rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10364/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=51665, q=663 ncpus=2)
task:syz.1.1597 state:R running task stack:23416 pid:10364 tgid:10362 ppid:9504 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x17ae/0x4a10 kernel/sched/core.c:6529
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_release+0x658/0xa30 kernel/locking/lockdep.c:5784
Code: 3c 3b 00 74 08 4c 89 f7 e8 f5 af 87 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25
RSP: 0018:ffffc900164aefa0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92002c95e06 RCX: ffffc900164af003
RDX: 0000000000000001 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f8c40
RBP: ffffc900164af0d8 R08: ffffffff8ff69aef R09: 1ffffffff1fed35d
R10: dffffc0000000000 R11: fffffbfff1fed35e R12: 1ffff92002c95e00
R13: 0000000000000246 R14: ffffc900164af030 R15: dffffc0000000000
rcu_lock_release include/linux/rcupdate.h:336 [inline]
rcu_read_unlock include/linux/rcupdate.h:869 [inline]
get_mem_cgroup_from_mm+0x1ad/0x2a0 mm/memcontrol.c:947
__mem_cgroup_charge+0x16/0x80 mm/memcontrol.c:4453
mem_cgroup_charge include/linux/memcontrol.h:672 [inline]
shmem_alloc_and_add_folio+0x88f/0x14f0 mm/shmem.c:1792
shmem_get_folio_gfp+0x8dc/0x2370 mm/shmem.c:2188
shmem_fault+0x252/0x6f0 mm/shmem.c:2388
__do_fault+0x135/0x460 mm/memory.c:4655
do_read_fault mm/memory.c:5061 [inline]
do_fault mm/memory.c:5191 [inline]
do_pte_missing mm/memory.c:3947 [inline]
handle_pte_fault+0x3b24/0x6eb0 mm/memory.c:5522
__handle_mm_fault mm/memory.c:5665 [inline]
handle_mm_fault+0xf70/0x1880 mm/memory.c:5833
faultin_page mm/gup.c:1194 [inline]
__get_user_pages+0x6ec/0x16a0 mm/gup.c:1493
populate_vma_page_range+0x264/0x330 mm/gup.c:1932
__mm_populate+0x27a/0x460 mm/gup.c:2035
mm_populate include/linux/mm.h:3415 [inline]
vm_mmap_pgoff+0x2c3/0x3d0 mm/util.c:593
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcc3e5779f9
RSP: 002b:00007fcc3f3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fcc3e705f80 RCX: 00007fcc3e5779f9
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 00007fcc3e5e58ee R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcc3e705f80 R15: 00007ffdeb7d26d8
rcu: rcu_preempt kthread starved for 10526 jiffies! g51665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x17ae/0x4a10 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:unwind_next_frame+0x194/0x2a00
Code: 48 89 44 24 78 42 0f b6 04 30 84 c0 48 8b 5c 24 20 48 89 54 24 10 0f 85 f6 1f 00 00 48 0f be 2a 48 8b 44 24 30 42 80 3c 30 00 <74> 08 48 89 df e8 d2 7e b6 00 48 03 2b 48 8d 75 ff 31 ff e8 24 63
RSP: 0018:ffffc90000007308 EFLAGS: 00000246
RAX: 1ffff92000000e85 RBX: ffffc90000007428 RCX: ffffffff8e494680
RDX: ffffc90000007415 RSI: 0000000000000001 RDI: 0000000000000001
RBP: 0000000000000000 R08: ffffffff814117f1 R09: ffffc900000074d0
R10: 0000000000000003 R11: ffffffff817f1d80 R12: ffffc900000073e0
R13: ffffc90000007430 R14: dffffc0000000000 R15: ffffffff8bad85fc
FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c46fcfd CR3: 000000006cc8c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
unpoison_slab_object mm/kasan/common.c:312 [inline]
__kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338
kasan_slab_alloc include/linux/kasan.h:201 [inline]
slab_post_alloc_hook mm/slub.c:3988 [inline]
slab_alloc_node mm/slub.c:4037 [inline]
kmem_cache_alloc_node_noprof+0x16b/0x320 mm/slub.c:4080
kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:583
__alloc_skb+0x1f3/0x440 net/core/skbuff.c:674
__netdev_alloc_skb+0x104/0xa10 net/core/skbuff.c:738
netdev_alloc_skb include/linux/skbuff.h:3348 [inline]
dev_alloc_skb include/linux/skbuff.h:3361 [inline]
__ieee80211_beacon_get+0x998/0x15c0 net/mac80211/tx.c:5470
ieee80211_beacon_get_tim+0xb4/0x320 net/mac80211/tx.c:5592
ieee80211_beacon_get include/net/mac80211.h:5593 [inline]
mac80211_hwsim_beacon_tx+0x39d/0x850 drivers/net/wireless/virtual/mac80211_hwsim.c:2311
__iterate_interfaces+0x222/0x510 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 net/mac80211/util.c:808
mac80211_hwsim_beacon+0xd4/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim.c:2345
__run_hrtimer kernel/time/hrtimer.c:1689 [inline]
__hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1770
handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d e5 be 9b 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffffff8e407ca8 EFLAGS: 00000246
RAX: ffffffff8e494680 RBX: ffff88801be81064 RCX: 0000000000490289
RDX: 0000000000000001 RSI: ffff88801be81000 RDI: ffff88801be81064
RBP: 000000000003a678 R08: ffff8880b9237c7b R09: 1ffff11017246f8f
R10: dffffc0000000000 R11: ffffffff8bad7c90 R12: ffff88801b7e4000
R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eeca700
acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:702
cpuidle_enter_state+0x112/0x480 drivers/cpuidle/cpuidle.c:267
cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388
call_cpuidle kernel/sched/idle.c:155 [inline]
cpuidle_idle_call kernel/sched/idle.c:230 [inline]
do_idle+0x375/0x5d0 kernel/sched/idle.c:326
cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:424
rest_init+0x2dc/0x300 init/main.c:747
start_kernel+0x47a/0x500 init/main.c:1103
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:488
common_startup_64+0x13e/0x147