rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (0 ticks this GP) idle=7454/1/0x4000000000000000 softirq=136889/136889 fqs=0 (detected by 1, t=10506 jiffies, g=220757, q=255 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2974 Comm: udevd Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__lock_acquire+0x916/0x5660 kernel/locking/lockdep.c:5026 Code: 45 85 d2 0f 84 11 07 00 00 49 8d 85 40 0a 00 00 48 89 c2 48 89 44 24 68 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 7e 39 00 00 44 8b 4c 24 18 4d 8b bd 40 0a 00 00 45 85 c9 0f RSP: 0018:ffffc90000007be0 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: 000000000000005c RCX: ffffffff815e2b5c RDX: 1ffff1100fa44c40 RSI: 0000000000000008 RDI: ffffffff906ac948 RBP: ffff88807d226282 R08: 0000000000000000 R09: ffffffff906ac94f R10: fffffbfff20d5929 R11: 0000000000000001 R12: ffff88807d226260 R13: ffff88807d2257c0 R14: 0000000000000000 R15: 0000000000000040 FS: 00007f4300c01840(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000201c0000 CR3: 000000007d1bc000 CR4: 00000000003506f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5665 [inline] lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0x32/0x50 kernel/locking/spinlock.c:170 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x243/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633 Code: f2 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90002d7f860 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff920005aff0e RCX: 65bb95005971e94c RDX: 1ffff1100fa44c41 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff906ac947 R10: fffffbfff20d5928 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8bd87780 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:280 [inline] rcu_read_lock include/linux/rcupdate.h:706 [inline] get_obj_cgroup_from_current+0xd7/0x280 mm/memcontrol.c:3115 memcg_slab_pre_alloc_hook mm/slab.h:489 [inline] slab_pre_alloc_hook mm/slab.h:714 [inline] slab_alloc_node mm/slub.c:3157 [inline] slab_alloc mm/slub.c:3251 [inline] __kmem_cache_alloc_lru mm/slub.c:3258 [inline] kmem_cache_alloc+0x85/0x4d0 mm/slub.c:3268 kmem_cache_zalloc include/linux/slab.h:723 [inline] seq_open+0x57/0x180 fs/seq_file.c:63 kernfs_fop_open+0x6b0/0xda0 fs/kernfs/file.c:677 do_dentry_open+0x4a1/0x11f0 fs/open.c:848 do_open fs/namei.c:3520 [inline] path_openat+0x1c71/0x2910 fs/namei.c:3653 do_filp_open+0x1aa/0x400 fs/namei.c:3680 do_sys_openat2+0x16d/0x4c0 fs/open.c:1278 do_sys_open fs/open.c:1294 [inline] __do_sys_openat fs/open.c:1310 [inline] __se_sys_openat fs/open.c:1305 [inline] __x64_sys_openat+0x13f/0x1f0 fs/open.c:1305 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f4300d25697 Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f RSP: 002b:00007ffc51c31700 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00005626a2396370 RCX: 00007f4300d25697 RDX: 0000000000080000 RSI: 00007ffc51c31838 RDI: 00000000ffffff9c RBP: 00007ffc51c31838 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 00005626a2396370 R14: 0000000000000001 R15: 0000000000000000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g220757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=151295 rcu: rcu_preempt kthread starved for 10506 jiffies! g220757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28456 pid: 16 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5184 [inline] __schedule+0xa06/0x4c20 kernel/sched/core.c:6496 schedule+0xd2/0x1f0 kernel/sched/core.c:6568 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x1c0/0x8a0 kernel/rcu/tree.c:1657 rcu_gp_kthread+0x234/0x360 kernel/rcu/tree.c:1854 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2974 Comm: udevd Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:227 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4727 [inline] RIP: 0010:__lock_acquire+0x3c7/0x5660 kernel/locking/lockdep.c:5003 Code: 45 89 7c 24 20 