INFO: rcu_preempt self-detected stall on CPU
	1-...: (1 GPs behind) idle=c4e/140000000000002/0 softirq=77752/77753 fqs=4 
	 (t=10500 jiffies g=20066 c=20065 q=366)
rcu_preempt kthread starved for 6221 jiffies! g20066 c20065 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_preempt     R  running task    29776     8      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384
 schedule+0x92/0x1c0 kernel/sched/core.c:3428
 schedule_timeout+0x43e/0xe10 kernel/time/timer.c:1746
 rcu_gp_kthread+0xbf4/0x1ec0 kernel/rcu/tree.c:2255
 kthread+0x319/0x430 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
NMI backtrace for cpu 1
CPU: 1 PID: 30018 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x142/0x197 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
 rcu_dump_cpu_stacks+0x186/0x1d2 kernel/rcu/tree.c:1396
 print_cpu_stall kernel/rcu/tree.c:1542 [inline]
 check_cpu_stall kernel/rcu/tree.c:1610 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0x43d/0xd0a kernel/rcu/tree.c:2792
 update_process_times+0x31/0x70 kernel/time/timer.c:1590
 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:165
 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x270/0xbc0 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x11c/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:update_stack_state+0x3b7/0x590 arch/x86/kernel/unwind_frame.c:218
RSP: 0018:ffff8880aed07650 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: dffffc0000000000 RBX: ffff8880aed077f8 RCX: 1ffff11015da0f06
RDX: 1ffff11015da0efd RSI: ffff8880aed07878 RDI: ffff8880aed07830
RBP: ffff8880aed076f8 R08: 000000000001ede0 R09: ffff8880aed07850
R10: ffff8880aed07820 R11: ffff8880aed07830 R12: 1ffff11015da0ee6
R13: ffff8880aed077f8 R14: 1ffff11015da0ed2 R15: ffff8880aed07878
 unwind_next_frame.part.0+0x188/0x8b0 arch/x86/kernel/unwind_frame.c:333
 unwind_next_frame arch/x86/include/asm/unwind.h:46 [inline]
 __unwind_start+0x1f6/0x3d0 arch/x86/kernel/unwind_frame.c:433
 unwind_start arch/x86/include/asm/unwind.h:60 [inline]
 __save_stack_trace+0x4a/0xd0 arch/x86/kernel/stacktrace.c:43
 save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:59
 save_stack+0x45/0xd0 mm/kasan/kasan.c:447
 set_track mm/kasan/kasan.c:459 [inline]
 kasan_kmalloc mm/kasan/kasan.c:551 [inline]
 kasan_kmalloc+0xce/0xf0 mm/kasan/kasan.c:529
 kasan_slab_alloc+0xf/0x20 mm/kasan/kasan.c:489
 slab_post_alloc_hook mm/slab.h:442 [inline]
 slab_alloc_node mm/slab.c:3333 [inline]
 kmem_cache_alloc_node+0x131/0x780 mm/slab.c:3640
 __alloc_skb+0x9c/0x500 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:980 [inline]
 new_skb+0x28/0x1d0 drivers/block/aoe/aoecmd.c:67
 aoecmd_cfg_pkts drivers/block/aoe/aoecmd.c:427 [inline]
 aoecmd_cfg+0x180/0x5c0 drivers/block/aoe/aoecmd.c:1392
 discover_timer drivers/block/aoe/aoemain.c:44 [inline]
 discover_timer+0xcd/0x170 drivers/block/aoe/aoemain.c:21
 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279
 expire_timers kernel/time/timer.c:1318 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649
 __do_softirq+0x244/0x9a0 kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x160/0x1b0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:ebitmap_get_bit+0x9f/0x180 security/selinux/ss/ebitmap.c:253
RSP: 0018:ffff88804243fb08 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: 1ffff110134fe338 RBX: ffff88809a7f19c0 RCX: ffffc9000b5dc000
RDX: 00000000000060eb RSI: ffffffff82d45593 RDI: ffff88809a7f19f8
RBP: ffff88804243fb30 R08: 1ffff11012598c3d R09: ffffed1012598c43
R10: ffffed1012598c42 R11: ffff888092cc6217 R12: 0000000000000180
R13: 0000000000000346 R14: dffffc0000000000 R15: 0000000000000000
 policydb_context_isvalid+0x1d8/0x360 security/selinux/ss/policydb.c:974
 security_compute_sid.part.0+0xaaa/0x10f0 security/selinux/ss/services.c:1731
 security_compute_sid security/selinux/ss/services.c:1764 [inline]
 security_transition_sid+0xd6/0x130 security/selinux/ss/services.c:1764
 socket_sockcreate_sid security/selinux/hooks.c:4356 [inline]
 socket_sockcreate_sid security/selinux/hooks.c:4348 [inline]
 selinux_socket_create+0x36d/0x4d0 security/selinux/hooks.c:4389
 security_socket_create+0x83/0xc0 security/security.c:1346
