INFO: rcu detected stall in corrupted

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 1, t=10502 jiffies, g=7489, q=36 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294955545-4294945043), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 10502 jiffies! g7489 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28736 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5399 [inline]
 __schedule+0xf15/0x5c80 kernel/sched/core.c:6726
 __schedule_loop kernel/sched/core.c:6801 [inline]
 schedule+0xe7/0x270 kernel/sched/core.c:6816
 schedule_timeout+0x136/0x290 kernel/time/timer.c:2167
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:1631
 rcu_gp_kthread+0x245/0x380 kernel/rcu/tree.c:1830
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted 6.7.0-rc4-next-20231208-syzkaller-06165-gbc63de6e6ba0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:write_comp_data+0x11/0x80 kernel/kcov.c:236
Code: 8b 05 63 a6 7b 7e 48 8b 80 f0 15 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 3f a6 7b 7e <65> 8b 05 40 a6 7b 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 fc
RSP: 0018:ffffc900015c7918 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffff8880b9844240 RCX: ffffffff817c54e8
RDX: ffff888014f99dc0 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017308849
R13: 0000000000000001 R14: ffff8880b9844248 R15: ffff8880b993d8c0
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f208fec35c0 CR3: 000000000cf78000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 csd_lock_wait kernel/smp.c:311 [inline]
 smp_call_function_many_cond+0x508/0x1570 kernel/smp.c:855
 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023
 on_each_cpu include/linux/smp.h:71 [inline]
 text_poke_sync arch/x86/kernel/alternative.c:2007 [inline]
 text_poke_bp_batch+0x22b/0x750 arch/x86/kernel/alternative.c:2217
 text_poke_flush arch/x86/kernel/alternative.c:2408 [inline]
 text_poke_flush arch/x86/kernel/alternative.c:2405 [inline]
 text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2415
 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x1d7/0x400 kernel/jump_label.c:829
 static_key_enable_cpuslocked+0x1b7/0x270 kernel/jump_label.c:205
 static_key_enable+0x1a/0x20 kernel/jump_label.c:218
 toggle_allocation_gate mm/kfence/core.c:826 [inline]
 toggle_allocation_gate+0xf4/0x250 mm/kfence/core.c:818
 process_one_work+0x8a4/0x15f0 kernel/workqueue.c:2633
 process_scheduled_works kernel/workqueue.c:2706 [inline]
 worker_thread+0x8b6/0x1290 kernel/workqueue.c:2787
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>


Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts.
2023/12/11 06:11:17 fuzzer started
2023/12/11 06:11:17 connecting to host at 10.128.0.169:37675
2023/12/11 06:11:17 checking machine...
2023/12/11 06:11:17 checking revisions...
2023/12/11 06:11:17 testing simple program...
[   77.515513][ T5063] cgroup: Unknown subsys name 'net'
[   77.658205][ T5063] cgroup: Unknown subsys name 'rlimit'
[   79.264045][ T5063] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.462219][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.471212][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.479172][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.490300][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.498523][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.505890][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.682935][ T5066] chnl_net:caif_netlink_parms(): no params data found
[   79.766259][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.774110][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.782696][ T5066] bridge_slave_0: entered allmulticast mode
[   79.790356][ T5066] bridge_slave_0: entered promiscuous mode
[   79.800430][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.808554][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.815872][ T5066] bridge_slave_1: entered allmulticast mode
[   79.823205][ T5066] bridge_slave_1: entered promiscuous mode
[   79.861594][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.874214][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.911296][ T5066] team0: Port device team_slave_0 added
[   79.920696][ T5066] team0: Port device team_slave_1 added
[   79.955540][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.963019][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.992939][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.006914][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.014440][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.042837][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.092729][ T5066] hsr_slave_0: entered promiscuous mode
[   80.100472][ T5066] hsr_slave_1: entered promiscuous mode
