rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (1 GPs behind) idle=397/1/0x4000000000000000 softirq=62335/62336 fqs=1
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1/1:b..l P28569/1:b..l
(detected by 1, t=10502 jiffies, g=102049, q=65)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4933 Comm: systemd-timesyn Not tainted 5.14.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:preempt_count_sub+0x3b/0x150 kernel/sched/core.c:5427
Code: fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 e4 00 00 00 8b 0d f9 18 d4 0e 85 c9 75 1b <65> 8b 05 0e 21 b3 7e 89 c2 81 e2 ff ff ff 7f 39 da 7c 13 81 fb fe
RSP: 0018:ffffc90000007d30 EFLAGS: 00000046
RAX: 0000000000000003 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffffffff903cf960 R08: 0000000000000000 R09: ffffffff903cf963
R10: fffffbfff2079f2c R11: 0000000000000000 R12: dffffc0000000000
R13: ffffffff898dc5a0 R14: 1ffff92000000fad R15: ffff88801984e340
FS: 00007f9f4605a8c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000056c030 CR3: 0000000029d55000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
_raw_spin_unlock_irqrestore+0x3d/0x70 kernel/locking/spinlock.c:194
debug_object_deactivate lib/debugobjects.c:757 [inline]
debug_object_deactivate+0x264/0x300 lib/debugobjects.c:723
debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
debug_deactivate kernel/time/hrtimer.c:481 [inline]
__run_hrtimer kernel/time/hrtimer.c:1653 [inline]
__hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
</IRQ>
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 1a 51 2c f8 48 89 ef e8 62 c7 2c f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 <e8> d3 88 20 f8 65 8b 05 1c aa d3 76 85 c0 74 0a 5b 5d c3 e8 10 32
RSP: 0018:ffffc90001877e28 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000200 RCX: 1ffffffff1ad98ed
RDX: 0000000000000000 RSI: ffffffff817b7851 RDI: 0000000000000001
RBP: ffffffff90284f18 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff817b7838 R11: 000000000000003f R12: ffff888010840600
R13: 0000000000000150 R14: ffff88823bd7d000 R15: dffffc0000000000
kfence_guarded_alloc mm/kfence/core.c:328 [inline]
__kfence_alloc+0x7b2/0xc90 mm/kfence/core.c:776
kfence_alloc include/linux/kfence.h:124 [inline]
slab_alloc mm/slab.c:3310 [inline]
kmem_cache_alloc_trace+0x292/0x480 mm/slab.c:3573
kmalloc include/linux/slab.h:591 [inline]
kzalloc include/linux/slab.h:721 [inline]
__do_sys_timerfd_create+0x265/0x370 fs/timerfd.c:428
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9f4544f787
Code: 00 00 48 89 d0 48 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d 02 f7 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 b8 1b 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 f6 2a 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc03443ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
RAX: ffffffffffffffda RBX: 000056246d19e630 RCX: 00007f9f4544f787
RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000
RBP: 00007ffc03443f58 R08: 0000000000000020 R09: 000000000000000d
R10: 0000000000000000 R11: 0000000000000246 R12: 000056246d1a0fa0
R13: 0000000000000064 R14: 0000000000000066 R15: 0000000000000000
task:syz-executor.3 state:R running task stack:29760 pid:28569 ppid: 8453 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:4940 [inline]
__schedule+0x940/0x26f0 kernel/sched/core.c:6287
preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6459
preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
_raw_spin_unlock_irqrestore+0x57/0x70 kernel/locking/spinlock.c:194
spin_unlock_irqrestore include/linux/spinlock.h:418 [inline]
timerfd_clock_was_set+0x162/0x2e0 fs/timerfd.c:113
clock_was_set+0x5cf/0x790 kernel/time/hrtimer.c:980
do_settimeofday64 kernel/time/timekeeping.c:1327 [inline]
do_settimeofday64+0x3e2/0x5c0 kernel/time/timekeeping.c:1293
do_sys_settimeofday64 kernel/time/time.c:195 [inline]
do_sys_settimeofday64+0x1de/0x260 kernel/time/time.c:169
__do_sys_clock_settime kernel/time/posix-timers.c:1079 [inline]
__se_sys_clock_settime kernel/time/posix-timers.c:1067 [inline]
__x64_sys_clock_settime+0x1a1/0x280 kernel/time/posix-timers.c:1067
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665f9
RSP: 002b:00007f10bbe18188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9
RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000000
RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007ffed167b8ef R14: 00007f10bbe18300 R15: 0000000000022000
task:systemd state:R running task stack:22328 pid: 1 ppid: 0 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:4940 [inline]
