Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. 2020/03/07 13:14:15 fuzzer started syzkaller login: [ 93.816107][ T9675] check_preemption_disabled: 3 callbacks suppressed [ 93.816119][ T9675] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9675 [ 93.833186][ T9675] caller is __mod_memcg_state+0x27/0x1a0 [ 93.838898][ T9675] CPU: 1 PID: 9675 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.848356][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.858498][ T9675] Call Trace: [ 93.861814][ T9675] dump_stack+0x188/0x20d [ 93.866152][ T9675] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.871952][ T9675] __mod_memcg_state+0x27/0x1a0 [ 93.876806][ T9675] split_huge_page_to_list+0x124b/0x3380 [ 93.882431][ T9675] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.887872][ T9675] ? can_split_huge_page+0x480/0x480 [ 93.893204][ T9675] ? pmd_val+0x7c/0xf0 [ 93.897258][ T9675] ? enabled_store+0x190/0x190 [ 93.902010][ T9675] madvise_free_huge_pmd+0x873/0xb90 [ 93.907646][ T9675] madvise_free_pte_range+0x6ff/0x2650 [ 93.913083][ T9675] ? mark_lock+0xbc/0x1220 [ 93.917490][ T9675] ? mark_held_locks+0x9f/0xe0 [ 93.922244][ T9675] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.928921][ T9675] __walk_page_range+0xcfb/0x2070 [ 93.933942][ T9675] ? walk_page_test+0x78/0x180 [ 93.938689][ T9675] walk_page_range+0x1bd/0x3a0 [ 93.943444][ T9675] ? __walk_page_range+0x2070/0x2070 [ 93.948795][ T9675] ? madvise_free_single_vma+0x2c1/0x550 [ 93.954441][ T9675] madvise_free_single_vma+0x384/0x550 [ 93.959906][ T9675] ? madvise_pageout+0x3b0/0x3b0 [ 93.964896][ T9675] ? lock_acquire+0x197/0x420 [ 93.969622][ T9675] ? userfaultfd_remove+0xf0/0x2b0 [ 93.974753][ T9675] ? vmacache_find+0x62/0x300 [ 93.979436][ T9675] ? find_vma+0x2b/0x170 [ 93.983668][ T9675] do_madvise+0x5ba/0x1b80 [ 93.988179][ T9675] ? madvise_free_pte_range+0x2650/0x2650 [ 93.993890][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.999163][ T9675] ? __x64_sys_futex+0x376/0x4f0 [ 94.004552][ T9675] ? do_futex+0x1b90/0x1b90 [ 94.009052][ T9675] ? __x64_sys_madvise+0xae/0x120 [ 94.014142][ T9675] __x64_sys_madvise+0xae/0x120 [ 94.019018][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.024288][ T9675] do_syscall_64+0xf6/0x7d0 [ 94.028778][ T9675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.034655][ T9675] RIP: 0033:0x460bf7 [ 94.038541][ T9675] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 94.058150][ T9675] RSP: 002b:000000c00004de70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.066553][ T9675] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 94.074558][ T9675] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000258000 [ 94.082521][ T9675] RBP: 000000c00004deb0 R08: 000000c000200000 R09: 000000c00026a000 [ 94.090534][ T9675] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 94.099449][ T9675] R13: 0000000000000041 R14: 0000000000000040 R15: 0000000000000200 [ 94.107684][ T9675] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9675 [ 94.116668][ T9675] caller is __mod_memcg_state+0xca/0x1a0 [ 94.122536][ T9675] CPU: 1 PID: 9675 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 94.132111][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.142284][ T9675] Call Trace: [ 94.145606][ T9675] dump_stack+0x188/0x20d [ 94.149925][ T9675] __this_cpu_preempt_check.cold+0x84/0x90 [ 94.155713][ T9675] __mod_memcg_state+0xca/0x1a0 [ 94.160549][ T9675] split_huge_page_to_list+0x124b/0x3380 [ 94.166175][ T9675] ? madvise_free_huge_pmd+0x869/0xb90 [ 94.171630][ T9675] ? can_split_huge_page+0x480/0x480 [ 94.176895][ T9675] ? pmd_val+0x7c/0xf0 [ 94.180958][ T9675] ? enabled_store+0x190/0x190 [ 94.185709][ T9675] madvise_free_huge_pmd+0x873/0xb90 [ 94.191004][ T9675] madvise_free_pte_range+0x6ff/0x2650 [ 94.196453][ T9675] ? mark_lock+0xbc/0x1220 [ 94.200856][ T9675] ? mark_held_locks+0x9f/0xe0 [ 94.205690][ T9675] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 94.212349][ T9675] __walk_page_range+0xcfb/0x2070 [ 94.217547][ T9675] ? walk_page_test+0x78/0x180 [ 94.222360][ T9675] walk_page_range+0x1bd/0x3a0 [ 94.227116][ T9675] ? __walk_page_range+0x2070/0x2070 [ 94.232393][ T9675] ? madvise_free_single_vma+0x2c1/0x550 [ 94.238142][ T9675] madvise_free_single_vma+0x384/0x550 [ 94.243587][ T9675] ? madvise_pageout+0x3b0/0x3b0 [ 94.248529][ T9675] ? lock_acquire+0x197/0x420 [ 94.253223][ T9675] ? userfaultfd_remove+0xf0/0x2b0 [ 94.258429][ T9675] ? vmacache_find+0x62/0x300 [ 94.263108][ T9675] ? find_vma+0x2b/0x170 [ 94.267353][ T9675] do_madvise+0x5ba/0x1b80 [ 94.271770][ T9675] ? madvise_free_pte_range+0x2650/0x2650 [ 94.277474][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.282759][ T9675] ? __x64_sys_futex+0x376/0x4f0 [ 94.287678][ T9675] ? do_futex+0x1b90/0x1b90 [ 94.292169][ T9675] ? __x64_sys_madvise+0xae/0x120 [ 94.297185][ T9675] __x64_sys_madvise+0xae/0x120 [ 94.302019][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.307285][ T9675] do_syscall_64+0xf6/0x7d0 [ 94.311774][ T9675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.317644][ T9675] RIP: 0033:0x460bf7 [ 94.321533][ T9675] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 94.341137][ T9675] RSP: 002b:000000c00004de70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.349545][ T9675] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 94.357507][ T9675] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000258000 [ 94.365517][ T9675] RBP: 000000c00004deb0 R08: 000000c000200000 R09: 000000c00026a000 [ 94.373557][ T9675] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 94.381512][ T9675] R13: 0000000000000041 R14: 0000000000000040 R15: 0000000000000200 [ 94.389698][ T9675] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9675 [ 94.398797][ T9675] caller is __mod_memcg_state+0x87/0x1a0 [ 94.404458][ T9675] CPU: 1 PID: 9675 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 94.413910][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.424656][ T9675] Call Trace: [ 94.427937][ T9675] dump_stack+0x188/0x20d [ 94.432257][ T9675] __this_cpu_preempt_check.cold+0x84/0x90 [ 94.438053][ T9675] __mod_memcg_state+0x87/0x1a0 [ 94.442904][ T9675] split_huge_page_to_list+0x124b/0x3380 [ 94.448550][ T9675] ? madvise_free_huge_pmd+0x869/0xb90 [ 94.453998][ T9675] ? can_split_huge_page+0x480/0x480 [ 94.459269][ T9675] ? pmd_val+0x7c/0xf0 [ 94.463327][ T9675] ? enabled_store+0x190/0x190 [ 94.468084][ T9675] madvise_free_huge_pmd+0x873/0xb90 [ 94.473399][ T9675] madvise_free_pte_range+0x6ff/0x2650 [ 94.478884][ T9675] ? mark_lock+0xbc/0x1220 [ 94.483450][ T9675] ? mark_held_locks+0x9f/0xe0 [ 94.488645][ T9675] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 94.495317][ T9675] __walk_page_range+0xcfb/0x2070 [ 94.500373][ T9675] ? walk_page_test+0x78/0x180 [ 94.505144][ T9675] walk_page_range+0x1bd/0x3a0 [ 94.509932][ T9675] ? __walk_page_range+0x2070/0x2070 [ 94.515245][ T9675] ? madvise_free_single_vma+0x2c1/0x550 [ 94.520889][ T9675] madvise_free_single_vma+0x384/0x550 [ 94.526489][ T9675] ? madvise_pageout+0x3b0/0x3b0 [ 94.531448][ T9675] ? lock_acquire+0x197/0x420 [ 94.536142][ T9675] ? userfaultfd_remove+0xf0/0x2b0 [ 94.541253][ T9675] ? vmacache_find+0x62/0x300 [ 94.546024][ T9675] ? find_vma+0x2b/0x170 [ 94.550263][ T9675] do_madvise+0x5ba/0x1b80 [ 94.554695][ T9675] ? madvise_free_pte_range+0x2650/0x2650 [ 94.560397][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.565669][ T9675] ? __x64_sys_futex+0x376/0x4f0 [ 94.570593][ T9675] ? do_futex+0x1b90/0x1b90 [ 94.575107][ T9675] ? __x64_sys_madvise+0xae/0x120 [ 94.580131][ T9675] __x64_sys_madvise+0xae/0x120 [ 94.584980][ T9675] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.590256][ T9675] do_syscall_64+0xf6/0x7d0 [ 94.594748][ T9675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.600625][ T9675] RIP: 0033:0x460bf7 [ 94.604507][ T9675] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 94.624095][ T9675] RSP: 002b:000000c00004de70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.632501][ T9675] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 94.640605][ T9675] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000258000 [ 94.648573][ T9675] RBP: 000000c00004deb0 R08: 000000c000200000 R09: 000000c00026a000 [ 94.656547][ T9675] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 94.665006][ T9675] R13: 0000000000000041 R14: 0000000000000040 R15: 0000000000000200 2020/03/07 13:14:17 connecting to host at 10.128.0.26:43345 2020/03/07 13:14:17 checking machine... 2020/03/07 13:14:17 checking revisions... 2020/03/07 13:14:18 testing simple program... [ 96.313858][ T9690] IPVS: ftp: loaded support on port[0] = 21 2020/03/07 13:14:18 building call list... [ 96.450232][ T9680] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9680 [ 96.459409][ T9680] caller is __mod_memcg_state+0x27/0x1a0 [ 96.465051][ T9680] CPU: 1 PID: 9680 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 96.474597][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.485875][ T9680] Call Trace: [ 96.489186][ T9680] dump_stack+0x188/0x20d [ 96.493537][ T9680] __this_cpu_preempt_check.cold+0x84/0x90 [ 96.499400][ T9680] __mod_memcg_state+0x27/0x1a0 [ 96.504279][ T9680] split_huge_page_to_list+0x124b/0x3380 [ 96.510058][ T9680] ? madvise_free_huge_pmd+0x869/0xb90 [ 96.515621][ T9680] ? can_split_huge_page+0x480/0x480 [ 96.520918][ T9680] ? pmd_val+0x7c/0xf0 [ 96.525018][ T9680] ? enabled_store+0x190/0x190 [ 96.529889][ T9680] madvise_free_huge_pmd+0x873/0xb90 [ 96.535208][ T9680] madvise_free_pte_range+0x6ff/0x2650 [ 96.540685][ T9680] ? mark_lock+0xbc/0x1220 [ 96.545119][ T9680] ? mark_held_locks+0x9f/0xe0 [ 96.549884][ T9680] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 