Hang + Crash on Kernel 6.11.3

[d-we]

PTEditor hung on my installation. I will debug that when I find some time for it. Now, I'm just dropping it here for reference

When: just setting/unsetting A-bits in PTEs
Kernel version: 6.11.3
Kernel log:

[ 2560.968635] [pteditor-module] Updating PTE
[ 2560.968677] [pteditor-module] Updating PTE
[ 2560.968772] [pteditor-module] Updating PTE
[ 2652.874182] ------------[ cut here ]------------
[ 2652.874185] WARNING: CPU: 1 PID: 20360 at kernel/rcu/tree_exp.h:754 rcu_exp_handler+0x34/0xd0
[ 2652.874191] Modules linked in: pteditor(OE) ccm cdc_mbim cdc_wdm cdc_ncm cdc_ether usbnet r8152 mii libphy snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi snd_seq_device usbhid mhi_wwan_mbim mhi_wwan_ctrl wwan uvcvideo btusb videobuf2_vmalloc btrtl uvc btintel videobuf2_memops btbcm videobuf2_v4l2 btmtk videodev bluetooth videobuf2_common mc vfat fat hid_sensor_custom hid_sensor_hub intel_ishtp_hid snd_ctl_led snd_soc_skl_hda_dsp snd_soc_hdac_hdmi snd_sof_probes snd_soc_intel_hda_dsp_common snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_pci_intel_cnl snd_sof_intel_hda_generic soundwire_intel soundwire_cadence snd_sof_intel_hda_common snd_sof_intel_hda_mlink snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda joydev mousedev snd_soc_acpi_intel_match soundwire_generic_allocation snd_soc_acpi intel_uncore_frequency soundwire_bus intel_uncore_frequency_common intel_tcc_cooling snd_soc_avs
[ 2652.874224]  x86_pkg_temp_thermal snd_soc_hda_codec intel_powerclamp snd_hda_ext_core coretemp iwlmvm snd_soc_core kvm_intel snd_compress iTCO_wdt hid_multitouch ac97_bus intel_pmc_bxt hid_generic mac80211 mei_pxp mei_hdcp snd_pcm_dmaengine iTCO_vendor_support intel_rapl_msr snd_hda_intel kvm libarc4 snd_intel_dspcfg snd_intel_sdw_acpi processor_thermal_device_pci_legacy processor_thermal_device snd_hda_codec processor_thermal_wt_hint e1000e snd_hda_core iwlwifi spi_nor processor_thermal_rfim ptp think_lmi processor_thermal_rapl snd_hwdep rapl mhi_pci_generic intel_cstate intel_uncore mei_me snd_pcm pcspkr firmware_attributes_class wmi_bmof mtd mhi pps_core intel_rapl_common i2c_i801 intel_lpss_pci snd_timer ucsi_acpi cfg80211 intel_lpss nxp_nci_i2c mei processor_thermal_wt_req intel_ish_ipc i2c_smbus thunderbolt typec_ucsi nxp_nci i2c_mux processor_thermal_power_floor idma64 intel_ishtp nci typec processor_thermal_mbox i2c_hid_acpi igen6_edac intel_soc_dts_iosf roles nfc i2c_hid intel_pmc_core int3403_thermal
