rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=dae4/1/0x4000000000000000 softirq=44229/44229 fqs=1 rcu: (detected by 0, t=10503 jiffies, g=60017, q=292 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13049 Comm: syz-executor.3 Not tainted 6.9.0-rc4-syzkaller-00329-g48cf398f15fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:cpu_max_bits_warn include/linux/cpumask.h:144 [inline] RIP: 0010:cpumask_check include/linux/cpumask.h:151 [inline] RIP: 0010:cpumask_test_cpu include/linux/cpumask.h:505 [inline] RIP: 0010:cpu_online include/linux/cpumask.h:1120 [inline] RIP: 0010:trace_hrtimer_expire_exit include/trace/events/timer.h:306 [inline] RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1695 [inline] RIP: 0010:__hrtimer_run_queues+0x5d4/0xd50 kernel/time/hrtimer.c:1756 Code: 42 0f b6 04 23 84 c0 0f 85 a8 03 00 00 41 c7 07 00 00 00 00 4c 8b 64 24 20 0f 1f 44 00 00 e8 43 7d 12 00 65 8b 1d a8 4f 80 7e 07 00 00 00 89 de e8 70 81 12 00 83 fb 07 0f 87 b2 01 00 00 e8 RSP: 0018:ffffc90000a08d60 EFLAGS: 00000046 RAX: ffffffff8183841d RBX: 0000000000000001 RCX: ffff888020360000 RDX: 0000000000010002 RSI: ffffffff8bcaca20 RDI: ffffffff8c1f8560 RBP: ffffc90000a08ea8 R08: ffffffff8fa8e2af R09: 1ffffffff1f51c55 R10: dffffc0000000000 R11: fffffbfff1f51c56 R12: 1ffff110172a593b R13: 0000000000000001 R14: ffff888063c9e340 R15: ffff888020360ac0 FS: 00007fe8b0b406c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f04c4bad988 CR3: 000000001d3a0000 CR4: 0000000000350ef0 Call Trace: hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:console_flush_all+0xaad/0xfd0 kernel/printk/printk.c:2985 Code: ff ff e8 26 97 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 18 97 1f 00 e8 d3 53 09 0a 4d 85 f6 74 b6 e8 09 97 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 RSP: 0018:ffffc9000949ef20 EFLAGS: 00000246 RAX: 1ffff92001293e30 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000af8b000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc9000949f0d0 R08: ffffffff817669f4 R09: 1ffffffff25e64a0 R10: dffffc0000000000 R11: fffffbfff25e64a1 R12: ffffffff8eb142f8 R13: ffffffff8eb142a0 R14: 0000000000000200 R15: dffffc0000000000 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3048 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2348 _printk+0xd5/0x120 kernel/printk/printk.c:2373 _btrfs_printk+0x5ae/0x5e0 fs/btrfs/messages.c:246 __btrfs_clear_fs_compat_ro+0x196/0x290 fs/btrfs/fs.c:91 btrfs_delete_free_space_tree+0x10e/0x610 fs/btrfs/free-space-tree.c:1278 btrfs_start_pre_rw_mount+0xf84/0x13f0 fs/btrfs/disk-io.c:3002 open_ctree+0x24f1/0x2a00 fs/btrfs/disk-io.c:3546 btrfs_fill_super fs/btrfs/super.c:938 [inline] btrfs_get_tree_super fs/btrfs/super.c:1858 [inline] btrfs_get_tree+0xe7a/0x1920 fs/btrfs/super.c:2084 vfs_get_tree+0x92/0x2a0 fs/super.c:1779 fc_mount+0x1b/0xb0 fs/namespace.c:1125 btrfs_get_tree_subvol fs/btrfs/super.c:2047 [inline] btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2085 vfs_get_tree+0x92/0x2a0 fs/super.c:1779 do_new_mount+0x2be/0xb40 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe8afe7f5aa Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe8b0b3fef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fe8b0b3ff80 RCX: 00007fe8afe7f5aa RDX: 00000000200055c0 RSI: 0000000020005600 RDI: 00007fe8b0b3ff40 RBP: 00000000200055c0 R08: 00007fe8b0b3ff80 R09: 0000000000000008 R10: 0000000000000008 R11: 0000000000000202 R12: 0000000020005600 R13: 00007fe8b0b3ff40 R14: 00000000000055a3 R15: 0000000020000240 rcu: rcu_preempt kthread starved for 10501 jiffies! g60017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26256 pid:16 tgid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6838 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2582 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:1663 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1862 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 13109 Comm: syz-executor.2 Not tainted 