rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29388/1:b..l
(detected by 0, t=10502 jiffies, g=120005, q=162)
task:syz-executor.0 state:R running task stack:27704 pid:29388 ppid: 3642 flags:0x20004000
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6696
irqentry_exit+0x31/0x80 kernel/entry/common.c:428
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:85 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0xde/0x180 mm/kasan/generic.c:189
Code: 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 80 38 00 <74> f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c 2c eb 0c
RSP: 0018:ffffc9000b987528 EFLAGS: 00000246
RAX: fffffbfff1b7255a RBX: fffffbfff1b7255b RCX: ffffffff815db3f8
RDX: fffffbfff1b7255b RSI: 0000000000000008 RDI: ffffffff8db92ad0
RBP: fffffbfff1b7255a R08: 0000000000000000 R09: ffffffff8db92ad7
R10: fffffbfff1b7255a R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff8bd820e0 R15: 0000000000000000
instrument_atomic_read include/linux/instrumented.h:71 [inline]
test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline]
cpumask_test_cpu include/linux/cpumask.h:379 [inline]
cpu_online include/linux/cpumask.h:921 [inline]
trace_lock_acquire include/trace/events/lock.h:13 [inline]
lock_acquire+0xb8/0x510 kernel/locking/lockdep.c:5612
rcu_lock_acquire include/linux/rcupdate.h:268 [inline]
rcu_read_lock include/linux/rcupdate.h:694 [inline]
xsk_poll+0xc1/0x730 net/xdp/xsk.c:709
sock_poll+0x14d/0x5d0 net/socket.c:1306
vfs_poll include/linux/poll.h:88 [inline]
do_select+0x996/0x16a0 fs/select.c:538
compat_core_sys_select+0x61b/0x820 fs/select.c:1243
do_compat_pselect+0x1d3/0x210 fs/select.c:1344
__do_compat_sys_pselect6_time32 fs/select.c:1392 [inline]
__se_compat_sys_pselect6_time32 fs/select.c:1383 [inline]
__ia32_compat_sys_pselect6_time32+0x1d5/0x310 fs/select.c:1383
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7fde549
RSP: 002b:00000000f7fb85cc EFLAGS: 00000296 ORIG_RAX: 0000000000000134
RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000200000c0
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000020000200
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu: rcu_preempt kthread timer wakeup didn't happen for 10552 jiffies! g120005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=58248
rcu: rcu_preempt kthread starved for 10553 jiffies! g120005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:28728 pid: 16 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
schedule+0xd2/0x1f0 kernel/sched/core.c:6460
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1884
rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1971
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2144
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 29397 Comm: syz-executor.5 Not tainted 5.18.0-rc7-syzkaller-00136-g3b5e1590a267 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__lock_release kernel/locking/lockdep.c:5325 [inline]
RIP: 0010:lock_release+0x224/0x720 kernel/locking/lockdep.c:5661
Code: 85 03 00 00 48 8d 78 24 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 94 04 00 00 8b 73 24 85 f6 0f 85 28 04 00 00 48 8d 7b
RSP: 0018:ffffc9000b946c48 EFLAGS: 00000002
RAX: 0000000000000007 RBX: ffff8880230b2830 RCX: ffffc9000b946c98
RDX: 0000000000000000 RSI: ffff88804963d458 RDI: ffff8880230b2854
RBP: 1ffff92001728d8b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804963d458
R13: 0000000000000003 R14: ffff8880230b27d8 R15: ffff8880230b1d80
FS: 0000000000000000(0000) GS:ffff8880b9d00000(0063) knlGS:00000000f7f58b40
CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000203fb000 CR3: 0000000015ec2000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_unlock_bh include/linux/spinlock_api_smp.h:165 [inline]
_raw_spin_unlock_bh+0x12/0x30 kernel/locking/spinlock.c:210
spin_unlock_bh include/linux/spinlock.h:394 [inline]
batadv_tt_local_purge_pending_clients+0x38f/0x4d0 net/batman-adv/translation-table.c:3674
batadv_tt_local_resize_to_mtu+0x96/0x130 net/batman-adv/translation-table.c:3958
batadv_hardif_activate_interface.part.0.cold+0x14c/0x1ba net/batman-adv/hard-interface.c:662
batadv_hardif_activate_interface net/batman-adv/hard-interface.c:753 [inline]
batadv_hardif_enable_interface+0xaba/0xac0 net/batman-adv/hard-interface.c:745
batadv_softif_slave_add+0x64/0x130 net/batman-adv/soft-interface.c:839
do_set_master+0x1c8/0x220 net/core/rtnetlink.c:2534
do_setlink+0x9f3/0x3a20 net/core/rtnetlink.c:2738
__rtnl_newlink+0xdf8/0x1760 net/core/rtnetlink.c:3416
rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3531
rtnetlink_rcv_msg+0x413/0xb80 net/core/rtnetlink.c:5993
netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2502
netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345
netlink_sendmsg+0x904/0xe00 net/netlink/af_netlink.c:1921
sock_sendmsg_nosec net/socket.c:705 [inline]
sock_sendmsg+0xcf/0x120 net/socket.c:725
____sys_sendmsg+0x6e2/0x800 net/socket.c:2413
___sys_sendmsg+0xf3/0x170 net/socket.c:2467
__sys_sendmsg+0xe5/0x1b0 net/socket.c:2496
do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
__do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf7f5d549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
----------------
Code disassembly (best guess):
0: 74 f2 je 0xfffffff4
2: 48 89 c2 mov %rax,%rdx
5: b8 01 00 00 00 mov $0x1,%eax
a: 48 85 d2 test %rdx,%rdx
d: 75 56 jne 0x65
f: 5b pop %rbx
10: 5d pop %rbp
11: 41 5c pop %r12
13: c3 retq
14: 48 85 d2 test %rdx,%rdx
17: 74 5e je 0x77
19: 48 01 ea add %rbp,%rdx
1c: eb 09 jmp 0x27
1e: 48 83 c0 01 add $0x1,%rax
22: 48 39 d0 cmp %rdx,%rax
25: 74 50 je 0x77
27: 80 38 00 cmpb $0x0,(%rax)
* 2a: 74 f2 je 0x1e <-- trapping instruction
2c: eb d4 jmp 0x2
2e: 41 bc 08 00 00 00 mov $0x8,%r12d
34: 48 89 ea mov %rbp,%rdx
37: 45 29 dc sub %r11d,%r12d
3a: 4d 8d 1c 2c lea (%r12,%rbp,1),%r11
3e: eb 0c jmp 0x4c