rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17647/1:b..l rcu: (detected by 0, t=10502 jiffies, g=121853, q=238 ncpus=2) task:syz-executor.3 state:R running task stack:24112 pid:17647 tgid:17645 ppid:15510 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7067 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_is_held_type+0x13b/0x190 Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc90008e3ec68 EFLAGS: 00000206 RAX: 7e8909bb3b7a3600 RBX: 0000000000000001 RCX: 0000000080000000 RDX: ffffc9000969a000 RSI: ffffffff8bcacc00 RDI: ffffffff8c1ff200 RBP: 0000000000000001 R08: ffffffff82078b4e R09: 1ffffffff25f50b0 R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: 0000000000000246 R13: ffff8880216a9e00 R14: 00000000ffffffff R15: ffffffff8e333f60 lookup_page_ext mm/page_ext.c:253 [inline] page_ext_get+0x192/0x2a0 mm/page_ext.c:522 __page_table_check_zero+0xb1/0x340 mm/page_table_check.c:142 page_table_check_alloc include/linux/page_table_check.h:33 [inline] post_alloc_hook+0x206/0x230 mm/page_alloc.c:1469 prep_new_page mm/page_alloc.c:1476 [inline] get_page_from_freelist+0x2e2d/0x2ee0 mm/page_alloc.c:3402 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4660 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 shmem_alloc_folio mm/shmem.c:1628 [inline] shmem_alloc_and_add_folio+0x24d/0xdb0 mm/shmem.c:1668 shmem_get_folio_gfp+0x82d/0x1f50 mm/shmem.c:2055 shmem_fault+0x252/0x6f0 mm/shmem.c:2255 __do_fault+0x137/0x460 mm/memory.c:4562 do_read_fault mm/memory.c:4926 [inline] do_fault mm/memory.c:5056 [inline] do_pte_missing mm/memory.c:3903 [inline] handle_pte_fault+0x3d8d/0x7130 mm/memory.c:5380 __handle_mm_fault mm/memory.c:5523 [inline] handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5688 faultin_page mm/gup.c:1290 [inline] __get_user_pages+0x6ef/0x1590 mm/gup.c:1589 populate_vma_page_range+0x264/0x330 mm/gup.c:2029 __mm_populate+0x27a/0x460 mm/gup.c:2132 mm_populate include/linux/mm.h:3464 [inline] vm_mmap_pgoff+0x2c3/0x3d0 mm/util.c:578 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb71a47cee9 RSP: 002b:00007fb71b11b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fb71a5b4050 RCX: 00007fb71a47cee9 RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 RBP: 00007fb71a4c947f R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007fb71a5b4050 R15: 00007ffdfbaada98 rcu: rcu_preempt kthread starved for 10555 jiffies! g121853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2000 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 14340 Comm: kworker/0:1H Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: kblockd blk_mq_timeout_work RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5282 Code: c9 50 e8 99 c9 0b 00 48 83 c4 08 4c 89 f7 e8 cd 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 d0 86 2a 0a e8 5b f8 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc RSP: 0018:ffffc90015497548 EFLAGS: 00000286 RAX: f2b51afc10060500 RBX: ffff88807deabc00 RCX: ffffffff8172c78a RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: ffffffff8c1ff200 RBP: ffffc90015497590 R08: ffffffff92fa85ff R09: 1ffffffff25f50bf R10: dffffc0000000000 R11: fffffbfff25f50c0 R12: 1ffff11017287ea7 R13: dffffc0000000000 R14: ffff8880b943e7c0 R15: ffff8880b943f538 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e02b000 CR3: 00000000310aa000 CR4: 0000000000350ef0 Call Trace: context_switch kernel/sched/core.c:5411 [inline] __schedule+0x17f0/0x4a20 kernel/sched/core.c:6745 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7067 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 1a 80 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90015497920 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92002a92f30 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8bcacc00 RDI: ffffffff8c1ff200 RBP: ffffc90015497a68 R08: ffffffff92fa8587 R09: 1ffffffff25f50b0 R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: 1ffff92002a92f2c R13: dffffc0000000000 R14: ffffc90015497980 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock include/linux/rcupdate.h:781 [inline] percpu_ref_put_many include/linux/percpu-refcount.h:330 [inline] percpu_ref_put include/linux/percpu-refcount.h:351 [inline] blk_queue_exit+0x47/0x260 block/blk-core.c:375 blk_mq_timeout_work+0x3ec/0x470 block/blk-mq.c:1673 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2e/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244