[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   84.101914][   T27] audit: type=1800 audit(1583834672.327:25): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   84.122925][   T27] audit: type=1800 audit(1583834672.327:26): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   84.194597][   T27] audit: type=1800 audit(1583834672.327:27): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts.
2020/03/10 10:04:40 fuzzer started
syzkaller login: [   92.136979][ T9653] check_preemption_disabled: 3 callbacks suppressed
[   92.136991][ T9653] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9653
[   92.154040][ T9653] caller is __mod_memcg_state+0x27/0x1a0
[   92.159724][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   92.169186][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.179237][ T9653] Call Trace:
[   92.182870][ T9653]  dump_stack+0x188/0x20d
[   92.187209][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   92.192998][ T9653]  __mod_memcg_state+0x27/0x1a0
[   92.197839][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   92.203482][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   92.208935][ T9653]  ? can_split_huge_page+0x480/0x480
[   92.214466][ T9653]  ? pmd_val+0x7c/0xf0
[   92.218540][ T9653]  ? enabled_store+0x190/0x190
[   92.223391][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   92.228773][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   92.234390][ T9653]  ? mark_lock+0xbc/0x1220
[   92.238800][ T9653]  ? mark_held_locks+0x9f/0xe0
[   92.243562][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   92.250227][ T9653]  __walk_page_range+0xcfb/0x2070
[   92.255257][ T9653]  ? walk_page_test+0x78/0x180
[   92.260009][ T9653]  walk_page_range+0x1bd/0x3a0
[   92.265037][ T9653]  ? __walk_page_range+0x2070/0x2070
[   92.270327][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   92.275952][ T9653]  madvise_free_single_vma+0x384/0x550
[   92.281392][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   92.286316][ T9653]  ? lock_acquire+0x197/0x420
[   92.290974][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   92.296073][ T9653]  ? vmacache_find+0x62/0x300
[   92.300733][ T9653]  ? find_vma+0x2b/0x170
[   92.304979][ T9653]  do_madvise+0x5ba/0x1b80
[   92.309387][ T9653]  ? lock_downgrade+0x7f0/0x7f0
[   92.314242][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   92.319943][ T9653]  ? ktime_get+0x1f8/0x2f0
[   92.324345][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   92.329267][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   92.334445][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   92.339803][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   92.344896][ T9653]  __x64_sys_madvise+0xae/0x120
[   92.349743][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   92.355090][ T9653]  do_syscall_64+0xf6/0x7d0
[   92.359760][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   92.365690][ T9653] RIP: 0033:0x460bf7
[   92.369576][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   92.392368][ T9653] RSP: 002b:00007ffe831d1250 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   92.400774][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   92.408821][ T9653] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c000266000
[   92.416771][ T9653] RBP: 00007ffe831d1290 R08: 000000c000200000 R09: 000000c000270000
[   92.424807][ T9653] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9
[   92.432770][ T9653] R13: 000000c0003ce578 R14: 0000000000000001 R15: 0000000000000004
[   92.441285][ T9653] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9653
[   92.450205][ T9653] caller is __mod_memcg_state+0xca/0x1a0
[   92.455926][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   92.465369][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.475415][ T9653] Call Trace:
[   92.478691][ T9653]  dump_stack+0x188/0x20d
[   92.483010][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   92.488797][ T9653]  __mod_memcg_state+0xca/0x1a0
[   92.493632][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   92.499254][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   92.504714][ T9653]  ? can_split_huge_page+0x480/0x480
[   92.509980][ T9653]  ? pmd_val+0x7c/0xf0
[   92.514037][ T9653]  ? enabled_store+0x190/0x190
[   92.518787][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   92.524072][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   92.529509][ T9653]  ? mark_lock+0xbc/0x1220
[   92.533996][ T9653]  ? mark_held_locks+0x9f/0xe0
[   92.538911][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   92.545634][ T9653]  __walk_page_range+0xcfb/0x2070
[   92.550690][ T9653]  ? walk_page_test+0x78/0x180
[   92.555443][ T9653]  walk_page_range+0x1bd/0x3a0
[   92.560191][ T9653]  ? __walk_page_range+0x2070/0x2070
[   92.565482][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   92.571130][ T9653]  madvise_free_single_vma+0x384/0x550
[   92.576573][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   92.581497][ T9653]  ? lock_acquire+0x197/0x420
[   92.586155][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   92.591251][ T9653]  ? vmacache_find+0x62/0x300
[   92.595927][ T9653]  ? find_vma+0x2b/0x170
[   92.600172][ T9653]  do_madvise+0x5ba/0x1b80
[   92.604569][ T9653]  ? lock_downgrade+0x7f0/0x7f0
[   92.609511][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   92.615225][ T9653]  ? ktime_get+0x1f8/0x2f0
[   92.619644][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   92.624572][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   92.629671][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   92.635121][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   92.640133][ T9653]  __x64_sys_madvise+0xae/0x120
[   92.644973][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   92.650247][ T9653]  do_syscall_64+0xf6/0x7d0
[   92.654737][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   92.660608][ T9653] RIP: 0033:0x460bf7
