sys_madvise+0xae/0x120 [ 93.480324][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.485604][ T9738] do_syscall_64+0xf6/0x7d0 [ 93.490109][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.496008][ T9738] RIP: 0033:0x460bf7 [ 93.499885][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.519597][ T9738] RSP: 002b:000000c000107c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.527989][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.536083][ T9738] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005e8000 [ 93.544068][ T9738] RBP: 000000c000107c90 R08: 000000c000400000 R09: 000000c0007e8000 [ 93.552029][ T9738] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 93.559994][ T9738] R13: 00007f3e23675008 R14: 0000000000000001 R15: 0000000000000001 [ 93.568159][ T9738] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9738 [ 93.577027][ T9738] caller is __mod_memcg_state+0xca/0x1a0 [ 93.582726][ T9738] CPU: 0 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.592182][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.602223][ T9738] Call Trace: [ 93.605522][ T9738] dump_stack+0x188/0x20d [ 93.609868][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.615660][ T9738] __mod_memcg_state+0xca/0x1a0 [ 93.620499][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 93.626134][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.631591][ T9738] ? can_split_huge_page+0x480/0x480 [ 93.636858][ T9738] ? pmd_val+0x7c/0xf0 [ 93.640915][ T9738] ? enabled_store+0x190/0x190 [ 93.645692][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 93.650978][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 93.656445][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.663113][ T9738] __walk_page_range+0xcfb/0x2070 [ 93.668135][ T9738] ? walk_page_test+0x78/0x180 [ 93.672904][ T9738] walk_page_range+0x1bd/0x3a0 [ 93.677673][ T9738] ? __walk_page_range+0x2070/0x2070 [ 93.683048][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 93.688679][ T9738] madvise_free_single_vma+0x384/0x550 [ 93.694244][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 93.699182][ T9738] ? lock_acquire+0x197/0x420 [ 93.703854][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 93.709171][ T9738] ? vmacache_find+0x62/0x300 [ 93.713859][ T9738] ? vmacache_update+0xce/0x140 [ 93.718709][ T9738] ? find_vma+0x2b/0x170 [ 93.723012][ T9738] do_madvise+0x5ba/0x1b80 [ 93.727417][ T9738] ? unuse_pde+0x2c/0x80 [ 93.731674][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 93.737394][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 93.742318][ T9738] ? fput_many+0x2f/0x1a0 [ 93.746656][ T9738] ? do_futex+0x1b90/0x1b90 [ 93.751142][ T9738] ? ksys_read+0x19f/0x250 [ 93.755544][ T9738] ? kernel_write+0x120/0x120 [ 93.760207][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 93.765213][ T9738] __x64_sys_madvise+0xae/0x120 [ 93.770047][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.775329][ T9738] do_syscall_64+0xf6/0x7d0 [ 93.779913][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.785802][ T9738] RIP: 0033:0x460bf7 [ 93.789680][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.809277][ T9738] RSP: 002b:000000c000107c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.817694][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.825655][ T9738] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005e8000 [ 93.833634][ T9738] RBP: 000000c000107c90 R08: 000000c000400000 R09: 000000c0007e8000 [ 93.841605][ T9738] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 93.849570][ T9738] R13: 00007f3e23675008 R14: 0000000000000001 R15: 0000000000000001 [ 93.857713][ T9738] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9738 [ 93.866816][ T9738] caller is __mod_memcg_state+0x87/0x1a0 [ 93.872558][ T9738] CPU: 0 PID: 9738 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.882029][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.892223][ T9738] Call Trace: [ 93.895511][ T9738] dump_stack+0x188/0x20d [ 93.899855][ T9738] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.905657][ T9738] __mod_memcg_state+0x87/0x1a0 [ 93.910496][ T9738] split_huge_page_to_list+0x124b/0x3380 [ 93.916198][ T9738] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.921673][ T9738] ? can_split_huge_page+0x480/0x480 [ 93.926980][ T9738] ? pmd_val+0x7c/0xf0 [ 93.931051][ T9738] ? enabled_store+0x190/0x190 [ 93.935809][ T9738] madvise_free_huge_pmd+0x873/0xb90 [ 93.942579][ T9738] madvise_free_pte_range+0x6ff/0x2650 [ 93.948293][ T9738] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.955031][ T9738] __walk_page_range+0xcfb/0x2070 [ 93.960187][ T9738] ? walk_page_test+0x78/0x180 [ 93.964968][ T9738] walk_page_range+0x1bd/0x3a0 [ 93.969722][ T9738] ? __walk_page_range+0x2070/0x2070 [ 93.975015][ T9738] ? madvise_free_single_vma+0x2c1/0x550 [ 93.980683][ T9738] madvise_free_single_vma+0x384/0x550 [ 93.986135][ T9738] ? madvise_pageout+0x3b0/0x3b0 [ 93.991088][ T9738] ? lock_acquire+0x197/0x420 [ 93.995751][ T9738] ? userfaultfd_remove+0xf0/0x2b0 [ 94.000868][ T9738] ? vmacache_find+0x62/0x300 [ 94.005556][ T9738] ? vmacache_update+0xce/0x140 [ 94.010460][ T9738] ? find_vma+0x2b/0x170 [ 94.014715][ T9738] do_madvise+0x5ba/0x1b80 [ 94.019127][ T9738] ? unuse_pde+0x2c/0x80 [ 94.023384][ T9738] ? madvise_free_pte_range+0x2650/0x2650 [ 94.029118][ T9738] ? __x64_sys_futex+0x376/0x4f0 [ 94.034046][ T9738] ? fput_many+0x2f/0x1a0 [ 94.038360][ T9738] ? do_futex+0x1b90/0x1b90 [ 94.042842][ T9738] ? ksys_read+0x19f/0x250 [ 94.047238][ T9738] ? kernel_write+0x120/0x120 [ 94.051915][ T9738] ? __x64_sys_madvise+0xae/0x120 [ 94.056949][ T9738] __x64_sys_madvise+0xae/0x120 [ 94.061821][ T9738] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.067099][ T9738] do_syscall_64+0xf6/0x7d0 [ 94.071641][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.077640][ T9738] RIP: 0033:0x460bf7 [ 94.081614][ T9738] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 94.101569][ T9738] RSP: 002b:000000c000107c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.109968][ T9738] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 94.118028][ T9738] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005e8000 [ 94.126436][ T9738] RBP: 000000c000107c90 R08: 000000c000400000 R09: 000000c0007e8000 [ 94.134403][ T9738] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 94.142531][ T9738] R13: 00007f3e23675008 R14: 0000000000000001 R15: 0000000000000001 [ 94.672054][ T9720] can: request_module (can-proto-0) failed. executing program [ 96.855581][ T9720] can: request_module (can-proto-0) failed. [ 96.867812][ T9720] can: request_module (can-proto-0) failed.