[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.047230][ T27] audit: type=1800 audit(1583781776.100:25): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.067968][ T27] audit: type=1800 audit(1583781776.100:26): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.088992][ T27] audit: type=1800 audit(1583781776.100:27): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2020/03/09 19:23:04 fuzzer started syzkaller login: [ 82.702190][ T9648] check_preemption_disabled: 3 callbacks suppressed [ 82.702212][ T9648] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9648 [ 82.718313][ T9648] caller is __mod_memcg_state+0x27/0x1a0 [ 82.723983][ T9648] CPU: 0 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 82.733449][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.743504][ T9648] Call Trace: [ 82.746805][ T9648] dump_stack+0x188/0x20d [ 82.751146][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 82.756956][ T9648] __mod_memcg_state+0x27/0x1a0 [ 82.761821][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 82.767491][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 82.772983][ T9648] ? can_split_huge_page+0x480/0x480 [ 82.778289][ T9648] ? pmd_val+0x7c/0xf0 [ 82.782388][ T9648] ? enabled_store+0x190/0x190 [ 82.787167][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 82.792487][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 82.797949][ T9648] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 82.806369][ T9648] ? __lock_acquire+0x190f/0x53a0 [ 82.811399][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 82.818078][ T9648] __walk_page_range+0xcfb/0x2070 [ 82.823163][ T9648] ? walk_page_test+0x78/0x180 [ 82.827959][ T9648] walk_page_range+0x1bd/0x3a0 [ 82.832834][ T9648] ? __walk_page_range+0x2070/0x2070 [ 82.838140][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 82.843928][ T9648] madvise_free_single_vma+0x384/0x550 [ 82.849399][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 82.854358][ T9648] ? lock_acquire+0x197/0x420 [ 82.859046][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 82.864181][ T9648] ? vmacache_find+0x62/0x300 [ 82.868892][ T9648] ? find_vma+0x2b/0x170 [ 82.873190][ T9648] do_madvise+0x5ba/0x1b80 [ 82.877607][ T9648] ? lock_downgrade+0x7f0/0x7f0 [ 82.882479][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 82.888201][ T9648] ? ktime_get+0x1f8/0x2f0 [ 82.892625][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 82.897600][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 82.902715][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 82.908120][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 82.913150][ T9648] __x64_sys_madvise+0xae/0x120 [ 82.918031][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 82.923343][ T9648] do_syscall_64+0xf6/0x7d0 [ 82.927865][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.933781][ T9648] RIP: 0033:0x460bf7 [ 82.937688][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 82.957416][ T9648] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 82.965830][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 82.973798][ T9648] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00029e000 [ 82.981853][ T9648] RBP: 000000c0000cdeb0 R08: 000000c000200000 R09: 000000c0002b0000 [ 82.989825][ T9648] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 82.997794][ T9648] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 83.005836][ T9648] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9648 [ 83.014722][ T9648] caller is __mod_memcg_state+0xca/0x1a0 [ 83.020555][ T9648] CPU: 0 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 83.030009][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.040061][ T9648] Call Trace: [ 83.043357][ T9648] dump_stack+0x188/0x20d [ 83.047705][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 83.053515][ T9648] __mod_memcg_state+0xca/0x1a0 [ 83.058384][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 83.064042][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 83.069507][ T9648] ? can_split_huge_page+0x480/0x480 [ 83.074798][ T9648] ? pmd_val+0x7c/0xf0 [ 83.078874][ T9648] ? enabled_store+0x190/0x190 [ 83.083650][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 83.088953][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 83.094413][ T9648] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 83.100229][ T9648] ? __lock_acquire+0x190f/0x53a0 [ 83.105255][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 83.111932][ T9648] __walk_page_range+0xcfb/0x2070 [ 83.116994][ T9648] ? walk_page_test+0x78/0x180 [ 83.121772][ T9648] walk_page_range+0x1bd/0x3a0 [ 83.126546][ T9648] ? __walk_page_range+0x2070/0x2070 [ 83.131850][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 83.137500][ T9648] madvise_free_single_vma+0x384/0x550 [ 83.142966][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 83.147912][ T9648] ? lock_acquire+0x197/0x420 [ 83.152602][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 83.157734][ T9648] ? vmacache_find+0x62/0x300 [ 83.162418][ T9648] ? find_vma+0x2b/0x170 [ 83.166678][ T9648] do_madvise+0x5ba/0x1b80 [ 83.171091][ T9648] ? lock_downgrade+0x7f0/0x7f0 [ 83.175969][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 83.181685][ T9648] ? ktime_get+0x1f8/0x2f0 [ 83.186113][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 83.191068][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 83.196209][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 83.201613][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 83.206644][ T9648] __x64_sys_madvise+0xae/0x120 [ 83.211503][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 83.216796][ T9648] do_syscall_64+0xf6/0x7d0 [ 83.221309][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.227199][ T9648] RIP: 0033:0x460bf7 [ 83.231094][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 83.250881][ T9648] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 83.259294][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 83.267263][ T9648] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00029e000 [ 83.275233][ T9648] RBP: 000000c0000cdeb0 R08: 000000c000200000 R09: 000000c0002b0000 [ 83.283205][ T9648] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 83.291190][ T9648] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 83.299286][ T9648] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9648 [ 83.308372][ T9648] caller is __mod_memcg_state+0x87/0x1a0 [ 83.314091][ T9648] CPU: 0 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 83.323571][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.333631][ T9648] Call Trace: [ 83.336932][ T9648] dump_stack+0x188/0x20d [ 83.341304][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 83.347144][ T9648] __mod_memcg_state+0x87/0x1a0 [ 83.352048][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 83.357715][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 83.363189][ T9648] ? can_split_huge_page+0x480/0x480 [ 83.368479][ T9648] ? pmd_val+0x7c/0xf0 [ 83.372683][ T9648] ? enabled_store+0x190/0x190 [ 83.377474][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 83.382815][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 83.388282][ T9648] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 83.394134][ T9648] ? __lock_acquire+0x190f/0x53a0 [ 83.399188][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 83.405877][ T9648] __walk_page_range+0xcfb/0x2070 [ 83.410969][ T9648] ? walk_page_test+0x78/0x180 [ 83.415762][ T9648] walk_page_range+0x1bd/0x3a0 [ 83.420535][ T9648] ? __walk_page_range+0x2070/0x2070 [ 83.425835][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 83.431507][ T9648] madvise_free_single_vma+0x384/0x550 [ 83.436994][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 83.441962][ T9648] ? lock_acquire+0x197/0x420 [ 83.446658][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 83.451798][ T9648] ? vmacache_find+0x62/0x300 [ 83.456497][ T9648] ? find_vma+0x2b/0x170 [ 83.460757][ T9648] do_madvise+0x5ba/0x1b80 [ 83.465197][ T9648] ? lock_downgrade+0x7f0/0x7f0 [ 83.470100][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 83.475866][ T9648] ? ktime_get+0x1f8/0x2f0 [ 83.480304][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 83.485278][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 83.490850][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 83.496254][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 83.501491][ T9648] __x64_sys_madvise+0xae/0x120 [ 83.506378][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 83.511804][ T9648] do_syscall_64+0xf6/0x7d0 [ 83.516508][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.522495][ T9648] RIP: 0033:0x460bf7 [ 83.526839][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 83.546806][ T9648] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 83.555994][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 83.563990][ T9648] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00029e000 [ 83.571978][ T9648] RBP: 000000c0000cdeb0 R08: 000000c000200000 R09: 000000c0002b0000 [ 83.579976][ T9648] R10: 00007fffffffffff R11: 0000000000000246 R12: 00000000000000f9 [ 83.587953][ T9648] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 2020/03/09 19:23:07 connecting to host at 10.128.0.26:37127 2020/03/09 19:23:07 checking machine... 2020/03/09 19:23:07 checking revisions... 