INFO: rcu_preempt self-detected stall on CPU 0-...: (1 GPs behind) idle=f92/140000000000002/0 softirq=57131/57132 fqs=5 (t=10500 jiffies g=16587 c=16586 q=574) rcu_preempt kthread starved for 10455 jiffies! g16587 c16586 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 rcu_preempt R running task 29280 8 2 0x80000000 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_timeout+0x43c/0xe40 kernel/time/timer.c:1746 rcu_gp_kthread+0xb8e/0x1ce0 kernel/rcu/tree.c:2255 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 NMI backtrace for cpu 0 CPU: 0 PID: 27062 Comm: syz-executor.5 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x139/0x17e lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline] rcu_dump_cpu_stacks+0x16d/0x1b8 kernel/rcu/tree.c:1396 print_cpu_stall kernel/rcu/tree.c:1542 [inline] check_cpu_stall kernel/rcu/tree.c:1610 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0x490/0xdaa kernel/rcu/tree.c:2792 update_process_times+0x29/0x60 kernel/time/timer.c:1590 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165 tick_sched_timer+0x3e/0x120 kernel/time/tick-sched.c:1223 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x25c/0xbb0 kernel/time/hrtimer.c:1287 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:save_stack_address+0x0/0x60 arch/x86/kernel/stacktrace.c:18 RSP: 0018:ffff8880aea074c0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: ffffffff84f9738a RBX: ffff8880aea07550 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff84f9738a RDI: ffff8880aea07550 RBP: ffff8880aea07540 R08: 0000000000000001 R09: ffff8880aea07868 R10: ffff8880aea074fd R11: 0000000000058071 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88804b11e680 R15: ffff8880a446c77f __save_stack_trace+0x5e/0xd0 arch/x86/kernel/stacktrace.c:46 save_stack+0x32/0xa0 mm/kasan/kasan.c:447 set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc mm/kasan/kasan.c:551 [inline] kasan_kmalloc+0xbf/0xe0 mm/kasan/kasan.c:529 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc_node mm/slab.c:3333 [inline] kmem_cache_alloc_node_trace+0x144/0x7b0 mm/slab.c:3659 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve.isra.0+0x35/0xd0 net/core/skbuff.c:137 __alloc_skb+0xca/0x4c0 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] _sctp_make_chunk+0x44/0x250 net/sctp/sm_make_chunk.c:1388 sctp_make_control+0x30/0x150 net/sctp/sm_make_chunk.c:1429 sctp_make_heartbeat+0x79/0x240 net/sctp/sm_make_chunk.c:1148 sctp_sf_heartbeat.isra.0+0x21/0x170 net/sctp/sm_statefuns.c:981 sctp_sf_sendbeat_8_3+0x34e/0x4f0 net/sctp/sm_statefuns.c:1025 sctp_do_sm+0xf6/0x4a90 net/sctp/sm_sideeffect.c:1147 sctp_generate_heartbeat_event+0x1da/0x3f0 net/sctp/sm_sideeffect.c:391 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x91/0xe0 kernel/locking/spinlock.c:192 RSP: 0018:ffff88804bb7fa70 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0fa2cd1 RBX: 0000000000000282 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282 RBP: ffff88804a0e49c0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804a0e4200 R13: ffff88804a0e49c0 R14: 0000000000000001 R15: ffff8880aea2b558 try_to_wake_up+0x9a/0xef0 kernel/sched/core.c:2091 wake_up_process kernel/sched/core.c:2160 [inline] wake_up_q+0x90/0xe0 kernel/sched/core.c:468 futex_wake+0x337/0x3d0 kernel/futex.c:1714 do_futex+0x264/0x1850 kernel/futex.c:3924 SYSC_futex kernel/futex.c:3980 [inline] SyS_futex+0x1e8/0x2c0 kernel/futex.c:3948 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c849 RSP: 002b:00007fd3641dacf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 000000000076bf08 RCX: 000000000045c849 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf0c RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf0c R13: 00007ffcf7eca48f R14: 00007fd3641db9c0 R15: 000000000076bf0c INFO: rcu_sched detected stalls on CPUs/tasks: 0-...: (1 GPs behind) idle=f92/140000000000002/0 softirq=57131/57132 fqs=5 (detected by 1, t=10583 jiffies, g=9203, c=9202, q=5) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 27062 Comm: syz-executor.5 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88804b11e680 task.stack: ffff88804bb78000 RIP: 0010:cpumask_test_cpu include/linux/cpumask.h:316 [inline] RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline] RIP: 