96.556569][ T9680] __walk_page_range+0xcfb/0x2070 [ 96.561692][ T9680] ? walk_page_test+0x78/0x180 [ 96.566464][ T9680] walk_page_range+0x1bd/0x3a0 [ 96.571234][ T9680] ? __walk_page_range+0x2070/0x2070 [ 96.576534][ T9680] ? madvise_free_single_vma+0x2c1/0x550 [ 96.582192][ T9680] madvise_free_single_vma+0x384/0x550 [ 96.587663][ T9680] ? madvise_pageout+0x3b0/0x3b0 [ 96.592613][ T9680] ? lock_acquire+0x197/0x420 [ 96.597290][ T9680] ? userfaultfd_remove+0xf0/0x2b0 [ 96.602469][ T9680] ? vmacache_find+0x62/0x300 [ 96.607169][ T9680] ? vmacache_update+0xce/0x140 [ 96.612034][ T9680] ? find_vma+0x2b/0x170 [ 96.616568][ T9680] do_madvise+0x5ba/0x1b80 [ 96.621019][ T9680] ? madvise_free_pte_range+0x2650/0x2650 [ 96.626769][ T9680] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 96.632333][ T9680] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 96.638315][ T9680] ? __x64_sys_futex+0x376/0x4f0 [ 96.643536][ T9680] ? switch_fpu_return+0x1db/0x4b0 [ 96.648648][ T9680] ? fpregs_mark_activate+0x320/0x320 [ 96.654029][ T9680] ? __x64_sys_madvise+0xae/0x120 [ 96.659203][ T9680] __x64_sys_madvise+0xae/0x120 [ 96.664061][ T9680] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.669357][ T9680] do_syscall_64+0xf6/0x7d0 [ 96.673981][ T9680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.679986][ T9680] RIP: 0033:0x460bf7 [ 96.683887][ T9680] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 96.703605][ T9680] RSP: 002b:000000c0000d9e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 96.712030][ T9680] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 96.720251][ T9680] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001be000 [ 96.728237][ T9680] RBP: 000000c0000d9eb0 R08: 000000c000000000 R09: 000000c0001c0000 [ 96.736233][ T9680] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000004 [ 96.744340][ T9680] R13: 00007f813f50f008 R14: 0000000000000010 R15: 00000000000000fa [ 96.752600][ T9680] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9680 [ 96.761832][ T9680] caller is __mod_memcg_state+0xca/0x1a0 [ 96.767548][ T9680] CPU: 1 PID: 9680 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 96.777118][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.787529][ T9680] Call Trace: [ 96.790828][ T9680] dump_stack+0x188/0x20d [ 96.795186][ T9680] __this_cpu_preempt_check.cold+0x84/0x90 [ 96.801018][ T9680] __mod_memcg_state+0xca/0x1a0 [ 96.805899][ T9680] split_huge_page_to_list+0x124b/0x3380 [ 96.811577][ T9680] ? madvise_free_huge_pmd+0x869/0xb90 [ 96.817053][ T9680] ? can_split_huge_page+0x480/0x480 [ 96.822343][ T9680] ? pmd_val+0x7c/0xf0 [ 96.826544][ T9680] ? enabled_store+0x190/0x190 [ 96.831330][ T9680] madvise_free_huge_pmd+0x873/0xb90 [ 96.837212][ T9680] madvise_free_pte_range+0x6ff/0x2650 [ 96.842697][ T9680] ? mark_lock+0xbc/0x1220 [ 96.847132][ T9680] ? mark_held_locks+0x9f/0xe0 [ 96.851914][ T9680] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 96.858617][ T9680] __walk_page_range+0xcfb/0x2070 [ 96.863700][ T9680] ? walk_page_test+0x78/0x180 [ 96.868496][ T9680] walk_page_range+0x1bd/0x3a0 [ 96.873285][ T9680] ? __walk_page_range+0x2070/0x2070 [ 96.878599][ T9680] ? madvise_free_single_vma+0x2c1/0x550 [ 96.884292][ T9680] madvise_free_single_vma+0x384/0x550 [ 96.889775][ T9680] ? madvise_pageout+0x3b0/0x3b0 [ 96.894828][ T9680] ? lock_acquire+0x197/0x420 [ 96.899560][ T9680] ? userfaultfd_remove+0xf0/0x2b0 [ 96.904882][ T9680] ? vmacache_find+0x62/0x300 [ 96.909575][ T9680] ? vmacache_update+0xce/0x140 [ 96.914428][ T9680] ? find_vma+0x2b/0x170 [ 96.918694][ T9680] do_madvise+0x5ba/0x1b80 [ 96.923155][ T9680] ? madvise_free_pte_range+0x2650/0x2650 [ 96.928899][ T9680] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 96.934449][ T9680] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 96.940429][ T9680] ? __x64_sys_futex+0x376/0x4f0 [ 96.945559][ T9680] ? switch_fpu_return+0x1db/0x4b0 [ 96.950673][ T9680] ? fpregs_mark_activate+0x320/0x320 [ 96.956058][ T9680] ? __x64_sys_madvise+0xae/0x120 [ 96.961112][ T9680] __x64_sys_madvise+0xae/0x120 [ 96.965964][ T9680] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.971250][ T9680] do_syscall_64+0xf6/0x7d0 [ 96.975757][ T9680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.981651][ T9680] RIP: 0033:0x460bf7 [ 96.985548][ T9680] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 97.005233][ T9680] RSP: 002b:000000c0000d9e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 97.013642][ T9680] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 97.021611][ T9680] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001be000 [ 97.029743][ T9680] RBP: 000000c0000d9eb0 R08: 000000c000000000 R09: 000000c0001c0000 [ 97.037813][ T9680] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000004 [ 97.045786][ T9680] R13: 00007f813f50f008 R14: 