[   92.664480][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   92.684061][ T9653] RSP: 002b:00007ffe831d1250 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   92.692894][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   92.700843][ T9653] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c000266000
[   92.708794][ T9653] RBP: 00007ffe831d1290 R08: 000000c000200000 R09: 000000c000270000
[   92.716754][ T9653] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9
[   92.724713][ T9653] R13: 000000c0003ce578 R14: 0000000000000001 R15: 0000000000000004
[   92.732911][ T9653] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9653
[   92.741985][ T9653] caller is __mod_memcg_state+0x87/0x1a0
[   92.747797][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   92.757278][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.767315][ T9653] Call Trace:
[   92.770596][ T9653]  dump_stack+0x188/0x20d
[   92.774928][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   92.780725][ T9653]  __mod_memcg_state+0x87/0x1a0
[   92.785562][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   92.791186][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   92.796637][ T9653]  ? can_split_huge_page+0x480/0x480
[   92.802074][ T9653]  ? pmd_val+0x7c/0xf0
[   92.806137][ T9653]  ? enabled_store+0x190/0x190
[   92.810902][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   92.816196][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   92.821661][ T9653]  ? mark_lock+0xbc/0x1220
[   92.826137][ T9653]  ? mark_held_locks+0x9f/0xe0
[   92.830892][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   92.837556][ T9653]  __walk_page_range+0xcfb/0x2070
[   92.842628][ T9653]  ? walk_page_test+0x78/0x180
[   92.847413][ T9653]  walk_page_range+0x1bd/0x3a0
[   92.852155][ T9653]  ? __walk_page_range+0x2070/0x2070
[   92.857430][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   92.863045][ T9653]  madvise_free_single_vma+0x384/0x550
[   92.868541][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   92.873471][ T9653]  ? lock_acquire+0x197/0x420
[   92.878125][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   92.883223][ T9653]  ? vmacache_find+0x62/0x300
[   92.887880][ T9653]  ? find_vma+0x2b/0x170
[   92.892129][ T9653]  do_madvise+0x5ba/0x1b80
[   92.896533][ T9653]  ? lock_downgrade+0x7f0/0x7f0
[   92.901504][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   92.907208][ T9653]  ? ktime_get+0x1f8/0x2f0
[   92.911671][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   92.916641][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   92.921737][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   92.927107][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   92.932117][ T9653]  __x64_sys_madvise+0xae/0x120
[   92.936990][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   92.942256][ T9653]  do_syscall_64+0xf6/0x7d0
[   92.946745][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   92.952639][ T9653] RIP: 0033:0x460bf7
[   92.956513][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   92.976106][ T9653] RSP: 002b:00007ffe831d1250 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   92.984552][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   92.992643][ T9653] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c000266000
[   93.000614][ T9653] RBP: 00007ffe831d1290 R08: 000000c000200000 R09: 000000c000270000
[   93.008600][ T9653] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9
[   93.016563][ T9653] R13: 000000c0003ce578 R14: 0000000000000001 R15: 0000000000000004
2020/03/10 10:04:42 connecting to host at 10.128.0.26:35973
2020/03/10 10:04:42 checking machine...
2020/03/10 10:04:42 checking revisions...
2020/03/10 10:04:42 testing simple program...
[   94.435073][ T9671] IPVS: ftp: loaded support on port[0] = 21
2020/03/10 10:04:42 building call list...
[   94.562676][ T9658] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9658
[   94.571877][ T9658] caller is __mod_memcg_state+0x27/0x1a0
[   94.577557][ T9658] CPU: 0 PID: 9658 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   94.587008][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   94.597160][ T9658] Call Trace:
[   94.600531][ T9658]  dump_stack+0x188/0x20d
[   94.604848][ T9658]  __this_cpu_preempt_check.cold+0x84/0x90
[   94.610637][ T9658]  __mod_memcg_state+0x27/0x1a0
[   94.615473][ T9658]  split_huge_page_to_list+0x124b/0x3380
[   94.621137][ T9658]  ? madvise_free_huge_pmd+0x869/0xb90
[   94.626580][ T9658]  ? can_split_huge_page+0x480/0x480
[   94.631845][ T9658]  ? pmd_val+0x7c/0xf0
[   94.635908][ T9658]  ? enabled_store+0x190/0x190
[   94.640694][ T9658]  madvise_free_huge_pmd+0x873/0xb90
[   94.645983][ T9658]  madvise_free_pte_range+0x6ff/0x2650
[   94.651431][ T9658]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   94.658090][ T9658]  __walk_page_range+0xcfb/0x2070
[   94.663117][ T9658]  ? walk_page_test+0x78/0x180
[   94.667872][ T9658]  walk_page_range+0x1bd/0x3a0
[   94.672620][ T9658]  ? __walk_page_range+0x2070/0x2070
[   94.677904][ T9658]  ? madvise_free_single_vma+0x2c1/0x550
[   94.683535][ T9658]  madvise_free_single_vma+0x384/0x550
[   94.689011][ T9658]  ? madvise_pageout+0x3b0/0x3b0
[   94.693940][ T9658]  ? lock_acquire+0x197/0x420
[   94.698606][ T9658]  ? userfaultfd_remove+0xf0/0x2b0
[   94.703703][ T9658]  ? vmacache_find+0x62/0x300
[   94.708361][ T9658]  ? find_vma+0x2b/0x170
[   94.712587][ T9658]  do_madvise+0x5ba/0x1b80
[   94.716986][ T9658]  ? lock_downgrade+0x7f0/0x7f0
[   94.722616][ T9658]  ? madvise_free_pte_range+0x2650/0x2650
[   94.728318][ T9658]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   94.733844][ T9658]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   94.739815][ T9658]  ? __x64_sys_futex+0x376/0x4f0
[   94.744810][ T9658]  ? switch_fpu_return+0x1db/0x4b0
[   94.749958][ T9658]  ? fpregs_mark_activate+0x320/0x320
[   94.755321][ T9658]  ? __x64_sys_madvise+0xae/0x120
[   94.760335][ T9658]  __x64_sys_madvise+0xae/0x120
[   94.765613][ T9658]  ? lockdep_hardirqs_on+0x417/0x5d0
[   94.770878][ T9658]  do_syscall_64+0xf6/0x7d0
[   94.775368][ T9658]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   94.781247][ T9658] RIP: 0033:0x460bf7