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 8e 11 00 00 8b 84 24 58 01 00 00 41 89 44 24 24 <48> 8b 6c 24 10 be 08 00 00 00 81 e5 ff 1f 00 00 48 89 e8 48 c1 f8 RSP: 0018:ffffc90000007af0 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffffffff9112f140 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807d2262ac RBP: 0000000000000000 R08: 1ffff1100fa44c50 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807d226288 R13: ffff88807d2257c0 R14: 0000000000044000 R15: 00000000000c4000 FS: 00007f4300c01840(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000201c0000 CR3: 000000007d1bc000 CR4: 00000000003506f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5665 [inline] lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162 debug_object_deactivate lib/debugobjects.c:739 [inline] debug_object_deactivate+0x101/0x300 lib/debugobjects.c:727 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline] debug_deactivate kernel/time/hrtimer.c:481 [inline] __run_hrtimer kernel/time/hrtimer.c:1653 [inline] __hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633 Code: f2 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90002d7f860 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff920005aff0e RCX: 65bb95005971e94c RDX: 1ffff1100fa44c41 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff906ac947 R10: fffffbfff20d5928 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8bd87780 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:280 [inline] rcu_read_lock include/linux/rcupdate.h:706 [inline] get_obj_cgroup_from_current+0xd7/0x280 mm/memcontrol.c:3115 memcg_slab_pre_alloc_hook mm/slab.h:489 [inline] slab_pre_alloc_hook mm/slab.h:714 [inline] slab_alloc_node mm/slub.c:3157 [inline] slab_alloc mm/slub.c:3251 [inline] __kmem_cache_alloc_lru mm/slub.c:3258 [inline] kmem_cache_alloc+0x85/0x4d0 mm/slub.c:3268 kmem_cache_zalloc include/linux/slab.h:723 [inline] seq_open+0x57/0x180 fs/seq_file.c:63 kernfs_fop_open+0x6b0/0xda0 fs/kernfs/file.c:677 do_dentry_open+0x4a1/0x11f0 fs/open.c:848 do_open fs/namei.c:3520 [inline] path_openat+0x1c71/0x2910 fs/namei.c:3653 do_filp_open+0x1aa/0x400 fs/namei.c:3680 do_sys_openat2+0x16d/0x4c0 fs/open.c:1278 do_sys_open fs/open.c:1294 [inline] __do_sys_openat fs/open.c:1310 [inline] __se_sys_openat fs/open.c:1305 [inline] __x64_sys_openat+0x13f/0x1f0 fs/open.c:1305 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f4300d25697 Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f RSP: 002b:00007ffc51c31700 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00005626a2396370 RCX: 00007f4300d25697 RDX: 0000000000080000 RSI: 00007ffc51c31838 RDI: 00000000ffffff9c RBP: 00007ffc51c31838 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 00005626a2396370 R14: 0000000000000001 R15: 0000000000000000 watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [kworker/1:14:31357] Modules linked in: irq event stamp: 427334 hardirqs last enabled at (427333): [] asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 hardirqs last disabled at (427334): [] sysvec_apic_timer_interrupt+0xb/0xc0 arch/x86/kernel/apic/apic.c:1106 softirqs last enabled at (377540): [] invoke_softirq kernel/softirq.c:445 [inline] softirqs last enabled at (377540): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 softirqs last disabled at (377479): [] invoke_softirq kernel/softirq.c:445 [inline] softirqs last disabled at (377479): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 CPU: 1 PID: 31357 Comm: kworker/1:14 Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events fqdir_free_fn RIP: 0010:csd_lock_wait kernel/smp.c:414 [inline] RIP: 0010:smp_call_function_single+0x20d/0x670 kernel/smp.c:777 Code: c5 0f 1f 44 00 00 e8 92 7c 0a 00 eb 07 e8 8b 7c 0a 00 f3 90 44 8b a4 24 88 00 00 00 31 ff 41 83 e4 01 44 89 e6 e8 c3 78 0a 00 <45> 85 e4 75 de e8 69 7c 0a 00 e8 64 7c 0a 00 bf 