rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (0 ticks this GP) idle=7d7/1/0x4000000000000002 softirq=230854/230854 fqs=0
(detected by 1, t=10502 jiffies, g=454937, q=1448)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 9590 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hlock_class kernel/locking/lockdep.c:194 [inline]
RIP: 0010:__lock_acquire+0x1036/0x2b00 kernel/locking/lockdep.c:5026
Code: 97 0c 00 4c 8b 64 24 18 0f 85 56 03 00 00 83 bc 24 88 00 00 00 00 0f 84 9a 02 00 00 4d 8d 75 f8 4c 89 f0 48 c1 e8 03 8a 04 38 <84> c0 0f 85 32 15 00 00 41 8b 1e 81 e3 ff 1f 00 00 48 89 d8 48 c1
RSP: 0018:ffffc900000071c0 EFLAGS: 00000806
RAX: 1ffff11005d0bc00 RBX: 00000000b9802d42 RCX: 000000004dae23cf
RDX: 00000000466b2444 RSI: 0000000086ba61b0 RDI: dffffc0000000000
RBP: ffffc90000007310 R08: dffffc0000000000 R09: fffffbfff1feebdd
R10: fffffbfff1feebdd R11: 0000000000000000 R12: ffff88802e85d700
R13: ffff88802e85e188 R14: ffff88802e85e180 R15: 255701fbb9802d42
FS: 00007f381e01a700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555556ee0708 CR3: 00000000196c8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5640
rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:268
rcu_read_lock include/linux/rcupdate.h:688 [inline]
__perf_event_output kernel/events/core.c:7485 [inline]
perf_event_output_forward+0xd9/0x2c0 kernel/events/core.c:7507
__perf_event_overflow+0x1f8/0x380 kernel/events/core.c:9207
perf_tp_event+0x34f/0xbc0 kernel/events/core.c:9739
perf_trace_run_bpf_submit+0xf6/0x1d0 kernel/events/core.c:9713
perf_trace_preemptirq_template+0x319/0x430 include/trace/events/preemptirq.h:14
trace_irq_enable_rcuidle+0x101/0x170 include/trace/events/preemptirq.h:40
trace_hardirqs_on+0x57/0x80 kernel/trace/trace_preemptirq.c:44
asm_sysvec_irq_work+0x12/0x20
RIP: 0010:__rcu_read_unlock+0xce/0x650 kernel/rcu/tree_plugin.h:425
Code: 72 04 00 00 41 89 1f 85 db 75 1f 48 8d 9a 40 04 00 00 48 89 d8 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 97 04 00 00 83 3b 00 75 5f <43> 8a 04 34 84 c0 0f 85 68 04 00 00 41 8b 07 3d 00 00 00 40 73 45
RSP: 0018:ffffc90000007b00 EFLAGS: 00000206
RAX: a2c80313f44cea00 RBX: 1ffff92000000f6c RCX: ffffffff90b8d903
RDX: dffffc0000000000 RSI: 0000000000000101 RDI: 0000000000000000
RBP: ffffc90000007be8 R08: ffffffff818ae653 R09: ffffed10173474ab
R10: ffffed10173474ab R11: 0000000000000000 R12: 1ffff11005d0bb67
R13: 1ffff92000000f68 R14: dffffc0000000000 R15: ffff88802e85db3c
rcu_read_unlock include/linux/rcupdate.h:720 [inline]
ieee80211_iterate_active_interfaces_atomic+0xff/0x120 net/mac80211/util.c:831
mac80211_hwsim_beacon+0x9f/0x180 drivers/net/wireless/mac80211_hwsim.c:1861
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749
hrtimer_run_softirq+0x1b7/0x5d0 kernel/time/hrtimer.c:1766
__do_softirq+0x392/0x7a3 kernel/softirq.c:558
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:finish_lock_switch+0x1c5/0x350 kernel/sched/core.c:4730
Code: be ff ff ff ff e8 cb f5 a4 08 85 c0 74 37 4d 85 e4 75 58 0f 1f 44 00 00 4c 89 ff e8 45 9d a7 08 e8 20 bf 2e 00 fb 48 83 c4 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 4d 85 e4 0f 85 4a ff ff ff
