[....] Starting enhanced syslogd: rsyslogd[ 12.445595] audit: type=1400 audit(1515923949.506:4): avc: denied { syslog } for pid=3167 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 51.831353] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 51.840065] caller is __this_cpu_preempt_check+0x1c/0x20 [ 51.845641] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 51.853330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.862655] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 51.870609] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 51.878557] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 51.886621] Call Trace: [ 51.889180] [] dump_stack+0xc1/0x128 [ 51.894522] [] check_preemption_disabled+0x1d4/0x200 [ 51.901249] [] __this_cpu_preempt_check+0x1c/0x20 [ 51.907708] [] ipcomp_init_state+0x188/0x930 [ 51.913748] [] ? __lock_is_held+0xa1/0xf0 [ 51.919525] [] ipcomp6_init_state+0xb5/0x820 [ 51.925570] [] ? __xfrm_init_state+0x363/0xb30 [ 51.931775] [] __xfrm_init_state+0x3e7/0xb30 [ 51.937804] [] xfrm_init_state+0x1a/0x20 [ 51.943496] [] pfkey_add+0x1fb9/0x3470 [ 51.949000] [] ? pfkey_delete+0x360/0x360 [ 51.954763] [] ? pfkey_seq_stop+0x80/0x80 [ 51.960532] [] ? __skb_clone+0x24a/0x7d0 [ 51.966209] [] ? pfkey_delete+0x360/0x360 [ 51.971973] [] pfkey_process+0x61e/0x730 [ 51.977652] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 51.984474] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 51.991293] [] pfkey_sendmsg+0x3a9/0x760 [ 51.996971] [] ? pfkey_spdget+0x820/0x820 [ 52.002736] [] sock_sendmsg+0xca/0x110 [ 52.008239] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.014002] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.020558] [] ? __lock_is_held+0xa1/0xf0 [ 52.026334] [] ? __lru_cache_add+0x187/0x250 [ 52.032358] [] ? lru_cache_add+0xd9/0x1e0 [ 52.038129] [] ? handle_mm_fault+0xb12/0x2530 [ 52.044254] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.050192] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.056305] [] ? __fget_light+0x158/0x1e0 [ 52.062078] [] ? __fdget+0x18/0x20 [ 52.067238] [] ? sockfd_lookup_light+0x118/0x160 [ 52.073611] [] __sys_sendmsg+0xd6/0x190 executing program [ 52.079200] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.084967] [] ? __do_page_fault+0x5ec/0xd40 [ 52.091005] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.096942] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.103495] [] do_fast_syscall_32+0x2f7/0x890 [ 52.109610] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.116244] [] entry_SYSENTER_compat+0x74/0x83 [ 52.125408] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.134240] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.139670] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.147341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.156672] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.164621] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.172603] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.180561] Call Trace: [ 52.183118] [] dump_stack+0xc1/0x128 [ 52.188452] [] check_preemption_disabled+0x1d4/0x200 [ 52.195173] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.201633] [] ipcomp_init_state+0x188/0x930 [ 52.207670] [] ? __lock_is_held+0xa1/0xf0 [ 52.213434] [] ipcomp6_init_state+0xb5/0x820 [ 52.219461] [] ? __xfrm_init_state+0x363/0xb30 [ 52.225660] [] __xfrm_init_state+0x3e7/0xb30 [ 52.231686] [] xfrm_init_state+0x1a/0x20 [ 52.237376] [] pfkey_add+0x1fb9/0x3470 [ 52.242889] [] ? pfkey_delete+0x360/0x360 [ 52.248650] [] ? pfkey_seq_stop+0x80/0x80 [ 52.254423] [] ? __skb_clone+0x24a/0x7d0 [ 52.260097] [] ? pfkey_delete+0x360/0x360 [ 52.265861] [] pfkey_process+0x61e/0x730 [ 52.271546] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.278364] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.285172] [] pfkey_sendmsg+0x3a9/0x760 [ 52.290847] [] ? pfkey_spdget+0x820/0x820 [ 52.296611] [] sock_sendmsg+0xca/0x110 [ 52.302113] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.307876] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.314430] [] ? __lock_is_held+0xa1/0xf0 [ 