rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3791/1:b..l P21486/1:b..l P15455/1:b..l (detected by 0, t=10503 jiffies, g=80313, q=55 ncpus=2) task:kworker/u4:20 state:R running task stack:23552 pid:15455 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_nc_worker Call Trace: context_switch kernel/sched/core.c:5245 [inline] __schedule+0x142d/0x4550 kernel/sched/core.c:6558 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6870 irqentry_exit+0x53/0x80 kernel/entry/common.c:433 asm_sysvec_reschedule_ipi+0x16/0x20 arch/x86/include/asm/idtentry.h:654 RIP: 0010:lock_acquire+0x26f/0x5a0 kernel/locking/lockdep.c:5665 Code: 2b 00 74 08 4c 89 f7 e8 3f a2 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000abd7a80 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff9200157af5c RCX: 1ffff9200157aefc RDX: dffffc0000000000 RSI: ffffffff8aebf620 RDI: ffffffff8b3cf300 RBP: ffffc9000abd7be0 R08: dffffc0000000000 R09: fffffbfff2091c45 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200157af58 R13: dffffc0000000000 R14: ffffc9000abd7ae0 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:306 [inline] rcu_read_lock include/linux/rcupdate.h:747 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline] batadv_nc_worker+0xe8/0x610 net/batman-adv/network-coding.c:719 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.1 state:R running task stack:25000 pid:21486 ppid:3589 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5245 [inline] __schedule+0x142d/0x4550 kernel/sched/core.c:6558 preempt_schedule_common+0x83/0xd0 kernel/sched/core.c:6727 preempt_schedule+0xd9/0xe0 kernel/sched/core.c:6751 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x128/0x130 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:405 [inline] __wake_up_common_lock kernel/sched/wait.c:140 [inline] __wake_up_sync_key+0x121/0x1c0 kernel/sched/wait.c:208 sock_def_readable+0x15b/0x280 net/core/sock.c:3295 __netlink_sendskb net/netlink/af_netlink.c:1273 [inline] netlink_broadcast_deliver net/netlink/af_netlink.c:1403 [inline] do_one_broadcast net/netlink/af_netlink.c:1481 [inline] netlink_broadcast+0xba4/0x10b0 net/netlink/af_netlink.c:1521 uevent_net_broadcast_untagged lib/kobject_uevent.c:331 [inline] kobject_uevent_net_broadcast+0x377/0x560 lib/kobject_uevent.c:409 kobject_uevent_env+0x576/0x8c0 lib/kobject_uevent.c:593 device_del+0x9c4/0xbd0 drivers/base/core.c:3872 device_unregister+0x1c/0xc0 drivers/base/core.c:3895 wakeup_source_unregister+0x169/0x190 drivers/base/power/wakeup.c:249 ep_remove+0x4a5/0x660 fs/eventpoll.c:725 eventpoll_release_file+0xbf/0x110 fs/eventpoll.c:932 eventpoll_release include/linux/eventpoll.h:53 [inline] __fput+0x6b6/0x890 fs/file_table.c:311 task_work_run+0x246/0x300 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:171 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:297 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f684aa7b9da RSP: 002b:00007ffc88add0c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f684aa7b9da RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f684ab9d980 R08: 0000001b33020000 R09: 000000000000000d R10: 00000000818e5b33 R11: 0000000000000293 R12: 000000000018b3a6 R13: ffffffffffffffff R14: 00007f684a600000 R15: 000000000018b065 task:syz-fuzzer state:R running task stack:21768 pid:3791 ppid:3535 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5245 [inline] __schedule+0x142d/0x4550 kernel/sched/core.c:6558 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6870 irqentry_exit+0x53/0x80 kernel/entry/common.c:433 asm_sysvec_reschedule_ipi+0x16/0x20 arch/x86/include/asm/idtentry.h:654 RIP: 0010:xa_is_internal include/linux/xarray.h:171 [inline] RIP: 0010:xa_is_node include/linux/xarray.h:1242 [inline] RIP: 0010:mas_start lib/maple_tree.c:1401 [inline] RIP: 0010:mas_state_walk lib/maple_tree.c:3893 [inline] RIP: 0010:mt_find+0x545/0xc60 lib/maple_tree.c:6534 Code: d1 dc f1 f6 89 c3 31 ff 89 c6 e8 26 5d 0a f7 85 db 4c 8d bc 24 e0 00 00 00 0f 84 d3 00 00 00 e8 b1 59 0a f7 44 89 eb 83 e3 03 02 00 00 00 48 89 de e8 7e 5d 0a f7 49 81 fd 01 10 00 00 0f 82 RSP: 0000:ffffc90004b97c80 EFLAGS: 00000202 RAX: ffffffff8a803830 RBX: 0000000000000002 RCX: ffff888021e7bb80 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90004b97e10 R08: ffffffff8a803827 R09: fffffbfff2091c45 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000972fac R13: ffff8880210e821e R14: dffffc0000000000 R15: ffffc90004b97d60 find_vma+0x136/0x1b0 