rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 GPs behind) idle=c1a4/1/0x4000000000000000 softirq=7457/7467 fqs=1 (detected by 0, t=10502 jiffies, g=7717, q=112 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 5548 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-13272-g8395ae05cb5a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:__lock_acquire+0x1621/0x56d0 kernel/locking/lockdep.c:5041 Code: 74 24 50 e9 46 ef ff ff 40 88 b4 24 80 00 00 00 e8 34 b6 6b 00 0f b6 b4 24 80 00 00 00 e9 f6 ee ff ff c7 44 24 40 fe ff ff ff <41> bf 01 00 00 00 c7 84 24 80 00 00 00 ff ff ff ff c7 44 24 50 ff RSP: 0018:ffffc900001e0b48 EFLAGS: 00000002 RAX: 0000000000000000 RBX: bba975c5d86defc7 RCX: ffffffff81639ba6 RDX: 0000000000000001 RSI: ffff888017262778 RDI: ffff8880172627c1 RBP: 0000000000000040 R08: 0000000000000000 R09: ffffffff91336bdf R10: fffffbfff2266d7b R11: 0000000000000000 R12: ffff8880172627a0 R13: ffff888017261d40 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000600 CR3: 000000000c48e000 CR4: 0000000000350ee0 Call Trace: lock_acquire kernel/locking/lockdep.c:5668 [inline] lock_acquire+0x1e3/0x630 kernel/locking/lockdep.c:5633 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:350 [inline] advance_sched+0x57/0x9b0 net/sched/sch_taprio.c:700 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x690/0xfb0 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x320/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline] __sysvec_apic_timer_interrupt+0x180/0x640 arch/x86/kernel/apic/apic.c:1113 sysvec_apic_timer_interrupt+0x92/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x3c/0x70 kernel/locking/spinlock.c:194 Code: 74 24 10 e8 b6 c9 5a f7 48 89 ef e8 5e 36 5b f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 9f 99 4d f7 65 8b 05 50 86 fa 75 85 c0 74 0a 5b 5d c3 e8 5c ae RSP: 0018:ffffc900054cf838 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff2269456 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffff88807a7b3050 R08: 0000000000000001 R09: ffffffff91336af7 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffea0001b54240 R14: dffffc0000000000 R15: 0000000000000112 spin_unlock_irqrestore include/linux/spinlock.h:405 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1617 [inline] folio_lruvec_relock_irqsave include/linux/memcontrol.h:1650 [inline] release_pages+0x659/0x1330 mm/swap.c:1049 tlb_batch_pages_flush+0xa8/0x1a0 mm/mmu_gather.c:97 tlb_flush_mmu_free mm/mmu_gather.c:292 [inline] tlb_flush_mmu mm/mmu_gather.c:299 [inline] tlb_finish_mmu+0x14b/0x7e0 mm/mmu_gather.c:391 exit_mmap+0x202/0x7b0 mm/mmap.c:3096 __mmput+0x128/0x4c0 kernel/fork.c:1207 mmput+0x60/0x70 kernel/fork.c:1229 exit_mm kernel/exit.c:563 [inline] do_exit+0x9ac/0x2950 kernel/exit.c:854 do_group_exit+0xd4/0x2a0 kernel/exit.c:1010 get_signal+0x21c3/0x2450 kernel/signal.c:2859 arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbbd54878d9 Code: Unable to access opcode bytes at 0x7fbbd54878af. RSP: 002b:00007fbbd6683218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007fbbd558bf68 RCX: 00007fbbd54878d9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbbd558bf6c RBP: 00007fbbd558bf60 R08: 000000000000000e R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbd558bf6c R13: 00007ffd5f8af5af R14: 00007fbbd6683300 R15: 0000000000022000 rcu: rcu_preempt kthread starved for 10500 jiffies! g7717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28656 pid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5244 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6555 schedule+0xde/0x1b0 kernel/sched/core.c:6631 schedule_timeout+0x14e/0x2a0 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1656 rcu_gp_kthread+0x23a/0x360 kernel/rcu/tree.c:1855 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 40 Comm: kworker/u4:2 Not tainted 6.1.0-syzkaller-13272-g8395ae05cb5a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:413 [inline] RIP: 0010:smp_call_function_many_cond+0x43f/0x10a0 kernel/smp.c:987 Code: e6 e8 05 fb 0a 00 45 85 e4 74 48 48 8b 04 24 49 89 c5 83 e0 07 49 c1 ed 03 49 89 c4 4d 01 fd 41 83 c4 03 e8 33 fe 0a 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 4e 0a 00 00 8b 43 08 31 RSP: 0018:ffffc90000b17978 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff8880b9941d60 RCX: 0000000000000000 RDX: ffff888017960000 RSI: ffffffff817653ad RDI: 0000000000000005 RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 R13: ffffed10173283ad R14: 0000000000000001 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd512f6d78 CR3: 000000000c48e000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x5a/0xa0 kernel/smp.c:1155 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:1772 [inline] text_poke_bp_batch+0x22e/0x6b0 arch/x86/kernel/alternative.c:1963 text_poke_flush arch/x86/kernel/alternative.c:2131 [inline] text_poke_flush arch/x86/kernel/alternative.c:2128 [inline] text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:2138 arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x32f/0x410 kernel/jump_label.c:829 static_key_enable_cpuslocked+0x1b5/0x270 kernel/jump_label.c:205 static_key_enable+0x1a/0x20 kernel/jump_label.c:218 toggle_allocation_gate mm/kfence/core.c:799 [inline] toggle_allocation_gate+0xf8/0x230 mm/kfence/core.c:791 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308