[....] Starting enhanced syslogd: rsyslogd[ 9.610248] audit: type=1400 audit(1513046784.379:4): avc: denied { syslog } for pid=3166 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-android-49-kasan-gce-386-0,10.128.0.31' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 48.496105] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 48.497340] caller is __this_cpu_preempt_check+0x1c/0x20 [ 48.498066] CPU: 1 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 48.499062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.500279] ffff8801c7427668 ffffffff81d90889 0000000000000001 ffffffff83c17800 [ 48.501411] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 48.502538] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 48.503685] Call Trace: [ 48.504041] [] dump_stack+0xc1/0x128 [ 48.504750] [] check_preemption_disabled+0x1d4/0x200 [ 48.505686] [] __this_cpu_preempt_check+0x1c/0x20 [ 48.506540] [] ipcomp_init_state+0x188/0x930 [ 48.507339] [] ? __lock_is_held+0xa1/0xf0 [ 48.508105] [] ipcomp4_init_state+0xb0/0x7d0 [ 48.508903] [] __xfrm_init_state+0x3e7/0xb30 [ 48.509702] [] xfrm_init_state+0x1a/0x20 [ 48.510458] [] pfkey_add+0x1fb9/0x3470 [ 48.511206] [] ? pfkey_delete+0x360/0x360 [ 48.511971] [] ? pfkey_seq_stop+0x80/0x80 [ 48.512799] [] ? __skb_clone+0x24a/0x7d0 [ 48.513568] [] ? pfkey_delete+0x360/0x360 [ 48.514333] [] pfkey_process+0x61e/0x730 [ 48.515108] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 48.516005] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.516904] [] pfkey_sendmsg+0x3a9/0x760 [ 48.522579] [] ? pfkey_spdget+0x820/0x820 [ 48.528344] [] sock_sendmsg+0xca/0x110 [ 48.533848] [] ___sys_sendmsg+0x6d1/0x7e0 [ 48.539610] [] ? copy_msghdr_from_user+0x550/0x550 [ 48.546152] [] ? __lock_is_held+0xa1/0xf0 [ 48.551917] [] ? __lru_cache_add+0x187/0x250 [ 48.557939] [] ? lru_cache_add+0xd9/0x1e0 [ 48.563702] [] ? handle_mm_fault+0xb12/0x2530 [ 48.569810] [] ? _raw_spin_unlock+0x2c/0x50 [ 48.575745] [] ? handle_mm_fault+0x6ee/0x2530 [ 48.581852] [] ? __fget_light+0x158/0x1e0 [ 48.587612] [] ? __fdget+0x18/0x20 [ 48.592764] [] ? sockfd_lookup_light+0x118/0x160 [ 48.599132] [] __sys_sendmsg+0xd6/0x190 [ 48.604718] [] ? SyS_shutdown+0x1b0/0x1b0 [ 48.610481] [] ? __do_page_fault+0x5ec/0xd40 [ 48.616502] [] compat_SyS_sendmsg+0x2a/0x40 [ 48.622435] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 48.628978] [] do_fast_syscall_32+0x2f7/0x890 [ 48.635086] [] ? trace_hardirqs_off_thunk+0x1a/0x1c executing program [ 48.641716] [] entry_SYSENTER_compat+0x51/0x60 [ 48.648970] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 48.657638] caller is __this_cpu_preempt_check+0x1c/0x20 [ 48.663055] CPU: 1 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 48.670640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.679959] ffff8801c7427668 ffffffff81d90889 0000000000000001 ffffffff83c17800 [ 48.687922] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 48.695872] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 48.703816] Call Trace: [ 48.706371] [] dump_stack+0xc1/0x128 [ 48.711698] [] check_preemption_disabled+0x1d4/0x200 [ 48.718413] [] __this_cpu_preempt_check+0x1c/0x20 [ 48.724872] [] ipcomp_init_state+0x188/0x930 [ 48.730896] [] ? __lock_is_held+0xa1/0xf0 [ 48.736658] [] ipcomp4_init_state+0xb0/0x7d0 [ 48.742680] [] __xfrm_init_state+0x3e7/0xb30 [ 48.748702] [] xfrm_init_state+0x1a/0x20 [ 