==================================================================
kasan: CONFIG_KASAN_INLINE enabled
BUG: KASAN: stack-out-of-bounds in __read_once_size include/linux/compiler.h:191 [inline]
BUG: KASAN: stack-out-of-bounds in test_idle_cores kernel/sched/fair.c:6000 [inline]
BUG: KASAN: stack-out-of-bounds in select_idle_core kernel/sched/fair.c:6047 [inline]
BUG: KASAN: stack-out-of-bounds in select_idle_sibling+0xbb1/0xdb0 kernel/sched/fair.c:6197
kasan: GPF could be caused by NULL-ptr deref or user memory access
Read of size 4 at addr ffff8880a9d9e508 by task syz-executor1/9035
general protection fault: 0000 [#1] PREEMPT SMP KASAN

CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.20.0+ #250
CPU: 1 PID: 9035 Comm: syz-executor1 Not tainted 4.20.0+ #250
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:task_css include/linux/cgroup.h:477 [inline]
RIP: 0010:task_ca kernel/sched/cpuacct.c:43 [inline]
RIP: 0010:cpuacct_account_field+0x140/0x3d0 kernel/sched/cpuacct.c:365
Call Trace:
Code: 86 95 08 00 85 c0 74 0d 80 3d 87 bd d1 08 00 0f 84 a4 01 00 00 49 8d 7e 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4e 02 00 00 4d 8b 7e 10 49 81 ff c0 51 78 89 0f
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113
RSP: 0018:ffff8880ae6078a8 EFLAGS: 00010002
RAX: dffffc0000000000 RBX: ffff8880ae607918 RCX: ffffffff81626af4
RDX: 000000000836b158 RSI: 0000000000000008 RDI: 0000000041b58ac3
RBP: ffff8880ae607940 R08: 0000000000000000 R09: 0000000000000000
R10: fffffbfff0dddae8 R11: ffffffff86eed747 R12: 000000000098072b
 print_address_description.cold.8+0x9/0x1ff mm/kasan/report.c:256
R13: dffffc0000000000 R14: 0000000041b58ab3 R15: ffff8880a9e1c240
FS:  0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.9+0x242/0x309 mm/kasan/report.c:412
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000ef67d0 CR3: 000000008ce54000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report.c:432
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 __read_once_size include/linux/compiler.h:191 [inline]
 test_idle_cores kernel/sched/fair.c:6000 [inline]
 select_idle_core kernel/sched/fair.c:6047 [inline]
 select_idle_sibling+0xbb1/0xdb0 kernel/sched/fair.c:6197
Call Trace:
 <IRQ>
 cgroup_account_cputime_field include/linux/cgroup.h:775 [inline]
 task_group_account_field kernel/sched/cputime.c:108 [inline]
 account_system_index_time+0x1e8/0x5d0 kernel/sched/cputime.c:171
 select_task_rq_fair+0xa3b/0x3ad0 kernel/sched/fair.c:6652
 irqtime_account_process_tick.isra.6+0x38e/0x490 kernel/sched/cputime.c:380
 account_process_tick+0x282/0x350 kernel/sched/cputime.c:483
 update_process_times+0x21/0x70 kernel/time/timer.c:1633
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:161
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1271
 __run_hrtimer kernel/time/hrtimer.c:1389 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1451
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1509
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1035 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1060
 select_task_rq kernel/sched/core.c:1536 [inline]
 try_to_wake_up+0x4e7/0x1460 kernel/sched/core.c:2041
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
Modules linked in:
---[ end trace 92071a90503ff129 ]---
RIP: 0010:task_css include/linux/cgroup.h:477 [inline]
RIP: 0010:task_ca kernel/sched/cpuacct.c:43 [inline]
RIP: 0010:cpuacct_account_field+0x140/0x3d0 kernel/sched/cpuacct.c:365
Code: 86 95 08 00 85 c0 74 0d 80 3d 87 bd d1 08 00 0f 84 a4 01 00 00 49 8d 7e 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4e 02 00 00 4d 8b 7e 10 49 81 ff c0 51 78 89 0f
 wake_up_process kernel/sched/core.c:2129 [inline]
 wake_up_q+0xa4/0x100 kernel/sched/core.c:440
RSP: 0018:ffff8880ae6078a8 EFLAGS: 00010002
 futex_wake+0x61f/0x760 kernel/futex.c:1613
RAX: dffffc0000000000 RBX: ffff8880ae607918 RCX: ffffffff81626af4
RDX: 000000000836b158 RSI: 0000000000000008 RDI: 0000000041b58ac3
RBP: ffff8880ae607940 R08: 0000000000000000 R09: 0000000000000000
R10: fffffbfff0dddae8 R11: ffffffff86eed747 R12: 000000000098072b
 do_futex+0x2e4/0x26d0 kernel/futex.c:3590
R13: dffffc0000000000 R14: 0000000041b58ab3 R15: ffff8880a9e1c240
FS:  0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000ef67d0 CR3: 000000008ce54000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400