rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 GPs behind) idle=ee94/1/0x4000000000000000 softirq=48706/48713 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11652/1:b..l P5825/3:b..l rcu: (detected by 0, t=10505 jiffies, g=40145, q=597 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 11655 Comm: syz.5.1374 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:in_softirq_really kernel/kcov.c:171 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x70 kernel/kcov.c:217 Code: 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 94 c4 69 7e 65 8b 05 95 c4 69 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 RSP: 0018:ffffc90000a18830 EFLAGS: 00000002 RAX: 0000000080010103 RBX: 0000000000000001 RCX: ffffffff89418892 RDX: ffff888036cb8000 RSI: ffffffff89418303 RDI: 0000000000000005 RBP: 000000000003d90c R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000004 R12: ffff88802231a340 R13: ffff8880b872cb00 R14: ffff88802231a340 R15: ffff888034de6800 FS: 00007fe2a63bb6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4ee6ca56c0 CR3: 000000007e4f2000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: advance_sched+0x183/0xc60 net/sched/sch_taprio.c:929 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pie_calculate_probability+0x421/0x850 net/sched/sch_pie.c:411 Code: 00 00 8b 44 24 28 4c 89 ee 89 43 3c 4c 8b 65 00 49 d1 ec 4c 89 e7 e8 fe 5c 5a f8 4d 39 e5 73 57 e8 84 62 5a f8 48 8b 54 24 08 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c9 03 RSP: 0018:ffffc90000a18b78 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffc900176f6a00 RCX: ffffffff893fb1d2 RDX: ffffc900176f6a08 RSI: ffffffff893fb1dc RDI: 0000000000000006 RBP: ffff88805c6b9300 R08: 0000000000000006 R09: 000000000001c9c3 R10: 0000000000000000 R11: 0000000000000003 R12: 000000000001c9c3 R13: 0000000000000000 R14: fffffff0a3da8872 R15: 0000000000000001 fq_pie_timer+0x215/0x5a0 net/sched/sch_fq_pie.c:398 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1793 expire_timers kernel/time/timer.c:1844 [inline] __run_timers+0x6e8/0x930 kernel/time/timer.c:2418 __run_timer_base kernel/time/timer.c:2430 [inline] __run_timer_base kernel/time/timer.c:2422 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2439 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2449 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 52 4a f6 48 89 df e8 8e d1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 b6 3b f6 65 8b 05 86 70 d7 74 85 c0 74 16 5b RSP: 0018:ffffc9000411f818 EFLAGS: 00000246 RAX: 0000000000000002 RBX: ffff8880216ac0c0 RCX: 1ffffffff2dd3d92 RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1eda0 RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff2dca7af R10: ffffffff96e53d7f R11: 0000000000000004 R12: 0000000000000002 R13: ffff8880216ac100 R14: ffff8880216abaa8 R15: ffff8880216abf28 __unix_dgram_recvmsg+0x32a/0xe50 net/unix/af_unix.c:2463 unix_dgram_recvmsg+0xd0/0x110 net/unix/af_unix.c:2538 sock_recvmsg_nosec net/socket.c:1033 [inline] ____sys_recvmsg+0x5f8/0x6b0 net/socket.c:2801 ___sys_recvmsg+0x115/0x1a0 net/socket.c:2845 do_recvmmsg+0x2f8/0x740 net/socket.c:2940 __sys_recvmmsg net/socket.c:3014 [inline] __do_sys_recvmmsg net/socket.c:3037 [inline] __se_sys_recvmmsg net/socket.c:3030 [inline] __x64_sys_recvmmsg+0x239/0x290 net/socket.c:3030 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe2a5585d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe2a63bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007fe2a5776080 RCX: 00007fe2a5585d29 RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000008 RBP: 00007fe2a5601b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fe2a5776080 R15: 00007ffe35d9f2c8 task:syz-executor state:R running task stack:22704 pid:5825 tgid:5825 ppid:5807 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:89 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:104 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x105/0x1a0 mm/kasan/generic.c:189 Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 11 eb ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b2 41 bc 08 00 00 00 RSP: 0018:ffffc9000448f620 EFLAGS: 00000246 RAX: fffffbfff20be8b2 RBX: fffffbfff20be8b3 RCX: ffffffff8175de5c RDX: fffffbfff20be8b3 RSI: 0000000000000008 RDI: ffffffff905f4590 RBP: fffffbfff20be8b2 R08: 0000000000000000 R09: fffffbfff20be8b2 R10: ffffffff905f4597 R11: 00000000000a4001 R12: 0000000000000000 R13: 000000000003d90c R14: 0000000000000000 R15: 0000000000000000 instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] cpumask_test_cpu include/linux/cpumask.h:570 [inline] cpu_online include/linux/cpumask.h:1117 [inline] trace_lock_acquire+0x3c/0x1f0 include/trace/events/lock.h:24 lock_acquire+0x2f/0xb0 kernel/locking/lockdep.c:5820 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] is_bpf_text_address+0x36/0x1a0 kernel/bpf/core.c:772 kernel_text_address kernel/extable.c:125 [inline] kernel_text_address+0x8d/0x100 