[....] Starting enhanced syslogd: rsyslogd[ 9.780794] audit: type=1400 audit(1513056801.248:4): avc: denied { syslog } for pid=3182 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-0,10.128.0.55' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 29.870006] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 29.871209] caller is __this_cpu_preempt_check+0x1c/0x20 [ 29.871946] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 29.872941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.874180] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 29.875305] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 29.876439] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 29.877564] Call Trace: [ 29.877919] [] dump_stack+0xc1/0x128 [ 29.878644] [] check_preemption_disabled+0x1d4/0x200 [ 29.879528] [] __this_cpu_preempt_check+0x1c/0x20 [ 29.880379] [] ipcomp_init_state+0x188/0x930 [ 29.881176] [] ? __lock_is_held+0xa1/0xf0 [ 29.881939] [] ipcomp4_init_state+0xb0/0x7d0 [ 29.882735] [] __xfrm_init_state+0x3e7/0xb30 [ 29.883533] [] xfrm_init_state+0x1a/0x20 [ 29.884285] [] pfkey_add+0x1fb9/0x3470 [ 29.885013] [] ? pfkey_delete+0x360/0x360 [ 29.885778] [] ? pfkey_seq_stop+0x80/0x80 [ 29.886540] [] ? __skb_clone+0x24a/0x7d0 [ 29.887290] [] ? pfkey_delete+0x360/0x360 [ 29.888052] [] pfkey_process+0x61e/0x730 [ 29.888802] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 29.889698] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 29.890596] [] pfkey_sendmsg+0x3a9/0x760 [ 29.896270] [] ? pfkey_spdget+0x820/0x820 [ 29.902033] [] sock_sendmsg+0xca/0x110 [ 29.907533] [] ___sys_sendmsg+0x6d1/0x7e0 [ 29.913292] [] ? copy_msghdr_from_user+0x550/0x550 [ 29.919835] [] ? __lru_cache_add+0x187/0x250 [ 29.925857] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 29.932921] [] ? _raw_spin_unlock+0x2c/0x50 [ 29.938855] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 29.945918] [] ? handle_mm_fault+0x6ee/0x2530 [ 29.952023] [] ? __fget_light+0x158/0x1e0 [ 29.957780] [] ? __fdget+0x18/0x20 [ 29.962932] [] ? sockfd_lookup_light+0x118/0x160 executing program [ 29.969300] [] __sys_sendmsg+0xd6/0x190 [ 29.974887] [] ? SyS_shutdown+0x1b0/0x1b0 [ 29.980648] [] ? __do_page_fault+0x5ec/0xd40 [ 29.986670] [] compat_SyS_sendmsg+0x2a/0x40 [ 29.992609] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 29.999151] [] do_fast_syscall_32+0x2f7/0x890 [ 30.005257] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.011884] [] entry_SYSENTER_compat+0x51/0x60 [ 30.020082] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.028831] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.034248] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.041836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.051173] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.059118] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.067061] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.075003] Call Trace: [ 30.077557] [] dump_stack+0xc1/0x128 [ 30.082886] [] check_preemption_disabled+0x1d4/0x200 [ 30.089601] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.096057] [] ipcomp_init_state+0x188/0x930 [ 30.102078] [] ? __lock_is_held+0xa1/0xf0 [ 30.107848] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.113871] [] __xfrm_init_state+0x3e7/0xb30 [ 30.119888] [] xfrm_init_state+0x1a/0x20 [ 30.125562] [] pfkey_add+0x1fb9/0x3470 [ 30.131062] [] ? pfkey_delete+0x360/0x360 [ 30.136823] [] ? pfkey_seq_stop+0x80/0x80 [ 30.142587] [] ? __skb_clone+0x24a/0x7d0 [ 30.148267] [] ? pfkey_delete+0x360/0x360 [ 30.154025] [] pfkey_process+0x61e/0x730 [ 30.159698] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.166500] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.173302] [] pfkey_sendmsg+0x3a9/0x760 [ 30.178975] [] ? pfkey_spdget+0x820/0x820 [ 30.184735] [] sock_sendmsg+0xca/0x110 [ 30.190232] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.195990] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.202531] [] ? __lru_cache_add+0x187/0x250 [ 30.208554] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.215620] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.221556] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.228620] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.234730] [] ? __fget_light+0x158/0x1e0 [ 30.240489] [] ? __fdget+0x18/0x20 [ 30.245641] [] ? sockfd_lookup_light+0x118/0x160 [ 30.252007] [] __sys_sendmsg+0xd6/0x190 [ 30.257592] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.263361] [] ? __do_page_fault+0x5ec/0xd40 executing program [ 30.269382] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.275314] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.281854] [] do_fast_syscall_32+0x2f7/0x890 [ 30.287959] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.294593] [] entry_SYSENTER_compat+0x51/0x60 [ 30.302911] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.311653] caller is __this_cpu_preempt_check+0x1c/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.317092] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.324676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.334004] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.341672] ffffffff83f42ec0 [ 30.341673] ffff8801ce530000 0000000000000003 ffff8801c90676a8 ffffffff81df7854 [ 30.341678] ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000Call Trace: [ 30.341689] [] dump_stack+0xc1/0x128 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.341694] [] check_preemption_disabled+0x1d4/0x200 [ 30.341697] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.341703] [] ipcomp_init_state+0x188/0x930 [ 30.341712] [] ? __lock_is_held+0xa1/0xf0 [ 30.341717] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.341721] [] __xfrm_init_state+0x3e7/0xb30 [ 30.341725] [] xfrm_init_state+0x1a/0x20 [ 30.341731] [] pfkey_add+0x1fb9/0x3470 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.341735] [] ? pfkey_delete+0x360/0x360 [ 30.341739] [] ? pfkey_seq_stop+0x80/0x80 [ 30.341743] [] ? __skb_clone+0x24a/0x7d0 [ 30.341747] [] ? pfkey_delete+0x360/0x360 [ 30.341751] [] pfkey_process+0x61e/0x730 [ 30.341755] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.341759] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.341763] [] pfkey_sendmsg+0x3a9/0x760 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.341767] [] ? pfkey_spdget+0x820/0x820 [ 30.341772] [] sock_sendmsg+0xca/0x110 [ 30.341775] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.341779] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.341785] [] ? __lru_cache_add+0x187/0x250 [ 30.341790] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.341794] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.341798] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.341803] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.341807] [] ? __fget_light+0x158/0x1e0 [ 30.341810] [] ? __fdget+0x18/0x20 [ 30.341813] [] ? sockfd_lookup_light+0x118/0x160 [ 30.341817] [] __sys_sendmsg+0xd6/0x190 [ 30.341821] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.341826] [] ? __do_page_fault+0x5ec/0xd40 [ 30.341831] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.341834] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.341838] [] do_fast_syscall_32+0x2f7/0x890 [ 30.341842] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.341845] [] entry_SYSENTER_compat+0x51/0x60 [ 30.343541] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.343547] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.343551] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.343553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.343559] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.343563] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.343568] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.343569] Call Trace: [ 30.343573] [] dump_stack+0xc1/0x128 [ 30.343578] [] check_preemption_disabled+0x1d4/0x200 [ 30.343581] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.343586] [] ipcomp_init_state+0x188/0x930 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.343590] [] ? __lock_is_held+0xa1/0xf0 [ 30.343595] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.343599] [] __xfrm_init_state+0x3e7/0xb30 [ 30.343603] [] xfrm_init_state+0x1a/0x20 [ 30.343608] [] pfkey_add+0x1fb9/0x3470 [ 30.343611] [] ? pfkey_delete+0x360/0x360 [ 30.343615] [] ? pfkey_seq_stop+0x80/0x80 [ 30.343619] [] ? __skb_clone+0x24a/0x7d0 [ 30.343623] [] ? pfkey_delete+0x360/0x360 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.343626] [] pfkey_process+0x61e/0x730 [ 30.343630] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.343634] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.343639] [] pfkey_sendmsg+0x3a9/0x760 [ 30.343642] [] ? pfkey_spdget+0x820/0x820 [ 30.343646] [] sock_sendmsg+0xca/0x110 [ 30.343650] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.343654] [] ? copy_msghdr_from_user+0x550/0x550 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.343659] [] ? __lru_cache_add+0x187/0x250 [ 30.343663] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.343668] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.343672] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.343677] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.343681] [] ? __fget_light+0x158/0x1e0 [ 30.343683] [] ? __fdget+0x18/0x20 [ 30.343687] [] ? sockfd_lookup_light+0x118/0x160 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.343691] [] __sys_sendmsg+0xd6/0x190 [ 30.343694] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.343700] [] ? __do_page_fault+0x5ec/0xd40 [ 30.343704] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.343712] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.343716] [] do_fast_syscall_32+0x2f7/0x890 [ 30.343719] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.343722] [] entry_SYSENTER_compat+0x51/0x60 