[   80.272530][ T5066] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.285149][ T5066] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.297343][ T5066] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.309508][ T5066] netdevsim netdevsim0 netdevsim3: renamed from eth3
executing program
[   80.348256][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.355934][ T5066] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.364958][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.372928][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.455349][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.492763][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.502825][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.517132][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  185.524506][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=7489, q=36 ncpus=2)
[  185.532065][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294955545-4294945043), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  185.546070][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g7489 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  185.557206][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  185.567612][    C1] rcu: RCU grace-period kthread stack dump:
[  185.573589][    C1] task:rcu_preempt     state:R  running task     stack:28736 pid:17    tgid:17    ppid:2      flags:0x00004000
[  185.585369][    C1] Call Trace:
[  185.588778][    C1]  <TASK>
[  185.591747][    C1]  __schedule+0xf15/0x5c80
[  185.596239][    C1]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  185.602443][    C1]  ? io_schedule_timeout+0x150/0x150
[  185.607767][    C1]  ? schedule+0x1fa/0x270
[  185.612118][    C1]  ? reacquire_held_locks+0x4c0/0x4c0
[  185.617775][    C1]  ? timer_fixup_activate+0x230/0x230
[  185.623295][    C1]  ? lock_acquire+0x1b1/0x530
[  185.628051][    C1]  ? lockdep_init_map_type+0x16d/0x7d0
[  185.633683][    C1]  schedule+0xe7/0x270
[  185.637810][    C1]  schedule_timeout+0x136/0x290
[  185.642790][    C1]  ? usleep_range_state+0x1a0/0x1a0
[  185.648144][    C1]  ? do_init_timer+0x100/0x100
[  185.652967][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x70
[  185.659332][    C1]  ? prepare_to_swait_event+0xf0/0x470
[  185.664952][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[  185.669764][    C1]  ? rcu_check_gp_kthread_starvation+0x450/0x450
[  185.676212][    C1]  ? reacquire_held_locks+0x4c0/0x4c0
[  185.681618][    C1]  rcu_gp_kthread+0x245/0x380
[  185.686418][    C1]  ? rcu_gp_init+0x1500/0x1500
[  185.691213][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  185.696618][    C1]  ? __kthread_parkme+0x148/0x220
[  185.701713][    C1]  ? rcu_gp_init+0x1500/0x1500
[  185.706506][    C1]  kthread+0x2c1/0x3a0
[  185.710774][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.716088][    C1]  ? kthread_complete_and_exit+0x40/0x40
[  185.721833][    C1]  ret_from_fork+0x45/0x80
[  185.726274][    C1]  ? kthread_complete_and_exit+0x40/0x40
[  185.732194][    C1]  ret_from_fork_asm+0x11/0x20
[  185.737101][    C1]  </TASK>
[  185.740125][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  185.746452][    C1] CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted 6.7.0-rc4-next-20231208-syzkaller-06165-gbc63de6e6ba0 #0
[  185.757747][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[  185.767988][    C1] Workqueue: events_unbound toggle_allocation_gate
[  185.774873][    C1] RIP: 0010:write_comp_data+0x11/0x80
[  185.780367][    C1] Code: 8b 05 63 a6 7b 7e 48 8b 80 f0 15 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 3f a6 7b 7e <65> 8b 05 40 a6 7b 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 fc
[  185.800972][    C1] RSP: 0018:ffffc900015c7918 EFLAGS: 00000202
[  185.807245][    C1] RAX: 0000000000000001 RBX: ffff8880b9844240 RCX: ffffffff817c54e8
[  185.815231][    C1] RDX: ffff888014f99dc0 RSI: 0000000000000000 RDI: 0000000000000005
[  185.823306][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  185.831386][    C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017308849
[  185.839380][    C1] R13: 0000000000000001 R14: ffff8880b9844248 R15: ffff8880b993d8c0
[  185.847368][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  185.856322][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.863021][    C1] CR2: 00007f208fec35c0 CR3: 000000000cf78000 CR4: 00000000003506f0
[  185.871097][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  185.879522][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  185.887904][    C1] Call Trace:
[  185.891197][    C1]  <IRQ>
[  185.894149][    C1]  ? show_regs+0x8e/0xa0
[  185.898510][    C1]  ? rcu_check_gp_kthread_starvation+0x317/0x450
