rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (0 ticks this GP) idle=b05/1/0x4000000000000000 softirq=95167/95167 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27398/1:b..l P3708/1:b..l
(detected by 1, t=10502 jiffies, g=147449, q=101)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 13600 Comm: kworker/u4:22 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:match_held_lock+0x1/0xc0 kernel/locking/lockdep.c:5087
Code: ee 48 c7 c7 00 46 cc 89 e8 15 d8 bb ff 48 c7 c7 60 46 cc 89 e8 09 d8 bb ff e8 eb 19 cc ff 31 c0 5d c3 0f 1f 80 00 00 00 00 53 <48> 89 fb 48 83 ec 08 48 39 77 10 74 6a 66 f7 47 22 f0 ff 74 5a 48
RSP: 0018:ffffc90000007db0 EFLAGS: 00000093
RAX: 000000000000000a RBX: 0000000000000002 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8bd7f520 RDI: ffff8880406b2c70
RBP: ffffffff8bd7f520 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff816765bc R11: 0000000000000000 R12: ffff8880406b21c0
R13: ffff8880406b2c20 R14: 00000000ffffffff R15: ffff8880406b2c70
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e926000 CR3: 0000000048dbb000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
__lock_is_held kernel/locking/lockdep.c:5382 [inline]
lock_is_held_type+0xa7/0x140 kernel/locking/lockdep.c:5684
lock_is_held include/linux/lockdep.h:283 [inline]
rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125
trace_hrtimer_start include/trace/events/timer.h:195 [inline]
debug_activate kernel/time/hrtimer.c:476 [inline]
enqueue_hrtimer+0x2bd/0x3e0 kernel/time/hrtimer.c:1084
__run_hrtimer kernel/time/hrtimer.c:1702 [inline]
__hrtimer_run_queues+0xb02/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5609
Code: 95 a5 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc9000472f820 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff920008e5f06 RCX: ffffffff815c8f0e
RDX: 1ffff110080d6583 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff90072ad7
R10: fffffbfff200e55a R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888024b9e830 R15: 0000000000000000
kernfs_drain fs/kernfs/dir.c:470 [inline]
__kernfs_remove+0x8e6/0xb20 fs/kernfs/dir.c:1376
kernfs_remove_by_name_ns+0xa8/0x110 fs/kernfs/dir.c:1579
kernfs_remove_by_name include/linux/kernfs.h:558 [inline]
remove_files+0x96/0x1c0 fs/sysfs/group.c:28
sysfs_remove_group+0x87/0x170 fs/sysfs/group.c:288
sysfs_remove_groups fs/sysfs/group.c:312 [inline]
sysfs_remove_groups+0x5c/0xa0 fs/sysfs/group.c:304
destroy_port drivers/infiniband/core/sysfs.c:1285 [inline]
ib_free_port_attrs+0x162/0x460 drivers/infiniband/core/sysfs.c:1410
remove_one_compat_dev drivers/infiniband/core/device.c:1001 [inline]
rdma_dev_exit_net+0x2b2/0x550 drivers/infiniband/core/device.c:1139
ops_exit_list+0xb0/0x170 net/core/net_namespace.c:162
cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:594
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
task:kworker/u4:7 state:R running task stack:25224 pid: 3708 ppid: 2 flags:0x00004000
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
preempt_schedule_notrace+0x5b/0xd0 kernel/sched/core.c:6646
preempt_schedule_notrace_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:36
rcu_read_unlock_sched_notrace include/linux/rcupdate.h:816 [inline]
trace_lock_acquire include/trace/events/lock.h:13 [inline]
lock_acquire+0x458/0x510 kernel/locking/lockdep.c:5612
rcu_lock_acquire include/linux/rcupdate.h:268 [inline]
rcu_read_lock include/linux/rcupdate.h:694 [inline]
batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:755 [inline]
batadv_iv_ogm_schedule_buff+0x5d2/0x1430 net/batman-adv/bat_iv_ogm.c:826
batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:869 [inline]
batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:862 [inline]
batadv_iv_send_outstanding_bat_ogm_packet+0x740/0x910 net/batman-adv/bat_iv_ogm.c:1713
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
task:syz-executor.4 state:R running task stack:27720 pid:27398 ppid: 3633 flags:0x00024000
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6553
preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
_raw_spin_unlock_irq+0x3c/0x40 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:399 [inline]
io_poll_remove_entry fs/io_uring.c:5805 [inline]
io_poll_remove_entries.part.0+0x281/0x7e0 fs/io_uring.c:5835
io_poll_remove_entries fs/io_uring.c:5815 [inline]
__io_arm_poll_handler+0x838/0xb20 fs/io_uring.c:6117
io_arm_poll_handler+0x49c/0xe60 fs/io_uring.c:6208