48.754379] [] pfkey_add+0x1fb9/0x3470 [ 48.759878] [] ? pfkey_delete+0x360/0x360 [ 48.765641] [] ? pfkey_seq_stop+0x80/0x80 [ 48.771405] [] ? __skb_clone+0x24a/0x7d0 [ 48.777080] [] ? pfkey_delete+0x360/0x360 [ 48.782840] [] pfkey_process+0x61e/0x730 [ 48.788514] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 48.795319] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 48.802125] [] pfkey_sendmsg+0x3a9/0x760 [ 48.807800] [] ? pfkey_spdget+0x820/0x820 [ 48.813580] [] sock_sendmsg+0xca/0x110 [ 48.819082] [] ___sys_sendmsg+0x6d1/0x7e0 [ 48.824844] [] ? copy_msghdr_from_user+0x550/0x550 [ 48.831387] [] ? __lock_is_held+0xa1/0xf0 [ 48.837151] [] ? __lru_cache_add+0x187/0x250 [ 48.843171] [] ? lru_cache_add+0xd9/0x1e0 [ 48.848933] [] ? handle_mm_fault+0xb12/0x2530 [ 48.855054] [] ? _raw_spin_unlock+0x2c/0x50 [ 48.860999] [] ? handle_mm_fault+0x6ee/0x2530 [ 48.867110] [] ? __fget_light+0x158/0x1e0 [ 48.872872] [] ? __fdget+0x18/0x20 [ 48.878031] [] ? sockfd_lookup_light+0x118/0x160 [ 48.884397] [] __sys_sendmsg+0xd6/0x190 [ 48.889984] [] ? SyS_shutdown+0x1b0/0x1b0 executing program [ 48.895745] [] ? __do_page_fault+0x5ec/0xd40 [ 48.901768] [] compat_SyS_sendmsg+0x2a/0x40 [ 48.907704] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 48.914248] [] do_fast_syscall_32+0x2f7/0x890 [ 48.920357] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.926987] [] entry_SYSENTER_compat+0x51/0x60 [ 48.934595] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 48.943262] caller is __this_cpu_preempt_check+0x1c/0x20 [ 48.948730] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 48.956316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.965639] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 48.973611] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 48.981566] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 48.989514] Call Trace: [ 48.992067] [] dump_stack+0xc1/0x128 [ 48.997401] [] check_preemption_disabled+0x1d4/0x200 [ 49.004116] [] __this_cpu_preempt_check+0x1c/0x20 [ 49.010571] [] ipcomp_init_state+0x188/0x930 [ 49.016593] [] ? __lock_is_held+0xa1/0xf0 [ 49.022355] [] ipcomp4_init_state+0xb0/0x7d0 [ 49.028376] [] __xfrm_init_state+0x3e7/0xb30 [ 49.034395] [] xfrm_init_state+0x1a/0x20 [ 49.040076] [] pfkey_add+0x1fb9/0x3470 [ 49.045579] [] ? pfkey_delete+0x360/0x360 [ 49.051341] [] ? pfkey_seq_stop+0x80/0x80 [ 49.057103] [] ? __skb_clone+0x24a/0x7d0 [ 49.062779] [] ? pfkey_delete+0x360/0x360 [ 49.068539] [] pfkey_process+0x61e/0x730 [ 49.074215] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 49.081021] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.087825] [] pfkey_sendmsg+0x3a9/0x760 [ 49.093501] [] ? pfkey_spdget+0x820/0x820 [ 49.099265] [] sock_sendmsg+0xca/0x110 [ 49.104764] [] ___sys_sendmsg+0x6d1/0x7e0 [ 49.110525] [] ? copy_msghdr_from_user+0x550/0x550 [ 49.117067] [] ? __lock_is_held+0xa1/0xf0 [ 49.122830] [] ? __lru_cache_add+0x187/0x250 [ 49.128851] [] ? lru_cache_add+0xd9/0x1e0 [ 49.134614] [] ? handle_mm_fault+0xb12/0x2530 [ 49.140724] [] ? _raw_spin_unlock+0x2c/0x50 [ 49.146660] [] ? handle_mm_fault+0x6ee/0x2530 [ 49.152769] [] ? __fget_light+0x158/0x1e0 [ 49.158875] [] ? __fdget+0x18/0x20 [ 49.164028] [] ? sockfd_lookup_light+0x118/0x160 [ 49.170396] [] __sys_sendmsg+0xd6/0x190 [ 49.175986] [] ? SyS_shutdown+0x1b0/0x1b0 [ 49.181748] [] ? __do_page_fault+0x5ec/0xd40 [ 49.187769] [] compat_SyS_sendmsg+0x2a/0x40 