RSP: 0018:ffffc9000f297ce8 EFLAGS: 00000286
RAX: a2c80313f44cea00 RBX: 1ffff11017347408 RCX: ffffffff90b8d903
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8880b9a3a040 R08: ffffffff818ae653 R09: ffffed10173474ab
R10: ffffed10173474ab R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880b9a3a2d8 R14: dffffc0000000000 R15: ffff8880b9a39580
finish_task_switch+0x140/0x630 kernel/sched/core.c:4847
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xb7a/0x1460 kernel/sched/core.c:6250
schedule+0x12b/0x1f0 kernel/sched/core.c:6323
exit_to_user_mode_loop kernel/entry/common.c:163 [inline]
exit_to_user_mode_prepare+0x14b/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f3820a57a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f381e019cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: fffffffffffffffe RBX: 6666666666666667 RCX: 00007f3820a57a04
RDX: 0000000000000000 RSI: 00007f381e019d60 RDI: 00000000ffffff9c
RBP: 00007f381e019d60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00007fff9be94e7f R14: 00007f381e01a300 R15: 0000000000022000
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g454937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=0 timer-softirq=174314
rcu: rcu_preempt kthread starved for 10502 jiffies! g454937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:26576 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xb72/0x1460 kernel/sched/core.c:6250
schedule+0x12b/0x1f0 kernel/sched/core.c:6323
schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1955
rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2128
kthread+0x468/0x490 kernel/kthread.c:327
ret_from_fork+0x1f/0x30
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 9590 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 kernel/kcov.c:196
Code: 00 00 0f 1f 40 00 be 0d 00 00 00 48 c7 c7 20 ab b5 8c e8 8f b9 4b 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 c0 6f 02 00 65 8b 15 54 23 7e 7e f7 c2 00 01 ff 00
RSP: 0018:ffffc90000007350 EFLAGS: 00000046
RAX: ffffffff81ab26e5 RBX: 0000000000000001 RCX: ffff88802e85d700
RDX: ffff88802e85d700 RSI: 0000000000000103 RDI: ffffffff8cb1d900
RBP: ffffc900000074b0 R08: ffffffff81aac5a9 R09: fffffbfff1feebdd
R10: fffffbfff1feebdd R11: 0000000000000000 R12: dffffc0000000000
R13: 0000000000000038 R14: 0000000000000000 R15: ffffc90000007500
FS: 00007f381e01a700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555556ee0708 CR3: 00000000196c8000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_lock_release+0x5/0x20 include/linux/rcupdate.h:272
rcu_read_unlock include/linux/rcupdate.h:721 [inline]
__perf_output_begin kernel/events/ring_buffer.c:259 [inline]
perf_output_begin_forward+0xabc/0xcf0 kernel/events/ring_buffer.c:268
__perf_event_output kernel/events/core.c:7489 [inline]
perf_event_output_forward+0x1a8/0x2c0 kernel/events/core.c:7507
__perf_event_overflow+0x1f8/0x380 kernel/events/core.c:9207
perf_tp_event+0x34f/0xbc0 kernel/events/core.c:9739
perf_trace_run_bpf_submit+0xf6/0x1d0 kernel/events/core.c:9713
perf_trace_preemptirq_template+0x319/0x430 include/trace/events/preemptirq.h:14
