BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/6336 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 6336 Comm: syz-executor.4 Not tainted 4.4.174+ #17 0000000000000000 0e0880c447288408 ffff8801bf79f758 ffffffff81aad1a1 ffff8801d1270000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 0000000000000002 ffff8801bf79f798 ffffffff81b0ad83 1ffff10037ef3e00 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_prune_queue net/ipv4/tcp_input.c:4978 [inline] [] tcp_try_rmem_schedule+0x1a1/0x1280 net/ipv4/tcp_input.c:4386 [] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x769/0x890 net/socket.c:1975 [] __sys_sendmsg+0xc5/0x160 net/socket.c:2009 [] C_SYSC_sendmsg net/compat.c:725 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:723 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/6336 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 6336 Comm: syz-executor.4 Not tainted 4.4.174+ #17 0000000000000000 0e0880c447288408 ffff8801bf79f5c0 ffffffff81aad1a1 ffff8801d1270000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 0000000000000002 ffff8801bf79f600 ffffffff81b0ad83 ffff8801ceacdc40 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_collapse_one+0x119/0x1e0 net/ipv4/tcp_input.c:4736 [] tcp_collapse+0x84f/0xda0 net/ipv4/tcp_input.c:4849 [] tcp_prune_queue net/ipv4/tcp_input.c:4990 [inline] [] tcp_try_rmem_schedule+0x6ba/0x1280 net/ipv4/tcp_input.c:4386 [] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x769/0x890 net/socket.c:1975 [] __sys_sendmsg+0xc5/0x160 net/socket.c:2009 [] C_SYSC_sendmsg net/compat.c:725 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:723 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/6336 caller is __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 CPU: 0 PID: 6336 Comm: syz-executor.4 Not tainted 4.4.174+ #17 0000000000000000 0e0880c447288408 ffff8801bf79f758 ffffffff81aad1a1 ffff8801d1270000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 0000000000000002 ffff8801bf79f798 ffffffff81b0ad83 1ffff10037ef3e00 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d3/0x200 lib/smp_processor_id.c:46 [] __this_cpu_preempt_check+0x1d/0x30 lib/smp_processor_id.c:62 [] tcp_prune_queue net/ipv4/tcp_input.c:5011 [inline] [] tcp_try_rmem_schedule+0xf35/0x1280 net/ipv4/tcp_input.c:4386 [] tcp_send_rcvq+0x1d7/0x4a0 net/ipv4/tcp_input.c:4574 [] tcp_sendmsg+0x2332/0x2ab0 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x769/0x890 net/socket.c:1975 [] __sys_sendmsg+0xc5/0x160 net/socket.c:2009 [] C_SYSC_sendmsg net/compat.c:725 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:723 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a input: syz1 as /devices/virtual/input/input18 input: syz1 as /devices/virtual/input/input19 vmalloc: allocation failure: 0 bytes syz-executor.4: page allocation failure: order:0, mode:0x24000c2 CPU: 0 PID: 6778 Comm: syz-executor.4 Not tainted 4.4.174+ #17 0000000000000000 e50907c145f43be5 ffff8801d973f978 ffffffff81aad1a1 1ffff1003b2e7f32 ffff8801b5190000 00000000024000c2 0000000000000000 ffffffff82895080 ffff8801d973fa88 ffffffff8148c0cb ffffffff00000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] warn_alloc_failed.cold+0x78/0x99 mm/page_alloc.c:2757 [] __vmalloc_node_range mm/vmalloc.c:1693 [inline] [] __vmalloc_node_range+0x365/0x650 mm/vmalloc.c:1654 [] __vmalloc_node mm/vmalloc.c:1716 [inline] [] __vmalloc_node_flags mm/vmalloc.c:1730 [inline] [] vmalloc+0x5c/0x70 mm/vmalloc.c:1745 [] sel_write_load+0x119/0xf90 security/selinux/selinuxfs.c:527 [] __vfs_write+0x116/0x3d0 fs/read_write.c:491 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a Mem-Info: active_anon:250422 inactive_anon:32304 isolated_anon:0 active_file:6040 inactive_file:26657 isolated_file:0 unevictable:0 dirty:3036 writeback:0 unstable:0 slab_reclaimable:5885 slab_unreclaimable:63533 mapped:91284 shmem:34712 pagetables:3654 bounce:0 free:1190037 free_pcp:269 free_cma:0 DMA32 free:2184564kB min:4696kB low:5868kB high:7044kB active_anon:446716kB inactive_anon:59024kB active_file:11432kB inactive_file:49748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:6764kB writeback:0kB mapped:168128kB shmem:63084kB slab_reclaimable:10624kB slab_unreclaimable:114688kB kernel_stack:2944kB pagetables:7408kB unstable:0kB bounce:0kB free_pcp:876kB local_pcp:740kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 3504 3504 Normal free:2583092kB min:5580kB low:6972kB high:8368kB active_anon:545072kB inactive_anon:70100kB active_file:12724kB inactive_file:58668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:7004kB writeback:64kB mapped:196912kB shmem:75688kB slab_reclaimable:13056kB slab_unreclaimable:139404kB kernel_stack:5344kB pagetables:7144kB unstable:0kB bounce:0kB free_pcp:776kB local_pcp:592kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no lowmem_reserve[]: 0 0 0 DMA32: 670*4kB (UME) 793*8kB (UME) 445*16kB (UME) 53*32kB (UME) 15*64kB (UME) 4*128kB (UME) 3*256kB (UME) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 526*4096kB (M) = 2181744kB Normal: 961*4kB (UME) 903*8kB (UE) 465*16kB (UME) 77*32kB (UM) 20*64kB (UME) 5*128kB (UE) 0*256kB 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 624*4096kB (M) = 2583404kB 67866 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313294 pages reserved Dead loop on virtual device ip6tnl0, fix it urgently! Dead loop on virtual device ip6tnl0, fix it urgently!