Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2020/03/07 13:14:10 fuzzer started syzkaller login: [ 86.921924][ T9586] check_preemption_disabled: 3 callbacks suppressed [ 86.921944][ T9586] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9586 [ 86.937901][ T9586] caller is __mod_memcg_state+0x27/0x1a0 [ 86.943692][ T9586] CPU: 1 PID: 9586 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 86.953141][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.963197][ T9586] Call Trace: [ 86.966517][ T9586] dump_stack+0x188/0x20d [ 86.970872][ T9586] __this_cpu_preempt_check.cold+0x84/0x90 [ 86.976695][ T9586] __mod_memcg_state+0x27/0x1a0 [ 86.981646][ T9586] split_huge_page_to_list+0x124b/0x3380 [ 86.988026][ T9586] ? madvise_free_huge_pmd+0x869/0xb90 [ 86.993528][ T9586] ? can_split_huge_page+0x480/0x480 [ 86.999177][ T9586] ? pmd_val+0x7c/0xf0 [ 87.004350][ T9586] ? enabled_store+0x190/0x190 [ 87.009232][ T9586] madvise_free_huge_pmd+0x873/0xb90 [ 87.015030][ T9586] madvise_free_pte_range+0x6ff/0x2650 [ 87.020745][ T9586] ? mark_lock+0xbc/0x1220 [ 87.025270][ T9586] ? mark_held_locks+0x9f/0xe0 [ 87.033740][ T9586] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.040891][ T9586] __walk_page_range+0xcfb/0x2070 [ 87.045997][ T9586] ? walk_page_test+0x78/0x180 [ 87.051927][ T9586] walk_page_range+0x1bd/0x3a0 [ 87.056832][ T9586] ? __walk_page_range+0x2070/0x2070 [ 87.062260][ T9586] ? madvise_free_single_vma+0x2c1/0x550 [ 87.068015][ T9586] madvise_free_single_vma+0x384/0x550 [ 87.073643][ T9586] ? madvise_pageout+0x3b0/0x3b0 [ 87.078615][ T9586] ? lock_acquire+0x197/0x420 [ 87.083318][ T9586] ? userfaultfd_remove+0xf0/0x2b0 [ 87.088472][ T9586] ? vmacache_find+0x62/0x300 [ 87.093524][ T9586] ? find_vma+0x2b/0x170 [ 87.098331][ T9586] do_madvise+0x5ba/0x1b80 [ 87.102767][ T9586] ? lock_downgrade+0x7f0/0x7f0 [ 87.107657][ T9586] ? madvise_free_pte_range+0x2650/0x2650 [ 87.113406][ T9586] ? ktime_get+0x1f8/0x2f0 [ 87.118324][ T9586] ? __x64_sys_futex+0x376/0x4f0 [ 87.123312][ T9586] ? switch_fpu_return+0x1db/0x4b0 [ 87.128472][ T9586] ? fpregs_mark_activate+0x320/0x320 [ 87.133902][ T9586] ? __x64_sys_madvise+0xae/0x120 [ 87.139058][ T9586] __x64_sys_madvise+0xae/0x120 [ 87.145519][ T9586] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.150823][ T9586] do_syscall_64+0xf6/0x7d0 [ 87.155463][ T9586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.161406][ T9586] RIP: 0033:0x460bf7 [ 87.165314][ T9586] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.185462][ T9586] RSP: 002b:00007ffead271780 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.194162][ T9586] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.202490][ T9586] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000252000 [ 87.211053][ T9586] RBP: 00007ffead2717c0 R08: 000000c000200000 R09: 000000c000264000 [ 87.219058][ T9586] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 87.227726][ T9586] R13: 000000c0003de5d0 R14: 0000000000000001 R15: 0000000000000002 [ 87.240250][ T9586] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9586 [ 87.249489][ T9586] caller is __mod_memcg_state+0xca/0x1a0 [ 87.255529][ T9586] CPU: 1 PID: 9586 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 87.265108][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.275267][ T9586] Call Trace: [ 87.278597][ T9586] dump_stack+0x188/0x20d [ 87.282947][ T9586] __this_cpu_preempt_check.cold+0x84/0x90 [ 87.288759][ T9586] __mod_memcg_state+0xca/0x1a0 [ 87.293623][ T9586] split_huge_page_to_list+0x124b/0x3380 [ 87.299292][ T9586] ? madvise_free_huge_pmd+0x869/0xb90 [ 87.304788][ T9586] ? can_split_huge_page+0x480/0x480 [ 87.310083][ T9586] ? pmd_val+0x7c/0xf0 [ 87.314168][ T9586] ? enabled_store+0x190/0x190 [ 87.318967][ T9586] madvise_free_huge_pmd+0x873/0xb90 [ 87.324271][ T9586] madvise_free_pte_range+0x6ff/0x2650 [ 87.329749][ T9586] ? mark_lock+0xbc/0x1220 [ 87.334181][ T9586] ? mark_held_locks+0x9f/0xe0 [ 87.338949][ T9586] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.345654][ T9586] __walk_page_range+0xcfb/0x2070 [ 87.350975][ T9586] ? walk_page_test+0x78/0x180 [ 87.355765][ T9586] walk_page_range+0x1bd/0x3a0 [ 87.360535][ T9586] ? __walk_page_range+0x2070/0x2070 [ 87.367063][ T9586] ? madvise_free_single_vma+0x2c1/0x550 [ 87.372843][ T9586] madvise_free_single_vma+0x384/0x550 [ 87.378348][ T9586] ? madvise_pageout+0x3b0/0x3b0 [ 87.383432][ T9586] ? lock_acquire+0x197/0x420 [ 87.388127][ T9586] ? userfaultfd_remove+0xf0/0x2b0 [ 87.393256][ T9586] ? vmacache_find+0x62/0x300 [ 87.397955][ T9586] ? find_vma+0x2b/0x170 [ 87.402473][ T9586] do_madvise+0x5ba/0x1b80 [ 87.406889][ T9586] ? lock_downgrade+0x7f0/0x7f0 [ 87.411770][ T9586] ? madvise_free_pte_range+0x2650/0x2650 [ 87.417497][ T9586] ? ktime_get+0x1f8/0x2f0 [ 87.426094][ T9586] ? __x64_sys_futex+0x376/0x4f0 [ 87.431581][ T9586] ? switch_fpu_return+0x1db/0x4b0 [ 87.436962][ T9586] ? fpregs_mark_activate+0x320/0x320 [ 87.447695][ T9586] ? __x64_sys_madvise+0xae/0x120 [ 87.452721][ T9586] __x64_sys_madvise+0xae/0x120 [ 87.457686][ T9586] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.463423][ T9586] do_syscall_64+0xf6/0x7d0 [ 87.467941][ T9586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.473871][ T9586] RIP: 0033:0x460bf7 [ 87.477783][ T9586] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.499140][ T9586] RSP: 002b:00007ffead271780 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.507645][ T9586] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.515614][ T9586] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000252000 [ 87.523603][ T9586] RBP: 00007ffead2717c0 R08: 000000c000200000 R09: 000000c000264000 [ 87.531574][ T9586] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 87.539547][ T9586] R13: 000000c0003de5d0 R14: 0000000000000001 R15: 0000000000000002 [ 87.547896][ T9586] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9586 [ 87.557180][ T9586] caller is __mod_memcg_state+0x87/0x1a0 [ 87.563663][ T9586] CPU: 1 PID: 9586 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 87.573914][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.584307][ T9586] Call Trace: [ 87.587656][ T9586] dump_stack+0x188/0x20d [ 87.592040][ T9586] __this_cpu_preempt_check.cold+0x84/0x90 [ 87.597886][ T9586] __mod_memcg_state+0x87/0x1a0 [ 87.602892][ T9586] split_huge_page_to_list+0x124b/0x3380 [ 87.608663][ T9586] ? madvise_free_huge_pmd+0x869/0xb90 [ 87.614221][ T9586] ? can_split_huge_page+0x480/0x480 [ 87.619509][ T9586] ? pmd_val+0x7c/0xf0 [ 87.623765][ T9586] ? enabled_store+0x190/0x190 [ 87.628748][ T9586] madvise_free_huge_pmd+0x873/0xb90 [ 87.634063][ T9586] madvise_free_pte_range+0x6ff/0x2650 [ 87.639658][ T9586] ? mark_lock+0xbc/0x1220 [ 87.644483][ T9586] ? mark_held_locks+0x9f/0xe0 [ 87.649609][ T9586] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 87.656670][ T9586] __walk_page_range+0xcfb/0x2070 [ 87.662027][ T9586] ? walk_page_test+0x78/0x180 [ 87.666812][ T9586] walk_page_range+0x1bd/0x3a0 [ 87.672305][ T9586] ? __walk_page_range+0x2070/0x2070 [ 87.677912][ T9586] ? madvise_free_single_vma+0x2c1/0x550 [ 87.683575][ T9586] madvise_free_single_vma+0x384/0x550 [ 87.689073][ T9586] ? madvise_pageout+0x3b0/0x3b0 [ 87.694061][ T9586] ? lock_acquire+0x197/0x420 [ 87.698846][ T9586] ? userfaultfd_remove+0xf0/0x2b0 [ 87.704272][ T9586] ? vmacache_find+0x62/0x300 [ 87.709139][ T9586] ? find_vma+0x2b/0x170 [ 87.713644][ T9586] do_madvise+0x5ba/0x1b80 [ 87.718083][ T9586] ? lock_downgrade+0x7f0/0x7f0 [ 87.723135][ T9586] ? madvise_free_pte_range+0x2650/0x2650 [ 87.728996][ T9586] ? ktime_get+0x1f8/0x2f0 [ 87.733781][ T9586] ? __x64_sys_futex+0x376/0x4f0 [ 87.738923][ T9586] ? switch_fpu_return+0x1db/0x4b0 [ 87.744062][ T9586] ? fpregs_mark_activate+0x320/0x320 [ 87.749499][ T9586] ? __x64_sys_madvise+0xae/0x120 [ 87.754580][ T9586] __x64_sys_madvise+0xae/0x120 [ 87.759531][ T9586] ? lockdep_hardirqs_on+0x417/0x5d0 [ 87.764863][ T9586] do_syscall_64+0xf6/0x7d0 [ 87.769716][ T9586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.775635][ T9586] RIP: 0033:0x460bf7 [ 87.779676][ T9586] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 87.799375][ T9586] RSP: 002b:00007ffead271780 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 87.807854][ T9586] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 87.815936][ T9586] RDX: 0000000000000008 RSI: 0000000000012000 RDI: 000000c000252000 [ 87.824348][ T9586] RBP: 00007ffead2717c0 R08: 000000c000200000 R09: 000000c000264000 [ 87.832432][ T9586] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 87.840420][ T9586] R13: 000000c0003de5d0 R14: 0000000000000001 R15: 0000000000000002 2020/03/07 13:14:12 connecting to host at 10.128.0.26:43379 2020/03/07 13:14:12 checking machine... 2020/03/07 13:14:12 checking revisions... 2020/03/07 13:14:12 testing simple program... [ 89.859014][ T9604] IPVS: ftp: loaded support on port[0] = 21 2020/03/07 13:14:13 building call list... [ 90.012313][ T9588] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9588 [ 90.023206][ T9588] caller is __mod_memcg_state+0x27/0x1a0 [ 90.028888][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 90.039195][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.049618][ T9588] Call Trace: [ 90.053019][ T9588] dump_stack+0x188/0x20d [ 90.057405][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 90.063236][ T9588] __mod_memcg_state+0x27/0x1a0 [ 90.068117][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 90.074111][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 90.079612][ T9588] ? can_split_huge_page+0x480/0x480 [ 90.084937][ T9588] ? pmd_val+0x7c/0xf0 [ 90.089364][ T9588] ? enabled_store+0x190/0x190 [ 90.094179][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 