[ 61.004735][ T27] audit: type=1800 audit(1583936652.301:27): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 61.055480][ T27] audit: type=1800 audit(1583936652.311:28): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.756475][ T27] audit: type=1800 audit(1583936653.081:29): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 61.777212][ T27] audit: type=1800 audit(1583936653.081:30): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. 2020/03/11 14:24:23 fuzzer started syzkaller login: [ 72.222735][ T8488] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8488 [ 72.231778][ T8488] caller is __mod_memcg_state+0x27/0x1a0 [ 72.237455][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 72.246916][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.256983][ T8488] Call Trace: [ 72.260285][ T8488] dump_stack+0x188/0x20d [ 72.264635][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 72.270443][ T8488] __mod_memcg_state+0x27/0x1a0 [ 72.275294][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 72.280935][ T8488] ? mark_held_locks+0xe0/0xe0 [ 72.285697][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.290551][ T8488] ? can_split_huge_page+0x480/0x480 [ 72.295832][ T8488] ? pmd_val+0x7c/0xf0 [ 72.299895][ T8488] ? pmd_pfn+0x125/0x1c0 [ 72.304137][ T8488] ? enabled_store+0x190/0x190 [ 72.308904][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 72.314196][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 72.319662][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 72.326339][ T8488] __walk_page_range+0xcfb/0x2070 [ 72.331375][ T8488] ? walk_page_test+0x78/0x180 [ 72.336140][ T8488] walk_page_range+0x1bd/0x3a0 [ 72.340903][ T8488] ? __walk_page_range+0x2070/0x2070 [ 72.346194][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 72.351837][ T8488] madvise_free_single_vma+0x384/0x550 [ 72.357298][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 72.362329][ T8488] ? migrate_swap_stop+0x9d0/0x9d0 [ 72.367459][ T8488] ? lock_acquire+0x197/0x420 [ 72.372142][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 72.377264][ T8488] ? vmacache_find+0x62/0x300 [ 72.381943][ T8488] ? find_vma+0x2b/0x170 [ 72.386189][ T8488] do_madvise+0x5ba/0x1b80 [ 72.390605][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.395466][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 72.401184][ T8488] ? ktime_get+0x1f8/0x2f0 [ 72.405617][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 72.410558][ T8488] ? switch_fpu_return+0x1db/0x4b0 [ 72.415670][ T8488] ? fpregs_mark_activate+0x320/0x320 [ 72.421047][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 72.426066][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 72.431085][ T8488] __x64_sys_madvise+0xae/0x120 [ 72.435954][ T8488] do_syscall_64+0xf6/0x7d0 [ 72.440463][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.446366][ T8488] RIP: 0033:0x460bf7 [ 72.450262][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 72.469866][ T8488] RSP: 002b:00007ffd5111de00 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 72.478285][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 72.486274][ T8488] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00023a000 [ 72.494256][ T8488] RBP: 00007ffd5111de40 R08: 000000c000200000 R09: 000000c00024c000 [ 72.504849][ T8488] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.512821][ T8488] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 72.520864][ T8488] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8488 [ 72.529783][ T8488] caller is __mod_memcg_state+0xca/0x1a0 [ 72.535456][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 72.545036][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.555097][ T8488] Call Trace: [ 72.558407][ T8488] dump_stack+0x188/0x20d [ 72.563629][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 72.569457][ T8488] __mod_memcg_state+0xca/0x1a0 [ 72.574329][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 72.580098][ T8488] ? mark_held_locks+0xe0/0xe0 [ 72.584999][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.589866][ T8488] ? can_split_huge_page+0x480/0x480 [ 72.595157][ T8488] ? pmd_val+0x7c/0xf0 [ 72.599249][ T8488] ? pmd_pfn+0x125/0x1c0 [ 72.603495][ T8488] ? enabled_store+0x190/0x190 [ 72.608284][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 72.613583][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 72.619072][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 72.625764][ T8488] __walk_page_range+0xcfb/0x2070 [ 72.630827][ T8488] ? walk_page_test+0x78/0x180 [ 72.635600][ T8488] walk_page_range+0x1bd/0x3a0 [ 72.640498][ T8488] ? __walk_page_range+0x2070/0x2070 [ 72.645835][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 72.651495][ T8488] madvise_free_single_vma+0x384/0x550 [ 72.656974][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 72.661916][ T8488] ? migrate_swap_stop+0x9d0/0x9d0 [ 72.667034][ T8488] ? lock_acquire+0x197/0x420 [ 72.671727][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 72.676846][ T8488] ? vmacache_find+0x62/0x300 [ 72.681522][ T8488] ? find_vma+0x2b/0x170 [ 72.685768][ T8488] do_madvise+0x5ba/0x1b80 [ 72.690179][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.695043][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 72.700755][ T8488] ? ktime_get+0x1f8/0x2f0 [ 72.705172][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 72.710114][ T8488] ? switch_fpu_return+0x1db/0x4b0 [ 72.715225][ T8488] ? fpregs_mark_activate+0x320/0x320 [ 72.720601][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 72.725637][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 72.730673][ T8488] __x64_sys_madvise+0xae/0x120 [ 72.735541][ T8488] do_syscall_64+0xf6/0x7d0 [ 72.740056][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.745945][ T8488] RIP: 0033:0x460bf7 [ 72.749840][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 72.769525][ T8488] RSP: 002b:00007ffd5111de00 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 72.777932][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 72.785916][ T8488] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00023a000 [ 72.793893][ T8488] RBP: 00007ffd5111de40 R08: 000000c000200000 R09: 000000c00024c000 [ 72.801869][ T8488] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.809852][ T8488] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 72.817897][ T8488] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8488 [ 72.826965][ T8488] caller is __mod_memcg_state+0x87/0x1a0 [ 72.832598][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 72.842041][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.852635][ T8488] Call Trace: [ 72.855938][ T8488] dump_stack+0x188/0x20d [ 72.860276][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 72.866078][ T8488] __mod_memcg_state+0x87/0x1a0 [ 72.870939][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 72.876579][ T8488] ? mark_held_locks+0xe0/0xe0 [ 72.881343][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.886204][ T8488] ? can_split_huge_page+0x480/0x480 [ 72.891483][ T8488] ? pmd_val+0x7c/0xf0 [ 72.895570][ T8488] ? pmd_pfn+0x125/0x1c0 [ 72.899810][ T8488] ? enabled_store+0x190/0x190 [ 72.904578][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 72.909872][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 72.915376][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 72.922065][ T8488] __walk_page_range+0xcfb/0x2070 [ 72.927106][ T8488] ? walk_page_test+0x78/0x180 [ 72.931871][ T8488] walk_page_range+0x1bd/0x3a0 [ 72.936638][ T8488] ? __walk_page_range+0x2070/0x2070 [ 72.941927][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 72.947565][ T8488] madvise_free_single_vma+0x384/0x550 [ 72.953040][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 72.957977][ T8488] ? migrate_swap_stop+0x9d0/0x9d0 [ 72.963107][ T8488] ? lock_acquire+0x197/0x420 [ 72.967793][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 72.972925][ T8488] ? vmacache_find+0x62/0x300 [ 72.977608][ T8488] ? find_vma+0x2b/0x170 [ 72.981855][ T8488] do_madvise+0x5ba/0x1b80 [ 72.986277][ T8488] ? lock_downgrade+0x7f0/0x7f0 [ 72.991140][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 72.996877][ T8488] ? ktime_get+0x1f8/0x2f0 [ 73.001307][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 73.006366][ T8488] ? switch_fpu_return+0x1db/0x4b0 [ 73.011495][ T8488] ? fpregs_mark_activate+0x320/0x320 [ 73.016912][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 73.021950][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 73.026975][ T8488] __x64_sys_madvise+0xae/0x120 [ 73.031847][ T8488] do_syscall_64+0xf6/0x7d0 [ 73.036354][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.042242][ T8488] RIP: 0033:0x460bf7 [ 73.046134][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 73.065827][ T8488] RSP: 002b:00007ffd5111de00 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 73.074241][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 73.082229][ T8488] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c00023a000 [ 73.090195][ T8488] RBP: 00007ffd5111de40 R08: 000000c000200000 R09: 000000c00024c000 [ 73.098177][ T8488] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 73.106152][ T8488] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 73.450134][ T8494] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8494 [ 73.459168][ T8494] caller is __mod_memcg_state+0x27/0x1a0 [ 73.464832][ T8494] CPU: 1 PID: 8494 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 73.474299][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.484364][ T8494] Call Trace: [ 73.487654][ T8494] dump_stack+0x188/0x20d [ 73.491995][ T8494] __this_cpu_preempt_check.cold+0x84/0x90 [ 73.497801][ T8494] __mod_memcg_state+0x27/0x1a0 [ 73.502658][ T8494] split_huge_page_to_list+0x124b/0x3380 [ 73.508296][ T8494] ? mark_held_locks+0xe0/0xe0 [ 73.513073][ T8494] ? can_split_huge_page+0x480/0x480 [ 73.518360][ T8494] ? pmd_val+0x7c/0xf0 [ 73.522430][ T8494] ? pmd_pfn+0x125/0x1c0 [ 73.526696][ T8494] ? enabled_store+0x190/0x190 [ 73.531471][ T8494] madvise_free_huge_pmd+0x873/0xb90 [ 73.536762][ T8494] madvise_free_pte_range+0x6ff/0x2650 [ 73.542237][ T8494] ? kmem_cache_free+0x7f/0x320 [ 73.547100][ T8494] ? do_madvise+0xbb3/0x1b80 [ 73.551699][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 73.556734][ T8494] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 73.563431][ T8494] __walk_page_range+0xcfb/0x2070 [ 73.568472][ T8494] ? walk_page_test+0x78/0x180 [ 73.573239][ T8494] walk_page_range+0x1bd/0x3a0 [ 73.578013][ T8494] ? __walk_page_range+0x2070/0x2070 [ 73.583300][ T8494] ? madvise_free_single_vma+0x2c1/0x550 [ 73.588937][ T8494] madvise_free_single_vma+0x384/0x550 [ 73.594392][ T8494] ? madvise_pageout+0x3b0/0x3b0 [ 73.599330][ T8494] ? lock_acquire+0x197/0x420 [ 73.604018][ T8494] ? userfaultfd_remove+0xf0/0x2b0 [ 73.609139][ T8494] ? vmacache_find+0x62/0x300 [ 73.613818][ T8494] ? vmacache_update+0xce/0x140 [ 73.618672][ T8494] ? find_vma+0x2b/0x170 [ 73.622920][ T8494] do_madvise+0x5ba/0x1b80 [ 73.627347][ T8494] ? lock_downgrade+0x7f0/0x7f0 [ 73.632223][ T8494] ? madvise_free_pte_range+0x2650/0x2650 [ 73.637946][ T8494] ? ktime_get+0x1f8/0x2f0 [ 73.642463][ T8494] ? __x64_sys_futex+0x376/0x4f0 [ 73.647406][ T8494] ? switch_fpu_return+0x1db/0x4b0 [ 73.652516][ T8494] ? fpregs_mark_activate+0x320/0x320 [ 73.657899][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 73.662918][ T8494] ? trace_hardirqs_on+0x55/0x220 [ 73.667949][ T8494] __x64_sys_madvise+0xae/0x120 [ 73.672803][ T8494] do_syscall_64+0xf6/0x7d0 [ 73.677309][ T8494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.683197][ T8494] RIP: 0033:0x460bf7 [ 73.687090][ T8494] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 73.706870][ T8494] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 73.715284][ T8494] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 73.723252][ T8494] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001ba000 [ 73.731221][ T8494] RBP: 000000c0000cdeb0 R08: 000000c000000000 R09: 000000c0001bc000 [ 73.739185][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 73.747156][ T8494] R13: 0000000000000000 R14: 0000000000ac759e R15: 0000000000000000 [ 73.755220][ T8494] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8494 [ 73.764067][ T8494] caller is __mod_memcg_state+0xca/0x1a0 [ 73.769723][ T8494] CPU: 1 PID: 8494 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 73.779172][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.789220][ T8494] Call Trace: [ 73.792513][ T8494] dump_stack+0x188/0x20d [ 73.796863][ T8494] __this_cpu_preempt_check.cold+0x84/0x90 [ 73.802684][ T8494] __mod_memcg_state+0xca/0x1a0 [ 73.807557][ T8494] split_huge_page_to_list+0x124b/0x3380 [ 73.813219][ T8494] ? mark_held_locks+0xe0/0xe0 [ 73.817995][ T8494] ? can_split_huge_page+0x480/0x480 [ 73.823301][ T8494] ? pmd_val+0x7c/0xf0 [ 73.827378][ T8494] ? pmd_pfn+0x125/0x1c0 [ 73.831630][ T8494] ? enabled_store+0x190/0x190 [ 73.836401][ T8494] madvise_free_huge_pmd+0x873/0xb90 [ 73.841695][ T8494] madvise_free_pte_range+0x6ff/0x2650 [ 73.847164][ T8494] ? kmem_cache_free+0x7f/0x320 [ 73.852020][ T8494] ? do_madvise+0xbb3/0x1b80 [ 73.856604][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 73.861653][ T8494] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 73.868342][ T8494] __walk_page_range+0xcfb/0x2070 [ 73.873402][ T8494] ? walk_page_test+0x78/0x180 [ 73.878289][ T8494] walk_page_range+0x1bd/0x3a0 [ 73.883064][ T8494] ? __walk_page_range+0x2070/0x2070 [ 73.888450][ T8494] ? madvise_free_single_vma+0x2c1/0x550 [ 73.894088][ T8494] madvise_free_single_vma+0x384/0x550 [ 73.899555][ T8494] ? madvise_pageout+0x3b0/0x3b0 [ 73.904490][ T8494] ? lock_acquire+0x197/0x420 [ 73.909168][ T8494] ? userfaultfd_remove+0xf0/0x2b0 [ 73.914281][ T8494] ? vmacache_find+0x62/0x300 [ 73.918956][ T8494] ? vmacache_update+0xce/0x140 [ 73.923801][ T8494] ? find_vma+0x2b/0x170 [ 73.928050][ T8494] do_madvise+0x5ba/0x1b80 [ 73.932553][ T8494] ? lock_downgrade+0x7f0/0x7f0 [ 73.937443][ T8494] ? madvise_free_pte_range+0x2650/0x2650 [ 73.943206][ T8494] ? ktime_get+0x1f8/0x2f0 [ 73.947625][ T8494] ? __x64_sys_futex+0x376/0x4f0 [ 73.952575][ T8494] ? switch_fpu_return+0x1db/0x4b0 [ 73.957688][ T8494] ? fpregs_mark_activate+0x320/0x320 [ 73.963064][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 73.968087][ T8494] ? trace_hardirqs_on+0x55/0x220 [ 73.973150][ T8494] __x64_sys_madvise+0xae/0x120 [ 73.978102][ T8494] do_syscall_64+0xf6/0x7d0 [ 73.983099][ T8494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.988990][ T8494] RIP: 0033:0x460bf7 [ 73.992892][ T8494] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 74.012498][ T8494] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 