syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (0 ticks this GP) idle=46fc/1/0x4000000000000000 softirq=146276/146276 fqs=0
rcu: 	(detected by 1, t=10502 jiffies, g=166045, q=702 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30667 Comm: syz.9.5863 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:mark_lock+0x49/0x360
Code: 83 fa 08 75 27 49 8d 5f 20 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 94 02 00 00 31 ed f6 43 02 03 40 0f 94 c5 83 f5 09 <eb> 0b 89 d5 83 fa 20 0f 83 e3 02 00 00 41 be 01 00 00 00 89 e9 41
RSP: 0018:ffffc90000007a08 EFLAGS: 00000002
RAX: 0000000000000000 RBX: ffff8880352b4728 RCX: ffffffff817b275a
RDX: 0000000000000008 RSI: ffff8880352b4708 RDI: ffff8880352b3c00
RBP: 0000000000000008 R08: ffffffff942a188f R09: 1ffffffff2854311
R10: dffffc0000000000 R11: fffffbfff2854312 R12: ffff8880352b46c4
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880352b4708
FS:  00007f05d45116c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c432720 CR3: 00000000456e0000 CR4: 0000000000350ef0
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 mark_usage kernel/locking/lockdep.c:4670 [inline]
 __lock_acquire+0xc3e/0x2100 kernel/locking/lockdep.c:5180
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline]
 _raw_spin_lock_irq+0xd3/0x120 kernel/locking/spinlock.c:170
 __run_hrtimer kernel/time/hrtimer.c:1743 [inline]
 __hrtimer_run_queues+0x670/0xd30 kernel/time/hrtimer.c:1803
 hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1865
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
 __sysvec_apic_timer_interrupt+0x112/0x420 arch/x86/kernel/apic/apic.c:1055
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_get_return_address+0x4f/0x90 arch/x86/kernel/unwind_orc.c:369
Code: 4b 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 2b 35 ba 00 48 8b 3b e8 03 72 1e 00 85 c0 <74> 14 43 80 3c 37 00 74 08 48 89 df e8 10 35 ba 00 48 8b 03 eb 02
RSP: 0018:ffffc9000441f160 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffc9000441f1c8 RCX: ffffffff91791000
RDX: ffffffff91941701 RSI: ffffc90004418000 RDI: ffffffff81f17caf
RBP: ffffc9000441f210 R08: ffffc9000441fa90 R09: ffffc9000441f1d0
R10: dffffc0000000000 R11: fffff52000883e3c R12: ffff8880352b3c00
R13: ffffffff818b39e0 R14: dffffc0000000000 R15: 1ffff92000883e39
 arch_stack_walk+0xfd/0x150 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 unpoison_slab_object mm/kasan/common.c:319 [inline]
 __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_noprof+0x1d9/0x380 mm/slub.c:4175
 mt_alloc_one lib/maple_tree.c:176 [inline]
 mas_alloc_nodes+0x25b/0x7e0 lib/maple_tree.c:1253
 mas_node_count_gfp lib/maple_tree.c:1335 [inline]
 mas_preallocate+0x575/0x8d0 lib/maple_tree.c:5545
 vma_iter_prealloc mm/vma.h:349 [inline]
 vma_link+0x13e/0x500 mm/vma.c:1688
 copy_vma+0x9b0/0xc60 mm/vma.c:1768
 move_vma+0x69f/0x1990 mm/mremap.c:723
 mremap_to mm/mremap.c:990 [inline]
 __do_sys_mremap mm/mremap.c:1104 [inline]
 __se_sys_mremap+0x1525/0x1ac0 mm/mremap.c:1015
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f05d3785d19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f05d4511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
RAX: ffffffffffffffda RBX: 00007f05d3975fa0 RCX: 00007f05d3785d19
RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000000020000000
RBP: 00007f05d3801a20 R08: 0000000020a00000 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f05d3975fa0 R15: 00007ffdf70764a8
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g166045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=0 timer-softirq=171379
rcu: rcu_preempt kthread starved for 10502 jiffies! g166045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:25976 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>