2020/03/09 19:23:07 testing simple program... [ 85.574301][ T9661] IPVS: ftp: loaded support on port[0] = 21 2020/03/09 19:23:07 building call list... [ 85.752619][ T773] [ 85.755135][ T773] ============================= [ 85.762506][ T773] WARNING: suspicious RCU usage [ 85.770631][ T773] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 85.785701][ T773] ----------------------------- [ 85.797933][ T773] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!! [ 85.812858][ T773] [ 85.812858][ T773] other info that might help us debug this: [ 85.812858][ T773] [ 85.823795][ T773] [ 85.823795][ T773] rcu_scheduler_active = 2, debug_locks = 1 [ 85.824850][ T9648] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9648 [ 85.840896][ T9648] caller is __mod_memcg_state+0x27/0x1a0 [ 85.842107][ T773] 3 locks held by kworker/u4:5/773: [ 85.846555][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 85.851709][ T773] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 85.861136][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.861141][ T9648] Call Trace: [ 85.861161][ T9648] dump_stack+0x188/0x20d [ 85.861185][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 85.861204][ T9648] __mod_memcg_state+0x27/0x1a0 [ 85.899242][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 85.902170][ T773] #1: ffffc90002e47dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 85.904891][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 85.919850][ T9648] ? can_split_huge_page+0x480/0x480 [ 85.922125][ T773] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 85.925138][ T9648] ? pmd_val+0x7c/0xf0 [ 85.938066][ T9648] ? enabled_store+0x190/0x190 [ 85.942862][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 85.948190][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 85.952151][ T773] [ 85.952151][ T773] stack backtrace: [ 85.953660][ T9648] ? mark_lock+0xbc/0x1220 [ 85.964651][ T9648] ? mark_held_locks+0x9f/0xe0 [ 85.969514][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 85.976186][ T9648] __walk_page_range+0xcfb/0x2070 [ 85.981230][ T9648] ? walk_page_test+0x78/0x180 [ 85.986006][ T9648] walk_page_range+0x1bd/0x3a0 [ 85.990890][ T9648] ? __walk_page_range+0x2070/0x2070 [ 85.996182][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 86.001837][ T9648] madvise_free_single_vma+0x384/0x550 [ 86.007296][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 86.012245][ T9648] ? lock_acquire+0x197/0x420 [ 86.016918][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 86.022036][ T9648] ? vmacache_find+0x62/0x300 [ 86.026707][ T9648] ? vmacache_update+0xce/0x140 [ 86.031583][ T9648] ? find_vma+0x2b/0x170 [ 86.035830][ T9648] do_madvise+0x5ba/0x1b80 [ 86.040365][ T9648] ? unuse_pde+0x2c/0x80 [ 86.044647][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 86.050823][ T9648] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 86.056908][ T9648] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.062890][ T9648] ? fput_many+0x2f/0x1a0 [ 86.067229][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 86.072348][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 86.077731][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 86.082751][ T9648] __x64_sys_madvise+0xae/0x120 [ 86.087606][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 86.092887][ T9648] do_syscall_64+0xf6/0x7d0 [ 86.097395][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.103278][ T9648] RIP: 0033:0x460bf7 [ 86.107175][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 86.126892][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 86.135339][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 86.143312][ T9648] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001bc000 [ 86.151281][ T9648] RBP: 000000c0000cdc90 R08: 000000c000000000 R09: 000000c0001be000 [ 86.159247][ T9648] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 86.167210][ T9648] R13: 0000000000000001 R14: 000000c0000896e0 R15: 0000000000000000 [ 86.175210][ T773] CPU: 0 PID: 773 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 86.175324][ T9648] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9648 [ 86.184770][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.184787][ T773] Workqueue: netns cleanup_net [ 86.184800][ T773] Call Trace: [ 86.193653][ T9648] caller is __mod_memcg_state+0xca/0x1a0 [ 86.203762][ T773] dump_stack+0x188/0x20d [ 86.203787][ T773] ovs_ct_exit+0x3db/0x558 [ 86.226100][ T773] ovs_exit_net+0x1df/0xba0 [ 86.230616][ T773] ? ovs_dp_cmd_del+0x270/0x270 [ 86.235455][ T773] ? __mutex_unlock_slowpath+0xe2/0x660 [ 86.240993][ T773] ? ovs_dp_cmd_del+0x270/0x270 [ 86.245844][ T773] ops_exit_list.isra.0+0xa8/0x150 [ 86.250948][ T773] cleanup_net+0x511/0xa50 [ 86.255358][ T773] ? unregister_pernet_device+0x70/0x70 [ 86.260892][ T773] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.266890][ T773] process_one_work+0x94b/0x1690 [ 86.271841][ T773] ? pwq_dec_nr_in_flight+0x310/0x310 [ 86.277208][ T773] ? do_raw_spin_lock+0x129/0x2e0 [ 86.282248][ T773] worker_thread+0x96/0xe20 [ 86.286755][ T773] ? process_one_work+0x1690/0x1690 [ 86.291941][ T773] kthread+0x357/0x430 [ 86.295996][ T773] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 86.301706][ T773] ret_from_fork+0x24/0x30 [ 86.306149][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 86.315606][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.325658][ T9648] Call Trace: [ 86.329127][ T9648] dump_stack+0x188/0x20d [ 86.333467][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 86.339275][ T9648] __mod_memcg_state+0xca/0x1a0 [ 86.344138][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 