__schedule+0x940/0x26f0 kernel/sched/core.c:6287
preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6459
preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
_raw_spin_unlock_irqrestore+0x57/0x70 kernel/locking/spinlock.c:194
spin_unlock_irqrestore include/linux/spinlock.h:418 [inline]
__wake_up_common_lock+0xde/0x130 kernel/sched/wait.c:140
sock_def_readable+0xec/0x4e0 net/core/sock.c:3015
unix_dgram_sendmsg+0x1032/0x1d30 net/unix/af_unix.c:1852
sock_sendmsg_nosec net/socket.c:703 [inline]
sock_sendmsg+0xcf/0x120 net/socket.c:723
____sys_sendmsg+0x6e8/0x810 net/socket.c:2395
___sys_sendmsg+0xf3/0x170 net/socket.c:2449
__sys_sendmsg+0xe5/0x1b0 net/socket.c:2478
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f2df2a57eb0
RSP: 002b:00007ffd604fce10 EFLAGS: 00000293 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000025 RCX: 00007f2df2a57eb0
RDX: 0000000000004000 RSI: 00007ffd604fce90 RDI: 0000000000000025
RBP: 00007ffd604fce90 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000073 R11: 0000000000000293 R12: 0000000000004000
R13: 000055f88ac47d88 R14: 0000000000000000 R15: 00007f2df41ba2f8
rcu: rcu_preempt kthread starved for 10500 jiffies! g102049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28952 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4940 [inline]
__schedule+0x940/0x26f0 kernel/sched/core.c:6287
schedule+0xd3/0x270 kernel/sched/core.c:6366
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x186/0x800 kernel/rcu/tree.c:1957
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2130
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 1
CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 5.14.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound toggle_allocation_gate
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:105
nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 kernel/rcu/tree_stall.h:481
print_other_cpu_stall kernel/rcu/tree_stall.h:586 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:729 [inline]
rcu_pending kernel/rcu/tree.c:3880 [inline]
rcu_sched_clock_irq+0x2125/0x2200 kernel/rcu/tree.c:2599
update_process_times+0x16d/0x200 kernel/time/timer.c:1785
tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
</IRQ>
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:check_kcov_mode+0x7/0x40 kernel/kcov.c:163
Code: fe ff ff 48 89 df e8 78 d3 45 00 e9 a1 fe ff ff 48 8b 3c 24 e8 6a d3 45 00 e9 18 fe ff ff cc cc cc cc cc 65 8b 05 c9 a9 8c 7e <89> c2 81 e2 00 01 00 00 a9 00 01 ff 00 74 10 31 c0 85 d2 74 15 8b
RSP: 0018:ffffc90000eef9f0 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffff8880b9c5cfe0 RCX: 0000000000000001
RDX: ffff888011e2e200 RSI: ffff888011e2e200 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff816a0626 R11: 0000000000000000 R12: ffffed101738b9fd
R13: 0000000000000000 R14: ffff8880b9c5cfe8 R15: 0000000000000001
write_comp_data kernel/kcov.c:218 [inline]
__sanitizer_cov_trace_const_cmp4+0x1c/0x70 kernel/kcov.c:284
csd_lock_wait kernel/smp.c:440 [inline]
smp_call_function_many_cond+0x476/0xc20 kernel/smp.c:969
on_each_cpu_cond_mask+0x56/0xa0 kernel/smp.c:1135
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:929 [inline]
text_poke_bp_batch+0x1b3/0x560 arch/x86/kernel/alternative.c:1114
text_poke_flush arch/x86/kernel/alternative.c:1268 [inline]
text_poke_flush arch/x86/kernel/alternative.c:1265 [inline]
text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1275
arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
jump_label_update+0x1d5/0x430 kernel/jump_label.c:830
static_key_disable_cpuslocked+0x152/0x1b0 kernel/jump_label.c:207
static_key_disable+0x16/0x20 kernel/jump_label.c:215
toggle_allocation_gate mm/kfence/core.c:637 [inline]
toggle_allocation_gate+0x185/0x390 mm/kfence/core.c:615
process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess), 2 bytes skipped:
0: df 48 89 fisttps -0x77(%rax)
3: c1 83 e0 07 48 c1 e9 roll $0xe9,-0x3eb7f820(%rbx)
a: 03 83 c0 03 0f b6 add -0x49f0fc40(%rbx),%eax
10: 14 11 adc $0x11,%al
12: 38 d0 cmp %dl,%al
14: 7c 08 jl 0x1e
16: 84 d2 test %dl,%dl
18: 0f 85 e4 00 00 00 jne 0x102
1e: 8b 0d f9 18 d4 0e mov 0xed418f9(%rip),%ecx # 0xed4191d
24: 85 c9 test %ecx,%ecx
26: 75 1b jne 0x43
* 28: 65 8b 05 0e 21 b3 7e mov %gs:0x7eb3210e(%rip),%eax # 0x7eb3213d <-- trapping instruction
2f: 89 c2 mov %eax,%edx
31: 81 e2 ff ff ff 7f and $0x7fffffff,%edx
37: 39 da cmp %ebx,%edx
39: 7c 13 jl 0x4e
3b: 81 .byte 0x81
3c: fb sti
3d: fe .byte 0xfe