rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (1 GPs behind) idle=03e/1/0x4000000000000000 softirq=12085/12119 fqs=0 (t=10861 jiffies g=9189 q=1522) rcu: rcu_preempt kthread starved for 10861 jiffies! g9189 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28872 pid: 13 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4322 [inline] __schedule+0x8d9/0x2160 kernel/sched/core.c:5073 schedule+0xcf/0x270 kernel/sched/core.c:5152 schedule_timeout+0x11d/0x210 kernel/time/timer.c:1892 rcu_gp_fqs_loop kernel/rcu/tree.c:2005 [inline] rcu_gp_kthread+0xd07/0x2250 kernel/rcu/tree.c:2178 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8382 Comm: kworker/u4:7 Not tainted 5.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy5 ieee80211_iface_work RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0xc/0x12 Code: 56 57 41 50 41 51 41 52 41 53 e8 af 15 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 02 5a c3 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 48 b8 RSP: 0018:ffffc90000db0480 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff8151e070 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8e7b58c0 RBP: ffffffff8e7b58c0 R08: 0000000000000000 R09: ffffffff8e7b58c3 R10: fffffbfff1cf6b18 R11: 0000000000000001 R12: ffffffff8e7b58c8 R13: ffffffff8e7b58d0 R14: 1ffff920001b609b R15: ffffffff88accf60 FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000002c466d0 CR3: 000000000a68e000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:559 [inline] queued_spin_unlock arch/x86/include/asm/qspinlock.h:56 [inline] do_raw_spin_unlock+0x171/0x230 kernel/locking/spinlock_debug.c:139 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:159 [inline] _raw_spin_unlock_irqrestore+0x1e/0x50 kernel/locking/spinlock.c:191 debug_object_activate+0x287/0x3e0 lib/debugobjects.c:684 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline] debug_activate kernel/time/hrtimer.c:475 [inline] enqueue_hrtimer+0x1f/0x2e0 kernel/time/hrtimer.c:982 __run_hrtimer kernel/time/hrtimer.c:1554 [inline] __hrtimer_run_queues+0x878/0xb00 kernel/time/hrtimer.c:1601 hrtimer_interrupt+0x2f9/0x920 kernel/time/hrtimer.c:1663 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline] __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:unwind_next_frame+0x42d/0x1ce0 arch/x86/kernel/unwind_orc.c:464 Code: 03 0f 8e 0c 12 00 00 41 c7 06 00 00 00 00 31 c0 e9 6e fc ff ff 48 ba 00 00 00 00 00 fc ff df 4c 89 f9 48 c1 e9 03 0f b6 34 11 <49> 8d 4f 01 48 89 cf 48 c1 ef 03 0f b6 14 17 4c 89 ff 83 e7 07 40 RSP: 0018:ffffc90000db0868 EFLAGS: 00000a06 RAX: 0000000000000015 RBX: 1ffff920001b6115 RCX: 1ffffffff1abc5b2 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8cc1549c RBP: 0000000000000001 R08: ffffffff8d5e2d8e R09: ffffffff8d5e2d76 R10: fffff520001b6133 R11: 0000000000078087 R12: ffffc90000db0988 R13: ffffc90000db0975 R14: ffffc90000db0940 R15: ffffffff8d5e2d92 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357 ____kasan_slab_free mm/kasan/common.c:360 [inline] ____kasan_slab_free mm/kasan/common.c:325 [inline] __kasan_slab_free+0xda/0x110 mm/kasan/common.c:367 kasan_slab_free include/linux/kasan.h:199 [inline] slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x51/0x130 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kfree+0xdb/0x3c0 mm/slub.c:4213 skb_release_all