rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9690/1:b..l P9694/1:b..l P9697/1:b..l rcu: (detected by 0, t=10502 jiffies, g=62789, q=963 ncpus=1) task:syz-executor state:R running task stack:26152 pid:9697 tgid:9697 ppid:5580 task_flags:0x400000 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_release+0x19e/0x310 kernel/locking/lockdep.c:5893 Code: ff 65 0f c1 05 a3 5b 9e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 14 9e 12 0f 85 4d 01 00 00 48 83 c4 RSP: 0018:ffffc9000596f660 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8ede8240 RCX: ffffc9000596f66c RDX: 0000000000000002 RSI: ffffffff8e3870a4 RDI: ffffffff8c600380 RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 000000000000af82 R12: ffff88807ec6a540 R13: ffffc9000596f768 R14: 0000000000000202 R15: 0000000000000003 rcu_lock_release include/linux/rcupdate.h:310 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0x3c3/0x2090 arch/x86/kernel/unwind_orc.c:495 __unwind_start+0x3cd/0x7e0 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x73/0xf0 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5334 [inline] __kmalloc_noprof+0x322/0x820 mm/slub.c:5359 _kmalloc_noprof include/linux/slab.h:992 [inline] _kzalloc_noprof include/linux/slab.h:1309 [inline] tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_number_perm+0x23c/0x580 security/tomoyo/file.c:728 security_file_ioctl+0xd3/0x230 security/security.c:2512 __do_sys_ioctl fs/ioctl.c:591 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xb7/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcf2959dd6b RSP: 002b:00007fffdc6b0b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fcf2959dd6b RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db RBP: 00007fcf29826308 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000003 R14: 00007fffdc6b0dd8 R15: 0000000000000000 task:syz.2.1206 state:R running task stack:25832 pid:9694 tgid:9693 ppid:5598 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665 RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data+0x18/0x90 kernel/kcov.c:246 Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 d9 b3 79 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d b0 b3 79 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc RSP: 0018:ffffc900040e76d8 EFLAGS: 00000202 RAX: 0000000080000000 RBX: 0000000000000003 RCX: ffffffff828740f8 RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffff888035c18000 RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000008 R14: ffffea0001aa6400 R15: ffffea0001aa6400 page_ext_iter_begin include/linux/page_ext.h:132 [inline] __page_table_check_zero+0xd8/0x410 mm/page_table_check.c:139 page_table_check_free include/linux/page_table_check.h:46 [inline] __free_pages_prepare mm/page_alloc.c:1407 [inline] __free_frozen_pages+0x790/0x1090 mm/page_alloc.c:2950 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4584 [inline] slab_alloc_node mm/slub.c:4917 [inline] __kmalloc_cache_noprof+0x265/0x6c0 mm/slub.c:5485 _kmalloc_noprof include/linux/slab.h:988 [inline] _kzalloc_noprof include/linux/slab.h:1309 [inline] kobject_uevent_env+0x263/0x18b0 lib/kobject_uevent.c:543 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1435 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:832 driver_unregister+0x76/0xb0 drivers/base/driver.c:202 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1784 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2ae0 kernel/exit.c:1009 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9ccd99dd6b RSP: 002b:00007f9cce945f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f9ccd99dd6b RDX: 00007f9cce946fd0 RSI: 0000000080085502 RDI: 0000000000000007 RBP: 00007f9cce946fd0 R08: 0000000000000040 R09: 00007f9cce945fc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f9ccda538e2 task:syz.3.1204 state:R running task stack:25328 pid:9690 tgid:9689 ppid:5591 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_release+0x19e/0x310 kernel/locking/lockdep.c:5893 Code: ff 65 0f c1 05 a3 5b 9e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 14 9e 12 0f 85 4d 01 00 00 48 83 c4 RSP: 0018:ffffc9000593f398 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8ede8240 RCX: ffffc9000593f3a4 RDX: 0000000000000002 RSI: ffffffff8e3870a4 RDI: ffffffff8c600380 RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000016c2e R12: ffff888034412540 R13: ffffc9000593f450 R14: 0000000000000202 R15: 0000000000000003 rcu_lock_release include/linux/rcupdate.h:310 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0x3c3/0x2090 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5334 [inline] __kmalloc_noprof+0x322/0x820 mm/slub.c:5359 _kmalloc_noprof include/linux/slab.h:992 [inline] _kzalloc_noprof include/linux/slab.h:1309 [inline] kobject_get_path+0xcf/0x2c0 lib/kobject.c:161 kobject_uevent_env+0x287/0x18b0 lib/kobject_uevent.c:548 device_remove+0xcb/0x180 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1372 driver_detach+0xd8/0x1b0 drivers/base/dd.c:1435 bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:832 driver_unregister+0x76/0xb0 drivers/base/driver.c:202 usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1784 raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x951/0x2ae0 kernel/exit.c:1009 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f59b459dd6b RSP: 002b:00007f59b54f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f59b459dd6b RDX: 00007f59b54f2fd0 RSI: 0000000080085502 RDI: 0000000000000007 RBP: 00007f59b54f2fd0 R08: 0000000000000012 R09: 00007f59b54f1fc8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007f59b46538e2