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344604] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.344608] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.344612] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.344614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.344619] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.344624] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.344628] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344629] Call Trace: [ 30.344633] [] dump_stack+0xc1/0x128 [ 30.344637] [] check_preemption_disabled+0x1d4/0x200 [ 30.344641] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.344644] [] ipcomp_init_state+0x188/0x930 [ 30.344648] [] ? __lock_is_held+0xa1/0xf0 [ 30.344653] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.344657] [] __xfrm_init_state+0x3e7/0xb30 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344660] [] xfrm_init_state+0x1a/0x20 [ 30.344664] [] pfkey_add+0x1fb9/0x3470 [ 30.344668] [] ? pfkey_delete+0x360/0x360 [ 30.344672] [] ? pfkey_seq_stop+0x80/0x80 [ 30.344675] [] ? __skb_clone+0x24a/0x7d0 [ 30.344679] [] ? pfkey_delete+0x360/0x360 [ 30.344682] [] pfkey_process+0x61e/0x730 [ 30.344687] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.344691] [] ? trace_hardirqs_on_caller+0x38b/0x590 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344695] [] pfkey_sendmsg+0x3a9/0x760 [ 30.344699] [] ? pfkey_spdget+0x820/0x820 [ 30.344702] [] sock_sendmsg+0xca/0x110 [ 30.344706] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.344716] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.344720] [] ? __lru_cache_add+0x187/0x250 [ 30.344724] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.344728] [] ? _raw_spin_unlock+0x2c/0x50 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344732] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.344736] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.344739] [] ? __fget_light+0x158/0x1e0 [ 30.344742] [] ? __fdget+0x18/0x20 [ 30.344746] [] ? sockfd_lookup_light+0x118/0x160 [ 30.344749] [] __sys_sendmsg+0xd6/0x190 [ 30.344753] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.344757] [] ? __do_page_fault+0x5ec/0xd40 [ 30.344761] [] compat_SyS_sendmsg+0x2a/0x40 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.344765] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.344768] [] do_fast_syscall_32+0x2f7/0x890 [ 30.344771] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.344775] [] entry_SYSENTER_compat+0x51/0x60 [ 30.345479] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.345483] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.345487] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.345494] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.345499] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.345503] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.345504] Call Trace: [ 30.345508] [] dump_stack+0xc1/0x128 [ 30.345512] [] check_preemption_disabled+0x1d4/0x200 [ 30.345516] [] __this_cpu_preempt_check+0x1c/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345519] [] ipcomp_init_state+0x188/0x930 [ 30.345523] [] ? __lock_is_held+0xa1/0xf0 [ 30.345527] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.345531] [] __xfrm_init_state+0x3e7/0xb30 [ 30.345535] [] xfrm_init_state+0x1a/0x20 [ 30.345539] [] pfkey_add+0x1fb9/0x3470 [ 30.345543] [] ? pfkey_delete+0x360/0x360 [ 30.345546] [] ? pfkey_seq_stop+0x80/0x80 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345550] [] ? __skb_clone+0x24a/0x7d0 [ 30.345553] [] ? pfkey_delete+0x360/0x360 [ 30.345557] [] pfkey_process+0x61e/0x730 [ 30.345561] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.345565] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.345569] [] pfkey_sendmsg+0x3a9/0x760 [ 30.345573] [] ? pfkey_spdget+0x820/0x820 [ 30.345577] [] sock_sendmsg+0xca/0x110 [ 30.345581] [] ___sys_sendmsg+0x6d1/0x7e0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345585] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.345589] [] ? __lru_cache_add+0x187/0x250 [ 30.345593] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.345597] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.345601] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.345605] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.345608] [] ? __fget_light+0x158/0x1e0 [ 30.345611] [] ? __fdget+0x18/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345614] [] ? sockfd_lookup_light+0x118/0x160 [ 30.345618] [] __sys_sendmsg+0xd6/0x190 [ 30.345622] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.345626] [] ? __do_page_fault+0x5ec/0xd40 [ 30.345630] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.345634] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.345637] [] do_fast_syscall_32+0x2f7/0x890 [ 30.345640] [] ? trace_hardirqs_off_thunk+0x1a/0x1c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.345643] [] entry_SYSENTER_compat+0x51/0x60 [ 30.347190] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.347195] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.347199] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.347201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.347207] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.347211] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 executing program executing program [ 30.347216] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.347217] Call Trace: [ 30.347221] [] dump_stack+0xc1/0x128 [ 30.347225] [] check_preemption_disabled+0x1d4/0x200 [ 30.347229] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.347232] [] ipcomp_init_state+0x188/0x930 [ 30.347236] [] ? __lock_is_held+0xa1/0xf0 [ 30.347241] [] ipcomp4_init_state+0xb0/0x7d0 executing program [ 30.347245] [] __xfrm_init_state+0x3e7/0xb30 [ 30.347248] [] xfrm_init_state+0x1a/0x20 [ 30.347253] [] pfkey_add+0x1fb9/0x3470 [ 30.347257] [] ? pfkey_delete+0x360/0x360 [ 30.347260] [] ? pfkey_seq_stop+0x80/0x80 [ 30.347264] [] ? __skb_clone+0x24a/0x7d0 [ 30.347267] [] ? pfkey_delete+0x360/0x360 [ 30.347271] [] pfkey_process+0x61e/0x730 [ 30.347275] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 executing program [ 30.347279] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.347284] [] pfkey_sendmsg+0x3a9/0x760 [ 30.347287] [] ? pfkey_spdget+0x820/0x820 [ 30.347291] [] sock_sendmsg+0xca/0x110 [ 30.347295] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.347298] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.347302] [] ? __lru_cache_add+0x187/0x250 [ 30.347307] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 executing program executing program [ 30.347311] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.347315] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.347319] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.347322] [] ? __fget_light+0x158/0x1e0 [ 30.347325] [] ? __fdget+0x18/0x20 [ 30.347329] [] ? sockfd_lookup_light+0x118/0x160 [ 30.347332] [] __sys_sendmsg+0xd6/0x190 [ 30.347336] [] ? SyS_shutdown+0x1b0/0x1b0 executing program [ 30.347340] [] ? __do_page_fault+0x5ec/0xd40 [ 30.347345] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.347348] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.347352] [] do_fast_syscall_32+0x2f7/0x890 [ 30.347355] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.347358] [] entry_SYSENTER_compat+0x51/0x60 [ 30.348167] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.348172] caller is __this_cpu_preempt_check+0x1c/0x20 executing program [ 30.348175] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.348177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.348183] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.348187] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.348192] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.348193] Call Trace: [ 30.348197] [] dump_stack+0xc1/0x128 executing program [ 30.348201] [] check_preemption_disabled+0x1d4/0x200 [ 30.348205] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.348208] [] ipcomp_init_state+0x188/0x930 [ 30.348212] [] ? __lock_is_held+0xa1/0xf0 [ 30.348216] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.348220] [] __xfrm_init_state+0x3e7/0xb30 [ 30.348224] [] xfrm_init_state+0x1a/0x20 [ 30.348228] [] pfkey_add+0x1fb9/0x3470 [ 30.348232] [] ? pfkey_delete+0x360/0x360 executing program executing program [ 30.348236] [] ? pfkey_seq_stop+0x80/0x80 [ 30.348239] [] ? __skb_clone+0x24a/0x7d0 [ 30.348243] [] ? pfkey_delete+0x360/0x360 [ 30.348246] [] pfkey_process+0x61e/0x730 [ 30.348250] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.348254] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.348258] [] pfkey_sendmsg+0x3a9/0x760 [ 30.348262] [] ? pfkey_spdget+0x820/0x820 executing program [ 30.348266] [] sock_sendmsg+0xca/0x110 [ 30.348269] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.348273] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.348277] [] ? __lru_cache_add+0x187/0x250 [ 30.348281] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.348286] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.348290] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.348294] [] ? handle_mm_fault+0x6ee/0x2530 executing program [ 30.348297] [] ? __fget_light+0x158/0x1e0 [ 30.348300] [] ? __fdget+0x18/0x20 [ 30.348303] [] ? sockfd_lookup_light+0x118/0x160 [ 30.348307] [] __sys_sendmsg+0xd6/0x190 [ 30.348310] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.348315] [] ? __do_page_fault+0x5ec/0xd40 [ 30.348319] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.348322] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.348326] [] do_fast_syscall_32+0x2f7/0x890 executing program [ 30.348329] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.348332] [] entry_SYSENTER_compat+0x51/0x60 [ 