net/core/skbuff.c:725 [inline] __kfree_skb net/core/skbuff.c:739 [inline] consume_skb net/core/skbuff.c:895 [inline] consume_skb+0x94/0xf0 net/core/skbuff.c:889 mac80211_hwsim_beacon_tx+0x3f8/0x7c0 drivers/net/wireless/mac80211_hwsim.c:1829 __iterate_interfaces+0x107/0x360 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0x5c/0xf0 net/mac80211/util.c:829 mac80211_hwsim_beacon+0xb7/0x160 drivers/net/wireless/mac80211_hwsim.c:1852 __run_hrtimer kernel/time/hrtimer.c:1537 [inline] __hrtimer_run_queues+0x4d7/0xb00 kernel/time/hrtimer.c:1601 hrtimer_run_softirq+0x176/0x340 kernel/time/hrtimer.c:1618 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345 invoke_softirq kernel/softirq.c:221 [inline] __irq_exit_rcu kernel/softirq.c:422 [inline] irq_exit_rcu+0x134/0x200 kernel/softirq.c:434 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:__should_failslab+0x21/0xf0 mm/failslab.c:20 Code: c4 20 5b 5d 41 5c c3 cc cc 48 c7 c0 00 66 62 8e 53 48 89 fb 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 48 83 ec 08 80 3c 10 00 <0f> 85 aa 00 00 00 48 39 1d 22 a8 bf 0c 0f 84 87 00 00 00 f7 c6 00 RSP: 0018:ffffc9000278f450 EFLAGS: 00000246 RAX: 1ffffffff1cc4cc0 RBX: ffff88800ec41640 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000a20 RDI: ffff88800ec41640 RBP: ffff88800ec41640 R08: 0000000000000001 R09: ffffc9000278f758 R10: fffff520004f1f23 R11: 0000000000000000 R12: 0000000000000a20 R13: 0000000000000028 R14: ffffffff87ac9596 R15: ffffc9000278f758 should_failslab+0x5/0x10 mm/slab_common.c:1273 slab_pre_alloc_hook mm/slab.h:499 [inline] slab_alloc_node mm/slub.c:2826 [inline] slab_alloc mm/slub.c:2915 [inline] __kmalloc+0x72/0x3f0 mm/slub.c:4051 kmalloc include/linux/slab.h:559 [inline] ieee802_11_parse_elems_crc+0x116/0xf10 net/mac80211/util.c:1473 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2041 [inline] ieee80211_rx_mgmt_probe_beacon+0x154/0x15e0 net/mac80211/ibss.c:1612 ieee80211_ibss_rx_queued_mgmt+0xb85/0x14c0 net/mac80211/ibss.c:1642 ieee80211_iface_work+0x565/0x7b0 net/mac80211/iface.c:1439 process_one_work+0x84c/0x13b0 kernel/workqueue.c:2275 worker_thread+0x598/0xf80 kernel/workqueue.c:2421 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 NMI backtrace for cpu 0 CPU: 0 PID: 10112 Comm: kworker/0:7 Not tainted 5.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x93/0xc2 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x30/0x99 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x11f/0x170 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x222/0x2a7 kernel/rcu/tree_stall.h:341 print_cpu_stall kernel/rcu/tree_stall.h:622 [inline] check_cpu_stall kernel/rcu/tree_stall.h:697 [inline] rcu_pending kernel/rcu/tree.c:3830 [inline] rcu_sched_clock_irq.cold+0x4f7/0x11dd kernel/rcu/tree.c:2650 update_process_times+0x13b/0x1c0 kernel/time/timer.c:1796 tick_sched_handle+0x6f/0x130 kernel/time/tick-sched.c:226 tick_sched_timer+0x132/0x210 kernel/time/tick-sched.c:1369 __run_hrtimer kernel/time/hrtimer.c:1537 [inline] __hrtimer_run_queues+0x18a/0xb00 kernel/time/hrtimer.c:1601 hrtimer_interrupt+0x2f9/0x920 kernel/time/hrtimer.c:1663 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline] __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:check_preemption_disabled+0x27/0xd0 lib/smp_processor_id.c:60 Code: 00 c3 cc 41 54 55 53 48 83 ec 08 65 44 8b 25 98 