[   94.785124][ T9658] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   94.804708][ T9658] RSP: 002b:000000c0000e3e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   94.813099][ T9658] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   94.821049][ T9658] RDX: 0000000000000008 RSI: 0000000000010000 RDI: 000000c0003f4000
[   94.828998][ T9658] RBP: 000000c0000e3eb0 R08: 000000c000200000 R09: 000000c000404000
[   94.836951][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[   94.844901][ T9658] R13: 0000000000000001 R14: 000000c00006e120 R15: 0000000000000000
[   94.852976][ T9658] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9658
[   94.861825][ T9658] caller is __mod_memcg_state+0xca/0x1a0
[   94.867490][ T9658] CPU: 0 PID: 9658 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   94.877113][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   94.887163][ T9658] Call Trace:
[   94.890435][ T9658]  dump_stack+0x188/0x20d
[   94.894849][ T9658]  __this_cpu_preempt_check.cold+0x84/0x90
[   94.900650][ T9658]  __mod_memcg_state+0xca/0x1a0
[   94.905849][ T9658]  split_huge_page_to_list+0x124b/0x3380
[   94.911483][ T9658]  ? madvise_free_huge_pmd+0x869/0xb90
[   94.916934][ T9658]  ? can_split_huge_page+0x480/0x480
[   94.922205][ T9658]  ? pmd_val+0x7c/0xf0
[   94.926259][ T9658]  ? enabled_store+0x190/0x190
[   94.931008][ T9658]  madvise_free_huge_pmd+0x873/0xb90
[   94.936295][ T9658]  madvise_free_pte_range+0x6ff/0x2650
[   94.941754][ T9658]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   94.948420][ T9658]  __walk_page_range+0xcfb/0x2070
[   94.953440][ T9658]  ? walk_page_test+0x78/0x180
[   94.958199][ T9658]  walk_page_range+0x1bd/0x3a0
[   94.962973][ T9658]  ? __walk_page_range+0x2070/0x2070
[   94.968269][ T9658]  ? madvise_free_single_vma+0x2c1/0x550
[   94.973944][ T9658]  madvise_free_single_vma+0x384/0x550
[   94.979413][ T9658]  ? madvise_pageout+0x3b0/0x3b0
[   94.984350][ T9658]  ? lock_acquire+0x197/0x420
[   94.989024][ T9658]  ? userfaultfd_remove+0xf0/0x2b0
[   94.994144][ T9658]  ? vmacache_find+0x62/0x300
[   94.998803][ T9658]  ? find_vma+0x2b/0x170
[   95.003308][ T9658]  do_madvise+0x5ba/0x1b80
[   95.007801][ T9658]  ? lock_downgrade+0x7f0/0x7f0
[   95.012652][ T9658]  ? madvise_free_pte_range+0x2650/0x2650
[   95.018351][ T9658]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   95.023877][ T9658]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   95.029843][ T9658]  ? __x64_sys_futex+0x376/0x4f0
[   95.034771][ T9658]  ? switch_fpu_return+0x1db/0x4b0
[   95.039934][ T9658]  ? fpregs_mark_activate+0x320/0x320
[   95.045421][ T9658]  ? __x64_sys_madvise+0xae/0x120
[   95.050433][ T9658]  __x64_sys_madvise+0xae/0x120
[   95.055271][ T9658]  ? lockdep_hardirqs_on+0x417/0x5d0
[   95.060538][ T9658]  do_syscall_64+0xf6/0x7d0
[   95.065038][ T9658]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   95.070909][ T9658] RIP: 0033:0x460bf7
[   95.074786][ T9658] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   95.094369][ T9658] RSP: 002b:000000c0000e3e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   95.102781][ T9658] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   95.110752][ T9658] RDX: 0000000000000008 RSI: 0000000000010000 RDI: 000000c0003f4000
[   95.118712][ T9658] RBP: 000000c0000e3eb0 R08: 000000c000200000 R09: 000000c000404000
[   95.126667][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[   95.134623][ T9658] R13: 0000000000000001 R14: 000000c00006e120 R15: 0000000000000000
[   95.142722][ T9658] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9658
[   95.152244][ T9658] caller is __mod_memcg_state+0x87/0x1a0
[   95.157962][ T9658] CPU: 0 PID: 9658 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   95.167423][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   95.177475][ T9658] Call Trace:
[   95.180763][ T9658]  dump_stack+0x188/0x20d
[   95.185090][ T9658]  __this_cpu_preempt_check.cold+0x84/0x90
[   95.190889][ T9658]  __mod_memcg_state+0x87/0x1a0
[   95.195757][ T9658]  split_huge_page_to_list+0x124b/0x3380
[   95.201398][ T9658]  ? madvise_free_huge_pmd+0x869/0xb90
[   95.206860][ T9658]  ? can_split_huge_page+0x480/0x480
[   95.212240][ T9658]  ? pmd_val+0x7c/0xf0
[   95.216297][ T9658]  ? enabled_store+0x190/0x190
[   95.221050][ T9658]  madvise_free_huge_pmd+0x873/0xb90
[   95.226556][ T9658]  madvise_free_pte_range+0x6ff/0x2650
[   95.232023][ T9658]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   95.238690][ T9658]  __walk_page_range+0xcfb/0x2070
[   95.243831][ T9658]  ? walk_page_test+0x78/0x180
[   95.248584][ T9658]  walk_page_range+0x1bd/0x3a0
[   95.253333][ T9658]  ? __walk_page_range+0x2070/0x2070
[   95.258607][ T9658]  ? madvise_free_single_vma+0x2c1/0x550
[   95.264236][ T9658]  madvise_free_single_vma+0x384/0x550
[   95.269721][ T9658]  ? madvise_pageout+0x3b0/0x3b0
[   95.274656][ T9658]  ? lock_acquire+0x197/0x420
[   95.279315][ T9658]  ? userfaultfd_remove+0xf0/0x2b0
[   95.284414][ T9658]  ? vmacache_find+0x62/0x300
[   95.289072][ T9658]  ? find_vma+0x2b/0x170
[   95.293316][ T9658]  do_madvise+0x5ba/0x1b80
[   95.297710][ T9658]  ? lock_downgrade+0x7f0/0x7f0
[   95.302604][ T9658]  ? madvise_free_pte_range+0x2650/0x2650
[   95.309632][ T9658]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   95.315602][ T9658]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   95.321745][ T9658]  ? __x64_sys_futex+0x376/0x4f0
[   95.326696][ T9658]  ? switch_fpu_return+0x1db/0x4b0
[   95.331786][ T9658]  ? fpregs_mark_activate+0x320/0x320
[   95.337159][ T9658]  ? __x64_sys_madvise+0xae/0x120
[   95.342168][ T9658]  __x64_sys_madvise+0xae/0x120
[   95.347008][ T9658]  ? lockdep_hardirqs_on+0x417/0x5d0
[   95.352287][ T9658]  do_syscall_64+0xf6/0x7d0
[   95.356775][ T9658]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   95.362653][ T9658] RIP: 0033:0x460bf7
[   95.366525][ T9658] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   95.386115][ T9658] RSP: 002b:000000c0000e3e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   95.394520][ T9658] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   95.402485][ T9658] RDX: 0000000000000008 RSI: 0000000000010000 RDI: 000000c0003f4000
