rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=bc5/1/0x4000000000000000 softirq=90895/90895 fqs=0 (detected by 0, t=10502 jiffies, g=164469, q=33) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2971 Comm: systemd-udevd Not tainted 5.15.0-rc5-next-20211018-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:mark_lock+0x2/0x17b0 kernel/locking/lockdep.c:4566 Code: c0 fe ff ff ff c3 66 90 be 00 00 02 00 48 c7 c7 e0 b6 28 8f e8 4f fe 78 02 48 98 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 41 57 <41> 56 41 55 41 54 41 89 d4 48 ba 00 00 00 00 00 fc ff df 55 53 48 RSP: 0018:ffffc90000dc0b80 EFLAGS: 00000002 RAX: 000000000000000c RBX: ffff88801a058a4c RCX: 1ffffffff1ffb076 RDX: 0000000000000008 RSI: ffff88801a058a68 RDI: ffff88801a058000 RBP: ffff88801a058a8a R08: 0000000000000000 R09: ffffffff8ff47b87 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801a058a68 R13: ffff88801a058000 R14: 0000000000000000 R15: 0000000000000002 FS: 00007f30130ca8c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc16fd87f21 CR3: 0000000018a31000 CR4: 00000000003506e0 Call Trace: mark_usage kernel/locking/lockdep.c:4526 [inline] __lock_acquire+0x8a7/0x54a0 kernel/locking/lockdep.c:4981 lock_acquire kernel/locking/lockdep.c:5637 [inline] lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5602 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:367 [inline] advance_sched+0x53/0x9a0 net/sched/sch_taprio.c:710 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:unwind_next_frame+0x1a7/0x1ca0 arch/x86/kernel/unwind_orc.c:443 Code: 8d 6e 41 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 b4 0a 00 00 <4c> 89 e1 41 0f b6 46 41 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 RSP: 0018:ffffc90001f3f8f8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 1ffff920003e7f27 RCX: 1ffffffff2092b38 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88801a059460 RBP: 0000000000000001 R08: ffffffff8e098c06 R09: 0000000000000001 R10: fffff520003e7f47 R11: 0000000000088089 R12: ffffc90001f3fa28 R13: ffffc90001f3fa11 R14: ffffc90001f3f9d0 R15: ffff88809af63300 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x1e/0x50 mm/kasan/common.c:38 kasan_set_track+0x21/0x30 mm/kasan/common.c:46 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370 ____kasan_slab_free mm/kasan/common.c:366 [inline] ____kasan_slab_free mm/kasan/common.c:328 [inline] __kasan_slab_free+0xff/0x130 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1700 [inline] slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1726 slab_free mm/slub.c:3491 [inline] kmem_cache_free+0x92/0x4e0 mm/slub.c:3507 putname fs/namei.c:270 [inline] putname+0xfe/0x140 fs/namei.c:256 user_path_at_empty+0x4d/0x60 fs/namei.c:2803 user_path_at include/linux/namei.h:57 [inline] do_faccessat+0x127/0x850 fs/open.c:421 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3011f3c9c7 Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 RSP: 002b:00007fff962f4828 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 RAX: ffffffffffffffda RBX: 00005556872a6460 RCX: 00007f3011f3c9c7 RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007fff962f4830 RBP: 00007fff962f48a0 R08: 000000000000fefd R09: 0000000000001000 R10: 0000000000000020 R11: 0000000000000246 R12: 00005556859a3856 R13: 00005556872a62c0 R14: 00007fff962f4830 R15: 00007fff962f5a70 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g164469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=66556 rcu: rcu_preempt kthread starved for 10502 jiffies! g164469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28696 pid: 14 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4965 [inline] __schedule+0xa9a/0x4940 kernel/sched/core.c:6246 schedule+0xd2/0x260 kernel/sched/core.c:6319 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881 rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1966 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2139 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: ---------------- Code disassembly (best guess), 4 bytes skipped: 0: ff c3 inc %ebx 2: 66 90 xchg %ax,%ax 4: be 00 00 02 00 mov $0x20000,%esi 9: 48 c7 c7 e0 b6 28 8f mov $0xffffffff8f28b6e0,%rdi 10: e8 4f fe 78 02 callq 0x278fe64 15: 48 98 cltq 17: c3 retq 18: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 1f: 00 00 00 00 23: 90 nop 24: 41 57 push %r15 * 26: 41 56 push %r14 <-- trapping instruction 28: 41 55 push %r13 2a: 41 54 push %r12 2c: 41 89 d4 mov %edx,%r12d 2f: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 36: fc ff df 39: 55 push %rbp 3a: 53 push %rbx 3b: 48 rex.W