rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6687/1:b..l P3431/1:b..l P6694/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=27357, q=567 ncpus=2)
task:syz-executor.3 state:R running task stack:27088 pid:6694 tgid:6692 ppid:5110 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xf15/0x5d00 kernel/sched/core.c:6745
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6924
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
unwind_next_frame+0x1c90/0x23a0 arch/x86/kernel/unwind_orc.c:672
arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
save_stack+0x162/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x8d/0x400 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1088 [inline]
free_unref_folios+0x991/0x1310 mm/page_alloc.c:2632
folios_put_refs+0x487/0x6d0 mm/swap.c:1024
free_pages_and_swap_cache+0x45f/0x510 mm/swap_state.c:332
__tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136
tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]
tlb_flush_mmu mm/mmu_gather.c:373 [inline]
tlb_finish_mmu+0x168/0x7b0 mm/mmu_gather.c:465
exit_mmap+0x3d1/0xb20 mm/mmap.c:3354
__mmput+0x12a/0x4d0 kernel/fork.c:1346
mmput+0x62/0x70 kernel/fork.c:1368
exit_mm kernel/exit.c:565 [inline]
do_exit+0x9b7/0x2ba0 kernel/exit.c:861
do_group_exit+0xd3/0x2a0 kernel/exit.c:1023
get_signal+0x2616/0x2710 kernel/signal.c:2909
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x14a/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff71627cf29
RSP: 002b:00007ff716fe80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: 0000000020000000 RBX: 00007ff7163b3f80 RCX: 00007ff71627cf29
RDX: 000000000000000b RSI: 0000000000fbe000 RDI: 0000000020000000
RBP: 00007ff7162ec074 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007ff7163b3f80 R15: 00007ffccb49f338
task:kworker/u8:9 state:R running task stack:23936 pid:3431 tgid:3431 ppid:2 flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xf15/0x5d00 kernel/sched/core.c:6745
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7067
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:kasan_check_range+0x12/0x1a0 mm/kasan/generic.c:188
Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 <44> 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff
RSP: 0018:ffffc9000ad77ab8 EFLAGS: 00000202
RAX: ffffffff8fe46f90 RBX: 0000000000000001 RCX: ffffffff816bcb99
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fe46f90
RBP: 1ffff920015aef5b R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff8dbb1920
R13: 0000000000000000 R14: 000000000003d94c R15: 0000000000000001
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
cpumask_test_cpu include/linux/cpumask.h:571 [inline]
cpu_online include/linux/cpumask.h:1181 [inline]
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0xa9/0x6c0 kernel/locking/lockdep.c:5765
rcu_lock_release include/linux/rcupdate.h:339 [inline]
rcu_read_unlock include/linux/rcupdate.h:812 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
batadv_nc_worker+0x8ee/0x10f0 net/batman-adv/network-coding.c:719
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
task:syz-executor.1 state:R running task stack:25920 pid:6687 tgid:6684 ppid:5117 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xf15/0x5d00 kernel/sched/core.c:6745
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7067
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:810 [inline]
RIP: 0010:count_memcg_event_mm.part.0+0xfc/0x340 include/linux/memcontrol.h:1078
Code: 01 00 00 00 44 89 e6 48 89 df e8 af 38 1f 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 bd ed bb ff 48 85 db 0f 85 21 02 00 00 7f f2 bb ff e8 4a 08 16 09 31 ff 89 c3 89 c6 e8 6f ed bb ff 85
RSP: 0018:ffffc9000339f6f8 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90009e7c000
RDX: 0000000000040000 RSI: ffffffff81d1f4c7 RDI: 0000000000000007
RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000017
R13: 0000000000000000 R14: ffff8880229982f8 R15: 0000000000000000
count_memcg_event_mm include/linux/memcontrol.h:580 [inline]
mm_account_fault mm/memory.c:5557 [inline]
handle_mm_fault+0x1b8/0xa00 mm/memory.c:5704
faultin_page mm/gup.c:1290 [inline]
__get_user_pages+0x473/0x1490 mm/gup.c:1589
__get_user_pages_locked mm/gup.c:1857 [inline]
__gup_longterm_locked+0x243/0x2790 mm/gup.c:2556
pin_user_pages_remote+0xee/0x150 mm/gup.c:3616
process_vm_rw_single_vec mm/process_vm_access.c:106 [inline]
