last executing test programs: 832.286644ms ago: executing program 0 (id=26): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0) 831.585593ms ago: executing program 0 (id=29): semop(0x0, &(0x7f0000000000), 0x0) 827.113621ms ago: executing program 0 (id=32): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0) 771.871635ms ago: executing program 0 (id=37): uselib(0x0) 771.319865ms ago: executing program 1 (id=39): getpgid(0x0) 768.783792ms ago: executing program 0 (id=40): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/sw_sync', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync', 0x800, 0x0) 765.082327ms ago: executing program 1 (id=41): time(&(0x7f0000000000)) 709.847214ms ago: executing program 1 (id=43): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0) 709.665519ms ago: executing program 1 (id=44): splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 709.533656ms ago: executing program 0 (id=45): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 709.475092ms ago: executing program 1 (id=46): io_submit(0x0, 0x0, &(0x7f0000000000)) 129.855385ms ago: executing program 2 (id=74): io_uring_setup(0x0, &(0x7f0000000000)) 71.210614ms ago: executing program 2 (id=75): ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 70.729939ms ago: executing program 2 (id=76): munlockall() 10.328532ms ago: executing program 2 (id=77): ustat(0x0, &(0x7f0000000000)) 9.336087ms ago: executing program 2 (id=78): file_getattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 9.251281ms ago: executing program 2 (id=79): fchownat(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=48): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45656' (ED25519) to the list of known hosts. syzkaller login: [ 66.743264][ T5600] cgroup: Unknown subsys name 'net' [ 66.857087][ T5600] cgroup: Unknown subsys name 'cpuset' [ 66.863690][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.341196][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.176823][ T5677] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.279976][ T5712] ------------[ cut here ]------------ [ 76.283216][ T5712] debug_locks && !(rcu_read_lock_held() || lock_is_held(&(&cgroup_mutex)->dep_map)) [ 76.283231][ T5712] WARNING: ./include/linux/memcontrol.h:380 at __refill_obj_stock+0x4fd/0x610, CPU#0: syz.1.48/5712 [ 76.287158][ T5681] ------------[ cut here ]------------ [ 76.288141][ T5712] Modules linked in: [ 76.295204][ T5681] debug_locks && !(rcu_read_lock_held() || lock_is_held(&(&cgroup_mutex)->dep_map)) [ 76.298497][ T5712] [ 76.300215][ T5681] WARNING: ./include/linux/memcontrol.h:380 at __memcg_slab_post_alloc_hook+0xc3c/0xf50, CPU#1: syz-executor/5681 [ 76.300254][ T5681] Modules linked in: [ 76.300821][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 76.305875][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 76.305925][ T5712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 76.305936][ T5712] RIP: 0010:__refill_obj_stock+0x4fd/0x610 [ 76.305961][ T5712] Code: 89 e7 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 ba 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 a8 fb ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 60 [ 76.305972][ T5712] RSP: 0018:ffffc9000483f4b0 EFLAGS: 00010246 [ 76.305986][ T5712] RAX: 0000000000000000 RBX: ffff88810beb0f80 RCX: 0000000080000001 [ 76.305997][ T5712] RDX: 0000000000000110 RSI: ffffffff8e21e93e RDI: ffffffff8c28b8e0 [ 76.306007][ T5712] RBP: 0000000000000001 R08: ffffffff8239a83c R09: ffff88812103c600 [ 76.306015][ T5712] R10: dffffc0000000000 R11: ffffed102d89bae9 R12: 1ffff110242078c8 [ 76.306025][ T5712] R13: ffff88810beb0d80 R14: dffffc0000000000 R15: ffff88812103c600 [ 76.306036][ T5712] FS: 0000000000000000(0000) GS:ffff88818dc89000(0000) knlGS:0000000000000000 [ 76.306046][ T5712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.306055][ T5712] CR2: 00007f80ad948060 CR3: 000000000e74a000 CR4: 00000000000006f0 [ 76.306089][ T5712] Call Trace: [ 76.307066][ T5681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 76.307079][ T5681] RIP: 0010:__memcg_slab_post_alloc_hook+0xc3c/0xf50 [ 76.314639][ T5712] [ 76.314703][ T5712] __memcg_slab_free_hook+0x2ed/0x4b0 [ 76.314803][ T5712] ? __put_anon_vma+0x12b/0x2d0 [ 76.314873][ T5712] kmem_cache_free+0x381/0x650 [ 76.316807][ T5681] Code: c1 e8 03 80 3c 28 00 0f 84 5d f8 ff ff 4c 89 ff e8 e9 8f f7 ff e9 50 f8 ff ff 90 0f 0b 90 e9 33 fe ff ff 90 0f 0b 90 eb 8e 90 <0f> 0b 90 e9 1e fa ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c fa f8 [ 76.322803][ T5712] __put_anon_vma+0x12b/0x2d0 [ 76.322841][ T5712] unlink_anon_vmas+0x58b/0x730 [ 76.322869][ T5712] free_pgtables+0x802/0xb40 [ 76.326930][ T5681] RSP: 0018:ffffc9000477f7d0 EFLAGS: 00010246 [ 76.331761][ T5712] ? exit_mmap+0x2c2/0x9e0 [ 76.334874][ T5681] [ 76.334916][ T5681] RAX: 0000000000000000 RBX: ffffea0006fa7038 RCX: 0000000080000001 [ 76.346995][ T5712] ? __pfx_free_pgtables+0x10/0x10 [ 76.349149][ T5681] RDX: 0000000005f4edf4 RSI: ffffffff8e21e93e RDI: ffffffff8c28b8e0 [ 76.349172][ T5681] RBP: dffffc0000000000 R08: ffffffff8239a83c R09: ffff88823c63c600 [ 76.349184][ T5681] R10: 000000000000000d R11: ffffffff81b0ed80 R12: dffffc0000000000 [ 76.349195][ T5681] R13: ffffea0006fa7000 R14: ffff88810beb0f80 R15: ffff88823c63c600 [ 76.349207][ T5681] FS: 0000555588a5e500(0000) GS:ffff8882a9289000(0000) knlGS:0000000000000000 [ 76.349220][ T5681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.349230][ T5681] CR2: 0000001b33963fff CR3: 000000010949c000 CR4: 00000000000006f0 [ 76.349266][ T5681] Call Trace: [ 76.349277][ T5681] [ 76.349300][ T5681] ? alloc_empty_file+0x5b/0x1d0 [ 76.349327][ T5681] kmem_cache_alloc_noprof+0x347/0x650 [ 76.349348][ T5681] ? alloc_empty_file+0x5b/0x1d0 [ 76.349366][ T5681] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 76.349389][ T5681] alloc_empty_file+0x5b/0x1d0 [ 76.349409][ T5681] path_openat+0x10f/0x3860 [ 76.352951][ T5712] ? __pfx_down_write+0x10/0x10 [ 76.357003][ T5681] ? arch_stack_walk+0xfb/0x150 [ 76.361141][ T5712] exit_mmap+0x490/0x9e0 [ 76.361186][ T5712] ? __pfx_exit_mmap+0x10/0x10 [ 76.361215][ T5712] ? uprobe_clear_state+0x53/0x3f0 [ 76.361247][ T5712] ? __pfx_exit_aio+0x10/0x10 [ 76.365447][ T5681] ? do_getname+0x2e/0x250 [ 76.369253][ T5712] ? uprobe_clear_state+0x2bc/0x3f0 [ 76.374901][ T5681] ? stack_trace_save+0xa9/0x100 [ 76.377917][ T5712] __mmput+0x118/0x430 [ 76.377953][ T5712] exit_mm+0x18e/0x250 [ 76.381597][ T5681] ? __pfx_stack_trace_save+0x10/0x10 [ 76.383029][ T5712] do_exit+0x6a2/0x22c0 [ 76.388057][ T5681] ? do_getname+0x2e/0x250 [ 76.391303][ T5712] ? try_to_wake_up+0x828/0x1380 [ 76.392700][ T5681] ? stack_depot_save_flags+0x33/0x810 [ 76.394367][ T5712] ? __pfx_do_exit+0x10/0x10 [ 76.396439][ T5681] ? do_getname+0x2e/0x250 [ 76.397926][ T5712] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.405286][ T5681] ? kasan_save_track+0x4f/0x80 [ 76.407119][ T5712] do_group_exit+0x21b/0x2d0 [ 76.409744][ T5681] ? kasan_save_track+0x3e/0x80 [ 76.411924][ T5712] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.414560][ T5681] ? __kasan_slab_alloc+0x6c/0x80 [ 76.414597][ T5681] ? __pfx_path_openat+0x10/0x10 [ 76.414612][ T5681] ? __x64_sys_openat+0x138/0x170 [ 76.414637][ T5681] ? __lock_acquire+0x6b5/0x2cf0 [ 76.416288][ T5712] get_signal+0x1284/0x1330 [ 76.417375][ T5681] do_file_open+0x23e/0x4a0 [ 76.420323][ T5712] arch_do_signal_or_restart+0xbc/0x840 [ 76.422711][ T5681] ? __pfx_do_file_open+0x10/0x10 [ 76.426348][ T5712] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.429494][ T5681] ? _raw_spin_unlock+0x28/0x50 [ 76.432689][ T5712] ? exc_page_fault+0x6a/0xc0 [ 76.436800][ T5681] ? alloc_fd+0x64b/0x6c0 [ 76.439619][ T5712] exit_to_user_mode_loop+0x8c/0x4d0 [ 76.442295][ T5681] do_sys_openat2+0x113/0x200 [ 76.445353][ T5712] ? rcu_is_watching+0x15/0xb0 [ 76.447068][ T5681] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.447973][ T5712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.449737][ T5681] ? fput_close_sync+0x11f/0x240 [ 76.452098][ T5712] do_syscall_64+0x33e/0xf80 [ 76.452120][ T5712] ? trace_irq_disable+0x3b/0x140 [ 76.453980][ T5681] ? rcu_is_watching+0x15/0xb0 [ 76.455821][ T5712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.457958][ T5681] __x64_sys_openat+0x138/0x170 [ 76.459760][ T5712] RIP: 0033:0x7f6eea99ce59 [ 76.461707][ T5681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.463117][ T5712] Code: Unable to access opcode bytes at 0x7f6eea99ce2f. [ 76.463128][ T5712] RSP: 002b:00007f6eeb8240e8 EFLAGS: 00000246 [ 76.464614][ T5681] do_syscall_64+0x15f/0xf80 [ 76.466450][ T5712] ORIG_RAX: 00000000000000ca [ 76.468558][ T5681] ? trace_irq_disable+0x3b/0x140 [ 76.471333][ T5712] RAX: 0000000000000001 RBX: 00007f6eeac15fa8 RCX: 00007f6eea99ce59 [ 76.471351][ T5712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6eeac15fac [ 76.473804][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.476599][ T5712] RBP: 00007f6eeac15fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 76.478039][ T5681] RIP: 0033:0x7ff185b57fd7 [ 76.479438][ T5712] R10: 0000200001000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.481091][ T5681] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 76.483010][ T5712] R13: 00007f6eeac16038 R14: 00007fffdc60cea0 R15: 00007fffdc60cf88 [ 76.483044][ T5712] [ 76.486496][ T5681] RSP: 002b:00007ffcf5eb2530 EFLAGS: 00000202 [ 76.487774][ T5712] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.487788][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 76.487799][ T5712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 76.487805][ T5712] Call Trace: [ 76.487813][ T5712] [ 76.487819][ T5712] vpanic+0x56c/0xa60 [ 76.487836][ T5712] ? __pfx__printk+0x10/0x10 [ 76.487848][ T5712] ? __pfx_vpanic+0x10/0x10 [ 76.487856][ T5712] ? is_bpf_text_address+0x292/0x2b0 [ 76.487973][ T5712] ? is_bpf_text_address+0x26/0x2b0 [ 76.487987][ T5712] panic+0xc5/0xd0 [ 76.487998][ T5712] ? __pfx_panic+0x10/0x10 [ 76.488013][ T5712] __warn+0x315/0x4c0 [ 76.488023][ T5712] ? __refill_obj_stock+0x4fd/0x610 [ 76.488037][ T5712] ? __refill_obj_stock+0x4fd/0x610 [ 76.488049][ T5712] __report_bug+0x29a/0x540 [ 76.488065][ T5712] ? arch_stack_walk+0xfb/0x150 [ 76.488078][ T5712] ? __refill_obj_stock+0x4fd/0x610 [ 76.488090][ T5712] ? __pfx___report_bug+0x10/0x10 [ 76.488103][ T5712] ? __lock_acquire+0x6b5/0x2cf0 [ 76.488115][ T5712] ? register_lock_class+0x31/0x2e0 [ 76.488126][ T5712] ? __refill_obj_stock+0x4fd/0x610 [ 76.488138][ T5712] report_bug+0x16a/0x220 [ 76.488151][ T5712] ? __refill_obj_stock+0x4fd/0x610 [ 76.488162][ T5712] ? __refill_obj_stock+0x4ff/0x610 [ 76.488172][ T5712] handle_bug+0x9c/0x200 [ 76.488184][ T5712] exc_invalid_op+0x1a/0x50 [ 76.488193][ T5712] asm_exc_invalid_op+0x1a/0x20 [ 76.488231][ T5712] RIP: 0010:__refill_obj_stock+0x4fd/0x610 [ 76.488247][ T5712] Code: 89 e7 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 ba 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 a8 fb ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 60 [ 76.488256][ T5712] RSP: 0018:ffffc9000483f4b0 EFLAGS: 00010246 [ 76.488267][ T5712] RAX: 0000000000000000 RBX: ffff88810beb0f80 RCX: 0000000080000001 [ 76.488275][ T5712] RDX: 0000000000000110 RSI: ffffffff8e21e93e RDI: ffffffff8c28b8e0 [ 76.488284][ T5712] RBP: 0000000000000001 R08: ffffffff8239a83c R09: ffff88812103c600 [ 76.488292][ T5712] R10: dffffc0000000000 R11: ffffed102d89bae9 R12: 1ffff110242078c8 [ 76.488301][ T5712] R13: ffff88810beb0d80 R14: dffffc0000000000 R15: ffff88812103c600 [ 76.488315][ T5712] ? trylock_stock+0xac/0x280 [ 76.488334][ T5712] __memcg_slab_free_hook+0x2ed/0x4b0 [ 76.488351][ T5712] ? __put_anon_vma+0x12b/0x2d0 [ 76.488364][ T5712] kmem_cache_free+0x381/0x650 [ 76.488381][ T5712] __put_anon_vma+0x12b/0x2d0 [ 76.488395][ T5712] unlink_anon_vmas+0x58b/0x730 [ 76.488419][ T5712] free_pgtables+0x802/0xb40 [ 76.488438][ T5712] ? exit_mmap+0x2c2/0x9e0 [ 76.488466][ T5712] ? __pfx_free_pgtables+0x10/0x10 [ 76.488483][ T5712] ? __pfx_down_write+0x10/0x10 [ 76.488497][ T5712] exit_mmap+0x490/0x9e0 [ 76.488510][ T5712] ? __pfx_exit_mmap+0x10/0x10 [ 76.488534][ T5712] ? uprobe_clear_state+0x53/0x3f0 [ 76.488563][ T5712] ? __pfx_exit_aio+0x10/0x10 [ 76.488589][ T5712] ? uprobe_clear_state+0x2bc/0x3f0 [ 76.488605][ T5712] __mmput+0x118/0x430 [ 76.488622][ T5712] exit_mm+0x18e/0x250 [ 76.488646][ T5712] do_exit+0x6a2/0x22c0 [ 76.488667][ T5712] ? try_to_wake_up+0x828/0x1380 [ 76.488684][ T5712] ? __pfx_do_exit+0x10/0x10 [ 76.488702][ T5712] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.488730][ T5712] do_group_exit+0x21b/0x2d0 [ 76.488750][ T5712] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.488773][ T5712] get_signal+0x1284/0x1330 [ 76.488800][ T5712] arch_do_signal_or_restart+0xbc/0x840 [ 76.488827][ T5712] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.488854][ T5712] ? exc_page_fault+0x6a/0xc0 [ 76.488913][ T5712] exit_to_user_mode_loop+0x8c/0x4d0 [ 76.488929][ T5712] ? rcu_is_watching+0x15/0xb0 [ 76.488948][ T5712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.488970][ T5712] do_syscall_64+0x33e/0xf80 [ 76.488984][ T5712] ? trace_irq_disable+0x3b/0x140 [ 76.489010][ T5712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.489024][ T5712] RIP: 0033:0x7f6eea99ce59 [ 76.489036][ T5712] Code: Unable to access opcode bytes at 0x7f6eea99ce2f. [ 76.489043][ T5712] RSP: 002b:00007f6eeb8240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.489058][ T5712] RAX: 0000000000000001 RBX: 00007f6eeac15fa8 RCX: 00007f6eea99ce59 [ 76.489068][ T5712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6eeac15fac [ 76.489077][ T5712] RBP: 00007f6eeac15fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 76.489087][ T5712] R10: 0000200001000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.489096][ T5712] R13: 00007f6eeac16038 R14: 00007fffdc60cea0 R15: 00007fffdc60cf88 [ 76.489120][ T5712] [ 76.491351][ T5712] Kernel Offset: disabled