INFO: rcu_preempt self-detected stall on CPU 1-...: (10499 ticks this GP) idle=98e/140000000000002/0 softirq=12932/12937 fqs=3 (t=10500 jiffies g=1533 c=1532 q=961) rcu_preempt kthread starved for 2989 jiffies! g1533 c1532 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 rcu_preempt R running task 29824 8 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 schedule+0x92/0x1c0 kernel/sched/core.c:3428 schedule_timeout+0x43e/0xe10 kernel/time/timer.c:1746 rcu_gp_kthread+0xbf4/0x1ec0 kernel/rcu/tree.c:2255 kthread+0x319/0x430 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 NMI backtrace for cpu 1 CPU: 1 PID: 7809 Comm: syz-executor446 Not tainted 4.14.162-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline] rcu_dump_cpu_stacks+0x186/0x1d2 kernel/rcu/tree.c:1396 print_cpu_stall kernel/rcu/tree.c:1542 [inline] check_cpu_stall kernel/rcu/tree.c:1610 [inline] __rcu_pending kernel/rcu/tree.c:3390 [inline] rcu_pending kernel/rcu/tree.c:3452 [inline] rcu_check_callbacks.cold+0x43d/0xd0a kernel/rcu/tree.c:2792 update_process_times+0x31/0x70 kernel/time/timer.c:1590 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:161 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1219 __run_hrtimer kernel/time/hrtimer.c:1223 [inline] __hrtimer_run_queues+0x270/0xbc0 kernel/time/hrtimer.c:1287 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1321 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline] smp_apic_timer_interrupt+0x11c/0x5e0 arch/x86/kernel/apic/apic.c:1100 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:23 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0xe/0x60 kernel/kcov.c:65 RSP: 0018:ffff8880aed07768 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: ffff88808bdf4340 RBX: ffff888088eb2400 RCX: ffff8880a89f870c RDX: 1ffff1101513f0da RSI: ffff8880a89f8668 RDI: ffff8880a89f86d0 RBP: ffff8880aed078c0 R08: ffffffff851fe762 R09: ffff88808bdf4c58 R10: ffff88808bdf4c38 R11: ffff88808bdf4340 R12: ffff8880a89f8640 R13: ffff8880a89f8706 R14: 0000000000000046 R15: ffff888088eb2340 dev_queue_xmit+0x18/0x20 net/core/dev.c:3558 neigh_hh_output include/net/neighbour.h:490 [inline] neigh_output include/net/neighbour.h:498 [inline] ip6_finish_output2+0x10bd/0x21b0 net/ipv6/ip6_output.c:120 ip6_finish_output+0x4f4/0xb50 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:239 [inline] ip6_output+0x20f/0x6d0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:462 [inline] NF_HOOK include/linux/netfilter.h:250 [inline] ndisc_send_skb+0xb56/0x11e0 net/ipv6/ndisc.c:483 ndisc_send_rs+0x12b/0x670 net/ipv6/ndisc.c:677 addrconf_rs_timer+0x289/0x5a0 net/ipv6/addrconf.c:3757 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649 __do_softirq+0x244/0x9a0 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x160/0x1b0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 kernel/locking/spinlock.c:192 RSP: 0018:ffff888095327a10 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0fe2d29 RBX: 0000000000000282 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282 RBP: ffff888095327a20 R08: ffff88808bdf4340 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7d8cd00 R13: ffff8880a7d8c540 R14: 0000000000000001 R15: ffff8880aed2b558 try_to_wake_up+0xa8/0xf90 kernel/sched/core.c:2091 wake_up_process kernel/sched/core.c:2160 [inline] wake_up_q+0x95/0xf0 kernel/sched/core.c:468 futex_wake+0x38b/0x430 kernel/futex.c:1697 do_futex+0x290/0x19e0 kernel/futex.c:3907 SYSC_futex kernel/futex.c:3963 [inline] SyS_futex+0x215/0x310 kernel/futex.c:3931 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x449979 RSP: 002b:00007fbb070efcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00000000006dfc28 RCX: 0000000000449979 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00000000006dfc2c RBP: 00000000006dfc20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc2c R13: 00007ffe1ad0f31f R14: 00007fbb070f09c0 R15: 20c49ba5e353f7cf INFO: rcu_sched detected stalls on CPUs/tasks: 1-...: (10501 ticks this GP) idle=98e/140000000000002/0 softirq=12932/12937 fqs=3 (detected by 0, t=10563 jiffies, g=1080, c=1079, q=11) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7809 Comm: syz-executor446 Not tainted 4.14.162-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88808bdf4340 task.stack: ffff888095320000 RIP: 