90.099531][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 90.105221][ T9588] ? mark_lock+0xbc/0x1220 [ 90.109658][ T9588] ? mark_held_locks+0x9f/0xe0 [ 90.114429][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 90.121997][ T9588] __walk_page_range+0xcfb/0x2070 [ 90.127184][ T9588] ? walk_page_test+0x78/0x180 [ 90.132286][ T9588] walk_page_range+0x1bd/0x3a0 [ 90.137287][ T9588] ? __walk_page_range+0x2070/0x2070 [ 90.143013][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 90.148765][ T9588] madvise_free_single_vma+0x384/0x550 [ 90.154260][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 90.159319][ T9588] ? lock_acquire+0x197/0x420 [ 90.164012][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 90.169148][ T9588] ? vmacache_find+0x62/0x300 [ 90.173834][ T9588] ? vmacache_update+0xce/0x140 [ 90.179485][ T9588] ? find_vma+0x2b/0x170 [ 90.183753][ T9588] do_madvise+0x5ba/0x1b80 [ 90.188194][ T9588] ? unuse_pde+0x2c/0x80 [ 90.192933][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 90.198808][ T9588] ? wait_for_completion+0x3c0/0x3c0 [ 90.204288][ T9588] ? fput_many+0x2f/0x1a0 [ 90.209173][ T9588] ? ksys_read+0x19f/0x250 [ 90.213649][ T9588] ? kernel_write+0x120/0x120 [ 90.218399][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 90.223565][ T9588] __x64_sys_madvise+0xae/0x120 [ 90.229312][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 90.234887][ T9588] do_syscall_64+0xf6/0x7d0 [ 90.239505][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.245711][ T9588] RIP: 0033:0x460bf7 [ 90.249899][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 90.271689][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 90.280307][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 90.288665][ T9588] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001d2000 [ 90.297338][ T9588] RBP: 000000c000053c90 R08: 000000c000000000 R09: 000000c0001d4000 [ 90.305506][ T9588] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 90.313492][ T9588] R13: 00007f418d1dd008 R14: 0000000000000008 R15: 000000000000000b [ 90.321818][ T9588] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9588 [ 90.330765][ T9588] caller is __mod_memcg_state+0xca/0x1a0 [ 90.336902][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 90.346466][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.356551][ T9588] Call Trace: [ 90.359865][ T9588] dump_stack+0x188/0x20d [ 90.364242][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 90.370062][ T9588] __mod_memcg_state+0xca/0x1a0 [ 90.374954][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 90.380646][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 90.386148][ T9588] ? can_split_huge_page+0x480/0x480 [ 90.391468][ T9588] ? pmd_val+0x7c/0xf0 [ 90.395598][ T9588] ? enabled_store+0x190/0x190 [ 90.400387][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 90.405725][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 90.411199][ T9588] ? mark_lock+0xbc/0x1220 [ 90.415660][ T9588] ? mark_held_locks+0x9f/0xe0 [ 90.420438][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 90.427130][ T9588] __walk_page_range+0xcfb/0x2070 [ 90.432482][ T9588] ? walk_page_test+0x78/0x180 [ 90.437528][ T9588] walk_page_range+0x1bd/0x3a0 [ 90.443284][ T9588] ? __walk_page_range+0x2070/0x2070 [ 90.448696][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 90.454453][ T9588] madvise_free_single_vma+0x384/0x550 [ 90.460036][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 90.464990][ T9588] ? lock_acquire+0x197/0x420 [ 90.469681][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 90.475014][ T9588] ? vmacache_find+0x62/0x300 [ 90.479729][ T9588] ? vmacache_update+0xce/0x140 [ 90.484602][ T9588] ? find_vma+0x2b/0x170 [ 90.488940][ T9588] do_madvise+0x5ba/0x1b80 [ 90.493388][ T9588] ? unuse_pde+0x2c/0x80 [ 90.497691][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 90.503440][ T9588] ? wait_for_completion+0x3c0/0x3c0 [ 90.508778][ T9588] ? fput_many+0x2f/0x1a0 [ 90.513114][ T9588] ? ksys_read+0x19f/0x250 [ 90.517533][ T9588] ? kernel_write+0x120/0x120 [ 90.522242][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 90.527267][ T9588] __x64_sys_madvise+0xae/0x120 [ 90.532228][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 90.537525][ T9588] do_syscall_64+0xf6/0x7d0 [ 90.542136][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.549140][ T9588] RIP: 0033:0x460bf7 [ 90.553322][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 90.573413][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 90.581870][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 90.589848][ T9588] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001d2000 [ 90.597838][ T9588] RBP: 000000c000053c90 R08: 000000c000000000 R09: 000000c0001d4000 [ 90.605824][ T9588] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 