INFO: rcu_sched detected stalls on CPUs/tasks: 1-...: (1 GPs behind) idle=9a6/140000000000001/0 softirq=145798/145799 fqs=4260 (detected by 0, t=10503 jiffies, g=27742, c=27741, q=260) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4339 Comm: syz-executor.2 Not tainted 4.14.183-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88805ed96400 task.stack: ffff888204860000 RIP: 0010:debug_lockdep_rcu_enabled.part.0+0x22/0x50 kernel/rcu/update.c:300 RSP: 0000:ffff8880aed07c68 EFLAGS: 00000a07 RAX: dffffc0000000000 RBX: ffff88805ed96400 RCX: 1ffffffff0fe7914 RDX: 1ffff1100bdb2d90 RSI: 0000000000039055 RDI: ffff88805ed96c84 RBP: ffff88809ea35f00 R08: 0000000000004a29 R09: ffffffff89e79a88 R10: ffff88805ed96cd8 R11: ffff88805ed96400 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88808d83c100 R15: 0000000000000001 FS: 00007f4dfc888700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000190 CR3: 0000000022e9e000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hash_ipport4_expire.isra.0+0x115/0x770 net/netfilter/ipset/ip_set_hash_gen.h:475 hash_ipport4_gc+0x4c/0x140 net/netfilter/ipset/ip_set_hash_gen.h:536 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279 expire_timers+0x233/0x4d0 kernel/time/timer.c:1318 __run_timers kernel/time/timer.c:1636 [inline] run_timer_softirq+0x1d8/0x5b0 kernel/time/timer.c:1649 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5f0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:lock_acquire+0x1ec/0x3f0 kernel/locking/lockdep.c:4001 RSP: 0000:ffff888204867b20 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0f62c99 RBX: ffff88805ed96400 RCX: 1ffff1100bdb2d95 RDX: dffffc0000000000 RSI: ffff88805ed96c88 RDI: 0000000000000282 RBP: ffff8880566e9410 R08: 0000000000001a48 R09: ffffffff89e61b80 R10: ffff88805ed96c88 R11: ffff88805ed96400 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 __might_fault mm/memory.c:4584 [inline] __might_fault+0x137/0x1b0 mm/memory.c:4569 __copy_to_user include/linux/uaccess.h:102 [inline] save_xstate_epilog arch/x86/kernel/fpu/signal.c:89 [inline] copy_fpstate_to_sigframe+0x29e/0x5a0 arch/x86/kernel/fpu/signal.c:203 get_sigframe.isra.0.constprop.0+0x46e/0x660 arch/x86/kernel/signal.c:283 __setup_rt_frame arch/x86/kernel/signal.c:465 [inline] setup_rt_frame arch/x86/kernel/signal.c:704 [inline] handle_signal arch/x86/kernel/signal.c:748 [inline] do_signal+0xa12/0x15d0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x160/0x200 arch/x86/entry/common.c:160 prepare_exit_to_usermode+0x1af/0x210 arch/x86/entry/common.c:199 retint_user+0x8/0x18 RIP: 0033:0x405dd9 RSP: 002b:00007f4dfc887a70 EFLAGS: 00010202 RAX: 0000000000000180 RBX: 0000000000509280 RCX: 000000000045ca37 RDX: bb24df53e0b9a706 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 000000000078bf00 R08: 00007f4dfc887a70 R09: 000000000078bf00 R10: 00007f4dfc887a70 R11: 0000000000000213 R12: 00000000ffffffff R13: 0000000000000c06 R14: 00000000004ce538 R15: 00007f4dfc8886d4 Code: 6c 38 00 e9 65 fe ff ff 90 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1c 25 40 ee 01 00 48 8d bb 84 08 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 0f INFO: rcu_preempt self-detected stall on CPU 1-...: (1 GPs behind) idle=9a6/140000000000002/0 softirq=145797/145799 fqs=4186 (t=10500 jiffies g=43503 c=43502 q=3901) NMI backtrace for cpu 1 CPU: 1 PID: 4339 Comm: syz-executor.2 Not tainted 4.14.183-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline] rcu_dump_cpu_stacks+0x16d/0x1b8 kernel/rcu/tree.c:1396 print_cpu_stall kernel/rcu/tree.c:1542 [inline] check_cpu_stall kernel/rcu/tree.c:1610 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0x490/0xdaa kernel/rcu/tree.c:2792 update_process_times+0x29/0x60 kernel/time/timer.c:1590 tick_sched_handle.isra.0+0x73/0x150 kernel/time/tick-sched.c:165 tick_sched_timer+0x41/0x120 kernel/time/tick-sched.c:1223 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x24b/0xb90 kernel/time/hrtimer.c:1287 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x117/0x5f0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:hash_ipport4_expire.isra.0+0x134/0x770 net/netfilter/ipset/ip_set_hash_gen.h:475 RSP: 0000:ffff8880aed07c78 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 RAX: 1ffff92002730abe RBX: ffff88809a27cf00 RCX: 1ffffffff0fe7914 RDX: 0000000000000000 RSI: ffffc90013977000 RDI: ffffc900139855f0 RBP: ffff88809a27cf00 R08: 0000000000004a29 R09: ffffffff89e79a88 R10: ffff88805ed96cd8 R11: ffff88805ed96400 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88808d2dcb00 R15: 0000000000000001 hash_ipport4_gc+0x4c/0x140 net/netfilter/ipset/ip_set_hash_gen.h:536 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279 expire_timers+0x233/0x4d0 kernel/time/timer.c:1318 __run_timers kernel/time/timer.c:1636 [inline] run_timer_softirq+0x1d8/0x5b0 kernel/time/timer.c:1649 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5f0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:lock_acquire+0x1ec/0x3f0 kernel/locking/lockdep.c:4001 RSP: 0000:ffff888204867b20 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0f62c99 RBX: ffff88805ed96400 RCX: 1ffff1100bdb2d95 RDX: dffffc0000000000 RSI: ffff88805ed96c88 RDI: 0000000000000282 RBP: ffff8880566e9410 R08: 0000000000001a48 R09: ffffffff89e61b80 R10: ffff88805ed96c88 R11: ffff88805ed96400 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 __might_fault mm/memory.c:4584 [inline] __might_fault+0x137/0x1b0 mm/memory.c:4569 __copy_to_user include/linux/uaccess.h:102 [inline] save_xstate_epilog arch/x86/kernel/fpu/signal.c:89 [inline] copy_fpstate_to_sigframe+0x29e/0x5a0 arch/x86/kernel/fpu/signal.c:203 get_sigframe.isra.0.constprop.0+0x46e/0x660 arch/x86/kernel/signal.c:283 __setup_rt_frame arch/x86/kernel/signal.c:465 [inline] setup_rt_frame arch/x86/kernel/signal.c:704 [inline] handle_signal arch/x86/kernel/signal.c:748 [inline] do_signal+0xa12/0x15d0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x160/0x200 arch/x86/entry/common.c:160 prepare_exit_to_usermode+0x1af/0x210 arch/x86/entry/common.c:199 retint_user+0x8/0x18 RIP: 0033:0x405dd9 RSP: 002b:00007f4dfc887a70 EFLAGS: 00010202 RAX: 0000000000000180 RBX: 0000000000509280 RCX: 000000000045ca37 RDX: bb24df53e0b9a706 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 000000000078bf00 R08: 00007f4dfc887a70 R09: 000000000078bf00 R10: 00007f4dfc887a70 R11: 0000000000000213 R12: 00000000ffffffff R13: 0000000000000c06 R14: 00000000004ce538 R15: 00007f4dfc8886d4