rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (0 ticks this GP) idle=e6b/1/0x4000000000000000 softirq=147122/147122 fqs=0
(detected by 0, t=10502 jiffies, g=242909, q=1 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13334 Comm: kworker/u4:0 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__lock_acquire+0x233/0x5660 kernel/locking/lockdep.c:4987
Code: 00 3b 74 24 10 75 0c 48 83 7c 24 20 00 0f 85 df 0c 00 00 4c 03 64 24 28 0f b7 4c 24 10 49 8d 44 24 20 48 89 c2 48 89 44 24 38 <66> 81 e1 ff 1f 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14
RSP: 0018:ffffc900001f0af0 EFLAGS: 00000082
RAX: ffff888022f762d0 RBX: ffffffff911d0a38 RCX: 0000000000000000
RDX: ffff888022f762d0 RSI: 000000000000005d RDI: ffff888022f762a8
RBP: 0000000000000000 R08: 1ffff110045eec55 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888022f762b0
R13: ffff888022f757c0 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560a8a890520 CR3: 000000000ba8e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire kernel/locking/lockdep.c:5665 [inline]
lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5630
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
debug_object_deactivate lib/debugobjects.c:732 [inline]
debug_object_deactivate+0x101/0x300 lib/debugobjects.c:720
debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
debug_deactivate kernel/time/hrtimer.c:481 [inline]
__run_hrtimer kernel/time/hrtimer.c:1653 [inline]
__hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633
Code: b7 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc9000a50fb98 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff920014a1f75 RCX: 644cd74375b3294a
RDX: 1ffff110045eec41 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90693907
R10: fffffbfff20d2720 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff8bd87b60 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:281 [inline]
rcu_read_lock include/linux/rcupdate.h:707 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
batadv_nc_worker+0x12d/0xfa0 net/batman-adv/network-coding.c:719
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
rcu: rcu_preempt kthread starved for 10502 jiffies! g242909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28360 pid: 17 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5148 [inline]
__schedule+0xa06/0x4b40 kernel/sched/core.c:6460
schedule+0xd2/0x1f0 kernel/sched/core.c:6532
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935
rcu_gp_fqs_loop+0x1c0/0x890 kernel/rcu/tree.c:2082
rcu_gp_kthread+0x234/0x350 kernel/rcu/tree.c:2271
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 13336 Comm: kworker/u4:1 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound toggle_allocation_gate
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 kernel/rcu/tree_stall.h:514
print_other_cpu_stall kernel/rcu/tree_stall.h:619 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:764 [inline]
rcu_pending kernel/rcu/tree.c:4071 [inline]
rcu_sched_clock_irq+0x230a/0x23a0 kernel/rcu/tree.c:2759
update_process_times+0x11a/0x1a0 kernel/time/timer.c:1839
tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:243
tick_sched_timer+0xee/0x120 kernel/time/tick-sched.c:1481
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:csd_lock_wait kernel/smp.c:414 [inline]
RIP: 0010:smp_call_function_many_cond+0x4a3/0x1110 kernel/smp.c:988
Code: 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 a9 95 0a 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 <84> c0 0f 85 21 0a 00 00 8b 43 08 31 ff 83 e0 01 41 89 c6 89 c6 e8
RSP: 0018:ffffc9000a967950 EFLAGS: 00000206
RAX: 0000000000000000 RBX: ffff8880b9b3edc0 RCX: 0000000000000000
RDX: ffff8880251cba80 RSI: ffffffff817058a7 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017367db9
R13: 0000000000000001 R14: 0000000000000001 R15: dffffc0000000000
on_each_cpu_cond_mask+0x56/0xa0 kernel/smp.c:1154
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:1231 [inline]
text_poke_bp_batch+0x233/0x6c0 arch/x86/kernel/alternative.c:1419
text_poke_flush arch/x86/kernel/alternative.c:1589 [inline]
text_poke_flush arch/x86/kernel/alternative.c:1586 [inline]
text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1596
arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
jump_label_update+0x32f/0x410 kernel/jump_label.c:830
static_key_disable_cpuslocked+0x152/0x1b0 kernel/jump_label.c:207
static_key_disable+0x16/0x20 kernel/jump_label.c:215
toggle_allocation_gate mm/kfence/core.c:825 [inline]
toggle_allocation_gate+0x183/0x390 mm/kfence/core.c:803
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [kworker/u4:1:13336]
Modules linked in:
irq event stamp: 83634456
