syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5632/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=13733, q=1064 ncpus=2)
task:syz.5.22        state:R  running task     stack:26672 pid:5632  tgid:5623  ppid:5224   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_read_lock include/linux/rcupdate.h:839 [inline]
RIP: 0010:page_ext_get+0x41/0x2a0 mm/page_ext.c:525
Code: 74 ff 4c 8d 35 00 00 00 00 48 c7 c7 20 83 93 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 56 e8 93 ca 69 ff 48 83 c4 08 <e8> 5a ce b0 09 89 c5 31 ff 89 c6 e8 3f 8f 8d ff 85 ed 74 10 e8 26
RSP: 0018:ffffc900042c72b0 EFLAGS: 00000292
RAX: 4001b9cd2596d600 RBX: ffffea0001bba500 RCX: 4001b9cd2596d600
RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d80
RBP: 0000000082000000 R08: ffffffff93734847 R09: 1ffffffff26e6908
R10: dffffc0000000000 R11: fffffbfff26e6909 R12: 0000000000000001
R13: 0000000000000001 R14: ffffffff820602e0 R15: 0000000000000000
 __page_table_check_zero+0xb1/0x350 mm/page_table_check.c:148
 page_table_check_alloc include/linux/page_table_check.h:33 [inline]
 post_alloc_hook+0x206/0x230 mm/page_alloc.c:1494
 prep_new_page mm/page_alloc.c:1501 [inline]
 get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439
 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2263
 folio_alloc_mpol_noprof+0x36/0x50 mm/mempolicy.c:2281
 shmem_alloc_folio mm/shmem.c:1722 [inline]
 shmem_alloc_and_add_folio+0x2cf/0x14f0 mm/shmem.c:1782
 shmem_get_folio_gfp+0x8dc/0x2370 mm/shmem.c:2188
 shmem_get_folio mm/shmem.c:2293 [inline]
 shmem_write_begin+0x170/0x4d0 mm/shmem.c:2898
 generic_perform_write+0x39b/0x840 mm/filemap.c:4019
 shmem_file_write_iter+0xfc/0x120 mm/shmem.c:3074
 new_sync_write fs/read_write.c:497 [inline]
 vfs_write+0xa74/0xc90 fs/read_write.c:590
 ksys_write+0x1a0/0x2c0 fs/read_write.c:643
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3b8bb79e79
RSP: 002b:00007f3b8c8c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3b8bd16130 RCX: 00007f3b8bb79e79
RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000008
RBP: 00007f3b8bbe793e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3b8bd16130 R15: 00007ffe6ea4cdd8
 </TASK>
rcu: rcu_preempt kthread starved for 10530 jiffies! g13733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:25328 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x1800/0x4a60 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:memset+0xf/0x20 arch/x86/lib/memset_64.S:37
Code: 44 88 1f e9 1e 4e 39 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 e9 f2 4d 39 00 0f 1f 80 00 00 00 00 90 90 90 90 90
RSP: 0018:ffffc90000a17980 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff888043d87578 RCX: 000000000000000f
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888043d875a1
RBP: ffff888043d87540 R08: dffffc0000000000 R09: ffff888043d875a0
R10: dffffc0000000000 R11: fffffbfff202fe8e R12: ffff88813fffa000
R13: 0000000000000000 R14: ffff888043d87578 R15: ffff88801584f8c0
FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3e617d CR3: 000000006abce000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __kasan_init_slab_obj+0xd/0x20 mm/kasan/common.c:203
 kasan_init_slab_obj include/linux/kasan.h:174 [inline]
 setup_object+0x18/0x140 mm/slub.c:2302
 allocate_slab+0x16f/0x2f0 mm/slub.c:2520
 new_slab mm/slub.c:2537 [inline]
 ___slab_alloc+0xcd1/0x14b0 mm/slub.c:3723
 __slab_alloc+0x58/0xa0 mm/slub.c:3813
 __slab_alloc_node mm/slub.c:3866 [inline]
 slab_alloc_node mm/slub.c:4025 [inline]
 kmem_cache_alloc_noprof+0x1c1/0x2a0 mm/slub.c:4044
 fill_pool lib/debugobjects.c:169 [inline]
 debug_objects_fill_pool+0x6c6/0x9b0 lib/debugobjects.c:616
 debug_object_activate+0x135/0x510 lib/debugobjects.c:705
 debug_rcu_head_queue kernel/rcu/rcu.h:227 [inline]
 kvfree_call_rcu+0x99/0x790 kernel/rcu/tree.c:3806
 cfg80211_update_known_bss+0xb39/0x1500 net/wireless/scan.c:1891
 __cfg80211_bss_update+0x153/0x2170 net/wireless/scan.c:1937
 cfg80211_inform_single_bss_data+0xd51/0x2030 net/wireless/scan.c:2331
 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159
 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3254
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline]
 ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485
 ieee80211_rx include/net/mac80211.h:5124 [inline]
 ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
 tasklet_action_common+0x323/0x4d0 kernel/softirq.c:785
 handle_softirqs+0x2c6/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d 85 21 b3 00 f3 0f 1e fa fb f4 <fa> e9 c4 3f 39 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246
RAX: ffff8880182f0000 RBX: ffff88801baac864 RCX: 0000000000530b01
RDX: 0000000000000001 RSI: ffff88801baac800 RDI: ffff88801baac864
RBP: 000000000003a678 R08: ffff8880b9337c7b R09: 1ffff11017266f8f
R10: dffffc0000000000 R11: ffffffff8bb6fcf0 R12: ffff888018775000
R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0dece0
 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:702
 cpuidle_enter_state+0x114/0x480 drivers/cpuidle/cpuidle.c:267
 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:230 [inline]
 do_idle+0x375/0x5d0 kernel/sched/idle.c:326
 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:424
 start_secondary+0x100/0x100 arch/x86/kernel/smpboot.c:313
 common_startup_64+0x13e/0x147
 </TASK>