01 00 00 00 e8 fa RSP: 0018:ffffc90003eefb40 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 1ffff920007ddf6c RCX: ffffffff817040ed RDX: ffff88804adfba80 RSI: 0000000000000000 RDI: 0000000000000005 RBP: ffffc90003eefc50 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000021000000 CR3: 000000004bfdf000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: rcu_barrier+0x289/0x630 kernel/rcu/tree.c:3834 fqdir_free_fn+0x2e/0x160 net/ipv4/inet_fragment.c:163 process_one_work+0x996/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2974 Comm: udevd Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__lock_acquire+0x200/0x5660 kernel/locking/lockdep.c:4963 Code: d8 48 be 00 00 00 00 00 fc ff df 48 8d 79 20 49 89 f8 49 c1 e8 03 41 0f b6 34 30 40 84 f6 74 0a 40 80 fe 03 0f 8e c2 38 00 00 <0f> b7 71 20 81 e6 ff 1f 00 00 3b 74 24 10 75 0c 48 83 7c 24 20 00 RSP: 0018:ffffc90000007be0 EFLAGS: 00000046 RAX: 000000000000000a RBX: ffff8880b9a2a558 RCX: ffff88807d226238 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d226258 RBP: 0000000000000000 R08: 1ffff1100fa44c4b R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000050 R13: ffff88807d2257c0 R14: 0000000000000000 R15: 0000000000000001 FS: 00007f4300c01840(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000201c0000 CR3: 000000007d1bc000 CR4: 00000000003506f0 Call Trace: lock_acquire kernel/locking/lockdep.c:5665 [inline] lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0x32/0x50 kernel/locking/spinlock.c:170 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x243/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633 Code: f2 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90002d7f860 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff920005aff0e RCX: 65bb95005971e94c RDX: 1ffff1100fa44c41 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff906ac947 R10: fffffbfff20d5928 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8bd87780 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:280 [inline] rcu_read_lock include/linux/rcupdate.h:706 [inline] get_obj_cgroup_from_current+0xd7/0x280 mm/memcontrol.c:3115 memcg_slab_pre_alloc_hook mm/slab.h:489 [inline] slab_pre_alloc_hook mm/slab.h:714 [inline] slab_alloc_node mm/slub.c:3157 [inline] slab_alloc mm/slub.c:3251 [inline] __kmem_cache_alloc_lru mm/slub.c:3258 [inline] kmem_cache_alloc+0x85/0x4d0 mm/slub.c:3268 kmem_cache_zalloc include/linux/slab.h:723 [inline] seq_open+0x57/0x180 fs/seq_file.c:63 kernfs_fop_open+0x6b0/0xda0 fs/kernfs/file.c:677 do_dentry_open+0x4a1/0x11f0 fs/open.c:848 do_open fs/namei.c:3520 [inline] path_openat+0x1c71/0x2910 fs/namei.c:3653 do_filp_open+0x1aa/0x400 fs/namei.c:3680 do_sys_openat2+0x16d/0x4c0 fs/open.c:1278 do_sys_open fs/open.c:1294 [inline] __do_sys_openat fs/open.c:1310 [inline] __se_sys_openat fs/open.c:1305 [inline] __x64_sys_openat+0x13f/0x1f0 fs/open.c:1305 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f4300d25697 Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f RSP: 002b:00007ffc51c31700 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00005626a2396370 RCX: 00007f4300d25697 RDX: 0000000000080000 RSI: 00007ffc51c31838 RDI: 00000000ffffff9c RBP: 00007ffc51c31838 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 R13: 00005626a2396370 R14: 0000000000000001 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 45 85 d2 test %r10d,%r10d 3: 0f 84 11 07 00 00 je 0x71a 9: 49 8d 85 40 0a 00 00 lea 0xa40(%r13),%rax 10: 48 89 c2 mov %rax,%rdx 13: 48 89 44 24 68 mov %rax,0x68(%rsp) 18: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 1f: fc ff df 22: 48 c1 ea 03 shr $0x3,%rdx 26: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) * 2a: 0f 85 7e 39 00 00 jne 0x39ae <-- trapping instruction 30: 44 8b 4c 24 18 mov 0x18(%rsp),%r9d 35: 4d 8b bd 40 0a 00 00 mov 0xa40(%r13),%r15 3c: 45 85 c9 test %r9d,%r9d 3f: 0f .byte 0xf