[   95.410435][ T9658] RBP: 000000c0000e3eb0 R08: 000000c000200000 R09: 000000c000404000
[   95.418387][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[   95.426344][ T9658] R13: 0000000000000001 R14: 000000c00006e120 R15: 0000000000000000
[   95.438335][ T9653] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9653
[   95.447658][ T9653] caller is __mod_memcg_state+0x27/0x1a0
[   95.453352][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   95.462801][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   95.472854][ T9653] Call Trace:
[   95.476152][ T9653]  dump_stack+0x188/0x20d
[   95.480497][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   95.486312][ T9653]  __mod_memcg_state+0x27/0x1a0
[   95.491307][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   95.496985][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   95.502465][ T9653]  ? can_split_huge_page+0x480/0x480
[   95.507753][ T9653]  ? pmd_val+0x7c/0xf0
[   95.511828][ T9653]  ? enabled_store+0x190/0x190
[   95.516606][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   95.521939][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   95.527418][ T9653]  ? mark_lock+0xbc/0x1220
[   95.531842][ T9653]  ? mark_held_locks+0x9f/0xe0
[   95.536606][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   95.543283][ T9653]  __walk_page_range+0xcfb/0x2070
[   95.548345][ T9653]  ? walk_page_test+0x78/0x180
[   95.553117][ T9653]  walk_page_range+0x1bd/0x3a0
[   95.557880][ T9653]  ? __walk_page_range+0x2070/0x2070
[   95.563180][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   95.568826][ T9653]  madvise_free_single_vma+0x384/0x550
[   95.574412][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   95.579369][ T9653]  ? lock_acquire+0x197/0x420
[   95.584062][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   95.589205][ T9653]  ? vmacache_find+0x62/0x300
[   95.593887][ T9653]  ? vmacache_update+0xce/0x140
[   95.598752][ T9653]  ? find_vma+0x2b/0x170
[   95.603014][ T9653]  do_madvise+0x5ba/0x1b80
[   95.607481][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   95.613383][ T9653]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   95.618949][ T9653]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   95.624927][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   95.629871][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   95.634982][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   95.640363][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   95.645388][ T9653]  __x64_sys_madvise+0xae/0x120
[   95.650258][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   95.655543][ T9653]  do_syscall_64+0xf6/0x7d0
[   95.660058][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   95.666815][ T9653] RIP: 0033:0x460bf7
[   95.670730][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   95.690327][ T9653] RSP: 002b:00007ffe831d1030 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   95.698735][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   95.707307][ T9653] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001dc000
[   95.715275][ T9653] RBP: 00007ffe831d1070 R08: 000000c000000000 R09: 000000c0001de000
[   95.723241][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f
[   95.731207][ T9653] R13: 00007efdfaa10008 R14: 0000000000000004 R15: 00000000000000df
[   95.739258][ T9653] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9653
[   95.748163][ T9653] caller is __mod_memcg_state+0xca/0x1a0
[   95.753858][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   95.763324][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   95.773377][ T9653] Call Trace:
[   95.776668][ T9653]  dump_stack+0x188/0x20d
[   95.781006][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   95.786821][ T9653]  __mod_memcg_state+0xca/0x1a0
[   95.791679][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   95.797357][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   95.802821][ T9653]  ? can_split_huge_page+0x480/0x480
[   95.808103][ T9653]  ? pmd_val+0x7c/0xf0
[   95.812398][ T9653]  ? enabled_store+0x190/0x190
[   95.817304][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   95.822628][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   95.828103][ T9653]  ? mark_lock+0xbc/0x1220
[   95.832569][ T9653]  ? mark_held_locks+0x9f/0xe0
[   95.837341][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   95.844041][ T9653]  __walk_page_range+0xcfb/0x2070
[   95.849116][ T9653]  ? walk_page_test+0x78/0x180
[   95.853894][ T9653]  walk_page_range+0x1bd/0x3a0
[   95.858661][ T9653]  ? __walk_page_range+0x2070/0x2070
[   95.863981][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   95.869631][ T9653]  madvise_free_single_vma+0x384/0x550
[   95.875097][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   95.880053][ T9653]  ? lock_acquire+0x197/0x420
[   95.884736][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   95.889868][ T9653]  ? vmacache_find+0x62/0x300
[   95.894560][ T9653]  ? vmacache_update+0xce/0x140
[   95.899422][ T9653]  ? find_vma+0x2b/0x170
[   95.903679][ T9653]  do_madvise+0x5ba/0x1b80
[   95.908132][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   95.913861][ T9653]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   95.919948][ T9653]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   95.925929][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   95.930885][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   95.936014][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   95.941404][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   95.946431][ T9653]  __x64_sys_madvise+0xae/0x120
[   95.951304][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   95.956750][ T9653]  do_syscall_64+0xf6/0x7d0
[   95.961275][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   95.967170][ T9653] RIP: 0033:0x460bf7
