INFO: rcu_sched detected stalls on CPUs/tasks: (detected by 0, t=10502 jiffies, g=28577, c=28576, q=4) All QSes seen, last rcu_sched kthread activity 10503 (4295056878-4295046375), jiffies_till_next_fqs=1, root ->qsmask 0x0 syz-executor.4 R running task 27376 19379 18621 0x8000000c Call Trace: sched_show_task kernel/sched/core.c:5168 [inline] sched_show_task.cold+0x2f0/0x351 kernel/sched/core.c:5143 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline] check_cpu_stall kernel/rcu/tree.c:1616 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0xcb1/0xd0a kernel/rcu/tree.c:2792 update_process_times+0x31/0x70 kernel/time/timer.c:1590 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:165 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1223 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x270/0xbc0 kernel/time/hrtimer.c:1287 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1321 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x11c/0x5e0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:lock_is_held_type+0x17e/0x210 kernel/locking/lockdep.c:4034 RSP: 0018:ffff8880aec07b28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0fe2ce1 RBX: 0000000000000286 RCX: ffff8880553e8c40 RDX: dffffc0000000000 RSI: ffffffff87f84e60 RDI: 0000000000000286 RBP: ffff8880aec07b48 R08: 00000000b651cf58 R09: ffff8880553e8c88 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880553e83c0 R14: ffffffff85189605 R15: dffffc0000000000 lock_is_held include/linux/lockdep.h:437 [inline] rcu_read_lock_sched_held+0x110/0x130 kernel/rcu/update.c:116 trace_kmem_cache_free include/trace/events/kmem.h:144 [inline] kmem_cache_free+0x244/0x2b0 mm/slab.c:3761 kfree_skbmem+0xa5/0x110 net/core/skbuff.c:586 __kfree_skb net/core/skbuff.c:646 [inline] kfree_skb+0xbd/0x350 net/core/skbuff.c:663 hsr_forward_skb+0xdee/0x1940 net/hsr/hsr_forward.c:376 send_hsr_supervision_frame+0x908/0xf40 net/hsr/hsr_device.c:321 hsr_announce+0xf5/0x340 net/hsr/hsr_device.c:350 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279 INFO: rcu_preempt self-detected stall on CPU 1-...: (1 GPs behind) idle=a5e/140000000000002/0 softirq=123706/123708 fqs=8 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649 (t=10500 jiffies g=42857 c=42856 q=850) rcu_preempt kthread starved for 305 jiffies! g42857 c42856 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 rcu_preempt R running task 29776 8 2 0x80000000 __do_softirq+0x244/0x9a0 kernel/softirq.c:288 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x160/0x1b0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 schedule+0x92/0x1c0 kernel/sched/core.c:3428 schedule_timeout+0x43e/0xe10 kernel/time/timer.c:1746 RIP: 0010:__tlb_remove_page_size+0x130/0x4f0 mm/memory.c:316 RSP: 0018:ffff8880301ff740 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000007 RBX: ffff8880301ff990 RCX: 1ffff1100aa7d186 RDX: 0000000000000000 RSI: ffffea0002858ac0 RDI: ffff8880a548800c rcu_gp_kthread+0xbf4/0x1ec0 kernel/rcu/tree.c:2255 RBP: ffff8880301ff770 R08: ffff8880301ff9b8 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880553e83c0 R12: ffff8880a5488000 kthread+0x319/0x430 kernel/kthread.c:232 R13: 0000000000000001 R14: ffffea0002858ac0 R15: 0000000000000002 __tlb_remove_page include/asm-generic/tlb.h:150 [inline] zap_pte_range mm/memory.c:1345 [inline] zap_pmd_range mm/memory.c:1444 [inline] zap_pud_range mm/memory.c:1473 [inline] zap_p4d_range mm/memory.c:1494 [inline] unmap_page_range+0xb59/0x19f0 mm/memory.c:1515 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 NMI backtrace for cpu 1 unmap_single_vma+0x15d/0x2c0 mm/memory.c:1560 unmap_vmas+0xac/0x170 mm/memory.c:1590 exit_mmap+0x285/0x4e0 mm/mmap.c:3056 __mmput kernel/fork.c:930 [inline] mmput+0x114/0x440 kernel/fork.c:951 exit_mm kernel/exit.c:545 [inline] do_exit+0x952/0x2cd0 kernel/exit.c:845 CPU: 1 PID: 19376 Comm: syz-executor.1 Not tainted 4.14.169-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: do_group_exit+0x111/0x330 kernel/exit.c:955 get_signal+0x381/0x1cd0 kernel/signal.c:2418 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101 do_signal+0x86/0x19a0 arch/x86/kernel/signal.c:814 nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline] rcu_dump_cpu_stacks+0x186/0x1d2 kernel/rcu/tree.c:1396 print_cpu_stall kernel/rcu/tree.c:1542 [inline] check_cpu_stall kernel/rcu/tree.c:1610 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0x43d/0xd0a kernel/rcu/tree.c:2792 update_process_times+0x31/0x70 kernel/time/timer.c:1590 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:165 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1223 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x270/0xbc0 kernel/time/hrtimer.c:1287 exit_to_usermode_loop+0x15c/0x220 arch/x86/entry/common.c:160 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4bc/0x640 arch/x86/entry/common.c:297 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1321 entry_SYSCALL_64_after_hwframe+0x42/0xb7 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x11c/0x5e0 