0010:lock_acquire+0x210/0x3f0 kernel/locking/lockdep.c:3993 RSP: 0018:ffff8880aea07070 EFLAGS: 00000093 RAX: 0000000000000000 RBX: ffff88804b11e680 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804b11eefc RBP: ffff8880a8273420 R08: 0000000000000001 R09: 0000000000000000 R10: ffff88804b11ef78 R11: ffff88804b11e680 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000002 FS: 00007fd3641db700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31f24000 CR3: 000000004bad3000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline] _raw_read_lock+0x2d/0x40 kernel/locking/spinlock.c:224 send_sigio+0x24/0x1d0 fs/fcntl.c:778 kill_fasync_rcu fs/fcntl.c:997 [inline] kill_fasync fs/fcntl.c:1011 [inline] kill_fasync+0x1be/0x3c0 fs/fcntl.c:1004 perf_event_wakeup+0x20c/0x350 kernel/events/core.c:5569 perf_pending_event+0xa5/0xd0 kernel/events/core.c:5593 irq_work_run_list+0xf0/0x160 kernel/irq_work.c:156 irq_work_run+0x4e/0xb0 kernel/irq_work.c:171 smp_irq_work_interrupt+0xa3/0x4e0 arch/x86/kernel/irq_work.c:21 irq_work_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:823 RIP: 0010:unwind_next_frame+0x426/0x17a0 arch/x86/kernel/unwind_orc.c:467 RSP: 0018:ffff8880aea072c0 EFLAGS: 00000a03 ORIG_RAX: ffffffffffffff09 RAX: 1ffffffff12a186e RBX: ffff8880aea07370 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffff88804bb7ff58 RDI: ffff8880aea073a6 RBP: 1ffff11015d40e5f R08: ffffffff8950c376 R09: ffff88804bb7ff58 R10: ffff8880aea073a5 R11: 0000000000058071 R12: ffffffff8950c372 R13: ffff8880aea073a8 R14: ffff88804bb7ff58 R15: 0000000000000001 __save_stack_trace+0x6b/0xd0 arch/x86/kernel/stacktrace.c:44 save_stack+0x32/0xa0 mm/kasan/kasan.c:447 set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc mm/kasan/kasan.c:551 [inline] kasan_kmalloc+0xbf/0xe0 mm/kasan/kasan.c:529 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc_node mm/slab.c:3333 [inline] kmem_cache_alloc_node_trace+0x144/0x7b0 mm/slab.c:3659 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve.isra.0+0x35/0xd0 net/core/skbuff.c:137 __alloc_skb+0xca/0x4c0 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] sctp_packet_transmit+0x30c/0x2d70 net/sctp/output.c:580 sctp_outq_flush+0xc54/0x2dd0 net/sctp/outqueue.c:1187 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1787 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1179 [inline] sctp_do_sm+0x419/0x4a90 net/sctp/sm_sideeffect.c:1150 sctp_generate_heartbeat_event+0x1da/0x3f0 net/sctp/sm_sideeffect.c:391 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649 __do_softirq+0x254/0x9bf kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15b/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x91/0xe0 kernel/locking/spinlock.c:192 RSP: 0018:ffff88804bb7fa70 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0fa2cd1 RBX: 0000000000000282 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282 RBP: ffff88804a0e49c0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804a0e4200 R13: ffff88804a0e49c0 R14: 0000000000000001 R15: ffff8880aea2b558 try_to_wake_up+0x9a/0xef0 kernel/sched/core.c:2091 wake_up_process kernel/sched/core.c:2160 [inline] wake_up_q+0x90/0xe0 kernel/sched/core.c:468 futex_wake+0x337/0x3d0 kernel/futex.c:1714 do_futex+0x264/0x1850 kernel/futex.c:3924 SYSC_futex kernel/futex.c:3980 [inline] SyS_futex+0x1e8/0x2c0 kernel/futex.c:3948 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c849 RSP: 002b:00007fd3641dacf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 000000000076bf08 RCX: 000000000045c849 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf0c RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf0c R13: 00007ffcf7eca48f R14: 00007fd3641db9c0 R15: 000000000076bf0c Code: 48 8b 7c 24 08 57 9d 0f 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b 05 99 48 bb 7e 83 f8 3f 0f 87 3c 01 00 00 <89> c0 48 0f a3 05 ee eb 4b 07 0f 83 1f ff ff ff 65 ff 05 19 b5 rcu_sched kthread starved for 10539 jiffies! g9203 c9202 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 rcu_sched R running task 29920 9 2 0x80000000 Call Trace: schedule+0x8d/0x1b0 kernel/sched/core.c:3428 schedule_timeout+0x43c/0xe40 kernel/time/timer.c:1746 rcu_gp_kthread+0xb8e/0x1ce0 kernel/rcu/tree.c:2255 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404