hardirqs last enabled at (83634455): [] asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
hardirqs last disabled at (83634456): [] sysvec_apic_timer_interrupt+0xb/0xc0 arch/x86/kernel/apic/apic.c:1106
softirqs last enabled at (83583194): [] invoke_softirq kernel/softirq.c:445 [inline]
softirqs last enabled at (83583194): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
softirqs last disabled at (83583141): [] invoke_softirq kernel/softirq.c:445 [inline]
softirqs last disabled at (83583141): [] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
CPU: 0 PID: 13336 Comm: kworker/u4:1 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:414 [inline]
RIP: 0010:smp_call_function_many_cond+0x499/0x1110 kernel/smp.c:988
Code: 01 89 ee e8 19 92 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 a9 95 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31
RSP: 0018:ffffc9000a967950 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880b9b3edc0 RCX: 0000000000000000
RDX: ffff8880251cba80 RSI: ffffffff817058a7 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017367db9
R13: 0000000000000001 R14: 0000000000000001 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe44199d090 CR3: 000000000ba8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
on_each_cpu_cond_mask+0x56/0xa0 kernel/smp.c:1154
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:1231 [inline]
text_poke_bp_batch+0x233/0x6c0 arch/x86/kernel/alternative.c:1419
text_poke_flush arch/x86/kernel/alternative.c:1589 [inline]
text_poke_flush arch/x86/kernel/alternative.c:1586 [inline]
text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1596
arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
jump_label_update+0x32f/0x410 kernel/jump_label.c:830
static_key_disable_cpuslocked+0x152/0x1b0 kernel/jump_label.c:207
static_key_disable+0x16/0x20 kernel/jump_label.c:215
toggle_allocation_gate mm/kfence/core.c:825 [inline]
toggle_allocation_gate+0x183/0x390 mm/kfence/core.c:803
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13334 Comm: kworker/u4:0 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5403 [inline]
RIP: 0010:lock_is_held_type+0x86/0x140 kernel/locking/lockdep.c:5708
Code: 31 db e8 fd 0d 00 00 41 8b 84 24 48 0a 00 00 4d 8d ac 24 50 0a 00 00 65 ff 05 4e 4b 87 76 85 c0 7f 12 e9 8a 00 00 00 83 c3 01 <41> 3b 9c 24 48 0a 00 00 7d 7d 48 63 c3 48 89 ee 48 8d 04 80 4d 8d
RSP: 0018:ffffc900001f0bd0 EFLAGS: 00000002
RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8bd87aa0 RDI: ffff888022f76238
RBP: ffffffff8bd87aa0 R08: 0000000000000000 R09: ffffffff8dbc74d7
R10: fffffbfff1b78e9a R11: 0000000000000001 R12: ffff888022f757c0
R13: ffff888022f76210 R14: 00000000ffffffff R15: ffff888022f76238
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560a8a890520 CR3: 000000000ba8e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_is_held include/linux/lockdep.h:279 [inline]
rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0x480/0x570 kernel/locking/lockdep.c:5636
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:658
debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline]
debug_activate kernel/time/hrtimer.c:475 [inline]
enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:1084
__run_hrtimer kernel/time/hrtimer.c:1702 [inline]
__hrtimer_run_queues+0xb02/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633
Code: b7 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc9000a50fb98 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff920014a1f75 RCX: 644cd74375b3294a
RDX: 1ffff110045eec41 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90693907
R10: fffffbfff20d2720 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff8bd87b60 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:281 [inline]
rcu_read_lock include/linux/rcupdate.h:707 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
batadv_nc_worker+0x12d/0xfa0 net/batman-adv/network-coding.c:719
process_one_work+0x996/0x1610 kernel/workqueue.c:2289
worker_thread+0x665/0x1080 kernel/workqueue.c:2436
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302
----------------
Code disassembly (best guess):
0: 00 3b add %bh,(%rbx)
2: 74 24 je 0x28
4: 10 75 0c adc %dh,0xc(%rbp)
7: 48 83 7c 24 20 00 cmpq $0x0,0x20(%rsp)
d: 0f 85 df 0c 00 00 jne 0xcf2
13: 4c 03 64 24 28 add 0x28(%rsp),%r12
18: 0f b7 4c 24 10 movzwl 0x10(%rsp),%ecx
1d: 49 8d 44 24 20 lea 0x20(%r12),%rax
22: 48 89 c2 mov %rax,%rdx
25: 48 89 44 24 38 mov %rax,0x38(%rsp)
* 2a: 66 81 e1 ff 1f and $0x1fff,%cx <-- trapping instruction
2f: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
36: fc ff df
39: 48 c1 ea 03 shr $0x3,%rdx
3d: 0f .byte 0xf
3e: b6 14 mov $0x14,%dh