BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3011
caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
CPU: 0 PID: 3011 Comm: syz-executor.2 Not tainted 4.4.174+ #4
 0000000000000000 1146ff37ada02210 ffff8801bbeff7d8 ffffffff81aad1a1
 ffff8801bbee17c0 0000000000000000 ffffffff82a861e0 ffffffff8292c040
 0000000000000002 ffff8801bbeff818 ffffffff81b0ad83 1ffff100377dff00
Call Trace:
 [<ffffffff81aad1a1>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aad1a1>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<ffffffff81b0ad83>] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46
 [<ffffffff81b0aded>] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
 [<ffffffff82412741>] tcp_prune_queue net/ipv4/tcp_input.c:4978 [inline]
 [<ffffffff82412741>] tcp_try_rmem_schedule+0x1a1/0x1280 net/ipv4/tcp_input.c:4386
 [<ffffffff82424747>] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574
 [<ffffffff823fd062>] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134
 [<ffffffff824a8b42>] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff821d838e>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d838e>] sock_sendmsg+0xbe/0x110 net/socket.c:648
 [<ffffffff821da269>] ___sys_sendmsg+0x769/0x890 net/socket.c:1975
 [<ffffffff821dd0c5>] __sys_sendmsg+0xc5/0x160 net/socket.c:2009
 [<ffffffff821dd18d>] SYSC_sendmsg net/socket.c:2020 [inline]
 [<ffffffff821dd18d>] SyS_sendmsg+0x2d/0x50 net/socket.c:2016
 [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3011
caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
CPU: 1 PID: 3011 Comm: syz-executor.2 Not tainted 4.4.174+ #4
 0000000000000000 1146ff37ada02210 ffff8801bbeff640 ffffffff81aad1a1
 ffff8801bbee17c0 0000000000000001 ffffffff82a861e0 ffffffff8292c040
 0000000000000001 ffff8801bbeff680 ffffffff81b0ad83 ffff8800b834e680
Call Trace:
 [<ffffffff81aad1a1>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aad1a1>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<ffffffff81b0ad83>] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46
 [<ffffffff81b0aded>] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
 [<ffffffff8240f589>] tcp_collapse_one+0x119/0x1e0 net/ipv4/tcp_input.c:4736
 [<ffffffff8241204f>] tcp_collapse+0x84f/0xda0 net/ipv4/tcp_input.c:4849
 [<ffffffff82412c5a>] tcp_prune_queue net/ipv4/tcp_input.c:4990 [inline]
 [<ffffffff82412c5a>] tcp_try_rmem_schedule+0x6ba/0x1280 net/ipv4/tcp_input.c:4386
 [<ffffffff82424747>] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574
 [<ffffffff823fd062>] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134
 [<ffffffff824a8b42>] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff821d838e>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d838e>] sock_sendmsg+0xbe/0x110 net/socket.c:648
 [<ffffffff821da269>] ___sys_sendmsg+0x769/0x890 net/socket.c:1975
 [<ffffffff821dd0c5>] __sys_sendmsg+0xc5/0x160 net/socket.c:2009
 [<ffffffff821dd18d>] SYSC_sendmsg net/socket.c:2020 [inline]
 [<ffffffff821dd18d>] SyS_sendmsg+0x2d/0x50 net/socket.c:2016
 [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3011
caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
CPU: 1 PID: 3011 Comm: syz-executor.2 Not tainted 4.4.174+ #4
 0000000000000000 1146ff37ada02210 ffff8801bbeff7d8 ffffffff81aad1a1
 ffff8801bbee17c0 0000000000000001 ffffffff82a861e0 ffffffff8292c040
 0000000000000001 ffff8801bbeff818 ffffffff81b0ad83 1ffff100377dff00
Call Trace:
 [<ffffffff81aad1a1>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aad1a1>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<ffffffff81b0ad83>] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46
 [<ffffffff81b0aded>] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62
 [<ffffffff824134d5>] tcp_prune_queue net/ipv4/tcp_input.c:5011 [inline]
 [<ffffffff824134d5>] tcp_try_rmem_schedule+0xf35/0x1280 net/ipv4/tcp_input.c:4386
 [<ffffffff82424747>] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574
 [<ffffffff823fd062>] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134
 [<ffffffff824a8b42>] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff821d838e>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d838e>] sock_sendmsg+0xbe/0x110 net/socket.c:648
 [<ffffffff821da269>] ___sys_sendmsg+0x769/0x890 net/socket.c:1975
 [<ffffffff821dd0c5>] __sys_sendmsg+0xc5/0x160 net/socket.c:2009
 [<ffffffff821dd18d>] SYSC_sendmsg net/socket.c:2020 [inline]
 [<ffffffff821dd18d>] SyS_sendmsg+0x2d/0x50 net/socket.c:2016
 [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
audit: type=1400 audit(1574145164.899:14): avc:  denied  { create } for  pid=3211 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
audit: type=1400 audit(1574145165.669:15): avc:  denied  { write } for  pid=3211 comm="syz-executor.2" path="socket:[11820]" dev="sockfs" ino=11820 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
audit: type=1326 audit(1574145166.879:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3302 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0
syz-executor.5 (3266) used greatest stack depth: 23888 bytes left
audit: type=1326 audit(1574145167.609:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3302 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0