io_queue_sqe_arm_apoll+0x6d/0x3c0 fs/io_uring.c:7487
__io_queue_sqe fs/io_uring.c:7527 [inline]
io_queue_sqe fs/io_uring.c:7554 [inline]
io_submit_sqe fs/io_uring.c:7759 [inline]
io_submit_sqes+0x7b4c/0x98b0 fs/io_uring.c:7865
__do_sys_io_uring_enter+0x119b/0x21d0 fs/io_uring.c:10810
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f469e8890e9
RSP: 002b:00007f469fa6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
RAX: ffffffffffffffda RBX: 00007f469e99bf60 RCX: 00007f469e8890e9
RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003
RBP: 00007f469e8e308d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd4cb5395f R14: 00007f469fa6b300 R15: 0000000000022000
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g147449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=0 timer-softirq=88378
rcu: rcu_preempt kthread starved for 10502 jiffies! g147449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:28272 pid: 16 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
schedule+0xd2/0x1f0 kernel/sched/core.c:6460
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1884
rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1971
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2144
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 13600 Comm: kworker/u4:22 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:check_preemption_disabled+0xa/0x170 lib/smp_processor_id.c:13
Code: f8 65 48 8b 3c 25 00 70 02 00 e8 11 e0 eb f7 eb 99 0f 1f 44 00 00 0f 0b e9 23 ff ff ff cc cc cc 41 56 41 55 49 89 f5 41 54 55 <48> 89 fd 53 0f 1f 44 00 00 65 44 8b 25 c5 00 95 76 65 8b 1d ae 56
RSP: 0018:ffffc90000007cc8 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff89cc4700 RDI: ffffffff8a26a560
RBP: ffffffff8bd7f520 R08: 0000000000000000 R09: ffffffff8db8e257
R10: fffffbfff1b71c4a R11: 0000000000000000 R12: ffff8880406b21c0
R13: ffffffff89cc4700 R14: 00000000ffffffff R15: ffff8880406b2c98
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e926000 CR3: 0000000048dbb000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
lockdep_recursion_finish kernel/locking/lockdep.c:436 [inline]
lock_is_held_type+0xd7/0x140 kernel/locking/lockdep.c:5685
lock_is_held include/linux/lockdep.h:283 [inline]
rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125
trace_lock_acquire include/trace/events/lock.h:13 [inline]
lock_acquire+0x442/0x510 kernel/locking/lockdep.c:5612
__raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline]
_raw_spin_lock_irq+0x32/0x50 kernel/locking/spinlock.c:170
__run_hrtimer kernel/time/hrtimer.c:1689 [inline]
__hrtimer_run_queues+0x243/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5609
Code: 95 a5 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc9000472f820 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff920008e5f06 RCX: ffffffff815c8f0e
RDX: 1ffff110080d6583 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff90072ad7
R10: fffffbfff200e55a R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888024b9e830 R15: 0000000000000000
kernfs_drain fs/kernfs/dir.c:470 [inline]
__kernfs_remove+0x8e6/0xb20 fs/kernfs/dir.c:1376
kernfs_remove_by_name_ns+0xa8/0x110 fs/kernfs/dir.c:1579
kernfs_remove_by_name include/linux/kernfs.h:558 [inline]
remove_files+0x96/0x1c0 fs/sysfs/group.c:28
sysfs_remove_group+0x87/0x170 fs/sysfs/group.c:288
sysfs_remove_groups fs/sysfs/group.c:312 [inline]
sysfs_remove_groups+0x5c/0xa0 fs/sysfs/group.c:304
destroy_port drivers/infiniband/core/sysfs.c:1285 [inline]
ib_free_port_attrs+0x162/0x460 drivers/infiniband/core/sysfs.c:1410
remove_one_compat_dev drivers/infiniband/core/device.c:1001 [inline]
rdma_dev_exit_net+0x2b2/0x550 drivers/infiniband/core/device.c:1139
ops_exit_list+0xb0/0x170 net/core/net_namespace.c:162
cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:594
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
----------------
Code disassembly (best guess):
0: ee out %al,(%dx)
1: 48 c7 c7 00 46 cc 89 mov $0xffffffff89cc4600,%rdi
8: e8 15 d8 bb ff callq 0xffbbd822
d: 48 c7 c7 60 46 cc 89 mov $0xffffffff89cc4660,%rdi
14: e8 09 d8 bb ff callq 0xffbbd822
19: e8 eb 19 cc ff callq 0xffcc1a09
1e: 31 c0 xor %eax,%eax
20: 5d pop %rbp
21: c3 retq
22: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)
29: 53 push %rbx
* 2a: 48 89 fb mov %rdi,%rbx <-- trapping instruction
2d: 48 83 ec 08 sub $0x8,%rsp
31: 48 39 77 10 cmp %rsi,0x10(%rdi)
35: 74 6a je 0xa1
37: 66 f7 47 22 f0 ff testw $0xfff0,0x22(%rdi)
3d: 74 5a je 0x99
3f: 48 rex.W