[....] Starting enhanced syslogd: rsyslogd[ 14.956356] audit: type=1400 audit(1552751108.698:4): avc: denied { syslog } for pid=1923 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 28.474240] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2123 [ 28.484206] caller is __this_cpu_preempt_check+0x1d/0x30 [ 28.490090] CPU: 1 PID: 2123 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 28.497448] 0000000000000000 e31abba8a56804ee ffff8801cf7af7c8 ffffffff81aad1a1 [ 28.505611] ffff8801cf0e2f80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 28.513870] 0000000000000001 ffff8801cf7af808 ffffffff81b0ad83 ffff8800b7351b80 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.522324] Call Trace: [ 28.525005] [] dump_stack+0xc1/0x120 [ 28.530728] [] check_preemption_disabled+0x1d3/0x200 [ 28.538918] [] __this_cpu_preempt_check+0x1d/0x30 [ 28.547065] [] tcp_try_coalesce+0x245/0x510 [ 28.553846] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 28.561269] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.568814] [] tcp_queue_rcv+0x127/0x6f0 [ 28.575405] [] tcp_send_rcvq+0x3de/0x4a0 [ 28.581383] [] ? tcp_rcv_established+0x2070/0x2070 [ 28.588228] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 28.595512] [] ? lock_sock_nested+0x90/0x120 [ 28.601927] [] ? trace_hardirqs_on+0xd/0x10 [ 28.608078] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 28.614497] [] tcp_sendmsg+0x2332/0x2ab0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.621006] [] ? trace_hardirqs_on+0x10/0x10 [ 28.627071] [] ? sock_has_perm+0x2a8/0x400 [ 28.633232] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 28.641154] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 28.652781] [] ? tcp_sendpage+0x17c0/0x17c0 [ 28.659453] [] ? check_preemption_disabled+0x3c/0x200 [ 28.666683] [] ? check_preemption_disabled+0x3c/0x200 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.674308] [] ? inet_sendmsg+0x143/0x4d0 [ 28.680580] [] inet_sendmsg+0x202/0x4d0 [ 28.687078] [] ? inet_sendmsg+0x76/0x4d0 [ 28.697051] [] ? inet_recvmsg+0x4d0/0x4d0 [ 28.703543] [] sock_sendmsg+0xbe/0x110 [ 28.709273] [] sock_write_iter+0x235/0x3d0 [ 28.715244] [] ? sock_sendmsg+0x110/0x110 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.721231] [] ? iov_iter_init+0xb3/0x1e0 [ 28.727133] [] __vfs_write+0x2e8/0x3d0 [ 28.733111] [] ? __vfs_read+0x3c0/0x3c0 [ 28.738925] [] ? selinux_file_permission+0x2f5/0x450 [ 28.745892] [] ? rw_verify_area+0x103/0x2f0 [ 28.752749] [] vfs_write+0x182/0x4e0 [ 28.758838] [] SyS_write+0xdc/0x1c0 [ 28.764441] [] ? SyS_read+0x1c0/0x1c0 executing program executing program executing program executing program executing program executing program executing program [ 28.770185] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 28.777031] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 28.799803] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2312 [ 28.808814] caller is __this_cpu_preempt_check+0x1d/0x30 [ 28.814467] CPU: 1 PID: 2312 Comm: syz-executor229 Not tainted 4.4.174+ #4 executing program executing program executing program executing program executing program executing program executing program executing program [ 28.821740] 0000000000000000 4aece7a49506b020 ffff8801d417f7c8 ffffffff81aad1a1 [ 28.830670] ffff8800b6845f00 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 28.839906] 0000000000000001 ffff8801d417f808 ffffffff81b0ad83 ffff8801d4a5b680 [ 28.848099] Call Trace: [ 28.850709] [] dump_stack+0xc1/0x120 [ 28.856338] [] check_preemption_disabled+0x1d3/0x200 [ 28.863185] [] __this_cpu_preempt_check+0x1d/0x30 [ 28.870040] [] tcp_try_coalesce+0x245/0x510 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.876107] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 28.883246] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 28.890353] [] tcp_queue_rcv+0x127/0x6f0 [ 28.896177] [] tcp_send_rcvq+0x3de/0x4a0 [ 28.902227] [] ? tcp_rcv_established+0x2070/0x2070 [ 28.909212] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 28.916059] [] ? lock_sock_nested+0x90/0x120 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.922291] [] ? trace_hardirqs_on+0xd/0x10 [ 28.928285] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 28.934816] [] tcp_sendmsg+0x2332/0x2ab0 [ 28.940617] [] ? trace_hardirqs_on+0x10/0x10 [ 28.946680] [] ? sock_has_perm+0x2a8/0x400 [ 28.953035] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 28.961010] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 28.967955] [] ? tcp_sendpage+0x17c0/0x17c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 28.974102] [] ? check_preemption_disabled+0x3c/0x200 [ 28.981219] [] ? check_preemption_disabled+0x3c/0x200 [ 28.988078] [] ? inet_sendmsg+0x143/0x4d0 [ 28.993883] [] inet_sendmsg+0x202/0x4d0 [ 28.999508] [] ? inet_sendmsg+0x76/0x4d0 [ 29.005217] [] ? inet_recvmsg+0x4d0/0x4d0 [ 29.011194] [] sock_sendmsg+0xbe/0x110 [ 29.016905] [] sock_write_iter+0x235/0x3d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.022819] [] ? sock_sendmsg+0x110/0x110 [ 29.028789] [] ? iov_iter_init+0xb3/0x1e0 [ 29.034674] [] __vfs_write+0x2e8/0x3d0 [ 29.040215] [] ? __vfs_read+0x3c0/0x3c0 [ 29.045852] [] ? selinux_file_permission+0x2f5/0x450 [ 29.052615] [] ? rw_verify_area+0x103/0x2f0 [ 29.058966] [] vfs_write+0x182/0x4e0 [ 29.064332] [] SyS_write+0xdc/0x1c0 [ 29.069610] [] ? SyS_read+0x1c0/0x1c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.075063] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 29.081556] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.824909] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2623 [ 29.834336] caller is __this_cpu_preempt_check+0x1d/0x30 [ 29.840081] CPU: 1 PID: 2623 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 29.847531] 0000000000000000 31d2a5f0e08e10dc ffff8801d4a377c8 ffffffff81aad1a1 [ 29.856259] ffff8801d3e717c0 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 29.866343] 0000000000000001 ffff8801d4a37808 ffffffff81b0ad83 ffff8801d4202c80 [ 29.874622] Call Trace: [ 29.877518] [] dump_stack+0xc1/0x120 [ 29.883352] [] check_preemption_disabled+0x1d3/0x200 [ 29.891220] [] __this_cpu_preempt_check+0x1d/0x30 [ 29.902455] [] tcp_try_coalesce+0x245/0x510 [ 29.908704] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 executing program executing program [ 29.918505] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 29.926771] [] tcp_queue_rcv+0x127/0x6f0 [ 29.932730] [] tcp_send_rcvq+0x3de/0x4a0 [ 29.939032] [] ? tcp_rcv_established+0x2070/0x2070 [ 29.946771] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 29.954213] [] ? lock_sock_nested+0x90/0x120 [ 29.960543] [] ? trace_hardirqs_on+0xd/0x10 [ 29.966515] [] ? __local_bh_enable_ip+0x6a/0xe0 executing program executing program executing program executing program executing program executing program executing program [ 29.973298] [] tcp_sendmsg+0x2332/0x2ab0 [ 29.979274] [] ? trace_hardirqs_on+0x10/0x10 [ 29.985431] [] ? sock_has_perm+0x2a8/0x400 [ 29.991368] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 30.000163] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 30.007241] [] ? tcp_sendpage+0x17c0/0x17c0 [ 30.013398] [] ? check_preemption_disabled+0x3c/0x200 executing program executing program executing program [ 30.020725] [] ? check_preemption_disabled+0x3c/0x200 [ 30.027812] [] ? inet_sendmsg+0x143/0x4d0 [ 30.034107] [] inet_sendmsg+0x202/0x4d0 [ 30.039904] [] ? inet_sendmsg+0x76/0x4d0 [ 30.045617] [] ? inet_recvmsg+0x4d0/0x4d0 [ 30.051559] [] sock_sendmsg+0xbe/0x110 [ 30.057192] [] sock_write_iter+0x235/0x3d0 [ 30.063476] [] ? sock_sendmsg+0x110/0x110 [ 30.069509] [] ? iov_iter_init+0xb3/0x1e0 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.075755] [] __vfs_write+0x2e8/0x3d0 [ 30.081558] [] ? __vfs_read+0x3c0/0x3c0 [ 30.087185] [] ? selinux_file_permission+0x2f5/0x450 [ 30.093943] [] ? rw_verify_area+0x103/0x2f0 [ 30.099916] [] vfs_write+0x182/0x4e0 [ 30.105279] [] SyS_write+0xdc/0x1c0 [ 30.110567] [] ? SyS_read+0x1c0/0x1c0 [ 30.116020] [] ? lockdep_sys_exit_thunk+0x12/0x14 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.122526] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 30.136700] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2702 [ 30.145969] caller is __this_cpu_preempt_check+0x1d/0x30 [ 30.151431] CPU: 1 PID: 2702 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 30.158523] 0000000000000000 5c045987d5d95a9a ffff8801d3eaf7c8 ffffffff81aad1a1 [ 30.166613] ffff8801d3fcc740 0000000000000001 ffffffff82a861e0 ffffffff8292c040 executing program executing program [ 30.174687] 0000000000000001 ffff8801d3eaf808 ffffffff81b0ad83 ffff8801d4202000 [ 30.182857] Call Trace: [ 30.185447] [] dump_stack+0xc1/0x120 [ 30.188906] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2726 [ 30.188917] caller is __this_cpu_preempt_check+0x1d/0x30 [ 30.205309] [] check_preemption_disabled+0x1d3/0x200 [ 30.239664] [] __this_cpu_preempt_check+0x1d/0x30 [ 30.246145] [] tcp_try_coalesce+0x245/0x510 [ 30.252322] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 30.259595] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 30.266686] [] tcp_queue_rcv+0x127/0x6f0 [ 30.273955] [] tcp_send_rcvq+0x3de/0x4a0 [ 30.279768] [] ? tcp_rcv_established+0x2070/0x2070 [ 30.287329] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 30.294431] [] ? lock_sock_nested+0x90/0x120 [ 30.301147] [] ? trace_hardirqs_on+0xd/0x10 [ 30.307207] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 30.313601] [] tcp_sendmsg+0x2332/0x2ab0 [ 30.319389] [] ? trace_hardirqs_on+0x10/0x10 [ 30.325522] [] ? sock_has_perm+0x2a8/0x400 [ 30.331569] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 30.339899] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 30.346733] [] ? tcp_sendpage+0x17c0/0x17c0 [ 30.352955] [] ? check_preemption_disabled+0x3c/0x200 [ 30.360278] [] ? check_preemption_disabled+0x3c/0x200 [ 30.367463] [] ? inet_sendmsg+0x143/0x4d0 [ 30.375862] [] inet_sendmsg+0x202/0x4d0 [ 30.381665] [] ? inet_sendmsg+0x76/0x4d0 [ 30.387370] [] ? inet_recvmsg+0x4d0/0x4d0 [ 30.393498] [] sock_sendmsg+0xbe/0x110 [ 30.399913] [] sock_write_iter+0x235/0x3d0 [ 30.406147] [] ? sock_sendmsg+0x110/0x110 [ 30.412617] [] ? iov_iter_init+0xb3/0x1e0 [ 30.418986] [] __vfs_write+0x2e8/0x3d0 [ 30.424508] [] ? __vfs_read+0x3c0/0x3c0 [ 30.430383] [] ? selinux_file_permission+0x2f5/0x450 executing program [ 30.437299] [] ? rw_verify_area+0x103/0x2f0 [ 30.443870] [] vfs_write+0x182/0x4e0 [ 30.449858] [] SyS_write+0xdc/0x1c0 [ 30.455926] [] ? SyS_read+0x1c0/0x1c0 [ 30.461898] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 30.469013] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 30.475884] CPU: 0 PID: 2726 Comm: syz-executor229 Not tainted 4.4.174+ #4 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.484360] 0000000000000000 0d8c77b3de9f238a ffff8800b6a577c8 ffffffff81aad1a1 [ 30.494002] ffff8800b65e97c0 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 30.502740] 0000000000000002 ffff8800b6a57808 ffffffff81b0ad83 ffff8801d4154280 [ 30.511755] Call Trace: [ 30.514519] [] dump_stack+0xc1/0x120 [ 30.521130] [] check_preemption_disabled+0x1d3/0x200 [ 30.528384] [] __this_cpu_preempt_check+0x1d/0x30 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.535828] [] tcp_try_coalesce+0x245/0x510 [ 30.543030] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 30.551594] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 30.560972] [] tcp_queue_rcv+0x127/0x6f0 [ 30.566963] [] tcp_send_rcvq+0x3de/0x4a0 [ 30.573550] [] ? tcp_rcv_established+0x2070/0x2070 [ 30.580591] [] ? trace_hardirqs_on_caller+0x385/0x5a0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.587788] [] ? lock_sock_nested+0x90/0x120 [ 30.594437] [] ? trace_hardirqs_on+0xd/0x10 [ 30.602172] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 30.608672] [] tcp_sendmsg+0x2332/0x2ab0 [ 30.614489] [] ? trace_hardirqs_on+0x10/0x10 [ 30.622568] [] ? sock_has_perm+0x2a8/0x400 [ 30.629385] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.637929] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 30.645578] [] ? tcp_sendpage+0x17c0/0x17c0 [ 30.651730] [] ? check_preemption_disabled+0x3c/0x200 [ 30.658703] [] ? check_preemption_disabled+0x3c/0x200 [ 30.665547] [] ? inet_sendmsg+0x143/0x4d0 [ 30.671529] [] inet_sendmsg+0x202/0x4d0 [ 30.677629] [] ? inet_sendmsg+0x76/0x4d0 [ 30.683523] [] ? inet_recvmsg+0x4d0/0x4d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.689601] [] sock_sendmsg+0xbe/0x110 [ 30.695147] [] sock_write_iter+0x235/0x3d0 [ 30.701210] [] ? sock_sendmsg+0x110/0x110 [ 30.707045] [] ? iov_iter_init+0xb3/0x1e0 [ 30.712850] [] __vfs_write+0x2e8/0x3d0 [ 30.718565] [] ? __vfs_read+0x3c0/0x3c0 [ 30.724193] [] ? selinux_file_permission+0x2f5/0x450 [ 30.731224] [] ? rw_verify_area+0x103/0x2f0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 30.737404] [] vfs_write+0x182/0x4e0 [ 30.742866] [] SyS_write+0xdc/0x1c0 [ 30.748154] [] ? SyS_read+0x1c0/0x1c0 [ 30.753797] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 30.760942] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 30.779119] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/2908 executing program executing program [ 30.788457] caller is __this_cpu_preempt_check+0x1d/0x30 [ 30.794351] CPU: 0 PID: 2908 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 30.801702] 0000000000000000 a6e5bbfd74241e0e ffff8800b21277c8 ffffffff81aad1a1 [ 30.809768] ffff8801d43e5f00 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 30.818043] 0000000000000002 ffff8800b2127808 ffffffff81b0ad83 ffff8801d4154000 [ 30.826122] Call Trace: [ 30.828718] [] dump_stack+0xc1/0x120 executing program executing program executing program executing program executing program executing program executing program executing program [ 30.834082] [] check_preemption_disabled+0x1d3/0x200 [ 30.843700] [] __this_cpu_preempt_check+0x1d/0x30 [ 30.850752] [] tcp_try_coalesce+0x245/0x510 [ 30.857897] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 30.865883] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 30.873432] [] tcp_queue_rcv+0x127/0x6f0 [ 30.879533] [] tcp_send_rcvq+0x3de/0x4a0 executing program executing program [ 30.885450] [] ? tcp_rcv_established+0x2070/0x2070 [ 30.892222] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 30.899535] [] ? lock_sock_nested+0x90/0x120 [ 30.906107] [] ? trace_hardirqs_on+0xd/0x10 [ 30.912175] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 30.919352] [] tcp_sendmsg+0x2332/0x2ab0 [ 30.926199] [] ? trace_hardirqs_on+0x10/0x10 [ 30.934014] [] ? sock_has_perm+0x2a8/0x400 [ 30.941666] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 30.949403] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 30.956252] [] ? tcp_sendpage+0x17c0/0x17c0 [ 30.962408] [] ? check_preemption_disabled+0x3c/0x200 [ 30.973516] [] ? check_preemption_disabled+0x3c/0x200 [ 30.980708] [] ? inet_sendmsg+0x143/0x4d0 [ 30.987491] [] inet_sendmsg+0x202/0x4d0 [ 30.993486] [] ? inet_sendmsg+0x76/0x4d0 [ 30.999473] [] ? inet_recvmsg+0x4d0/0x4d0 [ 31.005381] [] sock_sendmsg+0xbe/0x110 [ 31.011044] [] sock_write_iter+0x235/0x3d0 [ 31.016943] [] ? sock_sendmsg+0x110/0x110 [ 31.022931] [] ? iov_iter_init+0xb3/0x1e0 [ 31.029075] [] __vfs_write+0x2e8/0x3d0 [ 31.034888] [] ? __vfs_read+0x3c0/0x3c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.041310] [] ? selinux_file_permission+0x2f5/0x450 [ 31.048171] [] ? rw_verify_area+0x103/0x2f0 [ 31.054156] [] vfs_write+0x182/0x4e0 [ 31.059699] [] SyS_write+0xdc/0x1c0 [ 31.065071] [] ? SyS_read+0x1c0/0x1c0 [ 31.070531] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 31.077056] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program [ 31.100814] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/3064 [ 31.109490] caller is __this_cpu_preempt_check+0x1d/0x30 [ 31.115107] CPU: 0 PID: 3064 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 31.122388] 0000000000000000 c69b0edc35b0c265 ffff8801d3d5f7c8 ffffffff81aad1a1 [ 31.130797] ffff8801d3d24740 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 31.138996] 0000000000000002 ffff8801d3d5f808 ffffffff81b0ad83 ffff8801d4155900 [ 31.147196] Call Trace: executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.149966] [] dump_stack+0xc1/0x120 [ 31.155420] [] check_preemption_disabled+0x1d3/0x200 [ 31.162179] [] __this_cpu_preempt_check+0x1d/0x30 [ 31.168681] [] tcp_try_coalesce+0x245/0x510 [ 31.176229] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 31.183250] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 31.190704] [] tcp_queue_rcv+0x127/0x6f0 executing program executing program [ 31.196597] [] tcp_send_rcvq+0x3de/0x4a0 [ 31.202668] [] ? tcp_rcv_established+0x2070/0x2070 [ 31.209620] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 31.216471] [] ? lock_sock_nested+0x90/0x120 [ 31.222639] [] ? trace_hardirqs_on+0xd/0x10 [ 31.229297] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 31.236256] [] tcp_sendmsg+0x2332/0x2ab0 [ 31.242407] [] ? trace_hardirqs_on+0x10/0x10 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.248757] [] ? sock_has_perm+0x2a8/0x400 [ 31.255361] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 31.270471] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 31.277237] [] ? tcp_sendpage+0x17c0/0x17c0 [ 31.288459] [] ? check_preemption_disabled+0x3c/0x200 [ 31.295666] [] ? check_preemption_disabled+0x3c/0x200 [ 