rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 ticks this GP) idle=2e6c/1/0x4000000000000000 softirq=21005/21005 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5824/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=12581, q=1266 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:kasan_check_range+0x14f/0x1a0 mm/kasan/generic.c:190
Code: 83 c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 89 c2 48 85 c0 75 93 48 89 da 4c 89 d8 4c 29 da e9 2c ff ff ff <5b> b8 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 01 00 00 00 c3 cc cc
RSP: 0018:ffffc90000a08d00 EFLAGS: 00000046
RAX: ffffed10063ef411 RBX: ffffed10063ef411 RCX: ffffffff8980fa10
RDX: ffffed10063ef411 RSI: 0000000000000004 RDI: ffff888031f7a080
RBP: ffffed10063ef410 R08: 0000000000000001 R09: ffffed10063ef410
R10: ffff888031f7a083 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888031f7a000 R14: 0000000000000000 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2fa00ff8 CR3: 00000000330fa000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_write include/linux/instrumented.h:82 [inline]
atomic_set include/linux/atomic/atomic-instrumented.h:67 [inline]
taprio_set_budgets+0x1a0/0x310 net/sched/sch_taprio.c:672
advance_sched+0x5f6/0xc80 net/sched/sch_taprio.c:977
__run_hrtimer kernel/time/hrtimer.c:1791 [inline]
__hrtimer_run_queues+0x1ff/0xad0 kernel/time/hrtimer.c:1855
hrtimer_interrupt+0x397/0x8e0 kernel/time/hrtimer.c:1917
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x108/0x3f0 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 0c 24 f6 48 89 df e8 fe 5f 24 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 cd 14 f6 65 8b 05 4e 44 32 08 85 c0 74 16 5b
RSP: 0018:ffffc90000ad7ae8 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff8e3ccbc0 RCX: 0000000000000006
RDX: 0000000000000000 RSI: ffffffff8dbeb34f RDI: ffffffff8bf45860
RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff90862617 R11: 0000000000000000 R12: 0000000000000246
R13: 0000000000000200 R14: 0000000000000000 R15: dffffc0000000000
rcu_read_unlock_special kernel/rcu/tree_plugin.h:693 [inline]
__rcu_read_unlock+0x2b4/0x580 kernel/rcu/tree_plugin.h:438
rcu_read_unlock include/linux/rcupdate.h:873 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
batadv_nc_worker+0x89f/0x1030 net/batman-adv/network-coding.c:719
process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
process_scheduled_works kernel/workqueue.c:3319 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
kthread+0x3c2/0x780 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz-executor state:R running task stack:23752 pid:5824 tgid:5824 ppid:5815 task_flags:0x400140 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x116f/0x5de0 kernel/sched/core.c:6767
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6947
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
copy_pte_range mm/memory.c:1194 [inline]
copy_pmd_range mm/memory.c:1255 [inline]
copy_pud_range mm/memory.c:1292 [inline]
copy_p4d_range mm/memory.c:1316 [inline]
copy_page_range+0x1918/0x5ec0 mm/memory.c:1410
dup_mmap kernel/fork.c:726 [inline]
dup_mm kernel/fork.c:1734 [inline]
copy_mm kernel/fork.c:1786 [inline]
copy_process+0x862b/0x91a0 kernel/fork.c:2429
kernel_clone+0xfc/0x960 kernel/fork.c:2844
__do_sys_clone+0xce/0x120 kernel/fork.c:2987
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f41647839d3
RSP: 002b:00007ffc00b26d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41647839d3
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
R10: 000055557ba3a7d0 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000000927c0 R14: 000000000001fc84 R15: 00007ffc00b26ed0
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g12581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=7463
rcu: rcu_preempt kthread starved for 10502 jiffies! g12581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x116f/0x5de0 kernel/sched/core.c:6767
__schedule_loop kernel/sched/core.c:6845 [inline]
schedule+0xe7/0x3a0 kernel/sched/core.c:6860
schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2046
rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2248
kthread+0x3c2/0x780 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245