process_vm_rw_core.constprop.0+0x439/0xa10 mm/process_vm_access.c:216
process_vm_rw+0x301/0x360 mm/process_vm_access.c:284
__do_sys_process_vm_readv mm/process_vm_access.c:296 [inline]
__se_sys_process_vm_readv mm/process_vm_access.c:292 [inline]
__x64_sys_process_vm_readv+0xe2/0x1c0 mm/process_vm_access.c:292
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4eb187cf29
RSP: 002b:00007f4eb26900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
RAX: ffffffffffffffda RBX: 00007f4eb19b4050 RCX: 00007f4eb187cf29
RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000117
RBP: 00007f4eb18ec074 R08: 0000000000000286 R09: 0000000000000000
R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f4eb19b4050 R15: 00007ffeb3a30e08
rcu: rcu_preempt kthread starved for 10596 jiffies! g27357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26848 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5408 [inline]
__schedule+0xf15/0x5d00 kernel/sched/core.c:6745
__schedule_loop kernel/sched/core.c:6822 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6837
schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2000
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2202
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:unwind_next_frame+0xbb/0x23a0 arch/x86/kernel/unwind_orc.c:470
Code: 48 48 89 44 24 20 48 8d 43 38 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 21 1d 00 00 <48> 8b 43 38 bf 01 00 00 00 48 89 44 24 18 e8 e2 04 21 00 48 8d 43
RSP: 0018:ffffc90000a18568 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: ffffc90000a185e8 RCX: ffffffff813cd746
RDX: 1ffff920001430c4 RSI: ffffffff813cd76b RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000006 R12: ffffc90000a185e8
R13: ffffffff817984e0 R14: ffffc90000a186a8 R15: ffff88801828bc00
FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4451756d58 CR3: 000000000d97a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_save_track+0x14/0x30 mm/kasan/common.c:68
unpoison_slab_object mm/kasan/common.c:312 [inline]
__kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:338
kasan_slab_alloc include/linux/kasan.h:201 [inline]
slab_post_alloc_hook mm/slub.c:3941 [inline]
slab_alloc_node mm/slub.c:4001 [inline]
kmem_cache_alloc_node_noprof+0x153/0x310 mm/slub.c:4044
kmalloc_reserve+0x18b/0x2c0 net/core/skbuff.c:575
__alloc_skb+0x164/0x380 net/core/skbuff.c:666
skb_copy+0x17a/0x340 net/core/skbuff.c:2124
mac80211_hwsim_tx_frame_no_nl.isra.0+0xb97/0x1310 drivers/net/wireless/virtual/mac80211_hwsim.c:1857
mac80211_hwsim_tx_frame+0x1eb/0x2a0 drivers/net/wireless/virtual/mac80211_hwsim.c:2206
__mac80211_hwsim_beacon_tx drivers/net/wireless/virtual/mac80211_hwsim.c:2223 [inline]
mac80211_hwsim_beacon_tx+0x592/0xa00 drivers/net/wireless/virtual/mac80211_hwsim.c:2306
__iterate_interfaces+0x2d2/0x580 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:808
mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2336
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1768
handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:637 [inline]
irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline]
RIP: 0010:smp_call_function_many_cond+0x4ec/0x1420 kernel/smp.c:855
Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 bb 37 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 ff 83 e0 01 41
RSP: 0018:ffffc90000ab7908 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880b9246740 RCX: ffffffff8181adbb
RDX: ffff88801828bc00 RSI: ffffffff8181ad95 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017248ce9
R13: 0000000000000001 R14: ffff8880b9246748 R15: ffff8880b933fdc0
on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:2069 [inline]
text_poke_bp_batch+0x22b/0x760 arch/x86/kernel/alternative.c:2279
text_poke_flush arch/x86/kernel/alternative.c:2470 [inline]
text_poke_flush arch/x86/kernel/alternative.c:2467 [inline]
text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2477
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
jump_label_update+0x1d7/0x400 kernel/jump_label.c:882
static_key_disable_cpuslocked+0x154/0x1c0 kernel/jump_label.c:235
static_key_disable+0x1a/0x20 kernel/jump_label.c:243
toggle_allocation_gate mm/kfence/core.c:831 [inline]
toggle_allocation_gate+0x143/0x250 mm/kfence/core.c:818
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
process_scheduled_works kernel/workqueue.c:3312 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244