INFO: rcu_sched detected stalls on CPUs/tasks: (detected by 1, t=10502 jiffies, g=4953, c=4952, q=3) All QSes seen, last rcu_sched kthread activity 10497 (4294974370-4294963873), jiffies_till_next_fqs=1, root ->qsmask 0x0 syz-executor.1 S24368 18399 6352 0x00000008 Call Trace: sched_show_task kernel/sched/core.c:5168 [inline] sched_show_task.cold+0x335/0x399 kernel/sched/core.c:5143 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline] check_cpu_stall kernel/rcu/tree.c:1616 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0xd3f/0xdaa kernel/rcu/tree.c:2792 update_process_times+0x29/0x60 kernel/time/timer.c:1590 tick_sched_handle.isra.0+0x73/0x150 kernel/time/tick-sched.c:165 tick_sched_timer+0x41/0x120 kernel/time/tick-sched.c:1223 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x24b/0xb90 kernel/time/hrtimer.c:1287 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x117/0x5f0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:rcu_read_unlock_bh include/linux/rcupdate.h:721 [inline] RIP: 0010:ip6_finish_output2+0x1117/0x21b0 net/ipv6/ip6_output.c:121 RSP: 0018:ffff8880aed078b0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 00000000ffffffea RBX: ffff88809f5a8040 RCX: 0000000000000000 RDX: 0000000000000100 RSI: 00000000ffffffff RDI: 0000000000000282 RBP: ffff8880aed079c0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000ffffffea R14: ffff88809a1de800 R15: ffff88806b34d580 ip6_finish_output+0x702/0xaf0 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:239 [inline] ip6_output+0x1c5/0x660 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:462 [inline] NF_HOOK include/linux/netfilter.h:250 [inline] ndisc_send_skb+0x88b/0x1390 net/ipv6/ndisc.c:483 ndisc_send_rs+0x125/0x630 net/ipv6/ndisc.c:677 addrconf_rs_timer+0x280/0x5a0 net/ipv6/addrconf.c:3765 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279 expire_timers+0x233/0x4d0 kernel/time/timer.c:1318 __run_timers kernel/time/timer.c:1636 [inline] run_timer_softirq+0x1d8/0x5b0 kernel/time/timer.c:1649 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5f0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:plist_add+0x116/0x490 lib/plist.c:95 RSP: 0018:ffff8880610ff9d0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc900068fd000 RDX: 0000000000000000 RSI: ffffffff8638a9c8 RDI: ffff8880610ffb80 RBP: ffff888085e77b80 R08: 000000000000292b R09: ffffffff89e69298 R10: ffff8880a0b56e48 R11: ffff8880a0b565c0 R12: ffff8880610ffb80 R13: 0000000000000064 R14: 0000000000000000 R15: ffff888085e77b80 __queue_me kernel/futex.c:2362 [inline] queue_me kernel/futex.c:2381 [inline] futex_wait_queue_me+0x1a1/0x590 kernel/futex.c:2705 futex_wait+0x1ba/0x540 kernel/futex.c:2837 do_futex+0x129/0x1850 kernel/futex.c:3920 SYSC_futex kernel/futex.c:3980 [inline] SyS_futex+0x1e8/0x2d0 kernel/futex.c:3948 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45ca29 RSP: 002b:00007f155a6a2cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca29 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c R13: 00007fff0b63cf8f R14: 00007f155a6a39c0 R15: 000000000078bf0c rcu_sched kthread starved for 10497 jiffies! g4953 c4952 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 rcu_sched R running task 29904 9 2 0x80000000 Call Trace: INFO: rcu_preempt detected stalls on CPUs/tasks: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18408 0-...: (1002 ticks this GP) idle=f9a/140000000000001/0 softirq=35032/35032 fqs=1 (detected by 1, t=10507 jiffies, g=10091, c=10090, q=327) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888088126480 task.stack: ffff88808c2c0000 RIP: 0010:mark_lock+0xa6/0x1040 kernel/locking/lockdep.c:3168 RSP: 0018:ffff8880aec074f0 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffffffff89ea1450 RCX: 1ffff11011024db4 RDX: 1ffffffff13d4290 RSI: ffff888088126d80 RDI: ffffffff89ea1480 RBP: ffff888088126d80 R08: 0000000000000001 R09: 00000000000e603a R10: ffff888088126d80 R11: ffff888088126480 R12: 0000000000000100 R13: ffff888088126da0 R14: ffff888088126480 R15: 0000000000000008 FS: 00007f7f00617700(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055fbf6b43110 CR3: 00000000845aa000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __lock_acquire+0x655/0x42a0 kernel/locking/lockdep.c:3452 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] ktime_get kernel/time/timekeeping.c:760 [inline] ktime_get+0xbd/0x2c0 kernel/time/timekeeping.c:750 clockevents_program_event+0x108/0x2d0 kernel/time/clockevents.c:331 tick_program_event+0x78/0xd0 kernel/time/tick-oneshot.c:47 hrtimer_interrupt+0x336/0x5e0 kernel/time/hrtimer.c:1334 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x117/0x5f0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:memcmp+0x3e/0xb0 lib/string.c:861 RSP: 