52.320205] [] ? __lru_cache_add+0x187/0x250 [ 52.326239] [] ? lru_cache_add+0xd9/0x1e0 [ 52.332002] [] ? handle_mm_fault+0xb12/0x2530 [ 52.338114] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.344063] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.350175] [] ? __fget_light+0x158/0x1e0 [ 52.355938] [] ? __fdget+0x18/0x20 [ 52.361110] [] ? sockfd_lookup_light+0x118/0x160 [ 52.367495] [] __sys_sendmsg+0xd6/0x190 [ 52.373086] [] ? SyS_shutdown+0x1b0/0x1b0 executing program [ 52.378854] [] ? __do_page_fault+0x5ec/0xd40 [ 52.384878] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.390814] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.397437] [] do_fast_syscall_32+0x2f7/0x890 [ 52.403548] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.410201] [] entry_SYSENTER_compat+0x74/0x83 [ 52.419095] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.427812] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.433267] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.440943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.450273] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.458234] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.466182] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.474126] Call Trace: [ 52.476685] [] dump_stack+0xc1/0x128 [ 52.482015] [] check_preemption_disabled+0x1d4/0x200 [ 52.488735] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.495207] [] ipcomp_init_state+0x188/0x930 [ 52.501234] [] ? __lock_is_held+0xa1/0xf0 [ 52.506998] [] ipcomp6_init_state+0xb5/0x820 [ 52.513022] [] ? __xfrm_init_state+0x363/0xb30 [ 52.519218] [] __xfrm_init_state+0x3e7/0xb30 [ 52.525249] [] xfrm_init_state+0x1a/0x20 [ 52.530928] [] pfkey_add+0x1fb9/0x3470 [ 52.536430] [] ? pfkey_delete+0x360/0x360 [ 52.542199] [] ? pfkey_seq_stop+0x80/0x80 [ 52.547963] [] ? __skb_clone+0x24a/0x7d0 [ 52.553639] [] ? pfkey_delete+0x360/0x360 [ 52.559400] [] pfkey_process+0x61e/0x730 [ 52.565085] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.571899] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.578706] [] pfkey_sendmsg+0x3a9/0x760 [ 52.584381] [] ? pfkey_spdget+0x820/0x820 [ 52.590146] [] sock_sendmsg+0xca/0x110 [ 52.595657] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.601421] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.607968] [] ? __lock_is_held+0xa1/0xf0 [ 52.613737] [] ? __lru_cache_add+0x187/0x250 [ 52.619761] [] ? lru_cache_add+0xd9/0x1e0 [ 52.625535] [] ? handle_mm_fault+0xb12/0x2530 [ 52.631647] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.637589] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.643700] [] ? __fget_light+0x158/0x1e0 [ 52.649462] [] ? __fdget+0x18/0x20 [ 52.654621] [] ? sockfd_lookup_light+0x118/0x160 [ 52.661003] [] __sys_sendmsg+0xd6/0x190 [ 52.666603] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.672487] [] ? __do_page_fault+0x5ec/0xd40 [ 52.678522] [] compat_SyS_sendmsg+0x2a/0x40 executing program [ 52.684460] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.691008] [] do_fast_syscall_32+0x2f7/0x890 [ 52.697118] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.703764] [] entry_SYSENTER_compat+0x74/0x83 [ 52.712606] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.721336] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.726757] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.734429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.743753] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.751703] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.759655] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.767618] Call Trace: [ 52.770179] [] dump_stack+0xc1/0x128 [ 52.775510] [] check_preemption_disabled+0x1d4/0x200 [ 52.782232] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.788696] [] ipcomp_init_state+0x188/0x930 [ 52.794722] [] ? __lock_is_held+0xa1/0xf0 [ 52.800524] [] ipcomp6_init_state+0xb5/0x820 [ 52.806556] [] ? __xfrm_init_state+0x363/0xb30 [ 52.812753] [] __xfrm_init_state+0x3e7/0xb30 [ 52.818778] [] xfrm_init_state+0x1a/0x20 [ 52.824472] [] pfkey_add+0x1fb9/0x3470 [ 52.829975] [] ? pfkey_delete+0x360/0x360 [ 