0000000000000010 R15: 00000000000000fa [ 97.053924][ T9680] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9680 [ 97.063019][ T9680] caller is __mod_memcg_state+0x87/0x1a0 [ 97.068726][ T9680] CPU: 1 PID: 9680 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.078323][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.088468][ T9680] Call Trace: [ 97.091772][ T9680] dump_stack+0x188/0x20d [ 97.096116][ T9680] __this_cpu_preempt_check.cold+0x84/0x90 [ 97.101926][ T9680] __mod_memcg_state+0x87/0x1a0 [ 97.106805][ T9680] split_huge_page_to_list+0x124b/0x3380 [ 97.112461][ T9680] ? madvise_free_huge_pmd+0x869/0xb90 [ 97.117944][ T9680] ? can_split_huge_page+0x480/0x480 [ 97.123229][ T9680] ? pmd_val+0x7c/0xf0 [ 97.127305][ T9680] ? enabled_store+0x190/0x190 [ 97.132085][ T9680] madvise_free_huge_pmd+0x873/0xb90 [ 97.137388][ T9680] madvise_free_pte_range+0x6ff/0x2650 [ 97.142846][ T9680] ? mark_lock+0xbc/0x1220 [ 97.147275][ T9680] ? mark_held_locks+0x9f/0xe0 [ 97.152042][ T9680] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 97.158725][ T9680] __walk_page_range+0xcfb/0x2070 [ 97.163790][ T9680] ? walk_page_test+0x78/0x180 [ 97.168557][ T9680] walk_page_range+0x1bd/0x3a0 [ 97.173320][ T9680] ? __walk_page_range+0x2070/0x2070 [ 97.178616][ T9680] ? madvise_free_single_vma+0x2c1/0x550 [ 97.184263][ T9680] madvise_free_single_vma+0x384/0x550 [ 97.189728][ T9680] ? madvise_pageout+0x3b0/0x3b0 [ 97.194673][ T9680] ? lock_acquire+0x197/0x420 [ 97.199375][ T9680] ? userfaultfd_remove+0xf0/0x2b0 [ 97.204499][ T9680] ? vmacache_find+0x62/0x300 [ 97.209323][ T9680] ? vmacache_update+0xce/0x140 [ 97.214190][ T9680] ? find_vma+0x2b/0x170 [ 97.218465][ T9680] do_madvise+0x5ba/0x1b80 [ 97.223044][ T9680] ? madvise_free_pte_range+0x2650/0x2650 [ 97.228793][ T9680] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 97.234430][ T9680] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 97.240409][ T9680] ? __x64_sys_futex+0x376/0x4f0 [ 97.245360][ T9680] ? switch_fpu_return+0x1db/0x4b0 [ 97.250584][ T9680] ? fpregs_mark_activate+0x320/0x320 [ 97.255992][ T9680] ? __x64_sys_madvise+0xae/0x120 [ 97.261024][ T9680] __x64_sys_madvise+0xae/0x120 [ 97.265882][ T9680] ? lockdep_hardirqs_on+0x417/0x5d0 [ 97.271261][ T9680] do_syscall_64+0xf6/0x7d0 [ 97.275771][ T9680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.281659][ T9680] RIP: 0033:0x460bf7 [ 97.285567][ T9680] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 97.305185][ T9680] RSP: 002b:000000c0000d9e70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 97.313609][ T9680] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 97.321596][ T9680] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001be000 [ 97.329585][ T9680] RBP: 000000c0000d9eb0 R08: 000000c000000000 R09: 000000c0001c0000 [ 97.337566][ T9680] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000004 [ 97.345538][ T9680] R13: 00007f813f50f008 R14: 0000000000000010 R15: 00000000000000fa [ 97.377331][ T7] [ 97.379835][ T7] ============================= [ 97.384701][ T7] WARNING: suspicious RCU usage [ 97.389928][ T7] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 97.396875][ T7] ----------------------------- [ 97.401981][ T7] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!! [ 97.411495][ T7] [ 97.411495][ T7] other info that might help us debug this: [ 97.411495][ T7] [ 97.422256][ T7] [ 97.422256][ T7] rcu_scheduler_active = 2, debug_locks = 1 [ 97.430607][ T7] 3 locks held by kworker/u4:0/7: [ 97.435673][ T7] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 97.445677][ T7] #1: ffffc90000cdfdd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 97.455374][ T7] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 97.464431][ T7] [ 97.464431][ T7] stack backtrace: [ 97.470572][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.479955][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.490033][ T7] Workqueue: netns cleanup_net [ 97.494897][ T7] Call Trace: [ 97.498220][ T7] dump_stack+0x188/0x20d [ 97.502557][ T7] ovs_ct_exit+0x3db/0x558 [ 97.507009][ T7] ovs_exit_net+0x1df/0xba0 [ 97.511534][ T7] ? ovs_dp_cmd_del+0x270/0x270 [ 97.516569][ T7] ? __mutex_unlock_slowpath+0xe2/0x660 [ 97.522131][ T7] ? ovs_dp_cmd_del+0x270/0x270 [ 97.527007][ T7] ops_exit_list.isra.0+0xa8/0x150 [ 97.532134][ T7] cleanup_net+0x511/0xa50 [ 97.536566][ T7] ? unregister_pernet_device+0x70/0x70 [ 97.542126][ T7] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 97.548121][ T7] process_one_work+0x94b/0x1690 [ 97.553110][ T7] ? pwq_dec_nr_in_flight+0x310/0x310 [ 97.558500][ T7] ? do_raw_spin_lock+0x129/0x2e0 [ 97.563558][ T7] worker_thread+0x96/0xe20 [ 97.568081][ T7] ? process_one_work+0x1690/0x1690 [ 97.573288][ T7] kthread+0x357/0x430 [ 97.577356][ T7] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 97.583086][ T7] ret_from_fork+0x24/0x30 [ 97.622921][ T9695] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9695 [ 97.631920][ T9695] caller is __mod_memcg_state+0x27/0x1a0 [ 97.637820][ T9695] CPU: 0 PID: 9695 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.647425][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.657469][ T9695] Call Trace: [ 97.660840][ T9695] dump_stack+0x188/0x20d [ 97.665161][ T9695] __this_cpu_preempt_check.cold+0x84/0x90 [ 97.671159][ T9695] __mod_memcg_state+0x27/0x1a0 [ 97.676205][ T9695] split_huge_page_to_list+0x124b/0x3380 [ 97.681850][ T9695] ? madvise_free_huge_pmd+0x869/0xb90 [ 97.687299][ T9695] ? can_split_huge_page+0x480/0x480 [ 97.693023][ T9695] ? pmd_val+0x7c/0xf0 [ 97.697098][ T9695] ? enabled_store+0x190/0x190 [ 97.701909][ T9695] madvise_free_huge_pmd+0x873/0xb90 [ 97.707219][ T9695] madvise_free_pte_range+0x6ff/0x2650 [ 97.712696][ T9695] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 97.719379][ T9695] __walk_page_range+0xcfb/0x2070 [ 97.724645][ T9695] ? walk_page_test+0x78/0x180 [ 97.729499][ T9695] walk_page_range+0x1bd/0x3a0 [ 97.734370][ T9695] ? __walk_page_range+0x2070/0x2070 [ 97.739655][ T9695] ? madvise_free_single_vma+0x2c1/0x550 [ 97.745350][ T9695] madvise_free_single_vma+0x384/0x550 [ 97.750806][ T9695] ? madvise_pageout+0x3b0/0x3b0 [ 97.755749][ T9695] ? lock_acquire+0x197/0x420 [ 97.760420][ T9695] ? userfaultfd_remove+0xf0/0x2b0 [ 97.765526][ T9695] ? vmacache_find+0x62/0x300 [ 97.770198][ T9695] ? find_vma+0x2b/0x170 [ 97.774428][ T9695] do_madvise+0x5ba/0x1b80 [ 97.778829][ T9695] ? unuse_pde+0x2c/0x80 [ 97.783079][ T9695] ? madvise_free_pte_range+0x2650/0x2650 [ 97.788815][ T9695] ? __x64_sys_futex+0x376/0x4f0 [ 97.793756][ T9695] ? fput_many+0x2f/0x1a0 [ 97.798073][ T9695] ? do_futex+0x1b90/0x1b90 [ 97.802659][ T9695] ? ksys_read+0x19f/0x250 [ 97.807061][ T9695] ? kernel_write+0x120/0x120 [ 97.811735][ T9695] ? __x64_sys_madvise+0xae/0x120 [ 97.816761][ T9695] __x64_sys_madvise+0xae/0x120 [ 97.821623][ T9695] ? lockdep_hardirqs_on+0x417/0x5d0 [ 97.826891][ T9695] do_syscall_64+0xf6/0x7d0 [ 97.831391][ T9695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.837317][ T9695] RIP: 0033:0x460bf7 [ 97.841195][ T9695] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 97.860811][ T9695] RSP: 002b:000000c0000ddc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 97.869208][ T9695] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 97.877340][ T9695] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003cc000 [ 97.885315][ T9695] RBP: 000000c0000ddc90 R08: 000000c000200000 R09: 000000c00044c000 [ 97.893321][ T9695] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 97.901282][ T9695] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 97.909418][ T9695] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9695 [ 97.918315][ T9695] caller is __mod_memcg_state+0xca/0x1a0 [ 97.923932][ T9695] CPU: 0 PID: 9695 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.933362][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.943634][ T9695] Call Trace: [ 97.946928][ T9695] dump_stack+0x188/0x20d [ 97.951253][ T9695] __this_cpu_preempt_check.cold+0x84/0x90 [ 97.957233][ T9695] __mod_memcg_state+0xca/0x1a0 [ 97.962083][ T9695] split_huge_page_to_list+0x124b/0x3380 [ 97.967724][ T9695] ? madvise_free_huge_pmd+0x869/0xb90 [ 97.973598][ T9695] ? can_split_huge_page+0x480/0x480 [ 97.978979][ T9695] ? pmd_val+0x7c/0xf0 [ 97.983048][ T9695] ? enabled_store+0x190/0x190 [ 97.987818][ T9695] madvise_free_huge_pmd+0x873/0xb90 [ 97.993115][ T9695] madvise_free_pte_range+0x6ff/0x2650 [ 97.998594][ T9695] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 98.005249][ T9695] __walk_page_range+0xcfb/0x2070 [ 98.010279][ T9695] ? walk_page_test+0x78/0x180 [ 98.015024][ T9695] walk_page_range+0x1bd/0x3a0 [ 98.019769][ T9695] ? __walk_page_range+0x2070/0x2070 [ 98.025040][ T9695] ? madvise_free_single_vma+0x2c1/0x550 [ 98.031012][ T9695] madvise_free_single_vma+0x384/0x550 [ 98.036455][ T9695] ? madvise_pageout+0x3b0/0x3b0 [ 98.041378][ T9695] ? lock_acquire+0x197/0x420 [ 98.046037][ T9695] ? userfaultfd_remove+0xf0/0x2b0 [ 98.051156][ T9695] ? vmacache_find+0x62/0x300 [ 98.055881][ T9695] ? find_vma+0x2b/0x170 [ 98.060126][ T9695] do_madvise+0x5ba/0x1b80 [ 98.064524][ T9695] ? unuse_pde+0x2c/0x80 [ 98.068771][ T9695] ? madvise_free_pte_range+0x2650/0x2650 [ 98.074485][ T9695] ? __x64_sys_futex+0x376/0x4f0 [ 98.079408][ T9695] ? fput_many+0x2f/0x1a0 [ 98.083727][ T9695] ? do_futex+0x1b90/0x1b90 [ 98.088210][ T9695] ? ksys_read+0x19f/0x250 [ 98.092613][ T9695] ? kernel_write+0x120/0x120 [ 98.097624][ T9695] ? __x64_sys_madvise+0xae/0x120 [ 98.102625][ T9695] __x64_sys_madvise+0xae/0x120 [ 98.107468][ T9695] ? lockdep_hardirqs_on+0x417/0x5d0 [ 98.112748][ T9695] do_syscall_64+0xf6/0x7d0 [ 98.117855][ T9695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 98.123733][ T9695] RIP: 0033:0x460bf7 [ 98.127607][ T9695] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 98.147196][ T9695] RSP: 002b:000000c0000ddc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 98.155617][ T9695] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 98.163659][ T9695] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003cc000 [ 98.171729][ T9695] RBP: 000000c0000ddc90 R08: 000000c000200000 R09: 000000c00044c000 [ 98.179715][ T9695] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 98.187775][ T9695] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 98.195990][ T9695] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9695 [ 98.205109][ T9695] caller is __mod_memcg_state+0x87/0x1a0 [ 98.210878][ T9695] CPU: 0 PID: 9695 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 98.220336][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.230379][ T9695] Call Trace: [ 98.233762][ T9695] dump_stack+0x188/0x20d [ 98.238112][ T9695] __this_cpu_preempt_check.cold+0x84/0x90 [ 98.244047][ T9695] __mod_memcg_state+0x87/0x1a0 [ 98.248909][ T9695] split_huge_page_to_list+0x124b/0x3380 [ 98.254544][ T9695] ? madvise_free_huge_pmd+0x869/0xb90 [ 98.259998][ T9695] ? can_split_huge_page+0x480/0x480 [ 98.265276][ T9695] ? pmd_val+0x7c/0xf0 [ 98.269355][ T9695] ? enabled_store+0x190/0x190 [ 98.274309][ T9695] madvise_free_huge_pmd+0x873/0xb90 [ 98.279636][ T9695] madvise_free_pte_range+0x6ff/0x2650 [ 98.285116][ T9695] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 98.291800][ T9695] __walk_page_range+0xcfb/0x2070 [ 98.296861][ T9695] ? walk_page_test+0x78/0x180 [ 98.301627][ T9695] walk_page_range+0x1bd/0x3a0 [ 98.306380][ T9695] ? __walk_page_range+0x2070/0x2070 [ 98.311928][ T9695] ? madvise_free_single_vma+0x2c1/0x550 [ 98.317564][ T9695] madvise_free_single_vma+0x384/0x550 [ 98.323027][ T9695] ? madvise_pageout+0x3b0/0x3b0 [ 98.327961][ T9695] ? lock_acquire+0x197/0x420 [ 98.332788][ T9695] ? userfaultfd_remove+0xf0/0x2b0 [ 98.337905][ T9695] ? vmacache_find+0x62/0x300 [ 98.342573][ T9695] ? find_vma+0x2b/0x170 [ 98.346905][ T9695] do_madvise+0x5ba/0x1b80 [ 98.351318][ T9695] ? unuse_pde+0x2c/0x80 [ 98.355666][ T9695] ? madvise_free_pte_range+0x2650/0x2650 [ 98.361464][ T9695] ? __x64_sys_futex+0x376/0x4f0 [ 98.366439][ T9695] ? fput_many+0x2f/0x1a0 [ 98.370753][ T9695] ? do_futex+0x1b90/0x1b90 [ 98.375234][ T9695] ? ksys_read+0x19f/0x250 [ 98.379696][ T9695] ? kernel_write+0x120/0x120 [ 98.384388][ T9695] ? __x64_sys_madvise+0xae/0x120 [ 98.389406][ T9695] __x64_sys_madvise+0xae/0x120 [ 98.394291][ T9695] ? lockdep_hardirqs_on+0x417/0x5d0 [ 98.399813][ T9695] do_syscall_64+0xf6/0x7d0 [ 98.404331][ T9695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 98.410236][ T9695] RIP: 0033:0x460bf7 [ 98.414134][ T9695] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 98.433730][ T9695] RSP: 002b:000000c0000ddc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 98.442139][ T9695] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 98.450091][ T9695] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003cc000 [ 98.458059][ T9695] RBP: 000000c0000ddc90 R08: 000000c000200000 R09: 000000c00044c000 [ 98.466013][ T9695] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 98.474015][ T9695] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 98.606835][ T7] tipc: TX() has been purged, node left! [ 98.648872][ T7] [ 98.651323][ T7] ============================= [ 98.656163][ T7] WARNING: suspicious RCU usage [ 98.661508][ T7] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 98.668465][ T7] ----------------------------- [ 98.673377][ T7] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!! [ 98.681780][ T7] [ 98.681780][ T7] other info that might help us debug this: [ 98.681780][ T7] [ 98.692622][ T7] [ 98.692622][ T7] rcu_scheduler_active = 2, debug_locks = 1 [ 98.701120][ T7] 4 locks held by kworker/u4:0/7: [ 98.706194][ T7] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 98.716517][ T7] #1: ffffc90000cdfdd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 98.726442][ T7] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 98.757886][ T7] #3: ffffffff8a552d00 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700 [ 98.767656][ T7] [ 98.767656][ T7] stack backtrace: [ 98.773627][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 98.782997][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.793078][ T7] Workqueue: netns cleanup_net [ 98.797845][ T7] Call Trace: [ 98.801141][ T7] dump_stack+0x188/0x20d [ 98.805501][ T7] ipmr_device_event+0x240/0x2b0 [ 98.810461][ T7] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 98.816377][ T7] notifier_call_chain+0xc0/0x230 [ 98.821433][ T7] call_netdevice_notifiers_info+0xb5/0x130 [ 98.827345][ T7] rollback_registered_many+0x75c/0xe70 [ 98.832900][ T7] ? netif_set_real_num_tx_queues+0x700/0x700 [ 98.838983][ T7] ? lock_downgrade+0x7f0/0x7f0 [ 98.843848][ T7] unregister_netdevice_many.part.0+0x16/0x1e0 [ 98.850007][ T7] unregister_netdevice_many+0x36/0x50 [ 98.855556][ T7] ip6gre_exit_batch_net+0x4e8/0x700 [ 98.860848][ T7] ? ip6gre_tunnel_link+0xf0/0xf0 [ 98.865955][ T7] ? rcu_read_lock_held_common+0x130/0x130 [ 98.871778][ T7] ? ip6gre_tunnel_link+0xf0/0xf0 [ 98.876813][ T7] ops_exit_list.isra.0+0x103/0x150 [ 98.882894][ T7] cleanup_net+0x511/0xa50 [ 98.887318][ T7] ? unregister_pernet_device+0x70/0x70 [ 98.892883][ T7] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 98.898889][ T7] process_one_work+0x94b/0x1690 [ 98.903933][ T7] ? pwq_dec_nr_in_flight+0x310/0x310 [ 98.909318][ T7] ? do_raw_spin_lock+0x129/0x2e0 [ 98.914362][ T7] worker_thread+0x96/0xe20 [ 98.918879][ T7] ? process_one_work+0x1690/0x1690 [ 98.924079][ T7] kthread+0x357/0x430 [ 98.928177][ T7] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 98.933896][ T7] ret_from_fork+0x24/0x30 executing program [ 99.178522][ T9677] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9677 [ 99.187544][ T9677] caller is __mod_memcg_state+0x27/0x1a0 [ 99.193295][ T9677] CPU: 1 PID: 9677 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 99.202901][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.212945][ T9677] Call Trace: [ 99.216261][ T9677] dump_stack+0x188/0x20d [ 99.220592][ T9677] __this_cpu_preempt_check.cold+0x84/0x90 [ 99.226403][ T9677] __mod_memcg_state+0x27/0x1a0 [ 99.231242][ T9677] split_huge_page_to_list+0x124b/0x3380 [ 99.236876][ T9677] ? madvise_free_huge_pmd+0x869/0xb90 [ 99.242329][ T9677] ? can_split_huge_page+0x480/0x480 [ 99.247706][ T9677] ? pmd_val+0x7c/0xf0 [ 99.251768][ T9677] ? enabled_store+0x190/0x190 [ 99.256530][ T9677] madvise_free_huge_pmd+0x873/0xb90 [ 99.261898][ T9677] madvise_free_pte_range+0x6ff/0x2650 [ 99.267362][ T9677] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 99.274146][ T9677] __walk_page_range+0xcfb/0x2070 [ 99.279202][ T9677] ? walk_page_test+0x78/0x180 [ 99.283953][ T9677] walk_page_range+0x1bd/0x3a0 [ 99.288702][ T9677] ? __walk_page_range+0x2070/0x2070 [ 99.293973][ T9677] ? madvise_free_single_vma+0x2c1/0x550 [ 99.299608][ T9677] madvise_free_single_vma+0x384/0x550 [ 99.305072][ T9677] ? madvise_pageout+0x3b0/0x3b0 [ 99.310097][ T9677] ? lock_acquire+0x197/0x420 [ 99.314762][ T9677] ? userfaultfd_remove+0xf0/0x2b0 [ 99.320032][ T9677] ? vmacache_find+0x62/0x300 [ 99.324762][ T9677] ? vmacache_update+0xce/0x140 [ 99.329607][ T9677] ? find_vma+0x2b/0x170 [ 99.333838][ T9677] do_madvise+0x5ba/0x1b80 [ 99.338262][ T9677] ? unuse_pde+0x2c/0x80 [ 99.342499][ T9677] ? madvise_free_pte_range+0x2650/0x2650 [ 99.348239][ T9677] ? __x64_sys_futex+0x376/0x4f0 [ 99.353189][ T9677] ? fput_many+0x2f/0x1a0 [ 99.357516][ T9677] ? do_futex+0x1b90/0x1b90 [ 99.362135][ T9677] ? ksys_read+0x19f/0x250 [ 99.366544][ T9677] ? kernel_write+0x120/0x120 [ 99.371225][ T9677] ? __x64_sys_madvise+0xae/0x120 [ 99.376321][ T9677] __x64_sys_madvise+0xae/0x120 [ 99.381179][ T9677] ? lockdep_hardirqs_on+0x417/0x5d0 [ 99.386462][ T9677] do_syscall_64+0xf6/0x7d0 [ 99.391032][ T9677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.396932][ T9677] RIP: 0033:0x460bf7 [ 99.400812][ T9677] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 99.420408][ T9677] RSP: 002b:000000c0000d7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 99.428829][ T9677] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 99.436796][ T9677] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00054c000 [ 99.444879][ T9677] RBP: 000000c0000d7c90 R08: 000000c000400000 R09: 000000c00074c000 [ 99.452900][ T9677] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 99.461095][ T9677] R13: 00007f813f50f6d0 R14: 0000000000000001 R15: 0000000000000001 [ 99.469333][ T9677] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9677 [ 99.478231][ T9677] caller is __mod_memcg_state+0xca/0x1a0 [ 99.484061][ T9677] CPU: 1 PID: 9677 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 99.493500][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.503680][ T9677] Call Trace: [ 99.506993][ T9677] dump_stack+0x188/0x20d [ 99.511342][ T9677] __this_cpu_preempt_check.cold+0x84/0x90 [ 99.517159][ T9677] __mod_memcg_state+0xca/0x1a0 [ 99.522023][ T9677] split_huge_page_to_list+0x124b/0x3380 [ 99.527671][ T9677] ? madvise_free_huge_pmd+0x869/0xb90 [ 99.533138][ T9677] ? can_split_huge_page+0x480/0x480 [ 99.538438][ T9677] ? pmd_val+0x7c/0xf0 [ 99.542513][ T9677] ? enabled_store+0x190/0x190 [ 99.547277][ T9677] madvise_free_huge_pmd+0x873/0xb90 [ 99.552842][ T9677] madvise_free_pte_range+0x6ff/0x2650 [ 99.558302][ T9677] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 99.569144][ T9677] __walk_page_range+0xcfb/0x2070 [ 99.574177][ T9677] ? walk_page_test+0x78/0x180 [ 99.578931][ T9677] walk_page_range+0x1bd/0x3a0 [ 99.583682][ T9677] ? __walk_page_range+0x2070/0x2070 [ 99.589738][ T9677] ? madvise_free_single_vma+0x2c1/0x550 [ 99.595376][ T9677] madvise_free_single_vma+0x384/0x550 [ 99.600825][ T9677] ? madvise_pageout+0x3b0/0x3b0 [ 99.605761][ T9677] ? lock_acquire+0x197/0x420 [ 99.610433][ T9677] ? userfaultfd_remove+0xf0/0x2b0 [ 99.615548][ T9677] ? vmacache_find+0x62/0x300 [ 99.620216][ T9677] ? vmacache_update+0xce/0x140 [ 99.625051][ T9677] ? find_vma+0x2b/0x170 [ 99.629314][ T9677] do_madvise+0x5ba/0x1b80 [ 99.633729][ T9677] ? unuse_pde+0x2c/0x80 [ 99.637965][ T9677] ? madvise_free_pte_range+0x2650/0x2650 [ 99.643686][ T9677] ? __x64_sys_futex+0x376/0x4f0 [ 99.648629][ T9677] ? fput_many+0x2f/0x1a0 [ 99.653242][ T9677] ? do_futex+0x1b90/0x1b90 [ 99.657758][ T9677] ? ksys_read+0x19f/0x250 [ 99.662166][ T9677] ? kernel_write+0x120/0x120 [ 99.666868][ T9677] ? __x64_sys_madvise+0xae/0x120 [ 99.671891][ T9677] __x64_sys_madvise+0xae/0x120 [ 99.676739][ T9677] ? lockdep_hardirqs_on+0x417/0x5d0 [ 99.682010][ T9677] do_syscall_64+0xf6/0x7d0 [ 99.686500][ T9677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.692388][ T9677] RIP: 0033:0x460bf7 [ 99.696263][ T9677] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 99.715851][ T9677] RSP: 002b:000000c0000d7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 99.724260][ T9677] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 99.732217][ T9677] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00054c000 [ 99.740178][ T9677] RBP: 000000c0000d7c90 R08: 000000c000400000 R09: 000000c00074c000 [ 99.748161][ T9677] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 99.756121][ T9677] R13: 00007f813f50f6d0 R14: 0000000000000001 R15: 0000000000000001 [ 99.764202][ T9677] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9677 [ 99.773359][ T9677] caller is __mod_memcg_state+0x87/0x1a0 [ 99.779081][ T9677] CPU: 1 PID: 9677 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 99.788528][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.798582][ T9677] Call Trace: [ 99.801862][ T9677] dump_stack+0x188/0x20d [ 99.806186][ T9677] __this_cpu_preempt_check.cold+0x84/0x90 [ 99.811975][ T9677] __mod_memcg_state+0x87/0x1a0 [ 99.816814][ T9677] split_huge_page_to_list+0x124b/0x3380 [ 99.822634][ T9677] ? madvise_free_huge_pmd+0x869/0xb90 [ 99.828074][ T9677] ? can_split_huge_page+0x480/0x480 [ 99.833341][ T9677] ? pmd_val+0x7c/0xf0 [ 99.837394][ T9677] ? enabled_store+0x190/0x190 [ 99.842145][ T9677] madvise_free_huge_pmd+0x873/0xb90 [ 99.847421][ T9677] madvise_free_pte_range+0x6ff/0x2650 [ 99.852884][ T9677] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 99.859557][ T9677] __walk_page_range+0xcfb/0x2070 [ 99.864602][ T9677] ? walk_page_test+0x78/0x180 [ 99.869356][ T9677] walk_page_range+0x1bd/0x3a0 [ 99.874153][ T9677] ? __walk_page_range+0x2070/0x2070 [ 99.879656][ T9677] ? madvise_free_single_vma+0x2c1/0x550 [ 99.885354][ T9677] madvise_free_single_vma+0x384/0x550 [ 99.890814][ T9677] ? madvise_pageout+0x3b0/0x3b0 [ 99.895809][ T9677] ? lock_acquire+0x197/0x420 [ 99.900573][ T9677] ? userfaultfd_remove+0xf0/0x2b0 [ 99.905782][ T9677] ? vmacache_find+0x62/0x300 [ 99.910509][ T9677] ? vmacache_update+0xce/0x140 [ 99.915350][ T9677] ? find_vma+0x2b/0x170 [ 99.919598][ T9677] do_madvise+0x5ba/0x1b80 [ 99.924017][ T9677] ? unuse_pde+0x2c/0x80 [ 99.928277][ T9677] ? madvise_free_pte_range+0x2650/0x2650 [ 99.933987][ T9677] ? __x64_sys_futex+0x376/0x4f0 [ 99.938922][ T9677] ? fput_many+0x2f/0x1a0 [ 99.943234][ T9677] ? do_futex+0x1b90/0x1b90 [ 99.947731][ T9677] ? ksys_read+0x19f/0x250 [ 99.952138][ T9677] ? kernel_write+0x120/0x120 [ 99.956804][ T9677] ? __x64_sys_madvise+0xae/0x120 [ 99.961810][ T9677] __x64_sys_madvise+0xae/0x120 [ 99.966661][ T9677] ? lockdep_hardirqs_on+0x417/0x5d0 [ 99.971930][ T9677] do_syscall_64+0xf6/0x7d0 [ 99.976421][ T9677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.982293][ T9677] RIP: 0033:0x460bf7 [ 99.986343][ T9677] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 100.006104][ T9677] RSP: 002b:000000c0000d7c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 100.014530][ T9677] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 100.022500][ T9677] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00054c000 [ 100.030607][ T9677] RBP: 000000c0000d7c90 R08: 000000c000400000 R09: 000000c00074c000 [ 100.038614][ T9677] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 100.046587][ T9677] R13: 00007f813f50f6d0 R14: 0000000000000001 R15: 0000000000000001 [ 100.580171][ T9677] can: request_module (can-proto-0) failed. executing program [ 102.785072][ T9677] can: request_module (can-proto-0) failed. [ 102.797544][ T9677] can: request_module (can-proto-0) failed.