sched: DL replenish lagged too much
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5271/1:b..l P5270/1:b..l P5593/3:b..l P8366/1:b..l P5605/1:b..l P12/1:b..l P8401/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=44921, q=748 ncpus=1)
task:syz.5.799 state:R running task stack:27256 pid:8401 tgid:8401 ppid:6140 task_flags:0x40044c flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7413
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:190
spin_unlock include/linux/spinlock.h:390 [inline]
zap_pte_range mm/memory.c:1964 [inline]
zap_pmd_range mm/memory.c:2020 [inline]
zap_pud_range mm/memory.c:2048 [inline]
zap_p4d_range mm/memory.c:2069 [inline]
__zap_vma_range+0x16f5/0x4a40 mm/memory.c:2109
unmap_vmas+0x299/0x5f0 mm/memory.c:2178
exit_mmap+0x1ef/0xa00 mm/mmap.c:1300
__mmput+0x12a/0x410 kernel/fork.c:1187
mmput+0x67/0x80 kernel/fork.c:1210
exit_mm kernel/exit.c:615 [inline]
do_exit+0x8b1/0x2ae0 kernel/exit.c:997
do_group_exit+0xd5/0x2a0 kernel/exit.c:1152
get_signal+0x1ec7/0x21e0 kernel/signal.c:3046
arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop+0x139/0x6f0 kernel/entry/common.c:101
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa7a4d9e0d9
RSP: 002b:00007ffc6ae74218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007fa7a4d9e0d9
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7a5025fa8
RBP: 0000000000002066 R08: 0000000000000004 R09: 0000000000000000
R10: 00007fa7a5025fa0 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa7a5025fac R14: 00007fa7a5025fa8 R15: 00007fa7a5025fa0
task:kworker/u8:0 state:R running task stack:25256 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: 0x0 (events_unbound)
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_release+0x19e/0x310 kernel/locking/lockdep.c:5893
Code: ff 65 0f c1 05 a3 cb 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 84 7e 12 0f 85 4d 01 00 00 48 83 c4
RSP: 0018:ffffc90000117618 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc90000117624
RDX: 0000000000000001 RSI: ffffffff8e1823aa RDI: ffffffff8c402680
RBP: ffffffff81b866be R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 000000000000addf R12: ffff88801e6eca80
R13: ffffc900001176d0 R14: 0000000000000202 R15: 0000000000000002
rcu_lock_release include/linux/rcupdate.h:310 [inline]
rcu_read_unlock include/linux/rcupdate.h:871 [inline]
class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
unwind_next_frame+0x3c3/0x2090 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406
kasan_kmalloc include/linux/kasan.h:263 [inline]
__kmalloc_cache_noprof+0x2e5/0x6c0 mm/slub.c:5489
_kmalloc_noprof include/linux/slab.h:988 [inline]
__kthread_create_on_node+0xce/0x3f0 kernel/kthread.c:483
kthread_create_on_node+0xc7/0x100 kernel/kthread.c:559
create_worker+0x420/0x750 kernel/workqueue.c:2861
maybe_create_worker kernel/workqueue.c:3121 [inline]
manage_workers kernel/workqueue.c:3198 [inline]
worker_thread+0x8e2/0xe50 kernel/workqueue.c:3461
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz-executor state:R running task stack:22616 pid:5605 tgid:5605 ppid:5603 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_release+0x19e/0x310 kernel/locking/lockdep.c:5893
Code: ff 65 0f c1 05 a3 cb 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 84 7e 12 0f 85 4d 01 00 00 48 83 c4
RSP: 0018:ffffc900030ff1f8 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc900030ff204
RDX: 0000000000000002 RSI: ffffffff8e1823aa RDI: ffffffff8c402680
RBP: ffffffff81b866be R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 000000000001941e R12: ffff88807d954a80
R13: ffffc900030ff2b0 R14: 0000000000000202 R15: 0000000000000003
rcu_lock_release include/linux/rcupdate.h:310 [inline]
rcu_read_unlock include/linux/rcupdate.h:871 [inline]
class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