86.349804][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 86.355286][ T9648] ? can_split_huge_page+0x480/0x480 [ 86.360570][ T9648] ? pmd_val+0x7c/0xf0 [ 86.364647][ T9648] ? enabled_store+0x190/0x190 [ 86.369425][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 86.374739][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 86.380199][ T9648] ? mark_lock+0xbc/0x1220 [ 86.384804][ T9648] ? mark_held_locks+0x9f/0xe0 [ 86.389656][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 86.396334][ T9648] __walk_page_range+0xcfb/0x2070 [ 86.401395][ T9648] ? walk_page_test+0x78/0x180 [ 86.406163][ T9648] walk_page_range+0x1bd/0x3a0 [ 86.410946][ T9648] ? __walk_page_range+0x2070/0x2070 [ 86.416257][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 86.421928][ T9648] madvise_free_single_vma+0x384/0x550 [ 86.427411][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 86.432363][ T9648] ? lock_acquire+0x197/0x420 [ 86.437041][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 86.442161][ T9648] ? vmacache_find+0x62/0x300 [ 86.446852][ T9648] ? vmacache_update+0xce/0x140 [ 86.451718][ T9648] ? find_vma+0x2b/0x170 [ 86.455978][ T9648] do_madvise+0x5ba/0x1b80 [ 86.460395][ T9648] ? unuse_pde+0x2c/0x80 [ 86.464688][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 86.470502][ T9648] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 86.476055][ T9648] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.482038][ T9648] ? fput_many+0x2f/0x1a0 [ 86.486370][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 86.491483][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 86.496863][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 86.501888][ T9648] __x64_sys_madvise+0xae/0x120 [ 86.506740][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 86.512042][ T9648] do_syscall_64+0xf6/0x7d0 [ 86.516572][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.522497][ T9648] RIP: 0033:0x460bf7 [ 86.526674][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 86.546297][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 86.554713][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 86.562684][ T9648] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001bc000 [ 86.570653][ T9648] RBP: 000000c0000cdc90 R08: 000000c000000000 R09: 000000c0001be000 [ 86.578633][ T9648] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 86.586602][ T9648] R13: 0000000000000001 R14: 000000c0000896e0 R15: 0000000000000000 [ 86.594743][ T9648] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9648 [ 86.603831][ T9648] caller is __mod_memcg_state+0x87/0x1a0 [ 86.609480][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 86.618930][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.628988][ T9648] Call Trace: [ 86.632320][ T9648] dump_stack+0x188/0x20d [ 86.636669][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 86.642492][ T9648] __mod_memcg_state+0x87/0x1a0 [ 86.647352][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 86.653450][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 86.658914][ T9648] ? can_split_huge_page+0x480/0x480 [ 86.664200][ T9648] ? pmd_val+0x7c/0xf0 [ 86.669232][ T9648] ? enabled_store+0x190/0x190 [ 86.674014][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 86.679319][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 86.685010][ T9648] ? mark_lock+0xbc/0x1220 [ 86.689568][ T9648] ? mark_held_locks+0x9f/0xe0 [ 86.694353][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 86.701044][ T9648] __walk_page_range+0xcfb/0x2070 [ 86.706113][ T9648] ? walk_page_test+0x78/0x180 [ 86.710888][ T9648] walk_page_range+0x1bd/0x3a0 [ 86.715659][ T9648] ? __walk_page_range+0x2070/0x2070 [ 86.720958][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 86.726610][ T9648] madvise_free_single_vma+0x384/0x550 [ 86.732071][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 86.737017][ T9648] ? lock_acquire+0x197/0x420 [ 86.741693][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 86.746826][ T9648] ? vmacache_find+0x62/0x300 [ 86.751505][ T9648] ? vmacache_update+0xce/0x140 [ 86.756359][ T9648] ? find_vma+0x2b/0x170 [ 86.760614][ T9648] do_madvise+0x5ba/0x1b80 [ 86.765246][ T9648] ? unuse_pde+0x2c/0x80 [ 86.769531][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 86.775278][ T9648] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 86.780834][ T9648] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.786826][ T9648] ? fput_many+0x2f/0x1a0 [ 86.791161][ T9648] ? switch_fpu_return+0x1db/0x4b0 [ 86.796276][ T9648] ? fpregs_mark_activate+0x320/0x320 [ 86.801676][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 86.806719][ T9648] __x64_sys_madvise+0xae/0x120 [ 86.811588][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 86.817009][ T9648] do_syscall_64+0xf6/0x7d0 [ 86.821536][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.827440][ T9648] RIP: 0033:0x460bf7 [ 86.831339][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 86.850951][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 86.859467][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 86.867540][ T9648] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001bc000 [ 86.875612][ T9648] RBP: 000000c0000cdc90 R08: 000000c000000000 R09: 000000c0001be000 [ 86.883598][ T9648] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 86.891578][ T9648] R13: 0000000000000001 R14: 000000c0000896e0 R15: 0000000000000000 [ 86.976048][ T9666] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9666 [ 86.985211][ T9666] caller is __mod_memcg_state+0x27/0x1a0 [ 86.991057][ T9666] CPU: 0 PID: 9666 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 87.001028][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.011079][ T9666] Call Trace: [ 87.014365][ T9666] dump_stack+0x188/0x20d [ 87.018687][ T9666] __this_cpu_preempt_check.cold+0x84/0x90 [ 87.024498][ T9666] __mod_memcg_state+0x27/0x1a0 [ 87.029343][ T9666] split_huge_page_to_list+0x124b/0x3380 [ 87.034995][ T9666] ? madvise_free_huge_pmd+0x869/0xb90 [ 87.040452][ T9666] ? can_split_huge_page+0x480/0x480 [ 87.045719][ T9666] ? pmd_val+0x7c/0xf0 [ 87.049787][ T9666] ? enabled_store+0x190/0x190 [ 87.054539][ T9666] madvise_free_huge_pmd+0x873/0xb90 [ 87.059811][ T9666] madvise_free_pte_range+0x6ff/0x2650 [ 87.065261][ T9666] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.071920][ T9666] __walk_page_range+0xcfb/0x2070 [ 87.076956][ T9666] ? walk_page_test+0x78/0x180 [ 87.081809][ T9666] walk_page_range+0x1bd/0x3a0 [ 87.086554][ T9666] ? __walk_page_range+0x2070/0x2070 [ 87.092097][ T9666] ? madvise_free_single_vma+0x2c1/0x550 [ 87.097730][ T9666] madvise_free_single_vma+0x384/0x550 [ 87.103186][ T9666] ? madvise_pageout+0x3b0/0x3b0 [ 87.108127][ T9666] ? lock_acquire+0x197/0x420 [ 87.112900][ T9666] ? userfaultfd_remove+0xf0/0x2b0 [ 87.118004][ T9666] ? vmacache_find+0x62/0x300 [ 87.122694][ T9666] ? find_vma+0x2b/0x170 [ 87.127034][ T9666] do_madvise+0x5ba/0x1b80 [ 87.131446][ T9666] ? unuse_pde+0x2c/0x80 [ 87.135697][ T9666] ? madvise_free_pte_range+0x2650/0x2650 [ 87.141398][ T9666] ? __x64_sys_futex+0x376/0x4f0 [ 87.146319][ T9666] ? fput_many+0x2f/0x1a0 [ 87.150628][ T9666] ? do_futex+0x1b90/0x1b90 [ 87.155130][ T9666] ? ksys_read+0x19f/0x250 [ 87.159528][ T9666] ? kernel_write+0x120/0x120 [ 87.164201][ T9666] ? __x64_sys_madvise+0xae/0x120 [ 87.169205][ T9666] __x64_sys_madvise+0xae/0x120 [ 87.174054][ T9666] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.179318][ T9666] do_syscall_64+0xf6/0x7d0 [ 87.183822][ T9666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.189727][ T9666] RIP: 0033:0x460bf7 [ 87.193611][ T9666] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.213471][ T9666] RSP: 002b:000000c000343c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.221863][ T9666] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.229828][ T9666] RDX: 0000000000000008 RSI: 0000000000020000 RDI: 000000c0003ee000 [ 87.237799][ T9666] RBP: 000000c000343c90 R08: 000000c000200000 R09: 000000c00040e000 [ 87.245775][ T9666] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000007 [ 87.253725][ T9666] R13: 00007f90e7dbe008 R14: 0000000000000480 R15: 0000000000000081 [ 87.261857][ T9666] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9666 [ 87.270769][ T9666] caller is __mod_memcg_state+0xca/0x1a0 [ 87.276562][ T9666] CPU: 0 PID: 9666 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 87.286010][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.296061][ T9666] Call Trace: [ 87.299338][ T9666] dump_stack+0x188/0x20d [ 87.303667][ T9666] __this_cpu_preempt_check.cold+0x84/0x90 [ 87.309459][ T9666] __mod_memcg_state+0xca/0x1a0 [ 87.314296][ T9666] split_huge_page_to_list+0x124b/0x3380 [ 87.319925][ T9666] ? madvise_free_huge_pmd+0x869/0xb90 [ 87.325367][ T9666] ? can_split_huge_page+0x480/0x480 [ 87.331846][ T9666] ? pmd_val+0x7c/0xf0 [ 87.335899][ T9666] ? enabled_store+0x190/0x190 [ 87.340665][ T9666] madvise_free_huge_pmd+0x873/0xb90 [ 87.345941][ T9666] madvise_free_pte_range+0x6ff/0x2650 [ 87.351389][ T9666] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.358048][ T9666] __walk_page_range+0xcfb/0x2070 [ 87.363071][ T9666] ? walk_page_test+0x78/0x180 [ 87.367840][ T9666] walk_page_range+0x1bd/0x3a0 [ 87.372594][ T9666] ? __walk_page_range+0x2070/0x2070 [ 87.377864][ T9666] ? madvise_free_single_vma+0x2c1/0x550 [ 87.383484][ T9666] madvise_free_single_vma+0x384/0x550 [ 87.388924][ T9666] ? madvise_pageout+0x3b0/0x3b0 [ 87.393845][ T9666] ? lock_acquire+0x197/0x420 [ 87.398508][ T9666] ? userfaultfd_remove+0xf0/0x2b0 [ 87.403612][ T9666] ? vmacache_find+0x62/0x300 [ 87.408272][ T9666] ? find_vma+0x2b/0x170 [ 87.412516][ T9666] do_madvise+0x5ba/0x1b80 [ 87.416915][ T9666] ? unuse_pde+0x2c/0x80 [ 87.421150][ T9666] ? madvise_free_pte_range+0x2650/0x2650 [ 87.427219][ T9666] ? __x64_sys_futex+0x376/0x4f0 [ 87.432142][ T9666] ? fput_many+0x2f/0x1a0 [ 87.436458][ T9666] ? do_futex+0x1b90/0x1b90 [ 87.440938][ T9666] ? ksys_read+0x19f/0x250 [ 87.445334][ T9666] ? kernel_write+0x120/0x120 [ 87.450014][ T9666] ? __x64_sys_madvise+0xae/0x120 [ 87.455042][ T9666] __x64_sys_madvise+0xae/0x120 [ 87.459882][ T9666] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.465175][ T9666] do_syscall_64+0xf6/0x7d0 [ 87.469691][ T9666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.475583][ T9666] RIP: 0033:0x460bf7 [ 87.479461][ T9666] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.499227][ T9666] RSP: 002b:000000c000343c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.507926][ T9666] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.515903][ T9666] RDX: 0000000000000008 RSI: 0000000000020000 RDI: 000000c0003ee000 [ 87.523874][ T9666] RBP: 000000c000343c90 R08: 000000c000200000 R09: 000000c00040e000 [ 87.531825][ T9666] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000007 [ 87.539776][ T9666] R13: 00007f90e7dbe008 R14: 0000000000000480 R15: 0000000000000081 [ 87.547842][ T9666] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9666 [ 87.556912][ T9666] caller is __mod_memcg_state+0x87/0x1a0 [ 87.562586][ T9666] CPU: 0 PID: 9666 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 87.572028][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.582115][ T9666] Call Trace: [ 87.585405][ T9666] dump_stack+0x188/0x20d [ 87.589729][ T9666] __this_cpu_preempt_check.cold+0x84/0x90 [ 87.595523][ T9666] __mod_memcg_state+0x87/0x1a0 [ 87.600405][ T9666] split_huge_page_to_list+0x124b/0x3380 [ 87.606095][ T9666] ? madvise_free_huge_pmd+0x869/0xb90 [ 87.611581][ T9666] ? can_split_huge_page+0x480/0x480 [ 87.616846][ T9666] ? pmd_val+0x7c/0xf0 [ 87.620901][ T9666] ? enabled_store+0x190/0x190 [ 87.625667][ T9666] madvise_free_huge_pmd+0x873/0xb90 [ 87.630956][ T9666] madvise_free_pte_range+0x6ff/0x2650 [ 87.636403][ T9666] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.643060][ T9666] __walk_page_range+0xcfb/0x2070 [ 87.648099][ T9666] ? walk_page_test+0x78/0x180 [ 87.652847][ T9666] walk_page_range+0x1bd/0x3a0 [ 87.657704][ T9666] ? __walk_page_range+0x2070/0x2070 [ 87.662986][ T9666] ? madvise_free_single_vma+0x2c1/0x550 [ 87.668647][ T9666] madvise_free_single_vma+0x384/0x550 [ 87.674097][ T9666] ? madvise_pageout+0x3b0/0x3b0 [ 87.679021][ T9666] ? lock_acquire+0x197/0x420 [ 87.683708][ T9666] ? userfaultfd_remove+0xf0/0x2b0 [ 87.688821][ T9666] ? vmacache_find+0x62/0x300 [ 87.693483][ T9666] ? find_vma+0x2b/0x170 [ 87.697726][ T9666] do_madvise+0x5ba/0x1b80 [ 87.702125][ T9666] ? unuse_pde+0x2c/0x80 [ 87.706359][ T9666] ? madvise_free_pte_range+0x2650/0x2650 [ 87.712072][ T9666] ? __x64_sys_futex+0x376/0x4f0 [ 87.717002][ T9666] ? fput_many+0x2f/0x1a0 [ 87.721326][ T9666] ? do_futex+0x1b90/0x1b90 [ 87.725808][ T9666] ? ksys_read+0x19f/0x250 [ 87.730219][ T9666] ? kernel_write+0x120/0x120 [ 87.735011][ T9666] ? __x64_sys_madvise+0xae/0x120 [ 87.740152][ T9666] __x64_sys_madvise+0xae/0x120 [ 87.744994][ T9666] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.750365][ T9666] do_syscall_64+0xf6/0x7d0 [ 87.754860][ T9666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.760878][ T9666] RIP: 0033:0x460bf7 [ 87.764769][ T9666] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.784370][ T9666] RSP: 002b:000000c000343c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.792769][ T9666] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.801773][ T9666] RDX: 0000000000000008 RSI: 0000000000020000 RDI: 000000c0003ee000 [ 87.809738][ T9666] RBP: 000000c000343c90 R08: 000000c000200000 R09: 000000c00040e000 [ 87.817708][ T9666] R10: 00000000000ffe00 R11: 0000000000000246 R12: 0000000000000007 [ 87.825664][ T9666] R13: 00007f90e7dbe008 R14: 0000000000000480 R15: 0000000000000081 [ 87.932230][ T773] tipc: TX() has been purged, node left! [ 87.975222][ T773] [ 87.977678][ T773] ============================= [ 87.983092][ T773] WARNING: suspicious RCU usage [ 87.988004][ T773] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 87.995063][ T773] ----------------------------- [ 87.999954][ T773] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!! [ 88.009064][ T773] [ 88.009064][ T773] other info that might help us debug this: [ 88.009064][ T773] [ 88.020102][ T773] [ 88.020102][ T773] rcu_scheduler_active = 2, debug_locks = 1 [ 88.030187][ T773] 4 locks held by kworker/u4:5/773: [ 88.035855][ T773] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 88.046466][ T773] #1: ffffc90002e47dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 88.056418][ T773] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 88.065709][ T773] #3: ffffffff8a552d00 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700 [ 88.075466][ T773] [ 88.075466][ T773] stack backtrace: [ 88.081434][ T773] CPU: 1 PID: 773 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.090973][ T773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.101032][ T773] Workqueue: netns cleanup_net [ 88.105791][ T773] Call Trace: [ 88.109090][ T773] dump_stack+0x188/0x20d [ 88.113427][ T773] ipmr_device_event+0x240/0x2b0 [ 88.118369][ T773] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 88.124267][ T773] notifier_call_chain+0xc0/0x230 [ 88.129305][ T773] call_netdevice_notifiers_info+0xb5/0x130 [ 88.135290][ T773] rollback_registered_many+0x75c/0xe70 [ 88.140850][ T773] ? netif_set_real_num_tx_queues+0x700/0x700 [ 88.146931][ T773] ? lock_downgrade+0x7f0/0x7f0 [ 88.151794][ T773] unregister_netdevice_many.part.0+0x16/0x1e0 [ 88.157949][ T773] unregister_netdevice_many+0x36/0x50 [ 88.163406][ T773] ip6gre_exit_batch_net+0x4e8/0x700 [ 88.168715][ T773] ? ip6gre_tunnel_link+0xf0/0xf0 [ 88.173746][ T773] ? rcu_read_lock_held_common+0x130/0x130 [ 88.179574][ T773] ? ip6gre_tunnel_link+0xf0/0xf0 [ 88.184608][ T773] ops_exit_list.isra.0+0x103/0x150 [ 88.189815][ T773] cleanup_net+0x511/0xa50 [ 88.194238][ T773] ? unregister_pernet_device+0x70/0x70 [ 88.199792][ T773] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 88.205783][ T773] process_one_work+0x94b/0x1690 [ 88.210746][ T773] ? pwq_dec_nr_in_flight+0x310/0x310 [ 88.216125][ T773] ? do_raw_spin_lock+0x129/0x2e0 [ 88.221170][ T773] worker_thread+0x96/0xe20 [ 88.225688][ T773] ? process_one_work+0x1690/0x1690 [ 88.230885][ T773] kthread+0x357/0x430 [ 88.234953][ T773] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 88.240687][ T773] ret_from_fork+0x24/0x30 executing program [ 88.606723][ T9648] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9648 [ 88.615892][ T9648] caller is __mod_memcg_state+0x27/0x1a0 [ 88.621507][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.630938][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.641391][ T9648] Call Trace: [ 88.644815][ T9648] dump_stack+0x188/0x20d [ 88.649144][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 88.654947][ T9648] __mod_memcg_state+0x27/0x1a0 [ 88.659794][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 88.665702][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 88.671148][ T9648] ? can_split_huge_page+0x480/0x480 [ 88.676505][ T9648] ? pmd_val+0x7c/0xf0 [ 88.680558][ T9648] ? enabled_store+0x190/0x190 [ 88.685310][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 88.690584][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 88.696039][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 88.702711][ T9648] __walk_page_range+0xcfb/0x2070 [ 88.707732][ T9648] ? walk_page_test+0x78/0x180 [ 88.712479][ T9648] walk_page_range+0x1bd/0x3a0 [ 88.717228][ T9648] ? __walk_page_range+0x2070/0x2070 [ 88.722499][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 88.728121][ T9648] madvise_free_single_vma+0x384/0x550 [ 88.733564][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 88.738484][ T9648] ? lock_acquire+0x197/0x420 [ 88.743141][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 88.748236][ T9648] ? vmacache_find+0x62/0x300 [ 88.752908][ T9648] ? vmacache_update+0xce/0x140 [ 88.757740][ T9648] ? find_vma+0x2b/0x170 [ 88.761967][ T9648] do_madvise+0x5ba/0x1b80 [ 88.766367][ T9648] ? unuse_pde+0x2c/0x80 [ 88.770602][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 88.776308][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 88.781243][ T9648] ? fput_many+0x2f/0x1a0 [ 88.785569][ T9648] ? do_futex+0x1b90/0x1b90 [ 88.790081][ T9648] ? ksys_read+0x19f/0x250 [ 88.794536][ T9648] ? kernel_write+0x120/0x120 [ 88.799227][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 88.804371][ T9648] __x64_sys_madvise+0xae/0x120 [ 88.809266][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 88.814545][ T9648] do_syscall_64+0xf6/0x7d0 [ 88.819177][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.825097][ T9648] RIP: 0033:0x460bf7 [ 88.828976][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 88.848567][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.859065][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 88.867017][ T9648] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058e000 [ 88.874967][ T9648] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00078e000 [ 88.882923][ T9648] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 88.890874][ T9648] R13: 0000000000000001 R14: 000000c00006e240 R15: 0000000000000000 [ 88.898987][ T9648] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9648 [ 88.907889][ T9648] caller is __mod_memcg_state+0xca/0x1a0 [ 88.913578][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 88.923551][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.933597][ T9648] Call Trace: [ 88.936888][ T9648] dump_stack+0x188/0x20d [ 88.941225][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 88.947047][ T9648] __mod_memcg_state+0xca/0x1a0 [ 88.951888][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 88.957532][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 88.962992][ T9648] ? can_split_huge_page+0x480/0x480 [ 88.968263][ T9648] ? pmd_val+0x7c/0xf0 [ 88.972510][ T9648] ? enabled_store+0x190/0x190 [ 88.977263][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 