rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=15a4/1/0x4000000000000000 softirq=114474/114478 fqs=3 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9050/1:b..l P26445/2:b..l rcu: (detected by 1, t=10505 jiffies, g=174165, q=181 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 32484 Comm: é Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 RIP: 0010:__lock_acquire+0xffa/0x7f70 Code: cf 89 ca c1 c2 06 44 31 fa 01 c1 89 d6 c1 c6 08 29 d0 31 c6 01 ca 29 f1 41 89 f6 41 c1 c6 10 41 31 ce 01 d6 44 89 f3 c1 c3 13 <44> 29 f2 31 d3 41 01 f6 29 de 41 89 dc 41 c1 c4 04 41 31 f4 48 c7 RSP: 0018:ffffc900000075e0 EFLAGS: 00000083 RAX: 00000000aba6c068 RBX: 00000000d194acf7 RCX: 00000000f1565815 RDX: 0000000033873e81 RSI: 00000000d5aea349 RDI: ffffffff906fb380 RBP: ffffc900000078a8 R08: dffffc0000000000 R09: 1ffffffff20df670 R10: dffffc0000000000 R11: fffffbfff20df671 R12: 000000004f746eba R13: 0000000000000000 R14: 00000000959efa32 R15: 00000000535735f5 FS: 00007f92babe96c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f92babe9d58 CR3: 0000000088e92000 CR4: 00000000003506f0 DR0: 00000000ffff070c DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x1e3/0x520 kernel/locking/lockdep.c:5753 debug_objects_fill_pool+0x9f/0x9a0 lib/debugobjects.c:614 debug_object_activate+0x12b/0x530 lib/debugobjects.c:713 debug_hrtimer_activate kernel/time/hrtimer.c:422 [inline] debug_activate kernel/time/hrtimer.c:477 [inline] enqueue_hrtimer+0x30/0x310 kernel/time/hrtimer.c:1087 __run_hrtimer kernel/time/hrtimer.c:1705 [inline] __hrtimer_run_queues+0x6c0/0xd10 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0x396/0x980 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1063 [inline] __sysvec_apic_timer_interrupt+0x104/0x390 arch/x86/kernel/apic/apic.c:1080 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1074 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:seqcount_lockdep_reader_access+0x1e0/0x220 include/linux/seqlock.h:105 Code: 00 4d 85 ed 75 16 e8 df 94 10 00 eb 15 e8 d8 94 10 00 e8 b3 d7 4f 09 4d 85 ed 74 ea e8 c9 94 10 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 RSP: 0018:ffffc900049a7840 EFLAGS: 00000287 RAX: ffffffff817d75a7 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000d481000 RSI: 00000000000001ab RDI: 00000000000001ac RBP: ffffc900049a7900 R08: ffffffff817d757d R09: 1ffffffff1d34f1d R10: dffffc0000000000 R11: fffffbfff1d34f1e R12: dffffc0000000000 R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff92000934f08 ktime_mono_to_any+0x6b/0x100 kernel/time/timekeeping.c:932 ktime_mono_to_real include/linux/timekeeping.h:149 [inline] timerfd_clock_was_set+0x20/0x2f0 fs/timerfd.c:99 clock_was_set+0x7ab/0x830 kernel/time/hrtimer.c:982 timekeeping_inject_offset+0x663/0x710 kernel/time/timekeeping.c:1395 do_adjtimex+0x515/0xab0 kernel/time/timekeeping.c:2444 do_clock_adjtime kernel/time/posix-timers.c:1159 [inline] __do_sys_clock_adjtime kernel/time/posix-timers.c:1171 [inline] __se_sys_clock_adjtime kernel/time/posix-timers.c:1162 [inline] __x64_sys_clock_adjtime+0x1e0/0x290 kernel/time/posix-timers.c:1162 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f92b9e7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f92babe90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 RAX: ffffffffffffffda RBX: 00007f92b9f9c050 RCX: 00007f92b9e7cae9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007f92b9ec847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f92b9f9c050 R15: 00007fffb775d418 task:syz-executor.0 state:R running task stack:20648 pid:26445 ppid:26444 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x196c/0x4af0 kernel/sched/core.c:6695 preempt_schedule_irq+0xfb/0x1b0 kernel/sched/core.c:7007 irqentry_exit+0x57/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:lock_acquire+0x25a/0x520 kernel/locking/lockdep.c:5757 Code: 2b 00 74 08 4c 89 f7 e8 f4 8a 7b 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000caef580 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff9200195debc RCX: ffffffff816d0807 RDX: 0000000000000000 RSI: ffffffff8b0ab5a0 RDI: ffffffff8b599aa0 RBP: ffffc9000caef6c8 R08: dffffc0000000000 R09: 1ffffffff20df670 R10: dffffc0000000000 R11: fffffbfff20df671 R12: 1ffff9200195deb8 R13: dffffc0000000000 R14: ffffc9000caef5e0 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:303 [inline] rcu_read_lock include/linux/rcupdate.h:749 [inline] percpu_ref_tryget_many include/linux/percpu-refcount.h:241 [inline] percpu_ref_tryget+0x31/0x170 include/linux/percpu-refcount.h:266 obj_cgroup_tryget include/linux/memcontrol.h:793 [inline] __get_obj_cgroup_from_memcg+0x70/0xe0 mm/memcontrol.c:3010 get_obj_cgroup_from_current+0x174/0x280 