74.020914][ T8494] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 74.028896][ T8494] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001ba000 [ 74.036870][ T8494] RBP: 000000c0000cdeb0 R08: 000000c000000000 R09: 000000c0001bc000 [ 74.044852][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 74.052943][ T8494] R13: 0000000000000000 R14: 0000000000ac759e R15: 0000000000000000 [ 74.060997][ T8494] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8494 [ 74.070104][ T8494] caller is __mod_memcg_state+0x87/0x1a0 [ 74.076061][ T8494] CPU: 1 PID: 8494 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 74.086151][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.096289][ T8494] Call Trace: [ 74.099588][ T8494] dump_stack+0x188/0x20d [ 74.103923][ T8494] __this_cpu_preempt_check.cold+0x84/0x90 [ 74.109729][ T8494] __mod_memcg_state+0x87/0x1a0 [ 74.114931][ T8494] split_huge_page_to_list+0x124b/0x3380 [ 74.120618][ T8494] ? mark_held_locks+0xe0/0xe0 [ 74.125389][ T8494] ? can_split_huge_page+0x480/0x480 [ 74.131629][ T8494] ? pmd_val+0x7c/0xf0 [ 74.135702][ T8494] ? pmd_pfn+0x125/0x1c0 [ 74.140551][ T8494] ? enabled_store+0x190/0x190 [ 74.145340][ T8494] madvise_free_huge_pmd+0x873/0xb90 [ 74.151264][ T8494] madvise_free_pte_range+0x6ff/0x2650 [ 74.156733][ T8494] ? kmem_cache_free+0x7f/0x320 [ 74.161670][ T8494] ? do_madvise+0xbb3/0x1b80 [ 74.166400][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 74.171438][ T8494] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 74.178126][ T8494] __walk_page_range+0xcfb/0x2070 [ 74.183193][ T8494] ? walk_page_test+0x78/0x180 [ 74.187984][ T8494] walk_page_range+0x1bd/0x3a0 [ 74.192787][ T8494] ? __walk_page_range+0x2070/0x2070 [ 74.198271][ T8494] ? madvise_free_single_vma+0x2c1/0x550 [ 74.203918][ T8494] madvise_free_single_vma+0x384/0x550 [ 74.209407][ T8494] ? madvise_pageout+0x3b0/0x3b0 [ 74.214531][ T8494] ? lock_acquire+0x197/0x420 [ 74.219232][ T8494] ? userfaultfd_remove+0xf0/0x2b0 [ 74.224371][ T8494] ? vmacache_find+0x62/0x300 [ 74.229045][ T8494] ? vmacache_update+0xce/0x140 [ 74.234030][ T8494] ? find_vma+0x2b/0x170 [ 74.239189][ T8494] do_madvise+0x5ba/0x1b80 [ 74.243617][ T8494] ? lock_downgrade+0x7f0/0x7f0 [ 74.249262][ T8494] ? madvise_free_pte_range+0x2650/0x2650 [ 74.254977][ T8494] ? ktime_get+0x1f8/0x2f0 [ 74.259395][ T8494] ? __x64_sys_futex+0x376/0x4f0 [ 74.264337][ T8494] ? switch_fpu_return+0x1db/0x4b0 [ 74.269448][ T8494] ? fpregs_mark_activate+0x320/0x320 [ 74.274823][ T8494] ? __x64_sys_madvise+0xae/0x120 [ 74.279843][ T8494] ? trace_hardirqs_on+0x55/0x220 [ 74.284957][ T8494] __x64_sys_madvise+0xae/0x120 [ 74.290332][ T8494] do_syscall_64+0xf6/0x7d0 [ 74.294844][ T8494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.305977][ T8494] RIP: 0033:0x460bf7 [ 74.309967][ T8494] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 74.329741][ T8494] RSP: 002b:000000c0000cde70 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 74.338170][ T8494] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 74.346578][ T8494] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001ba000 [ 74.355003][ T8494] RBP: 000000c0000cdeb0 R08: 000000c000000000 R09: 000000c0001bc000 [ 74.362974][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 74.370940][ T8494] R13: 0000000000000000 R14: 0000000000ac759e R15: 0000000000000000 2020/03/11 14:24:26 connecting to host at 10.128.0.26:33845 2020/03/11 14:24:26 checking machine... 2020/03/11 14:24:26 checking revisions... 2020/03/11 14:24:26 testing simple program... [ 75.329520][ T8506] IPVS: ftp: loaded support on port[0] = 21 2020/03/11 14:24:26 building call list... [ 75.640419][ T8490] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8490 [ 75.644433][ T190] tipc: TX() has been purged, node left! [ 75.649451][ T8490] caller is __mod_memcg_state+0x27/0x1a0 [ 75.660758][ T8490] CPU: 0 PID: 8490 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 75.670193][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.680250][ T8490] Call Trace: [ 75.683554][ T8490] dump_stack+0x188/0x20d [ 75.687906][ T8490] __this_cpu_preempt_check.cold+0x84/0x90 [ 75.693711][ T8490] __mod_memcg_state+0x27/0x1a0 [ 75.698558][ T8490] split_huge_page_to_list+0x124b/0x3380 [ 75.704188][ T8490] ? mark_held_locks+0xe0/0xe0 [ 75.708940][ T8490] ? release_pages+0x656/0x19b0 [ 75.713784][ T8490] ? can_split_huge_page+0x480/0x480 [ 75.719049][ T8490] ? pmd_val+0x7c/0xf0 [ 75.723097][ T8490] ? pmd_pfn+0x125/0x1c0 [ 75.727321][ T8490] ? enabled_store+0x190/0x190 [ 75.732198][ T8490] madvise_free_huge_pmd+0x873/0xb90 [ 75.737472][ T8490] madvise_free_pte_range+0x6ff/0x2650 [ 75.742939][ T8490] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 75.749611][ T8490] __walk_page_range+0xcfb/0x2070 [ 75.754624][ T8490] ? walk_page_test+0x78/0x180 [ 75.759367][ T8490] walk_page_range+0x1bd/0x3a0 [ 75.764111][ T8490] ? __walk_page_range+0x2070/0x2070 [ 