pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1333 in_atomic(): 0, irqs_disabled(): 1, pid: 17984, name: syz-executor.4 1 lock held by syz-executor.4/17984: #0: 0000000061844e3e (&mm->mmap_sem){++++}, at: __do_page_fault+0x3c9/0xe90 arch/x86/mm/fault.c:1319 irq event stamp: 8092 hardirqs last enabled at (8091): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (8091): [] _raw_spin_unlock_irqrestore+0x6b/0xe0 kernel/locking/spinlock.c:184 hardirqs last disabled at (8092): [] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] hardirqs last disabled at (8092): [] do_syscall_64+0x20d/0x620 arch/x86/entry/common.c:296 softirqs last enabled at (3010): [] __do_softirq+0x633/0x921 kernel/softirq.c:318 softirqs last disabled at (2861): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (2861): [] irq_exit+0x180/0x1d0 kernel/softirq.c:412 CPU: 0 PID: 17984 Comm: syz-executor.4 Not tainted 4.19.96-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6192 __might_sleep+0x95/0x190 kernel/sched/core.c:6145 __do_page_fault+0x3f4/0xe90 arch/x86/mm/fault.c:1333 do_page_fault+0x71/0x57d arch/x86/mm/fault.c:1465 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1204 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline] RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline] RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline] RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline] RIP: 0010:do_syscall_64+0x210/0x620 arch/x86/entry/common.c:296 Code: 83 3d 93 b8 f1 07 00 0f 84 1e 03 00 00 e8 78 72 6a 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 83 a9 6f 00 48 89 da <00> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 03 RSP: 0018:ffff88807a0eff20 EFLAGS: 00010086 RAX: 0000000000000007 RBX: ffff8880a07b21c0 RCX: 0000000000000000 RDX: ffff8880a07b21c0 RSI: 0000000000000000 RDI: ffff8880a07b2a04 RBP: ffff88807a0eff48 R08: ffff8880a07b21c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a0eff58 R13: ffffffff88f25bd8 R14: 0000000000000000 R15: 0000000000000000 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4594c1 Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffe8268b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 RAX: 0000000000000000 RBX: 00000000000c2caa RCX: 00000000004594c1 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe8268b820 RBP: 0000000000000001 R08: 000000002bada53d R09: ffffffffffffffff R10: 00007ffe8268b910 R11: 0000000000000293 R12: 000000000075bf20 R13: 000000000075c9a0 R14: 00000000007622d0 R15: 000000000075bf2c BUG: unable to handle kernel NULL pointer dereference at 0000000000000007 PGD 4fc44067 P4D 4fc44067 PUD 532d6067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 0 PID: 17984 Comm: syz-executor.4 Tainted: G W 4.19.96-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline] RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline] RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline] RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline] RIP: 0010:do_syscall_64+0x210/0x620 arch/x86/entry/common.c:296 Code: 83 3d 93 b8 f1 07 00 0f 84 1e 03 00 00 e8 78 72 6a 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 83 a9 6f 00 48 89 da <00> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 03 RSP: 0018:ffff88807a0eff20 EFLAGS: 00010086 RAX: 0000000000000007 RBX: ffff8880a07b21c0 RCX: 0000000000000000 RDX: ffff8880a07b21c0 RSI: 0000000000000000 RDI: ffff8880a07b2a04 RBP: ffff88807a0eff48 R08: ffff8880a07b21c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a0eff58 R13: ffffffff88f25bd8 R14: 0000000000000000 R15: 0000000000000000 FS: 00000000017c9940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000007 CR3: 000000008d471000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4594c1 Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffe8268b810 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 RAX: 0000000000000000 RBX: 00000000000c2caa RCX: 00000000004594c1 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe8268b820 RBP: 0000000000000001 R08: 000000002bada53d R09: ffffffffffffffff R10: 00007ffe8268b910 R11: 0000000000000293 R12: 000000000075bf20 R13: 000000000075c9a0 R14: 00000000007622d0 R15: 000000000075bf2c Modules linked in: CR2: 0000000000000007 ---[ end trace 7b05d01f7f073c60 ]--- BUG: unable to handle kernel NULL pointer dereference at 0000000000000003 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline] RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline] RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline] RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline] RIP: 0010:do_syscall_64+0x210/0x620 arch/x86/entry/common.c:296 PGD 542fb067 Code: 83 3d 93 b8 f1 07 00 0f 84 1e 03 00 00 e8 78 72 6a 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 83 a9 6f 00 48 89 da <00> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 03 P4D 542fb067 RSP: 0018:ffff88807a0eff20 EFLAGS: 00010086 PUD 4e1c8067 PMD 0 RAX: 0000000000000007 RBX: ffff8880a07b21c0 RCX: 0000000000000000 RDX: ffff8880a07b21c0 RSI: 0000000000000000 RDI: ffff8880a07b2a04 Oops: 0002 [#2] PREEMPT SMP KASAN RBP: ffff88807a0eff48 R08: ffff8880a07b21c0 R09: 0000000000000000 CPU: 1 PID: 18020 Comm: syz-executor.3 Tainted: G D W 4.19.96-syzkaller #0 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a0eff58 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 R13: ffffffff88f25bd8 R14: 0000000000000000 R15: 0000000000000000 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:317 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:84 [inline] RIP: 0010:addr_limit_user_check include/linux/syscalls.h:262 [inline] RIP: 0010:prepare_exit_to_usermode arch/x86/entry/common.c:190 [inline] RIP: 0010:syscall_return_slowpath arch/x86/entry/common.c:271 [inline] RIP: 0010:do_syscall_64+0x210/0x620 arch/x86/entry/common.c:296 FS: 00000000017c9940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 Code: 83 3d 93 b8 f1 07 00 0f 84 1e 03 00 00 e8 78 72 6a 00 fa 66 0f 1f 44 00 00 65 48 8b 1c 25 40 ee 01 00 e8 83 a9 6f 00 48 89 da <00> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 03 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 RSP: 0018:ffff88805341ff20 EFLAGS: 00010086 CR2: 0000000000000007 CR3: 000000008d471000 CR4: 00000000001406f0 RAX: 0000000000000003 RBX: ffff8880530fc5c0 RCX: 1ffffffff1279058 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 RDX: ffff8880530fc5c0 RSI: ffffffff81704d39 RDI: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 RBP: ffff88805341ff48 R08: ffff8880530fc5c0 R09: fffffbfff1279789