 __sock_create+0x67/0x620 net/socket.c:1230
 sock_create net/socket.c:1315 [inline]
 SYSC_socket net/socket.c:1345 [inline]
 SyS_socket+0xd3/0x170 net/socket.c:1325
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c429
RSP: 002b:00007f1ec657ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00007f1ec657b6d4 RCX: 000000000045c429
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a
RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000b72 R14: 00000000004cd610 R15: 000000000076bf2c
INFO: rcu_sched detected stalls on CPUs/tasks:
	1-...: (1 GPs behind) idle=c4e/140000000000002/0 softirq=77752/77753 fqs=5 
	(detected by 0, t=10564 jiffies, g=15689, c=15688, q=6)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 30018 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88804436c280 task.stack: ffff888042438000
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:332 [inline]
RIP: 0010:cpumask_test_cpu include/linux/cpumask.h:316 [inline]
RIP: 0010:trace_irq_work_entry arch/x86/include/asm/trace/irq_vectors.h:79 [inline]
RIP: 0010:smp_irq_work_interrupt+0x8e/0x4e0 arch/x86/kernel/irq_work.c:19
RSP: 0018:ffff8880aed07d18 EFLAGS: 00000093
RAX: 0000000000000001 RBX: ffffffff87c0b1a0 RCX: 000000000000080b
RDX: 0000000000010100 RSI: ffffffff86c54600 RDI: ffffffff87044b80
RBP: ffff8880aed07d30 R08: 00000095e5d01f65 R09: ffff88821fff7048
R10: ffff88821fff7050 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f1ec657b700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32a22000 CR3: 0000000069675000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 irq_work_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:823
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 kernel/locking/spinlock.c:200
RSP: 0018:ffff8880aed07df0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff09
RAX: 1ffffffff0fe2ccb RBX: ffff888075757500 RCX: 1ffff1100886d964
RDX: dffffc0000000000 RSI: ffff88804436cb00 RDI: ffff88804436cafc
RBP: ffff8880aed07df8 R08: ffff88804436c280 R09: ffff88804436cb20
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880aed239c0
R13: ffff888075757200 R14: ffff8880aed239c0 R15: dffffc0000000000
 expire_timers kernel/time/timer.c:1317 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x5a5/0x1520 kernel/time/timer.c:1649
 __do_softirq+0x244/0x9a0 kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x160/0x1b0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:ebitmap_get_bit+0x9f/0x180 security/selinux/ss/ebitmap.c:253
RSP: 0018:ffff88804243fb08 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: 1ffff110134fe338 RBX: ffff88809a7f19c0 RCX: ffffc9000b5dc000
RDX: 00000000000060eb RSI: ffffffff82d45593 RDI: ffff88809a7f19f8
RBP: ffff88804243fb30 R08: 1ffff11012598c3d R09: ffffed1012598c43
R10: ffffed1012598c42 R11: ffff888092cc6217 R12: 0000000000000180
R13: 0000000000000346 R14: dffffc0000000000 R15: 0000000000000000
 policydb_context_isvalid+0x1d8/0x360 security/selinux/ss/policydb.c:974
 security_compute_sid.part.0+0xaaa/0x10f0 security/selinux/ss/services.c:1731
 security_compute_sid security/selinux/ss/services.c:1764 [inline]
 security_transition_sid+0xd6/0x130 security/selinux/ss/services.c:1764
 socket_sockcreate_sid security/selinux/hooks.c:4356 [inline]
 socket_sockcreate_sid security/selinux/hooks.c:4348 [inline]
 selinux_socket_create+0x36d/0x4d0 security/selinux/hooks.c:4389
 security_socket_create+0x83/0xc0 security/security.c:1346
 __sock_create+0x67/0x620 net/socket.c:1230
 sock_create net/socket.c:1315 [inline]
 SYSC_socket net/socket.c:1345 [inline]
 SyS_socket+0xd3/0x170 net/socket.c:1325
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c429
RSP: 002b:00007f1ec657ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00007f1ec657b6d4 RCX: 000000000045c429
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a
RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000b72 R14: 00000000004cd610 R15: 000000000076bf2c
Code: 48 c7 c7 00 46 c5 86 e8 c1 cf 8d fc 65 c6 05 5b 83 82 79 01 0f 1f 44 00 00 65 8b 05 3d 59 81 79 83 f8 3f 0f 87 d6 02 00 00 89 c0 <48> 0f a3 05 92 ed 31 02 0f 82 0f 02 00 00 65 ff 05 55 83 82 79