75.769835][ T8490] ? madvise_free_single_vma+0x2c1/0x550 [ 75.775452][ T8490] madvise_free_single_vma+0x384/0x550 [ 75.780923][ T8490] ? madvise_pageout+0x3b0/0x3b0 [ 75.785853][ T8490] ? lock_acquire+0x197/0x420 [ 75.791551][ T8490] ? userfaultfd_remove+0xf0/0x2b0 [ 75.796646][ T8490] ? vmacache_find+0x62/0x300 [ 75.801321][ T8490] ? find_vma+0x2b/0x170 [ 75.805557][ T8490] do_madvise+0x5ba/0x1b80 [ 75.810111][ T8490] ? unuse_pde+0x2c/0x80 [ 75.814423][ T8490] ? madvise_free_pte_range+0x2650/0x2650 [ 75.820137][ T8490] ? __x64_sys_futex+0x376/0x4f0 [ 75.825076][ T8490] ? fput_many+0x2f/0x1a0 [ 75.829407][ T8490] ? do_futex+0x1b10/0x1b10 [ 75.833911][ T8490] ? ksys_read+0x19f/0x250 [ 75.838318][ T8490] ? kernel_write+0x120/0x120 [ 75.843015][ T8490] ? __x64_sys_madvise+0xae/0x120 [ 75.848044][ T8490] ? trace_hardirqs_on+0x55/0x220 [ 75.853065][ T8490] __x64_sys_madvise+0xae/0x120 [ 75.857939][ T8490] do_syscall_64+0xf6/0x7d0 [ 75.862431][ T8490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.868649][ T8490] RIP: 0033:0x460bf7 [ 75.872523][ T8490] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 75.892208][ T8490] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 75.900685][ T8490] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 75.908742][ T8490] RDX: 0000000000000008 RSI: 00000000000c0000 RDI: 000000c0003ee000 [ 75.916715][ T8490] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c0004ae000 [ 75.924840][ T8490] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 75.932886][ T8490] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 75.941874][ T8490] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8490 [ 75.950793][ T8490] caller is __mod_memcg_state+0xca/0x1a0 [ 75.956494][ T8490] CPU: 0 PID: 8490 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 75.965953][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.976094][ T8490] Call Trace: [ 75.979473][ T8490] dump_stack+0x188/0x20d [ 75.984046][ T8490] __this_cpu_preempt_check.cold+0x84/0x90 [ 75.990276][ T8490] __mod_memcg_state+0xca/0x1a0 [ 75.995111][ T8490] split_huge_page_to_list+0x124b/0x3380 [ 76.000729][ T8490] ? mark_held_locks+0xe0/0xe0 [ 76.005498][ T8490] ? release_pages+0x656/0x19b0 [ 76.010608][ T8490] ? can_split_huge_page+0x480/0x480 [ 76.016002][ T8490] ? pmd_val+0x7c/0xf0 [ 76.020066][ T8490] ? pmd_pfn+0x125/0x1c0 [ 76.024415][ T8490] ? enabled_store+0x190/0x190 [ 76.029167][ T8490] madvise_free_huge_pmd+0x873/0xb90 [ 76.034452][ T8490] madvise_free_pte_range+0x6ff/0x2650 [ 76.039998][ T8490] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 76.046766][ T8490] __walk_page_range+0xcfb/0x2070 [ 76.051792][ T8490] ? walk_page_test+0x78/0x180 [ 76.056574][ T8490] walk_page_range+0x1bd/0x3a0 [ 76.061435][ T8490] ? __walk_page_range+0x2070/0x2070 [ 76.066705][ T8490] ? madvise_free_single_vma+0x2c1/0x550 [ 76.072333][ T8490] madvise_free_single_vma+0x384/0x550 [ 76.077775][ T8490] ? madvise_pageout+0x3b0/0x3b0 [ 76.082713][ T8490] ? lock_acquire+0x197/0x420 [ 76.087388][ T8490] ? userfaultfd_remove+0xf0/0x2b0 [ 76.092482][ T8490] ? vmacache_find+0x62/0x300 [ 76.097158][ T8490] ? find_vma+0x2b/0x170 [ 76.101419][ T8490] do_madvise+0x5ba/0x1b80 [ 76.105814][ T8490] ? unuse_pde+0x2c/0x80 [ 76.110056][ T8490] ? madvise_free_pte_range+0x2650/0x2650 [ 76.115760][ T8490] ? __x64_sys_futex+0x376/0x4f0 [ 76.120680][ T8490] ? fput_many+0x2f/0x1a0 [ 76.124990][ T8490] ? do_futex+0x1b10/0x1b10 [ 76.129483][ T8490] ? ksys_read+0x19f/0x250 [ 76.133889][ T8490] ? kernel_write+0x120/0x120 [ 76.138551][ T8490] ? __x64_sys_madvise+0xae/0x120 [ 76.143745][ T8490] ? trace_hardirqs_on+0x55/0x220 [ 76.148770][ T8490] __x64_sys_madvise+0xae/0x120 [ 76.153738][ T8490] do_syscall_64+0xf6/0x7d0 [ 76.158226][ T8490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.164096][ T8490] RIP: 0033:0x460bf7 [ 76.168072][ T8490] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 76.187876][ T8490] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.196451][ T8490] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.204407][ T8490] RDX: 0000000000000008 RSI: 00000000000c0000 RDI: 000000c0003ee000 [ 76.217319][ T8490] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c0004ae000 [ 76.225281][ T8490] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 76.233254][ T8490] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 76.241325][ T8490] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8490 [ 76.250512][ T8490] caller is __mod_memcg_state+0x87/0x1a0 [ 76.256268][ T8490] CPU: 0 PID: 8490 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 76.266056][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.276095][ T8490] Call Trace: [ 76.279402][ T8490] dump_stack+0x188/0x20d [ 76.283737][ T8490] __this_cpu_preempt_check.cold+0x84/0x90 [ 76.289525][ T8490] __mod_memcg_state+0x87/0x1a0 [ 76.294355][ T8490] split_huge_page_to_list+0x124b/0x3380 [ 76.299975][ T8490] ? mark_held_locks+0xe0/0xe0 [ 76.304987][ T8490] ? release_pages+0x656/0x19b0 [ 76.309824][ T8490] ? can_split_huge_page+0x480/0x480 [ 76.315094][ T8490] ? pmd_val+0x7c/0xf0 [ 76.319155][ T8490] ? pmd_pfn+0x125/0x1c0 [ 76.323402][ T8490] ? enabled_store+0x190/0x190 [ 76.328240][ T8490] madvise_free_huge_pmd+0x873/0xb90 [ 76.333873][ T8490] madvise_free_pte_range+0x6ff/0x2650 [ 76.339343][ T8490] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 76.346017][ T8490] __walk_page_range+0xcfb/0x2070 [ 76.351046][ T8490] ? walk_page_test+0x78/0x180 [ 76.355805][ T8490] walk_page_range+0x1bd/0x3a0 [ 76.360552][ T8490] ? __walk_page_range+0x2070/0x2070 [ 76.365836][ T8490] ? madvise_free_single_vma+0x2c1/0x550 [ 76.371468][ T8490] madvise_free_single_vma+0x384/0x550 [ 76.377954][ T8490] ? madvise_pageout+0x3b0/0x3b0 [ 76.382887][ T8490] ? lock_acquire+0x197/0x420 [ 76.387565][ T8490] ? userfaultfd_remove+0xf0/0x2b0 [ 76.392674][ T8490] ? vmacache_find+0x62/0x300 [ 76.397342][ T8490] ? find_vma+0x2b/0x170 [ 76.401570][ T8490] do_madvise+0x5ba/0x1b80 [ 76.405982][ T8490] ? unuse_pde+0x2c/0x80 [ 76.410211][ T8490] ? madvise_free_pte_range+0x2650/0x2650 [ 76.416542][ T8490] ? __x64_sys_futex+0x376/0x4f0 [ 76.421595][ T8490] ? fput_many+0x2f/0x1a0 [ 76.425930][ T8490] ? do_futex+0x1b10/0x1b10 [ 76.430415][ T8490] ? ksys_read+0x19f/0x250 [ 76.434817][ T8490] ? kernel_write+0x120/0x120 [ 76.439484][ T8490] ? __x64_sys_madvise+0xae/0x120 [ 76.444502][ T8490] ? trace_hardirqs_on+0x55/0x220 [ 76.449521][ T8490] __x64_sys_madvise+0xae/0x120 [ 76.454353][ T8490] do_syscall_64+0xf6/0x7d0 [ 76.458878][ T8490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.464751][ T8490] RIP: 0033:0x460bf7 [ 76.468641][ T8490] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 76.488496][ T8490] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 76.497101][ T8490] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 76.505182][ T8490] RDX: 0000000000000008 RSI: 00000000000c0000 RDI: 000000c0003ee000 [ 76.513573][ T8490] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c0004ae000 [ 76.521526][ T8490] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000000 [ 76.529574][ T8490] R13: 00007fcfc33fe6d0 R14: 0000000000000001 R15: 0000000000000001 [ 77.099387][ T8488] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/8488 [ 77.108406][ T8488] caller is __mod_memcg_state+0x27/0x1a0 [ 77.114048][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 77.123474][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.133528][ T8488] Call Trace: [ 77.136826][ T8488] dump_stack+0x188/0x20d [ 77.141180][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 77.146993][ T8488] __mod_memcg_state+0x27/0x1a0 [ 77.151992][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 77.157623][ T8488] ? mark_held_locks+0xe0/0xe0 [ 77.162476][ T8488] ? release_pages+0x656/0x19b0 [ 77.167587][ T8488] ? can_split_huge_page+0x480/0x480 [ 77.172869][ T8488] ? pmd_val+0x7c/0xf0 [ 77.176933][ T8488] ? pmd_pfn+0x125/0x1c0 [ 77.181429][ T8488] ? enabled_store+0x190/0x190 [ 77.186308][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 77.191599][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 77.197060][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 77.203859][ T8488] __walk_page_range+0xcfb/0x2070 [ 77.209099][ T8488] ? walk_page_test+0x78/0x180 [ 77.213980][ T8488] walk_page_range+0x1bd/0x3a0 [ 77.218727][ T8488] ? __walk_page_range+0x2070/0x2070 [ 77.224003][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 77.229626][ T8488] madvise_free_single_vma+0x384/0x550 [ 77.235101][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 77.240023][ T8488] ? lock_acquire+0x197/0x420 [ 77.244708][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 77.249830][ T8488] ? vmacache_find+0x62/0x300 [ 77.254581][ T8488] ? vmacache_update+0xce/0x140 [ 77.259428][ T8488] ? find_vma+0x2b/0x170 [ 77.263653][ T8488] do_madvise+0x5ba/0x1b80 [ 77.268242][ T8488] ? unuse_pde+0x2c/0x80 [ 77.272470][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 77.278171][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 77.283100][ T8488] ? fput_many+0x2f/0x1a0 [ 77.287454][ T8488] ? do_futex+0x1b10/0x1b10 [ 77.291940][ T8488] ? ksys_read+0x19f/0x250 [ 77.296349][ T8488] ? kernel_write+0x120/0x120 [ 77.301020][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 77.306050][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 77.311058][ T8488] __x64_sys_madvise+0xae/0x120 [ 77.316079][ T8488] do_syscall_64+0xf6/0x7d0 [ 77.320571][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.326452][ T8488] RIP: 0033:0x460bf7 [ 77.330340][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 77.349931][ T8488] RSP: 002b:00007ffd5111dbe0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.358455][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 77.366424][ T8488] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005ae000 [ 77.374391][ T8488] RBP: 00007ffd5111dc20 R08: 000000c000400000 R09: 000000c0007ae000 [ 77.382360][ T8488] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 77.390358][ T8488] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 77.398433][ T8488] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/8488 [ 77.407475][ T8488] caller is __mod_memcg_state+0xca/0x1a0 [ 77.413107][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 77.422555][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.432603][ T8488] Call Trace: [ 77.435889][ T8488] dump_stack+0x188/0x20d [ 77.440208][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 77.446009][ T8488] __mod_memcg_state+0xca/0x1a0 [ 77.450963][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 77.456720][ T8488] ? mark_held_locks+0xe0/0xe0 [ 77.461470][ T8488] ? release_pages+0x656/0x19b0 [ 77.466318][ T8488] ? can_split_huge_page+0x480/0x480 [ 77.471586][ T8488] ? pmd_val+0x7c/0xf0 [ 77.475669][ T8488] ? pmd_pfn+0x125/0x1c0 [ 77.479903][ T8488] ? enabled_store+0x190/0x190 [ 77.484649][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 77.489929][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 77.495401][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 77.502065][ T8488] __walk_page_range+0xcfb/0x2070 [ 77.507091][ T8488] ? walk_page_test+0x78/0x180 [ 77.511919][ T8488] walk_page_range+0x1bd/0x3a0 [ 77.516670][ T8488] ? __walk_page_range+0x2070/0x2070 [ 77.521955][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 77.527639][ T8488] madvise_free_single_vma+0x384/0x550 [ 77.533142][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 77.538080][ T8488] ? lock_acquire+0x197/0x420 [ 77.542944][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 77.548048][ T8488] ? vmacache_find+0x62/0x300 [ 77.552705][ T8488] ? vmacache_update+0xce/0x140 [ 77.557540][ T8488] ? find_vma+0x2b/0x170 [ 77.561781][ T8488] do_madvise+0x5ba/0x1b80 [ 77.566177][ T8488] ? unuse_pde+0x2c/0x80 [ 77.570407][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 77.576137][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 77.581074][ T8488] ? fput_many+0x2f/0x1a0 [ 77.585382][ T8488] ? do_futex+0x1b10/0x1b10 [ 77.589867][ T8488] ? ksys_read+0x19f/0x250 [ 77.594275][ T8488] ? kernel_write+0x120/0x120 [ 77.598952][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 77.603996][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 77.608999][ T8488] __x64_sys_madvise+0xae/0x120 [ 77.613836][ T8488] do_syscall_64+0xf6/0x7d0 [ 77.618328][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.624208][ T8488] RIP: 0033:0x460bf7 [ 77.628086][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 77.647673][ T8488] RSP: 002b:00007ffd5111dbe0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.656064][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 77.664015][ T8488] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005ae000 [ 77.671970][ T8488] RBP: 00007ffd5111dc20 R08: 000000c000400000 R09: 000000c0007ae000 [ 77.679921][ T8488] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 77.687870][ T8488] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 77.695913][ T8488] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/8488 [ 77.704974][ T8488] caller is __mod_memcg_state+0x87/0x1a0 [ 77.710586][ T8488] CPU: 0 PID: 8488 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 77.720011][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.730053][ T8488] Call Trace: [ 77.733326][ T8488] dump_stack+0x188/0x20d [ 77.737653][ T8488] __this_cpu_preempt_check.cold+0x84/0x90 [ 77.743444][ T8488] __mod_memcg_state+0x87/0x1a0 [ 77.748287][ T8488] split_huge_page_to_list+0x124b/0x3380 [ 77.753925][ T8488] ? mark_held_locks+0xe0/0xe0 [ 77.758680][ T8488] ? release_pages+0x656/0x19b0 [ 77.763513][ T8488] ? can_split_huge_page+0x480/0x480 [ 77.768777][ T8488] ? pmd_val+0x7c/0xf0 [ 77.772828][ T8488] ? pmd_pfn+0x125/0x1c0 [ 77.777051][ T8488] ? enabled_store+0x190/0x190 [ 77.781797][ T8488] madvise_free_huge_pmd+0x873/0xb90 [ 77.787078][ T8488] madvise_free_pte_range+0x6ff/0x2650 [ 77.792535][ T8488] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 77.799191][ T8488] __walk_page_range+0xcfb/0x2070 [ 77.804218][ T8488] ? walk_page_test+0x78/0x180 [ 77.808967][ T8488] walk_page_range+0x1bd/0x3a0 [ 77.813723][ T8488] ? __walk_page_range+0x2070/0x2070 [ 77.819007][ T8488] ? madvise_free_single_vma+0x2c1/0x550 [ 77.824675][ T8488] madvise_free_single_vma+0x384/0x550 [ 77.830120][ T8488] ? madvise_pageout+0x3b0/0x3b0 [ 77.835088][ T8488] ? lock_acquire+0x197/0x420 [ 77.839759][ T8488] ? userfaultfd_remove+0xf0/0x2b0 [ 77.844885][ T8488] ? vmacache_find+0x62/0x300 [ 77.849719][ T8488] ? vmacache_update+0xce/0x140 [ 77.854556][ T8488] ? find_vma+0x2b/0x170 [ 77.858782][ T8488] do_madvise+0x5ba/0x1b80 [ 77.863191][ T8488] ? unuse_pde+0x2c/0x80 [ 77.867432][ T8488] ? madvise_free_pte_range+0x2650/0x2650 [ 77.873139][ T8488] ? __x64_sys_futex+0x376/0x4f0 [ 77.878069][ T8488] ? fput_many+0x2f/0x1a0 [ 77.882376][ T8488] ? do_futex+0x1b10/0x1b10 [ 77.886935][ T8488] ? ksys_read+0x19f/0x250 [ 77.891405][ T8488] ? kernel_write+0x120/0x120 [ 77.896087][ T8488] ? __x64_sys_madvise+0xae/0x120 [ 77.901119][ T8488] ? trace_hardirqs_on+0x55/0x220 [ 77.906137][ T8488] __x64_sys_madvise+0xae/0x120 [ 77.910985][ T8488] do_syscall_64+0xf6/0x7d0 [ 77.915471][ T8488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.921340][ T8488] RIP: 0033:0x460bf7 [ 77.925215][ T8488] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 77.944810][ T8488] RSP: 002b:00007ffd5111dbe0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.953225][ T8488] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 77.961179][ T8488] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c0005ae000 [ 77.969132][ T8488] RBP: 00007ffd5111dc20 R08: 000000c000400000 R09: 000000c0007ae000 [ 77.977091][ T8488] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 77.985180][ T8488] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 executing program [ 78.319465][ T8511] ------------[ cut here ]------------ [ 78.324957][ T8511] WARNING: CPU: 0 PID: 8511 at sound/core/oss/pcm_plugin.c:126 snd_pcm_plug_alloc+0x29a/0x330 [ 78.335180][ T8511] Kernel panic - not syncing: panic_on_warn set ... [ 78.341748][ T8511] CPU: 0 PID: 8511 Comm: syz-fuzzer Not tainted 5.6.0-rc5-next-20200311-syzkaller #0 [ 78.351196][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.361293][ T8511] Call Trace: [ 78.364615][ T8511] dump_stack+0x188/0x20d [ 78.368930][ T8511] ? snd_pcm_plug_alloc+0x250/0x330 [ 78.374107][ T8511] panic+0x2e3/0x75c [ 78.377999][ T8511] ? add_taint.cold+0x16/0x16 [ 78.382662][ T8511] ? printk+0xba/0xed [ 78.386622][ T8511] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 78.392060][ T8511] ? __warn.cold+0x14/0x35 [ 78.396455][ T8511] ? __warn+0xd5/0x1c8 [ 78.400511][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.405687][ T8511] __warn.cold+0x2f/0x35 [ 78.409911][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.415088][ T8511] report_bug+0x27b/0x2f0 [ 78.419452][ T8511] do_error_trap+0x12b/0x220 [ 78.424045][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.429252][ T8511] do_invalid_op+0x32/0x40 [ 78.433660][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.438855][ T8511] invalid_op+0x23/0x30 [ 78.442999][ T8511] RIP: 0010:snd_pcm_plug_alloc+0x29a/0x330 [ 78.448787][ T8511] Code: ff ff 45 31 e4 e8 46 f2 7f fb 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 e8 35 f2 7f fb 0f 0b 41 bc fa ff ff ff eb e0 e8 26 f2 7f fb <0f> 0b 41 bc fa ff ff ff eb d1 e8 17 f2 7f fb 0f 0b 41 bc fa ff ff [ 78.468482][ T8511] RSP: 0018:ffffc90001ee7b88 EFLAGS: 00010293 [ 78.474534][ T8511] RAX: ffff88809366e2c0 RBX: ffff8880a4662f00 RCX: ffffffff85f2d2c6 [ 78.482593][ T8511] RDX: 0000000000000000 RSI: ffffffff85f2d44a RDI: 0000000000000007 [ 78.490553][ T8511] RBP: 0000000000000000 R08: ffff88809366e2c0 R09: ffffed1042ac681f [ 78.498504][ T8511] R10: ffff8882156340f3 R11: ffffed1042ac681e R12: ffff8880a4662f58 [ 78.506464][ T8511] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888215634000 [ 78.514453][ T8511] ? snd_pcm_plug_alloc+0x116/0x330 [ 78.519638][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.524834][ T8511] ? snd_pcm_plug_alloc+0x29a/0x330 [ 78.530013][ T8511] snd_pcm_oss_change_params_locked+0x1c05/0x34b0 [ 78.536417][ T8511] ? _snd_pcm_hw_param_set.constprop.0+0x510/0x510 [ 78.542899][ T8511] ? trace_hardirqs_off+0x50/0x220 [ 78.547998][ T8511] ? trace_hardirqs_on+0x55/0x220 [ 78.553008][ T8511] ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0 [ 78.558630][ T8511] snd_pcm_oss_change_params+0x76/0xd0 [ 78.564095][ T8511] snd_pcm_oss_make_ready+0xb7/0x170 [ 78.569368][ T8511] snd_pcm_oss_sync.isra.0+0x1be/0x7d0 [ 78.574806][ T8511] ? snd_pcm_oss_sync.isra.0+0x7d0/0x7d0 [ 78.580504][ T8511] snd_pcm_oss_release+0x210/0x280 [ 78.585607][ T8511] __fput+0x2da/0x850 [ 78.589582][ T8511] task_work_run+0xf4/0x1b0 [ 78.594089][ T8511] exit_to_usermode_loop+0x2fa/0x360 [ 78.599365][ T8511] do_syscall_64+0x6b1/0x7d0 [ 78.603936][ T8511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.609812][ T8511] RIP: 0033:0x4afb40 [ 78.613695][ T8511] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 78.633279][ T8511] RSP: 002b:000000c000079588 EFLAGS: 00000212 ORIG_RAX: 0000000000000003 [ 78.641673][ T8511] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 78.649624][ T8511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.657579][ T8511] RBP: 000000c0000795c8 R08: 0000000000000000 R09: 0000000000000000 [ 78.665531][ T8511] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000003 [ 78.673489][ T8511] R13: 0000000000000002 R14: 0000000000000200 R15: 0000000000000000 [ 78.682836][ T8511] Kernel Offset: disabled [ 78.687170][ T8511] Rebooting in 86400 seconds..