[  185.904883][    C1]  ? rcu_sched_clock_irq+0x2291/0x30f0
[  185.910382][    C1]  ? rcu_note_context_switch+0x1ad0/0x1ad0
[  185.916221][    C1]  ? hrtimer_run_queues+0x97/0x440
[  185.921433][    C1]  ? rcu_read_lock_sched_held+0x3a/0x70
[  185.927001][    C1]  ? tick_sched_do_timer+0x2e0/0x2e0
[  185.932308][    C1]  ? update_process_times+0x17a/0x220
[  185.937694][    C1]  ? timer_clear_idle+0xa0/0xa0
[  185.942571][    C1]  ? update_wall_time+0x1c/0x40
[  185.947534][    C1]  ? tick_sched_handle+0x8e/0x170
[  185.952717][    C1]  ? tick_nohz_highres_handler+0xe9/0x110
[  185.958725][    C1]  ? __hrtimer_run_queues+0x654/0xc20
[  185.964128][    C1]  ? enqueue_hrtimer+0x320/0x320
[  185.969164][    C1]  ? ktime_get_update_offsets_now+0x3bc/0x610
[  185.975269][    C1]  ? hrtimer_interrupt+0x31b/0x800
[  185.980513][    C1]  ? __sysvec_apic_timer_interrupt+0x10c/0x410
[  185.986866][    C1]  ? sysvec_apic_timer_interrupt+0x90/0xb0
[  185.992872][    C1]  </IRQ>
[  185.995812][    C1]  <TASK>
[  185.998836][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  186.005029][    C1]  ? smp_call_function_many_cond+0x508/0x1570
[  186.011326][    C1]  ? write_comp_data+0x11/0x80
[  186.016171][    C1]  smp_call_function_many_cond+0x508/0x1570
[  186.022238][    C1]  ? __text_poke+0xca0/0xca0
[  186.026865][    C1]  ? kmem_cache_alloc_bulk+0x1b5/0x940
[  186.032379][    C1]  ? generic_smp_call_function_single_interrupt+0x20/0x20
[  186.039532][    C1]  ? optimize_nops+0x1a0/0x1a0
[  186.044320][    C1]  ? __text_poke+0xca0/0xca0
[  186.048928][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  186.054065][    C1]  text_poke_bp_batch+0x22b/0x750
[  186.059200][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  186.065495][    C1]  ? alternatives_enable_smp+0x400/0x400
[  186.071143][    C1]  ? __jump_label_patch+0x1db/0x400
[  186.076541][    C1]  ? text_poke_queue+0xef/0x180
[  186.081512][    C1]  ? arch_jump_label_transform_queue+0xc0/0x110
[  186.087799][    C1]  text_poke_finish+0x30/0x40
[  186.092498][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  186.098595][    C1]  jump_label_update+0x1d7/0x400
[  186.103565][    C1]  static_key_enable_cpuslocked+0x1b7/0x270
[  186.109634][    C1]  static_key_enable+0x1a/0x20
[  186.114541][    C1]  toggle_allocation_gate+0xf4/0x250
[  186.119860][    C1]  ? wake_up_kfence_timer+0x30/0x30
[  186.125273][    C1]  process_one_work+0x8a4/0x15f0
[  186.130335][    C1]  ? lock_sync+0x190/0x190
[  186.134855][    C1]  ? workqueue_congested+0x300/0x300
[  186.140210][    C1]  ? assign_work+0x1a0/0x250
[  186.144967][    C1]  worker_thread+0x8b6/0x1290
[  186.149710][    C1]  ? __kthread_parkme+0x148/0x220
[  186.154770][    C1]  ? process_one_work+0x15f0/0x15f0
[  186.160175][    C1]  kthread+0x2c1/0x3a0
[  186.164266][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.169691][    C1]  ? kthread_complete_and_exit+0x40/0x40
[  186.175480][    C1]  ret_from_fork+0x45/0x80
[  186.179946][    C1]  ? kthread_complete_and_exit+0x40/0x40
[  186.185704][    C1]  ret_from_fork_asm+0x11/0x20
[  186.190786][    C1]  </TASK>


syzkaller build log:
go env (err=<nil>)
GO111MODULE="auto"
GOARCH="amd64"
GOBIN=""
GOCACHE="/syzkaller/.cache/go-build"
GOENV="/syzkaller/.config/go/env"
GOEXE=""
GOEXPERIMENT=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOINSECURE=""
GOMODCACHE="/syzkaller/jobs-2/linux/gopath/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/syzkaller/jobs-2/linux/gopath"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/usr/local/go"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64"
GOVCS=""
GOVERSION="go1.20.1"
GCCGO="gccgo"
GOAMD64="v1"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod"
GOWORK=""
CGO_CFLAGS="-O2 -g"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-O2 -g"
CGO_FFLAGS="-O2 -g"
CGO_LDFLAGS="-O2 -g"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build446427312=/tmp/go-build -gno-record-gcc-switches"

git status (err=<nil>)
HEAD detached at 03d9c195d
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:32: run command via tools/syz-env for best compatibility, see:
Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=03d9c195daed8fca30b642783f35657aa7e32209 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230825-085153'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=03d9c195daed8fca30b642783f35657aa7e32209 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230825-085153'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=03d9c195daed8fca30b642783f35657aa7e32209 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230825-085153'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"03d9c195daed8fca30b642783f35657aa7e32209\"