[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.826415][ T27] audit: type=1800 audit(1583586850.950:25): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.862177][ T27] audit: type=1800 audit(1583586850.950:26): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.899022][ T27] audit: type=1800 audit(1583586850.950:27): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. 2020/03/07 13:14:22 fuzzer started syzkaller login: [ 92.227104][ T9432] check_preemption_disabled: 3 callbacks suppressed [ 92.227124][ T9432] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9432 [ 92.243257][ T9432] caller is __mod_memcg_state+0x27/0x1a0 [ 92.251009][ T9432] CPU: 1 PID: 9432 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.260461][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.270515][ T9432] Call Trace: [ 92.273816][ T9432] dump_stack+0x188/0x20d [ 92.278166][ T9432] __this_cpu_preempt_check.cold+0x84/0x90 [ 92.283977][ T9432] __mod_memcg_state+0x27/0x1a0 [ 92.288839][ T9432] split_huge_page_to_list+0x124b/0x3380 [ 92.294499][ T9432] ? madvise_free_huge_pmd+0x869/0xb90 [ 92.299965][ T9432] ? can_split_huge_page+0x480/0x480 [ 92.305261][ T9432] ? pmd_val+0x7c/0xf0 [ 92.309397][ T9432] ? enabled_store+0x190/0x190 [ 92.314199][ T9432] madvise_free_huge_pmd+0x873/0xb90 [ 92.319512][ T9432] madvise_free_pte_range+0x6ff/0x2650 [ 92.324984][ T9432] ? mark_lock+0xbc/0x1220 [ 92.329436][ T9432] ? mark_held_locks+0x9f/0xe0 [ 92.334202][ T9432] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 92.340887][ T9432] __walk_page_range+0xcfb/0x2070 [ 92.345951][ T9432] ? walk_page_test+0x78/0x180 [ 92.350723][ T9432] walk_page_range+0x1bd/0x3a0 [ 92.355496][ T9432] ? __walk_page_range+0x2070/0x2070 [ 92.360794][ T9432] ? madvise_free_single_vma+0x2c1/0x550 [ 92.366446][ T9432] madvise_free_single_vma+0x384/0x550 [ 92.371913][ T9432] ? madvise_pageout+0x3b0/0x3b0 [ 92.376858][ T9432] ? lock_acquire+0x197/0x420 [ 92.381548][ T9432] ? userfaultfd_remove+0xf0/0x2b0 [ 92.386673][ T9432] ? vmacache_find+0x62/0x300 [ 92.391358][ T9432] ? find_vma+0x2b/0x170 [ 92.395625][ T9432] do_madvise+0x5ba/0x1b80 [ 92.400049][ T9432] ? lock_downgrade+0x7f0/0x7f0 [ 92.404924][ T9432] ? madvise_free_pte_range+0x2650/0x2650 [ 92.410643][ T9432] ? ktime_get+0x1f8/0x2f0 [ 92.415067][ T9432] ? __x64_sys_futex+0x376/0x4f0 [ 92.420034][ T9432] ? switch_fpu_return+0x1db/0x4b0 [ 92.425300][ T9432] ? fpregs_mark_activate+0x320/0x320 [ 92.430703][ T9432] ? __x64_sys_madvise+0xae/0x120 [ 92.435740][ T9432] __x64_sys_madvise+0xae/0x120 [ 92.440613][ T9432] ? lockdep_hardirqs_on+0x417/0x5d0 [ 92.445997][ T9432] do_syscall_64+0xf6/0x7d0 [ 92.450652][ T9432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.456555][ T9432] RIP: 0033:0x460bf7 [ 92.460542][ T9432] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 92.480146][ T9432] RSP: 002b:00007ffd6e086670 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 92.488656][ T9432] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 92.496630][ T9432] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 92.504635][ T9432] RBP: 00007ffd6e0866b0 R08: 000000c000200000 R09: 000000c0002a4000 [ 92.512605][ T9432] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000007 [ 92.520575][ T9432] R13: 00007f30cae546d0 R14: 0000000000000080 R15: 00000000000000fa [ 92.529445][ T9432] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9432 [ 92.538395][ T9432] caller is __mod_memcg_state+0xca/0x1a0 [ 92.544076][ T9432] CPU: 1 PID: 9432 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.553525][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.563577][ T9432] Call Trace: [ 92.566874][ T9432] dump_stack+0x188/0x20d [ 92.571224][ T9432] __this_cpu_preempt_check.cold+0x84/0x90 [ 92.577053][ T9432] __mod_memcg_state+0xca/0x1a0 [ 92.581938][ T9432] split_huge_page_to_list+0x124b/0x3380 [ 92.587600][ T9432] ? madvise_free_huge_pmd+0x869/0xb90 [ 92.593074][ T9432] ? can_split_huge_page+0x480/0x480 [ 92.598505][ T9432] ? pmd_val+0x7c/0xf0 [ 92.602594][ T9432] ? enabled_store+0x190/0x190 [ 92.607377][ T9432] madvise_free_huge_pmd+0x873/0xb90 [ 92.612683][ T9432] madvise_free_pte_range+0x6ff/0x2650 [ 92.618146][ T9432] ? mark_lock+0xbc/0x1220 [ 92.622583][ T9432] ? mark_held_locks+0x9f/0xe0 [ 92.627349][ T9432] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 92.634033][ T9432] __walk_page_range+0xcfb/0x2070 [ 92.639097][ T9432] ? walk_page_test+0x78/0x180 [ 92.643874][ T9432] walk_page_range+0x1bd/0x3a0 [ 92.648642][ T9432] ? __walk_page_range+0x2070/0x2070 [ 92.653940][ T9432] ? madvise_free_single_vma+0x2c1/0x550 [ 92.659585][ T9432] madvise_free_single_vma+0x384/0x550 [ 92.665057][ T9432] ? madvise_pageout+0x3b0/0x3b0 [ 92.670006][ T9432] ? lock_acquire+0x197/0x420 [ 92.674683][ T9432] ? userfaultfd_remove+0xf0/0x2b0 [ 92.679809][ T9432] ? vmacache_find+0x62/0x300 [ 92.684495][ T9432] ? find_vma+0x2b/0x170 [ 92.688750][ T9432] do_madvise+0x5ba/0x1b80 [ 92.693257][ T9432] ? lock_downgrade+0x7f0/0x7f0 [ 92.698230][ T9432] ? madvise_free_pte_range+0x2650/0x2650 [ 92.704101][ T9432] ? ktime_get+0x1f8/0x2f0 [ 92.708545][ T9432] ? __x64_sys_futex+0x376/0x4f0 [ 92.713515][ T9432] ? switch_fpu_return+0x1db/0x4b0 [ 92.718636][ T9432] ? fpregs_mark_activate+0x320/0x320 [ 92.724025][ T9432] ? __x64_sys_madvise+0xae/0x120 [ 92.729059][ T9432] __x64_sys_madvise+0xae/0x120 [ 92.733913][ T9432] ? lockdep_hardirqs_on+0x417/0x5d0 [ 92.739218][ T9432] do_syscall_64+0xf6/0x7d0 [ 92.743777][ T9432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.749687][ T9432] RIP: 0033:0x460bf7 [ 92.753795][ T9432] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 92.773658][ T9432] RSP: 002b:00007ffd6e086670 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 92.782091][ T9432] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 92.790083][ T9432] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 92.798064][ T9432] RBP: 00007ffd6e0866b0 R08: 000000c000200000 R09: 000000c0002a4000 [ 92.806052][ T9432] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000007 [ 92.814166][ T9432] R13: 00007f30cae546d0 R14: 0000000000000080 R15: 00000000000000fa [ 92.822248][ T9432] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9432 [ 92.831363][ T9432] caller is __mod_memcg_state+0x87/0x1a0 [ 92.837080][ T9432] CPU: 1 PID: 9432 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 92.846931][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.857082][ T9432] Call Trace: [ 92.860439][ T9432] dump_stack+0x188/0x20d [ 92.864834][ T9432] __this_cpu_preempt_check.cold+0x84/0x90 [ 92.870649][ T9432] __mod_memcg_state+0x87/0x1a0 [ 92.875682][ T9432] split_huge_page_to_list+0x124b/0x3380 [ 92.881346][ T9432] ? madvise_free_huge_pmd+0x869/0xb90 [ 92.886814][ T9432] ? can_split_huge_page+0x480/0x480 [ 92.892113][ T9432] ? pmd_val+0x7c/0xf0 [ 92.896191][ T9432] ? enabled_store+0x190/0x190 [ 92.900991][ T9432] madvise_free_huge_pmd+0x873/0xb90 [ 92.907004][ T9432] madvise_free_pte_range+0x6ff/0x2650 [ 92.912610][ T9432] ? mark_lock+0xbc/0x1220 [ 92.917042][ T9432] ? mark_held_locks+0x9f/0xe0 [ 92.921814][ T9432] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 92.928590][ T9432] __walk_page_range+0xcfb/0x2070 [ 92.933662][ T9432] ? walk_page_test+0x78/0x180 [ 92.938435][ T9432] walk_page_range+0x1bd/0x3a0 [ 92.943204][ T9432] ? __walk_page_range+0x2070/0x2070 [ 92.948506][ T9432] ? madvise_free_single_vma+0x2c1/0x550 [ 92.954152][ T9432] madvise_free_single_vma+0x384/0x550 [ 92.959617][ T9432] ? madvise_pageout+0x3b0/0x3b0 [ 92.964563][ T9432] ? lock_acquire+0x197/0x420 [ 92.969250][ T9432] ? userfaultfd_remove+0xf0/0x2b0 [ 92.974476][ T9432] ? vmacache_find+0x62/0x300 [ 92.979158][ T9432] ? find_vma+0x2b/0x170 [ 92.983414][ T9432] do_madvise+0x5ba/0x1b80 [ 92.987870][ T9432] ? lock_downgrade+0x7f0/0x7f0 [ 92.992749][ T9432] ? madvise_free_pte_range+0x2650/0x2650 [ 92.998469][ T9432] ? ktime_get+0x1f8/0x2f0 [ 93.002897][ T9432] ? __x64_sys_futex+0x376/0x4f0 [ 93.007851][ T9432] ? switch_fpu_return+0x1db/0x4b0 [ 93.012964][ T9432] ? fpregs_mark_activate+0x320/0x320 [ 93.018346][ T9432] ? __x64_sys_madvise+0xae/0x120 [ 93.023535][ T9432] __x64_sys_madvise+0xae/0x120 [ 93.028399][ T9432] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.033692][ T9432] do_syscall_64+0xf6/0x7d0 [ 93.038209][ T9432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.044099][ T9432] RIP: 0033:0x460bf7 [ 93.047994][ T9432] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 93.067599][ T9432] RSP: 002b:00007ffd6e086670 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 93.076007][ T9432] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 93.083978][ T9432] RDX: 0000000000000008 RSI: 000000000000a000 RDI: 000000c00029a000 [ 93.091946][ T9432] RBP: 00007ffd6e0866b0 R08: 000000c000200000 R09: 000000c0002a4000 [ 93.099912][ T9432] R10: 00007fffffffffff R11: 0000000000000246 R12: 0000000000000007 [ 93.107879][ T9432] R13: 00007f30cae546d0 R14: 0000000000000080 R15: 00000000000000fa 2020/03/07 13:14:24 connecting to host at 10.128.0.26:45269 2020/03/07 13:14:24 checking machine... 2020/03/07 13:14:24 checking revisions... 2020/03/07 13:14:24 testing simple program... [ 94.590183][ T9450] IPVS: ftp: loaded support on port[0] = 21 2020/03/07 13:14:24 building call list... [ 94.734213][ T9455] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9455 [ 94.743244][ T9455] caller is __mod_memcg_state+0x27/0x1a0 [ 94.748885][ T9455] CPU: 0 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 94.758351][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.768402][ T9455] Call Trace: [ 94.771701][ T9455] dump_stack+0x188/0x20d [ 94.776049][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 94.781884][ T9455] __mod_memcg_state+0x27/0x1a0 [ 94.786750][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 94.792408][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 94.797873][ T9455] ? can_split_huge_page+0x480/0x480 [ 94.803957][ T9455] ? pmd_val+0x7c/0xf0 [ 94.808032][ T9455] ? enabled_store+0x190/0x190 [ 94.812894][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 94.818299][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 94.823775][ T9455] ? mark_lock+0xbc/0x1220 [ 94.828735][ T9455] ? mark_held_locks+0x9f/0xe0 [ 94.833506][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 94.840188][ T9455] __walk_page_range+0xcfb/0x2070 [ 94.845257][ T9455] ? walk_page_test+0x78/0x180 [ 94.850028][ T9455] walk_page_range+0x1bd/0x3a0 [ 94.855045][ T9455] ? __walk_page_range+0x2070/0x2070 [ 94.860356][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 94.866024][ T9455] madvise_free_single_vma+0x384/0x550 [ 94.871501][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 94.876450][ T9455] ? lock_acquire+0x197/0x420 [ 94.881129][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 94.886260][ T9455] ? vmacache_find+0x62/0x300 [ 94.890937][ T9455] ? vmacache_update+0xce/0x140 [ 94.895793][ T9455] ? find_vma+0x2b/0x170 [ 94.900053][ T9455] do_madvise+0x5ba/0x1b80 [ 94.904477][ T9455] ? unuse_pde+0x2c/0x80 [ 94.908753][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 94.914508][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 94.919827][ T9455] ? fput_many+0x2f/0x1a0 [ 94.924156][ T9455] ? ksys_read+0x19f/0x250 [ 94.928594][ T9455] ? kernel_write+0x120/0x120 [ 94.933286][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 94.938307][ T9455] __x64_sys_madvise+0xae/0x120 [ 94.943165][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 94.948501][ T9455] do_syscall_64+0xf6/0x7d0 [ 94.953037][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.958950][ T9455] RIP: 0033:0x460bf7 [ 94.962874][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 94.982874][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.991305][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 95.000238][ T9455] RDX: 0000000000000008 RSI: 0000000000004000 RDI: 000000c0001b6000 [ 95.008214][ T9455] RBP: 000000c000347c90 R08: 000000c000000000 R09: 000000c0001ba000 [ 95.016280][ T9455] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 95.024254][ T9455] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 [ 95.032432][ T9455] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9455 [ 95.041287][ T9455] caller is __mod_memcg_state+0xca/0x1a0 [ 95.046954][ T9455] CPU: 0 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 95.056438][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.066526][ T9455] Call Trace: [ 95.069829][ T9455] dump_stack+0x188/0x20d [ 95.074175][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 95.079989][ T9455] __mod_memcg_state+0xca/0x1a0 [ 95.084850][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 95.090505][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 95.095971][ T9455] ? can_split_huge_page+0x480/0x480 [ 95.101254][ T9455] ? pmd_val+0x7c/0xf0 [ 95.105331][ T9455] ? enabled_store+0x190/0x190 [ 95.110108][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 95.115425][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 95.120909][ T9455] ? mark_lock+0xbc/0x1220 [ 95.125336][ T9455] ? mark_held_locks+0x9f/0xe0 [ 95.130101][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 95.136781][ T9455] __walk_page_range+0xcfb/0x2070 [ 95.141983][ T9455] ? walk_page_test+0x78/0x180 [ 95.146758][ T9455] walk_page_range+0x1bd/0x3a0 [ 95.151533][ T9455] ? __walk_page_range+0x2070/0x2070 [ 95.156834][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 95.162488][ T9455] madvise_free_single_vma+0x384/0x550 [ 95.167957][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 95.172902][ T9455] ? lock_acquire+0x197/0x420 [ 95.177580][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 95.182702][ T9455] ? vmacache_find+0x62/0x300 [ 95.187382][ T9455] ? vmacache_update+0xce/0x140 [ 95.192419][ T9455] ? find_vma+0x2b/0x170 [ 95.196674][ T9455] do_madvise+0x5ba/0x1b80 [ 95.201094][ T9455] ? unuse_pde+0x2c/0x80 [ 95.205361][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 95.211086][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 95.216384][ T9455] ? fput_many+0x2f/0x1a0 [ 95.220715][ T9455] ? ksys_read+0x19f/0x250 [ 95.225131][ T9455] ? kernel_write+0x120/0x120 [ 95.229827][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 95.234849][ T9455] __x64_sys_madvise+0xae/0x120 [ 95.239700][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 95.245076][ T9455] do_syscall_64+0xf6/0x7d0 [ 95.249585][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.255648][ T9455] RIP: 0033:0x460bf7 [ 95.259544][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 95.279146][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 95.287560][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 95.295527][ T9455] RDX: 0000000000000008 RSI: 0000000000004000 RDI: 000000c0001b6000 [ 95.303495][ T9455] RBP: 000000c000347c90 R08: 000000c000000000 R09: 000000c0001ba000 [ 95.311460][ T9455] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 95.319427][ T9455] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 [ 95.327724][ T9455] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9455 [ 95.336786][ T9455] caller is __mod_memcg_state+0x87/0x1a0 [ 95.342472][ T9455] CPU: 0 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 95.351916][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.361976][ T9455] Call Trace: [ 95.365278][ T9455] dump_stack+0x188/0x20d [ 95.369636][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 95.375584][ T9455] __mod_memcg_state+0x87/0x1a0 [ 95.380596][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 95.386269][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 95.391745][ T9455] ? can_split_huge_page+0x480/0x480 [ 95.397036][ T9455] ? pmd_val+0x7c/0xf0 [ 95.401124][ T9455] ? enabled_store+0x190/0x190 [ 95.405893][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 95.411184][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 95.416637][ T9455] ? mark_lock+0xbc/0x1220 [ 95.421052][ T9455] ? mark_held_locks+0x9f/0xe0 [ 95.425807][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 95.432473][ T9455] __walk_page_range+0xcfb/0x2070 [ 95.437506][ T9455] ? walk_page_test+0x78/0x180 [ 95.442285][ T9455] walk_page_range+0x1bd/0x3a0 [ 95.447054][ T9455] ? __walk_page_range+0x2070/0x2070 [ 95.452343][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 95.457993][ T9455] madvise_free_single_vma+0x384/0x550 [ 95.463447][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 95.468378][ T9455] ? lock_acquire+0x197/0x420 [ 95.473139][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 95.478251][ T9455] ? vmacache_find+0x62/0x300 [ 95.483004][ T9455] ? vmacache_update+0xce/0x140 [ 95.487845][ T9455] ? find_vma+0x2b/0x170 [ 95.492083][ T9455] do_madvise+0x5ba/0x1b80 [ 95.496502][ T9455] ? unuse_pde+0x2c/0x80 [ 95.500847][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 95.506597][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 95.511876][ T9455] ? fput_many+0x2f/0x1a0 [ 95.516191][ T9455] ? ksys_read+0x19f/0x250 [ 95.520604][ T9455] ? kernel_write+0x120/0x120 [ 95.525270][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 95.530292][ T9455] __x64_sys_madvise+0xae/0x120 [ 95.535128][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 95.540402][ T9455] do_syscall_64+0xf6/0x7d0 [ 95.544894][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.550768][ T9455] RIP: 0033:0x460bf7 [ 95.554648][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 95.574248][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 95.582641][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 95.590598][ T9455] RDX: 0000000000000008 RSI: 0000000000004000 RDI: 000000c0001b6000 [ 95.598814][ T9455] RBP: 000000c000347c90 R08: 000000c000000000 R09: 000000c0001ba000 [ 95.606768][ T9455] R10: 000000000003fe00 R11: 0000000000000246 R12: 000000000000001f [ 95.614738][ T9455] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 [ 95.653760][ T227] [ 95.656372][ T227] ============================= [ 95.672358][ T227] WARNING: suspicious RCU usage [ 95.679889][ T227] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 95.702225][ T227] ----------------------------- [ 95.707162][ T227] net/openvswitch/conntrack.c:1898 RCU-list traversed in non-reader section!! [ 95.716123][ T227] [ 95.716123][ T227] other info that might help us debug this: [ 95.716123][ T227] [ 95.726680][ T227] [ 95.726680][ T227] rcu_scheduler_active = 2, debug_locks = 1 [ 95.734846][ T227] 3 locks held by kworker/u4:5/227: [ 95.740296][ T227] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 95.753702][ T227] #1: ffffc90001527dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 95.763756][ T227] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 95.773150][ T227] [ 95.773150][ T227] stack backtrace: [ 95.779137][ T227] CPU: 1 PID: 227 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 95.788673][ T227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.798732][ T227] Workqueue: netns cleanup_net [ 95.803492][ T227] Call Trace: [ 95.806783][ T227] dump_stack+0x188/0x20d [ 95.811119][ T227] ovs_ct_exit+0x3db/0x558 [ 95.815544][ T227] ovs_exit_net+0x1df/0xba0 [ 95.820092][ T227] ? ovs_dp_cmd_del+0x270/0x270 [ 95.824961][ T227] ? __mutex_unlock_slowpath+0xe2/0x660 [ 95.830516][ T227] ? ovs_dp_cmd_del+0x270/0x270 [ 95.835369][ T227] ops_exit_list.isra.0+0xa8/0x150 [ 95.840497][ T227] cleanup_net+0x511/0xa50 [ 95.844918][ T227] ? unregister_pernet_device+0x70/0x70 [ 95.850481][ T227] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 95.856472][ T227] process_one_work+0x94b/0x1690 [ 95.861462][ T227] ? pwq_dec_nr_in_flight+0x310/0x310 [ 95.866832][ T227] ? do_raw_spin_lock+0x129/0x2e0 [ 95.871877][ T227] worker_thread+0x96/0xe20 [ 95.876396][ T227] ? process_one_work+0x1690/0x1690 [ 95.881598][ T227] kthread+0x357/0x430 [ 95.885665][ T227] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 95.891383][ T227] ret_from_fork+0x24/0x30 [ 95.898985][ T9441] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9441 [ 95.908166][ T9441] caller is __mod_memcg_state+0x27/0x1a0 [ 95.913866][ T9441] CPU: 0 PID: 9441 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 95.923319][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.933516][ T9441] Call Trace: [ 95.936806][ T9441] dump_stack+0x188/0x20d [ 95.941132][ T9441] __this_cpu_preempt_check.cold+0x84/0x90 [ 95.946941][ T9441] __mod_memcg_state+0x27/0x1a0 [ 95.951791][ T9441] split_huge_page_to_list+0x124b/0x3380 [ 95.957429][ T9441] ? madvise_free_huge_pmd+0x869/0xb90 [ 95.962895][ T9441] ? can_split_huge_page+0x480/0x480 [ 95.968177][ T9441] ? pmd_val+0x7c/0xf0 [ 95.972251][ T9441] ? enabled_store+0x190/0x190 [ 95.977011][ T9441] madvise_free_huge_pmd+0x873/0xb90 [ 95.982291][ T9441] madvise_free_pte_range+0x6ff/0x2650 [ 95.987752][ T9441] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 95.994417][ T9441] __walk_page_range+0xcfb/0x2070 [ 95.999438][ T9441] ? walk_page_test+0x78/0x180 [ 96.004188][ T9441] walk_page_range+0x1bd/0x3a0 [ 96.008949][ T9441] ? __walk_page_range+0x2070/0x2070 [ 96.014288][ T9441] ? madvise_free_single_vma+0x2c1/0x550 [ 96.019920][ T9441] madvise_free_single_vma+0x384/0x550 [ 96.025399][ T9441] ? madvise_pageout+0x3b0/0x3b0 [ 96.030357][ T9441] ? lock_acquire+0x197/0x420 [ 96.035305][ T9441] ? userfaultfd_remove+0xf0/0x2b0 [ 96.040548][ T9441] ? vmacache_find+0x62/0x300 [ 96.045231][ T9441] ? find_vma+0x2b/0x170 [ 96.049534][ T9441] do_madvise+0x5ba/0x1b80 [ 96.053941][ T9441] ? unuse_pde+0x2c/0x80 [ 96.058378][ T9441] ? madvise_free_pte_range+0x2650/0x2650 [ 96.064537][ T9441] ? wait_for_completion+0x3c0/0x3c0 [ 96.069825][ T9441] ? fput_many+0x2f/0x1a0 [ 96.074148][ T9441] ? ksys_read+0x19f/0x250 [ 96.078543][ T9441] ? kernel_write+0x120/0x120 [ 96.083221][ T9441] ? __x64_sys_madvise+0xae/0x120 [ 96.088227][ T9441] __x64_sys_madvise+0xae/0x120 [ 96.093063][ T9441] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.098328][ T9441] do_syscall_64+0xf6/0x7d0 [ 96.102839][ T9441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.108712][ T9441] RIP: 0033:0x460bf7 [ 96.112600][ T9441] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 96.132305][ T9441] RSP: 002b:000000c00034bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 96.140799][ T9441] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 96.148870][ T9441] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003c8000 [ 96.156842][ T9441] RBP: 000000c00034bc90 R08: 000000c000200000 R09: 000000c000448000 [ 96.164820][ T9441] R10: 00000000001ffe00 R11: 0000000000000246 R12: 00000000000000ff [ 96.172774][ T9441] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 96.180837][ T9441] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9441 [ 96.189724][ T9441] caller is __mod_memcg_state+0xca/0x1a0 [ 96.195410][ T9441] CPU: 0 PID: 9441 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 96.204854][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.215037][ T9441] Call Trace: [ 96.218319][ T9441] dump_stack+0x188/0x20d [ 96.222641][ T9441] __this_cpu_preempt_check.cold+0x84/0x90 [ 96.228450][ T9441] __mod_memcg_state+0xca/0x1a0 [ 96.233290][ T9441] split_huge_page_to_list+0x124b/0x3380 [ 96.238936][ T9441] ? madvise_free_huge_pmd+0x869/0xb90 [ 96.244384][ T9441] ? can_split_huge_page+0x480/0x480 [ 96.251385][ T9441] ? pmd_val+0x7c/0xf0 [ 96.255440][ T9441] ? enabled_store+0x190/0x190 [ 96.260363][ T9441] madvise_free_huge_pmd+0x873/0xb90 [ 96.265730][ T9441] madvise_free_pte_range+0x6ff/0x2650 [ 96.271195][ T9441] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 96.277876][ T9441] __walk_page_range+0xcfb/0x2070 [ 96.282905][ T9441] ? walk_page_test+0x78/0x180 [ 96.287655][ T9441] walk_page_range+0x1bd/0x3a0 [ 96.292418][ T9441] ? __walk_page_range+0x2070/0x2070 [ 96.297872][ T9441] ? madvise_free_single_vma+0x2c1/0x550 [ 96.303564][ T9441] madvise_free_single_vma+0x384/0x550 [ 96.309033][ T9441] ? madvise_pageout+0x3b0/0x3b0 [ 96.313967][ T9441] ? lock_acquire+0x197/0x420 [ 96.318643][ T9441] ? userfaultfd_remove+0xf0/0x2b0 [ 96.323772][ T9441] ? vmacache_find+0x62/0x300 [ 96.328457][ T9441] ? find_vma+0x2b/0x170 [ 96.332704][ T9441] do_madvise+0x5ba/0x1b80 [ 96.337105][ T9441] ? unuse_pde+0x2c/0x80 [ 96.341356][ T9441] ? madvise_free_pte_range+0x2650/0x2650 [ 96.347106][ T9441] ? wait_for_completion+0x3c0/0x3c0 [ 96.352391][ T9441] ? fput_many+0x2f/0x1a0 [ 96.356720][ T9441] ? ksys_read+0x19f/0x250 [ 96.361306][ T9441] ? kernel_write+0x120/0x120 [ 96.365982][ T9441] ? __x64_sys_madvise+0xae/0x120 [ 96.371110][ T9441] __x64_sys_madvise+0xae/0x120 [ 96.375968][ T9441] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.381342][ T9441] do_syscall_64+0xf6/0x7d0 [ 96.385897][ T9441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.391950][ T9441] RIP: 0033:0x460bf7 [ 96.395845][ T9441] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 96.415936][ T9441] RSP: 002b:000000c00034bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 96.424594][ T9441] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 96.432715][ T9441] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003c8000 [ 96.441383][ T9441] RBP: 000000c00034bc90 R08: 000000c000200000 R09: 000000c000448000 [ 96.449348][ T9441] R10: 00000000001ffe00 R11: 0000000000000246 R12: 00000000000000ff [ 96.457315][ T9441] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 96.465538][ T9441] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9441 [ 96.474787][ T9441] caller is __mod_memcg_state+0x87/0x1a0 [ 96.480409][ T9441] CPU: 0 PID: 9441 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 96.489974][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.501227][ T9441] Call Trace: [ 96.504507][ T9441] dump_stack+0x188/0x20d [ 96.508840][ T9441] __this_cpu_preempt_check.cold+0x84/0x90 [ 96.514744][ T9441] __mod_memcg_state+0x87/0x1a0 [ 96.519704][ T9441] split_huge_page_to_list+0x124b/0x3380 [ 96.525998][ T9441] ? madvise_free_huge_pmd+0x869/0xb90 [ 96.531529][ T9441] ? can_split_huge_page+0x480/0x480 [ 96.536815][ T9441] ? pmd_val+0x7c/0xf0 [ 96.540873][ T9441] ? enabled_store+0x190/0x190 [ 96.545628][ T9441] madvise_free_huge_pmd+0x873/0xb90 [ 96.550909][ T9441] madvise_free_pte_range+0x6ff/0x2650 [ 96.556369][ T9441] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 96.563030][ T9441] __walk_page_range+0xcfb/0x2070 [ 96.569011][ T9441] ? walk_page_test+0x78/0x180 [ 96.573758][ T9441] walk_page_range+0x1bd/0x3a0 [ 96.578506][ T9441] ? __walk_page_range+0x2070/0x2070 [ 96.583777][ T9441] ? madvise_free_single_vma+0x2c1/0x550 [ 96.589440][ T9441] madvise_free_single_vma+0x384/0x550 [ 96.594889][ T9441] ? madvise_pageout+0x3b0/0x3b0 [ 96.599903][ T9441] ? lock_acquire+0x197/0x420 [ 96.604576][ T9441] ? userfaultfd_remove+0xf0/0x2b0 [ 96.609689][ T9441] ? vmacache_find+0x62/0x300 [ 96.614361][ T9441] ? find_vma+0x2b/0x170 [ 96.618595][ T9441] do_madvise+0x5ba/0x1b80 [ 96.622995][ T9441] ? unuse_pde+0x2c/0x80 [ 96.627233][ T9441] ? madvise_free_pte_range+0x2650/0x2650 [ 96.632970][ T9441] ? wait_for_completion+0x3c0/0x3c0 [ 96.638239][ T9441] ? fput_many+0x2f/0x1a0 [ 96.642549][ T9441] ? ksys_read+0x19f/0x250 [ 96.646973][ T9441] ? kernel_write+0x120/0x120 [ 96.651653][ T9441] ? __x64_sys_madvise+0xae/0x120 [ 96.656659][ T9441] __x64_sys_madvise+0xae/0x120 [ 96.661489][ T9441] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.666790][ T9441] do_syscall_64+0xf6/0x7d0 [ 96.671310][ T9441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.677191][ T9441] RIP: 0033:0x460bf7 [ 96.681071][ T9441] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 96.700685][ T9441] RSP: 002b:000000c00034bc50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 96.709160][ T9441] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 96.717131][ T9441] RDX: 0000000000000008 RSI: 0000000000080000 RDI: 000000c0003c8000 [ 96.725092][ T9441] RBP: 000000c00034bc90 R08: 000000c000200000 R09: 000000c000448000 [ 96.733057][ T9441] R10: 00000000001ffe00 R11: 0000000000000246 R12: 00000000000000ff [ 96.741009][ T9441] R13: 0000000000e8da20 R14: 0000000000000000 R15: 0000000000000000 [ 96.902115][ T227] tipc: TX() has been purged, node left! [ 96.944402][ T227] [ 96.946881][ T227] ============================= [ 96.951721][ T227] WARNING: suspicious RCU usage [ 96.992460][ T227] 5.6.0-rc4-next-20200306-syzkaller #0 Not tainted [ 96.999119][ T227] ----------------------------- [ 97.004608][ T227] net/ipv4/ipmr.c:1757 RCU-list traversed in non-reader section!! [ 97.012914][ T227] [ 97.012914][ T227] other info that might help us debug this: [ 97.012914][ T227] [ 97.023681][ T227] [ 97.023681][ T227] rcu_scheduler_active = 2, debug_locks = 1 [ 97.031812][ T227] 4 locks held by kworker/u4:5/227: [ 97.037267][ T227] #0: ffff8880a9771d28 ((wq_completion)netns){+.+.}, at: process_one_work+0x82a/0x1690 [ 97.047289][ T227] #1: ffffc90001527dd0 (net_cleanup_work){+.+.