arch/x86/kernel/apic/apic.c:1100 RIP: 0033:0x45b399 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RSP: 002b:00007f522dab2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RIP: 0010:kernel_text_address+0x90/0xf0 kernel/extable.c:158 RAX: 0000000000000005 RBX: 00007f522dab36d4 RCX: 000000000045b399 RSP: 0018:ffff8880aed07410 EFLAGS: 00000287 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 ORIG_RAX: ffffffffffffff10 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff RAX: dffffc0000000000 RBX: ffffffff859241d4 RCX: 1ffff11015da0e95 R13: 0000000000000b57 R14: 00000000004cc41f R15: 000000000075bf2c rcu_sched kthread starved for 10521 jiffies! g28577 c28576 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 RDX: 1ffff11015da0e96 RSI: 1ffff11015da0e00 RDI: ffffffff859241d4 rcu_sched R RBP: ffff8880aed07420 R08: 0000000000000001 R09: ffff8880aed074c0 R10: ffff8880aed07490 R11: ffff8880aed074a0 R12: ffffffff859241d4 running task R13: 0000000000000000 R14: ffff88802d4fe300 R15: ffff8880aa800ac0 28976 9 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 __kernel_text_address+0xd/0x40 kernel/extable.c:105 unwind_get_return_address arch/x86/kernel/unwind_frame.c:18 [inline] unwind_get_return_address+0x61/0xa0 arch/x86/kernel/unwind_frame.c:13 schedule+0x92/0x1c0 kernel/sched/core.c:3428 __save_stack_trace+0x7b/0xd0 arch/x86/kernel/stacktrace.c:45 schedule_timeout+0x43e/0xe10 kernel/time/timer.c:1746 save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:59 save_stack+0x45/0xd0 mm/kasan/kasan.c:447 rcu_gp_kthread+0xbf4/0x1ec0 kernel/rcu/tree.c:2255 kthread+0x319/0x430 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc mm/kasan/kasan.c:551 [inline] kasan_kmalloc+0xce/0xf0 mm/kasan/kasan.c:529 kasan_slab_alloc+0xf/0x20 mm/kasan/kasan.c:489 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc mm/slab.c:3390 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x146/0x7a0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] kzalloc include/linux/slab.h:661 [inline] neigh_alloc net/core/neighbour.c:324 [inline] __neigh_create+0x1d6/0x19f0 net/core/neighbour.c:499 ip6_finish_output2+0xab2/0x21b0 net/ipv6/ip6_output.c:117 ip6_finish_output+0x4f4/0xb50 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:239 [inline] ip6_output+0x20f/0x6d0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:462 [inline] NF_HOOK include/linux/netfilter.h:250 [inline] ndisc_send_skb+0xb56/0x11e0 net/ipv6/ndisc.c:483 ndisc_send_rs+0x12b/0x670 net/ipv6/ndisc.c:677 addrconf_rs_timer+0x289/0x5a0 net/ipv6/addrconf.c:3757 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649 __do_softirq+0x244/0x9a0 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x160/0x1b0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:is_bpf_text_address+0x54/0x120 kernel/bpf/core.c:457 RSP: 0018:ffff8880301e7668 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffffffff0f817ad RDX: 0000000000000000 RSI: ffffffff830e5b6c RDI: ffff8880aed2394c RBP: ffff8880301e7670 R08: 0000000000000000 R09: ffff88802d4febc8 R10: ffff88802d4feba8 R11: ffff88802d4fe300 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88802d4fe300 R15: ffff88809ad69840 kernel_text_address+0x73/0xf0 kernel/extable.c:150 __kernel_text_address+0xd/0x40 kernel/extable.c:105 unwind_get_return_address arch/x86/kernel/unwind_frame.c:18 [inline] unwind_get_return_address+0x61/0xa0 arch/x86/kernel/unwind_frame.c:13 __save_stack_trace+0x7b/0xd0 arch/x86/kernel/stacktrace.c:45 save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:59 save_stack+0x45/0xd0 mm/kasan/kasan.c:447 set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc mm/kasan/kasan.c:551 [inline] kasan_kmalloc+0xce/0xf0 mm/kasan/kasan.c:529 kasan_slab_alloc+0xf/0x20 mm/kasan/kasan.c:489 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc mm/slab.c:3390 [inline] kmem_cache_alloc+0x11b/0x780 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] ebitmap_cpy+0xcd/0x270 security/selinux/ss/ebitmap.c:60 mls_context_cpy security/selinux/ss/context.h:51 [inline] mls_compute_sid+0x22f/0xd60 security/selinux/ss/mls.c:556 security_compute_sid.part.0+0xa8f/0x10f0 security/selinux/ss/services.c:1725 security_compute_sid security/selinux/ss/services.c:1764 [inline] security_transition_sid+0xd6/0x130 security/selinux/ss/services.c:1764 socket_sockcreate_sid security/selinux/hooks.c:4356 [inline] socket_sockcreate_sid security/selinux/hooks.c:4348 [inline] selinux_socket_post_create+0x559/0x680 security/selinux/hooks.c:4407 security_socket_post_create+0x8b/0xc0 security/security.c:1352 __sock_create+0x4a1/0x620 net/socket.c:1291 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd3/0x170 net/socket.c:1325 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45b399 RSP: 002b:00007f46d7d9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f46d7d9f6d4 RCX: 000000000045b399 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000b57 R14: 00000000004cc41f R15: 000000000075bf2c