INFO: rcu_preempt self-detected stall on CPU
	1-...: (1 GPs behind) idle=4a2/140000000000002/0 softirq=242588/242590 fqs=4746 
	 (t=10500 jiffies g=70260 c=70259 q=143)
NMI backtrace for cpu 1
CPU: 1 PID: 29583 Comm: syz-executor.1 Not tainted 4.14.174-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x13e/0x194 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x139/0x17e lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
 rcu_dump_cpu_stacks+0x16d/0x1b8 kernel/rcu/tree.c:1396
 print_cpu_stall kernel/rcu/tree.c:1542 [inline]
 check_cpu_stall kernel/rcu/tree.c:1610 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0x490/0xdaa kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1590
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x3e/0x120 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x25c/0xbb0 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:__kernel_text_address+0x4/0x30 kernel/extable.c:105
RSP: 0018:ffff8880aeb07348 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: dffffc0000000000 RBX: ffffffff81796c48 RCX: 0000000000000000
RDX: 1ffff11015d60e77 RSI: ffff8880aeb07278 RDI: ffffffff81796c48
RBP: ffff8880aeb073b8 R08: 0000000000000001 R09: ffff88820d2df7a0
R10: ffff8880aeb073a5 R11: 0000000000058071 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888079b381c0 R15: ffff8880a7ecebbf
 unwind_get_return_address arch/x86/kernel/unwind_orc.c:255 [inline]
 unwind_get_return_address+0x5a/0xa0 arch/x86/kernel/unwind_orc.c:250
 __save_stack_trace+0x7b/0xd0 arch/x86/kernel/stacktrace.c:45
 save_stack+0x32/0xa0 mm/kasan/kasan.c:447
 set_track mm/kasan/kasan.c:459 [inline]
 kasan_kmalloc mm/kasan/kasan.c:551 [inline]
 kasan_kmalloc+0xbf/0xe0 mm/kasan/kasan.c:529
 kmem_cache_alloc_node_trace+0x15a/0x7b0 mm/slab.c:3661
 __do_kmalloc_node mm/slab.c:3681 [inline]
 __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696
 __kmalloc_reserve.isra.0+0x35/0xd0 net/core/skbuff.c:137
 __alloc_skb+0xca/0x4c0 net/core/skbuff.c:205
 alloc_skb include/linux/skbuff.h:980 [inline]
 sctp_packet_transmit+0x30c/0x2d70 net/sctp/output.c:580
 sctp_outq_flush+0xc54/0x2dd0 net/sctp/outqueue.c:1187
 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1787 [inline]
 sctp_side_effects net/sctp/sm_sideeffect.c:1179 [inline]
 sctp_do_sm+0x419/0x4a90 net/sctp/sm_sideeffect.c:1150
 sctp_generate_heartbeat_event+0x1da/0x3f0 net/sctp/sm_sideeffect.c:391
 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279
 expire_timers kernel/time/timer.c:1318 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649
 __do_softirq+0x254/0x9bf kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x15b/0x1a0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:page_zonenum include/linux/mm.h:785 [inline]
RIP: 0010:is_zone_device_page include/linux/mm.h:791 [inline]
RIP: 0010:is_device_public_page include/linux/memremap.h:171 [inline]
RIP: 0010:release_pages+0x100/0xc00 mm/swap.c:769
RSP: 0018:ffff88820d2df6d8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: 00fffe0000000000 RBX: ffffea00014a2b9c RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000000001fe RDI: ffff88808fe4e010
RBP: ffffea0001e98d00 R08: 1ffff1100483e000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffea00014a2ba0
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88808fe4e2c0
 tlb_flush_mmu_free+0x73/0x130 mm/memory.c:260
 zap_pte_range mm/memory.c:1409 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x1308/0x1930 mm/memory.c:1515
 unmap_single_vma+0x147/0x2b0 mm/memory.c:1560
 unmap_vmas+0x9d/0x160 mm/memory.c:1590
 exit_mmap+0x26d/0x4b0 mm/mmap.c:3056
 __mmput kernel/fork.c:930 [inline]
 mmput+0x103/0x420 kernel/fork.c:951
 exit_mm kernel/exit.c:545 [inline]
 do_exit+0x933/0x2b00 kernel/exit.c:845
 do_group_exit+0x100/0x310 kernel/exit.c:955
 get_signal+0x385/0x1ca0 kernel/signal.c:2423
 do_signal+0x7c/0x1690 arch/x86/kernel/signal.c:814
 exit_to_usermode_loop+0x159/0x220 arch/x86/entry/common.c:160
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c849
RSP: 002b:00007f7909d2dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: 0000000000000004 RBX: 00007f7909d2e6d4 RCX: 000000000045c849
RDX: 0000000000000002 RSI: 0000000020001380 RDI: ffffffffffffff9c
RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000007a0 R14: 00000000004ca516 R15: 000000000076c04c