vmalloc: allocation failure: 0 bytes syz-executor.3: page allocation failure: order:0, mode:0x24000c2 BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/6231 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 6222 Comm: syz-executor.3 Not tainted 4.4.174+ #4 0000000000000000 b7c61f95451e7263 ffff8801d64ef9f0 ffffffff81aad1a1 1ffff1003ac9df41 ffff8800b618af80 00000000024000c2 0000000000000000 ffffffff82895080 ffff8801d64efb00 ffffffff8148c0cb ffffffff00000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757 [] __vmalloc_node_range mm/vmalloc.c:1693 [inline] [] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654 [] __vmalloc_node mm/vmalloc.c:1716 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1730 [inline] [] vmalloc+0x5c/0x70 mm/vmalloc.c:1745 [] sel_write_load+0x119/0xf90 security/selinux/selinuxfs.c:527 [] __vfs_write+0x116/0x3d0 fs/read_write.c:491 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a Mem-Info: active_anon:84205 inactive_anon:9725 isolated_anon:0 active_file:4925 inactive_file:12811 isolated_file:0 unevictable:0 dirty:496 writeback:0 unstable:0 slab_reclaimable:5167 slab_unreclaimable:60789 mapped:59452 shmem:11778 pagetables:2732 bounce:0 free:1400795 free_pcp:447 free_cma:0 DMA32 free:2560112kB min:4696kB low:5868kB high:7044kB active_anon:154880kB inactive_anon:18148kB active_file:8928kB inactive_file:23812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:880kB writeback:0kB mapped:110372kB shmem:21604kB slab_reclaimable:9052kB slab_unreclaimable:109396kB kernel_stack:2976kB pagetables:5120kB unstable:0kB bounce:0kB free_pcp:852kB local_pcp:648kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 3504 3504 Normal free:3043068kB min:5580kB low:6972kB high:8368kB active_anon:181940kB inactive_anon:20752kB active_file:10772kB inactive_file:27432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:1104kB writeback:0kB mapped:127436kB shmem:25508kB slab_reclaimable:11616kB slab_unreclaimable:133760kB kernel_stack:4064kB pagetables:5808kB unstable:0kB bounce:0kB free_pcp:936kB local_pcp:708kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 0 0 DMA32: 594*4kB (UME) 1097*8kB (UM) 517*16kB (UM) 13*32kB (UM) 2*64kB (ME) 18*128kB (U) 4*256kB (UM) 1*512kB (U) 5*1024kB (UME) 2*2048kB (UE) 617*4096kB (M) = 2560256kB Normal: 874*4kB (UME) 903*8kB (UE) 569*16kB (UME) 3*32kB (ME) 2*64kB (UM) 25*128kB (U) 4*256kB (UM) 4*512kB (UE) 4*1024kB (UM) 3*2048kB (UM) 734*4096kB (M) = 3043024kB 29513 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313294 pages reserved vmalloc: allocation failure: 0 bytes syz-executor.3: page allocation failure: order:0, mode:0x24000c2 CPU: 0 PID: 6223 Comm: syz-executor.3 Not tainted 4.4.174+ #4 0000000000000000 b5880c16b194148a ffff8801d3c2f9f0 ffffffff81aad1a1 1ffff1003a785f41 ffff8801c00aaf80 00000000024000c2 0000000000000000 ffffffff82895080 ffff8801d3c2fb00 ffffffff8148c0cb ffffffff00000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757 [] __vmalloc_node_range mm/vmalloc.c:1693 [inline] [] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654 [] __vmalloc_node mm/vmalloc.c:1716 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1730 [inline] [] vmalloc+0x5c/0x70 mm/vmalloc.c:1745 [] sel_write_load+0x119/0xf90 security/selinux/selinuxfs.c:527 [] __vfs_write+0x116/0x3d0 fs/read_write.c:491 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a Mem-Info: active_anon:84205 inactive_anon:9725 isolated_anon:0 active_file:4925 inactive_file:12811 isolated_file:0 unevictable:0 dirty:496 writeback:0 unstable:0 slab_reclaimable:5167 slab_unreclaimable:60789 mapped:59452 shmem:11778 