af c2 77 65 8b 05 e9 09 c3 77 a9 ff ff ff 7f 74 0c 48 83 c4 08 44 89 e0 5b 5d <41> 5c c3 9c 58 f6 c4 02 74 ed 65 48 8b 1c 25 00 f0 01 00 83 bb a8 RSP: 0018:ffffc90000007c48 EFLAGS: 00000282 RAX: 0000000000000000 RBX: ffff88804069e280 RCX: 0000000000000001 RDX: 0000000000000001 RSI: ffffffff88fb9a80 RDI: ffffffff88fb9ac0 RBP: ffff88802d6f0d00 R08: 0000000000000001 R09: ffff88802d6f0d00 R10: fffff52000000fb4 R11: 0000000000000001 R12: 0000000000000000 R13: ffff88804069e2f0 R14: 0000000000000000 R15: ffff888040757450 rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1217 [inline] rcu_lockdep_current_cpu_online+0x2d/0x150 kernel/rcu/tree.c:1208 rcu_read_lock_held_common kernel/rcu/update.c:112 [inline] rcu_read_lock_held_common kernel/rcu/update.c:102 [inline] rcu_read_lock_held+0x21/0x40 kernel/rcu/update.c:309 ieee80211_scan_rx+0x172/0x5f0 net/mac80211/scan.c:264 __ieee80211_rx_handle_packet net/mac80211/rx.c:4627 [inline] ieee80211_rx_list+0x1957/0x2370 net/mac80211/rx.c:4819 ieee80211_rx_napi+0xc4/0x330 net/mac80211/rx.c:4842 ieee80211_rx include/net/mac80211.h:4524 [inline] ieee80211_tasklet_handler+0xe9/0x100 net/mac80211/main.c:235 tasklet_action_common.constprop.0+0x1d7/0x2d0 kernel/softirq.c:557 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345 do_softirq.part.0+0xc8/0x110 kernel/softirq.c:248 do_softirq kernel/softirq.c:240 [inline] __local_bh_enable_ip+0x102/0x120 kernel/softirq.c:198 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:745 [inline] wg_pubkey_hashtable_lookup+0x217/0x360 drivers/net/wireguard/peerlookup.c:69 wg_noise_handshake_consume_initiation+0x497/0x850 drivers/net/wireguard/noise.c:584 wg_receive_handshake_packet+0x175/0x9b0 drivers/net/wireguard/receive.c:151 wg_packet_handshake_receive_worker+0x3b/0x80 drivers/net/wireguard/receive.c:220 process_one_work+0x84c/0x13b0 kernel/workqueue.c:2275 worker_thread+0x598/0xf80 kernel/workqueue.c:2421 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8382 Comm: kworker/u4:7 Not tainted 5.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy5 ieee80211_iface_work RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5251 [inline] RIP: 0010:lock_is_held_type+0x90/0x130 kernel/locking/lockdep.c:5549 Code: 24 90 09 00 00 4d 8d ac 24 98 09 00 00 65 ff 05 e6 1f c3 77 85 c0 7f 12 e9 81 00 00 00 83 c3 01 41 3b 9c 24 90 09 00 00 7d 74 <48> 63 c3 48 89 ee 48 8d 04 80 4d 8d 7c c5 00 4c 89 ff e8 09 fe ff RSP: 0018:ffffc90000db0590 EFLAGS: 00000097 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff8a96a600 RDI: ffff888018464190 RBP: ffffffff8a96a600 R08: 0000000000000000 R09: ffffffff8c56f94f R10: fffffbfff18adf29 R11: 0000000000000001 R12: ffff888018463780 R13: ffff888018464118 R14: 00000000ffffffff R15: ffff888018464190 FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000002c466d0 CR3: 000000000a68e000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_is_held include/linux/lockdep.h:278 [inline] rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125 trace_hrtimer_cancel include/trace/events/timer.h:290 [inline] debug_deactivate kernel/time/hrtimer.c:482 [inline] __run_hrtimer kernel/time/hrtimer.c:1505 [inline] __hrtimer_run_queues+0x930/0xb00 kernel/time/hrtimer.c:1601 hrtimer_interrupt+0x2f9/0x920 kernel/time/hrtimer.c:1663 