0010:pvclock_clocksource_read+0x2ac/0x4a0 arch/x86/kernel/pvclock.c:122 RSP: 0018:ffff8880aed078c8 EFLAGS: 00000082 RAX: 0000012a7abd6b8f RBX: ffff88821fff7040 RCX: 000000000000000c RDX: 0000000022add842 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8880aed078f0 R08: 0000012a9d6b43d1 R09: ffff88821fff7048 R10: ffff88821fff7050 R11: 0000000000000001 R12: dffffc0000000000 R13: ffff88821fff7043 R14: ffffed1043ffee09 R15: ffff88821fff705d FS: 00007fbb070f0700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200003c8 CR3: 0000000088aeb000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_clock_read+0x23/0x40 arch/x86/kernel/kvmclock.c:88 kvm_sched_clock_read+0x9/0x20 arch/x86/kernel/kvmclock.c:100 paravirt_sched_clock arch/x86/include/asm/paravirt.h:175 [inline] sched_clock+0x2e/0x50 arch/x86/kernel/tsc.c:228 sched_clock_cpu+0x1b/0x1c0 kernel/sched/clock.c:363 irqtime_account_irq+0x6a/0x290 kernel/sched/cputime.c:63 account_irq_exit_time include/linux/vtime.h:114 [inline] irq_exit+0x4c/0x1b0 kernel/softirq.c:406 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_irq_work_interrupt+0xd2/0x4e0 arch/x86/kernel/irq_work.c:23 irq_work_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:823 RIP: 0010:trace_kmalloc_node include/trace/events/kmem.h:100 [inline] RIP: 0010:kmem_cache_alloc_node_trace+0x374/0x770 mm/slab.c:3662 RSP: 0018:ffff8880aed07aa8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff09 RAX: 0000000000000001 RBX: 0000000001090220 RCX: 1ffffffff1068254 RDX: 0000000000000000 RSI: ffff888097f5f920 RDI: ffff88808bdf4bbc RBP: ffff8880aed07b20 R08: 00000000230647a2 R09: 0000000000000001 R10: 0000000000000000 R11: ffff88808bdf4340 R12: ffffffff8187a31d R13: 0000000000000280 R14: ffff8880a89faa00 R15: 0000000001090220 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x3d/0x80 mm/slab.c:3696 __kmalloc_reserve.isra.0+0x40/0xe0 net/core/skbuff.c:137 __alloc_skb+0xcf/0x500 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] ndisc_alloc_skb+0x13c/0x340 net/ipv6/ndisc.c:402 ndisc_send_rs+0x303/0x670 net/ipv6/ndisc.c:661 addrconf_rs_timer+0x289/0x5a0 net/ipv6/addrconf.c:3757 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279 expire_timers kernel/time/timer.c:1318 [inline] __run_timers kernel/time/timer.c:1636 [inline] __run_timers kernel/time/timer.c:1604 [inline] run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649 __do_softirq+0x244/0x9a0 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x160/0x1b0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 kernel/locking/spinlock.c:192 RSP: 0018:ffff888095327a10 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff0fe2d29 RBX: 0000000000000282 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282 RBP: ffff888095327a20 R08: ffff88808bdf4340 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7d8cd00 R13: ffff8880a7d8c540 R14: 0000000000000001 R15: ffff8880aed2b558 try_to_wake_up+0xa8/0xf90 kernel/sched/core.c:2091 wake_up_process kernel/sched/core.c:2160 [inline] wake_up_q+0x95/0xf0 kernel/sched/core.c:468 futex_wake+0x38b/0x430 kernel/futex.c:1697 do_futex+0x290/0x19e0 kernel/futex.c:3907 SYSC_futex kernel/futex.c:3963 [inline] SyS_futex+0x215/0x310 kernel/futex.c:3931 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x449979 RSP: 002b:00007fbb070efcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00000000006dfc28 RCX: 0000000000449979 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00000000006dfc2c RBP: 00000000006dfc20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc2c R13: 00007ffe1ad0f31f R14: 00007fbb070f09c0 R15: 20c49ba5e353f7cf Code: f6 05 50 1c 8a 07 01 4c 8d 04 02 75 2c 48 8b 05 6b dd c2 07 4c 39 c0 77 77 f0 4c 0f b1 05 5d dd c2 07 4c 39 c0 75 ed 48 83 c4 60 <4c> 89 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 83 e3 01 74 ce eb rcu_sched kthread starved for 3053 jiffies! g1080 c1079 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 rcu_sched R running task 29824 9 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2808 [inline] __schedule+0x7b8/0x1cd0 kernel/sched/core.c:3384 schedule+0x92/0x1c0 kernel/sched/core.c:3428 schedule_timeout+0x43e/0xe10 kernel/time/timer.c:1746 rcu_gp_kthread+0xbf4/0x1ec0 kernel/rcu/tree.c:2255 kthread+0x319/0x430 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready