rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11022/1:b..l rcu: (detected by 1, t=10506 jiffies, g=64049, q=505 ncpus=2) task:syz.3.1470 state:R running task stack:24672 pid:11022 tgid:11022 ppid:8910 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6748 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7070 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:rol32 include/linux/bitops.h:122 [inline] RIP: 0010:jhash2 include/linux/jhash.h:129 [inline] RIP: 0010:hash_stack lib/stackdepot.c:514 [inline] RIP: 0010:stack_depot_save_flags+0xb3/0x830 lib/stackdepot.c:614 Code: 31 dd 44 01 f7 89 e9 c1 c1 08 41 29 ee 44 31 f1 01 fd 29 cf 89 c8 c1 c0 10 31 f8 01 e9 89 c3 c1 c3 13 29 c5 31 eb 01 c8 29 d9 <41> 89 de 41 c1 c6 04 41 31 ce 01 c3 83 c6 fd 48 83 c2 0c 83 fe 03 RSP: 0018:ffffc90004dff340 EFLAGS: 00000206 RAX: 000000000b984492 RBX: 0000000020ddb3b4 RCX: 0000000043b5b041 RDX: ffffc90004dff3e0 RSI: 000000000000001c RDI: 0000000050c179c0 RBP: 0000000024308b93 R08: ffffc90004dff3e0 R09: 000000000000000e R10: dffffc0000000000 R11: fffffbfff1f5b57e R12: dffffc0000000000 R13: 1ffff920009bfe78 R14: 000000008ca75c24 R15: 1ffff1100ec56470 save_stack+0x109/0x1f0 mm/page_owner.c:157 __reset_page_owner+0x75/0x3f0 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1093 [inline] free_unref_folios+0xf23/0x19e0 mm/page_alloc.c:2637 folios_put_refs+0x93a/0xa60 mm/swap.c:1024 free_pages_and_swap_cache+0x2ea/0x690 mm/swap_state.c:329 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:366 [inline] tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373 tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465 exit_mmap+0x44f/0xc80 mm/mmap.c:3354 __mmput+0x115/0x390 kernel/fork.c:1340 exit_mm+0x220/0x310 kernel/exit.c:567 do_exit+0x9aa/0x27e0 kernel/exit.c:863 do_group_exit+0x207/0x2c0 kernel/exit.c:1025 __do_sys_exit_group kernel/exit.c:1036 [inline] __se_sys_exit_group kernel/exit.c:1034 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1034 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8cf0575a19 RSP: 002b:00007ffc3aeddd68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8cf0575a19 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 000000063aedde8f R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffc3aedde50 R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3aedde50 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g64049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=38685 rcu: rcu_preempt kthread starved for 10506 jiffies! g64049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5407 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6748 __schedule_loop kernel/sched/core.c:6825 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6840 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 11027 Comm: syz.1.1472 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:32 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:67 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:103 [inline] RIP: 0010:lock_is_held_type+0x6a/0x190 kernel/locking/lockdep.c:5821 Code: 00 65 4c 8b 2c 25 c0 d4 03 00 41 83 bd dc 0a 00 00 00 0f 85 da 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 24 24 fa 48 c7 c7 a0 c8 ca 8b e8 55 1b 00 00 65 ff 05 fe 5d RSP: 0018:ffffc90000007d18 EFLAGS: 00000046 RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888021101e00 RDX: ffff888021101e00 RSI: 00000000ffffffff RDI: ffff8880b942c898 RBP: ffffc90000007ea8 R08: ffffffff8183a54e R09: ffff888066e09340 R10: dffffc0000000000 R11: ffffed100cdc126b R12: 1ffff1101728593b R13: ffff888021101e00 R14: 00000000ffffffff R15: ffff8880b942c898 FS: 00007f9db06d36c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000007c07c000 CR4: 0000000000350ef0 Call Trace: lock_is_held include/linux/lockdep.h:231 [inline] __run_hrtimer kernel/time/hrtimer.c:1655 [inline] __hrtimer_run_queues+0x2d9/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 8a 93 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000b297040 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92001652e14 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8bcacd40 RDI: ffffffff8c2028a0 RBP: ffffc9000b297188 R08: ffffffff92fb362f R09: 1ffffffff25f66c5 R10: dffffc0000000000 R11: fffffbfff25f66c6 R12: 1ffff92001652e10 R13: dffffc0000000000 R14: ffffc9000b2970a0 R15: 0000000000000246 down_write+0x3a/0x50 kernel/locking/rwsem.c:1579 inode_lock include/linux/fs.h:799 [inline] simple_recursive_removal+0x9a/0x8f0 fs/libfs.c:606 debugfs_remove+0x49/0x70 fs/debugfs/inode.c:815 ieee80211_sta_debugfs_remove+0x40/0x60 net/mac80211/debugfs_sta.c:1287 __sta_info_destroy_part2+0x35e/0x450 net/mac80211/sta_info.c:1476 __sta_info_flush+0x5d0/0x700 net/mac80211/sta_info.c:1605 sta_info_flush net/mac80211/sta_info.h:913 [inline] ieee80211_del_station+0x82/0xb0 net/mac80211/cfg.c:2137 rdev_del_station net/wireless/rdev-ops.h:212 [inline] nl80211_del_station+0x5fd/0x900 net/wireless/nl80211.c:7699 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb16/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e5/0x430 net/netlink/af_netlink.c:2564 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x7ec/0x980 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x8db/0xcb0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x223/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9daf975a19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9db06d3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f9dafb03f60 RCX: 00007f9daf975a19 RDX: 0000000000000000 RSI: 0000000020002240 RDI: 0000000000000005 RBP: 00007f9daf9e4e49 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f9dafb03f60 R15: 00007ffc953a4fc8