}, at: process_one_work+0x85e/0x1690 [ 97.056919][ T227] #2: ffffffff8a546f88 (pernet_ops_rwsem){++++}, at: cleanup_net+0x9b/0xa50 [ 97.066066][ T227] #3: ffffffff8a552d00 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x88/0x700 [ 97.075457][ T227] [ 97.075457][ T227] stack backtrace: [ 97.081401][ T227] CPU: 0 PID: 227 Comm: kworker/u4:5 Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.090934][ T227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.101140][ T227] Workqueue: netns cleanup_net [ 97.105902][ T227] Call Trace: [ 97.109205][ T227] dump_stack+0x188/0x20d [ 97.113562][ T227] ipmr_device_event+0x240/0x2b0 [ 97.118506][ T227] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 97.124412][ T227] notifier_call_chain+0xc0/0x230 [ 97.129470][ T227] call_netdevice_notifiers_info+0xb5/0x130 [ 97.135378][ T227] rollback_registered_many+0x75c/0xe70 [ 97.140931][ T227] ? netif_set_real_num_tx_queues+0x700/0x700 [ 97.147011][ T227] ? lock_downgrade+0x7f0/0x7f0 [ 97.151875][ T227] unregister_netdevice_many.part.0+0x16/0x1e0 [ 97.158042][ T227] unregister_netdevice_many+0x36/0x50 [ 97.163502][ T227] ip6gre_exit_batch_net+0x4e8/0x700 [ 97.168793][ T227] ? ip6gre_tunnel_link+0xf0/0xf0 [ 97.173814][ T227] ? rcu_read_lock_held_common+0x130/0x130 [ 97.179625][ T227] ? ip6gre_tunnel_link+0xf0/0xf0 [ 97.184754][ T227] ops_exit_list.isra.0+0x103/0x150 [ 97.189975][ T227] cleanup_net+0x511/0xa50 [ 97.194550][ T227] ? unregister_pernet_device+0x70/0x70 [ 97.200223][ T227] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 97.206309][ T227] process_one_work+0x94b/0x1690 [ 97.211268][ T227] ? pwq_dec_nr_in_flight+0x310/0x310 [ 97.217073][ T227] ? do_raw_spin_lock+0x129/0x2e0 [ 97.222118][ T227] worker_thread+0x96/0xe20 [ 97.226638][ T227] ? process_one_work+0x1690/0x1690 [ 97.231840][ T227] kthread+0x357/0x430 [ 97.235931][ T227] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 97.241650][ T227] ret_from_fork+0x24/0x30 executing program [ 97.425981][ T9455] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-fuzzer/9455 [ 97.434986][ T9455] caller is __mod_memcg_state+0x27/0x1a0 [ 97.440743][ T9455] CPU: 1 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.450320][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.460366][ T9455] Call Trace: [ 97.463666][ T9455] dump_stack+0x188/0x20d [ 97.467982][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 97.473770][ T9455] __mod_memcg_state+0x27/0x1a0 [ 97.478629][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 97.484278][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 97.489717][ T9455] ? can_split_huge_page+0x480/0x480 [ 97.495006][ T9455] ? pmd_val+0x7c/0xf0 [ 97.499122][ T9455] ? enabled_store+0x190/0x190 [ 97.503883][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 97.509359][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 97.514839][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 97.521669][ T9455] __walk_page_range+0xcfb/0x2070 [ 97.526702][ T9455] ? walk_page_test+0x78/0x180 [ 97.531451][ T9455] walk_page_range+0x1bd/0x3a0 [ 97.536220][ T9455] ? __walk_page_range+0x2070/0x2070 [ 97.541507][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 97.547148][ T9455] madvise_free_single_vma+0x384/0x550 [ 97.552601][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 97.557531][ T9455] ? lock_acquire+0x197/0x420 [ 97.562205][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 97.567307][ T9455] ? vmacache_find+0x62/0x300 [ 97.571989][ T9455] ? vmacache_update+0xce/0x140 [ 97.576851][ T9455] ? find_vma+0x2b/0x170 [ 97.581153][ T9455] do_madvise+0x5ba/0x1b80 [ 97.585568][ T9455] ? unuse_pde+0x2c/0x80 [ 97.589814][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 97.595522][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 97.600800][ T9455] ? fput_many+0x2f/0x1a0 [ 97.605116][ T9455] ? ksys_read+0x19f/0x250 [ 97.609539][ T9455] ? kernel_write+0x120/0x120 [ 97.614203][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 97.619293][ T9455] __x64_sys_madvise+0xae/0x120 [ 97.624132][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 97.629400][ T9455] do_syscall_64+0xf6/0x7d0 [ 97.633891][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.639761][ T9455] RIP: 0033:0x460bf7 [ 97.643635][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 97.663236][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 97.671636][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 97.679588][ T9455] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c000548000 [ 97.687557][ T9455] RBP: 000000c000347c90 R08: 000000c000400000 R09: 000000c000748000 [ 97.695514][ T9455] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 97.703487][ T9455] R13: 00007f30cae546d0 R14: 0000000000000001 R15: 0000000000000001 [ 97.711589][ T9455] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-fuzzer/9455 [ 97.720480][ T9455] caller is __mod_memcg_state+0xca/0x1a0 [ 97.726166][ T9455] CPU: 1 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 97.735628][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.745752][ T9455] Call Trace: [ 97.749029][ T9455] dump_stack+0x188/0x20d [ 97.753346][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 97.759139][ T9455] __mod_memcg_state+0xca/0x1a0 [ 97.764027][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 97.769903][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 97.775376][ T9455] ? can_split_huge_page+0x480/0x480 [ 97.780673][ T9455] ? pmd_val+0x7c/0xf0 [ 97.784772][ T9455] ? enabled_store+0x190/0x190 [ 97.789645][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 97.794929][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 