unwind_next_frame+0x3c3/0x2090 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406
kasan_kmalloc include/linux/kasan.h:263 [inline]
__do_kmalloc_node mm/slub.c:5334 [inline]
__kmalloc_noprof+0x322/0x820 mm/slub.c:5359
_kmalloc_noprof include/linux/slab.h:992 [inline]
_kzalloc_noprof include/linux/slab.h:1309 [inline]
tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45
tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_check_open_permission+0x2af/0x3c0 security/tomoyo/file.c:776
tomoyo_file_open+0x6b/0x90 security/tomoyo/tomoyo.c:334
security_file_open+0xb5/0x1e0 security/security.c:2739
do_dentry_open+0x588/0x14d0 fs/open.c:924
vfs_open+0x82/0x3f0 fs/open.c:1052
do_open fs/namei.c:4700 [inline]
path_openat+0x2873/0x4280 fs/namei.c:4863
do_file_open+0x20e/0x430 fs/namei.c:4892
do_sys_openat2+0x10f/0x1e0 fs/open.c:1368
do_sys_open fs/open.c:1374 [inline]
__do_sys_openat fs/open.c:1390 [inline]
__se_sys_openat fs/open.c:1385 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1385
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc8c559d3fc
RSP: 002b:00007ffc39738700 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fc8c5634474 RCX: 00007fc8c559d3fc
RDX: 0000000000090800 RSI: 00007ffc397398b0 RDI: 00000000ffffff9c
RBP: 00007ffc3973989c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc397398b0
R13: 00007fc8c5634474 R14: 000000000004a9dc R15: 00007ffc397398f0
task:syz.4.789 state:R running task stack:27144 pid:8366 tgid:8366 ppid:5619 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:its_return_thunk+0x0/0x10 arch/x86/lib/retpoline.S:417
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 8b 17 b7 f5 cc
RSP: 0018:ffffc90005917920 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8287302c
RDX: ffff88802f47ca80 RSI: ffffffff82873084 RDI: ffff88802f47ca80
RBP: 0000000000000008 R08: 0000000000000006 R09: 0000000000000008
R10: 0000000000000008 R11: 0000000000000000 R12: ffff88801fe417b0
R13: 0000000000000008 R14: ffff88801fe417fc R15: dffffc0000000000
rcu_read_unlock include/linux/rcupdate.h:869 [inline]
__page_table_check_zero+0x259/0x410 mm/page_table_check.c:145
page_table_check_free include/linux/page_table_check.h:46 [inline]
__free_pages_prepare mm/page_alloc.c:1407 [inline]
__free_frozen_pages+0x790/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
kmem_cache_alloc_noprof+0x26b/0x6a0 mm/slub.c:4931
skb_clone+0x190/0x400 net/core/skbuff.c:2116
do_one_broadcast net/netlink/af_netlink.c:1456 [inline]
netlink_broadcast_filtered+0xb22/0xf20 net/netlink/af_netlink.c:1539
netlink_broadcast+0x39/0x50 net/netlink/af_netlink.c:1563
uevent_net_broadcast_untagged lib/kobject_uevent.c:331 [inline]
kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
kobject_uevent_env+0xcdd/0x18b0 lib/kobject_uevent.c:611
__device_release_driver drivers/base/dd.c:1361 [inline]
device_release_driver_internal+0x51d/0x620 drivers/base/dd.c:1372
driver_detach+0xd8/0x1b0 drivers/base/dd.c:1435
bus_remove_driver+0x13b/0x2e0 drivers/base/bus.c:832
driver_unregister+0x76/0xb0 drivers/base/driver.c:202
usb_gadget_unregister_driver+0x49/0x70 drivers/usb/gadget/udc/core.c:1784
raw_release+0x19b/0x260 drivers/usb/gadget/legacy/raw_gadget.c:463
__fput+0x3ff/0xb50 fs/file_table.c:512
task_work_run+0x150/0x240 kernel/task_work.c:233
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
__exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
exit_to_user_mode_loop+0x1d8/0x6f0 kernel/entry/common.c:101
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0f2219e0d9
RSP: 002b:00007ffdde4e02c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffdde4e03b0 RCX: 00007f0f2219e0d9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 000000000004a539 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b32420000 R11: 0000000000000246 R12: 00007ffdde4e03f0
