rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (0 ticks this GP) idle=0a54/1/0x4000000000000000 softirq=145134/145134 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18676/1:b..l rcu: (detected by 0, t=10506 jiffies, g=209533, q=72 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 18683 Comm: syz-executor.4 Not tainted 6.7.0-rc2-syzkaller-00147-gf1a09972a45a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:116 [inline] RIP: 0010:lock_release+0xc7/0x690 kernel/locking/lockdep.c:5766 Code: 48 19 8f e8 4b 2a 76 00 48 0f a3 1d 63 3b b1 0d 0f 82 07 04 00 00 48 c7 c3 38 7c 19 8f 48 b8 00 00 00 00 00 fc ff df 48 89 da <48> c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 RSP: 0018:ffffc900001f0c30 EFLAGS: 00000002 RAX: dffffc0000000000 RBX: ffffffff8f197c38 RCX: ffffffff81680ce5 RDX: ffffffff8f197c38 RSI: ffffffff8b2f0e80 RDI: ffffffff8ca73a68 RBP: 1ffff9200003e188 R08: 0000000000000000 R09: fffffbfff1e3290a R10: ffffffff8f194857 R11: 0000000000000004 R12: ffffffff929eb0d8 R13: ffff888021b60340 R14: ffffffff8acf39e0 R15: 1ffff9200003e1a6 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc399090000 CR3: 000000000cd77000 CR4: 0000000000350ef0 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline] _raw_spin_unlock_irqrestore+0x1a/0x70 kernel/locking/spinlock.c:194 debug_object_activate+0x27f/0x490 lib/debugobjects.c:745 debug_hrtimer_activate kernel/time/hrtimer.c:422 [inline] debug_activate kernel/time/hrtimer.c:477 [inline] enqueue_hrtimer+0x23/0x310 kernel/time/hrtimer.c:1087 __run_hrtimer kernel/time/hrtimer.c:1705 [inline] __hrtimer_run_queues+0xa12/0xc20 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline] __sysvec_apic_timer_interrupt+0x105/0x400 arch/x86/kernel/apic/apic.c:1082 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:_compound_head+0x25/0x130 include/linux/page-flags.h:247 Code: 00 00 0f 1f 00 41 54 55 53 48 89 fb e8 04 a0 bf ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 e8 00 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 48 89 ee e8 RSP: 0018:ffffc9000e4f76b8 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffffea00011a5b00 RCX: ffffffff81c8cbb9 RDX: 1ffffd4000234b61 RSI: ffffffff81c7ea2c RDI: ffffea00011a5b08 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 R13: ffff88805fe7ead8 R14: dffffc0000000000 R15: 0000000000000007 PageAnon include/linux/page-flags.h:657 [inline] mm_counter include/linux/mm.h:2596 [inline] zap_pte_range mm/memory.c:1463 [inline] zap_pmd_range mm/memory.c:1582 [inline] zap_pud_range mm/memory.c:1611 [inline] zap_p4d_range mm/memory.c:1632 [inline] unmap_page_range+0x1265/0x2b50 mm/memory.c:1653 unmap_single_vma+0x194/0x2b0 mm/memory.c:1699 unmap_vmas+0x229/0x470 mm/memory.c:1743 exit_mmap+0x1ad/0xa70 mm/mmap.c:3308 __mmput+0x12a/0x4d0 kernel/fork.c:1349 mmput+0x62/0x70 kernel/fork.c:1371 exit_mm kernel/exit.c:567 [inline] do_exit+0x9ad/0x2ae0 kernel/exit.c:858 do_group_exit+0xd4/0x2a0 kernel/exit.c:1021 get_signal+0x23be/0x2790 kernel/signal.c:2904 arch_do_signal_or_restart+0x90/0x7f0 arch/x86/kernel/signal.c:309 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x121/0x240 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1e/0x60 kernel/entry/common.c:296 do_syscall_64+0x4d/0x110 arch/x86/entry/common.c:88 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f900a87cae9 Code: Unable to access opcode bytes at 0x7f900a87cabf. RSP: 002b:00007f900b62e178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007f900a99bf88 RCX: 00007f900a87cae9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f900a99bf8c RBP: 00007f900a99bf80 R08: 0000000000000001 R09: 00007f900b62e6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f900a99bf8c R13: 000000000000000b R14: 00007ffd87006560 R15: 00007ffd87006648 task:syz-executor.5 state:R running task stack:28112 pid:18676 tgid:18674 ppid:5084 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xedb/0x5af0 kernel/sched/core.c:6688 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7008 irqentry_exit+0x36/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:776 [inline] RIP: 0010:count_memcg_event_mm.part.0+0xfc/0x340 include/linux/memcontrol.h:1111 Code: 01 00 00 00 44 89 e6 48 89 df e8 ff 7b 1d 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 5d 65 bf ff 48 85 db 0f 85 21 02 00 00 bf 69 bf ff e8 6a 6d b7 08 31 ff 89 c3 89 c6 e8 1f 65 bf ff 85 RSP: 0000:ffffc9000e49fe60 EFLAGS: 00000283 RAX: 000000000002beb6 RBX: 0000000000000000 RCX: ffffc900052f9000 RDX: 0000000000040000 RSI: ffffffff81c82267 RDI: 0000000000000007 RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000017 R13: 0000000000000000 R14: ffff888029347e10 R15: 0000000000000000 count_memcg_event_mm include/linux/memcontrol.h:573 [inline] mm_account_fault mm/memory.c:5213 [inline] handle_mm_fault+0x1ba/0xa10 mm/memory.c:5360 do_user_addr_fault+0x30b/0x1000 arch/x86/mm/fault.c:1364 handle_page_fault arch/x86/mm/fault.c:1505 [inline] exc_page_fault+0x5d/0xc0 arch/x86/mm/fault.c:1561 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7f6fc6a286e6 RSP: 002b:00007f6fc7762520 EFLAGS: 00010206 RAX: 00000000001a2001 RBX: 00007f6fc77625c0 RCX: 0000000000000091 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f6fc7762660 RBP: 0000000000000102 R08: 00007f6fbd1ff000 R09: 00000000001a2000 R10: 0000000000000000 R11: 00007f6fc77625d0 R12: 0000000000000001 R13: 00007f6fc6aea5a0 R14: 0000000000000000 R15: 00007f6fc7762660 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g209533 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=228864 rcu: rcu_preempt kthread starved for 10506 jiffies! g209533 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26864 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xedb/0x5af0 kernel/sched/core.c:6688 __schedule_loop kernel/sched/core.c:6763 [inline] schedule+0xe9/0x270 kernel/sched/core.c:6778 schedule_timeout+0x137/0x290 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x1ec/0xb10 kernel/rcu/tree.c:1631 rcu_gp_kthread+0x24b/0x380 kernel/rcu/tree.c:1830 kthread+0x2c6/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242