[ 2652.874257]  intel_vsec int340x_thermal_zone pmt_telemetry int3400_thermal pmt_class intel_hid acpi_thermal_rel acpi_tad pinctrl_tigerlake acpi_pad mac_hid vboxnetflt(OE) vboxnetadp(OE) vboxdrv(OE) pkcs8_key_parser i2c_dev crypto_user loop nfnetlink ip_tables x_tables ext4 crc32c_generic crc16 mbcache jbd2 dm_crypt cbc encrypted_keys trusted asn1_encoder tee dm_mod xe drm_ttm_helper gpu_sched drm_suballoc_helper drm_gpuvm drm_exec i915 crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel serio_raw sha512_ssse3 thinkpad_acpi atkbd sha256_ssse3 i2c_algo_bit libps2 sha1_ssse3 drm_buddy sparse_keymap aesni_intel platform_profile vivaldi_fmap ttm gf128mul nvme snd intel_gtt crypto_simd soundcore nvme_core cryptd spi_intel_pci drm_display_helper rfkill spi_intel xhci_pci nvme_auth cec xhci_pci_renesas video i8042 wmi serio
[ 2652.874304] CPU: 1 UID: 1000 PID: 20360 Comm: tracer Tainted: G        W  OE      6.11.3-arch1-1 #1 1400000003000000474e55000681d53aa6c7b79b
[ 2652.874309] Tainted: [W]=WARN, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[ 2652.874310] Hardware name: LENOVO 20WMS0MN00/20WMS0MN00, BIOS N35ET44W (1.44 ) 01/28/2022
[ 2652.874311] RIP: 0010:rcu_exp_handler+0x34/0xd0
[ 2652.874314] Code: 54 55 65 48 8b 2d 7c b3 eb 7e 53 65 48 8b 0d 9b f4 e9 7e 8b 85 64 04 00 00 48 8d 99 80 77 03 00 4c 8b 63 18 85 c0 74 0d 7f 55 <0f> 0b 5b 5d 41 5c c3 cc cc cc cc 65 66 83 3d 50 b3 eb 7e 00 74 26
[ 2652.874316] RSP: 0018:ffffc900001ccf90 EFLAGS: 00010082
[ 2652.874317] RAX: 00000000e178666e RBX: ffff88844f4b7780 RCX: ffff88844f480000
[ 2652.874319] RDX: 0000000000000000 RSI: fffffffcb6354069 RDI: 0000000000000000
[ 2652.874320] RBP: ffff8883b8e5e000 R08: 0000000000000000 R09: 0000000000000000
[ 2652.874321] R10: 0000000000000000 R11: ffffc900001ccff8 R12: ffffffff830ce400
[ 2652.874323] R13: ffff88844f5b7b40 R14: 0000000000000000 R15: ffffffff8117a670
[ 2652.874324] FS:  00007ffff7c82d00(0000) GS:ffff88844f480000(0000) knlGS:0000000000000000
[ 2652.874326] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2652.874327] CR2: 00007fffffffd8e0 CR3: 0000000409888002 CR4: 0000000000f70ef0
[ 2652.874328] PKRU: 55555554
[ 2652.874330] Call Trace:
[ 2652.874331]  <IRQ>
[ 2652.874332]  ? rcu_exp_handler+0x34/0xd0
[ 2652.874335]  ? __warn.cold+0x8e/0xe8
[ 2652.874337]  ? rcu_exp_handler+0x34/0xd0
[ 2652.874342]  ? report_bug+0xff/0x140
[ 2652.874344]  ? handle_bug+0x3c/0x80
[ 2652.874345]  ? exc_invalid_op+0x17/0x70
[ 2652.874347]  ? asm_exc_invalid_op+0x1a/0x20
[ 2652.874348]  ? __pfx_rcu_exp_handler+0x10/0x10
[ 2652.874350]  ? rcu_exp_handler+0x34/0xd0
[ 2652.874352]  __flush_smp_call_function_queue+0xed/0x400
[ 2652.874354]  __sysvec_call_function_single+0x1c/0xb0
[ 2652.874356]  sysvec_call_function_single+0x6c/0x90
[ 2652.874358]  </IRQ>
[ 2652.874359]  <TASK>
[ 2652.874360]  asm_sysvec_call_function_single+0x1a/0x20
[ 2652.874361] RIP: 0010:bpf_lsm_file_ioctl+0x0/0x10
[ 2652.874363] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 0f 1f 44 00 00 31 c0 c3 cc cc cc cc 90 90 90 90 90 90
[ 2652.874364] RSP: 0018:ffffc90005fefe68 EFLAGS: 00000282
[ 2652.874365] RAX: ffffffff812f0150 RBX: ffffffff82941170 RCX: 0000000000000000