6.9.0-rc4-syzkaller-00329-g48cf398f15fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline] RIP: 0010:smp_call_function_many_cond+0x1899/0x2a00 kernel/smp.c:855 Code: 89 e6 83 e6 01 31 ff e8 15 db 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 c0 d6 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 a4 d6 0b 00 eb e4 44 RSP: 0018:ffffc9000945f700 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 1ffff110172a8869 RCX: ffff888025a0da00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000945f900 R08: ffffffff818a2a8b R09: 1ffffffff25e64a0 R10: dffffc0000000000 R11: fffffbfff25e64a1 R12: dffffc0000000000 R13: ffff8880b9544348 R14: ffff8880b943f7c0 R15: 0000000000000001 FS: 000055558b0ce480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5e2342dd58 CR3: 000000001fb28000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2086 [inline] text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2296 text_poke_bp+0xb0/0x100 arch/x86/kernel/alternative.c:2523 __static_call_transform+0x51a/0x810 arch/x86/kernel/static_call.c:111 arch_static_call_transform+0x141/0x380 arch/x86/kernel/static_call.c:163 __static_call_update+0xd8/0x5e0 kernel/static_call_inline.c:147 tracepoint_update_call kernel/tracepoint.c:317 [inline] tracepoint_remove_func kernel/tracepoint.c:441 [inline] tracepoint_probe_unregister+0x8eb/0x990 kernel/tracepoint.c:551 bpf_raw_tp_link_release+0x63/0x90 kernel/bpf/syscall.c:3511 bpf_link_free+0x110/0x2d0 kernel/bpf/syscall.c:3052 bpf_link_put_direct kernel/bpf/syscall.c:3093 [inline] bpf_link_release+0x7b/0x90 kernel/bpf/syscall.c:3100 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5e2267cd9a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007fff993ce950 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5e2267cd9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 00007f5e227ad980 R08: 00007f5e22600000 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000069e71 R13: 0000000000069e3f R14: 00007fff993ceb10 R15: 00007f5e22634cb0 watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor.2:13109] Modules linked in: irq event stamp: 1542176 hardirqs last enabled at (1542175): [] irqentry_exit+0x63/0x90 kernel/entry/common.c:357 hardirqs last disabled at (1542176): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1043 softirqs last enabled at (1542174): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last enabled at (1542174): [] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 softirqs last disabled at (1542119): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last disabled at (1542119): [] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 CPU: 0 PID: 13109 Comm: syz-executor.2 Not tainted 6.9.0-rc4-syzkaller-00329-g48cf398f15fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline] RIP: 0010:smp_call_function_many_cond+0x1899/0x2a00 kernel/smp.c:855 Code: 89 e6 83 e6 01 31 ff e8 15 db 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 c0 d6 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 a4 d6 0b 00 eb e4 44 RSP: 0018:ffffc9000945f700 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 1ffff110172a8869 RCX: ffff888025a0da00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000945f900 R08: ffffffff818a2a8b R09: 1ffffffff25e64a0 R10: dffffc0000000000 R11: fffffbfff25e64a1 R12: dffffc0000000000 R13: ffff8880b9544348 R14: ffff8880b943f7c0 R15: 0000000000000001 FS: 000055558b0ce480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5e2342dd58 CR3: 000000001fb28000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2086 [inline] text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2296 text_poke_bp+0xb0/0x100 arch/x86/kernel/alternative.c:2523 __static_call_transform+0x51a/0x810 arch/x86/kernel/static_call.c:111 arch_static_call_transform+0x141/0x380 arch/x86/kernel/static_call.c:163 __static_call_update+0xd8/0x5e0 kernel/static_call_inline.c:147 tracepoint_update_call kernel/tracepoint.c:317 [inline] tracepoint_remove_func kernel/tracepoint.c:441 [inline] tracepoint_probe_unregister+0x8eb/0x990 