R13: 00007f0f22425fac R14: 000000000004ab7b R15: 00007f0f22425fa0
task:syz-executor state:R running task stack:22968 pid:5593 tgid:5593 ppid:5592 task_flags:0x400100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7413
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__local_bh_enable_ip+0xff/0x120 kernel/softirq.c:457
local_bh_enable include/linux/bottom_half.h:33 [inline]
rcu_read_unlock_bh include/linux/rcupdate.h:914 [inline]
__dev_queue_xmit+0xa27/0x4970 net/core/dev.c:4913
dev_queue_xmit include/linux/netdevice.h:3446 [inline]
neigh_hh_output include/net/neighbour.h:544 [inline]
neigh_output include/net/neighbour.h:558 [inline]
ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
__ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
__ip_finish_output net/ipv4/ip_output.c:302 [inline]
ip_finish_output net/ipv4/ip_output.c:324 [inline]
NF_HOOK_COND include/linux/netfilter.h:307 [inline]
ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
dst_output include/net/dst.h:470 [inline]
ip_local_out+0x193/0x1f0 net/ipv4/ip_output.c:131
__ip_queue_xmit+0x885/0x1e90 net/ipv4/ip_output.c:533
__tcp_transmit_skb+0x3506/0x4f20 net/ipv4/tcp_output.c:1716
tcp_transmit_skb net/ipv4/tcp_output.c:1734 [inline]
tcp_write_xmit+0x1130/0x8470 net/ipv4/tcp_output.c:3062
__tcp_push_pending_frames+0xaf/0x3b0 net/ipv4/tcp_output.c:3245
tcp_push+0x225/0x700 net/ipv4/tcp.c:772
tcp_sendmsg_locked+0x1823/0x44d0 net/ipv4/tcp.c:1414
tcp_sendmsg+0x2e/0x50 net/ipv4/tcp.c:1451
inet_sendmsg+0xb9/0x140 net/ipv4/af_inet.c:865
sock_sendmsg_nosec net/socket.c:775 [inline]
__sock_sendmsg net/socket.c:790 [inline]
sock_write_iter+0x4ea/0x5b0 net/socket.c:1241
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6ac/0x1050 fs/read_write.c:687
ksys_write+0x1f8/0x250 fs/read_write.c:739
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faa53759257
RSP: 002b:00007ffef13acc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000555562fa6540 RCX: 00007faa53759257
RDX: 00000000000075a8 RSI: 00007faa4d3f8a58 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000075a8
R13: 0000555562fbf0e0 R14: 00007ffef13ad1f0 R15: 00007faa4d3f8a58
task:dhcpcd state:R running task stack:25768 pid:5270 tgid:5270 ppid:1 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__orc_find+0x97/0xf0 arch/x86/kernel/unwind_orc.c:110
Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41
RSP: 0018:ffffc900033af6b8 EFLAGS: 00000287
RAX: ffffffff91d5d234 RBX: ffffffff9146fabc RCX: dffffc0000000000
RDX: ffffffff82950e6e RSI: 0000000000000000 RDI: ffffffff9146fabc
RBP: ffffffff9146fac0 R08: ffffffff91d5d264 R09: 0000000000000007
R10: 0000000000000200 R11: 000000000001950f R12: ffffffff9146fabc
R13: ffffffff82950f16 R14: ffffffff9146fabc R15: ffffffff9146fabc
orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
unwind_next_frame+0x2ec/0x2090 arch/x86/kernel/unwind_orc.c:510
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
__do_kmalloc_node mm/slub.c:5333 [inline]
__kmalloc_noprof+0x2bf/0x820 mm/slub.c:5359
_kmalloc_noprof include/linux/slab.h:992 [inline]
_kzalloc_noprof include/linux/slab.h:1309 [inline]
tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45
tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_number_perm+0x23c/0x580 security/tomoyo/file.c:728
security_file_ioctl+0xd3/0x230 security/security.c:2512
__do_sys_ioctl fs/ioctl.c:591 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0xb7/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3d17961378
RSP: 002b:00007ffcd5124128 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000563d1a4acba0 RCX: 00007f3d17961378
RDX: 00007ffcd5124130 RSI: 0000000000008921 RDI: 000000000000000f
RBP: 00007ffcd5124130 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000563d1a48f8b0