kernel/extable.c:94 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x59/0xa0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0xa7/0x100 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4298 [inline] __kmalloc_node_track_caller_noprof+0x222/0x510 mm/slub.c:4317 kmemdup_noprof+0x29/0x60 mm/util.c:135 kmemdup_noprof include/linux/fortify-string.h:765 [inline] sidtab_sid2str_get+0x17a/0x680 security/selinux/ss/sidtab.c:625 sidtab_entry_to_string+0x33/0x110 security/selinux/ss/services.c:1291 security_sid_to_context_core+0x35c/0x640 security/selinux/ss/services.c:1394 selinux_inode_init_security+0x465/0x670 security/selinux/hooks.c:2946 security_inode_init_security+0x1e6/0x390 security/security.c:1831 shmem_mknod+0x22e/0x450 mm/shmem.c:3680 shmem_mkdir+0x31/0x60 mm/shmem.c:3739 vfs_mkdir+0x57d/0x860 fs/namei.c:4311 do_mkdirat+0x301/0x3a0 fs/namei.c:4334 __do_sys_mkdirat fs/namei.c:4349 [inline] __se_sys_mkdirat fs/namei.c:4347 [inline] __x64_sys_mkdirat+0x83/0xb0 fs/namei.c:4347 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8f2af84597 RSP: 002b:00007ffe9374d938 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007ffe9374d980 RCX: 00007f8f2af84597 RDX: 00000000000001ff RSI: 00007ffe9374d980 RDI: 00000000ffffff9c RBP: 00007ffe9374d96c R08: 0000000000000005 R09: 00007ffe9374d6d5 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 R13: 00000000000825d8 R14: 00007ffe9374d9c0 R15: 0000000000000115 task:modprobe state:R running task stack:25328 pid:11652 tgid:11652 ppid:53 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6935 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x61/0x80 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] avc_reclaim_node security/selinux/avc.c:488 [inline] avc_alloc_node+0x365/0x5a0 security/selinux/avc.c:507 avc_insert security/selinux/avc.c:618 [inline] avc_compute_av+0xfd/0x5c0 security/selinux/avc.c:993 avc_perm_nonode+0xaa/0x180 security/selinux/avc.c:1117 avc_has_perm_noaudit+0x2d2/0x3a0 security/selinux/avc.c:1160 selinux_inode_permission+0x361/0x590 security/selinux/hooks.c:3118 security_inode_permission+0xda/0x260 security/security.c:2319 inode_permission fs/namei.c:600 [inline] inode_permission+0x17a/0x5f0 fs/namei.c:567 may_lookup fs/namei.c:1819 [inline] link_path_walk.part.0.constprop.0+0x1d7/0xd40 fs/namei.c:2425 link_path_walk fs/namei.c:2408 [inline] path_lookupat+0x93/0x770 fs/namei.c:2633 filename_lookup+0x221/0x5f0 fs/namei.c:2663 vfs_statx+0xf8/0x1c0 fs/stat.c:344 vfs_fstatat+0x7b/0xf0 fs/stat.c:366 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7a5a9948a9 RSP: 002b:00007fff694fdb08 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00007f7a5a971338 RCX: 00007f7a5a9948a9 RDX: 00007fff694fdbb0 RSI: 00007fff694fdb10 RDI: 00000000ffffff9c RBP: 00007fff694fdc70 R08: 0000000000080000 R09: 00007fff694fdb10 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff694fdb10 R13: 000000000000000f R14: 00007f7a5a9a6a40 R15: 00000000ffffffff rcu: rcu_preempt kthread starved for 10505 jiffies! g40145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28472 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 11641 Comm: syz.4.1372 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 kernel/smp.c:884 Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 RSP: 0018:ffffc900050376c8 EFLAGS: 00000246 RAX: 0000000000080000 RBX: ffff8880b8744a40 RCX: ffffc9000d89b000 RDX: 0000000000080000 RSI: ffffffff818e08b6 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000004 R12: ffffed10170e8949 R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 FS: 00007f39c09026c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f4edff8 CR3: 0000000052530000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1051 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2114 [inline] text_poke_bp_batch+0x22b/0x760 arch/x86/kernel/alternative.c:2324 text_poke_flush arch/x86/kernel/alternative.c:2515 [inline] text_poke_flush arch/x86/kernel/alternative.c:2512 [inline] text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2522 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x1d7/0x400 kernel/jump_label.c:920 static_key_slow_inc_cpuslocked kernel/jump_label.c:168 [inline] static_key_slow_inc_cpuslocked+0x82/0x120 kernel/jump_label.c:151 static_key_slow_inc+0x1a/0x30 kernel/jump_label.c:191 kvm_create_lapic+0x39c/0x500 arch/x86/kvm/lapic.c:2894 kvm_arch_vcpu_create+0x24c/0xae0 arch/x86/kvm/x86.c:12248 kvm_vm_ioctl_create_vcpu virt/kvm/kvm_main.c:4106 [inline] kvm_vm_ioctl+0xf93/0x3df0 virt/kvm/kvm_main.c:5019 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f39bfb85d29 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f39c0902038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f39bfd76080 RCX: 00007f39bfb85d29 RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000f RBP: 00007f39bfc01b08 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f39bfd76080 R15: 00007fff53efcb88