90.613806][ T9588] R13: 00007f418d1dd008 R14: 0000000000000008 R15: 000000000000000b [ 90.621946][ T9588] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9588 [ 90.631013][ T9588] caller is __mod_memcg_state+0x87/0x1a0 [ 90.636651][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 90.646108][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.656222][ T9588] Call Trace: [ 90.659557][ T9588] dump_stack+0x188/0x20d [ 90.663901][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 90.669737][ T9588] __mod_memcg_state+0x87/0x1a0 [ 90.674630][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 90.680304][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 90.685787][ T9588] ? can_split_huge_page+0x480/0x480 [ 90.691164][ T9588] ? pmd_val+0x7c/0xf0 [ 90.695245][ T9588] ? enabled_store+0x190/0x190 [ 90.700046][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 90.705357][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 90.710823][ T9588] ? mark_lock+0xbc/0x1220 [ 90.715342][ T9588] ? mark_held_locks+0x9f/0xe0 [ 90.720107][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 90.726941][ T9588] __walk_page_range+0xcfb/0x2070 [ 90.732011][ T9588] ? walk_page_test+0x78/0x180 [ 90.736914][ T9588] walk_page_range+0x1bd/0x3a0 [ 90.741700][ T9588] ? __walk_page_range+0x2070/0x2070 [ 90.747136][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 90.752809][ T9588] madvise_free_single_vma+0x384/0x550 [ 90.758311][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 90.763308][ T9588] ? lock_acquire+0x197/0x420 [ 90.768010][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 90.773285][ T9588] ? vmacache_find+0x62/0x300 [ 90.777979][ T9588] ? vmacache_update+0xce/0x140 [ 90.782834][ T9588] ? find_vma+0x2b/0x170 [ 90.787120][ T9588] do_madvise+0x5ba/0x1b80 [ 90.791693][ T9588] ? unuse_pde+0x2c/0x80 [ 90.795993][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 90.801820][ T9588] ? wait_for_completion+0x3c0/0x3c0 [ 90.807295][ T9588] ? fput_many+0x2f/0x1a0 [ 90.811643][ T9588] ? ksys_read+0x19f/0x250 [ 90.816063][ T9588] ? kernel_write+0x120/0x120 [ 90.820755][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 90.825783][ T9588] __x64_sys_madvise+0xae/0x120 [ 90.830635][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 90.835943][ T9588] do_syscall_64+0xf6/0x7d0 [ 90.840557][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.846451][ T9588] RIP: 0033:0x460bf7 [ 90.850345][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 90.869945][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 90.878360][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 90.886332][ T9588] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c0001d2000 [ 90.894312][ T9588] RBP: 000000c000053c90 R08: 000000c000000000 R09: 000000c0001d4000 [ 90.902294][ T9588] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 90.910308][ T9588] R13: 00007f418d1dd008 R14: 0000000000000008 R15: 000000000000000b [ 90.931678][ T23] [ 90.935071][ T23] ============================= [ 90.940157][ T23] WARNING: suspicious RCU usage [ 90.946416][ T23] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 90.953798][ T23] ----------------------------- [ 90.958737][ T23] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!! [ 90.968188][ T23] [ 90.968188][ T23] other info that might help us debug this: [ 90.968188][ T23] [ 90.979127][ T23] [ 90.979127][ T23] rcu_scheduler_active = 2, debug_locks = 1 [ 90.987786][ T23] 3 locks held by kworker/u4:2/23: [ 90.993597][ T23] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 91.004027][ T23] #1: ffffc90000e07dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 91.013872][ T23] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 91.023364][ T23] [ 91.023364][ T23] stack backtrace: [ 91.029389][ T23] CPU: 1 PID: 23 Comm: kworker/u4:2 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.038859][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.049825][ T23] Workqueue: netns cleanup_net [ 91.054603][ T23] Call Trace: [ 91.058026][ T23] dump_stack+0x188/0x20d [ 91.062387][ T23] ovs_ct_exit+0x3db/0x558 [ 91.066826][ T23] ovs_exit_net+0x1df/0xba0 [ 91.071499][ T23] ? ovs_dp_cmd_del+0x270/0x270 [ 91.076377][ T23] ? __mutex_unlock_slowpath+0xe2/0x660 [ 91.081955][ T23] ? ovs_dp_cmd_del+0x270/0x270 [ 91.086839][ T23] ops_exit_list.isra.0+0xa8/0x150 [ 91.092007][ T23] cleanup_net+0x511/0xa50 [ 91.096456][ T23] ? unregister_pernet_device+0x70/0x70 [ 91.102016][ T23] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 91.108016][ T23] process_one_work+0x94b/0x1690 [ 91.112978][ T23] ? pwq_dec_nr_in_flight+0x310/0x310 [ 91.118877][ T23] ? do_raw_spin_lock+0x129/0x2e0 [ 91.124427][ T23] worker_thread+0x96/0xe20 [ 91.128958][ T23] ? process_one_work+0x1690/0x1690 [ 91.134527][ T23] kthread+0x357/0x430 [ 91.138817][ T23] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 91.144656][ T23] ret_from_fork+0x24/0x30 [ 91.188601][ T9588] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9588 [ 91.197888][ T9588] caller is __mod_memcg_state+0x27/0x1a0 [ 91.203593][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.213050][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.223373][ T9588] Call Trace: [ 91.226674][ T9588] dump_stack+0x188/0x20d [ 91.231098][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.237957][ T9588] __mod_memcg_state+0x27/0x1a0 [ 91.243067][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 91.249324][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.255228][ T9588] ? can_split_huge_page+0x480/0x480 [ 91.261249][ T9588] ? pmd_val+0x7c/0xf0 [ 91.265321][ T9588] ? enabled_store+0x190/0x190 [ 91.270229][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 91.276126][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 91.281800][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.288695][ T9588] __walk_page_range+0xcfb/0x2070 [ 91.293851][ T9588] ? walk_page_test+0x78/0x180 [ 91.298621][ T9588] walk_page_range+0x1bd/0x3a0 [ 91.303395][ T9588] ? __walk_page_range+0x2070/0x2070 [ 91.309179][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 91.315320][ T9588] madvise_free_single_vma+0x384/0x550 [ 91.321216][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 91.326162][ T9588] ? lock_acquire+0x197/0x420 [ 91.330931][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 91.336393][ T9588] ? vmacache_find+0x62/0x300 [ 91.341163][ T9588] ? find_vma+0x2b/0x170 [ 91.345502][ T9588] do_madvise+0x5ba/0x1b80 [ 91.350046][ T9588] ? unuse_pde+0x2c/0x80 [ 91.354727][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 91.360818][ T9588] ? __x64_sys_futex+0x376/0x4f0 [ 91.365859][ T9588] ? fput_many+0x2f/0x1a0 [ 91.370546][ T9588] ? do_futex+0x1b90/0x1b90 [ 91.375177][ T9588] ? ksys_read+0x19f/0x250 [ 91.379585][ T9588] ? kernel_write+0x120/0x120 [ 91.384603][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 91.389704][ T9588] __x64_sys_madvise+0xae/0x120 [ 91.394787][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 91.400089][ T9588] do_syscall_64+0xf6/0x7d0 [ 91.404814][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.410718][ T9588] RIP: 0033:0x460bf7 [ 91.414614][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 91.434574][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 91.442988][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 91.452826][ T9588] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003ec000 [ 91.460993][ T9588] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c00046c000 [ 91.470200][ T9588] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 91.478429][ T9588] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 [ 91.487679][ T9588] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9588 [ 91.496995][ T9588] caller is __mod_memcg_state+0xca/0x1a0 [ 91.502907][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.512374][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.522590][ T9588] Call Trace: [ 91.525877][ T9588] dump_stack+0x188/0x20d [ 91.530470][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.536404][ T9588] __mod_memcg_state+0xca/0x1a0 [ 91.541376][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 91.547121][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.555029][ T9588] ? can_split_huge_page+0x480/0x480 [ 91.561776][ T9588] ? pmd_val+0x7c/0xf0 [ 91.565855][ T9588] ? enabled_store+0x190/0x190 [ 91.570712][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 91.576012][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 91.581478][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.588144][ T9588] __walk_page_range+0xcfb/0x2070 [ 91.593191][ T9588] ? walk_page_test+0x78/0x180 [ 91.597941][ T9588] walk_page_range+0x1bd/0x3a0 [ 91.602708][ T9588] ? __walk_page_range+0x2070/0x2070 [ 91.607982][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 91.613621][ T9588] madvise_free_single_vma+0x384/0x550 [ 91.619071][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 91.624168][ T9588] ? lock_acquire+0x197/0x420 [ 91.628998][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 91.634395][ T9588] ? vmacache_find+0x62/0x300 [ 91.639148][ T9588] ? find_vma+0x2b/0x170 [ 91.643777][ T9588] do_madvise+0x5ba/0x1b80 [ 91.648288][ T9588] ? unuse_pde+0x2c/0x80 [ 91.652660][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 91.658506][ T9588] ? __x64_sys_futex+0x376/0x4f0 [ 91.663534][ T9588] ? fput_many+0x2f/0x1a0 [ 91.667973][ T9588] ? do_futex+0x1b90/0x1b90 [ 91.672477][ T9588] ? ksys_read+0x19f/0x250 [ 91.676914][ T9588] ? kernel_write+0x120/0x120 [ 91.682082][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 91.687221][ T9588] __x64_sys_madvise+0xae/0x120 [ 91.692315][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 91.697733][ T9588] do_syscall_64+0xf6/0x7d0 [ 91.702245][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.708139][ T9588] RIP: 0033:0x460bf7 [ 91.712056][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 91.731780][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 91.740338][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 91.748446][ T9588] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003ec000 [ 91.756640][ T9588] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c00046c000 [ 91.764787][ T9588] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 91.772981][ T9588] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 [ 91.781693][ T9588] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9588 [ 91.790767][ T9588] caller is __mod_memcg_state+0x87/0x1a0 [ 91.796452][ T9588] CPU: 0 PID: 9588 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 91.805905][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.816015][ T9588] Call Trace: [ 91.819311][ T9588] dump_stack+0x188/0x20d [ 91.823648][ T9588] __this_cpu_preempt_check.cold+0x84/0x90 [ 91.829482][ T9588] __mod_memcg_state+0x87/0x1a0 [ 91.834509][ T9588] split_huge_page_to_list+0x124b/0x3380 [ 91.840164][ T9588] ? madvise_free_huge_pmd+0x869/0xb90 [ 91.845621][ T9588] ? can_split_huge_page+0x480/0x480 [ 91.851429][ T9588] ? pmd_val+0x7c/0xf0 [ 91.855493][ T9588] ? enabled_store+0x190/0x190 [ 91.860296][ T9588] madvise_free_huge_pmd+0x873/0xb90 [ 91.865636][ T9588] madvise_free_pte_range+0x6ff/0x2650 [ 91.871368][ T9588] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 91.878221][ T9588] __walk_page_range+0xcfb/0x2070 [ 91.883265][ T9588] ? walk_page_test+0x78/0x180 [ 91.888730][ T9588] walk_page_range+0x1bd/0x3a0 [ 91.893499][ T9588] ? __walk_page_range+0x2070/0x2070 [ 91.898804][ T9588] ? madvise_free_single_vma+0x2c1/0x550 [ 91.904442][ T9588] madvise_free_single_vma+0x384/0x550 [ 91.909906][ T9588] ? madvise_pageout+0x3b0/0x3b0 [ 91.914850][ T9588] ? lock_acquire+0x197/0x420 [ 91.919577][ T9588] ? userfaultfd_remove+0xf0/0x2b0 [ 91.924959][ T9588] ? vmacache_find+0x62/0x300 [ 91.929821][ T9588] ? find_vma+0x2b/0x170 [ 91.934160][ T9588] do_madvise+0x5ba/0x1b80 [ 91.938669][ T9588] ? unuse_pde+0x2c/0x80 [ 91.942989][ T9588] ? madvise_free_pte_range+0x2650/0x2650 [ 91.949460][ T9588] ? __x64_sys_futex+0x376/0x4f0 [ 91.954777][ T9588] ? fput_many+0x2f/0x1a0 [ 91.960016][ T9588] ? do_futex+0x1b90/0x1b90 [ 91.964522][ T9588] ? ksys_read+0x19f/0x250 [ 91.973253][ T9588] ? kernel_write+0x120/0x120 [ 91.978376][ T9588] ? __x64_sys_madvise+0xae/0x120 [ 91.983409][ T9588] __x64_sys_madvise+0xae/0x120 [ 91.988252][ T9588] ? lockdep_hardirqs_on+0x417/0x5d0 [ 91.993795][ T9588] do_syscall_64+0xf6/0x7d0 [ 91.998309][ T9588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.004317][ T9588] RIP: 0033:0x460bf7 [ 92.008202][ T9588] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 92.031971][ T9588] RSP: 002b:000000c000053c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 92.040997][ T9588] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 92.051036][ T9588] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003ec000 [ 92.059025][ T9588] RBP: 000000c000053c90 R08: 000000c000200000 R09: 000000c00046c000 [ 92.068083][ T9588] R10: 00000000001ffe00 R11: 0000000000000246 R12: 0000000000000002 [ 92.076090][ T9588] R13: 0000000000e8da20 R14: 000000000045ecf0 R15: 0000000000000000 [ 92.180739][ T23] tipc: TX() has been purged, node left! [ 92.222812][ T23] [ 92.225281][ T23] ============================= [ 92.230159][ T23] WARNING: suspicious RCU usage [ 92.235994][ T23] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 92.243295][ T23] ----------------------------- [ 92.248263][ T23] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!! [ 92.257802][ T23] [ 92.257802][ T23] other info that might help us debug this: [ 92.257802][ T23] [ 92.268989][ T23] [ 92.268989][ T23] rcu_scheduler_active = 2, debug_locks = 1 [ 92.278647][ T23] 4 locks held by kworker/u4:2/23: [ 92.284318][ T23] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 92.294875][ T23] #1: ffffc90000e07dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 92.304908][ T23] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 92.314667][ T23] #3: ffffffff8a552d00 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700 [ 92.325254][ T23] [ 92.325254][ T23] stack backtrace: [ 92.332392][ T23] CPU: 1 PID: 23 Comm: kworker/u4:2 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.343169][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.353956][ T23] Workqueue: netns cleanup_net [ 92.358809][ T23] Call Trace: [ 92.362118][ T23] dump_stack+0x188/0x20d [ 92.366454][ T23] ipmr_device_event+0x240/0x2b0 [ 92.371528][ T23] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 92.377626][ T23] notifier_call_chain+0xc0/0x230 [ 92.382681][ T23] call_netdevice_notifiers_info+0xb5/0x130 [ 92.388615][ T23] rollback_registered_many+0x75c/0xe70 [ 92.394429][ T23] ? netif_set_real_num_tx_queues+0x700/0x700 [ 92.400835][ T23] ? lock_downgrade+0x7f0/0x7f0 [ 92.405724][ T23] unregister_netdevice_many.part.0+0x16/0x1e0 [ 92.411905][ T23] unregister_netdevice_many+0x36/0x50 [ 92.417390][ T23] ip6gre_exit_batch_net+0x4e8/0x700 [ 92.422809][ T23] ? ip6gre_tunnel_link+0xf0/0xf0 [ 92.427850][ T23] ? rcu_read_lock_held_common+0x130/0x130 [ 92.433722][ T23] ? ip6gre_tunnel_link+0xf0/0xf0 [ 92.438888][ T23] ops_exit_list.isra.0+0x103/0x150 [ 92.444144][ T23] cleanup_net+0x511/0xa50 [ 92.448838][ T23] ? unregister_pernet_device+0x70/0x70 [ 92.454779][ T23] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 92.460956][ T23] process_one_work+0x94b/0x1690 [ 92.465921][ T23] ? pwq_dec_nr_in_flight+0x310/0x310 [ 92.471404][ T23] ? do_raw_spin_lock+0x129/0x2e0 [ 92.476774][ T23] worker_thread+0x96/0xe20 [ 92.481687][ T23] ? process_one_work+0x1690/0x1690 [ 92.486902][ T23] kthread+0x357/0x430 [ 92.491093][ T23] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 92.496823][ T23] ret_from_fork+0x24/0x30 executing program [ 92.799357][ T9591] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9591 [ 92.808558][ T9591] caller is __mod_memcg_state+0x27/0x1a0 [ 92.814661][ T9591] CPU: 0 PID: 9591 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.824439][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.834679][ T9591] Call Trace: [ 92.837972][ T9591] dump_stack+0x188/0x20d [ 92.842405][ T9591] __this_cpu_preempt_check.cold+0x84/0x90 [ 92.848240][ T9591] __mod_memcg_state+0x27/0x1a0 [ 92.853109][ T9591] split_huge_page_to_list+0x124b/0x3380 [ 92.858858][ T9591] ? madvise_free_huge_pmd+0x869/0xb90 [ 92.864571][ T9591] ? can_split_huge_page+0x480/0x480 [ 92.869856][ T9591] ? pmd_val+0x7c/0xf0 [ 92.874041][ T9591] ? enabled_store+0x190/0x190 [ 92.878887][ T9591] madvise_free_huge_pmd+0x873/0xb90 [ 92.884406][ T9591] madvise_free_pte_range+0x6ff/0x2650 [ 92.890138][ T9591] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 92.896822][ T9591] __walk_page_range+0xcfb/0x2070 [ 92.902050][ T9591] ? walk_page_test+0x78/0x180 [ 92.909305][ T9591] walk_page_range+0x1bd/0x3a0 [ 92.914410][ T9591] ? __walk_page_range+0x2070/0x2070 [ 92.919727][ T9591] ? madvise_free_single_vma+0x2c1/0x550 [ 92.925676][ T9591] madvise_free_single_vma+0x384/0x550 [ 92.931486][ T9591] ? madvise_pageout+0x3b0/0x3b0 [ 92.937142][ T9591] ? lock_acquire+0x197/0x420 [ 92.941830][ T9591] ? userfaultfd_remove+0xf0/0x2b0 [ 92.947073][ T9591] ? vmacache_find+0x62/0x300 [ 92.952173][ T9591] ? vmacache_update+0xce/0x140 [ 92.957323][ T9591] ? find_vma+0x2b/0x170 [ 92.961965][ T9591] do_madvise+0x5ba/0x1b80 [ 92.966409][ T9591] ? unuse_pde+0x2c/0x80 [ 92.970689][ T9591] ? madvise_free_pte_range+0x2650/0x2650 [ 92.976587][ T9591] ? __x64_sys_futex+0x376/0x4f0 [ 92.982167][ T9591] ? fput_many+0x2f/0x1a0 [ 92.986953][ T9591] ? do_futex+0x1b90/0x1b90 [ 92.991576][ T9591] ? ksys_read+0x19f/0x250 [ 92.996165][ T9591] ? kernel_write+0x120/0x120 [ 93.000861][ T9591] ? __x64_sys_madvise+0xae/0x120 [ 93.005924][ T9591] __x64_sys_madvise+0xae/0x120 [ 93.011023][ T9591] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.016358][ T9591] do_syscall_64+0xf6/0x7d0 [ 93.021045][ T9591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.027244][ T9591] RIP: 0033:0x460bf7 [ 93.031301][ T9591] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.053780][ T9591] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.062372][ T9591] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.070687][ T9591] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00056c000 [ 93.078864][ T9591] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00076c000 [ 93.087064][ T9591] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 93.095181][ T9591] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 93.103566][ T9591] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9591 [ 93.112836][ T9591] caller is __mod_memcg_state+0xca/0x1a0 [ 93.118749][ T9591] CPU: 0 PID: 9591 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.128650][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.139303][ T9591] Call Trace: [ 93.143081][ T9591] dump_stack+0x188/0x20d [ 93.147577][ T9591] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.153657][ T9591] __mod_memcg_state+0xca/0x1a0 [ 93.158512][ T9591] split_huge_page_to_list+0x124b/0x3380 [ 93.164254][ T9591] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.170014][ T9591] ? can_split_huge_page+0x480/0x480 [ 93.175654][ T9591] ? pmd_val+0x7c/0xf0 [ 93.180192][ T9591] ? enabled_store+0x190/0x190 [ 93.185451][ T9591] madvise_free_huge_pmd+0x873/0xb90 [ 93.190939][ T9591] madvise_free_pte_range+0x6ff/0x2650 [ 93.196527][ T9591] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.203836][ T9591] __walk_page_range+0xcfb/0x2070 [ 93.209240][ T9591] ? walk_page_test+0x78/0x180 [ 93.214211][ T9591] walk_page_range+0x1bd/0x3a0 [ 93.219025][ T9591] ? __walk_page_range+0x2070/0x2070 [ 93.224509][ T9591] ? madvise_free_single_vma+0x2c1/0x550 [ 93.230544][ T9591] madvise_free_single_vma+0x384/0x550 [ 93.236547][ T9591] ? madvise_pageout+0x3b0/0x3b0 [ 93.241845][ T9591] ? lock_acquire+0x197/0x420 [ 93.247296][ T9591] ? userfaultfd_remove+0xf0/0x2b0 [ 93.254027][ T9591] ? vmacache_find+0x62/0x300 [ 93.258837][ T9591] ? vmacache_update+0xce/0x140 [ 93.263977][ T9591] ? find_vma+0x2b/0x170 [ 93.268230][ T9591] do_madvise+0x5ba/0x1b80 [ 93.272784][ T9591] ? unuse_pde+0x2c/0x80 [ 93.277062][ T9591] ? madvise_free_pte_range+0x2650/0x2650 [ 93.282789][ T9591] ? __x64_sys_futex+0x376/0x4f0 [ 93.287729][ T9591] ? fput_many+0x2f/0x1a0 [ 93.292162][ T9591] ? do_futex+0x1b90/0x1b90 [ 93.296783][ T9591] ? ksys_read+0x19f/0x250 [ 93.301208][ T9591] ? kernel_write+0x120/0x120 [ 93.306021][ T9591] ? __x64_sys_madvise+0xae/0x120 [ 93.311054][ T9591] __x64_sys_madvise+0xae/0x120 [ 93.315920][ T9591] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.321637][ T9591] do_syscall_64+0xf6/0x7d0 [ 93.326144][ T9591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.333340][ T9591] RIP: 0033:0x460bf7 [ 93.337295][ T9591] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.358266][ T9591] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.368475][ T9591] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.376534][ T9591] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00056c000 [ 93.384741][ T9591] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00076c000 [ 93.392805][ T9591] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 93.400897][ T9591] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 93.409456][ T9591] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9591 [ 93.418563][ T9591] caller is __mod_memcg_state+0x87/0x1a0 [ 93.424320][ T9591] CPU: 0 PID: 9591 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 93.434275][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.445126][ T9591] Call Trace: [ 93.448776][ T9591] dump_stack+0x188/0x20d [ 93.453201][ T9591] __this_cpu_preempt_check.cold+0x84/0x90 [ 93.459018][ T9591] __mod_memcg_state+0x87/0x1a0 [ 93.464019][ T9591] split_huge_page_to_list+0x124b/0x3380 [ 93.470190][ T9591] ? madvise_free_huge_pmd+0x869/0xb90 [ 93.475778][ T9591] ? can_split_huge_page+0x480/0x480 [ 93.481186][ T9591] ? pmd_val+0x7c/0xf0 [ 93.485270][ T9591] ? enabled_store+0x190/0x190 [ 93.490137][ T9591] madvise_free_huge_pmd+0x873/0xb90 [ 93.495417][ T9591] madvise_free_pte_range+0x6ff/0x2650 [ 93.500880][ T9591] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 93.507643][ T9591] __walk_page_range+0xcfb/0x2070 [ 93.513013][ T9591] ? walk_page_test+0x78/0x180 [ 93.517817][ T9591] walk_page_range+0x1bd/0x3a0 [ 93.522786][ T9591] ? __walk_page_range+0x2070/0x2070 [ 93.528071][ T9591] ? madvise_free_single_vma+0x2c1/0x550 [ 93.533737][ T9591] madvise_free_single_vma+0x384/0x550 [ 93.539567][ T9591] ? madvise_pageout+0x3b0/0x3b0 [ 93.544681][ T9591] ? lock_acquire+0x197/0x420 [ 93.549544][ T9591] ? userfaultfd_remove+0xf0/0x2b0 [ 93.554847][ T9591] ? vmacache_find+0x62/0x300 [ 93.559597][ T9591] ? vmacache_update+0xce/0x140 [ 93.564483][ T9591] ? find_vma+0x2b/0x170 [ 93.568731][ T9591] do_madvise+0x5ba/0x1b80 [ 93.573154][ T9591] ? unuse_pde+0x2c/0x80 [ 93.577517][ T9591] ? madvise_free_pte_range+0x2650/0x2650 [ 93.583279][ T9591] ? __x64_sys_futex+0x376/0x4f0 [ 93.588574][ T9591] ? fput_many+0x2f/0x1a0 [ 93.592925][ T9591] ? do_futex+0x1b90/0x1b90 [ 93.597412][ T9591] ? ksys_read+0x19f/0x250 [ 93.601814][ T9591] ? kernel_write+0x120/0x120 [ 93.606647][ T9591] ? __x64_sys_madvise+0xae/0x120 [ 93.611685][ T9591] __x64_sys_madvise+0xae/0x120 [ 93.616530][ T9591] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.621802][ T9591] do_syscall_64+0xf6/0x7d0 [ 93.626292][ T9591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.632956][ T9591] RIP: 0033:0x460bf7 [ 93.636865][ T9591] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.657523][ T9591] RSP: 002b:000000c0000cdc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.666368][ T9591] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.674381][ T9591] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c00056c000 [ 93.682577][ T9591] RBP: 000000c0000cdc90 R08: 000000c000400000 R09: 000000c00076c000 [ 93.690539][ T9591] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 93.698511][ T9591] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 94.243473][ T9588] can: request_module (can-proto-0) failed. executing program [ 96.510394][ T9588] can: request_module (can-proto-0) failed. [ 96.524287][ T9588] can: request_module (can-proto-0) failed.