BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/2363 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 2363 Comm: syz-executor.0 Not tainted 4.4.174+ #4 0000000000000000 e1707c32bf259de5 ffff8800b5897678 ffffffff81aad1a1 ffff8800b6cbdf00 0000000000000000 ffffffff82a861e0 ffffffff8292c040 0000000000000002 ffff8800b58976b8 ffffffff81b0ad83 ffff8800b543af00 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_try_coalesce net/ipv4/tcp_input.c:4293 [inline] [] tcp_try_coalesce+0x245/0x510 net/ipv4/tcp_input.c:4275 [] tcp_queue_rcv+0x127/0x6f0 net/ipv4/tcp_input.c:4539 [] tcp_send_rcvq+0x3de/0x4a0 net/ipv4/tcp_input.c:4585 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x369/0x890 net/socket.c:1975 [] __sys_sendmmsg+0x130/0x2e0 net/socket.c:2060 [] SYSC_sendmmsg net/socket.c:2090 [inline] [] SyS_sendmmsg+0x35/0x60 net/socket.c:2085 [] entry_SYSCALL_64_fastpath+0x1e/0x9a BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/2371 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 2371 Comm: syz-executor.0 Not tainted 4.4.174+ #4 0000000000000000 675f07b1f16d07c5 ffff8801bf4df678 ffffffff81aad1a1 ffff8801d1980000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 0000000000000002 ffff8801bf4df6b8 ffffffff81b0ad83 ffff8800b4a51180 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_try_coalesce net/ipv4/tcp_input.c:4293 [inline] [] tcp_try_coalesce+0x245/0x510 net/ipv4/tcp_input.c:4275 [] tcp_queue_rcv+0x127/0x6f0 net/ipv4/tcp_input.c:4539 [] tcp_send_rcvq+0x3de/0x4a0 net/ipv4/tcp_input.c:4585 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x369/0x890 net/socket.c:1975 [] __sys_sendmmsg+0x130/0x2e0 net/socket.c:2060 [] SYSC_sendmmsg net/socket.c:2090 [inline] [] SyS_sendmmsg+0x35/0x60 net/socket.c:2085 [] entry_SYSCALL_64_fastpath+0x1e/0x9a audit: type=1400 audit(1575265921.212:8): avc: denied { create } for pid=2379 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 audit: type=1400 audit(1575265921.232:9): avc: denied { getopt } for pid=2372 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1575265921.352:10): avc: denied { write } for pid=2379 comm="syz-executor.2" path="socket:[7819]" dev="sockfs" ino=7819 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 audit: type=1400 audit(1575265921.422:11): avc: denied { getopt } for pid=2379 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 audit_printk_skb: 3 callbacks suppressed audit: type=1400 audit(1575265924.962:13): avc: denied { create } for pid=2541 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 audit: type=1400 audit(1575265925.032:14): avc: denied { write } for pid=2541 comm="syz-executor.3" path="socket:[8810]" dev="sockfs" ino=8810 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 syz-executor.0 (2453) used greatest stack depth: 23936 bytes left audit: type=1401 audit(1575265926.872:15): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A6D6F756E745F657865635F743A733000126BE9450C4869C053DB9560F53C11FB549881DB3A0E45BB vmalloc: allocation failure: 0 bytes syz-executor.2: page allocation failure: order:0, mode:0x24000c2 CPU: 1 PID: 2663 Comm: syz-executor.2 Not tainted 4.4.174+ #4 0000000000000000 82bfc44080967c24 ffff8801bd2df9f0 ffffffff81aad1a1 1ffff10037a5bf41 ffff8800a2ea8000 00000000024000c2 0000000000000000 ffffffff82895080 ffff8801bd2dfb00 ffffffff8148c0cb ffffffff00000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757 [] __vmalloc_node_range mm/vmalloc.c:1693 [inline] [] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654 [] __vmalloc_node mm/vmalloc.c:1716 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1730 [inline] [] vmalloc+0x5c/0x70 mm/vmalloc.c:1745 [] sel_write_load+0x119/0xf90 security/selinux/selinuxfs.c:527 [] __vfs_write+0x116/0x3d0 fs/read_write.c:491 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a Mem-Info: active_anon:72066 inactive_anon:41 isolated_anon:0 active_file:4527 inactive_file:11436 