rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (10500 ticks this GP) idle=5be/1/0x4000000000000002 softirq=34496/34496 fqs=0 
rcu: 	 (t=10501 jiffies g=45353 q=14)
rcu: rcu_preempt kthread starved for 10502 jiffies! g45353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     I22872    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2825 [inline]
 __schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
 schedule+0xfe/0x460 kernel/sched/core.c:3517
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_kthread+0x9d9/0x2310 kernel/rcu/tree.c:2194
 kthread+0x35a/0x420 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.353 msecs
NMI backtrace for cpu 0
CPU: 0 PID: 14582 Comm: syz-executor4 Not tainted 4.19.0-rc3+ #13
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__wrmsr arch/x86/include/asm/msr.h:105 [inline]
RIP: 0010:native_write_msr+0xa/0x30 arch/x86/include/asm/msr.h:162
Code: 5d c3 0f 21 c8 5d c3 0f 21 d0 5d c3 0f 21 d8 5d c3 0f 21 f0 5d c3 0f 0b 0f 1f 84 00 00 00 00 00 55 89 f9 89 f0 48 89 e5 0f 30 <0f> 1f 44 00 00 5d c3 48 c1 e2 20 89 f6 48 09 d6 31 d2 e8 bf 1a 6e
RSP: 0018:ffff8801dae07d30 EFLAGS: 00000046
RAX: 00000000000001a4 RBX: 0000000000000838 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 00000000000001a4 RDI: 0000000000000838
RBP: ffff8801dae07d30 R08: ffff8801a2874380 R09: 0000000000000008
R10: fffffbfff14fb801 R11: 0000000000000001 R12: 00000000000001a4
R13: 0000000000000000 R14: 0000000000000000 R15: 7fffffffffffffff
FS:  00007f17de630700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0cdd36662c CR3: 00000001c2c69000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 paravirt_write_msr arch/x86/include/asm/paravirt.h:117 [inline]
 native_apic_msr_write+0x5b/0x80 arch/x86/include/asm/apic.h:209
 apic_write arch/x86/include/asm/apic.h:397 [inline]
 lapic_next_event+0x5a/0x90 arch/x86/kernel/apic/apic.c:461
 clockevents_program_event+0x251/0x370 kernel/time/clockevents.c:344
 tick_program_event+0xb7/0x130 kernel/time/tick-oneshot.c:48
 hrtimer_interrupt+0x368/0x780 kernel/time/hrtimer.c:1531
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1029 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1054
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864
 </IRQ>
RIP: 0010:rep_nop arch/x86/include/asm/processor.h:665 [inline]
RIP: 0010:cpu_relax arch/x86/include/asm/processor.h:670 [inline]
RIP: 0010:__read_seqcount_begin include/linux/seqlock.h:115 [inline]
RIP: 0010:raw_read_seqcount_begin include/linux/seqlock.h:148 [inline]
RIP: 0010:read_seqcount_begin include/linux/seqlock.h:165 [inline]
RIP: 0010:xfrm_state_find+0x1d04/0x3620 net/xfrm/xfrm_state.c:949
Code: c7 c7 60 46 b1 88 c6 05 ee 44 6d 03 01 e8 af a9 ad fa e9 f3 e7 ff ff e8 4a 57 cb fa 0f 0b e8 43 57 cb fa 0f 0b e8 3c 57 cb fa <f3> 90 48 c7 c0 80 dd 32 8a c6 03 04 8b 00 41 89 c4 41 89 87 c0 fd
RSP: 0018:ffff8801a296e5d0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: ffffed003452dcfa RCX: ffffc90008010000
RDX: 0000000000040000 RSI: ffffffff86b37984 RDI: 0000000000000005
RBP: ffff8801a296ea38 R08: ffff8801a2874380 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8801a2874380 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801a296ea10
 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:1413 [inline]
 xfrm_tmpl_resolve+0x3c0/0xe50 net/xfrm/xfrm_policy.c:1458
 xfrm_resolve_and_create_bundle+0x184/0x2800 net/xfrm/xfrm_policy.c:1753
 xfrm_lookup_with_ifid+0x39e/0x2b80 net/xfrm/xfrm_policy.c:2076
 xfrm_lookup net/xfrm/xfrm_policy.c:2200 [inline]
 xfrm_lookup_route+0x3c/0x1f0 net/xfrm/xfrm_policy.c:2211
 ip6_dst_lookup_flow+0x1c6/0x270 net/ipv6/ip6_output.c:1085
 inet6_csk_route_socket+0x8bd/0x1020 net/ipv6/inet6_connection_sock.c:110
 inet6_csk_xmit+0x118/0x630 net/ipv6/inet6_connection_sock.c:125
