rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13673/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=85545, q=203 ncpus=2)
task:syz.6.2125 state:R running task stack:26792 pid:13673 ppid:9056 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7010
irqentry_exit+0x67/0x70 kernel/entry/common.c:438
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:check_kcov_mode kernel/kcov.c:193 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 kernel/kcov.c:313
Code: 30 cf 7c 7e 65 8b 0d 31 cf 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 8a f8 15 00 00 <83> f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1
RSP: 0018:ffffc90015aef1f0 EFLAGS: 00000246
RAX: ffffffff813b2468 RBX: 1ffff92002b5de59 RCX: 0000000000000000
RDX: ffff888028633c00 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffc90015aef390 R09: 000000000000000d
R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90015aefef0
R13: ffffc90015aef2c8 R14: ffffc90015aef300 R15: dffffc0000000000
unwind_done arch/x86/include/asm/unwind.h:50 [inline]
unwind_next_frame+0x98/0x2990 arch/x86/kernel/unwind_orc.c:475
arch_stack_walk+0x144/0x190 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0xaa/0x100 kernel/stacktrace.c:122
save_stack+0x125/0x230 mm/page_owner.c:128
__reset_page_owner+0x4e/0x190 mm/page_owner.c:149
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1182 [inline]
free_unref_page_prepare+0x7d7/0x8f0 mm/page_alloc.c:2366
free_unref_page_list+0xbe/0x860 mm/page_alloc.c:2505
release_pages+0x208a/0x2300 mm/swap.c:1022
tlb_batch_pages_flush mm/mmu_gather.c:99 [inline]
tlb_flush_mmu_free mm/mmu_gather.c:294 [inline]
tlb_flush_mmu+0x379/0x510 mm/mmu_gather.c:301
tlb_finish_mmu+0xf4/0x220 mm/mmu_gather.c:425
exit_mmap+0x428/0xb90 mm/mmap.c:3315
__mmput+0x118/0x3a0 kernel/fork.c:1357
exit_mm+0x23f/0x340 kernel/exit.c:570
do_exit+0x909/0x2530 kernel/exit.c:871
do_group_exit+0x22d/0x2f0 kernel/exit.c:1026
get_signal+0x12a6/0x1390 kernel/signal.c:2903
arch_do_signal_or_restart+0xc2/0x7b0 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline]
syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:302
do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fbade59de59
RSP: 002b:00007fbadf4320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fbade825fa8 RCX: 00007fbade59de59
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbade825fa8
RBP: 00007fbade825fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbade826038 R14: 00007fff33e76330 R15: 00007fff33e76418
rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g85545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=39458
rcu: rcu_preempt kthread starved for 10500 jiffies! g85545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:27496 pid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
schedule+0xbd/0x170 kernel/sched/core.c:6774
schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168
rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667
rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13679 Comm: sed Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:rb_link_node include/linux/rbtree.h:63 [inline]
RIP: 0010:rb_add_cached include/linux/rbtree.h:182 [inline]
RIP: 0010:timerqueue_add+0x176/0x1f0 lib/timerqueue.c:40
Code: 3c 28 00 4c 8b 74 24 08 74 08 4c 89 ff e8 22 55 63 f7 4d 89 27 84 db 74 53 e8 06 e0 0a f7 eb 26 e8 ff df 0a f7 ba 18 00 00 00 <4c> 89 e7 31 f6 e8 60 56 63 f7 42 80 3c 2b 00 74 08 4c 89 f7 e8 f1
RSP: 0018:ffffc900001f0d10 EFLAGS: 00000006
RAX: ffffffff8a7c0551 RBX: 1ffff110171e5732 RCX: ffff8880291f0000
RDX: 0000000000000018 RSI: ffff888065ddf340 RDI: ffff888065ddf340
RBP: 0000000000000000 R08: ffffffff8e8c6e6f R09: 1ffffffff1d18dcd
R10: dffffc0000000000 R11: fffffbfff1d18dce R12: ffff888065ddf340
R13: dffffc0000000000 R14: ffff8880b8f2b990 R15: ffff888065ddf340
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f29eb87043c CR3: 00000000245c7000 CR4: 00000000003506e0
Call Trace:
__run_hrtimer kernel/time/hrtimer.c:1771 [inline]
__hrtimer_run_queues+0x62f/0xc10 kernel/time/hrtimer.c:1818
hrtimer_interrupt+0x39d/0x980 kernel/time/hrtimer.c:1880
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline]
__sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:anon_vma_interval_tree_verify+0x2f/0x150 mm/interval_tree.c:108
Code: 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 11 0e c0 ff 48 8d 7b 40 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 05 e8 6a 82 18 00 4c 8b 73 40 49 89 dd 49 c1 ed 03 43 80 7c 25
RSP: 0018:ffffc90003257990 EFLAGS: 00000246
RAX: 1ffff1100fc70e5c RBX: ffff88807e3872a0 RCX: ffff8880291f0000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807e3872e0
RBP: ffffc90003257ad0 R08: ffff888047c6a237 R09: 1ffff11008f8d446
R10: dffffc0000000000 R11: ffffed1008f8d447 R12: dffffc0000000000
R13: dffffc0000000000 R14: 1ffff11008f8d444 R15: 0000000000000003
validate_mm+0x1f5/0x450 mm/mmap.c:318
mmap_region+0x192c/0x2090 mm/mmap.c:2947
do_mmap+0x98f/0x10a0 mm/mmap.c:1385
vm_mmap_pgoff+0x1c4/0x3f0 mm/util.c:556
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f29ebb90242
Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
RSP: 002b:00007ffee1d38e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f29ebb90242
RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000
RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000002000
R13: 0000000000000001 R14: 0000014698710ff2 R15: 0000000000000000