mm/mmap.c:1887 lock_mm_and_find_vma+0x71/0x2e0 mm/memory.c:5349 do_user_addr_fault arch/x86/mm/fault.c:1352 [inline] handle_page_fault arch/x86/mm/fault.c:1471 [inline] exc_page_fault+0x169/0x660 arch/x86/mm/fault.c:1527 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x41f66b RSP: 002b:000000c00251be88 EFLAGS: 00010202 RAX: 000000c0128d8f00 RBX: 0000000000000080 RCX: 000000000000aaa8 RDX: 000000c0128d8f00 RSI: 0000000000000080 RDI: 0000000000000010 RBP: 000000c00251bf08 R08: 0000000000000008 R09: 000000c0128d8f08 R10: 000000000000aaaa R11: 00000000000000b8 R12: 000000c00251bf08 R13: 0000000000000001 R14: 000000c0196e71e0 R15: 0000000000000001 rcu: rcu_preempt kthread starved for 10503 jiffies! g80313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25624 pid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5245 [inline] __schedule+0x142d/0x4550 kernel/sched/core.c:6558 schedule+0xbf/0x180 kernel/sched/core.c:6634 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x2d2/0x1120 kernel/rcu/tree.c:1674 rcu_gp_kthread+0xa3/0x3a0 kernel/rcu/tree.c:1873 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 21507 Comm: syz-executor.5 Not tainted 6.1.64-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:lookup_object lib/debugobjects.c:195 [inline] RIP: 0010:debug_object_deactivate+0xa4/0x420 lib/debugobjects.c:774 Code: a5 fd 4c 89 34 24 48 8b 1b 45 31 f6 eb 06 48 8b 1b 41 ff c6 48 85 db 74 3c 4c 8d 7b 18 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 a2 a5 a5 fd 49 39 2f 0f 84 91 00 00 00 48 89 d8 RSP: 0018:ffffc900001e0ce8 EFLAGS: 00000046 RAX: 1ffff11004f0e7ce RBX: ffff888077a13070 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900001e0bc0 RBP: ffff88803cb4a340 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff1100ef42611 R14: 0000000000000003 R15: ffff888077a13088 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4fc39f3870 CR3: 000000000ce8e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline] debug_deactivate+0x1d/0x280 kernel/time/hrtimer.c:481 __run_hrtimer kernel/time/hrtimer.c:1653 [inline] __hrtimer_run_queues+0x334/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:360 [inline] RIP: 0010:unwind_next_frame+0xd73/0x2220 arch/x86/kernel/unwind_orc.c:539 Code: 03 00 00 4c 39 f0 0f 87 93 03 00 00 4c 89 ef e8 f3 1d 00 00 49 89 c6 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 <48> 8b 5c 24 18 74 08 48 89 df e8 6e 4e a5 00 4c 89 33 48 8b 44 24 RSP: 0018:ffffc90006366c40 EFLAGS: 00000246 RAX: 1ffff92000c6cdad RBX: ffffc90006368000 RCX: 1ffff92000c6cda4 RDX: 1ffffffff1ddb075 RSI: 0000000000000000 RDI: ffffc90006367b38 RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc90006366e10 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90006366d20 R13: ffffc90006367b38 R14: ffffffff8156bdd7 R15: 1ffff92000c6cda5 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122 save_stack+0xf6/0x1e0 mm/page_owner.c:127 __reset_page_owner+0x52/0x1a0 mm/page_owner.c:148 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1440 [inline] free_pcp_prepare mm/page_alloc.c:1490 [inline] free_unref_page_prepare+0xf63/0x1120 mm/page_alloc.c:3358 free_unref_page_list+0x663/0x900 mm/page_alloc.c:3499 release_pages+0x2836/0x2b40 mm/swap.c:1055 tlb_batch_pages_flush mm/mmu_gather.c:59 [inline] tlb_flush_mmu_free mm/mmu_gather.c:254 [inline] tlb_flush_mmu+0xfc/0x210 mm/mmu_gather.c:261 zap_pte_range mm/memory.c:1525 [inline] zap_pmd_range mm/memory.c:1574 [inline] zap_pud_range mm/memory.c:1603 [inline] zap_p4d_range mm/memory.c:1624 [inline] unmap_page_range+0x217c/0x2740 mm/memory.c:1645 unmap_vmas+0x48b/0x640 mm/memory.c:1730 exit_mmap+0x252/0x9f0 mm/mmap.c:3227 __mmput+0x115/0x3c0 kernel/fork.c:1199 exit_mm+0x226/0x300 kernel/exit.c:563 do_exit+0x9f6/0x26a0 kernel/exit.c:856 do_group_exit+0x202/0x2b0 kernel/exit.c:1019 get_signal+0x16f7/0x17d0 kernel/signal.c:2862 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:168 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:297 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2979a7cae9 Code: Unable to access opcode bytes at 0x7f2979a7cabf. RSP: 002b:00007f29783bc178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f2979b9c1f8 RCX: 00007f2979a7cae9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2979b9c1f8 RBP: 00007f2979b9c1f0 R08: 00007f29783bc6c0 R09: 00007f29783bc6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2979b9c1fc R13: 000000000000006e R14: 00007fff729c76b0 R15: 00007fff729c7798