52.835739] [] ? pfkey_seq_stop+0x80/0x80 [ 52.841503] [] ? __skb_clone+0x24a/0x7d0 [ 52.847191] [] ? pfkey_delete+0x360/0x360 [ 52.852963] [] pfkey_process+0x61e/0x730 [ 52.858640] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.865464] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.872278] [] pfkey_sendmsg+0x3a9/0x760 [ 52.877956] [] ? pfkey_spdget+0x820/0x820 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.883720] [] sock_sendmsg+0xca/0x110 [ 52.889222] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.894983] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.901529] [] ? __lock_is_held+0xa1/0xf0 [ 52.907297] [] ? __lru_cache_add+0x187/0x250 [ 52.913346] [] ? lru_cache_add+0xd9/0x1e0 [ 52.913351] [] ? handle_mm_fault+0xb12/0x2530 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.913360] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.913363] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.913369] [] ? __fget_light+0x158/0x1e0 [ 52.913372] [] ? __fdget+0x18/0x20 [ 52.913378] [] ? sockfd_lookup_light+0x118/0x160 [ 52.913382] [] __sys_sendmsg+0xd6/0x190 [ 52.913385] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.913394] [] ? __do_page_fault+0x5ec/0xd40 [ 52.913401] [] compat_SyS_sendmsg+0x2a/0x40 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.913405] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.913411] [] do_fast_syscall_32+0x2f7/0x890 [ 52.913415] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.913419] [] entry_SYSENTER_compat+0x74/0x83 [ 52.916507] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.916519] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.916525] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.916535] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.916540] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.916545] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.916546] Call Trace: [ 52.916554] [] dump_stack+0xc1/0x128 [ 52.916559] [] check_preemption_disabled+0x1d4/0x200 [ 52.916563] [] __this_cpu_preempt_check+0x1c/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916572] [] ipcomp_init_state+0x188/0x930 [ 52.916579] [] ? __lock_is_held+0xa1/0xf0 [ 52.916584] [] ipcomp6_init_state+0xb5/0x820 [ 52.916587] [] ? __xfrm_init_state+0x363/0xb30 [ 52.916591] [] __xfrm_init_state+0x3e7/0xb30 [ 52.916595] [] xfrm_init_state+0x1a/0x20 [ 52.916601] [] pfkey_add+0x1fb9/0x3470 [ 52.916605] [] ? pfkey_delete+0x360/0x360 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916608] [] ? pfkey_seq_stop+0x80/0x80 [ 52.916614] [] ? __skb_clone+0x24a/0x7d0 [ 52.916618] [] ? pfkey_delete+0x360/0x360 [ 52.916621] [] pfkey_process+0x61e/0x730 [ 52.916625] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.916630] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.916634] [] pfkey_sendmsg+0x3a9/0x760 [ 52.916637] [] ? pfkey_spdget+0x820/0x820 [ 52.916643] [] sock_sendmsg+0xca/0x110 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916647] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.916652] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.916655] [] ? __lock_is_held+0xa1/0xf0 [ 52.916664] [] ? __lru_cache_add+0x187/0x250 [ 52.916667] [] ? lru_cache_add+0xd9/0x1e0 [ 52.916671] [] ? handle_mm_fault+0xb12/0x2530 [ 52.916680] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.916683] [] ? handle_mm_fault+0x6ee/0x2530 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916689] [] ? __fget_light+0x158/0x1e0 [ 52.916692] [] ? __fdget+0x18/0x20 [ 52.916696] [] ? sockfd_lookup_light+0x118/0x160 [ 52.916699] [] __sys_sendmsg+0xd6/0x190 [ 52.916703] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.916711] [] ? __do_page_fault+0x5ec/0xd40 [ 52.916718] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.916722] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.916727] [] do_fast_syscall_32+0x2f7/0x890 [ 52.916730] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.916734] [] entry_SYSENTER_compat+0x74/0x83 [ 