pagetables:2732 bounce:0 free:1400795 free_pcp:444 free_cma:0 DMA32 free:2560112kB min:4696kB low:5868kB high:7044kB active_anon:154880kB inactive_anon:18148kB active_file:8928kB inactive_file:23812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:880kB writeback:0kB mapped:110372kB shmem:21604kB slab_reclaimable:9052kB slab_unreclaimable:109396kB kernel_stack:2976kB pagetables:5120kB unstable:0kB bounce:0kB free_pcp:848kB local_pcp:644kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 3504 3504 Normal free:3043068kB min:5580kB low:6972kB high:8368kB active_anon:181940kB inactive_anon:20752kB active_file:10772kB inactive_file:27432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:1104kB writeback:0kB mapped:127436kB shmem:25508kB slab_reclaimable:11616kB slab_unreclaimable:133760kB kernel_stack:4064kB pagetables:5808kB unstable:0kB bounce:0kB free_pcp:928kB local_pcp:700kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 0 0 DMA32: 594*4kB (UME) 1096*8kB (UM) 517*16kB (UM) 12*32kB (UM) 2*64kB (ME) 18*128kB (U) 4*256kB (UM) 1*512kB (U) 5*1024kB (UME) 2*2048kB (UE) 617*4096kB (M) = 2560216kB Normal: 874*4kB (UME) 903*8kB (UE) 569*16kB (UME) 4*32kB (UME) 1*64kB (M) 25*128kB (U) 4*256kB (UM) 4*512kB (UE) 4*1024kB (UM) 3*2048kB (UM) 734*4096kB (M) = 3042992kB 29513 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313294 pages reserved binder: 6229:6243 ioctl c018620b 0 returned -14 binder: 6229:6247 transaction failed 29189/-22, size 24-8 line 3014 binder: 6229:6247 BC_INCREFS_DONE u0000000000000000 no match binder: 6229:6274 ioctl c018620b 0 returned -14 binder_alloc: 6229: binder_alloc_buf, no vma binder: 6229:6232 transaction failed 29189/-3, size 24-8 line 3137 binder: 6229:6247 BC_INCREFS_DONE u0000000000000000 no match CPU: 1 PID: 6231 Comm: syz-executor.4 Not tainted 4.4.174+ #4 0000000000000000 51ca79f3eb339b5a ffff8801cef4f7c8 ffffffff81aad1a1 ffff8800b4f197c0 0000000000000001 ffffffff82a861e0 ffffffff8292c040 0000000000000001 ffff8801cef4f808 ffffffff81b0ad83 ffff8801d0eb7400 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_try_coalesce net/ipv4/tcp_input.c:4293 [inline] [] tcp_try_coalesce+0x245/0x510 net/ipv4/tcp_input.c:4275 [] tcp_queue_rcv+0x127/0x6f0 net/ipv4/tcp_input.c:4539 [] tcp_send_rcvq+0x3de/0x4a0 net/ipv4/tcp_input.c:4585 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] sock_write_iter+0x235/0x3d0 net/socket.c:847 [] new_sync_write fs/read_write.c:480 [inline] [] __vfs_write+0x2e8/0x3d0 fs/read_write.c:493 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/6275 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 1 PID: 6275 Comm: syz-executor.4 Not tainted 4.4.174+ #4 0000000000000000 77cd331db8080946 ffff8801d19c77c8 ffffffff81aad1a1 ffff8800b75c4740 0000000000000001 ffffffff82a861e0 ffffffff8292c040 0000000000000001 ffff8801d19c7808 ffffffff81b0ad83 ffff8801d0eb6500 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_try_coalesce net/ipv4/tcp_input.c:4293 [inline] [] tcp_try_coalesce+0x245/0x510 net/ipv4/tcp_input.c:4275 [] tcp_queue_rcv+0x127/0x6f0 net/ipv4/tcp_input.c:4539 [] tcp_send_rcvq+0x3de/0x4a0 net/ipv4/tcp_input.c:4585 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] sock_write_iter+0x235/0x3d0 net/socket.c:847 [] new_sync_write fs/read_write.c:480 [inline] [] __vfs_write+0x2e8/0x3d0 fs/read_write.c:493 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a input: syz1 as /devices/virtual/input/input24 input: syz1 as /devices/virtual/input/input25 audit: type=1400 audit(1552749901.805:29): avc: denied { create } for pid=6467 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket