rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2653 jiffies s: 9613 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4501 Comm: syz.4.144 Not tainted 6.1.106-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:106 [inline] RIP: 0010:seqcount_lockdep_reader_access+0x83/0x220 include/linux/seqlock.h:101 Code: f1 f1 f1 00 f2 f2 f2 4b 89 04 27 66 43 c7 44 27 09 f3 f3 43 c6 44 27 0b f3 e8 c9 8c 10 00 4c 89 f3 48 c1 eb 03 42 80 3c 23 00 <74> 08 4c 89 f7 e8 43 08 68 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 RSP: 0018:ffffc900000075c0 EFLAGS: 00000046 RAX: ffffffff817a16f7 RBX: 1ffff92000000ec0 RCX: ffff88807dc61dc0 RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000007670 R08: ffffffff817a18bf R09: ffffffff817ce6ec R10: 0000000000000002 R11: ffff88807dc61dc0 R12: dffffc0000000000 R13: dffffc0000000000 R14: ffffc90000007600 R15: 1ffff92000000eb8 FS: 00007f20b51586c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555571137d0 CR3: 0000000055769000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ktime_get+0x31/0x270 kernel/time/timekeeping.c:846 clockevents_program_event+0xe1/0x310 kernel/time/clockevents.c:326 hrtimer_interrupt+0x546/0x980 kernel/time/hrtimer.c:1825 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:__sanitizer_cov_trace_switch+0x3f/0xe0 Code: f8 07 0f 87 ac 00 00 00 b9 8b 00 00 00 0f a3 c1 0f 83 9e 00 00 00 4c 8b 16 4d 85 d2 0f 84 92 00 00 00 4c 8b 04 c5 58 0a 10 8b <4c> 8b 4c 24 20 65 4c 8b 1d d4 c6 77 7e 31 d2 eb 08 48 ff c2 49 39 RSP: 0018:ffffc900000078f8 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 0000000000000080 RCX: 000000000000008b RDX: 0000000000000100 RSI: ffffffff8e74b640 RDI: 0000000000000080 RBP: 0000000000000080 R08: 0000000000000001 R09: ffffffff8a292b82 R10: 0000000000000003 R11: ffff88807dc61dc0 R12: ffff888060c17bcc R13: 1ffff1100b15370a R14: ffff888058a9b850 R15: ffff888060c17b40 ieee80211_scan_rx+0x7f/0x880 net/mac80211/scan.c:265 __ieee80211_rx_handle_packet net/mac80211/rx.c:5030 [inline] ieee80211_rx_list+0x27f0/0x3380 net/mac80211/rx.c:5259 ieee80211_rx_napi+0x186/0x3b0 net/mac80211/rx.c:5282 ieee80211_rx include/net/mac80211.h:4830 [inline] ieee80211_handle_queued_frames+0x103/0x1b0 net/mac80211/main.c:315 tasklet_action_common+0x3cb/0x4a0 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571 __do_softirq kernel/softirq.c:605 [inline] invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:zap_pte_range mm/memory.c:1507 [inline] RIP: 0010:zap_pmd_range mm/memory.c:1574 [inline] RIP: 0010:zap_pud_range mm/memory.c:1603 [inline] RIP: 0010:zap_p4d_range mm/memory.c:1624 [inline] RIP: 0010:unmap_page_range+0x1811/0x2740 mm/memory.c:1645 Code: 24 40 01 00 00 e8 2f c9 15 00 48 8b 9c 24 40 01 00 00 48 8b 44 24 70 42 80 3c 38 00 74 08 4c 89 e7 e8 93 c9 15 00 49 89 5d 00 <4c> 39 b4 24 18 01 00 00 0f 84 ff 08 00 00 49 83 c5 08 e8 e8 4d be RSP: 0018:ffffc900030ef300 EFLAGS: 00000287 RAX: ffffffff81cc50d3 RBX: 0000000000000003 RCX: 0000000000040000 RDX: ffffc9001834a000 RSI: 000000000001c4ea RDI: 000000000001c4eb RBP: ffffc900030ef4f0 R08: ffffffff81d15232 R09: fffff94000304647 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880707ed188 R13: ffff8880707ed188 R14: 00007f20b2e31000 R15: dffffc0000000000 unmap_vmas+0x48b/0x640 mm/memory.c:1730 exit_mmap+0x252/0x9f0 mm/mmap.c:3227 __mmput+0x115/0x3c0 kernel/fork.c:1199 mmput kernel/fork.c:1221 [inline] dup_mm kernel/fork.c:1556 [inline] copy_mm+0x1444/0x1990 kernel/fork.c:1589 copy_process+0x19d5/0x4060 kernel/fork.c:2267 kernel_clone+0x222/0x920 kernel/fork.c:2682 __do_sys_clone kernel/fork.c:2823 [inline] __se_sys_clone kernel/fork.c:2807 [inline] __x64_sys_clone+0x231/0x280 kernel/fork.c:2807 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f20b4379e79 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f20b5157fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f20b4515f80 RCX: 00007f20b4379e79 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f20b43e793e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f20b4515f80 R15: 00007ffd7efe55b8