52.917918] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.917925] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.917929] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.917931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.917938] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.917943] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.917948] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.917949] Call Trace: [ 52.917954] [] dump_stack+0xc1/0x128 [ 52.917959] [] check_preemption_disabled+0x1d4/0x200 [ 52.917963] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.917969] [] ipcomp_init_state+0x188/0x930 [ 52.917974] [] ? __lock_is_held+0xa1/0xf0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.917978] [] ipcomp6_init_state+0xb5/0x820 [ 52.917981] [] ? __xfrm_init_state+0x363/0xb30 [ 52.917985] [] __xfrm_init_state+0x3e7/0xb30 [ 52.917988] [] xfrm_init_state+0x1a/0x20 [ 52.917993] [] pfkey_add+0x1fb9/0x3470 [ 52.917997] [] ? pfkey_delete+0x360/0x360 [ 52.918000] [] ? pfkey_seq_stop+0x80/0x80 [ 52.918005] [] ? __skb_clone+0x24a/0x7d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.918009] [] ? pfkey_delete+0x360/0x360 [ 52.918012] [] pfkey_process+0x61e/0x730 [ 52.918016] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.918020] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.918024] [] pfkey_sendmsg+0x3a9/0x760 [ 52.918027] [] ? pfkey_spdget+0x820/0x820 [ 52.918032] [] sock_sendmsg+0xca/0x110 [ 52.918036] [] ___sys_sendmsg+0x6d1/0x7e0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.918040] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.918044] [] ? __lock_is_held+0xa1/0xf0 [ 52.918050] [] ? __lru_cache_add+0x187/0x250 [ 52.918053] [] ? lru_cache_add+0xd9/0x1e0 [ 52.918057] [] ? handle_mm_fault+0xb12/0x2530 [ 52.918062] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.918065] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.918069] [] ? __fget_light+0x158/0x1e0 [ 52.918073] [] ? __fdget+0x18/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.918077] [] ? sockfd_lookup_light+0x118/0x160 [ 52.918080] [] __sys_sendmsg+0xd6/0x190 [ 52.918083] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.918089] [] ? __do_page_fault+0x5ec/0xd40 [ 52.918094] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.918098] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.918103] [] do_fast_syscall_32+0x2f7/0x890 [ 52.918107] [] ? trace_hardirqs_off_thunk+0x1a/0x1c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.918111] [] entry_SYSENTER_compat+0x74/0x83 [ 52.919105] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.919111] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.919115] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.919117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.919123] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 52.919128] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.919133] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.919134] Call Trace: [ 52.919139] [] dump_stack+0xc1/0x128 [ 52.919143] [] check_preemption_disabled+0x1d4/0x200 [ 52.919147] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.919152] [] ipcomp_init_state+0x188/0x930 [ 52.919156] [] ? __lock_is_held+0xa1/0xf0 [ 52.919160] [] ipcomp6_init_state+0xb5/0x820 executing program executing program [ 52.919163] [] ? __xfrm_init_state+0x363/0xb30 [ 52.919167] [] __xfrm_init_state+0x3e7/0xb30 [ 52.919170] [] xfrm_init_state+0x1a/0x20 [ 52.919174] [] pfkey_add+0x1fb9/0x3470 [ 52.919178] [] ? pfkey_delete+0x360/0x360 [ 52.919181] [] ? pfkey_seq_stop+0x80/0x80 [ 52.919185] [] ? __skb_clone+0x24a/0x7d0 [ 52.919188] [] ? pfkey_delete+0x360/0x360 [ 52.919192] [] pfkey_process+0x61e/0x730 executing program [ 52.919195] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.919199] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.919203] [] pfkey_sendmsg+0x3a9/0x760 [ 52.919206] [] ? pfkey_spdget+0x820/0x820 [ 52.919211] [] sock_sendmsg+0xca/0x110 [ 52.919215] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.919219] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.919223] [] ? __lock_is_held+0xa1/0xf0 executing program [ 52.919228] [] ? __lru_cache_add+0x187/0x250 [ 52.919231] [] ? lru_cache_add+0xd9/0x1e0 [ 52.919235] [] ? handle_mm_fault+0xb12/0x2530 [ 52.919240] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.919243] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.919246] [] ? __fget_light+0x158/0x1e0 [ 52.919250] [] ? __fdget+0x18/0x20 [ 52.919253] [] ? sockfd_lookup_light+0x118/0x160 executing program [ 52.919257] [] __sys_sendmsg+0xd6/0x190 [ 52.919260] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.919265] [] ? __do_page_fault+0x5ec/0xd40 [ 52.919271] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.919275] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.919279] [] do_fast_syscall_32+0x2f7/0x890 [ 52.919282] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.919286] [] entry_SYSENTER_compat+0x74/0x83 executing program executing program [ 52.921495] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.921502] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.921506] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.921508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.921515] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.921520] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.921525] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 executing program [ 52.921526] Call Trace: [ 52.921531] [] dump_stack+0xc1/0x128 [ 52.921536] [] check_preemption_disabled+0x1d4/0x200 [ 52.921540] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.921545] [] ipcomp_init_state+0x188/0x930 [ 52.921550] [] ? __lock_is_held+0xa1/0xf0 [ 52.921554] [] ipcomp6_init_state+0xb5/0x820 [ 52.921557] [] ? __xfrm_init_state+0x363/0xb30 [ 52.921560] [] __xfrm_init_state+0x3e7/0xb30 executing program [ 52.921564] [] xfrm_init_state+0x1a/0x20 [ 52.921568] [] pfkey_add+0x1fb9/0x3470 [ 52.921572] [] ? pfkey_delete+0x360/0x360 [ 52.921575] [] ? pfkey_seq_stop+0x80/0x80 [ 52.921580] [] ? __skb_clone+0x24a/0x7d0 [ 52.921583] [] ? pfkey_delete+0x360/0x360 [ 52.921587] [] pfkey_process+0x61e/0x730 [ 52.921590] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 executing program executing program [ 52.921594] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.921598] [] pfkey_sendmsg+0x3a9/0x760 [ 52.921602] [] ? pfkey_spdget+0x820/0x820 [ 52.921606] [] sock_sendmsg+0xca/0x110 [ 52.921610] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.921615] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.921618] [] ? __lock_is_held+0xa1/0xf0 [ 52.921624] [] ? __lru_cache_add+0x187/0x250 [ 52.921627] [] ? lru_cache_add+0xd9/0x1e0 executing program [ 52.921630] [] ? handle_mm_fault+0xb12/0x2530 [ 52.921635] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.921639] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.921642] [] ? __fget_light+0x158/0x1e0 [ 52.921645] [] ? __fdget+0x18/0x20 [ 52.921649] [] ? sockfd_lookup_light+0x118/0x160 [ 52.921653] [] __sys_sendmsg+0xd6/0x190 [ 52.921656] [] ? SyS_shutdown+0x1b0/0x1b0 executing program [ 52.921662] [] ? __do_page_fault+0x5ec/0xd40 [ 52.921667] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.921671] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.921675] [] do_fast_syscall_32+0x2f7/0x890 [ 52.921678] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.921682] [] entry_SYSENTER_compat+0x74/0x83 [ 52.922789] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.922795] caller is __this_cpu_preempt_check+0x1c/0x20 executing program [ 52.922799] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 [ 52.922801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.922807] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.922812] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.922817] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.922818] Call Trace: [ 52.922823] [] dump_stack+0xc1/0x128 executing program executing program [ 52.922827] [] check_preemption_disabled+0x1d4/0x200 [ 52.922831] [] __this_cpu_preempt_check+0x1c/0x20 [ 52.922836] [] ipcomp_init_state+0x188/0x930 [ 52.922841] [] ? __lock_is_held+0xa1/0xf0 [ 52.922844] [] ipcomp6_init_state+0xb5/0x820 [ 52.922847] [] ? __xfrm_init_state+0x363/0xb30 [ 52.922851] [] __xfrm_init_state+0x3e7/0xb30 [ 