executing program [ 49.193705] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 49.200246] [] do_fast_syscall_32+0x2f7/0x890 [ 49.206354] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.212983] [] entry_SYSENTER_compat+0x51/0x60 [ 49.220785] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 49.229456] caller is __this_cpu_preempt_check+0x1c/0x20 [ 49.234894] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 49.242477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.251800] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 49.259749] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 49.267700] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 49.275671] Call Trace: [ 49.278223] [] dump_stack+0xc1/0x128 [ 49.283549] [] check_preemption_disabled+0x1d4/0x200 [ 49.290267] [] __this_cpu_preempt_check+0x1c/0x20 [ 49.296732] [] ipcomp_init_state+0x188/0x930 [ 49.302757] [] ? __lock_is_held+0xa1/0xf0 [ 49.308520] [] ipcomp4_init_state+0xb0/0x7d0 [ 49.314542] [] __xfrm_init_state+0x3e7/0xb30 [ 49.320563] [] xfrm_init_state+0x1a/0x20 [ 49.326237] [] pfkey_add+0x1fb9/0x3470 [ 49.331737] [] ? pfkey_delete+0x360/0x360 [ 49.337497] [] ? pfkey_seq_stop+0x80/0x80 [ 49.343257] [] ? __skb_clone+0x24a/0x7d0 [ 49.348931] [] ? pfkey_delete+0x360/0x360 [ 49.354692] [] pfkey_process+0x61e/0x730 [ 49.360365] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 49.367169] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.373973] [] pfkey_sendmsg+0x3a9/0x760 [ 49.379647] [] ? pfkey_spdget+0x820/0x820 [ 49.385407] [] sock_sendmsg+0xca/0x110 [ 49.390907] [] ___sys_sendmsg+0x6d1/0x7e0 [ 49.396668] [] ? copy_msghdr_from_user+0x550/0x550 [ 49.403209] [] ? __lock_is_held+0xa1/0xf0 [ 49.408971] [] ? __lru_cache_add+0x187/0x250 [ 49.414992] [] ? lru_cache_add+0xd9/0x1e0 [ 49.420757] [] ? handle_mm_fault+0xb12/0x2530 [ 49.426868] [] ? _raw_spin_unlock+0x2c/0x50 [ 49.432801] [] ? handle_mm_fault+0x6ee/0x2530 [ 49.438909] [] ? __fget_light+0x158/0x1e0 [ 49.444674] [] ? __fdget+0x18/0x20 [ 49.449827] [] ? sockfd_lookup_light+0x118/0x160 [ 49.456195] [] __sys_sendmsg+0xd6/0x190 [ 49.461781] [] ? SyS_shutdown+0x1b0/0x1b0 [ 49.467543] [] ? __do_page_fault+0x5ec/0xd40 [ 49.473565] [] compat_SyS_sendmsg+0x2a/0x40 [ 49.479500] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 49.486044] [] do_fast_syscall_32+0x2f7/0x890 [ 49.492152] [] ? trace_hardirqs_off_thunk+0x1a/0x1c executing program [ 49.498782] [] entry_SYSENTER_compat+0x51/0x60 [ 49.506403] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 49.515077] caller is __this_cpu_preempt_check+0x1c/0x20 [ 49.520493] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 49.528075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.537395] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 49.545346] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 49.553297] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 49.561250] Call Trace: [ 49.563802] [] dump_stack+0xc1/0x128 [ 49.569130] [] check_preemption_disabled+0x1d4/0x200 [ 49.575846] [] __this_cpu_preempt_check+0x1c/0x20 [ 49.582303] [] ipcomp_init_state+0x188/0x930 [ 49.588323] [] ? __lock_is_held+0xa1/0xf0 [ 49.594082] [] ipcomp4_init_state+0xb0/0x7d0 [ 49.600101] [] __xfrm_init_state+0x3e7/0xb30 [ 49.606121] [] xfrm_init_state+0x1a/0x20 [ 49.611795] [] pfkey_add+0x1fb9/0x3470 [ 49.617293] [] ? pfkey_delete+0x360/0x360 [ 49.623054] [] ? pfkey_seq_stop+0x80/0x80 [ 49.628815] [] ? __skb_clone+0x24a/0x7d0 [ 49.634490] [] ? pfkey_delete+0x360/0x360 [ 49.640250] [] pfkey_process+0x61e/0x730 [ 49.645926] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 49.652731] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.659536] [] pfkey_sendmsg+0x3a9/0x760 [ 49.665212] [] ? pfkey_spdget+0x820/0x820 [ 49.670974] [] sock_sendmsg+0xca/0x110 [ 49.676474] [] ___sys_sendmsg+0x6d1/0x7e0 [ 49.682234] [] ? copy_msghdr_from_user+0x550/0x550 [ 49.688785] [] ? __lock_is_held+0xa1/0xf0 [ 49.694546] [] ? __lru_cache_add+0x187/0x250 [ 49.700565] [] ? lru_cache_add+0xd9/0x1e0 [ 49.706325] [] ? handle_mm_fault+0xb12/0x2530 [ 49.712436] [] ? _raw_spin_unlock+0x2c/0x50 [ 49.718374] [] ? handle_mm_fault+0x6ee/0x2530 [ 49.724484] [] ? __fget_light+0x158/0x1e0 [ 49.730333] [] ? __fdget+0x18/0x20 [ 49.735487] [] ? sockfd_lookup_light+0x118/0x160 [ 49.741856] [] __sys_sendmsg+0xd6/0x190 executing program [ 49.747443] [] ? SyS_shutdown+0x1b0/0x1b0 [ 49.753204] [] ? __do_page_fault+0x5ec/0xd40 [ 49.759227] [] compat_SyS_sendmsg+0x2a/0x40 [ 49.765174] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 49.771718] [] do_fast_syscall_32+0x2f7/0x890 [ 49.777824] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.784452] [] entry_SYSENTER_compat+0x51/0x60 [ 49.792056] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 49.800720] caller is __this_cpu_preempt_check+0x1c/0x20 [ 49.806158] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 49.813742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.823063] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 49.831018] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 49.838968] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 49.846918] Call Trace: [ 49.849470] [] dump_stack+0xc1/0x128 [ 49.854799] [] check_preemption_disabled+0x1d4/0x200 [ 49.861514] [] __this_cpu_preempt_check+0x1c/0x20 [ 49.868232] [] ipcomp_init_state+0x188/0x930 [ 49.874253] [] ? __lock_is_held+0xa1/0xf0 [ 49.880014] [] ipcomp4_init_state+0xb0/0x7d0 [ 49.886035] [] __xfrm_init_state+0x3e7/0xb30 [ 49.892063] [] xfrm_init_state+0x1a/0x20 [ 49.897745] [] pfkey_add+0x1fb9/0x3470 [ 49.903248] [] ? pfkey_delete+0x360/0x360 [ 49.909008] [] ? pfkey_seq_stop+0x80/0x80 [ 49.914768] [] ? __skb_clone+0x24a/0x7d0 [ 49.920442] [] ? pfkey_delete+0x360/0x360 [ 49.926201] [] pfkey_process+0x61e/0x730 [ 49.931876] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 49.938680] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 49.945483] [] pfkey_sendmsg+0x3a9/0x760 [ 49.951160] [] ? pfkey_spdget+0x820/0x820 [ 49.956930] [] sock_sendmsg+0xca/0x110 [ 49.962432] [] ___sys_sendmsg+0x6d1/0x7e0 [ 49.968193] [] ? copy_msghdr_from_user+0x550/0x550 [ 49.974737] [] ? __lock_is_held+0xa1/0xf0 [ 49.980499] [] ? __lru_cache_add+0x187/0x250 [ 49.986519] [] ? lru_cache_add+0xd9/0x1e0 [ 49.992298] [] ? handle_mm_fault+0xb12/0x2530 [ 49.998410] [] ? _raw_spin_unlock+0x2c/0x50 [ 50.004346] [] ? handle_mm_fault+0x6ee/0x2530 [ 50.010453] [] ? __fget_light+0x158/0x1e0 [ 50.016213] [] ? __fdget+0x18/0x20 [ 50.021366] [] ? sockfd_lookup_light+0x118/0x160 [ 50.027733] [] __sys_sendmsg+0xd6/0x190 [ 50.033329] [] ? SyS_shutdown+0x1b0/0x1b0 [ 50.039096] [] ? __do_page_fault+0x5ec/0xd40 [ 50.045119] [] compat_SyS_sendmsg+0x2a/0x40 executing program [ 50.051053] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 50.057598] [] do_fast_syscall_32+0x2f7/0x890 [ 50.063708] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.070344] [] entry_SYSENTER_compat+0x51/0x60 [ 50.078003] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 50.086678] caller is __this_cpu_preempt_check+0x1c/0x20 [ 50.092097] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 50.099680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.109001] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 50.116952] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 50.124911] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 50.132862] Call Trace: [ 50.135416] [] dump_stack+0xc1/0x128 [ 50.140746] [] check_preemption_disabled+0x1d4/0x200 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.147459] [] __this_cpu_preempt_check+0x1c/0x20 [ 50.153915] [] ipcomp_init_state+0x188/0x930 [ 50.159938] [] ? __lock_is_held+0xa1/0xf0 [ 50.165700] [] ipcomp4_init_state+0xb0/0x7d0 [ 50.171723] [] __xfrm_init_state+0x3e7/0xb30 [ 50.177747] [] xfrm_init_state+0x1a/0x20 [ 50.183425] [] pfkey_add+0x1fb9/0x3470 [ 50.188925] [] ? pfkey_delete+0x360/0x360 [ 50.194701] [] ? pfkey_seq_stop+0x80/0x80 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.194706] [] ? __skb_clone+0x24a/0x7d0 [ 50.194710] [] ? pfkey_delete+0x360/0x360 [ 50.194714] [] pfkey_process+0x61e/0x730 [ 50.194723] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 50.194727] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 50.194732] [] pfkey_sendmsg+0x3a9/0x760 [ 50.194735] [] ? pfkey_spdget+0x820/0x820 [ 50.194740] [] sock_sendmsg+0xca/0x110 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.194744] [] ___sys_sendmsg+0x6d1/0x7e0 [ 50.194748] [] ? copy_msghdr_from_user+0x550/0x550 [ 50.194751] [] ? __lock_is_held+0xa1/0xf0 [ 50.194758] [] ? __lru_cache_add+0x187/0x250 [ 50.194761] [] ? lru_cache_add+0xd9/0x1e0 [ 50.194767] [] ? handle_mm_fault+0xb12/0x2530 [ 50.194773] [] ? _raw_spin_unlock+0x2c/0x50 [ 50.194776] [] ? handle_mm_fault+0x6ee/0x2530 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.194780] [] ? __fget_light+0x158/0x1e0 [ 50.194783] [] ? __fdget+0x18/0x20 [ 50.194786] [] ? sockfd_lookup_light+0x118/0x160 [ 50.194790] [] __sys_sendmsg+0xd6/0x190 [ 50.194794] [] ? SyS_shutdown+0x1b0/0x1b0 [ 50.194800] [] ? __do_page_fault+0x5ec/0xd40 [ 50.194805] [] compat_SyS_sendmsg+0x2a/0x40 [ 50.194809] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.194814] [] do_fast_syscall_32+0x2f7/0x890 [ 50.194817] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.194821] [] entry_SYSENTER_compat+0x51/0x60 [ 50.197234] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 50.197241] caller is __this_cpu_preempt_check+0x1c/0x20 [ 50.197245] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 50.197247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197254] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 [ 50.197258] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 50.197263] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 50.197264] Call Trace: [ 50.197269] [] dump_stack+0xc1/0x128 [ 50.197273] [] check_preemption_disabled+0x1d4/0x200 [ 50.197277] [] __this_cpu_preempt_check+0x1c/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197282] [] ipcomp_init_state+0x188/0x930 [ 50.197287] [] ? __lock_is_held+0xa1/0xf0 [ 50.197292] [] ipcomp4_init_state+0xb0/0x7d0 [ 