rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (10488 ticks this GP) idle=069/1/0x4000000000000000 softirq=58780/58780 fqs=0 (t=10500 jiffies g=81105 q=326) rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g81105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=43247 rcu: rcu_preempt kthread starved for 10500 jiffies! g81105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26424 pid: 16 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x957/0xec0 kernel/sched/core.c:6388 schedule+0xeb/0x1b0 kernel/sched/core.c:6460 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1884 rcu_gp_fqs_loop+0x2b9/0xfb0 kernel/rcu/tree.c:1971 rcu_gp_kthread+0xa5/0x360 kernel/rcu/tree.c:2144 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 rcu: Stack dump where RCU GP kthread last ran: NMI backtrace for cpu 0 CPU: 0 PID: 18074 Comm: syz-executor.3 Not tainted 5.18.0-rc7-syzkaller-00048-gf993aed406ea #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x473/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x168/0x280 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_check_gp_kthread_starvation+0x1da/0x250 kernel/rcu/tree_stall.h:490 print_cpu_stall kernel/rcu/tree_stall.h:634 [inline] check_cpu_stall kernel/rcu/tree_stall.h:723 [inline] rcu_pending kernel/rcu/tree.c:3923 [inline] rcu_sched_clock_irq+0xf09/0x18d0 kernel/rcu/tree.c:2625 update_process_times+0x197/0x200 kernel/time/timer.c:1788 tick_sched_handle kernel/time/tick-sched.c:243 [inline] tick_sched_timer+0x377/0x540 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:199 Code: 00 00 00 00 66 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 58 5e 7b 0c 48 89 de 5b e9 a7 f4 4f 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 80 6f 02 00 65 8b 15 04 5a 7c 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc900031aece8 EFLAGS: 00000287 RAX: ffffffff89fc18a0 RBX: ffff88807a7d53e8 RCX: ffffffff81676828 RDX: dffffc0000000000 RSI: ffffffff8a8d0480 RDI: ffffffff8ae88f20 RBP: 000000000000027e R08: dffffc0000000000 R09: fffffbfff1f64418 R10: fffffbfff1f64418 R11: 1ffffffff1f64417 R12: ffff88807902bec8 R13: dffffc0000000000 R14: ffff88807902bed0 R15: ffff88807902bec0 batadv_tt_local_purge+0x2f0/0x350 net/batman-adv/translation-table.c:1351 batadv_tt_local_resize_to_mtu+0x8a/0x130 net/batman-adv/translation-table.c:3957 batadv_update_min_mtu net/batman-adv/hard-interface.c:635 [inline] batadv_hardif_activate_interface+0x1af/0x260 net/batman-adv/hard-interface.c:662 batadv_hardif_enable_interface+0x627/0x890 net/batman-adv/hard-interface.c:745 batadv_softif_slave_add+0x75/0xf0 net/batman-adv/soft-interface.c:839 do_set_master net/core/rtnetlink.c:2534 [inline] __rtnl_newlink net/core/rtnetlink.c:3500 [inline] rtnl_newlink+0x1c32/0x2070 net/core/rtnetlink.c:3531 rtnetlink_rcv_msg+0x92f/0xe80 net/core/rtnetlink.c:5993 netlink_rcv_skb+0x1f0/0x460 net/netlink/af_netlink.c:2502 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7e7/0x9c0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x9b3/0xcd0 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] ____sys_sendmsg+0x597/0x8e0 net/socket.c:2413 ___sys_sendmsg net/socket.c:2467 [inline] __sys_sendmsg+0x27e/0x370 net/socket.c:2496 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f30a72890e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f30a83a9168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f30a739c030 RCX: 00007f30a72890e9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 00007f30a72e308d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe8428e72f R14: 00007f30a83a9300 R15: 0000000000022000 NMI backtrace for cpu 0 CPU: 0 PID: 18074 Comm: syz-executor.3 Not tainted 5.18.0-rc7-syzkaller-00048-gf993aed406ea #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x473/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x168/0x280 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x236/0x3a0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:639 [inline] check_cpu_stall kernel/rcu/tree_stall.h:723 [inline] rcu_pending kernel/rcu/tree.c:3923 [inline] rcu_sched_clock_irq+0xf1b/0x18d0 kernel/rcu/tree.c:2625 update_process_times+0x197/0x200 kernel/time/timer.c:1788 tick_sched_handle kernel/time/tick-sched.c:243 [inline] tick_sched_timer+0x377/0x540 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:199 Code: 00 00 00 00 66 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 58 5e 7b 0c 48 89 de 5b e9 a7 f4 4f 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 80 6f 02 00 65 8b 15 04 5a 7c 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc900031aece8 EFLAGS: 00000287 RAX: ffffffff89fc18a0 RBX: ffff88807a7d53e8 RCX: ffffffff81676828 RDX: dffffc0000000000 RSI: ffffffff8a8d0480 RDI: ffffffff8ae88f20 RBP: 000000000000027e R08: dffffc0000000000 R09: fffffbfff1f64418 R10: fffffbfff1f64418 R11: 1ffffffff1f64417 R12: ffff88807902bec8 R13: dffffc0000000000 R14: ffff88807902bed0 R15: ffff88807902bec0 batadv_tt_local_purge+0x2f0/0x350 net/batman-adv/translation-table.c:1351 batadv_tt_local_resize_to_mtu+0x8a/0x130 net/batman-adv/translation-table.c:3957 batadv_update_min_mtu net/batman-adv/hard-interface.c:635 [inline] batadv_hardif_activate_interface+0x1af/0x260 net/batman-adv/hard-interface.c:662 batadv_hardif_enable_interface+0x627/0x890 net/batman-adv/hard-interface.c:745 batadv_softif_slave_add+0x75/0xf0 net/batman-adv/soft-interface.c:839 do_set_master net/core/rtnetlink.c:2534 [inline] __rtnl_newlink net/core/rtnetlink.c:3500 [inline] rtnl_newlink+0x1c32/0x2070 net/core/rtnetlink.c:3531 rtnetlink_rcv_msg+0x92f/0xe80 net/core/rtnetlink.c:5993 netlink_rcv_skb+0x1f0/0x460 net/netlink/af_netlink.c:2502 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x7e7/0x9c0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x9b3/0xcd0 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] ____sys_sendmsg+0x597/0x8e0 net/socket.c:2413 ___sys_sendmsg net/socket.c:2467 [inline] __sys_sendmsg+0x27e/0x370 net/socket.c:2496 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f30a72890e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f30a83a9168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f30a739c030 RCX: 00007f30a72890e9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 00007f30a72e308d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe8428e72f R14: 00007f30a83a9300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 00 add %al,(%rax) 4: 66 90 xchg %ax,%ax 6: 53 push %rbx 7: 48 89 fb mov %rdi,%rbx a: e8 17 00 00 00 callq 0x26 f: 48 8b 3d 58 5e 7b 0c mov 0xc7b5e58(%rip),%rdi # 0xc7b5e6e 16: 48 89 de mov %rbx,%rsi 19: 5b pop %rbx 1a: e9 a7 f4 4f 00 jmpq 0x4ff4c6 1f: cc int3 20: cc int3 21: cc int3 22: cc int3 23: cc int3 24: cc int3 25: cc int3 26: 48 8b 04 24 mov (%rsp),%rax * 2a: 65 48 8b 0c 25 80 6f mov %gs:0x26f80,%rcx <-- trapping instruction 31: 02 00 33: 65 8b 15 04 5a 7c 7e mov %gs:0x7e7c5a04(%rip),%edx # 0x7e7c5a3e 3a: f7 c2 00 01 ff 00 test $0xff0100,%edx