rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21321/1:b..l P21324/1:b..l rcu: (detected by 0, t=10502 jiffies, g=88281, q=1002 ncpus=1) task:syz.1.6760 state:R running task stack:27160 pid:21324 tgid:21323 ppid:5599 task_flags:0x40044c flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 preempt_schedule_common+0x3c/0xb0 kernel/sched/core.c:7449 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x16b0/0x48e0 mm/memory.c:2240 unmap_vmas+0x299/0x5f0 mm/memory.c:2309 exit_mmap+0x1ef/0xa00 mm/mmap.c:1315 __mmput+0x12a/0x410 kernel/fork.c:1193 mmput+0x67/0x80 kernel/fork.c:1216 exit_mm kernel/exit.c:614 [inline] do_exit+0x8b1/0x2ae0 kernel/exit.c:996 do_group_exit+0xd5/0x2a0 kernel/exit.c:1151 get_signal+0x1ec7/0x21e0 kernel/signal.c:3039 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f330759e159 RSP: 002b:00007f33084360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f3307825fa8 RCX: 00007f330759e159 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3307825fa8 RBP: 00007f3307825fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3307826038 R14: 00007ffc5f1d8f20 R15: 00007ffc5f1d9008 task:syz.2.6759 state:R running task stack:26328 pid:21321 tgid:21321 ppid:5610 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7592 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:write_comp_data+0x47/0xa0 kernel/kcov.c:242 Code: 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 3c 17 00 00 85 c0 74 4f 8b 87 10 17 00 00 <83> f8 03 75 44 48 8b 87 18 17 00 00 8b bf 14 17 00 00 48 8b 30 48 RSP: 0018:ffffc90003dc7330 EFLAGS: 00000246 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8289cb9c RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880553aa580 RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000001 R10: 0000000000000008 R11: 0000000000000001 R12: ffff88801e9b9400 R13: 0000000006f40500 R14: 0000000000000008 R15: ffff88801e9b9408 page_ext_iter_next include/linux/page_ext.h:158 [inline] __update_page_owner_free_handle.isra.0+0x26c/0x4b0 mm/page_owner.c:302 __reset_page_owner+0x93/0x190 mm/page_owner.c:339 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x269/0x6a0 mm/slub.c:5010 mt_alloc_one lib/maple_tree.c:139 [inline] mas_alloc_nodes lib/maple_tree.c:1086 [inline] mas_preallocate+0xc22/0xee0 lib/maple_tree.c:5057 vma_iter_prealloc mm/vma.h:665 [inline] __split_vma+0x2f8/0x1de0 mm/vma.c:573 split_vma mm/vma.c:643 [inline] vma_modify+0x137b/0x29b0 mm/vma.c:1779 vma_modify_flags+0x2c3/0x460 mm/vma.c:1799 mprotect_fixup+0x27a/0xe00 mm/mprotect.c:824 do_mprotect_pkey+0xa51/0xdd0 mm/mprotect.c:1002 __do_sys_mprotect mm/mprotect.c:1023 [inline] __se_sys_mprotect mm/mprotect.c:1020 [inline] __x64_sys_mprotect+0x78/0xc0 mm/mprotect.c:1020 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f54e2b9df57 RSP: 002b:00007ffee409b9a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a RAX: ffffffffffffffda RBX: 00007f54e39a36c0 RCX: 00007f54e2b9df57 RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f54e3984000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffee409bb00 R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000