rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
(detected by 1, t=10502 jiffies, g=382897, q=1061)
rcu: All QSes seen, last rcu_preempt kthread activity 9028 (4295190076-4295181048), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 9028 jiffies! g382897 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28816 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4683 [inline]
__schedule+0x934/0x2710 kernel/sched/core.c:5940
schedule+0xd3/0x270 kernel/sched/core.c:6019
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1892
rcu_gp_fqs_loop kernel/rcu/tree.c:2004 [inline]
rcu_gp_kthread+0xd1a/0x2300 kernel/rcu/tree.c:2177
kthread+0x3e5/0x4d0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 14899 Comm: syz-executor.5 Tainted: G W 5.13.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:434 [inline]
RIP: 0010:__pv_queued_spin_lock_slowpath+0x3ba/0xb40 kernel/locking/qspinlock.c:508
Code: eb c6 45 01 01 41 bc 00 80 00 00 48 c1 e9 03 83 e3 07 41 be 01 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 2c 01 eb 0c f3 90 <41> 83 ec 01 0f 84 72 04 00 00 41 0f b6 45 00 38 d8 7f 08 84 c0 0f
RSP: 0018:ffffc90000007a30 EFLAGS: 00000206
RAX: 0000000000000003 RBX: 0000000000000000 RCX: 1ffffffff18ee238
RDX: 0000000000000001 RSI: ffffffff817b97b1 RDI: ffffffff81331571
RBP: ffffffff8c7711c0 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff817b9779 R11: 0000000000000080 R12: 00000000000065d5
R13: fffffbfff18ee238 R14: 0000000000000001 R15: ffff8880b9c52840
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6168f8d4f3 CR3: 00000000334c5000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:585 [inline]
queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
do_raw_spin_lock+0x200/0x2b0 kernel/locking/spinlock_debug.c:113
spin_lock include/linux/spinlock.h:354 [inline]
mac80211_hwsim_tx_frame_no_nl.isra.0+0x68f/0x1330 drivers/net/wireless/mac80211_hwsim.c:1516
mac80211_hwsim_tx_frame+0x1ee/0x2a0 drivers/net/wireless/mac80211_hwsim.c:1784
mac80211_hwsim_beacon_tx+0x4b7/0x920 drivers/net/wireless/mac80211_hwsim.c:1838
__iterate_interfaces+0x1e5/0x520 net/mac80211/util.c:793
ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:829
mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1861
__run_hrtimer kernel/time/hrtimer.c:1537 [inline]
__hrtimer_run_queues+0x609/0xe40 kernel/time/hrtimer.c:1601
hrtimer_run_softirq+0x17b/0x360 kernel/time/hrtimer.c:1618
__do_softirq+0x29b/0x9bd kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x16e/0x1c0 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_schedule_irq+0x49/0x90 kernel/sched/core.c:6328
Code: 55 53 65 48 8b 1c 25 00 f0 01 00 48 89 dd 48 c1 ed 03 48 01 c5 bf 01 00 00 00 e8 02 0e 2e f8 e8 6d 36 5a f8 fb bf 01 00 00 00 b2 cd ff ff 9c 58 fa f6 c4 02 75 27 bf 01 00 00 00 e8 10 fd 2d
RSP: 0018:ffffc9000cb776b8 EFLAGS: 00000246
RAX: 0000000000000007 RBX: ffff88807c5a54c0 RCX: 1ffffffff1ad6449
RDX: 0000000000000000 RSI: ffffffff817b97b1 RDI: 0000000000000001
RBP: ffffed100f8b4a98 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff817b9798 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
irqentry_exit+0x31/0x80 kernel/entry/common.c:427
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_schedule_thunk+0x1/0x18 arch/x86/entry/thunk_64.S:35
Code: d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 31 ed 65 48 8b 04 25 d0 ef 01 00 48 8d a0 58 ff ff ff e8 e9 88 45 00 55 <48> 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 43 15 21 08 eb
RSP: 0018:ffffc9000cb77780 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffff88805723aba0 R08: 0000000000000000 R09: ffff88805723aba3
R10: ffffed100ae47574 R11: 0000000000000000 R12: ffff88808147bc00
R13: 0000000000000000 R14: dffffc0000000000 R15: 00007f2d36745000
__raw_spin_unlock include/linux/spinlock_api_smp.h:152 [inline]
_raw_spin_unlock+0x36/0x40 kernel/locking/spinlock.c:183
spin_unlock include/linux/spinlock.h:394 [inline]
zap_pte_range mm/memory.c:1325 [inline]
zap_pmd_range mm/memory.c:1384 [inline]
zap_pud_range mm/memory.c:1413 [inline]
zap_p4d_range mm/memory.c:1434 [inline]
unmap_page_range+0x1013/0x2890 mm/memory.c:1455
unmap_single_vma+0x198/0x300 mm/memory.c:1500
unmap_vmas+0x16d/0x2f0 mm/memory.c:1532
exit_mmap+0x1d0/0x620 mm/mmap.c:3202
__mmput+0x122/0x470 kernel/fork.c:1101
mmput+0x58/0x60 kernel/fork.c:1122
exit_mm kernel/exit.c:501 [inline]
do_exit+0xae2/0x2a50 kernel/exit.c:812
do_group_exit+0x125/0x310 kernel/exit.c:922
get_signal+0x47f/0x2150 kernel/signal.c:2796
arch_do_signal_or_restart+0x2a9/0x1eb0 arch/x86/kernel/signal.c:789
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:209
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:302
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: Unable to access opcode bytes at RIP 0x4665af.
RSP: 002b:00007f2d34523188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: 0000000000000005 RBX: 000000000056bf80 RCX: 00000000004665d9
RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007ffc8f27587f R14: 00007f2d34523300 R15: 0000000000022000
softirq: huh, entered softirq 8 HRTIMER ffffffff81655b00 with preempt_count 00000101, exited with 00000102?