rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=975c/1/0x4000000000000000 softirq=84175/84176 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28189/1:b..l (detected by 1, t=10506 jiffies, g=124113, q=53 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 26027 Comm: kworker/u4:6 Not tainted 6.1.0-rc7-syzkaller-00103-gef4d3ea40565 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: bat_events batadv_nc_worker RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1701 [inline] RIP: 0010:__hrtimer_run_queues+0x55c/0xa60 kernel/time/hrtimer.c:1749 Code: 8b 74 24 38 4c 89 ff e8 12 42 00 00 4c 89 e7 e8 ba 9e 34 09 31 ff 89 de e8 e1 ca 10 00 85 db 0f 84 f9 00 00 00 48 8b 44 24 60 <42> 0f b6 04 28 84 c0 48 8b 54 24 18 0f 85 c2 02 00 00 0f b6 1a 89 RSP: 0018:ffffc90000007d20 EFLAGS: 00000002 RAX: 1ffff1100f77266f RBX: 0000000000000001 RCX: 0000000000010002 RDX: ffff88807d593a80 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90000007e78 R08: ffffffff817bccaf R09: fffff52000000f80 R10: fffff52000000f81 R11: 1ffff92000000f80 R12: ffff8880b982a4c0 R13: dffffc0000000000 R14: ffff8880b982a708 R15: ffff88807bb93340 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000180 CR3: 000000007cf6d000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hrtimer_interrupt+0x3a6/0xfd0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline] __sysvec_apic_timer_interrupt+0xf9/0x280 arch/x86/kernel/apic/apic.c:1113 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:rcu_read_lock_sched_held+0x1c/0x130 kernel/rcu/update.c:120 Code: 26 23 00 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 48 49 be 00 00 00 00 00 fc ff df 48 c7 04 24 b3 8a b5 RSP: 0018:ffffc900059bf9e0 EFLAGS: 00000282 RAX: 420c2063983e9a00 RBX: dffffc0000000000 RCX: ffffffff816c137b RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8fa828 RBP: ffffc900059bfa60 R08: dffffc0000000000 R09: fffffbfff1d1f506 R10: fffffbfff1d1f506 R11: 1ffffffff1d1f505 R12: dffffc0000000000 R13: ffffffff8a780f75 R14: ffff88807af9c050 R15: 1ffff92000b37f60 trace_lock_release+0x95/0x220 include/trace/events/lock.h:69 lock_release+0x81/0x870 kernel/locking/lockdep.c:5679 rcu_read_unlock include/linux/rcupdate.h:771 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x251/0x5b0 net/batman-adv/network-coding.c:719 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.5 state:R running task stack:27032 pid:28189 ppid:26111 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0x8fc/0xda0 kernel/sched/core.c:6521 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6833 irqentry_exit+0x53/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:rcu_preempt_read_exit kernel/rcu/tree_plugin.h:384 [inline] RIP: 0010:__rcu_read_unlock+0x3d/0x100 kernel/rcu/tree_plugin.h:421 Code: df 65 4c 8b 34 25 40 6f 02 00 4d 8d ae 3c 04 00 00 4c 89 eb 48 c1 eb 03 42 8a 04 23 84 c0 75 5e 41 8b 6d 00 ff cd 42 8a 04 23 <84> c0 75 67 41 89 6d 00 85 ed 75 1c 4d 8d be 40 04 00 00 4c 89 f8 RSP: 0018:ffffc9000a42f840 EFLAGS: 00000246 RAX: ffffffff81ec7300 RBX: 1ffff11008d227d7 RCX: ffff888046913a80 RDX: 0000000000000000 RSI: ffffffff8b68fca0 RDI: ffffffff8b68fc60 RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10029b8e09 R10: ffffed10029b8e09 R11: 1ffff110029b8e08 R12: dffffc0000000000 R13: ffff888046913ebc R14: ffff888046913a80 R15: 0000000000000000 rcu_read_unlock include/linux/rcupdate.h:770 [inline] page_ext_put+0x72/0x90 mm/page_ext.c:182 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1459 [inline] free_pcp_prepare+0x80c/0x8f0 mm/page_alloc.c:1509 free_unref_page_prepare mm/page_alloc.c:3387 [inline] free_unref_page_list+0xb4/0x7b0 mm/page_alloc.c:3529 release_pages+0x233a/0x25d0 mm/swap.c:1055 tlb_batch_pages_flush mm/mmu_gather.c:59 [inline] tlb_flush_mmu_free mm/mmu_gather.c:256 [inline] tlb_flush_mmu+0x850/0xa70 mm/mmu_gather.c:263 tlb_finish_mmu+0xcb/0x200 mm/mmu_gather.c:363 exit_mmap+0x2b1/0x670 mm/mmap.c:3105 __mmput+0x114/0x3b0 kernel/fork.c:1185 exit_mm+0x217/0x2f0 kernel/exit.c:516 do_exit+0x5e7/0x2070 kernel/exit.c:807 do_group_exit+0x1fd/0x2b0 kernel/exit.c:950 __do_sys_exit_group kernel/exit.c:961 [inline] __se_sys_exit_group kernel/exit.c:959 [inline] __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:959 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1c3a48c0d9 RSP: 002b:00007ffee7637648 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f1c3a48c0d9 RDX: 00007f1c3a43df8b RSI: ffffffffffffffb8 RDI: 0000000000000000 RBP: 0000000000000001 R08: 00007f1c3a000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffee7637730 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g124113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=77057 rcu: rcu_preempt kthread starved for 10506 jiffies! g124113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26552 pid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5209 [inline] __schedule+0x8fc/0xda0 kernel/sched/core.c:6521 schedule+0xcb/0x190 kernel/sched/core.c:6597 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x309/0x1070 kernel/rcu/tree.c:1660 rcu_gp_kthread+0xa5/0x390 kernel/rcu/tree.c:1859 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 PID: 3726 Comm: kworker/1:6 Not tainted 6.1.0-rc7-syzkaller-00103-gef4d3ea40565 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: events drain_vmap_area_work RIP: 0010:csd_lock_wait kernel/smp.c:413 [inline] RIP: 0010:smp_call_function_many_cond+0xe92/0x1420 kernel/smp.c:987 Code: 84 c0 75 74 45 8b 26 44 89 e6 83 e6 01 31 ff e8 e4 3d 0b 00 41 83 e4 01 75 0e e8 b9 39 0b 00 eb 4c 0f 1f 80 00 00 00 00 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 10 41 f7 06 01 RSP: 0018:ffffc90004c378e0 EFLAGS: 00000293 RAX: ffffffff818159e2 RBX: 1ffff11017308421 RCX: ffff88801ff80000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90004c37a70 R08: ffffffff818159ac R09: fffffbfff20e4c29 R10: fffffbfff20e4c29 R11: 1ffffffff20e4c28 R12: 0000000000000001 R13: 0000000000000000 R14: ffff8880b9842108 R15: ffff8880b993ae80 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f68f69abf84 CR3: 0000000077bda000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x3b/0x80 kernel/smp.c:1155 on_each_cpu include/linux/smp.h:71 [inline] flush_tlb_kernel_range+0x192/0x220 arch/x86/mm/tlb.c:1058 __purge_vmap_area_lazy+0xcfa/0x18a0 mm/vmalloc.c:1770 drain_vmap_area_work+0x3c/0xd0 mm/vmalloc.c:1799 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 vkms_vblank_simulate: vblank timer overrun