rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (10499 ticks this GP) idle=9ce/1/0x4000000000000000 softirq=217221/217226 fqs=0 
	(t=10500 jiffies g=431581 q=26)
rcu: rcu_preempt kthread starved for 10500 jiffies! g431581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28208 pid:   14 ppid:     2 flags:0x00004000
Call Trace:
 context_switch kernel/sched/core.c:4339 [inline]
 __schedule+0x916/0x23e0 kernel/sched/core.c:5147
 schedule+0xcf/0x270 kernel/sched/core.c:5226
 schedule_timeout+0x14a/0x250 kernel/time/timer.c:1892
 rcu_gp_fqs_loop kernel/rcu/tree.c:2004 [inline]
 rcu_gp_kthread+0xd07/0x2300 kernel/rcu/tree.c:2177
 kthread+0x3b1/0x4a0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 20966 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:mac80211_hwsim_tx_frame_no_nl.isra.0+0x737/0x1330 drivers/net/wireless/mac80211_hwsim.c:1515
Code: b6 44 24 08 84 c0 0f 85 a8 06 00 00 e8 92 7c 4c fc e8 8d 7c 4c fc 48 89 d8 48 c1 e8 03 80 3c 28 00 0f 85 93 09 00 00 48 8b 1b <48> 81 fb 80 38 d6 8c 0f 84 f7 04 00 00 e8 67 7c 4c fc 49 39 de 4c
RSP: 0018:ffffc90000007ba0 EFLAGS: 00000246
RAX: 1ffff1100d98263c RBX: ffff88802e6931e0 RCX: 0000000000000100
RDX: ffff88809482b880 RSI: ffffffff85284623 RDI: 0000000000000003
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000000
R10: ffffffff85284699 R11: 0000000000000000 R12: ffff88809c7dbb40
R13: ffff88806b853410 R14: ffff88806b8531e0 R15: 0000000000000000
FS:  00007f0686991700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d032000 CR3: 000000009abc7000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 mac80211_hwsim_tx_frame+0x14f/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1775
 mac80211_hwsim_beacon_tx+0x4ba/0x910 drivers/net/wireless/mac80211_hwsim.c:1829
 __iterate_interfaces+0x1e5/0x520 net/mac80211/util.c:793
 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:829
 mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1852
 __run_hrtimer kernel/time/hrtimer.c:1537 [inline]
 __hrtimer_run_queues+0x609/0xe40 kernel/time/hrtimer.c:1601
 hrtimer_run_softirq+0x17b/0x360 kernel/time/hrtimer.c:1618
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:559
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:lock_is_held_type+0xfd/0x140 kernel/locking/lockdep.c:5560
Code: 00 00 b8 ff ff ff ff 65 0f c1 05 4e 6c eb 76 83 f8 01 75 29 9c 58 f6 c4 02 75 3d 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 45 31 ed eb b9 0f 0b 48
RSP: 0018:ffffc9000174f4f8 EFLAGS: 00000282
RAX: 0000000000000046 RBX: 0000000000000002 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff8bf796a0 R08: 0000000000000001 R09: ffffffff9025f95f
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809482b880
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88809482c2a0
 lock_is_held include/linux/lockdep.h:283 [inline]
 schedule_debug kernel/sched/core.c:4912 [inline]
 __schedule+0x1620/0x23e0 kernel/sched/core.c:5038
 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:5535
 irqentry_exit+0x31/0x80 kernel/entry/common.c:426
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:163 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:197
Code: f0 4d 89 03 e9 f2 fc ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 <65> 8b 05 09 2d 8d 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b
RSP: 0018:ffffc9000174f6d0 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000200 RCX: ffffc90002fe1000
RDX: 0000000000040000 RSI: ffffffff819bbcae RDI: 0000000000000003
RBP: ffffea000103c6c0 R08: 0000000000000000 R09: ffffffff9025f95f
R10: ffffffff819bbca4 R11: 0000000000000000 R12: 1ffff920002e9ee1
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 __test_set_page_writeback+0x2a4/0xea0 mm/page-writeback.c:2806
 set_page_writeback include/linux/page-flags.h:562 [inline]
 ext4_bio_write_page+0x294/0x1f70 fs/ext4/page-io.c:455
 mpage_submit_page+0x11e/0x2a0 fs/ext4/inode.c:2100
 mpage_map_and_submit_buffers fs/ext4/inode.c:2348 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2487 [inline]
 ext4_writepages+0x24c1/0x3b70 fs/ext4/inode.c:2800
 do_writepages+0xec/0x290 mm/page-writeback.c:2352
 __filemap_fdatawrite_range+0x2a5/0x390 mm/filemap.c:413
 ext4_alloc_da_blocks+0x1ed/0x330 fs/ext4/inode.c:3164
 ext4_release_file+0x183/0x370 fs/ext4/file.c:141
 __fput+0x288/0x920 fs/file_table.c:280
 task_work_run+0xdd/0x1a0 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
 exit_to_user_mode_prepare+0x272/0x280 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:301
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:57