mm/memcontrol.c:3030 memcg_slab_pre_alloc_hook mm/slab.h:487 [inline] slab_pre_alloc_hook+0x94/0x310 mm/slab.h:714 slab_alloc_node mm/slub.c:3460 [inline] slab_alloc mm/slub.c:3486 [inline] __kmem_cache_alloc_lru mm/slub.c:3493 [inline] kmem_cache_alloc+0x52/0x300 mm/slub.c:3502 anon_vma_chain_alloc mm/rmap.c:142 [inline] anon_vma_fork+0x1fa/0x580 mm/rmap.c:365 dup_mmap kernel/fork.c:727 [inline] dup_mm kernel/fork.c:1686 [inline] copy_mm+0xdb8/0x1f10 kernel/fork.c:1735 copy_process+0x1d73/0x41a0 kernel/fork.c:2501 kernel_clone+0x222/0x840 kernel/fork.c:2909 __do_sys_clone kernel/fork.c:3052 [inline] __se_sys_clone kernel/fork.c:3036 [inline] __x64_sys_clone+0x258/0x2a0 kernel/fork.c:3036 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fee81c79b13 RSP: 002b:00007fff2c0afb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee81c79b13 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000555556d97750 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 task:kworker/u4:1 state:R running task stack:20632 pid:9050 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x196c/0x4af0 kernel/sched/core.c:6695 preempt_schedule_irq+0xfb/0x1b0 kernel/sched/core.c:7007 irqentry_exit+0x57/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:__rcu_read_unlock+0x7/0x100 kernel/rcu/tree_plugin.h:419 Code: 00 eb b1 44 89 f9 80 e1 07 80 c1 03 38 c1 7c b0 4c 89 ff e8 eb 33 71 00 eb a6 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 35 30 RSP: 0018:ffffc90003fff9e8 EFLAGS: 00000293 RAX: ffffffff8a982126 RBX: 0000000000000001 RCX: ffff88807729d940 RDX: 0000000000000000 RSI: ffffffff8b599a80 RDI: ffffffff8b599a40 RBP: ffffc90003fffb38 R08: ffffffff8a982114 R09: 1ffffffff20df670 R10: dffffc0000000000 R11: fffffbfff20df671 R12: ffff88807bbc4800 R13: ffff8880298727c0 R14: dffffc0000000000 R15: ffff888076e28890 rcu_read_unlock include/linux/rcupdate.h:781 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:771 [inline] batadv_iv_ogm_schedule_buff net/batman-adv/bat_iv_ogm.c:825 [inline] batadv_iv_ogm_schedule+0x6e7/0x1090 net/batman-adv/bat_iv_ogm.c:868 batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 net/batman-adv/bat_iv_ogm.c:1712 process_one_work kernel/workqueue.c:2630 [inline] process_scheduled_works+0x90f/0x1400 kernel/workqueue.c:2703 worker_thread+0xa5f/0xff0 kernel/workqueue.c:2784 kthread+0x2d3/0x370 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 rcu: rcu_preempt kthread starved for 10490 jiffies! g174165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24616 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x196c/0x4af0 kernel/sched/core.c:6695 schedule+0xc3/0x180 kernel/sched/core.c:6771 schedule_timeout+0x1bd/0x300 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x2c6/0x1010 kernel/rcu/tree.c:1613 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1812 kthread+0x2d3/0x370 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 PID: 32485 Comm: syz-executor.3 Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 RIP: 0010:csd_lock_wait kernel/smp.c:300 [inline] RIP: 0010:smp_call_function_many_cond+0x1805/0x2890 kernel/smp.c:844 Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 34 59 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 6f 55 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 53 55 RSP: 0018:ffffc900055777a0 EFLAGS: 00000246 RAX: ffffffff8182b51d RBX: 1ffff110173087b9 RCX: 0000000000040000 RDX: ffffc9000bebc000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc900055779a0 R08: ffffffff8182b4ec R09: 1ffffffff20df683 R10: dffffc0000000000 R11: fffffbfff20df684 R12: dffffc0000000000 R13: ffff8880b9843dc8 R14: ffff8880b993d440 R15: 0000000000000000 FS: 00007f78bce756c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020072000 CR3: 000000002964d000 CR4: 00000000003506e0 DR0: 00000000ffff070c DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1012 invalidate_bdev+0x8e/0xc0 block/bdev.c:85 __ext4_fill_super fs/ext4/super.c:5678 [inline] ext4_fill_super+0x34ae/0x6d10 fs/ext4/super.c:5703 get_tree_bdev+0x416/0x5b0 fs/super.c:1577 vfs_get_tree+0x8c/0x280 fs/super.c:1750 do_new_mount+0x28f/0xae0 fs/namespace.c:3335 do_mount fs/namespace.c:3675 [inline] __do_sys_mount fs/namespace.c:3884 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3861 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f78bc07cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f78bce750c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f78bc19bf80 RCX: 00007f78bc07cae9 RDX: 0000000020000080 RSI: 0000000020000100 RDI: 0000000020000000 RBP: 00007f78bc0c847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f78bc19bf80 R15: 00007ffdbfd97ff8