rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10868/1:b..l rcu: (detected by 1, t=10502 jiffies, g=48033, q=181 ncpus=2) task:syz-executor.1 state:R running task stack:20216 pid:10868 tgid:10868 ppid:10835 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7058 irqentry_exit+0x5e/0x90 kernel/entry/common.c:348 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x25b/0x530 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 13 99 86 00 f6 44 24 61 02 0f 85 8e 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc900038e7a60 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff9200071cf58 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8baad3a0 RDI: ffffffff8bfec660 RBP: ffffc900038e7bb0 R08: ffffffff92cc7507 R09: 1ffffffff2598ea0 R10: dffffc0000000000 R11: fffffbfff2598ea1 R12: 1ffff9200071cf54 R13: dffffc0000000000 R14: ffffc900038e7ac0 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:298 [inline] rcu_read_lock include/linux/rcupdate.h:750 [inline] percpu_ref_put_many include/linux/percpu-refcount.h:330 [inline] percpu_ref_put+0x36/0x180 include/linux/percpu-refcount.h:351 css_put include/linux/cgroup_refcnt.h:79 [inline] obj_cgroup_uncharge_pages mm/memcontrol.c:3282 [inline] refill_obj_stock+0x46c/0x6c0 mm/memcontrol.c:3552 __memcg_slab_free_hook+0x106/0x1b0 mm/slub.c:2010 memcg_slab_free_hook mm/slub.c:2030 [inline] slab_free mm/slub.c:4297 [inline] kmem_cache_free+0x188/0x2a0 mm/slub.c:4363 sk_prot_free net/core/sock.c:2114 [inline] __sk_destruct+0x467/0x5f0 net/core/sock.c:2208 inet_release+0x17d/0x200 net/ipv4/af_inet.c:437 __sock_release net/socket.c:659 [inline] sock_close+0xbc/0x240 net/socket.c:1421 __fput+0x429/0x8a0 fs/file_table.c:423 __do_sys_close fs/open.c:1557 [inline] __se_sys_close fs/open.c:1542 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1542 do_syscall_64+0xfb/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f8af1a7cc9a RSP: 002b:00007ffdb23768a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8af1a7cc9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007ffdb237691c R08: 00007ffdb237621c R09: 00007ffdb2376607 R10: 00007ffdb2376270 R11: 0000000000000293 R12: 0000000000000032 R13: 000000000005210e R14: 00000000000520b9 R15: 0000000000000007 rcu: rcu_preempt kthread timer wakeup didn't happen for 10514 jiffies! g48033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=21226 rcu: rcu_preempt kthread starved for 10515 jiffies! g48033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26256 pid:16 tgid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2572 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:1663 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1862 kthread+0x2f0/0x390 kernel/kthread.c:388 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 PID: 10 Comm: kworker/u8:0 Not tainted 6.8.0-syzkaller-05202-g9187210eee7d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] RIP: 0010:kvm_wait+0x250/0x2c0 arch/x86/kernel/kvm.c:1059 Code: 3b 45 0f b6 f6 44 89 ff 44 89 f6 e8 0a 09 55 00 e8 25 38 5c 00 45 38 f7 75 15 66 90 e8 79 08 55 00 0f 00 2d a2 47 68 0a fb f4 50 fe ff ff e8 66 08 55 00 fb e9 45 fe ff ff 89 d9 80 e1 07 38 RSP: 0018:ffffc900000f76c0 EFLAGS: 000002d3 RAX: ffffffff813fe7f7 RBX: ffff88802bc7d350 RCX: ffff888016ea9e00 RDX: 0000000000000000 RSI: ffffffff8baac220 RDI: ffffffff8bfec660 RBP: ffffc900000f7790 R08: ffffffff92cc75ef R09: 1ffffffff2598ebd R10: dffffc0000000000 R11: fffffbfff2598ebe R12: 1ffff9200001eedc R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000003 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa5d9902544 CR3: 00000000295ee000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_wait arch/x86/include/asm/paravirt.h:596 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline] __pv_queued_spin_lock_slowpath+0x6ff/0xc60 kernel/locking/qspinlock.c:511 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline] queued_spin_lock_slowpath+0x42/0x50 arch/x86/include/asm/qspinlock.h:51 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x272/0x370 kernel/locking/spinlock_debug.c:116 spin_lock_bh include/linux/spinlock.h:356 [inline] batadv_tt_local_commit_changes+0x1e/0x40 net/batman-adv/translation-table.c:3717 batadv_iv_ogm_schedule_buff net/batman-adv/bat_iv_ogm.c:811 [inline] batadv_iv_ogm_schedule+0x269/0x1090 net/batman-adv/bat_iv_ogm.c:868 batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 net/batman-adv/bat_iv_ogm.c:1712 process_one_work kernel/workqueue.c:3254 [inline] process_scheduled_works+0xa00/0x1770 kernel/workqueue.c:3335 worker_thread+0x86d/0xd70 kernel/workqueue.c:3416 kthread+0x2f0/0x390 kernel/kthread.c:388 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243