kernel/tracepoint.c:551 bpf_raw_tp_link_release+0x63/0x90 kernel/bpf/syscall.c:3511 bpf_link_free+0x110/0x2d0 kernel/bpf/syscall.c:3052 bpf_link_put_direct kernel/bpf/syscall.c:3093 [inline] bpf_link_release+0x7b/0x90 kernel/bpf/syscall.c:3100 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5e2267cd9a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007fff993ce950 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f5e2267cd9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 00007f5e227ad980 R08: 00007f5e22600000 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000069e71 R13: 0000000000069e3f R14: 00007fff993ceb10 R15: 00007f5e22634cb0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13049 Comm: syz-executor.3 Not tainted 6.9.0-rc4-syzkaller-00329-g48cf398f15fc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__lock_acquire+0x1348/0x1fd0 kernel/locking/lockdep.c:5137 Code: 00 74 08 48 89 df e8 07 cf 87 00 48 83 3b 00 0f 84 8d 02 00 00 4c 89 e7 48 8b 74 24 48 44 89 f2 48 89 e9 e8 4a 98 00 00 31 c9 <85> c0 0f 84 80 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 44 24 RSP: 0018:ffffc90000a08950 EFLAGS: 00000046 RAX: 0000000000000001 RBX: ffffffff92c18508 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92f32500 RBP: d4c9f0e422e098f3 R08: ffffffff92f32507 R09: 1ffffffff25e64a0 R10: dffffc0000000000 R11: fffffbfff25e64a1 R12: ffff888020360000 R13: ffff888020360000 R14: 0000000000000000 R15: ffff888020360000 FS: 00007fe8b0b406c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f04c4bad988 CR3: 000000001d3a0000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 debug_object_deactivate+0x158/0x390 lib/debugobjects.c:763 debug_hrtimer_deactivate kernel/time/hrtimer.c:428 [inline] debug_deactivate+0x1b/0x220 kernel/time/hrtimer.c:484 __run_hrtimer kernel/time/hrtimer.c:1660 [inline] __hrtimer_run_queues+0x30f/0xd50 kernel/time/hrtimer.c:1756 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:console_flush_all+0xaad/0xfd0 kernel/printk/printk.c:2985 Code: ff ff e8 26 97 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 18 97 1f 00 e8 d3 53 09 0a 4d 85 f6 74 b6 e8 09 97 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 RSP: 0018:ffffc9000949ef20 EFLAGS: 00000246 RAX: 1ffff92001293e30 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000af8b000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc9000949f0d0 R08: ffffffff817669f4 R09: 1ffffffff25e64a0 R10: dffffc0000000000 R11: fffffbfff25e64a1 R12: ffffffff8eb142f8 R13: ffffffff8eb142a0 R14: 0000000000000200 R15: dffffc0000000000 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3048 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2348 _printk+0xd5/0x120 kernel/printk/printk.c:2373 _btrfs_printk+0x5ae/0x5e0 fs/btrfs/messages.c:246 __btrfs_clear_fs_compat_ro+0x196/0x290 fs/btrfs/fs.c:91 btrfs_delete_free_space_tree+0x10e/0x610 fs/btrfs/free-space-tree.c:1278 btrfs_start_pre_rw_mount+0xf84/0x13f0 fs/btrfs/disk-io.c:3002 open_ctree+0x24f1/0x2a00 fs/btrfs/disk-io.c:3546 btrfs_fill_super fs/btrfs/super.c:938 [inline] btrfs_get_tree_super fs/btrfs/super.c:1858 [inline] btrfs_get_tree+0xe7a/0x1920 fs/btrfs/super.c:2084 vfs_get_tree+0x92/0x2a0 fs/super.c:1779 fc_mount+0x1b/0xb0 fs/namespace.c:1125 btrfs_get_tree_subvol fs/btrfs/super.c:2047 [inline] btrfs_get_tree+0x652/0x1920 fs/btrfs/super.c:2085 vfs_get_tree+0x92/0x2a0 fs/super.c:1779 do_new_mount+0x2be/0xb40 fs/namespace.c:3352 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x2d9/0x3c0 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe8afe7f5aa Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe8b0b3fef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fe8b0b3ff80 RCX: 00007fe8afe7f5aa RDX: 00000000200055c0 RSI: 0000000020005600 RDI: 00007fe8b0b3ff40 RBP: 00000000200055c0 R08: 00007fe8b0b3ff80 R09: 0000000000000008 R10: 0000000000000008 R11: 0000000000000202 R12: 0000000020005600 R13: 00007fe8b0b3ff40 R14: 00000000000055a3 R15: 0000000020000240