rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 GPs behind) idle=3404/1/0x4000000000000000 softirq=122216/122217 fqs=5
rcu: 	(detected by 0, t=10502 jiffies, g=228389, q=117 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 25672 Comm: syz-executor.3 Not tainted 6.9.0-rc7-syzkaller-00008-gee5b455b0ada #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:hlock_class+0x32/0x130 kernel/locking/lockdep.c:228
Code: ff df 53 48 89 fb 48 83 c7 20 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e da 00 00 00 0f b7 5b 20 66 81 e3 ff 1f <0f> b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 d1 dd
RSP: 0018:ffffc90000a08b20 EFLAGS: 00000006
RAX: 0000000000000000 RBX: 0000000000000c09 RCX: 00000000a3faa305
RDX: 1ffff11004614524 RSI: 0000000058f4bdd9 RDI: ffff8880230a2920
RBP: ffffffff93df6b18 R08: 0000000000000000 R09: fffffbfff27bba60
R10: ffffffff93ddd307 R11: 0000000000000001 R12: ffff8880230a28f9
R13: 0000000000000c09 R14: ffff8880230a2900 R15: 0000000000000002
FS:  00007f9659a566c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000063a94000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 lookup_chain_cache_add kernel/locking/lockdep.c:3781 [inline]
 validate_chain kernel/locking/lockdep.c:3837 [inline]
 __lock_acquire+0x14f4/0x3b30 kernel/locking/lockdep.c:5137
 lock_acquire kernel/locking/lockdep.c:5754 [inline]
 lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5719
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 advance_sched+0xd8/0xc60 net/sched/sch_taprio.c:924
 __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
 __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1756
 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1818
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 98 8c f6 48 89 df e8 5e 14 8d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 45 4f 7e f6 65 8b 05 46 88 24 75 85 c0 74 16 5b
RSP: 0018:ffffc90003597a08 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff948b58e0 RCX: 1ffffffff27bed6f
RDX: 0000000000000000 RSI: ffffffff8b0cae00 RDI: ffffffff8b6f56e0
RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff27bba38
R10: ffffffff93ddd1c7 R11: 0000000000000001 R12: ffff88805c7a6000
R13: 0000000000000017 R14: 0000000000000017 R15: ffff88805c7a6000
 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline]
 debug_check_no_obj_freed+0x328/0x600 lib/debugobjects.c:1019
 slab_free_hook mm/slub.c:2078 [inline]
 slab_free mm/slub.c:4286 [inline]
 kfree+0x280/0x3a0 mm/slub.c:4396
 tomoyo_realpath_from_path+0x1ad/0x720 security/tomoyo/realpath.c:286
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_number_perm+0x245/0x590 security/tomoyo/file.c:723
 security_file_ioctl+0x75/0xc0 security/security.c:2764
 __do_sys_ioctl fs/ioctl.c:898 [inline]
 __se_sys_ioctl fs/ioctl.c:890 [inline]
 __x64_sys_ioctl+0xbb/0x220 fs/ioctl.c:890
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9658c7dca9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9659a560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9658dac050 RCX: 00007f9658c7dca9
RDX: 0000000020000000 RSI: 0000000040085400 RDI: 0000000000000009
RBP: 00007f9658cc947e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f9658dac050 R15: 00007ffd33c94f88
 </TASK>
rcu: rcu_preempt kthread starved for 10492 jiffies! g228389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28400 pid:16    tgid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5409 [inline]
 __schedule+0xf15/0x5d00 kernel/sched/core.c:6746
 __schedule_loop kernel/sched/core.c:6823 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6838
 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2582
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:1663
 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:1862
 kthread+0x2c1/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 25671 Comm: syz-executor.3 Not tainted 6.9.0-rc7-syzkaller-00008-gee5b455b0ada #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline]
RIP: 0010:smp_call_function_many_cond+0x4ec/0x1420 kernel/smp.c:855
Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 5b 07 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 ff 83 e0 01 41
RSP: 0018:ffffc90003516ff8 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880b9544700 RCX: ffffffff8181c5bb
RDX: ffff88802ebabc00 RSI: ffffffff8181c595 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10172a88e1
R13: 0000000000000001 R14: ffff8880b9544708 R15: ffff8880b943fc00
FS:  00007f9659a776c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000063a94000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023
 __flush_tlb_multi arch/x86/include/asm/paravirt.h:91 [inline]
 flush_tlb_multi arch/x86/mm/tlb.c:941 [inline]
 flush_tlb_mm_range+0x293/0x330 arch/x86/mm/tlb.c:1027
 flush_tlb_page arch/x86/include/asm/tlbflush.h:254 [inline]
 ptep_clear_flush+0x136/0x180 mm/pgtable-generic.c:101
 page_vma_mkclean_one.constprop.0+0x39d/0x7c0 mm/rmap.c:1026
 page_mkclean_one+0x181/0x230 mm/rmap.c:1067
 rmap_walk_file+0x270/0x4e0 mm/rmap.c:2660
 rmap_walk mm/rmap.c:2678 [inline]
 folio_mkclean+0x2cb/0x3b0 mm/rmap.c:1099
 folio_clear_dirty_for_io+0x153/0x800 mm/page-writeback.c:2950
 mpage_submit_folio+0x80/0x350 fs/ext4/inode.c:1850
 mpage_map_and_submit_buffers+0x590/0xaf0 fs/ext4/inode.c:2115
 mpage_map_and_submit_extent fs/ext4/inode.c:2254 [inline]
 ext4_do_writepages+0x186c/0x3250 fs/ext4/inode.c:2679
 ext4_writepages+0x303/0x730 fs/ext4/inode.c:2768
 do_writepages+0x1a3/0x7f0 mm/page-writeback.c:2612
 filemap_fdatawrite_wbc mm/filemap.c:397 [inline]
 filemap_fdatawrite_wbc+0x148/0x1c0 mm/filemap.c:387
 __filemap_fdatawrite_range+0xba/0x100 mm/filemap.c:430
 sync_file_range+0x1e7/0x2a0 fs/sync.c:292
 ksys_sync_file_range fs/sync.c:364 [inline]
 __do_sys_sync_file_range fs/sync.c:373 [inline]
 __se_sys_sync_file_range fs/sync.c:370 [inline]
 __x64_sys_sync_file_range+0xd2/0x140 fs/sync.c:370
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9658c7dca9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9659a770c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000115
RAX: ffffffffffffffda RBX: 00007f9658dabf80 RCX: 00007f9658c7dca9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 00007f9658cc947e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f9658dabf80 R15: 00007ffd33c94f88
 </TASK>