Memory cgroup stats for /syz1: cache:216KB rss:177760KB rss_huge:110592KB shmem:132KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:16KB active_anon:177964KB inactive_file:0KB active_file:0KB unevictable:0KB Memory cgroup out of memory: Kill process 18325 (syz-executor.1) score 1110 or sacrifice child Killed process 18325 (syz-executor.1) total-vm:74700kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=254261, q=414) rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295119627-4295109125), jiffies_till_next_fqs=1, root ->qsmask 0x0 syz-executor.1 R running task 25304 1219 8505 0x80000002 Call Trace: sched_show_task kernel/sched/core.c:5338 [inline] sched_show_task.cold+0x2ee/0x35d kernel/sched/core.c:5313 print_other_cpu_stall kernel/rcu/tree.c:1430 [inline] check_cpu_stall kernel/rcu/tree.c:1557 [inline] __rcu_pending kernel/rcu/tree.c:3293 [inline] rcu_pending kernel/rcu/tree.c:3336 [inline] rcu_check_callbacks.cold+0xab0/0xdbb kernel/rcu/tree.c:2682 update_process_times+0x32/0x80 kernel/time/timer.c:1638 tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:168 tick_sched_timer+0x47/0x130 kernel/time/tick-sched.c:1278 __run_hrtimer kernel/time/hrtimer.c:1401 [inline] __hrtimer_run_queues+0x33b/0xdc0 kernel/time/hrtimer.c:1463 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1521 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline] smp_apic_timer_interrupt+0x111/0x550 arch/x86/kernel/apic/apic.c:1092 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:lock_release+0x47a/0xa30 kernel/locking/lockdep.c:3925 Code: 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 a7 03 00 00 48 83 3d 3d fa 9f 07 00 0f 84 65 02 00 00 48 8b bd 68 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 c7 04 03 00 00 00 RSP: 0000:ffff888017466e10 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff11e4ae9 RBX: 1ffff11002e8cdc8 RCX: 1ffff11013f86dde RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000282 RBP: ffff888017466ec8 R08: ffff88809fc36680 R09: 0000000000000003 R10: ffffed1015d24732 R11: ffff8880ae923993 R12: ffff88809fc36680 R13: ffffffff81a7c544 R14: 0000000000000003 R15: ffff888017466ea0 rcu_lock_release include/linux/rcupdate.h:247 [inline] rcu_read_unlock_sched include/linux/rcupdate.h:762 [inline] percpu_ref_put_many+0xac/0x190 include/linux/percpu-refcount.h:286 percpu_ref_put include/linux/percpu-refcount.h:300 [inline] css_put include/linux/cgroup.h:392 [inline] mem_cgroup_iter+0x907/0xac0 mm/memcontrol.c:1009 shrink_node+0x402/0x1450 mm/vmscan.c:2760 shrink_zones mm/vmscan.c:2966 [inline] do_try_to_free_pages+0x3cb/0x11c0 mm/vmscan.c:3024 try_to_free_mem_cgroup_pages+0x32b/0x920 mm/vmscan.c:3322 try_charge+0x51d/0x1490 mm/memcontrol.c:2262 mem_cgroup_try_charge+0x259/0x6b0 mm/memcontrol.c:5991 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:6006 wp_page_copy+0x430/0x16a0 mm/memory.c:2520 do_wp_page+0x57d/0x10b0 mm/memory.c:2799 handle_pte_fault mm/memory.c:4057 [inline] __handle_mm_fault+0x2305/0x3f80 mm/memory.c:4165 handle_mm_fault+0x1b5/0x690 mm/memory.c:4202 __do_page_fault+0x62a/0xe90 arch/x86/mm/fault.c:1390 do_page_fault+0x71/0x57d arch/x86/mm/fault.c:1465 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1204 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 arch/x86/lib/copy_user_64.S:181 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 RSP: 0000:ffff888017467ab8 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 RDX: 0000000000001000 RSI: ffff88804509eb00 RDI: 0000000020803000 RBP: ffff888017467af0 R08: ffffed1008a13e00 R09: 0000000000000000 R10: ffffed1008a13dff R11: ffff88804509efff R12: 0000000020802500 R13: ffff88804509e000 R14: 0000000020803500 R15: 00007ffffffff000 copy_page_to_iter_iovec lib/iov_iter.c:206 [inline] copy_page_to_iter+0x329/0xd50 lib/iov_iter.c:853 pipe_to_user+0xb4/0x170 fs/splice.c:1251 splice_from_pipe_feed fs/splice.c:503 [inline] __splice_from_pipe+0x391/0x7d0 fs/splice.c:627 vmsplice_to_user fs/splice.c:1275 [inline] do_vmsplice.part.0+0x249/0x2b0 fs/splice.c:1353 do_vmsplice fs/splice.c:1347 [inline] __do_sys_vmsplice+0x1b9/0x210 fs/splice.c:1374 __se_sys_vmsplice fs/splice.c:1356 [inline] __x64_sys_vmsplice+0x97/0xf0 fs/splice.c:1356 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45c6c9 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc38691bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 RAX: ffffffffffffffda RBX: 00007fc38691c6d4 RCX: 000000000045c6c9 RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 RBP: 000000000076c070 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000c17 R14: 00000000004ce268 R15: 000000000076c07c rcu: rcu_preempt kthread starved for 10502 jiffies! g254261 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: RCU grace-period kthread stack dump: rcu_preempt I29088 10 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3515 preempt_schedule_common+0x4f/0xe0 kernel/sched/core.c:3639 preempt_schedule+0x4b/0x60 kernel/sched/core.c:3665 ___preempt_schedule+0x16/0x18 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] _raw_spin_unlock_irqrestore+0xbd/0xe0 kernel/locking/spinlock.c:184 prepare_to_swait_event+0x12c/0x370 kernel/sched/swait.c:107 rcu_gp_kthread+0xd65/0x21c0 kernel/rcu/tree.c:2202 kthread+0x354/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 sched: RT throttling activated