isolated_file:0 unevictable:0 dirty:249 writeback:0 unstable:0 slab_reclaimable:3922 slab_unreclaimable:59241 mapped:59169 shmem:49 pagetables:1011 bounce:0 free:1432060 free_pcp:618 free_cma:0 DMA32 free:2614044kB min:4696kB low:5868kB high:7044kB active_anon:135448kB inactive_anon:52kB active_file:10732kB inactive_file:20916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:572kB writeback:0kB mapped:110420kB shmem:72kB slab_reclaimable:7220kB slab_unreclaimable:105892kB kernel_stack:1760kB pagetables:2036kB unstable:0kB bounce:0kB free_pcp:1036kB local_pcp:720kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 3504 3504 Normal free:3114196kB min:5580kB low:6972kB high:8368kB active_anon:152816kB inactive_anon:112kB active_file:7376kB inactive_file:24828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:424kB writeback:0kB mapped:126256kB shmem:124kB slab_reclaimable:8468kB slab_unreclaimable:131072kB kernel_stack:3328kB pagetables:2008kB unstable:0kB bounce:0kB free_pcp:1436kB local_pcp:744kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 0 0 DMA32: 923*4kB (UME) 250*8kB (UME) 376*16kB (U) 1*32kB (U) 1*64kB (E) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 0*1024kB 0*2048kB 635*4096kB (M) = 2614044kB Normal: 1179*4kB (UM) 273*8kB (UM) 414*16kB (UME) 23*32kB (UME) 2*64kB (UE) 2*128kB (UM) 3*256kB (ME) 0*512kB 2*1024kB (ME) 2*2048kB (ME) 755*4096kB (M) = 3114036kB 16011 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313294 pages reserved vmalloc: allocation failure: 0 bytes syz-executor.2: page allocation failure: order:0, mode:0x24000c2 CPU: 0 PID: 2670 Comm: syz-executor.2 Not tainted 4.4.174+ #4 0000000000000000 42b26f80beb8a3af ffff8801ced579f0 ffffffff81aad1a1 1ffff10039daaf41 ffff8800a2eaaf80 00000000024000c2 0000000000000000 ffffffff82895080 ffff8801ced57b00 ffffffff8148c0cb ffffffff00000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757 [] __vmalloc_node_range mm/vmalloc.c:1693 [inline] [] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654 [] __vmalloc_node mm/vmalloc.c:1716 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1730 [inline] [] vmalloc+0x5c/0x70 mm/vmalloc.c:1745 [] sel_write_load+0x119/0xf90 security/selinux/selinuxfs.c:527 [] __vfs_write+0x116/0x3d0 fs/read_write.c:491 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a Mem-Info: active_anon:68167 inactive_anon:41 isolated_anon:0 active_file:4532 inactive_file:11437 isolated_file:0 unevictable:0 dirty:247 writeback:0 unstable:0 slab_reclaimable:3935 slab_unreclaimable:59159 mapped:59158 shmem:49 pagetables:1018 bounce:0 free:1438462 free_pcp:575 free_cma:0 DMA32 free:2626144kB min:4696kB low:5868kB high:7044kB active_anon:129080kB inactive_anon:56kB active_file:10736kB inactive_file:20916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:512kB writeback:0kB mapped:110420kB shmem:76kB slab_reclaimable:7252kB slab_unreclaimable:104936kB kernel_stack:1760kB pagetables:1944kB unstable:0kB bounce:0kB free_pcp:1160kB local_pcp:708kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 3504 3504 Normal free:3127704kB min:5580kB low:6972kB high:8368kB active_anon:143588kB inactive_anon:108kB active_file:7392kB inactive_file:24832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:476kB writeback:0kB mapped:126212kB shmem:120kB slab_reclaimable:8488kB slab_unreclaimable:131700kB kernel_stack:3136kB pagetables:2128kB unstable:0kB bounce:0kB free_pcp:1148kB local_pcp:672kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 0 0 DMA32: 1042*4kB (UM) 301*8kB (UM) 419*16kB (UME) 68*32kB (UM) 69*64kB (UME) 19*128kB (UM) 8*256kB (UME) 2*512kB (UE) 0*1024kB 0*2048kB 635*4096kB (M) = 2626336kB Normal: 1152*4kB (UM) 314*8kB (UM) 444*16kB (UME) 100*32kB (UM) 90*64kB (UME) 26*128kB (UME) 8*256kB (UME) 1*512kB (U) 2*1024kB (ME) 2*2048kB (ME) 755*4096kB (M) = 3127696kB 16020 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313294 pages reserved