rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (0 ticks this GP) idle=7d7/1/0x4000000000000002 softirq=230854/230854 fqs=0 (detected by 1, t=10502 jiffies, g=454937, q=1448) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 9590 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:194 [inline] RIP: 0010:__lock_acquire+0x1036/0x2b00 kernel/locking/lockdep.c:5026 Code: 97 0c 00 4c 8b 64 24 18 0f 85 56 03 00 00 83 bc 24 88 00 00 00 00 0f 84 9a 02 00 00 4d 8d 75 f8 4c 89 f0 48 c1 e8 03 8a 04 38 <84> c0 0f 85 32 15 00 00 41 8b 1e 81 e3 ff 1f 00 00 48 89 d8 48 c1 RSP: 0018:ffffc900000071c0 EFLAGS: 00000806 RAX: 1ffff11005d0bc00 RBX: 00000000b9802d42 RCX: 000000004dae23cf RDX: 00000000466b2444 RSI: 0000000086ba61b0 RDI: dffffc0000000000 RBP: ffffc90000007310 R08: dffffc0000000000 R09: fffffbfff1feebdd R10: fffffbfff1feebdd R11: 0000000000000000 R12: ffff88802e85d700 R13: ffff88802e85e188 R14: ffff88802e85e180 R15: 255701fbb9802d42 FS: 00007f381e01a700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556ee0708 CR3: 00000000196c8000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5640 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:268 rcu_read_lock include/linux/rcupdate.h:688 [inline] __perf_event_output kernel/events/core.c:7485 [inline] perf_event_output_forward+0xd9/0x2c0 kernel/events/core.c:7507 __perf_event_overflow+0x1f8/0x380 kernel/events/core.c:9207 perf_tp_event+0x34f/0xbc0 kernel/events/core.c:9739 perf_trace_run_bpf_submit+0xf6/0x1d0 kernel/events/core.c:9713 perf_trace_preemptirq_template+0x319/0x430 include/trace/events/preemptirq.h:14 trace_irq_enable_rcuidle+0x101/0x170 include/trace/events/preemptirq.h:40 trace_hardirqs_on+0x57/0x80 kernel/trace/trace_preemptirq.c:44 asm_sysvec_irq_work+0x12/0x20 RIP: 0010:__rcu_read_unlock+0xce/0x650 kernel/rcu/tree_plugin.h:425 Code: 72 04 00 00 41 89 1f 85 db 75 1f 48 8d 9a 40 04 00 00 48 89 d8 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 97 04 00 00 83 3b 00 75 5f <43> 8a 04 34 84 c0 0f 85 68 04 00 00 41 8b 07 3d 00 00 00 40 73 45 RSP: 0018:ffffc90000007b00 EFLAGS: 00000206 RAX: a2c80313f44cea00 RBX: 1ffff92000000f6c RCX: ffffffff90b8d903 RDX: dffffc0000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffffc90000007be8 R08: ffffffff818ae653 R09: ffffed10173474ab R10: ffffed10173474ab R11: 0000000000000000 R12: 1ffff11005d0bb67 R13: 1ffff92000000f68 R14: dffffc0000000000 R15: ffff88802e85db3c rcu_read_unlock include/linux/rcupdate.h:720 [inline] ieee80211_iterate_active_interfaces_atomic+0xff/0x120 net/mac80211/util.c:831 mac80211_hwsim_beacon+0x9f/0x180 drivers/net/wireless/mac80211_hwsim.c:1861 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x1b7/0x5d0 kernel/time/hrtimer.c:1766 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:636 irq_exit_rcu+0x5/0x20 kernel/softirq.c:648 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:finish_lock_switch+0x1c5/0x350 kernel/sched/core.c:4730 Code: be ff ff ff ff e8 cb f5 a4 08 85 c0 74 37 4d 85 e4 75 58 0f 1f 44 00 00 4c 89 ff e8 45 9d a7 08 e8 20 bf 2e 00 fb 48 83 c4 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 4d 85 e4 0f 85 4a ff ff ff RSP: 0018:ffffc9000f297ce8 EFLAGS: 00000286 RAX: a2c80313f44cea00 RBX: 1ffff11017347408 RCX: ffffffff90b8d903 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8880b9a3a040 R08: ffffffff818ae653 R09: ffffed10173474ab R10: ffffed10173474ab R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880b9a3a2d8 R14: dffffc0000000000 R15: ffff8880b9a39580 finish_task_switch+0x140/0x630 kernel/sched/core.c:4847 context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb7a/0x1460 kernel/sched/core.c:6250 schedule+0x12b/0x1f0 kernel/sched/core.c:6323 exit_to_user_mode_loop kernel/entry/common.c:163 [inline] exit_to_user_mode_prepare+0x14b/0x220 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3820a57a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f381e019cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: fffffffffffffffe RBX: 6666666666666667 RCX: 00007f3820a57a04 RDX: 0000000000000000 RSI: 00007f381e019d60 RDI: 00000000ffffff9c RBP: 00007f381e019d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fff9be94e7f R14: 00007f381e01a300 R15: 0000000000022000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g454937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=174314 rcu: rcu_preempt kthread starved for 10502 jiffies! g454937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26576 pid: 14 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4969 [inline] __schedule+0xb72/0x1460 kernel/sched/core.c:6250 schedule+0x12b/0x1f0 kernel/sched/core.c:6323 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881 rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1955 rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2128 kthread+0x468/0x490 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 9590 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:196 Code: 00 00 0f 1f 40 00 be 0d 00 00 00 48 c7 c7 20 ab b5 8c e8 8f b9 4b 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 c0 6f 02 00 65 8b 15 54 23 7e 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc90000007350 EFLAGS: 00000046 RAX: ffffffff81ab26e5 RBX: 0000000000000001 RCX: ffff88802e85d700 RDX: ffff88802e85d700 RSI: 0000000000000103 RDI: ffffffff8cb1d900 RBP: ffffc900000074b0 R08: ffffffff81aac5a9 R09: fffffbfff1feebdd R10: fffffbfff1feebdd R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000038 R14: 0000000000000000 R15: ffffc90000007500 FS: 00007f381e01a700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556ee0708 CR3: 00000000196c8000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_lock_release+0x5/0x20 include/linux/rcupdate.h:272 rcu_read_unlock include/linux/rcupdate.h:721 [inline] __perf_output_begin kernel/events/ring_buffer.c:259 [inline] perf_output_begin_forward+0xabc/0xcf0 kernel/events/ring_buffer.c:268 __perf_event_output kernel/events/core.c:7489 [inline] perf_event_output_forward+0x1a8/0x2c0 kernel/events/core.c:7507 __perf_event_overflow+0x1f8/0x380 kernel/events/core.c:9207 perf_tp_event+0x34f/0xbc0 kernel/events/core.c:9739 perf_trace_run_bpf_submit+0xf6/0x1d0 kernel/events/core.c:9713 perf_trace_preemptirq_template+0x319/0x430 include/trace/events/preemptirq.h:14 trace_irq_enable_rcuidle+0x101/0x170 include/trace/events/preemptirq.h:40 trace_hardirqs_on+0x57/0x80 kernel/trace/trace_preemptirq.c:44 asm_sysvec_irq_work+0x12/0x20 RIP: 0010:__rcu_read_unlock+0xce/0x650 kernel/rcu/tree_plugin.h:425 Code: 72 04 00 00 41 89 1f 85 db 75 1f 48 8d 9a 40 04 00 00 48 89 d8 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 97 04 00 00 83 3b 00 75 5f <43> 8a 04 34 84 c0 0f 85 68 04 00 00 41 8b 07 3d 00 00 00 40 73 45 RSP: 0018:ffffc90000007b00 EFLAGS: 00000206 RAX: a2c80313f44cea00 RBX: 1ffff92000000f6c RCX: ffffffff90b8d903 RDX: dffffc0000000000 RSI: 0000000000000101 RDI: 0000000000000000 RBP: ffffc90000007be8 R08: ffffffff818ae653 R09: ffffed10173474ab R10: ffffed10173474ab R11: 0000000000000000 R12: 1ffff11005d0bb67 R13: 1ffff92000000f68 R14: dffffc0000000000 R15: ffff88802e85db3c rcu_read_unlock include/linux/rcupdate.h:720 [inline] ieee80211_iterate_active_interfaces_atomic+0xff/0x120 net/mac80211/util.c:831 mac80211_hwsim_beacon+0x9f/0x180 drivers/net/wireless/mac80211_hwsim.c:1861 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x1b7/0x5d0 kernel/time/hrtimer.c:1766 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:636 irq_exit_rcu+0x5/0x20 kernel/softirq.c:648 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:finish_lock_switch+0x1c5/0x350 kernel/sched/core.c:4730 Code: be ff ff ff ff e8 cb f5 a4 08 85 c0 74 37 4d 85 e4 75 58 0f 1f 44 00 00 4c 89 ff e8 45 9d a7 08 e8 20 bf 2e 00 fb 48 83 c4 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 4d 85 e4 0f 85 4a ff ff ff RSP: 0018:ffffc9000f297ce8 EFLAGS: 00000286 RAX: a2c80313f44cea00 RBX: 1ffff11017347408 RCX: ffffffff90b8d903 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8880b9a3a040 R08: ffffffff818ae653 R09: ffffed10173474ab R10: ffffed10173474ab R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880b9a3a2d8 R14: dffffc0000000000 R15: ffff8880b9a39580 finish_task_switch+0x140/0x630 kernel/sched/core.c:4847 context_switch kernel/sched/core.c:4972 [inline] __schedule+0xb7a/0x1460 kernel/sched/core.c:6250 schedule+0x12b/0x1f0 kernel/sched/core.c:6323 exit_to_user_mode_loop kernel/entry/common.c:163 [inline] exit_to_user_mode_prepare+0x14b/0x220 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300 do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3820a57a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f381e019cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: fffffffffffffffe RBX: 6666666666666667 RCX: 00007f3820a57a04 RDX: 0000000000000000 RSI: 00007f381e019d60 RDI: 00000000ffffff9c RBP: 00007f381e019d60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fff9be94e7f R14: 00007f381e01a300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 97 xchg %eax,%edi 1: 0c 00 or $0x0,%al 3: 4c 8b 64 24 18 mov 0x18(%rsp),%r12 8: 0f 85 56 03 00 00 jne 0x364 e: 83 bc 24 88 00 00 00 cmpl $0x0,0x88(%rsp) 15: 00 16: 0f 84 9a 02 00 00 je 0x2b6 1c: 4d 8d 75 f8 lea -0x8(%r13),%r14 20: 4c 89 f0 mov %r14,%rax 23: 48 c1 e8 03 shr $0x3,%rax 27: 8a 04 38 mov (%rax,%rdi,1),%al * 2a: 84 c0 test %al,%al <-- trapping instruction 2c: 0f 85 32 15 00 00 jne 0x1564 32: 41 8b 1e mov (%r14),%ebx 35: 81 e3 ff 1f 00 00 and $0x1fff,%ebx 3b: 48 89 d8 mov %rbx,%rax 3e: 48 rex.W 3f: c1 .byte 0xc1