BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1342 in_atomic(): 0, irqs_disabled(): 1, pid: 15967, name: syz-executor0 2 locks held by syz-executor0/15967: #0: 0000000090f7ed81 (remove_cache_srcu){....}, at: quarantine_reduce+0x3f/0x170 mm/kasan/quarantine.c:261 #1: 00000000e3911d29 (&mm->mmap_sem){++++}, at: __do_page_fault+0x381/0xe40 arch/x86/mm/fault.c:1328 irq event stamp: 7458 hardirqs last enabled at (7457): [] qlink_free mm/kasan/quarantine.c:150 [inline] hardirqs last enabled at (7457): [] qlist_free_all+0xe9/0x160 mm/kasan/quarantine.c:166 hardirqs last disabled at (7458): [] error_entry+0x76/0xd0 arch/x86/entry/entry_64.S:1262 softirqs last enabled at (7414): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (7375): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (7375): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 15967 Comm: syz-executor0 Not tainted 4.17.0-rc3+ #27 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 __do_page_fault+0x3ae/0xe40 arch/x86/mm/fault.c:1342 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1474 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160 RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9731 RSP: 0018:ffff8801d2c07398 EFLAGS: 00010002 RAX: ffff8801ca0ded00 RBX: 0000000000000286 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffea000765901f RDI: 0000000000000286 RBP: ffff8801d2c076c0 R08: ffff8801c7b849b8 R09: 0000000000000006 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801da988dc0 R14: ffff8801ca0ded00 R15: ffffffff88d18b60 quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259 kasan_kmalloc+0x99/0xe0 mm/kasan/kasan.c:538 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:490 slab_post_alloc_hook mm/slab.h:444 [inline] slab_alloc_node mm/slab.c:3335 [inline] kmem_cache_alloc_node_trace+0x139/0x770 mm/slab.c:3661 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node+0x33/0x70 mm/slab.c:3689 kmalloc_node include/linux/slab.h:554 [inline] kvmalloc_node+0xbf/0x100 mm/util.c:421 kvmalloc include/linux/mm.h:550 [inline] kvzalloc include/linux/mm.h:558 [inline] kvm_alloc_memslots arch/x86/kvm/../../../virt/kvm/kvm_main.c:503 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:637 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:3162 [inline] kvm_dev_ioctl+0xf5c/0x1b20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3214 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x1cf/0x16a0 fs/ioctl.c:684 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701 __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455979 RSP: 002b:00007fb8d77fec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb8d77ff6d4 RCX: 0000000000455979 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000016 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000251 R14: 00000000006f7838 R15: 0000000000000000 BUG: unable to handle kernel paging request at 0000000000005689 PGD 1b895a067 P4D 1b895a067 PUD 1b895b067 PMD 0 Oops: 0002 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 15967 Comm: syz-executor0 Tainted: G W 4.17.0-rc3+ #27 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9731 RSP: 0018:ffff8801d2c07398 EFLAGS: 00010002 RAX: ffff8801ca0ded00 RBX: 0000000000000286 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffea000765901f RDI: 0000000000000286 RBP: ffff8801d2c076c0 R08: ffff8801c7b849b8 R09: 0000000000000006 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801da988dc0 R14: ffff8801ca0ded00 R15: ffffffff88d18b60 FS: 00007fb8d77ff700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000005689 CR3: 00000001c008a000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259 kasan_kmalloc+0x99/0xe0 mm/kasan/kasan.c:538 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:490 slab_post_alloc_hook mm/slab.h:444 [inline] slab_alloc_node mm/slab.c:3335 [inline] kmem_cache_alloc_node_trace+0x139/0x770 mm/slab.c:3661 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node+0x33/0x70 mm/slab.c:3689 kmalloc_node include/linux/slab.h:554 [inline] kvmalloc_node+0xbf/0x100 mm/util.c:421 kvmalloc include/linux/mm.h:550 [inline] kvzalloc include/linux/mm.h:558 [inline] kvm_alloc_memslots arch/x86/kvm/../../../virt/kvm/kvm_main.c:503 [inline] kvm_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:637 [inline] kvm_dev_ioctl_create_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:3162 [inline] kvm_dev_ioctl+0xf5c/0x1b20 arch/x86/kvm/../../../virt/kvm/kvm_main.c:3214 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x1cf/0x16a0 fs/ioctl.c:684 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701 __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455979 RSP: 002b:00007fb8d77fec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb8d77ff6d4 RCX: 0000000000455979 RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000016 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000251 R14: 00000000006f7838 R15: 0000000000000000 Code: 8b a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 48 89 4c 24 08 59 <0f> 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 99 18 03 00 00 RIP: vmx_vcpu_run+0x95f/0x25f0 arch/x86/kvm/vmx.c:9731 RSP: ffff8801d2c07398 CR2: 0000000000005689 ---[ end trace 14e2f23a31a76b6f ]---