rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P149/1:b..l (detected by 1, t=11009 jiffies, g=10705, q=927) task:kworker/u4:2 state:R running task stack:24736 pid: 149 ppid: 2 flags:0x00004000 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6287 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6687 irqentry_exit+0x31/0x80 kernel/entry/common.c:427 asm_sysvec_reschedule_ipi+0x12/0x20 arch/x86/include/asm/idtentry.h:643 RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5593 Code: a3 af 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90001737ac0 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff920002e6f5a RCX: d3e969228d6e987c RDX: 1ffff11002a3fd3e RSI: ffffffff88cb39e0 RDI: ffffffff891feae0 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ee03927 R10: fffffbfff1dc0724 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8ab74080 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:267 [inline] rcu_read_lock include/linux/rcupdate.h:687 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:755 [inline] batadv_iv_ogm_schedule_buff+0x4d0/0x1030 net/batman-adv/bat_iv_ogm.c:826 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:869 [inline] batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:862 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0x59f/0x8f0 net/batman-adv/bat_iv_ogm.c:1713 process_one_work+0x87f/0x1450 kernel/workqueue.c:2297 worker_thread+0x598/0x1040 kernel/workqueue.c:2444 kthread+0x38b/0x460 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 rcu: rcu_preempt kthread starved for 5573 jiffies! g10705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28960 pid: 14 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6287 schedule+0xd3/0x270 kernel/sched/core.c:6366 schedule_timeout+0x11d/0x250 kernel/time/timer.c:1881 rcu_gp_fqs_loop+0x186/0x800 kernel/rcu/tree.c:1957 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2130 kthread+0x38b/0x460 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 rcu: Stack dump where RCU GP kthread last ran: NMI backtrace for cpu 1 CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x30/0xc0 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x11a/0x160 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 kernel/rcu/tree_stall.h:481 print_other_cpu_stall kernel/rcu/tree_stall.h:586 [inline] check_cpu_stall kernel/rcu/tree_stall.h:729 [inline] rcu_pending kernel/rcu/tree.c:3880 [inline] rcu_sched_clock_irq+0x2125/0x2200 kernel/rcu/tree.c:2599 update_process_times+0x13b/0x1c0 kernel/time/timer.c:1785 tick_sched_handle+0x6f/0x130 kernel/time/tick-sched.c:226 tick_sched_timer+0x132/0x210 kernel/time/tick-sched.c:1421 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x18a/0xb00 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x2f5/0x780 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:unwind_next_frame+0x4c/0x1ce0 arch/x86/kernel/unwind_orc.c:418 Code: 40 b3 8a b5 41 48 8d 5c 24 40 48 c7 44 24 48 01 97 41 8a 48 c1 eb 03 48 c7 44 24 50 60 89 2d 81 48 8d 14 03 c7 02 f1 f1 f1 f1 42 04 00 f3 f3 f3 48 89 fa 65 48 8b 34 25 28 00 00 00 48 89 b4 RSP: 0018:ffffc90000faf558 EFLAGS: 00000a02 RAX: dffffc0000000000 RBX: 1ffff920001f5eb3 RCX: 0000000000000000 RDX: fffff520001f5eb3 RSI: ffffffff867eca4c RDI: ffffc90000faf630 RBP: ffffc90000faf6b8 R08: ffffffff8d72e994 R09: 0000000000000001 R10: fffff520001f5ed1 R11: 000000000007a089 R12: ffffc90000faf6e8 R13: 0000000000000000 R14: ffffc90000faf630 R15: 0000000000000200 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38 kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc mm/kasan/common.c:513 [inline] ____kasan_kmalloc mm/kasan/common.c:472 [inline] __kasan_kmalloc+0xa1/0xd0 mm/kasan/common.c:522 kasan_kmalloc include/linux/kasan.h:264 [inline] kmem_cache_alloc_node_trace+0x20b/0x5c0 mm/slab.c:3619 __do_kmalloc_node mm/slab.c:3639 [inline] __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3654 kmalloc_reserve net/core/skbuff.c:355 [inline] __alloc_skb+0x8b/0x280 net/core/skbuff.c:426 skb_copy+0x10c/0x2c0 net/core/skbuff.c:1585 mac80211_hwsim_tx_frame_no_nl.isra.0+0x916/0x1020 drivers/net/wireless/mac80211_hwsim.c:1565 mac80211_hwsim_tx_frame+0x1a0/0x250 drivers/net/wireless/mac80211_hwsim.c:1784 mac80211_hwsim_beacon_tx+0x3eb/0x7b0 drivers/net/wireless/mac80211_hwsim.c:1838 __iterate_interfaces+0x103/0x360 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0x53/0xf0 net/mac80211/util.c:829 mac80211_hwsim_beacon+0xb7/0x160 drivers/net/wireless/mac80211_hwsim.c:1861 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x4d7/0xb00 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x176/0x340 kernel/time/hrtimer.c:1766 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 run_ksoftirqd kernel/softirq.c:920 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:912 smpboot_thread_fn+0x548/0x8c0 kernel/smpboot.c:164 kthread+0x38b/0x460 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ---------------- Code disassembly (best guess): 0: a3 af 7e 83 f8 01 0f movabs %eax,0xb4850f01f8837eaf 7: 85 b4 9: 02 00 add (%rax),%al b: 00 9c 58 f6 c4 02 0f add %bl,0xf02c4f6(%rax,%rbx,2) 12: 85 9f 02 00 00 48 test %ebx,0x48000002(%rdi) 18: 83 7c 24 08 00 cmpl $0x0,0x8(%rsp) 1d: 74 01 je 0x20 1f: fb sti 20: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 27: fc ff df * 2a: 48 01 c3 add %rax,%rbx <-- trapping instruction 2d: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 34: 48 c7 43 08 00 00 00 movq $0x0,0x8(%rbx) 3b: 00 3c: 48 rex.W 3d: 8b .byte 0x8b 3e: 84 .byte 0x84 3f: 24 .byte 0x24