31.302709] [] ? inet_sendmsg+0x143/0x4d0 [ 31.308608] [] inet_sendmsg+0x202/0x4d0 [ 31.314497] [] ? inet_sendmsg+0x76/0x4d0 [ 31.320393] [] ? inet_recvmsg+0x4d0/0x4d0 [ 31.326210] [] sock_sendmsg+0xbe/0x110 [ 31.332107] [] sock_write_iter+0x235/0x3d0 [ 31.338442] [] ? sock_sendmsg+0x110/0x110 [ 31.344245] [] ? iov_iter_init+0xb3/0x1e0 [ 31.350411] [] __vfs_write+0x2e8/0x3d0 [ 31.356212] [] ? __vfs_read+0x3c0/0x3c0 [ 31.361841] [] ? selinux_file_permission+0x2f5/0x450 [ 31.368950] [] ? rw_verify_area+0x103/0x2f0 [ 31.375209] [] vfs_write+0x182/0x4e0 [ 31.380672] [] SyS_write+0xdc/0x1c0 [ 31.385955] [] ? SyS_read+0x1c0/0x1c0 [ 31.391439] [] ? lockdep_sys_exit_thunk+0x12/0x14 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.397936] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.452717] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/3255 [ 31.462208] caller is __this_cpu_preempt_check+0x1d/0x30 [ 31.468320] CPU: 1 PID: 3255 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 31.475351] 0000000000000000 00b211fe3fdb7cf3 ffff8801d37977c8 ffffffff81aad1a1 [ 31.483648] ffff8801d37f0000 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 31.492209] 0000000000000001 ffff8801d3797808 ffffffff81b0ad83 ffff8800b58f2000 [ 31.500464] Call Trace: executing program executing program executing program executing program executing program executing program executing program [ 31.503173] [] dump_stack+0xc1/0x120 [ 31.509314] [] check_preemption_disabled+0x1d3/0x200 [ 31.516160] [] __this_cpu_preempt_check+0x1d/0x30 [ 31.524129] [] tcp_try_coalesce+0x245/0x510 [ 31.530283] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 31.537427] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 31.544732] [] tcp_queue_rcv+0x127/0x6f0 executing program executing program executing program executing program executing program executing program executing program executing program [ 31.550540] [] tcp_send_rcvq+0x3de/0x4a0 [ 31.556609] [] ? tcp_rcv_established+0x2070/0x2070 [ 31.563372] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 31.570303] [] ? lock_sock_nested+0x90/0x120 [ 31.576502] [] ? trace_hardirqs_on+0xd/0x10 [ 31.585967] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 31.592808] [] tcp_sendmsg+0x2332/0x2ab0 executing program executing program executing program executing program executing program executing program executing program executing program [ 31.598863] [] ? trace_hardirqs_on+0x10/0x10 [ 31.605023] [] ? sock_has_perm+0x2a8/0x400 [ 31.611178] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 31.618804] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 31.625568] [] ? tcp_sendpage+0x17c0/0x17c0 [ 31.631542] [] ? check_preemption_disabled+0x3c/0x200 [ 31.638649] [] ? check_preemption_disabled+0x3c/0x200 [ 31.646010] [] ? inet_sendmsg+0x143/0x4d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.651992] [] inet_sendmsg+0x202/0x4d0 [ 31.658329] [] ? inet_sendmsg+0x76/0x4d0 [ 31.664754] [] ? inet_recvmsg+0x4d0/0x4d0 [ 31.671002] [] sock_sendmsg+0xbe/0x110 [ 31.676669] [] sock_write_iter+0x235/0x3d0 [ 31.682911] [] ? sock_sendmsg+0x110/0x110 [ 31.688801] [] ? iov_iter_init+0xb3/0x1e0 [ 31.694612] [] __vfs_write+0x2e8/0x3d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.700156] [] ? __vfs_read+0x3c0/0x3c0 [ 31.705957] [] ? selinux_file_permission+0x2f5/0x450 [ 31.712722] [] ? rw_verify_area+0x103/0x2f0 [ 31.718990] [] vfs_write+0x182/0x4e0 [ 31.724444] [] SyS_write+0xdc/0x1c0 [ 31.729744] [] ? SyS_read+0x1c0/0x1c0 [ 31.735206] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 31.742025] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 31.869330] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/3527 [ 31.878966] caller is __this_cpu_preempt_check+0x1d/0x30 [ 31.885527] CPU: 1 PID: 3527 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 31.892732] 0000000000000000 0e5d4318e7b2cd70 ffff8801d2d977c8 ffffffff81aad1a1 [ 31.900881] ffff8801d3792f80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 31.909271] 0000000000000001 ffff8801d2d97808 ffffffff81b0ad83 ffff8801d3ed5b80 executing program executing program executing program executing program [ 31.918490] Call Trace: [ 31.921176] [] dump_stack+0xc1/0x120 [ 31.926549] [] check_preemption_disabled+0x1d3/0x200 [ 31.934217] [] __this_cpu_preempt_check+0x1d/0x30 [ 31.940820] [] tcp_try_coalesce+0x245/0x510 [ 31.947331] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 31.954455] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 31.961583] [] tcp_queue_rcv+0x127/0x6f0 [ 31.967302] [] tcp_send_rcvq+0x3de/0x4a0 [ 31.973025] [] ? tcp_rcv_established+0x2070/0x2070 [ 31.979708] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 31.986819] [] ? lock_sock_nested+0x90/0x120 [ 31.992881] [] ? trace_hardirqs_on+0xd/0x10 [ 31.998961] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 32.005302] [] tcp_sendmsg+0x2332/0x2ab0 [ 32.011102] [] ? trace_hardirqs_on+0x10/0x10 [ 32.017175] [] ? sock_has_perm+0x2a8/0x400 [ 32.023159] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 32.030799] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 32.037762] [] ? tcp_sendpage+0x17c0/0x17c0 [ 32.043739] [] ? check_preemption_disabled+0x3c/0x200 [ 32.050760] [] ? check_preemption_disabled+0x3c/0x200 [ 32.057788] [] ? inet_sendmsg+0x143/0x4d0 [ 32.063702] [] inet_sendmsg+0x202/0x4d0 [ 32.069605] [] ? inet_sendmsg+0x76/0x4d0 [ 32.075633] [] ? inet_recvmsg+0x4d0/0x4d0 [ 32.081488] [] sock_sendmsg+0xbe/0x110 [ 32.087262] [] sock_write_iter+0x235/0x3d0 [ 32.093202] [] ? sock_sendmsg+0x110/0x110 [ 32.099016] [] ? iov_iter_init+0xb3/0x1e0 [ 32.104935] [] __vfs_write+0x2e8/0x3d0 [ 32.110560] [] ? __vfs_read+0x3c0/0x3c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 32.116181] [] ? selinux_file_permission+0x2f5/0x450 [ 32.123287] [] ? rw_verify_area+0x103/0x2f0 [ 32.129352] [] vfs_write+0x182/0x4e0 [ 32.134851] [] SyS_write+0xdc/0x1c0 [ 32.140145] [] ? SyS_read+0x1c0/0x1c0 [ 32.145603] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 32.152310] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 33.933710] check_preemption_disabled: 2 callbacks suppressed [ 33.940192] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/4050 [ 33.949956] caller is __this_cpu_preempt_check+0x1d/0x30 [ 33.955682] CPU: 1 PID: 4050 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 33.964767] 0000000000000000 32f391d50f1f3bd0 ffff8801d244f7c8 ffffffff81aad1a1 [ 33.973983] ffff8801d3422f80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 executing program executing program [ 33.982463] 0000000000000001 ffff8801d244f808 ffffffff81b0ad83 ffff8801d2837180 [ 33.990659] Call Trace: [ 33.993254] [] dump_stack+0xc1/0x120 [ 33.998710] [] check_preemption_disabled+0x1d3/0x200 [ 34.006335] [] __this_cpu_preempt_check+0x1d/0x30 [ 34.013109] [] tcp_try_coalesce+0x245/0x510 [ 34.019598] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 34.026989] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 