[   95.971108][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   95.991501][ T9653] RSP: 002b:00007ffe831d1030 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   95.999928][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   96.007897][ T9653] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001dc000
[   96.015863][ T9653] RBP: 00007ffe831d1070 R08: 000000c000000000 R09: 000000c0001de000
[   96.023836][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f
[   96.031814][ T9653] R13: 00007efdfaa10008 R14: 0000000000000004 R15: 00000000000000df
[   96.040039][ T9653] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9653
[   96.049128][ T9653] caller is __mod_memcg_state+0x87/0x1a0
[   96.054819][ T9653] CPU: 1 PID: 9653 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   96.064264][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   96.074313][ T9653] Call Trace:
[   96.077610][ T9653]  dump_stack+0x188/0x20d
[   96.082035][ T9653]  __this_cpu_preempt_check.cold+0x84/0x90
[   96.087855][ T9653]  __mod_memcg_state+0x87/0x1a0
[   96.092715][ T9653]  split_huge_page_to_list+0x124b/0x3380
[   96.098387][ T9653]  ? madvise_free_huge_pmd+0x869/0xb90
[   96.103958][ T9653]  ? can_split_huge_page+0x480/0x480
[   96.109261][ T9653]  ? pmd_val+0x7c/0xf0
[   96.113345][ T9653]  ? enabled_store+0x190/0x190
[   96.118131][ T9653]  madvise_free_huge_pmd+0x873/0xb90
[   96.123440][ T9653]  madvise_free_pte_range+0x6ff/0x2650
[   96.128904][ T9653]  ? mark_lock+0xbc/0x1220
[   96.133332][ T9653]  ? mark_held_locks+0x9f/0xe0
[   96.138096][ T9653]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   96.144783][ T9653]  __walk_page_range+0xcfb/0x2070
[   96.149823][ T9653]  ? walk_page_test+0x78/0x180
[   96.154574][ T9653]  walk_page_range+0x1bd/0x3a0
[   96.159322][ T9653]  ? __walk_page_range+0x2070/0x2070
[   96.164664][ T9653]  ? madvise_free_single_vma+0x2c1/0x550
[   96.170324][ T9653]  madvise_free_single_vma+0x384/0x550
[   96.175796][ T9653]  ? madvise_pageout+0x3b0/0x3b0
[   96.180730][ T9653]  ? lock_acquire+0x197/0x420
[   96.185398][ T9653]  ? userfaultfd_remove+0xf0/0x2b0
[   96.190506][ T9653]  ? vmacache_find+0x62/0x300
[   96.195176][ T9653]  ? vmacache_update+0xce/0x140
[   96.200012][ T9653]  ? find_vma+0x2b/0x170
[   96.204256][ T9653]  do_madvise+0x5ba/0x1b80
[   96.208674][ T9653]  ? madvise_free_pte_range+0x2650/0x2650
[   96.214396][ T9653]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   96.219948][ T9653]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   96.225952][ T9653]  ? __x64_sys_futex+0x376/0x4f0
[   96.230897][ T9653]  ? switch_fpu_return+0x1db/0x4b0
[   96.236024][ T9653]  ? fpregs_mark_activate+0x320/0x320
[   96.241395][ T9653]  ? __x64_sys_madvise+0xae/0x120
[   96.246408][ T9653]  __x64_sys_madvise+0xae/0x120
[   96.251244][ T9653]  ? lockdep_hardirqs_on+0x417/0x5d0
[   96.256538][ T9653]  do_syscall_64+0xf6/0x7d0
[   96.261033][ T9653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   96.266911][ T9653] RIP: 0033:0x460bf7
[   96.270789][ T9653] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   96.290372][ T9653] RSP: 002b:00007ffe831d1030 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   96.298762][ T9653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   96.306713][ T9653] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001dc000
[   96.314665][ T9653] RBP: 00007ffe831d1070 R08: 000000c000000000 R09: 000000c0001de000
[   96.322630][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f
[   96.330584][ T9653] R13: 00007efdfaa10008 R14: 0000000000000004 R15: 00000000000000df
[   96.344722][  T213] 
[   96.347163][  T213] =============================
[   96.352133][  T213] WARNING: suspicious RCU usage
[   96.358627][  T213] 5.6.0-rc5-next-20200310-syzkaller #0 Not tainted
[   96.365691][  T213] -----------------------------
[   96.370761][  T213] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!!
[   96.394752][  T213] 
[   96.394752][  T213] other info that might help us debug this:
[   96.394752][  T213] 
[   96.405602][  T213] 
[   96.405602][  T213] rcu_scheduler_active = 2, debug_locks = 1
[   96.415481][  T213] 3 locks held by kworker/u4:4/213:
[   96.430341][  T213]  #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690
[   96.462834][  T213]  #1: ffffc900018d7dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690
[   96.472286][  T213]  #2: ffffffff8a547288 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50
[   96.481155][  T213] 
[   96.481155][  T213] stack backtrace:
[   96.487118][  T213] CPU: 1 PID: 213 Comm: kworker/u4:4 Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   96.496659][  T213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   96.506728][  T213] Workqueue: netns cleanup_net
[   96.511490][  T213] Call Trace:
[   96.514789][  T213]  dump_stack+0x188/0x20d
[   96.519125][  T213]  ovs_ct_exit+0x3db/0x558
[   96.523558][  T213]  ovs_exit_net+0x1df/0xba0
[   96.528069][  T213]  ? ovs_dp_cmd_del+0x270/0x270
[   96.532920][  T213]  ? __mutex_unlock_slowpath+0xe2/0x660
[   96.538472][  T213]  ? ovs_dp_cmd_del+0x270/0x270
[   96.543323][  T213]  ops_exit_list.isra.0+0xa8/0x150
[   96.548438][  T213]  cleanup_net+0x511/0xa50
[   96.552956][  T213]  ? unregister_pernet_device+0x70/0x70
[   96.558533][  T213]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   96.564522][  T213]  process_one_work+0x94b/0x1690
[   96.569475][  T213]  ? pwq_dec_nr_in_flight+0x310/0x310
[   96.574843][  T213]  ? do_raw_spin_lock+0x129/0x2e0
[   96.579887][  T213]  worker_thread+0x96/0xe20
[   96.584409][  T213]  ? process_one_work+0x1690/0x1690
[   96.589605][  T213]  kthread+0x357/0x430
[   96.593670][  T213]  ? kthread_mod_delayed_work+0x1a0/0x1a0
[   96.599396][  T213]  ret_from_fork+0x24/0x30
[   96.782998][  T213] tipc: TX() has been purged, node left!
[   96.825193][  T213] 
[   96.827633][  T213] =============================
[   96.832472][  T213] WARNING: suspicious RCU usage
[   96.837849][  T213] 5.6.0-rc5-next-20200310-syzkaller #0 Not tainted
[   96.844739][  T213] -----------------------------
[   96.849631][  T213] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!!