R13: 0000563d1a4acba0 R14: 0000563d1a48f8b0 R15: 00007ffcd5124380
task:dhcpcd state:R running task stack:22536 pid:5271 tgid:5271 ppid:5270 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:81 [inline]
RIP: 0010:__orc_find+0x83/0xf0 arch/x86/kernel/unwind_orc.c:103
Code: 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b <48> 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29
RSP: 0018:ffffc900038576e0 EFLAGS: 00000246
RAX: ffffffff91c46e58 RBX: ffffffff913b6314 RCX: dffffc0000000000
RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff913b62d4
RBP: ffffffff913b6314 R08: ffffffff91c46ebe R09: 0000000000000007
R10: 0000000000000200 R11: 000000000000b886 R12: ffffffff913b6314
R13: ffffffff81b88696 R14: ffffffff913b62d4 R15: ffffffff913b6310
orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
unwind_next_frame+0x2ec/0x2090 arch/x86/kernel/unwind_orc.c:510
__unwind_start+0x3cd/0x7e0 arch/x86/kernel/unwind_orc.c:787
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0x73/0xf0 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406
kasan_kmalloc include/linux/kasan.h:263 [inline]
__kmalloc_cache_noprof+0x2e5/0x6c0 mm/slub.c:5489
_kmalloc_noprof include/linux/slab.h:988 [inline]
_kzalloc_noprof include/linux/slab.h:1309 [inline]
ref_tracker_alloc+0x190/0x590 lib/ref_tracker.c:270
__netns_tracker_alloc include/net/net_namespace.h:367 [inline]
netns_tracker_alloc include/net/net_namespace.h:376 [inline]
get_net_track include/net/net_namespace.h:393 [inline]
sk_alloc+0x2e9/0xe80 net/core/sock.c:2325
unix_create1+0xa6/0x700 net/unix/af_unix.c:1098
unix_create+0x11e/0x240 net/unix/af_unix.c:1168
__sock_create+0x339/0x860 net/socket.c:1651
sock_create net/socket.c:1709 [inline]
__sys_socketpair+0x1e4/0x5b0 net/socket.c:1856
__do_sys_socketpair net/socket.c:1909 [inline]
__se_sys_socketpair net/socket.c:1906 [inline]
__x64_sys_socketpair+0x96/0x100 net/socket.c:1906
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3d1796673a
RSP: 002b:00007ffcd51040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 0000563d1a4ac510 RCX: 00007f3d1796673a
RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001
RBP: 00007ffcd51244f0 R08: 0000000000000000 R09: 0000000000000001
R10: 00007ffcd51040e0 R11: 0000000000000246 R12: 00007ffcd51040e0
R13: 0000000000000001 R14: 0000000000000000 R15: 0000563cffe73ac0
rcu: rcu_preempt kthread starved for 202 jiffies! g44921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7326
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: bat_events batadv_tt_purge
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:198
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b
RSP: 0018:ffffc90000007c68 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff88802b5ac000 RCX: 0000000000000004
RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881b17aaf10
R13: ffff8881b17aaf08 R14: ffff88802b9fb4a3 R15: ffff88802b9fb410
FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa4d3f8b08 CR3: 0000000076697000 CR4: 00000000003526f0
Call Trace:
spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]
dummy_timer+0x1d91/0x36f0 drivers/usb/gadget/udc/dummy_hcd.c:2036
__run_hrtimer kernel/time/hrtimer.c:2032 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2096
hrtimer_run_softirq+0x17d/0x2c0 kernel/time/hrtimer.c:2113
handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622
do_softirq kernel/softirq.c:523 [inline]
do_softirq+0xac/0xe0 kernel/softirq.c:510
__local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2301 [inline]
batadv_tt_purge+0x25d/0xbd0 net/batman-adv/translation-table.c:3566
process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
process_scheduled_works kernel/workqueue.c:3405 [inline]
rescuer_thread+0x905/0x14a0 kernel/workqueue.c:3629
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245