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline] __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:unwind_next_frame+0x42d/0x1ce0 arch/x86/kernel/unwind_orc.c:464 Code: 03 0f 8e 0c 12 00 00 41 c7 06 00 00 00 00 31 c0 e9 6e fc ff ff 48 ba 00 00 00 00 00 fc ff df 4c 89 f9 48 c1 e9 03 0f b6 34 11 <49> 8d 4f 01 48 89 cf 48 c1 ef 03 0f b6 14 17 4c 89 ff 83 e7 07 40 RSP: 0018:ffffc90000db0868 EFLAGS: 00000a06 RAX: 0000000000000015 RBX: 1ffff920001b6115 RCX: 1ffffffff1abc5b2 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8cc1549c RBP: 0000000000000001 R08: ffffffff8d5e2d8e R09: ffffffff8d5e2d76 R10: fffff520001b6133 R11: 0000000000078087 R12: ffffc90000db0988 R13: ffffc90000db0975 R14: ffffc90000db0940 R15: ffffffff8d5e2d92 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357 ____kasan_slab_free mm/kasan/common.c:360 [inline] ____kasan_slab_free mm/kasan/common.c:325 [inline] __kasan_slab_free+0xda/0x110 mm/kasan/common.c:367 kasan_slab_free include/linux/kasan.h:199 [inline] slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x51/0x130 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kfree+0xdb/0x3c0 mm/slub.c:4213 skb_release_all net/core/skbuff.c:725 [inline] __kfree_skb net/core/skbuff.c:739 [inline] consume_skb net/core/skbuff.c:895 [inline] consume_skb+0x94/0xf0 net/core/skbuff.c:889 mac80211_hwsim_beacon_tx+0x3f8/0x7c0 drivers/net/wireless/mac80211_hwsim.c:1829 __iterate_interfaces+0x107/0x360 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0x5c/0xf0 net/mac80211/util.c:829 mac80211_hwsim_beacon+0xb7/0x160 drivers/net/wireless/mac80211_hwsim.c:1852 __run_hrtimer kernel/time/hrtimer.c:1537 [inline] __hrtimer_run_queues+0x4d7/0xb00 kernel/time/hrtimer.c:1601 hrtimer_run_softirq+0x176/0x340 kernel/time/hrtimer.c:1618 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345 invoke_softirq kernel/softirq.c:221 [inline] __irq_exit_rcu kernel/softirq.c:422 [inline] irq_exit_rcu+0x134/0x200 kernel/softirq.c:434 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632 RIP: 0010:__should_failslab+0x21/0xf0 mm/failslab.c:20 Code: c4 20 5b 5d 41 5c c3 cc cc 48 c7 c0 00 66 62 8e 53 48 89 fb 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 48 83 ec 08 80 3c 10 00 <0f> 85 aa 00 00 00 48 39 1d 22 a8 bf 0c 0f 84 87 00 00 00 f7 c6 00 RSP: 0018:ffffc9000278f450 EFLAGS: 00000246 RAX: 1ffffffff1cc4cc0 RBX: ffff88800ec41640 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000a20 RDI: ffff88800ec41640 RBP: ffff88800ec41640 R08: 0000000000000001 R09: ffffc9000278f758 R10: fffff520004f1f23 R11: 0000000000000000 R12: 0000000000000a20 R13: 0000000000000028 R14: ffffffff87ac9596 R15: ffffc9000278f758 should_failslab+0x5/0x10 mm/slab_common.c:1273 slab_pre_alloc_hook mm/slab.h:499 [inline] slab_alloc_node mm/slub.c:2826 [inline] slab_alloc mm/slub.c:2915 [inline] __kmalloc+0x72/0x3f0 mm/slub.c:4051 kmalloc include/linux/slab.h:559 [inline] ieee802_11_parse_elems_crc+0x116/0xf10 net/mac80211/util.c:1473 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2041 [inline] ieee80211_rx_mgmt_probe_beacon+0x154/0x15e0 net/mac80211/ibss.c:1612 ieee80211_ibss_rx_queued_mgmt+0xb85/0x14c0 net/mac80211/ibss.c:1642 ieee80211_iface_work+0x565/0x7b0 net/mac80211/iface.c:1439 process_one_work+0x84c/0x13b0 kernel/workqueue.c:2275 worker_thread+0x598/0xf80 kernel/workqueue.c:2421 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294