rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 3752 jiffies s: 7469 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 3995 Comm: syz.3.13 Not tainted 6.1.107-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60 kernel/kcov.c:216 Code: 89 fb e8 17 00 00 00 48 8b 3d 38 2e 0f 0d 48 89 de 5b e9 77 a8 56 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0d c4 c0 77 7e <65> 8b 15 c5 c0 77 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 RSP: 0018:ffffc900000071a0 EFLAGS: 00000046 RAX: ffffffff81b0f6e9 RBX: ffff888074f07758 RCX: ffff88802cc59dc0 RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff81b0f683 R09: ffffed100598b3b9 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900000072c0 R13: ffff888074f07200 R14: 0000000000000001 R15: ffff8880b8e354a0 FS: 00007f94bd6276c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f27719e8000 CR3: 0000000060489000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: perf_swevent_event+0xc9/0x550 kernel/events/core.c:9561 perf_tp_event+0x35a/0xc80 kernel/events/core.c:9995 perf_trace_run_bpf_submit+0xf7/0x1d0 kernel/events/core.c:9968 perf_trace_lock_acquire+0x3bf/0x4a0 include/trace/events/lock.h:24 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0x544/0x5a0 kernel/locking/lockdep.c:5633 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:170 __run_hrtimer kernel/time/hrtimer.c:1693 [inline] __hrtimer_run_queues+0x6d3/0xe50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 72 60 31 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 27 a9 ad f6 65 8b 05 d8 a1 51 75 85 c0 74 3f 48 c7 04 24 0e 36 RSP: 0018:ffffc90000007be0 EFLAGS: 00000206 RAX: b3073aab0e56c900 RBX: 1ffff92000000f80 RCX: ffffffff816af01a RDX: dffffc0000000000 RSI: ffffffff8b0c0260 RDI: 0000000000000001 RBP: ffffc90000007c68 R08: dffffc0000000000 R09: fffffbfff223b64b R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff92000000f7c R14: ffffc90000007c00 R15: 0000000000000246 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] skb_dequeue+0x10f/0x140 net/core/skbuff.c:3423 ieee80211_handle_queued_frames+0x6d/0x1b0 net/mac80211/main.c:309 tasklet_action_common+0x3cb/0x4a0 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571 __do_softirq kernel/softirq.c:605 [inline] invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 kernel/sched/core.c:6870 Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 49 64 af f6 e8 64 60 e2 f6 fb bf 01 00 00 00 79 b4 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 59 1d 33 f7 48 RSP: 0018:ffffc900036ef060 EFLAGS: 00000286 RAX: b3073aab0e56c900 RBX: 1ffff920006dde14 RCX: ffffffff816af01a RDX: dffffc0000000000 RSI: ffffffff8b0c0260 RDI: 0000000000000001 RBP: ffffc900036ef120 R08: dffffc0000000000 R09: fffffbfff223b64b R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920006dde0c R13: 1ffff920006dde10 R14: ffffc900036ef080 R15: dffffc0000000000 irqentry_exit+0x53/0x80 kernel/entry/common.c:439 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:207 [inline] RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:239 [inline] RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:118 [inline] RIP: 0010:need_resched include/linux/sched.h:2231 [inline] RIP: 0010:preempt_schedule_common+0xa9/0xd0 kernel/sched/core.c:6735 Code: fd b6 ff ff 65 8b 05 ee 60 53 75 65 ff 0d e7 60 53 75 65 48 8b 1d d7 60 53 75 48 89 df be 08 00 00 00 e8 da 20 33 f7 48 89 d8 <48> c1 e8 03 42 80 3c 38 00 0f 84 59 ff ff ff 48 89 df e8 30 1f 33 RSP: 0018:ffffc900036ef1e0 EFLAGS: 00000256 RAX: ffff88802cc59dc0 RBX: ffff88802cc59dc0 RCX: ffffffff8aaf0e76 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802cc59dc0 RBP: ffffc900036ef288 R08: dffffc0000000000 R09: ffffed100598b3b9 R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920006dde44 R13: 8000000053e58007 R14: ffffffff8aaf0dc9 R15: dffffc0000000000 preempt_schedule+0xd9/0xe0 kernel/sched/core.c:6751 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x36/0x40 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1515 [inline] zap_pmd_range mm/memory.c:1574 [inline] zap_pud_range mm/memory.c:1603 [inline] zap_p4d_range mm/memory.c:1624 [inline] unmap_page_range+0x2190/0x2740 mm/memory.c:1645 unmap_vmas+0x48b/0x640 mm/memory.c:1730 exit_mmap+0x252/0x9f0 mm/mmap.c:3227 __mmput+0x115/0x3c0 kernel/fork.c:1199 mmput kernel/fork.c:1221 [inline] dup_mm kernel/fork.c:1556 [inline] copy_mm+0x1444/0x1990 kernel/fork.c:1589 copy_process+0x19d5/0x4060 kernel/fork.c:2267 kernel_clone+0x222/0x920 kernel/fork.c:2682 __do_sys_clone kernel/fork.c:2823 [inline] __se_sys_clone kernel/fork.c:2807 [inline] __x64_sys_clone+0x231/0x280 kernel/fork.c:2807 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f94bc779eb9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f94bd626fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f94bc915f80 RCX: 00007f94bc779eb9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f94bc7e793e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f94bc915f80 R15: 00007ffda65589c8