[ 2652.874366] RDX: 00007fffffffd768 RSI: 00000000803d1701 RDI: ffff888235c9d600
[ 2652.874367] RBP: 00007fffffffd768 R08: 0000000000000000 R09: 0000000000000000
[ 2652.874367] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000803d1701
[ 2652.874368] R13: ffff888235c9d600 R14: ffff888235c9d600 R15: 0000000000000000
[ 2652.874369]  ? __pfx_bpf_lsm_file_ioctl+0x10/0x10
[ 2652.874371]  security_file_ioctl+0x3d/0x60
[ 2652.874374]  __x64_sys_ioctl+0x45/0xd0
[ 2652.874377]  do_syscall_64+0x82/0x190
[ 2652.874379]  ? do_syscall_64+0x8e/0x190
[ 2652.874381]  ? do_syscall_64+0x8e/0x190
[ 2652.874382]  ? do_syscall_64+0x8e/0x190
[ 2652.874384]  ? do_syscall_64+0x8e/0x190
[ 2652.874385]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 2652.874388] RIP: 0033:0x7ffff7e90ced
[ 2652.874411] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
[ 2652.874411] RSP: 002b:00007fffffffd700 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2652.874413] RAX: ffffffffffffffda RBX: 00007fffffffd7e8 RCX: 00007ffff7e90ced
[ 2652.874413] RDX: 00007fffffffd768 RSI: 00000000803d1701 RDI: 0000000000000003
[ 2652.874414] RBP: 00007fffffffd750 R08: 00007fffffffd778 R09: 00000000fffffff4
[ 2652.874415] R10: 00007fffffffd6e0 R11: 0000000000000246 R12: 00000000000001de
[ 2652.874415] R13: 000000000000017a R14: 000055555555a2a0 R15: 0000555555557269
[ 2652.874417]  </TASK>
[ 2652.874417] ---[ end trace 0000000000000000 ]---
[ 2713.336325] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 18139 jiffies s: 1293 root: 0x2/.
[ 2713.336332] rcu: blocking rcu_node structures (internal RCU debug):
[ 2713.336333] Sending NMI from CPU 5 to CPUs 1:
[ 2713.336337] NMI backtrace for cpu 1 skipped: idling at intel_idle+0x59/0xa0
[ 2825.974369] INFO: task kworker/u32:8:445 blocked for more than 122 seconds.
[ 2825.974384]       Tainted: G        W  OE      6.11.3-arch1-1 #1
[ 2825.974389] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2825.974391] task:kworker/u32:8   state:D stack:0     pid:445   tgid:445   ppid:2      flags:0x00004000
[ 2825.974404] Workqueue: netns cleanup_net
[ 2825.974419] Call Trace:
[ 2825.974422]  <TASK>
[ 2825.974430]  __schedule+0x402/0x1440
[ 2825.974443]  ? ttwu_queue_wakelist+0xd0/0xf0
[ 2825.974451]  ? try_to_wake_up+0x22f/0x660
[ 2825.974457]  schedule+0x27/0xf0
[ 2825.974464]  synchronize_rcu_expedited+0x1bd/0x220
[ 2825.974472]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2825.974478]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 2825.974487]  cleanup_net+0x22b/0x460
[ 2825.974495]  process_one_work+0x17b/0x330
[ 2825.974564]  worker_thread+0x2ce/0x3f0
[ 2825.974571]  ? __pfx_worker_thread+0x10/0x10
[ 2825.974576]  kthread+0xcf/0x100
[ 2825.974583]  ? __pfx_kthread+0x10/0x10
[ 2825.974590]  ret_from_fork+0x31/0x50
[ 2825.974595]  ? __pfx_kthread+0x10/0x10
[ 2825.974601]  ret_from_fork_asm+0x1a/0x30
[ 2825.974610]  </TASK>