88.982539][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 88.987984][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 88.994642][ T9648] __walk_page_range+0xcfb/0x2070 [ 88.999663][ T9648] ? walk_page_test+0x78/0x180 [ 89.004423][ T9648] walk_page_range+0x1bd/0x3a0 [ 89.009177][ T9648] ? __walk_page_range+0x2070/0x2070 [ 89.014525][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 89.020158][ T9648] madvise_free_single_vma+0x384/0x550 [ 89.025606][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 89.030529][ T9648] ? lock_acquire+0x197/0x420 [ 89.035201][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 89.040300][ T9648] ? vmacache_find+0x62/0x300 [ 89.044969][ T9648] ? vmacache_update+0xce/0x140 [ 89.049818][ T9648] ? find_vma+0x2b/0x170 [ 89.054057][ T9648] do_madvise+0x5ba/0x1b80 [ 89.058465][ T9648] ? unuse_pde+0x2c/0x80 [ 89.062701][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 89.068403][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 89.073320][ T9648] ? fput_many+0x2f/0x1a0 [ 89.077629][ T9648] ? do_futex+0x1b90/0x1b90 [ 89.082123][ T9648] ? ksys_read+0x19f/0x250 [ 89.086542][ T9648] ? kernel_write+0x120/0x120 [ 89.091208][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 89.096255][ T9648] __x64_sys_madvise+0xae/0x120 [ 89.101095][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 89.106382][ T9648] do_syscall_64+0xf6/0x7d0 [ 89.110885][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.116758][ T9648] RIP: 0033:0x460bf7 [ 89.120633][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 89.140229][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 89.148621][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 89.156574][ T9648] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058e000 [ 89.164534][ T9648] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00078e000 [ 89.172607][ T9648] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 89.180563][ T9648] R13: 0000000000000001 R14: 000000c00006e240 R15: 0000000000000000 [ 89.188655][ T9648] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9648 [ 89.197722][ T9648] caller is __mod_memcg_state+0x87/0x1a0 [ 89.203411][ T9648] CPU: 1 PID: 9648 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 89.212868][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.222923][ T9648] Call Trace: [ 89.226199][ T9648] dump_stack+0x188/0x20d [ 89.230515][ T9648] __this_cpu_preempt_check.cold+0x84/0x90 [ 89.236376][ T9648] __mod_memcg_state+0x87/0x1a0 [ 89.241224][ T9648] split_huge_page_to_list+0x124b/0x3380 [ 89.246858][ T9648] ? madvise_free_huge_pmd+0x869/0xb90 [ 89.252320][ T9648] ? can_split_huge_page+0x480/0x480 [ 89.257619][ T9648] ? pmd_val+0x7c/0xf0 [ 89.261719][ T9648] ? enabled_store+0x190/0x190 [ 89.266471][ T9648] madvise_free_huge_pmd+0x873/0xb90 [ 89.271745][ T9648] madvise_free_pte_range+0x6ff/0x2650 [ 89.277203][ T9648] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 89.283861][ T9648] __walk_page_range+0xcfb/0x2070 [ 89.288883][ T9648] ? walk_page_test+0x78/0x180 [ 89.293634][ T9648] walk_page_range+0x1bd/0x3a0 [ 89.298377][ T9648] ? __walk_page_range+0x2070/0x2070 [ 89.303658][ T9648] ? madvise_free_single_vma+0x2c1/0x550 [ 89.309296][ T9648] madvise_free_single_vma+0x384/0x550 [ 89.314756][ T9648] ? madvise_pageout+0x3b0/0x3b0 [ 89.319744][ T9648] ? lock_acquire+0x197/0x420 [ 89.324411][ T9648] ? userfaultfd_remove+0xf0/0x2b0 [ 89.329522][ T9648] ? vmacache_find+0x62/0x300 [ 89.334183][ T9648] ? vmacache_update+0xce/0x140 [ 89.339032][ T9648] ? find_vma+0x2b/0x170 [ 89.343265][ T9648] do_madvise+0x5ba/0x1b80 [ 89.347666][ T9648] ? unuse_pde+0x2c/0x80 [ 89.352051][ T9648] ? madvise_free_pte_range+0x2650/0x2650 [ 89.357796][ T9648] ? __x64_sys_futex+0x376/0x4f0 [ 89.362727][ T9648] ? fput_many+0x2f/0x1a0 [ 89.367051][ T9648] ? do_futex+0x1b90/0x1b90 [ 89.371548][ T9648] ? ksys_read+0x19f/0x250 [ 89.376222][ T9648] ? kernel_write+0x120/0x120 [ 89.380887][ T9648] ? __x64_sys_madvise+0xae/0x120 [ 89.385903][ T9648] __x64_sys_madvise+0xae/0x120 [ 89.390745][ T9648] ? lockdep_hardirqs_on+0x417/0x5d0 [ 89.396970][ T9648] do_syscall_64+0xf6/0x7d0 [ 89.401457][ T9648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.407339][ T9648] RIP: 0033:0x460bf7 [ 89.411213][ T9648] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 89.430826][ T9648] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 89.439218][ T9648] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 89.447173][ T9648] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00058e000 [ 89.455234][ T9648] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00078e000 [ 89.463183][ T9648] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 89.471142][ T9648] R13: 0000000000000001 R14: 000000c00006e240 R15: 0000000000000000 [ 89.975538][ T9643] can: request_module (can-proto-0) failed. executing program [ 92.078982][ T9643] can: request_module (can-proto-0) failed. [ 92.091098][ T9643] can: request_module (can-proto-0) failed.