52.922855] [] xfrm_init_state+0x1a/0x20 [ 52.922859] [] pfkey_add+0x1fb9/0x3470 executing program [ 52.922862] [] ? pfkey_delete+0x360/0x360 [ 52.922866] [] ? pfkey_seq_stop+0x80/0x80 [ 52.922870] [] ? __skb_clone+0x24a/0x7d0 [ 52.922874] [] ? pfkey_delete+0x360/0x360 [ 52.922877] [] pfkey_process+0x61e/0x730 [ 52.922881] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.922885] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.922889] [] pfkey_sendmsg+0x3a9/0x760 executing program [ 52.922892] [] ? pfkey_spdget+0x820/0x820 [ 52.922897] [] sock_sendmsg+0xca/0x110 [ 52.922900] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.922905] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.922908] [] ? __lock_is_held+0xa1/0xf0 [ 52.922913] [] ? __lru_cache_add+0x187/0x250 [ 52.922917] [] ? lru_cache_add+0xd9/0x1e0 [ 52.922920] [] ? handle_mm_fault+0xb12/0x2530 executing program [ 52.922925] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.922928] [] ? handle_mm_fault+0x6ee/0x2530 [ 52.922932] [] ? __fget_light+0x158/0x1e0 [ 52.922935] [] ? __fdget+0x18/0x20 [ 52.922939] [] ? sockfd_lookup_light+0x118/0x160 [ 52.922942] [] __sys_sendmsg+0xd6/0x190 [ 52.922945] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.922950] [] ? __do_page_fault+0x5ec/0xd40 [ 52.922955] [] compat_SyS_sendmsg+0x2a/0x40 executing program executing program [ 52.922959] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.922963] [] do_fast_syscall_32+0x2f7/0x890 [ 52.922967] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.922970] [] entry_SYSENTER_compat+0x74/0x83 [ 52.923911] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller718993/3345 [ 52.923916] caller is __this_cpu_preempt_check+0x1c/0x20 [ 52.923919] CPU: 0 PID: 3345 Comm: syzkaller718993 Not tainted 4.9.76-gf0f6293 #22 executing program [ 52.923921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.923928] ffff8801ccbb7658 ffffffff81d93149 0000000000000000 ffffffff83c17e00 [ 52.923932] ffffffff83f44900 ffff8801c91e8000 0000000000000003 ffff8801ccbb7698 [ 52.923937] ffffffff81dfa714 ffff8801ccbb76b0 ffffffff83f44900 dffffc0000000000 [ 52.923938] Call Trace: [ 52.923943] [] dump_stack+0xc1/0x128 [ 52.923947] [] check_preemption_disabled+0x1d4/0x200 [ 52.923952] [] __this_cpu_preempt_check+0x1c/0x20 executing program [ 52.923956] [] ipcomp_init_state+0x188/0x930 [ 52.923960] [] ? __lock_is_held+0xa1/0xf0 [ 52.923963] [] ipcomp6_init_state+0xb5/0x820 [ 52.923967] [] ? __xfrm_init_state+0x363/0xb30 [ 52.923970] [] __xfrm_init_state+0x3e7/0xb30 [ 52.923973] [] xfrm_init_state+0x1a/0x20 [ 52.923977] [] pfkey_add+0x1fb9/0x3470 [ 52.923981] [] ? pfkey_delete+0x360/0x360 executing program [ 52.923984] [] ? pfkey_seq_stop+0x80/0x80 [ 52.923988] [] ? __skb_clone+0x24a/0x7d0 [ 52.923991] [] ? pfkey_delete+0x360/0x360 [ 52.923994] [] pfkey_process+0x61e/0x730 [ 52.923998] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 52.924002] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 52.924006] [] pfkey_sendmsg+0x3a9/0x760 [ 52.924010] [] ? pfkey_spdget+0x820/0x820 [ 52.924014] [] sock_sendmsg+0xca/0x110 executing program executing program [ 52.924018] [] ___sys_sendmsg+0x6d1/0x7e0 [ 52.924022] [] ? copy_msghdr_from_user+0x550/0x550 [ 52.924026] [] ? __lock_is_held+0xa1/0xf0 [ 52.924031] [] ? __lru_cache_add+0x187/0x250 [ 52.924034] [] ? lru_cache_add+0xd9/0x1e0 [ 52.924037] [] ? handle_mm_fault+0xb12/0x2530 [ 52.924042] [] ? _raw_spin_unlock+0x2c/0x50 [ 52.924045] [] ? handle_mm_fault+0x6ee/0x2530 executing program [ 52.924049] [] ? __fget_light+0x158/0x1e0 [ 52.924052] [] ? __fdget+0x18/0x20 [ 52.924056] [] ? sockfd_lookup_light+0x118/0x160 [ 52.924059] [] __sys_sendmsg+0xd6/0x190 [ 52.924062] [] ? SyS_shutdown+0x1b0/0x1b0 [ 52.924066] [] ? __do_page_fault+0x5ec/0xd40 [ 52.924071] [] compat_SyS_sendmsg+0x2a/0x40 [ 52.924075] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 52.924079] [] do_fast_syscall_32+0x2f7/0x890 executing program [ 52.924082] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.924086] [] entry_SYSENTER_compat+0x74/0x83 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program