rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (0 ticks this GP) idle=381/1/0x4000000000000000 softirq=135843/135843 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2974/1:b..l (detected by 0, t=10502 jiffies, g=242761, q=34) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 14642 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:separate_irq_context kernel/locking/lockdep.c:4549 [inline] RIP: 0010:__lock_acquire+0xe5f/0x2b00 kernel/locking/lockdep.c:5011 Code: df 4d 89 7d 00 48 8b 44 24 48 8a 04 38 84 c0 0f 85 8b 13 00 00 48 8b 44 24 28 8b 18 48 85 db 74 57 83 fb 31 0f 83 dd 17 00 00 <48> 8d 04 9b 49 8d 9c c6 58 0a 00 00 48 89 d8 48 c1 e8 03 8a 04 38 RSP: 0018:ffffc90000dc0980 EFLAGS: 00000083 RAX: ffff88803fd46158 RBX: 0000000000000001 RCX: ffffffff8165ea52 RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 RBP: ffffc90000dc0ad0 R08: dffffc0000000000 R09: fffffbfff2034ddd R10: fffffbfff2034ddd R11: 0000000000000000 R12: ffff88803fd46150 R13: ffff88803fd46188 R14: ffff88803fd45700 R15: e385e736b6d44918 FS: 0000555556b67400(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f12f4b081b8 CR3: 000000008b85e000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5637 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:268 rcu_read_lock include/linux/rcupdate.h:688 [inline] advance_sched+0x6e7/0x930 net/sched/sch_taprio.c:767 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:check_preemption_disabled+0x11/0x1c0 lib/smp_processor_id.c:13 Code: c7 e0 45 f5 8a 48 c7 c6 20 46 f5 8a eb 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 f6 <49> 89 ff 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 0f 1f 44 00 00 RSP: 0018:ffffc9000a2afa70 EFLAGS: 00000282 RAX: 00000000000f8301 RBX: 1ffff92001455f5c RCX: 0000000080000001 RDX: 0000000000000000 RSI: ffffffff8af54620 RDI: ffffffff8af545e0 RBP: ffffc9000a2afb68 R08: dffffc0000000000 R09: fffffbfff1c3d206 R10: fffffbfff1c3d206 R11: 0000000000000000 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8af54620 R15: 0000000000000000 rcu_lockdep_current_cpu_online+0x36/0x130 kernel/rcu/tree.c:1169 rcu_read_lock_held_common kernel/rcu/update.c:112 [inline] rcu_read_lock_sched_held+0x74/0x130 kernel/rcu/update.c:123 trace_lock_acquire+0x59/0x190 include/trace/events/lock.h:13 lock_acquire+0xa5/0x4d0 kernel/locking/lockdep.c:5608 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:268 rcu_read_lock include/linux/rcupdate.h:688 [inline] netlink_has_listeners+0x61/0x320 net/netlink/af_netlink.c:1371 sock_diag_has_destroy_listeners include/linux/sock_diag.h:88 [inline] __sk_free+0x27e/0x450 net/core/sock.c:2065 inet_release+0x16e/0x1f0 net/ipv4/af_inet.c:427 __sock_release net/socket.c:649 [inline] sock_close+0xd8/0x260 net/socket.c:1314 __fput+0x3fc/0x870 fs/file_table.c:280 task_work_run+0x146/0x1c0 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop kernel/entry/common.c:175 [inline] exit_to_user_mode_prepare+0x209/0x220 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f12f49db72b Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007ffe57ecde10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 00007ffe57ecdeb0 RCX: 00007f12f49db72b RDX: 0000000000000000 RSI: 000000eb633c20c8 RDI: 0000000000000003 RBP: 00000000ffffffff R08: 0000000000000000 R09: ff00000000000000 R10: 0000000000000010 R11: 0000000000000293 R12: 0000000000000032 R13: 0000000000000000 R14: 0000000000000007 R15: 00007ffe57ecdef0 task:systemd-udevd state:R running task stack:19536 pid: 2974 ppid: 1 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6668 irqentry_exit+0x56/0x90 kernel/entry/common.c:425 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:199 Code: 00 00 0f 1f 40 00 be 0d 00 00 00 48 c7 c7 a0 ac d5 8c e8 bf c0 4b 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 c0 6f 02 00 65 8b 15 14 fa 7d 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc90001a6f658 EFLAGS: 00000202 RAX: ffffffff83daffc7 RBX: 0000000000000008 RCX: ffff88807a69e158 RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90001a6f7b0 R08: dffffc0000000000 R09: fffffbfff2034ddd R10: fffffbfff2034ddd R11: 0000000000000000 R12: dffffc0000000000 R13: ffff88809c2805f0 R14: 1ffff9200034ded4 R15: ffffc90001a6f940 rcu_read_lock include/linux/rcupdate.h:689 [inline] dump_common_audit_data security/lsm_audit.c:293 [inline] common_lsm_audit+0x837/0x1b20 security/lsm_audit.c:466 smack_log+0x41d/0x530 security/smack/smack_access.c:383 smk_tskacc+0x304/0x370 security/smack/smack_access.c:253 smack_inode_permission+0x29a/0x340 security/smack/smack_lsm.c:1167 security_inode_permission+0x92/0x110 security/security.c:1314 may_lookup fs/namei.c:1687 [inline] link_path_walk+0x2d2/0xd00 fs/namei.c:2239 path_lookupat+0xab/0x6c0 fs/namei.c:2448 filename_lookup+0x270/0x640 fs/namei.c:2478 user_path_at_empty+0x40/0x1a0 fs/namei.c:2801 user_path_at include/linux/namei.h:57 [inline] do_faccessat+0x43f/0x940 fs/open.c:421 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f44e80b19c7 RSP: 002b:00007ffe3fc0d5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 RAX: ffffffffffffffda RBX: 000055606280a480 RCX: 00007f44e80b19c7 RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007ffe3fc0d5c0 RBP: 00007ffe3fc0d630 R08: 0000000000000421 R09: 0000000000001010 R10: 00007f44e836fb58 R11: 0000000000000246 R12: 000055606273b856 R13: 0000556062800ab0 R14: 00007ffe3fc0d5c0 R15: 00007ffe3fc0d700 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g242761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=122435 rcu: rcu_preempt kthread starved for 10502 jiffies! g242761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26576 pid: 14 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6253 schedule+0x12b/0x1f0 kernel/sched/core.c:6326 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881 rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1955 rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2128 kthread+0x468/0x490 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: ---------------- Code disassembly (best guess): 0: df 4d 89 fisttps -0x77(%rbp) 3: 7d 00 jge 0x5 5: 48 8b 44 24 48 mov 0x48(%rsp),%rax a: 8a 04 38 mov (%rax,%rdi,1),%al d: 84 c0 test %al,%al f: 0f 85 8b 13 00 00 jne 0x13a0 15: 48 8b 44 24 28 mov 0x28(%rsp),%rax 1a: 8b 18 mov (%rax),%ebx 1c: 48 85 db test %rbx,%rbx 1f: 74 57 je 0x78 21: 83 fb 31 cmp $0x31,%ebx 24: 0f 83 dd 17 00 00 jae 0x1807 * 2a: 48 8d 04 9b lea (%rbx,%rbx,4),%rax <-- trapping instruction 2e: 49 8d 9c c6 58 0a 00 lea 0xa58(%r14,%rax,8),%rbx 35: 00 36: 48 89 d8 mov %rbx,%rax 39: 48 c1 e8 03 shr $0x3,%rax 3d: 8a 04 38 mov (%rax,%rdi,1),%al