rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 GPs behind) idle=78e4/1/0x4000000000000000 softirq=36147/36148 fqs=2 rcu: (detected by 0, t=10502 jiffies, g=55573, q=305 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5235 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:validate_chain+0x23/0x5900 kernel/locking/lockdep.c:3824 Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce 89 54 24 58 <48> 89 bc 24 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 RSP: 0018:ffffc90000a18000 EFLAGS: 00000086 RAX: 1ffffffff2789e3b RBX: ffffffff93c4f1d8 RCX: 11dc4a202a866a76 RDX: 0000000000000001 RSI: ffff88802c3c6580 RDI: ffff88802c3c5a00 RBP: ffffc90000a18300 R08: ffffffff941e49e7 R09: 1ffffffff283c93c R10: dffffc0000000000 R11: fffffbfff283c93d R12: 0000000000000001 R13: ffff88802c3c64d8 R14: 11dc4a202a866a76 R15: ffff88802c3c65a0 FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffd88f0000 CR3: 0000000011ecc000 CR4: 0000000000350ef0 Call Trace: __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5142 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] advance_sched+0xab/0xca0 net/sched/sch_taprio.c:924 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59d/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:ieee80211_rx_list+0x2b24/0x3780 net/mac80211/rx.c:5462 Code: 4c 89 ee e8 1e c7 f5 ff 66 83 fb 08 0f 84 53 ef ff ff e8 1f fe 63 f6 49 81 c6 80 1a 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 b2 45 cb f6 4d 8b 3e 4d 39 f7 0f 84 bb 01 00 00 RSP: 0018:ffffc90000a189a0 EFLAGS: 00000246 RAX: 1ffff110049af518 RBX: 0000000000000000 RCX: ffff88802c3c5a00 RDX: 0000000000000100 RSI: ffffffff8c0ad560 RDI: ffffffff8c608f40 RBP: ffffc90000a18bf0 R08: ffffffff941e4847 R09: 1ffffffff283c908 R10: dffffc0000000000 R11: fffffbfff283c909 R12: dffffc0000000000 R13: ffff88805a942b40 R14: ffff888024d7a8c0 R15: ffffc90000a18a60 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5124 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439 tasklet_action_common+0x323/0x4d0 kernel/softirq.c:785 handle_softirqs+0x2c6/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pte_dirty arch/x86/include/asm/pgtable.h:129 [inline] RIP: 0010:zap_present_folio_ptes mm/memory.c:1494 [inline] RIP: 0010:zap_present_ptes mm/memory.c:1576 [inline] RIP: 0010:zap_pte_range mm/memory.c:1618 [inline] RIP: 0010:zap_pmd_range mm/memory.c:1736 [inline] RIP: 0010:zap_pud_range mm/memory.c:1765 [inline] RIP: 0010:zap_p4d_range mm/memory.c:1786 [inline] RIP: 0010:unmap_page_range+0x13bf/0x42c0 mm/memory.c:1807 Code: 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 41 80 3c 04 00 74 08 4c 89 ff e8 8e b8 1a 00 49 89 1f e9 75 17 00 00 e8 e1 6f b3 ff <4c> 89 ee 48 bb 40 00 00 00 00 00 00 04 48 21 de 31 ff e8 aa 74 b3 RSP: 0018:ffffc90002f1f320 EFLAGS: 00000283 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffc90002f1f203 RDX: 0000000000000003 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 RBP: ffffc90002f1f650 R08: ffffffff901875ef R09: 1ffffffff2030ebd R10: dffffc0000000000 R11: fffffbfff2030ebe R12: 1ffff1100c227809 R13: 8000000063c4e007 R14: 1ffffd400031e273 R15: ffff88806113c048 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1897 exit_mmap+0x264/0xc80 mm/mmap.c:3412 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff4f557c93c Code: Unable to access opcode bytes at 0x7ff4f557c912. RSP: 002b:00007ffdac0e1ca0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: 0000000000000028 RBX: 0000000000000003 RCX: 00007ff4f557c93c RDX: 0000000000000028 RSI: 00007ffdac0e1d50 RDI: 00000000000000f9 RBP: 00007ffdac0e1cfc R08: 0000000000000000 R09: 0079746972756365 R10: 00007ffdac0e1660 R11: 0000000000000246 R12: 0000000000000032 R13: 000000000005fce6 R14: 000000000005fcdc R15: 00007ffdac0e1d50 rcu: rcu_preempt kthread starved for 10496 jiffies! g55573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 1086 Comm: kworker/u8:9 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:312 [inline] RIP: 0010:smp_call_function_many_cond+0x1865/0x29d0 kernel/smp.c:856 Code: 89 e6 83 e6 01 31 ff e8 39 18 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e4 13 0c 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 c8 13 0c 00 eb e4 44 RSP: 0018:ffffc90004207700 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 1ffff110171288f1 RCX: ffff888027b11e00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900042078e0 R08: ffffffff818778b7 R09: 1ffffffff283c908 R10: dffffc0000000000 R11: fffffbfff283c909 R12: dffffc0000000000 R13: ffff8880b8944788 R14: ffff8880b883fb40 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6398a9c4ed CR3: 000000000e734000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 text_poke_bp_batch+0x9ef/0xb30 text_poke_flush arch/x86/kernel/alternative.c:2486 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_disable_cpuslocked+0xd2/0x1c0 kernel/jump_label.c:240 static_key_disable+0x1a/0x20 kernel/jump_label.c:248 toggle_allocation_gate+0x1b8/0x250 mm/kfence/core.c:838 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2e/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd10 kernel/workqueue.c:3389 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244