 l2tp_xmit_core net/l2tp/l2tp_core.c:1030 [inline]
 l2tp_xmit_skb+0x1465/0x1860 net/l2tp/l2tp_core.c:1132
 pppol2tp_sendmsg+0x4b1/0x6c0 net/l2tp/l2tp_ppp.c:329
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:631
 ___sys_sendmsg+0x51d/0x930 net/socket.c:2114
 __sys_sendmmsg+0x246/0x6d0 net/socket.c:2209
 __do_sys_sendmmsg net/socket.c:2238 [inline]
 __se_sys_sendmmsg net/socket.c:2235 [inline]
 __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2235
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f17de62fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f17de6306d4 RCX: 00000000004572d9
RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000007
RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004d4ae8 R14: 00000000004c9062 R15: 0000000000000000
NMI backtrace for cpu 1
CPU: 1 PID: 14588 Comm: syz-executor5 Not tainted 4.19.0-rc3+ #13
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold.3+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1b3/0x1ed lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:162 [inline]
 rcu_dump_cpu_stacks+0x175/0x1c2 kernel/rcu/tree.c:1340
 print_cpu_stall.cold.78+0x2d3/0x524 kernel/rcu/tree.c:1478
 check_cpu_stall kernel/rcu/tree.c:1550 [inline]
 __rcu_pending kernel/rcu/tree.c:3276 [inline]
 rcu_pending kernel/rcu/tree.c:3319 [inline]
 rcu_check_callbacks+0xfd9/0x1990 kernel/rcu/tree.c:2665
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1029 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1054
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:864
 </IRQ>
RIP: 0010:__read_seqcount_begin include/linux/seqlock.h:113 [inline]
RIP: 0010:raw_read_seqcount_begin include/linux/seqlock.h:148 [inline]
RIP: 0010:read_seqcount_begin include/linux/seqlock.h:165 [inline]
RIP: 0010:xfrm_state_find+0x1d10/0x3620 net/xfrm/xfrm_state.c:949
Code: 01 e8 af a9 ad fa e9 f3 e7 ff ff e8 4a 57 cb fa 0f 0b e8 43 57 cb fa 0f 0b e8 3c 57 cb fa f3 90 48 c7 c0 80 dd 32 8a c6 03 04 <8b> 00 41 89 c4 41 89 87 c0 fd ff ff 89 85 04 fc ff ff 41 83 e4 01
RSP: 0018:ffff8801c538e5d0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: ffffffff8a32dd80 RBX: ffffed0038a71cfa RCX: ffffc9000780c000
RDX: 0000000000040000 RSI: ffffffff86b37984 RDI: 0000000000000005
RBP: ffff8801c538ea38 R08: ffff8801d78b42c0 R09: 0000000000000002
R10: 0000000000000000 R11: ffff8801d78b42c0 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801c538ea10
 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:1413 [inline]
 xfrm_tmpl_resolve+0x3c0/0xe50 net/xfrm/xfrm_policy.c:1458
 xfrm_resolve_and_create_bundle+0x184/0x2800 net/xfrm/xfrm_policy.c:1753
 xfrm_lookup_with_ifid+0x39e/0x2b80 net/xfrm/xfrm_policy.c:2076
 xfrm_lookup net/xfrm/xfrm_policy.c:2200 [inline]
 xfrm_lookup_route+0x3c/0x1f0 net/xfrm/xfrm_policy.c:2211
 ip6_dst_lookup_flow+0x1c6/0x270 net/ipv6/ip6_output.c:1085
 inet6_csk_route_socket+0x8bd/0x1020 net/ipv6/inet6_connection_sock.c:110
 inet6_csk_xmit+0x118/0x630 net/ipv6/inet6_connection_sock.c:125
 l2tp_xmit_core net/l2tp/l2tp_core.c:1030 [inline]
 l2tp_xmit_skb+0x1465/0x1860 net/l2tp/l2tp_core.c:1132
 pppol2tp_sendmsg+0x4b1/0x6c0 net/l2tp/l2tp_ppp.c:329
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:631
 ___sys_sendmsg+0x51d/0x930 net/socket.c:2114
 __sys_sendmmsg+0x246/0x6d0 net/socket.c:2209
 __do_sys_sendmmsg net/socket.c:2238 [inline]
 __se_sys_sendmmsg net/socket.c:2235 [inline]
 __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2235
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ff20b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007ff20b70a6d4 RCX: 00000000004572d9
RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000007
RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004d4ae8 R14: 00000000004c9062 R15: 0000000000000000