[   96.858082][  T213] 
[   96.858082][  T213] other info that might help us debug this:
[   96.858082][  T213] 
[   96.873340][  T213] 
[   96.873340][  T213] rcu_scheduler_active = 2, debug_locks = 1
[   96.881561][  T213] 4 locks held by kworker/u4:4/213:
[   96.890477][  T213]  #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690
[   96.903194][  T213]  #1: ffffc900018d7dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690
[   96.912712][  T213]  #2: ffffffff8a547288 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50
[   96.921613][  T213]  #3: ffffffff8a553000 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700
[   96.931077][  T213] 
[   96.931077][  T213] stack backtrace:
[   96.937081][  T213] CPU: 0 PID: 213 Comm: kworker/u4:4 Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   96.946622][  T213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   96.956679][  T213] Workqueue: netns cleanup_net
[   96.961436][  T213] Call Trace:
[   96.964724][  T213]  dump_stack+0x188/0x20d
[   96.969060][  T213]  ipmr_device_event+0x240/0x2b0
[   96.974012][  T213]  ? __sanitizer_cov_trace_switch+0x45/0x70
[   96.979910][  T213]  notifier_call_chain+0xc0/0x230
[   96.984948][  T213]  call_netdevice_notifiers_info+0xb5/0x130
[   96.991622][  T213]  rollback_registered_many+0x75c/0xe70
[   96.997173][  T213]  ? netif_set_real_num_tx_queues+0x700/0x700
[   97.003267][  T213]  ? lock_downgrade+0x7f0/0x7f0
[   97.008130][  T213]  unregister_netdevice_many.part.0+0x16/0x1e0
[   97.014283][  T213]  unregister_netdevice_many+0x36/0x50
[   97.019741][  T213]  ip6gre_exit_batch_net+0x4e8/0x700
[   97.025038][  T213]  ? ip6gre_tunnel_link+0xf0/0xf0
[   97.030059][  T213]  ? rcu_read_lock_held_common+0x130/0x130
[   97.035871][  T213]  ? ip6gre_tunnel_link+0xf0/0xf0
[   97.040895][  T213]  ops_exit_list.isra.0+0x103/0x150
[   97.046096][  T213]  cleanup_net+0x511/0xa50
[   97.050516][  T213]  ? unregister_pernet_device+0x70/0x70
[   97.056062][  T213]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[   97.062050][  T213]  process_one_work+0x94b/0x1690
[   97.067007][  T213]  ? pwq_dec_nr_in_flight+0x310/0x310
[   97.072377][  T213]  ? do_raw_spin_lock+0x129/0x2e0
[   97.077421][  T213]  worker_thread+0x96/0xe20
[   97.081937][  T213]  ? process_one_work+0x1690/0x1690
[   97.087139][  T213]  kthread+0x357/0x430
[   97.091212][  T213]  ? kthread_mod_delayed_work+0x1a0/0x1a0
[   97.096944][  T213]  ret_from_fork+0x24/0x30
executing program
[   97.301208][ T9667] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9667
[   97.310238][ T9667] caller is __mod_memcg_state+0x27/0x1a0
[   97.315924][ T9667] CPU: 1 PID: 9667 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   97.325378][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   97.335417][ T9667] Call Trace:
[   97.338693][ T9667]  dump_stack+0x188/0x20d
[   97.343007][ T9667]  __this_cpu_preempt_check.cold+0x84/0x90
[   97.348793][ T9667]  __mod_memcg_state+0x27/0x1a0
[   97.353628][ T9667]  split_huge_page_to_list+0x124b/0x3380
[   97.359265][ T9667]  ? madvise_free_huge_pmd+0x869/0xb90
[   97.364725][ T9667]  ? can_split_huge_page+0x480/0x480
[   97.369999][ T9667]  ? pmd_val+0x7c/0xf0
[   97.374119][ T9667]  ? enabled_store+0x190/0x190
[   97.379024][ T9667]  madvise_free_huge_pmd+0x873/0xb90
[   97.384303][ T9667]  madvise_free_pte_range+0x6ff/0x2650
[   97.389755][ T9667]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   97.396429][ T9667]  __walk_page_range+0xcfb/0x2070
[   97.401454][ T9667]  ? walk_page_test+0x78/0x180
[   97.406201][ T9667]  walk_page_range+0x1bd/0x3a0
[   97.410947][ T9667]  ? __walk_page_range+0x2070/0x2070
[   97.416216][ T9667]  ? madvise_free_single_vma+0x2c1/0x550
[   97.421835][ T9667]  madvise_free_single_vma+0x384/0x550
[   97.427283][ T9667]  ? madvise_pageout+0x3b0/0x3b0
[   97.432216][ T9667]  ? lock_acquire+0x197/0x420
[   97.437004][ T9667]  ? userfaultfd_remove+0xf0/0x2b0
[   97.442166][ T9667]  ? vmacache_find+0x62/0x300
[   97.446871][ T9667]  ? vmacache_update+0xce/0x140
[   97.451706][ T9667]  ? find_vma+0x2b/0x170
[   97.455940][ T9667]  do_madvise+0x5ba/0x1b80
[   97.460347][ T9667]  ? unuse_pde+0x2c/0x80
[   97.464595][ T9667]  ? madvise_free_pte_range+0x2650/0x2650
[   97.470311][ T9667]  ? __x64_sys_futex+0x376/0x4f0
[   97.475236][ T9667]  ? fput_many+0x2f/0x1a0
[   97.479547][ T9667]  ? do_futex+0x1b10/0x1b10
[   97.484027][ T9667]  ? ksys_read+0x19f/0x250
[   97.488433][ T9667]  ? kernel_write+0x120/0x120
[   97.493097][ T9667]  ? __x64_sys_madvise+0xae/0x120
[   97.498102][ T9667]  __x64_sys_madvise+0xae/0x120
[   97.502934][ T9667]  ? lockdep_hardirqs_on+0x417/0x5d0
[   97.508212][ T9667]  do_syscall_64+0xf6/0x7d0
[   97.512704][ T9667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   97.518584][ T9667] RIP: 0033:0x460bf7
[   97.522474][ T9667] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   97.542066][ T9667] RSP: 002b:000000c00031dc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   97.550453][ T9667] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   97.558411][ T9667] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058c000
[   97.566372][ T9667] RBP: 000000c00031dc90 R08: 000000c000400000 R09: 000000c00078c000
[   97.574458][ T9667] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000011
[   97.582463][ T9667] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000
[   97.590541][ T9667] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9667
[   97.599447][ T9667] caller is __mod_memcg_state+0xca/0x1a0
[   97.605138][ T9667] CPU: 1 PID: 9667 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   97.614586][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   97.624619][ T9667] Call Trace:
[   97.627907][ T9667]  dump_stack+0x188/0x20d
[   97.632224][ T9667]  __this_cpu_preempt_check.cold+0x84/0x90
[   97.638022][ T9667]  __mod_memcg_state+0xca/0x1a0
[   97.642865][ T9667]  split_huge_page_to_list+0x124b/0x3380
[   97.648598][ T9667]  ? madvise_free_huge_pmd+0x869/0xb90
[   97.654039][ T9667]  ? can_split_huge_page+0x480/0x480
[   97.659747][ T9667]  ? pmd_val+0x7c/0xf0
[   97.663798][ T9667]  ? enabled_store+0x190/0x190
[   97.668546][ T9667]  madvise_free_huge_pmd+0x873/0xb90
[   97.673821][ T9667]  madvise_free_pte_range+0x6ff/0x2650
[   97.679267][ T9667]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   97.685920][ T9667]  __walk_page_range+0xcfb/0x2070
[   97.690950][ T9667]  ? walk_page_test+0x78/0x180
[   97.695696][ T9667]  walk_page_range+0x1bd/0x3a0
[   97.703302][ T9667]  ? __walk_page_range+0x2070/0x2070
[   97.708570][ T9667]  ? madvise_free_single_vma+0x2c1/0x550
[   97.714200][ T9667]  madvise_free_single_vma+0x384/0x550
[   97.719827][ T9667]  ? madvise_pageout+0x3b0/0x3b0
[   97.724758][ T9667]  ? lock_acquire+0x197/0x420
[   97.729418][ T9667]  ? userfaultfd_remove+0xf0/0x2b0
[   97.734522][ T9667]  ? vmacache_find+0x62/0x300
[   97.739201][ T9667]  ? vmacache_update+0xce/0x140
[   97.744036][ T9667]  ? find_vma+0x2b/0x170
[   97.748274][ T9667]  do_madvise+0x5ba/0x1b80
[   97.752685][ T9667]  ? unuse_pde+0x2c/0x80
[   97.756926][ T9667]  ? madvise_free_pte_range+0x2650/0x2650
[   97.762632][ T9667]  ? __x64_sys_futex+0x376/0x4f0
[   97.767559][ T9667]  ? fput_many+0x2f/0x1a0
[   97.771871][ T9667]  ? do_futex+0x1b10/0x1b10
[   97.776353][ T9667]  ? ksys_read+0x19f/0x250
[   97.780773][ T9667]  ? kernel_write+0x120/0x120
[   97.785439][ T9667]  ? __x64_sys_madvise+0xae/0x120
[   97.790439][ T9667]  __x64_sys_madvise+0xae/0x120
[   97.795269][ T9667]  ? lockdep_hardirqs_on+0x417/0x5d0
[   97.800542][ T9667]  do_syscall_64+0xf6/0x7d0
[   97.805039][ T9667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   97.810907][ T9667] RIP: 0033:0x460bf7
[   97.814791][ T9667] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   97.834636][ T9667] RSP: 002b:000000c00031dc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   97.843031][ T9667] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   97.850982][ T9667] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058c000
[   97.858942][ T9667] RBP: 000000c00031dc90 R08: 000000c000400000 R09: 000000c00078c000
[   97.866895][ T9667] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000011
[   97.874845][ T9667] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000
[   97.882950][ T9667] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9667
[   97.891982][ T9667] caller is __mod_memcg_state+0x87/0x1a0
[   97.897661][ T9667] CPU: 1 PID: 9667 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   97.907117][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   97.917152][ T9667] Call Trace:
[   97.920427][ T9667]  dump_stack+0x188/0x20d
[   97.924744][ T9667]  __this_cpu_preempt_check.cold+0x84/0x90
[   97.930550][ T9667]  __mod_memcg_state+0x87/0x1a0
[   97.935462][ T9667]  split_huge_page_to_list+0x124b/0x3380
[   97.941147][ T9667]  ? madvise_free_huge_pmd+0x869/0xb90
[   97.946604][ T9667]  ? can_split_huge_page+0x480/0x480
[   97.951988][ T9667]  ? pmd_val+0x7c/0xf0
[   97.956050][ T9667]  ? enabled_store+0x190/0x190
[   97.960978][ T9667]  madvise_free_huge_pmd+0x873/0xb90
[   97.966371][ T9667]  madvise_free_pte_range+0x6ff/0x2650
[   97.971822][ T9667]  ? madvise_cold_or_pageout_pte_range+0x3400/0x3400
[   97.978658][ T9667]  __walk_page_range+0xcfb/0x2070
[   97.984205][ T9667]  ? walk_page_test+0x78/0x180
[   97.988964][ T9667]  walk_page_range+0x1bd/0x3a0
[   97.993708][ T9667]  ? __walk_page_range+0x2070/0x2070
[   97.998992][ T9667]  ? madvise_free_single_vma+0x2c1/0x550
[   98.004607][ T9667]  madvise_free_single_vma+0x384/0x550
[   98.010059][ T9667]  ? madvise_pageout+0x3b0/0x3b0
[   98.015000][ T9667]  ? lock_acquire+0x197/0x420
[   98.019743][ T9667]  ? userfaultfd_remove+0xf0/0x2b0
[   98.024851][ T9667]  ? vmacache_find+0x62/0x300
[   98.029509][ T9667]  ? vmacache_update+0xce/0x140
[   98.034337][ T9667]  ? find_vma+0x2b/0x170
[   98.038743][ T9667]  do_madvise+0x5ba/0x1b80
[   98.043142][ T9667]  ? unuse_pde+0x2c/0x80
[   98.047388][ T9667]  ? madvise_free_pte_range+0x2650/0x2650
[   98.053089][ T9667]  ? __x64_sys_futex+0x376/0x4f0
[   98.058018][ T9667]  ? fput_many+0x2f/0x1a0
[   98.062323][ T9667]  ? do_futex+0x1b10/0x1b10
[   98.066803][ T9667]  ? ksys_read+0x19f/0x250
[   98.071200][ T9667]  ? kernel_write+0x120/0x120
[   98.075862][ T9667]  ? __x64_sys_madvise+0xae/0x120
[   98.080866][ T9667]  __x64_sys_madvise+0xae/0x120
[   98.085703][ T9667]  ? lockdep_hardirqs_on+0x417/0x5d0
[   98.090970][ T9667]  do_syscall_64+0xf6/0x7d0
[   98.095455][ T9667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   98.101338][ T9667] RIP: 0033:0x460bf7
[   98.105210][ T9667] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[   98.124811][ T9667] RSP: 002b:000000c00031dc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   98.133211][ T9667] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7
[   98.141169][ T9667] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058c000
[   98.149120][ T9667] RBP: 000000c00031dc90 R08: 000000c000400000 R09: 000000c00078c000
[   98.157094][ T9667] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000011
[   98.165053][ T9667] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000
[   98.520136][ T9667] ------------[ cut here ]------------
[   98.525790][ T9667] WARNING: CPU: 1 PID: 9667 at sound/core/oss/pcm_plugin.c:126 snd_pcm_plug_alloc+0x29a/0x330
[   98.536003][ T9667] Kernel panic - not syncing: panic_on_warn set ...