trace_irq_enable_rcuidle+0x101/0x170 include/trace/events/preemptirq.h:40
trace_hardirqs_on+0x57/0x80 kernel/trace/trace_preemptirq.c:44
asm_sysvec_irq_work+0x12/0x20
RIP: 0010:__rcu_read_unlock+0xce/0x650 kernel/rcu/tree_plugin.h:425
Code: 72 04 00 00 41 89 1f 85 db 75 1f 48 8d 9a 40 04 00 00 48 89 d8 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 97 04 00 00 83 3b 00 75 5f <43> 8a 04 34 84 c0 0f 85 68 04 00 00 41 8b 07 3d 00 00 00 40 73 45
RSP: 0018:ffffc90000007b00 EFLAGS: 00000206
RAX: a2c80313f44cea00 RBX: 1ffff92000000f6c RCX: ffffffff90b8d903
RDX: dffffc0000000000 RSI: 0000000000000101 RDI: 0000000000000000
RBP: ffffc90000007be8 R08: ffffffff818ae653 R09: ffffed10173474ab
R10: ffffed10173474ab R11: 0000000000000000 R12: 1ffff11005d0bb67
R13: 1ffff92000000f68 R14: dffffc0000000000 R15: ffff88802e85db3c
rcu_read_unlock include/linux/rcupdate.h:720 [inline]
ieee80211_iterate_active_interfaces_atomic+0xff/0x120 net/mac80211/util.c:831
mac80211_hwsim_beacon+0x9f/0x180 drivers/net/wireless/mac80211_hwsim.c:1861
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1749
hrtimer_run_softirq+0x1b7/0x5d0 kernel/time/hrtimer.c:1766
__do_softirq+0x392/0x7a3 kernel/softirq.c:558
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:finish_lock_switch+0x1c5/0x350 kernel/sched/core.c:4730
Code: be ff ff ff ff e8 cb f5 a4 08 85 c0 74 37 4d 85 e4 75 58 0f 1f 44 00 00 4c 89 ff e8 45 9d a7 08 e8 20 bf 2e 00 fb 48 83 c4 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 4d 85 e4 0f 85 4a ff ff ff
RSP: 0018:ffffc9000f297ce8 EFLAGS: 00000286
RAX: a2c80313f44cea00 RBX: 1ffff11017347408 RCX: ffffffff90b8d903
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff8880b9a3a040 R08: ffffffff818ae653 R09: ffffed10173474ab
R10: ffffed10173474ab R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880b9a3a2d8 R14: dffffc0000000000 R15: ffff8880b9a39580
finish_task_switch+0x140/0x630 kernel/sched/core.c:4847
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xb7a/0x1460 kernel/sched/core.c:6250
schedule+0x12b/0x1f0 kernel/sched/core.c:6323
exit_to_user_mode_loop kernel/entry/common.c:163 [inline]
exit_to_user_mode_prepare+0x14b/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f3820a57a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f381e019cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: fffffffffffffffe RBX: 6666666666666667 RCX: 00007f3820a57a04
RDX: 0000000000000000 RSI: 00007f381e019d60 RDI: 00000000ffffff9c
RBP: 00007f381e019d60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00007fff9be94e7f R14: 00007f381e01a300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 97 xchg %eax,%edi
1: 0c 00 or $0x0,%al
3: 4c 8b 64 24 18 mov 0x18(%rsp),%r12
8: 0f 85 56 03 00 00 jne 0x364
e: 83 bc 24 88 00 00 00 cmpl $0x0,0x88(%rsp)
15: 00
16: 0f 84 9a 02 00 00 je 0x2b6
1c: 4d 8d 75 f8 lea -0x8(%r13),%r14
20: 4c 89 f0 mov %r14,%rax
23: 48 c1 e8 03 shr $0x3,%rax
27: 8a 04 38 mov (%rax,%rdi,1),%al
* 2a: 84 c0 test %al,%al <-- trapping instruction
2c: 0f 85 32 15 00 00 jne 0x1564
32: 41 8b 1e mov (%r14),%ebx
35: 81 e3 ff 1f 00 00 and $0x1fff,%ebx
3b: 48 89 d8 mov %rbx,%rax
3e: 48 rex.W
3f: c1 .byte 0xc1