executing program [ 34.034101] [] tcp_queue_rcv+0x127/0x6f0 [ 34.040438] [] tcp_send_rcvq+0x3de/0x4a0 [ 34.046143] [] ? tcp_rcv_established+0x2070/0x2070 [ 34.052942] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 34.059954] [] ? lock_sock_nested+0x90/0x120 [ 34.066118] [] ? trace_hardirqs_on+0xd/0x10 [ 34.072448] [] ? __local_bh_enable_ip+0x6a/0xe0 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.078965] [] tcp_sendmsg+0x2332/0x2ab0 [ 34.084829] [] ? trace_hardirqs_on+0x10/0x10 [ 34.091319] [] ? sock_has_perm+0x2a8/0x400 [ 34.097588] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 34.105127] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 34.112234] [] ? tcp_sendpage+0x17c0/0x17c0 [ 34.118313] [] ? check_preemption_disabled+0x3c/0x200 [ 34.125157] [] ? check_preemption_disabled+0x3c/0x200 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.132475] [] ? inet_sendmsg+0x143/0x4d0 [ 34.138465] [] inet_sendmsg+0x202/0x4d0 [ 34.144094] [] ? inet_sendmsg+0x76/0x4d0 [ 34.149812] [] ? inet_recvmsg+0x4d0/0x4d0 [ 34.155614] [] sock_sendmsg+0xbe/0x110 [ 34.161245] [] sock_write_iter+0x235/0x3d0 [ 34.167180] [] ? sock_sendmsg+0x110/0x110 [ 34.172981] [] ? iov_iter_init+0xb3/0x1e0 [ 34.178795] [] __vfs_write+0x2e8/0x3d0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.184337] [] ? __vfs_read+0x3c0/0x3c0 [ 34.189964] [] ? selinux_file_permission+0x2f5/0x450 [ 34.197238] [] ? rw_verify_area+0x103/0x2f0 [ 34.203487] [] vfs_write+0x182/0x4e0 [ 34.209084] [] SyS_write+0xdc/0x1c0 [ 34.214893] [] ? SyS_read+0x1c0/0x1c0 [ 34.220614] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 34.227202] [] entry_SYSCALL_64_fastpath+0x1e/0x9a executing program executing program executing program executing program executing program executing program executing program [ 34.266200] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor229/4175 [ 34.278943] caller is __this_cpu_preempt_check+0x1d/0x30 [ 34.284928] CPU: 1 PID: 4175 Comm: syz-executor229 Not tainted 4.4.174+ #4 [ 34.292958] 0000000000000000 6d924fbbfed3ded5 ffff8801d244f7c8 ffffffff81aad1a1 [ 34.301704] ffff8800b578c740 0000000000000001 ffffffff82a861e0 ffffffff8292c040 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.309781] 0000000000000001 ffff8801d244f808 ffffffff81b0ad83 ffff8800b5bbaf00 [ 34.318552] Call Trace: [ 34.321140] [] dump_stack+0xc1/0x120 [ 34.326681] [] check_preemption_disabled+0x1d3/0x200 [ 34.333535] [] __this_cpu_preempt_check+0x1d/0x30 [ 34.340121] [] tcp_try_coalesce+0x245/0x510 [ 34.346215] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 34.353412] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 34.360614] [] tcp_queue_rcv+0x127/0x6f0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.366326] [] tcp_send_rcvq+0x3de/0x4a0 [ 34.372229] [] ? tcp_rcv_established+0x2070/0x2070 [ 34.378901] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 34.386006] [] ? lock_sock_nested+0x90/0x120 [ 34.392253] [] ? trace_hardirqs_on+0xd/0x10 [ 34.398311] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 34.405807] [] tcp_sendmsg+0x2332/0x2ab0 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.411697] [] ? trace_hardirqs_on+0x10/0x10 [ 34.417761] [] ? sock_has_perm+0x2a8/0x400 [ 34.423741] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 34.431579] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 34.438375] [] ? tcp_sendpage+0x17c0/0x17c0 [ 34.444439] [] ? check_preemption_disabled+0x3c/0x200 [ 34.452538] [