rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11553/1:b..l rcu: (detected by 0, t=10502 jiffies, g=236673, q=147 ncpus=2) task:syz.5.11532 state:R running task stack:22784 pid:11553 tgid:11552 ppid:10070 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x17fb/0x4be0 kernel/sched/core.c:6756 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:878 [inline] RIP: 0010:count_objcg_events+0x2f9/0x430 include/linux/memcontrol.h:1730 Code: f9 00 00 00 e8 18 a7 a5 ff 4d 85 ff 49 be 00 00 00 00 00 fc ff df 75 07 e8 04 a7 a5 ff eb 06 e8 fd a6 a5 ff fb 4c 8b 7c 24 18 e2 79 c6 09 89 c3 31 ff 89 c6 e8 27 ab a5 ff 85 db 74 10 e8 1e RSP: 0018:ffffc90004cae6e0 EFLAGS: 00000283 RAX: ffffffff81f9b6f3 RBX: 0000000000000000 RCX: 0000000000080000 RDX: ffffc9001e607000 RSI: 0000000000040f06 RDI: 0000000000040f07 RBP: ffffc90004cae7b8 R08: ffffffff81f9b6ca R09: 1ffffffff284db16 R10: dffffc0000000000 R11: fffffbfff284db17 R12: 1ffff92000995ce0 R13: ffffc90004cae720 R14: dffffc0000000000 R15: ffffffff81f9b499 swap_zeromap_folio_set mm/page_io.c:220 [inline] swap_writepage+0xb2f/0xce0 mm/page_io.c:268 shmem_writepage+0x1263/0x1630 mm/shmem.c:1575 pageout mm/vmscan.c:689 [inline] shrink_folio_list+0x35ee/0x57e0 mm/vmscan.c:1367 reclaim_folio_list+0x142/0x600 mm/vmscan.c:2143 reclaim_pages+0x49e/0x5e0 mm/vmscan.c:2180 madvise_cold_or_pageout_pte_range+0x1ea8/0x2360 mm/madvise.c:558 walk_pmd_range mm/pagewalk.c:130 [inline] walk_pud_range mm/pagewalk.c:226 [inline] walk_p4d_range mm/pagewalk.c:264 [inline] walk_pgd_range+0xc3d/0x17e0 mm/pagewalk.c:305 __walk_page_range+0x15f/0x700 mm/pagewalk.c:412 walk_page_range_mm+0x58f/0x7c0 mm/pagewalk.c:505 madvise_pageout_page_range mm/madvise.c:617 [inline] madvise_pageout mm/madvise.c:644 [inline] madvise_vma_behavior mm/madvise.c:1261 [inline] madvise_walk_vmas mm/madvise.c:1497 [inline] do_madvise+0x391c/0x4d10 mm/madvise.c:1684 __do_sys_madvise mm/madvise.c:1700 [inline] __se_sys_madvise mm/madvise.c:1698 [inline] __x64_sys_madvise+0xa6/0xc0 mm/madvise.c:1698 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f744637ff19 RSP: 002b:00007f74471dd058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 00007f7446545fa0 RCX: 00007f744637ff19 RDX: 0000000000000015 RSI: 000000000060000b RDI: 0000000020000000 RBP: 00007f74463f3cc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f7446545fa0 R15: 00007ffeaf7258a8 rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g236673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=257586 rcu: rcu_preempt kthread starved for 10500 jiffies! g236673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:25912 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x17fb/0x4be0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6848 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 2115 Comm: kworker/u8:0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: bat_events batadv_nc_worker RIP: 0010:hlock_class kernel/locking/lockdep.c:228 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4851 [inline] RIP: 0010:__lock_acquire+0x5bf/0x2100 kernel/locking/lockdep.c:5176 Code: 41 8b 1f 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 d8 26 94 be 08 00 00 00 e8 f9 8f 88 00 48 0f a3 1d b1 33 ac 12 <73> 22 48 69 c3 c8 00 00 00 48 8d 98 40 57 be 93 48 ba 00 00 00 00 RSP: 0018:ffffc90000a18a50 EFLAGS: 00000057 RAX: 0000000000000001 RBX: 000000000000006c RCX: ffffffff817aa4c7 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9426d888 RBP: 0000000000000002 R08: ffffffff9426d88f R09: 1ffffffff284db11 R10: dffffc0000000000 R11: fffffbfff284db12 R12: ffff88805e590ac4 R13: 000000000000000f R14: 1ffff1100bcb216f R15: ffff88805e590b78 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c34d3e3 CR3: 0000000031f62000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0xd3/0x120 kernel/locking/spinlock.c:170 __run_hrtimer kernel/time/hrtimer.c:1743 [inline] __hrtimer_run_queues+0x670/0xd30 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x110/0x420 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:116 [inline] RIP: 0010:lock_release+0xd0/0xa30 kernel/locking/lockdep.c:5862 Code: be 08 00 00 00 e8 f0 73 88 00 48 0f a3 1d 18 7a 9d 0e 73 16 e8 51 38 0a 00 84 c0 75 0d 80 3d fc af 87 0e 00 0f 84 fc 05 00 00 <48> c7 c0 80 6d 18 90 48 c1 e8 03 42 0f b6 04 38 84 c0 4c 8b 74 24 RSP: 0018:ffffc9000ca0fa20 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817ac0d0 RDX: 0000000000000000 RSI: ffffffff8c5ec2e0 RDI: ffffffff8c5ec2a0 RBP: ffffc9000ca0fb48 R08: ffffffff90183af7 R09: 1ffffffff203075e R10: dffffc0000000000 R11: fffffbfff203075f R12: 1ffff92001941f50 R13: ffffffff8b8b67db R14: ffff88807d674200 R15: dffffc0000000000 rcu_lock_release include/linux/rcupdate.h:347 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x28b/0x610 net/batman-adv/network-coding.c:719 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244