50.197297] [] __xfrm_init_state+0x3e7/0xb30 [ 50.197300] [] xfrm_init_state+0x1a/0x20 [ 50.197305] [] pfkey_add+0x1fb9/0x3470 [ 50.197309] [] ? pfkey_delete+0x360/0x360 [ 50.197313] [] ? pfkey_seq_stop+0x80/0x80 [ 50.197317] [] ? __skb_clone+0x24a/0x7d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197321] [] ? pfkey_delete+0x360/0x360 [ 50.197325] [] pfkey_process+0x61e/0x730 [ 50.197337] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 50.197341] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 50.197346] [] pfkey_sendmsg+0x3a9/0x760 [ 50.197349] [] ? pfkey_spdget+0x820/0x820 [ 50.197354] [] sock_sendmsg+0xca/0x110 [ 50.197358] [] ___sys_sendmsg+0x6d1/0x7e0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197362] [] ? copy_msghdr_from_user+0x550/0x550 [ 50.197365] [] ? __lock_is_held+0xa1/0xf0 [ 50.197371] [] ? __lru_cache_add+0x187/0x250 [ 50.197375] [] ? lru_cache_add+0xd9/0x1e0 [ 50.197380] [] ? handle_mm_fault+0xb12/0x2530 [ 50.197386] [] ? _raw_spin_unlock+0x2c/0x50 [ 50.197389] [] ? handle_mm_fault+0x6ee/0x2530 [ 50.197393] [] ? __fget_light+0x158/0x1e0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197396] [] ? __fdget+0x18/0x20 [ 50.197399] [] ? sockfd_lookup_light+0x118/0x160 [ 50.197403] [] __sys_sendmsg+0xd6/0x190 [ 50.197407] [] ? SyS_shutdown+0x1b0/0x1b0 [ 50.197413] [] ? __do_page_fault+0x5ec/0xd40 [ 50.197418] [] compat_SyS_sendmsg+0x2a/0x40 [ 50.197422] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 50.197426] [] do_fast_syscall_32+0x2f7/0x890 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.197429] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.197433] [] entry_SYSENTER_compat+0x51/0x60 [ 50.198002] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 50.198006] caller is __this_cpu_preempt_check+0x1c/0x20 [ 50.198010] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 50.198011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.198017] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198022] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 50.198026] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 50.198027] Call Trace: [ 50.198031] [] dump_stack+0xc1/0x128 [ 50.198035] [] check_preemption_disabled+0x1d4/0x200 [ 50.198039] [] __this_cpu_preempt_check+0x1c/0x20 [ 50.198042] [] ipcomp_init_state+0x188/0x930 [ 50.198046] [] ? __lock_is_held+0xa1/0xf0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198050] [] ipcomp4_init_state+0xb0/0x7d0 [ 50.198054] [] __xfrm_init_state+0x3e7/0xb30 [ 50.198058] [] xfrm_init_state+0x1a/0x20 [ 50.198067] [] pfkey_add+0x1fb9/0x3470 [ 50.198071] [] ? pfkey_delete+0x360/0x360 [ 50.198075] [] ? pfkey_seq_stop+0x80/0x80 [ 50.198078] [] ? __skb_clone+0x24a/0x7d0 [ 50.198082] [] ? pfkey_delete+0x360/0x360 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198086] [] pfkey_process+0x61e/0x730 [ 50.198090] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 50.198094] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 50.198098] [] pfkey_sendmsg+0x3a9/0x760 [ 50.198102] [] ? pfkey_spdget+0x820/0x820 [ 50.198105] [] sock_sendmsg+0xca/0x110 [ 50.198109] [] ___sys_sendmsg+0x6d1/0x7e0 [ 50.198113] [] ? copy_msghdr_from_user+0x550/0x550 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198116] [] ? __lock_is_held+0xa1/0xf0 [ 50.198121] [] ? __lru_cache_add+0x187/0x250 [ 50.198124] [] ? lru_cache_add+0xd9/0x1e0 [ 50.198128] [] ? handle_mm_fault+0xb12/0x2530 [ 50.198132] [] ? _raw_spin_unlock+0x2c/0x50 [ 50.198136] [] ? handle_mm_fault+0x6ee/0x2530 [ 50.198139] [] ? __fget_light+0x158/0x1e0 [ 50.198142] [] ? __fdget+0x18/0x20 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198145] [] ? sockfd_lookup_light+0x118/0x160 [ 50.198149] [] __sys_sendmsg+0xd6/0x190 [ 50.198153] [] ? SyS_shutdown+0x1b0/0x1b0 [ 50.198157] [] ? __do_page_fault+0x5ec/0xd40 [ 50.198161] [] compat_SyS_sendmsg+0x2a/0x40 [ 50.198164] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 50.198168] [] do_fast_syscall_32+0x2f7/0x890 [ 50.198171] [] ? trace_hardirqs_off_thunk+0x1a/0x1c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.198175] [] entry_SYSENTER_compat+0x51/0x60 [ 50.199117] BUG: using __this_cpu_read() in preemptible [00000000] code: syzkaller169765/3338 [ 50.199122] caller is __this_cpu_preempt_check+0x1c/0x20 [ 50.199126] CPU: 0 PID: 3338 Comm: syzkaller169765 Not tainted 4.9.68-gfb66dc2 #3 [ 50.199128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.199133] ffff8801c7427668 ffffffff81d90889 0000000000000000 ffffffff83c17800 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.199138] ffffffff83f42ec0 ffff8801c7418000 0000000000000003 ffff8801c74276a8 [ 50.199142] ffffffff81df7854 ffff8801c74276c0 ffffffff83f42ec0 dffffc0000000000 [ 50.199143] Call Trace: [ 50.199147] [] dump_stack+0xc1/0x128 [ 50.199152] [] check_preemption_disabled+0x1d4/0x200 [ 50.199155] [] __this_cpu_preempt_check+0x1c/0x20 [ 50.199159] [] ipcomp_init_state+0x188/0x930 [ 50.199163] [] ? __lock_is_held+0xa1/0xf0 [ 50.199168] [] ipcomp4_init_state+0xb0/0x7d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.199172] [] __xfrm_init_state+0x3e7/0xb30 [ 50.199176] [] xfrm_init_state+0x1a/0x20 [ 50.199180] [] pfkey_add+0x1fb9/0x3470 [ 50.199184] [] ? pfkey_delete+0x360/0x360 [ 50.199187] [] ? pfkey_seq_stop+0x80/0x80 [ 50.199191] [] ? __skb_clone+0x24a/0x7d0 [ 50.199195] [] ? pfkey_delete+0x360/0x360 [ 50.199199] [] pfkey_process+0x61e/0x730 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 50.199203] [] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 50.199206] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 50.199211] [] pfkey_sendmsg+0x3a9/0x760 [ 50.199214] [] ? pfkey_spdget+0x820/0x820 [ 50.199218] [] sock_sendmsg+0xca/0x110 [ 50.199221] [] ___sys_sendmsg+0x6d1/0x7e0 [ 50.199225] [] ? copy_msghdr_from_user+0x550/0x550 [ 50.199229] [] ? __lock_is_held+0xa1/0xf0 executing program executing program executing program executing program executing program executing program [ 50.199233] [] ? __lru_cache_add+0x187/0x250 [ 50.199237] [] ? lru_cache_add+0xd9/0x1e0 [ 50.199241] [] ? handle_mm_fault+0xb12/0x2530 [ 50.199245] [] ? _raw_spin_unlock+0x2c/0x50 [ 50.199249] [] ? handle_mm_fault+0x6ee/0x2530 [ 50.199252] [] ? __fget_light+0x158/0x1e0 [ 50.199255] [] ? __fdget+0x18/0x20 [ 50.199259] [] ? sockfd_lookup_light+0x118/0x160 executing program executing program [ 50.199263] [] __sys_sendmsg+0xd6/0x190 [ 50.199267] [] ? SyS_shutdown+0x1b0/0x1b0 [ 50.199271] [] ? __do_page_fault+0x5ec/0xd40 [ 50.199275] [] compat_SyS_sendmsg+0x2a/0x40 [ 50.199279] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 50.199282] [] do_fast_syscall_32+0x2f7/0x890 [ 50.199285] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.199289] [] entry_SYSENTER_compat+0x51/0x60 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program