97.800440][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 97.807121][ T9455] __walk_page_range+0xcfb/0x2070 [ 97.812167][ T9455] ? walk_page_test+0x78/0x180 [ 97.816923][ T9455] walk_page_range+0x1bd/0x3a0 [ 97.821674][ T9455] ? __walk_page_range+0x2070/0x2070 [ 97.826964][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 97.832591][ T9455] madvise_free_single_vma+0x384/0x550 [ 97.838055][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 97.842979][ T9455] ? lock_acquire+0x197/0x420 [ 97.847651][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 97.852754][ T9455] ? vmacache_find+0x62/0x300 [ 97.857426][ T9455] ? vmacache_update+0xce/0x140 [ 97.862262][ T9455] ? find_vma+0x2b/0x170 [ 97.866491][ T9455] do_madvise+0x5ba/0x1b80 [ 97.870889][ T9455] ? unuse_pde+0x2c/0x80 [ 97.875268][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 97.881160][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 97.886447][ T9455] ? fput_many+0x2f/0x1a0 [ 97.890773][ T9455] ? ksys_read+0x19f/0x250 [ 97.895185][ T9455] ? kernel_write+0x120/0x120 [ 97.899855][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 97.904880][ T9455] __x64_sys_madvise+0xae/0x120 [ 97.909720][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 97.915010][ T9455] do_syscall_64+0xf6/0x7d0 [ 97.919517][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.925389][ T9455] RIP: 0033:0x460bf7 [ 97.929264][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 97.948849][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 97.957503][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 97.965459][ T9455] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c000548000 [ 97.973425][ T9455] RBP: 000000c000347c90 R08: 000000c000400000 R09: 000000c000748000 [ 97.981395][ T9455] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 97.989372][ T9455] R13: 00007f30cae546d0 R14: 0000000000000001 R15: 0000000000000001 [ 97.997503][ T9455] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-fuzzer/9455 [ 98.006582][ T9455] caller is __mod_memcg_state+0x87/0x1a0 [ 98.012304][ T9455] CPU: 1 PID: 9455 Comm: syz-fuzzer Not tainted 5.6.0-rc4-next-20200306-syzkaller #0 [ 98.021770][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.031816][ T9455] Call Trace: [ 98.035111][ T9455] dump_stack+0x188/0x20d [ 98.039451][ T9455] __this_cpu_preempt_check.cold+0x84/0x90 [ 98.045261][ T9455] __mod_memcg_state+0x87/0x1a0 [ 98.050119][ T9455] split_huge_page_to_list+0x124b/0x3380 [ 98.055948][ T9455] ? madvise_free_huge_pmd+0x869/0xb90 [ 98.061416][ T9455] ? can_split_huge_page+0x480/0x480 [ 98.066950][ T9455] ? pmd_val+0x7c/0xf0 [ 98.071013][ T9455] ? enabled_store+0x190/0x190 [ 98.075774][ T9455] madvise_free_huge_pmd+0x873/0xb90 [ 98.081068][ T9455] madvise_free_pte_range+0x6ff/0x2650 [ 98.086535][ T9455] ? madvise_cold_or_pageout_pte_range+0x3400/0x3400 [ 98.093213][ T9455] __walk_page_range+0xcfb/0x2070 [ 98.098241][ T9455] ? walk_page_test+0x78/0x180 [ 98.102990][ T9455] walk_page_range+0x1bd/0x3a0 [ 98.107737][ T9455] ? __walk_page_range+0x2070/0x2070 [ 98.113025][ T9455] ? madvise_free_single_vma+0x2c1/0x550 [ 98.118643][ T9455] madvise_free_single_vma+0x384/0x550 [ 98.124089][ T9455] ? madvise_pageout+0x3b0/0x3b0 [ 98.129012][ T9455] ? lock_acquire+0x197/0x420 [ 98.133688][ T9455] ? userfaultfd_remove+0xf0/0x2b0 [ 98.138795][ T9455] ? vmacache_find+0x62/0x300 [ 98.143454][ T9455] ? vmacache_update+0xce/0x140 [ 98.148297][ T9455] ? find_vma+0x2b/0x170 [ 98.152547][ T9455] do_madvise+0x5ba/0x1b80 [ 98.156959][ T9455] ? unuse_pde+0x2c/0x80 [ 98.161359][ T9455] ? madvise_free_pte_range+0x2650/0x2650 [ 98.167085][ T9455] ? wait_for_completion+0x3c0/0x3c0 [ 98.172372][ T9455] ? fput_many+0x2f/0x1a0 [ 98.176700][ T9455] ? ksys_read+0x19f/0x250 [ 98.181105][ T9455] ? kernel_write+0x120/0x120 [ 98.185776][ T9455] ? __x64_sys_madvise+0xae/0x120 [ 98.190900][ T9455] __x64_sys_madvise+0xae/0x120 [ 98.195855][ T9455] ? lockdep_hardirqs_on+0x417/0x5d0 [ 98.201294][ T9455] do_syscall_64+0xf6/0x7d0 [ 98.205794][ T9455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 98.211668][ T9455] RIP: 0033:0x460bf7 [ 98.215548][ T9455] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 98.235136][ T9455] RSP: 002b:000000c000347c50 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 98.243531][ T9455] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000460bf7 [ 98.251511][ T9455] RDX: 0000000000000008 RSI: 0000000000200000 RDI: 000000c000548000 [ 98.259473][ T9455] RBP: 000000c000347c90 R08: 000000c000400000 R09: 000000c000748000 [ 98.267476][ T9455] R10: 00000000007ffe00 R11: 0000000000000246 R12: 0000000000000032 [ 98.275435][ T9455] R13: 00007f30cae546d0 R14: 0000000000000001 R15: 0000000000000001 [ 98.835273][ T9436] can: request_module (can-proto-0) failed. executing program [ 101.208837][ T9436] can: request_module (can-proto-0) failed. [ 101.221182][ T9436] can: request_module (can-proto-0) failed.