rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21065/1:b..l
(detected by 0, t=10502 jiffies, g=211625, q=5921)
task:syz-executor.1 state:R running task stack:20272 pid:21065 ppid: 1 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xb72/0x1460 kernel/sched/core.c:6253
preempt_schedule_common kernel/sched/core.c:6419 [inline]
preempt_schedule+0x14d/0x190 kernel/sched/core.c:6444
preempt_schedule_thunk+0x16/0x18
__raw_read_unlock include/linux/rwlock_api_smp.h:225 [inline]
_raw_read_unlock+0x36/0x40 kernel/locking/spinlock.c:260
zap_pid_ns_processes+0x2f3/0x610 kernel/pid_namespace.c:207
find_child_reaper kernel/exit.c:548 [inline]
forget_original_parent kernel/exit.c:637 [inline]
exit_notify kernel/exit.c:674 [inline]
do_exit+0x2261/0x24f0 kernel/exit.c:852
do_group_exit+0x168/0x2d0 kernel/exit.c:929
get_signal+0x1740/0x2120 kernel/signal.c:2852
arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fb43dcce337
RSP: 002b:00007ffca559d080 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 0000000000001bb7 RCX: 00007fb43dcce337
RDX: 0000000040000000 RSI: 00007ffca559d10c RDI: 00000000ffffffff
RBP: 00007ffca559d10c R08: 0000000000000000 R09: 00007fb43ddb5640
R10: 0000000000000000 R11: 0000000000000293 R12: 0000555557206810
R13: 000055555720686b R14: 0000000000000000 R15: 00007ffca559d170
rcu: rcu_preempt kthread timer wakeup didn't happen for 1041 jiffies! g211625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=0 timer-softirq=97824
rcu: rcu_preempt kthread starved for 1042 jiffies! g211625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:25656 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xb72/0x1460 kernel/sched/core.c:6253
schedule+0x12b/0x1f0 kernel/sched/core.c:6326
schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1955
rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2128
kthread+0x468/0x490 kernel/kthread.c:327
ret_from_fork+0x1f/0x30
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 12367 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_check_gp_kthread_starvation+0x1ff/0x270 kernel/rcu/tree_stall.h:481
print_other_cpu_stall kernel/rcu/tree_stall.h:586 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:729 [inline]
rcu_pending kernel/rcu/tree.c:3878 [inline]
rcu_sched_clock_irq+0x23d5/0x2bc0 kernel/rcu/tree.c:2597
update_process_times+0x197/0x200 kernel/time/timer.c:1785
tick_sched_handle kernel/time/tick-sched.c:226 [inline]
tick_sched_timer+0x27d/0x420 kernel/time/tick-sched.c:1428
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:lock_acquire+0x21f/0x4d0 kernel/locking/lockdep.c:5641
Code: 08 4c 89 f7 e8 02 71 6a 00 f6 84 24 81 00 00 00 02 0f 85 13 02 00 00 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 09 00 00 00 00 43 c7 44 2f 11
RSP: 0018:ffffc90025b070e0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92004b60e2c RCX: ffff8880947f6158
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90025b07240 R08: dffffc0000000000 R09: fffffbfff1ff39dd
R10: fffffbfff1ff39dd R11: 0000000000000000 R12: 0000000000000246
R13: 1ffff92004b60e24 R14: ffffc90025b07160 R15: dffffc0000000000
rcu_lock_acquire+0x20/0x30 include/linux/rcupdate.h:268
rcu_read_lock include/linux/rcupdate.h:688 [inline]
folio_memcg_lock+0x8e/0x4e0 mm/memcontrol.c:2010
page_remove_rmap+0x2b/0x10f0 mm/rmap.c:1348
zap_pte_range+0xa25/0x1ba0 mm/memory.c:1357
zap_pmd_range mm/memory.c:1467 [inline]
zap_pud_range mm/memory.c:1496 [inline]
zap_p4d_range mm/memory.c:1517 [inline]
unmap_page_range+0x745/0xa20 mm/memory.c:1538
unmap_vmas+0x202/0x390 mm/memory.c:1615
exit_mmap+0x3c6/0x6f0 mm/mmap.c:3170
__mmput+0x111/0x3a0 kernel/fork.c:1113
exit_mm+0x211/0x2f0 kernel/exit.c:507
do_exit+0x688/0x24f0 kernel/exit.c:819
do_group_exit+0x168/0x2d0 kernel/exit.c:929
get_signal+0x1740/0x2120 kernel/signal.c:2852
arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fb43dccfe99
Code: Unable to access opcode bytes at RIP 0x7fb43dccfe6f.
RSP: 002b:00007fb43c624168 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
RAX: fffffffffffffff4 RBX: 00007fb43dde3030 RCX: 00007fb43dccfe99
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007fb43dd29ff1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffca559ce4f R14: 00007fb43c624300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 08 4c 89 f7 or %cl,-0x9(%rcx,%rcx,4)
4: e8 02 71 6a 00 callq 0x6a710b
9: f6 84 24 81 00 00 00 testb $0x2,0x81(%rsp)
10: 02
11: 0f 85 13 02 00 00 jne 0x22a
17: 41 f7 c4 00 02 00 00 test $0x200,%r12d
1e: 74 01 je 0x21
20: fb sti
21: 48 c7 44 24 40 0e 36 movq $0x45e0360e,0x40(%rsp)
28: e0 45
* 2a: 4b c7 04 2f 00 00 00 movq $0x0,(%r15,%r13,1) <-- trapping instruction
31: 00
32: 43 c7 44 2f 09 00 00 movl $0x0,0x9(%r15,%r13,1)
39: 00 00
3b: 43 rex.XB
3c: c7 .byte 0xc7
3d: 44 2f rex.R (bad)
3f: 11 .byte 0x11