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0686991188 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 000000000056c0f0 RCX: 00000000004665d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0
R13: 00007fff4f48d8ff R14: 00007f0686991300 R15: 0000000000022000
NMI backtrace for cpu 1
CPU: 1 PID: 20955 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:341
 print_cpu_stall kernel/rcu/tree_stall.h:624 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:699 [inline]
 rcu_pending kernel/rcu/tree.c:3911 [inline]
 rcu_sched_clock_irq.cold+0x3f1/0x74b kernel/rcu/tree.c:2649
 update_process_times+0x16d/0x200 kernel/time/timer.c:1796
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1373
 __run_hrtimer kernel/time/hrtimer.c:1537 [inline]
 __hrtimer_run_queues+0x1c0/0xe40 kernel/time/hrtimer.c:1601
 hrtimer_interrupt+0x330/0xa00 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:compound_head include/linux/page-flags.h:187 [inline]
RIP: 0010:virt_to_head_page include/linux/mm.h:899 [inline]
RIP: 0010:__ksize+0x2f/0x110 mm/slub.c:4193
Code: 84 8d 00 00 00 48 83 ec 08 e8 9d da 7a ff 48 c1 e8 0c 48 89 c7 48 b8 00 00 00 00 00 ea ff ff 48 c1 e7 06 48 01 c7 48 8b 47 08 <48> 8d 50 ff a8 01 48 0f 45 fa 48 8b 57 08 48 8d 42 ff 83 e2 01 48
RSP: 0018:ffffc90000dc0ad8 EFLAGS: 00000282
RAX: ffffea0002723701 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff88806519d4c0 RSI: ffffffff81340fe4 RDI: ffffea0002723780
RBP: ffff88809c8de000 R08: 0000000000000000 R09: 000000000000002e
R10: ffffffff81340fda R11: 000000000000003f R12: 0000000000000000
R13: ffff88809c8de000 R14: 00000000ffffffff R15: 0000000000020a20
 ksize mm/slab_common.c:1265 [inline]
 ksize+0x4e/0x60 mm/slab_common.c:1243
 __alloc_skb+0xf7/0x340 net/core/skbuff.c:432
 __netdev_alloc_skb+0x70/0x400 net/core/skbuff.c:492
 netdev_alloc_skb include/linux/skbuff.h:2867 [inline]
 dev_alloc_skb include/linux/skbuff.h:2880 [inline]
 __ieee80211_beacon_get+0xebe/0x1aa0 net/mac80211/tx.c:4836
 ieee80211_beacon_get_tim+0x88/0x910 net/mac80211/tx.c:4950
 ieee80211_beacon_get include/net/mac80211.h:4938 [inline]
 mac80211_hwsim_beacon_tx+0x111/0x910 drivers/net/wireless/mac80211_hwsim.c:1799
 __iterate_interfaces+0x1e5/0x520 net/mac80211/util.c:793
 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:829
 mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1852
 __run_hrtimer kernel/time/hrtimer.c:1537 [inline]
 __hrtimer_run_queues+0x609/0xe40 kernel/time/hrtimer.c:1601
 hrtimer_run_softirq+0x17b/0x360 kernel/time/hrtimer.c:1618
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:559
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:zap_pte_range mm/memory.c:1318 [inline]
RIP: 0010:zap_pmd_range mm/memory.c:1374 [inline]
RIP: 0010:zap_pud_range mm/memory.c:1403 [inline]
RIP: 0010:zap_p4d_range mm/memory.c:1424 [inline]
RIP: 0010:unmap_page_range+0x9ac/0x2650 mm/memory.c:1445
Code: 3c 30 00 0f 85 e2 18 00 00 49 c7 45 00 00 00 00 00 e8 c8 da cb ff 48 8b 5c 24 10 4c 89 fe 49 83 c5 08 48 89 df e8 f4 e0 cb ff <49> 8d 87 00 10 00 00 4c 39 fb 0f 84 43 0e 00 00 49 89 c7 49 8d 87
RSP: 0018:ffffc900016df780 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007fad26e00000 RCX: 00007fad26dfa000
RDX: 0000000000000000 RSI: ffff88806519d4c0 RDI: 0000000000000003
RBP: ffffea0000aadb40 R08: 00007fad26e00000 R09: 0000000000000000
R10: ffffffff81a8e7fc R11: 0000000000000000 R12: ffffea0000aadb70
R13: ffff888096bf4fd0 R14: dffffc0000000000 R15: 00007fad26dfa000
 unmap_single_vma+0x198/0x300 mm/memory.c:1490
 unmap_vmas+0x16d/0x2f0 mm/memory.c:1522
 exit_mmap+0x2a8/0x590 mm/mmap.c:3208
 __mmput+0x122/0x470 kernel/fork.c:1096
 mmput+0x58/0x60 kernel/fork.c:1117
 exit_mm kernel/exit.c:502 [inline]
 do_exit+0xb0a/0x2a60 kernel/exit.c:813
 do_group_exit+0x125/0x310 kernel/exit.c:923
 get_signal+0x47f/0x2150 kernel/signal.c:2818
 arch_do_signal_or_restart+0x2a8/0x1eb0 arch/x86/kernel/signal.c:789
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x171/0x280 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:301
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:57
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: Unable to access opcode bytes at RIP 0x4665af.
RSP: 002b:00007fad2453c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: 0000000000000007 RBX: 000000000056bf80 RCX: 00000000004665d9
RDX: 0000000000000078 RSI: 0000000020000200 RDI: 0000000000000005
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007fffa779256f R14: 00007fad2453c300 R15: 0000000000022000