[   98.542570][ T9667] CPU: 1 PID: 9667 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200310-syzkaller #0
[   98.552001][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   98.562104][ T9667] Call Trace:
[   98.565430][ T9667]  dump_stack+0x188/0x20d
[   98.569748][ T9667]  ? snd_pcm_plug_alloc+0x230/0x330
[   98.575050][ T9667]  panic+0x2e3/0x75c
[   98.578928][ T9667]  ? add_taint.cold+0x16/0x16
[   98.583588][ T9667]  ? printk+0xba/0xed
[   98.587558][ T9667]  ? kmsg_dump_rewind_nolock+0xd9/0xd9
[   98.592999][ T9667]  ? __warn.cold+0x14/0x35
[   98.597391][ T9667]  ? __warn+0xd5/0x1c8
[   98.601450][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.606626][ T9667]  __warn.cold+0x2f/0x35
[   98.610850][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.616027][ T9667]  report_bug+0x27b/0x2f0
[   98.620340][ T9667]  do_error_trap+0x12b/0x220
[   98.624925][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.630107][ T9667]  do_invalid_op+0x32/0x40
[   98.634509][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.639804][ T9667]  invalid_op+0x23/0x30
[   98.643949][ T9667] RIP: 0010:snd_pcm_plug_alloc+0x29a/0x330
[   98.649743][ T9667] Code: ff ff 45 31 e4 e8 16 10 80 fb 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 e8 05 10 80 fb 0f 0b 41 bc fa ff ff ff eb e0 e8 f6 0f 80 fb <0f> 0b 41 bc fa ff ff ff eb d1 e8 e7 0f 80 fb 0f 0b 41 bc fa ff ff
[   98.669441][ T9667] RSP: 0018:ffffc900020b7b88 EFLAGS: 00010293
[   98.675491][ T9667] RAX: ffff88808a8c0500 RBX: ffff8880a4531600 RCX: ffffffff85f2b4e6
[   98.683451][ T9667] RDX: 0000000000000000 RSI: ffffffff85f2b66a RDI: 0000000000000007
[   98.691401][ T9667] RBP: 0000000000000000 R08: ffff88808a8c0500 R09: fffffbfff1854720
[   98.699359][ T9667] R10: ffffffff8c2a38ff R11: fffffbfff185471f R12: ffff8880a4531658
[   98.707309][ T9667] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888099860000
[   98.715276][ T9667]  ? snd_pcm_plug_alloc+0x116/0x330
[   98.720538][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.725982][ T9667]  ? snd_pcm_plug_alloc+0x29a/0x330
[   98.731158][ T9667]  snd_pcm_oss_change_params_locked+0x1c05/0x34b0
[   98.737568][ T9667]  ? _snd_pcm_hw_param_set.constprop.0+0x510/0x510
[   98.744049][ T9667]  ? mark_lock+0xbc/0x1220
[   98.748456][ T9667]  ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0
[   98.754076][ T9667]  snd_pcm_oss_change_params+0x76/0xd0
[   98.759511][ T9667]  snd_pcm_oss_make_ready+0xb7/0x170
[   98.764777][ T9667]  snd_pcm_oss_sync.isra.0+0x1be/0x7d0
[   98.770217][ T9667]  ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0
[   98.775823][ T9667]  snd_pcm_oss_release+0x210/0x280
[   98.780914][ T9667]  __fput+0x2da/0x850
[   98.784882][ T9667]  task_work_run+0xf4/0x1b0
[   98.789378][ T9667]  exit_to_usermode_loop+0x2fa/0x360
[   98.794702][ T9667]  do_syscall_64+0x6b1/0x7d0
[   98.799332][ T9667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   98.805322][ T9667] RIP: 0033:0x4afb40
[   98.809202][ T9667] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[   98.828795][ T9667] RSP: 002b:000000c0001f3588 EFLAGS: 00000212 ORIG_RAX: 0000000000000003
[   98.837187][ T9667] RAX: 0000000000000000 RBX: 000000c00002e500 RCX: 00000000004afb40
[   98.845135][ T9667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   98.853083][ T9667] RBP: 000000c0001f35c8 R08: 0000000000000000 R09: 0000000000000000
[   98.861034][ T9667] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000004
[   98.868984][ T9667] R13: 0000000000000003 R14: 0000000000000200 R15: 0000000000000000
[   98.878554][ T9667] Kernel Offset: disabled
[   98.882964][ T9667] Rebooting in 86400 seconds..