rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (0 ticks this GP) idle=642c/1/0x4000000000000000 softirq=49815/49815 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12243/3:b..l P5835/1:b..l rcu: (detected by 1, t=10506 jiffies, g=47997, q=197 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:memory_is_nonzero mm/kasan/generic.c:103 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x64/0x1a0 mm/kasan/generic.c:189 Code: 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da 48 29 ea <48> 83 fa 10 0f 8e 8d 00 00 00 41 89 eb 41 83 e3 07 0f 85 9a 00 00 RSP: 0018:ffffc900000079c0 EFLAGS: 00000002 RAX: fffffbfff2dc55b8 RBX: fffffbfff2dc55b9 RCX: ffffffff8169b6be RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96e2adc0 RBP: fffffbfff2dc55b8 R08: 0000000000000000 R09: fffffbfff2dc55b8 R10: ffffffff96e2adc7 R11: 0000000000000000 R12: ffff88801eba8000 R13: 0000000000000001 R14: 0000000000000000 R15: 1ffff92000000f44 FS: 000055558e803500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8b23d0b338 CR3: 000000006399e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4703 mark_usage kernel/locking/lockdep.c:4611 [inline] __lock_acquire+0x142d/0x3ce0 kernel/locking/lockdep.c:5156 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5825 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] advance_sched+0xd8/0xc60 net/sched/sch_taprio.c:924 __run_hrtimer kernel/time/hrtimer.c:1691 [inline] __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1755 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1817 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:trace_lock_acquire+0x46/0x1d0 include/trace/events/lock.h:24 Code: 07 0f 87 5a 01 00 00 89 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 88 50 5f 90 e8 12 57 85 00 48 0f a3 1d c2 a1 f5 0e <0f> 82 f9 00 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc RSP: 0018:ffffc90003bc76a8 EFLAGS: 00000247 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8169aebe RDX: fffffbfff20bea12 RSI: 0000000000000008 RDI: ffffffff905f5088 RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20bea11 R10: ffffffff905f508f R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 lock_acquire+0x2f/0xb0 kernel/locking/lockdep.c:5796 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock_sched include/linux/rcupdate.h:941 [inline] pfn_valid include/linux/mmzone.h:2043 [inline] vmap_pages_pte_range mm/vmalloc.c:507 [inline] vmap_pages_pmd_range mm/vmalloc.c:529 [inline] vmap_pages_pud_range mm/vmalloc.c:547 [inline] vmap_pages_p4d_range mm/vmalloc.c:565 [inline] vmap_small_pages_range_noflush+0x56e/0xd30 mm/vmalloc.c:587 __vmap_pages_range_noflush+0x1b1/0x1d0 mm/vmalloc.c:616 vmap_pages_range_noflush mm/vmalloc.c:641 [inline] vmap_pages_range mm/vmalloc.c:661 [inline] __vmalloc_area_node mm/vmalloc.c:3690 [inline] __vmalloc_node_range_noprof+0xbb8/0x15a0 mm/vmalloc.c:3828 __vmalloc_node_noprof mm/vmalloc.c:3893 [inline] vzalloc_noprof+0x6b/0x90 mm/vmalloc.c:3966 alloc_counters net/ipv4/netfilter/ip_tables.c:799 [inline] copy_entries_to_user net/ipv4/netfilter/ip_tables.c:821 [inline] get_entries net/ipv4/netfilter/ip_tables.c:1022 [inline] do_ipt_get_ctl+0x6b8/0xaa0 net/ipv4/netfilter/ip_tables.c:1668 nf_getsockopt+0x79/0xe0 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x18e/0x1e0 net/ipv4/ip_sockglue.c:1777 tcp_getsockopt+0x9e/0x100 net/ipv4/tcp.c:4670 do_sock_getsockopt+0x3fe/0x800 net/socket.c:2396 __sys_getsockopt+0x1a1/0x270 net/socket.c:2425 __do_sys_getsockopt net/socket.c:2435 [inline] __se_sys_getsockopt net/socket.c:2432 [inline] __x64_sys_getsockopt+0xbd/0x160 net/socket.c:2432 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8b23b8045a Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 RSP: 002b:00007ffc700735a8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ffc70073630 RCX: 00007f8b23b8045a RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007ffc700735cc R09: 0079746972756365 R10: 00007ffc70073630 R11: 0000000000000216 R12: 00007f8b23d0b940 R13: 00007ffc700735cc R14: 0000000000000000 R15: 00007f8b23d0c000 task:syz-executor state:R running task stack:23152 pid:5835 tgid:5835 ppid:5819 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5730 kernel/sched/core.c:6690 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6869 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] copy_pte_range mm/memory.c:1194 [inline] copy_pmd_range mm/memory.c:1255 [inline] copy_pud_range mm/memory.c:1292 [inline] copy_p4d_range mm/memory.c:1316 [inline] copy_page_range+0x100b/0x4f40 mm/memory.c:1414 dup_mmap kernel/fork.c:750 [inline] dup_mm kernel/fork.c:1674 [inline] copy_mm kernel/fork.c:1723 [inline] copy_process+0x82f9/0x8cb0 kernel/fork.c:2372 kernel_clone+0xfd/0x960 kernel/fork.c:2784 __do_sys_clone+0xba/0x100 kernel/fork.c:2927 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8a88b74f93 RSP: 002b:00007fff4d6a55d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a88b74f93 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000555564d427d0 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000007f4b7 R14: 000000000007f496 R15: 00007fff4d6a5760 task:syz.3.1689 state:R running task stack:25936 pid:12243 tgid:12242 ppid:5826 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5730 kernel/sched/core.c:6690 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6869 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] filemap_map_pages+0xe4e/0x16a0 mm/filemap.c:3688 do_fault_around mm/memory.c:5244 [inline] do_read_fault mm/memory.c:5277 [inline] do_fault mm/memory.c:5420 [inline] do_pte_missing+0xd91/0x3e50 mm/memory.c:3965 handle_pte_fault mm/memory.c:5755 [inline] __handle_mm_fault+0x100a/0x2a10 mm/memory.c:5898 handle_mm_fault+0x3fa/0xaa0 mm/memory.c:6066 faultin_page mm/gup.c:1187 [inline] __get_user_pages+0x8d9/0x3b50 mm/gup.c:1485 populate_vma_page_range+0x27f/0x3a0 mm/gup.c:1923 __mm_populate+0x1d6/0x380 mm/gup.c:2026 mm_populate include/linux/mm.h:3371 [inline] vm_mmap_pgoff+0x293/0x360 mm/util.c:593 ksys_mmap_pgoff+0x7d/0x5c0 mm/mmap.c:542 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:86 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:79 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:79 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9d4597e719 RSP: 002b:00007f9d46787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f9d45b35f80 RCX: 00007f9d4597e719 RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 RBP: 00007f9d459f132e R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f9d45b35f80 R15: 00007fff4def8bd8 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g47997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=32531 rcu: rcu_preempt kthread starved for 10506 jiffies! g47997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27504 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5730 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244