rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (1 GPs behind) idle=93f4/1/0x4000000000000000 softirq=33811/33821 fqs=4706
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:  1026964          0            0
rcu: 	cputime:    27412      25076           90   ==> 52490(ms)
rcu: 	(t=10500 jiffies g=21441 q=2685 ncpus=2)
CPU: 1 UID: 0 PID: 10486 Comm: syz.1.2051 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
RSP: 0018:ffffc900001e03e0 EFLAGS: 00000206
RAX: 99be5e4c0175b500 RBX: 1ffff9200003c084 RCX: 99be5e4c0175b500
RDX: 0000000000000002 RSI: ffffffff8d9986f9 RDI: ffffffff8be29f80
RBP: ffffc900001e04d8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
FS:  00007f3a81b3f6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f95ffff CR3: 000000003a7a2000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 __rcu_read_unlock+0x84/0xe0
 unwind_next_frame+0x19ae/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 kasan_save_track+0x3e/0x80
 __kasan_slab_alloc+0x6c/0x80
 kmem_cache_alloc_node_noprof+0x1bb/0x3c0
 __alloc_skb+0x112/0x2d0
 ndisc_alloc_skb+0x9f/0x480
 ndisc_send_rs+0x2b5/0x630
 addrconf_rs_timer+0x369/0x670
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0xb7/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0xb0/0x150
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0018:ffffc9000325f760 EFLAGS: 00000286
RAX: 99be5e4c0175b500 RBX: 0000000000000000 RCX: 99be5e4c0175b500
RDX: 0000000000000007 RSI: ffffffff8d9986f9 RDI: 0000000000000001
RBP: ffffc9000325f800 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200064beec
 irqentry_exit+0x6f/0x90
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:memcg1_commit_charge+0x1f4/0x2b0
Code: 93 9d ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 f6 44 24 41 02 75 6e f7 c3 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
RSP: 0018:ffffc9000325f8c0 EFLAGS: 00000206
RAX: 99be5e4c0175b500 RBX: 0000000000000a02 RCX: 99be5e4c0175b500
RDX: 0000000000000007 RSI: ffffffff8d9986f9 RDI: ffffffff8be29f80
RBP: ffffc9000325f988 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000001
R13: 1ffff9200064bf1c R14: ffffea0000e01400 R15: dffffc0000000000
 charge_memcg+0x10b/0x180
 __mem_cgroup_charge+0x25/0x80
 folio_prealloc+0x51/0x180
 __handle_mm_fault+0x2c88/0x5620
 handle_mm_fault+0x40a/0x8e0
 do_user_addr_fault+0x764/0x1390
 exc_page_fault+0x76/0xf0
 asm_exc_page_fault+0x26/0x30
RIP: 0010:__put_user_4+0xd/0x20
Code: 66 89 01 31 c9 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000325fe50 EFLAGS: 00010206
RAX: 000000000000000a RBX: 0000000000000000 RCX: 00002000000029c0
RDX: 0000000000000000 RSI: ffffffff8db863da RDI: ffffffff8be29f80
RBP: 000000000000000a R08: 0000000000000000 R09: ffffffff820bbaa0
R10: dffffc0000000000 R11: ffffed10050fe899 R12: 0000000000000000
R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005
 __sys_socketpair+0xb7/0x560
 __x64_sys_socketpair+0x9b/0xb0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3a80d8eb69
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3a81b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 00007f3a80fb5fa0 RCX: 00007f3a80d8eb69
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
RBP: 00007f3a80e11df1 R08: 0000000000000000 R09: 0000000000000000
R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3a80fb5fa0 R15: 00007fff7a96fda8
 </TASK>
sched: DL replenish lagged too much