0018:ffff8880aec07998 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000000 RBX: ffff8880aec07a83 RCX: 0000000000000002 RDX: 0000000000000003 RSI: ffff888092f5557b RDI: ffff8880aec07a30 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 R10: ffff888088126d80 R11: ffff888088126480 R12: ffff8880aec07a88 R13: 000000000000000b R14: ffff8880aec07a30 R15: ffff888092f55510 find_stack lib/stackdepot.c:180 [inline] depot_save_stack+0x10d/0x401 lib/stackdepot.c:229 save_stack mm/kasan/kasan.c:453 [inline] set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc.part.0+0xa6/0xd0 mm/kasan/kasan.c:551 kmem_cache_alloc_node_trace+0x153/0x400 mm/slab.c:3661 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve.isra.0+0x35/0xd0 net/core/skbuff.c:137 __alloc_skb+0xca/0x4c0 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] nlmsg_new include/net/netlink.h:511 [inline] xfrm_exp_state_notify net/xfrm/xfrm_user.c:2664 [inline] xfrm_send_state_notify+0xb3b/0x1810 net/xfrm/xfrm_user.c:2820 km_state_notify+0xa9/0x1a0 net/xfrm/xfrm_state.c:1920 km_state_expired net/xfrm/xfrm_state.c:1934 [inline] xfrm_timer_handler+0x694/0x9e0 net/xfrm/xfrm_state.c:553 __tasklet_hrtimer_trampoline+0x29/0xa0 kernel/softirq.c:618 tasklet_hi_action+0x195/0x330 kernel/softirq.c:549 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5f0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:preempt_schedule_irq+0xa6/0x140 kernel/sched/core.c:3611 RSP: 0018:ffff88808c2c78f0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0f62cab RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff888088126d08 RDI: ffff888088126d04 RBP: ffffed1011024c90 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff888088126480 R13: ffffffff87b16558 R14: 0000000000000000 R15: 0000000000000000 retint_kernel+0x1b/0x2d RIP: 0010:should_resched arch/x86/include/asm/preempt.h:99 [inline] RIP: 0010:__local_bh_enable_ip+0xed/0x160 kernel/softirq.c:192 RSP: 0018:ffff88808c2c79c8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0f62cab RBX: 0000000000000200 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffff888088126d08 RDI: ffff888088126d04 RBP: ffffffff83da4840 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809587e080 R13: ffff88809587e080 R14: dffffc0000000000 R15: 0000000000000000 local_bh_enable include/linux/bottom_half.h:32 [inline] tun_rx_batched.isra.0+0x467/0x740 drivers/net/tun.c:1222 tun_get_user+0xf27/0x40c0 drivers/net/tun.c:1581 tun_chr_write_iter+0xcf/0x180 drivers/net/tun.c:1608 call_write_iter include/linux/fs.h:1778 [inline] new_sync_write fs/read_write.c:469 [inline] __vfs_write+0x44e/0x630 fs/read_write.c:482 vfs_write+0x17f/0x4d0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x416561 RSP: 002b:00007f7f00616c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000507dc0 RCX: 0000000000416561 RDX: 000000000000004a RSI: 0000000020000100 RDI: 00000000000000f0 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff R13: 0000000000000bbe R14: 00000000004ce06b R15: 00007f7f006176d4 Code: 50 01 00 00 48 81 eb 50 01 00 00 48 81 c3 80 c9 e9 89 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 fc 0b 00 00 4c 85 63 30 0f 84 9c 00 00 00 b8 01 00 00 00 syz-executor.3 R running task 26656 18408 6354 0x80000008 Call Trace: syz-executor.3 R running task 26656 18408 6354 0x80000000 Call Trace: rcu_preempt kthread starved for 10505 jiffies! g10091 c10090 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 rcu_preempt R running task 29904 8 2 0x80000000 Call Trace: batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state device veth1_macvtap left promiscuous mode device veth0_macvtap left promiscuous mode device veth1_vlan left promiscuous mode device veth0_vlan left promiscuous mode device hsr_slave_1 left promiscuous mode device hsr_slave_0 left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): Releasing backup interface bond_slave_1 bond0 (unregistering): Releasing backup interface bond_slave_0 bond0 (unregistering): Released all slaves IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 chnl_net:caif_netlink_parms(): no params data found bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered disabled state device bridge_slave_0 entered promiscuous mode bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_1 entered promiscuous mode bond0: Enslaving bond_slave_0 as an active interface with an up link bond0: Enslaving bond_slave_1 as an active interface with an up link IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready team0: Port device team_slave_0 added IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready team0: Port device team_slave_1 added batman_adv: batadv0: Adding interface: batadv_slave_0 batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active