30.349049] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 [ 30.349054] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.349057] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.349059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.349065] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 executing program executing program [ 30.349069] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.349074] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.349074] Call Trace: [ 30.349078] [] dump_stack+0xc1/0x128 [ 30.349082] [] check_preemption_disabled+0x1d4/0x200 [ 30.349086] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.349089] [] ipcomp_init_state+0x188/0x930 [ 30.349093] [] ? __lock_is_held+0xa1/0xf0 executing program [ 30.349097] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.349101] [] __xfrm_init_state+0x3e7/0xb30 [ 30.349105] [] xfrm_init_state+0x1a/0x20 [ 30.349109] [] pfkey_add+0x1fb9/0x3470 [ 30.349113] [] ? pfkey_delete+0x360/0x360 [ 30.349116] [] ? pfkey_seq_stop+0x80/0x80 [ 30.349120] [] ? __skb_clone+0x24a/0x7d0 [ 30.349124] [] ? pfkey_delete+0x360/0x360 [ 30.349127] [] pfkey_process+0x61e/0x730 executing program [ 30.349131] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.349135] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.349140] [] pfkey_sendmsg+0x3a9/0x760 [ 30.349143] [] ? pfkey_spdget+0x820/0x820 [ 30.349147] [] sock_sendmsg+0xca/0x110 [ 30.349151] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.349155] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.349159] [] ? __lru_cache_add+0x187/0x250 executing program [ 30.349163] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.349167] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.349171] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 [ 30.349175] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.349178] [] ? __fget_light+0x158/0x1e0 [ 30.349181] [] ? __fdget+0x18/0x20 [ 30.349184] [] ? sockfd_lookup_light+0x118/0x160 [ 30.349188] [] __sys_sendmsg+0xd6/0x190 executing program executing program [ 30.349192] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.349196] [] ? __do_page_fault+0x5ec/0xd40 [ 30.349200] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.349203] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 30.349206] [] do_fast_syscall_32+0x2f7/0x890 [ 30.349210] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.349213] [] entry_SYSENTER_compat+0x51/0x60 [ 30.349909] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller099840/3340 executing program [ 30.349913] caller is __this_cpu_preempt_check+0x1c/0x20 [ 30.349917] CPU: 0 PID: 3340 Comm: syzkaller099840 Not tainted 4.9.68-gfb66dc2 #3 [ 30.349918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.349924] ffff8801c9067668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 30.349928] ffffffff83f42ec0 ffff8801ce530000 0000000000000003 ffff8801c90676a8 [ 30.349933] ffffffff81df7854 ffff8801c90676c0 ffffffff83f42ec0 dffffc0000000000 [ 30.349934] Call Trace: executing program [ 30.349937] [] dump_stack+0xc1/0x128 [ 30.349941] [] check_preemption_disabled+0x1d4/0x200 [ 30.349945] [] __this_cpu_preempt_check+0x1c/0x20 [ 30.349949] [] ipcomp_init_state+0x188/0x930 [ 30.349953] [] ? __lock_is_held+0xa1/0xf0 [ 30.349957] [] ipcomp4_init_state+0xb0/0x7d0 [ 30.349961] [] __xfrm_init_state+0x3e7/0xb30 [ 30.349965] [] xfrm_init_state+0x1a/0x20 [ 30.349969] [] pfkey_add+0x1fb9/0x3470 executing program [ 30.349972] [] ? pfkey_delete+0x360/0x360 [ 30.349976] [] ? pfkey_seq_stop+0x80/0x80 [ 30.349979] [] ? __skb_clone+0x24a/0x7d0 [ 30.349983] [] ? pfkey_delete+0x360/0x360 [ 30.349987] [] pfkey_process+0x61e/0x730 [ 30.349991] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 30.349995] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 30.349999] [] pfkey_sendmsg+0x3a9/0x760 executing program executing program [ 30.350003] [] ? pfkey_spdget+0x820/0x820 [ 30.350006] [] sock_sendmsg+0xca/0x110 [ 30.350010] [] ___sys_sendmsg+0x6d1/0x7e0 [ 30.350014] [] ? copy_msghdr_from_user+0x550/0x550 [ 30.350018] [] ? __lru_cache_add+0x187/0x250 [ 30.350022] [] ? do_huge_pmd_anonymous_page+0xb05/0x10d0 [ 30.350026] [] ? _raw_spin_unlock+0x2c/0x50 [ 30.350030] [] ? do_huge_pmd_anonymous_page+0x2d4/0x10d0 executing program [ 30.350034] [] ? handle_mm_fault+0x6ee/0x2530 [ 30.350037] [] ? __fget_light+0x158/0x1e0 [ 30.350040] [] ? __fdget+0x18/0x20 [ 30.350043] [] ? sockfd_lookup_light+0x118/0x160 [ 30.350047] [] __sys_sendmsg+0xd6/0x190 [ 30.350051] [] ? SyS_shutdown+0x1b0/0x1b0 [ 30.350055] [] ? __do_page_fault+0x5ec/0xd40 [ 30.350059] [] compat_SyS_sendmsg+0x2a/0x40 [ 30.350062] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 executing program [ 30.350065] [] do_fast_syscall_32+0x2f7/0x890 [ 30.350069] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.350072] [] entry_SYSENTER_compat+0x51/0x60 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program