rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10005/1:b..l P9995/1:b..l P9992/1:b..l rcu: (detected by 0, t=10502 jiffies, g=53673, q=222 ncpus=2) task:syz-executor.0 state:R running task stack:25904 pid:9992 tgid:9990 ppid:5112 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6924 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] wp_page_copy mm/memory.c:3392 [inline] do_wp_page+0x1554/0x3340 mm/memory.c:3683 handle_pte_fault mm/memory.c:5396 [inline] __handle_mm_fault+0x2311/0x53f0 mm/memory.c:5523 handle_mm_fault+0x476/0xa00 mm/memory.c:5688 do_user_addr_fault+0x2e5/0xe50 arch/x86/mm/fault.c:1389 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71 Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 RSP: 0000:ffffc900033cf958 EFLAGS: 00050206 RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 RDX: 0000000000000000 RSI: ffff888012e77180 RDI: 00000000200d6000 RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed10025cefff R10: ffff888012e77fff R11: 0000000000000000 R12: 00000000000d5b80 R13: ffffc900033cfd50 R14: ffff888012e77000 R15: 00000000200d5e80 copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline] copy_to_user_iter lib/iov_iter.c:25 [inline] iterate_iovec include/linux/iov_iter.h:51 [inline] iterate_and_advance2 include/linux/iov_iter.h:247 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x4d2/0x1140 lib/iov_iter.c:185 copy_page_to_iter lib/iov_iter.c:362 [inline] copy_page_to_iter+0xf1/0x180 lib/iov_iter.c:349 process_vm_rw_pages mm/process_vm_access.c:45 [inline] process_vm_rw_single_vec mm/process_vm_access.c:118 [inline] process_vm_rw_core.constprop.0+0x5c9/0xa10 mm/process_vm_access.c:216 process_vm_rw+0x301/0x360 mm/process_vm_access.c:284 __do_sys_process_vm_readv mm/process_vm_access.c:296 [inline] __se_sys_process_vm_readv mm/process_vm_access.c:292 [inline] __x64_sys_process_vm_readv+0xe2/0x1c0 mm/process_vm_access.c:292 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faac3e7cea9 RSP: 002b:00007faac4b9e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 RAX: ffffffffffffffda RBX: 00007faac3fb3f80 RCX: 00007faac3e7cea9 RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000367 RBP: 00007faac3eebff4 R08: 0000000000000286 R09: 0000000000000000 R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007faac3fb3f80 R15: 00007ffde97e7c38 task:syz-executor.2 state:R running task stack:25808 pid:9995 tgid:9995 ppid:8330 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7067 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:709 RIP: 0010:lock_acquire+0x1f2/0x560 kernel/locking/lockdep.c:5722 Code: c1 05 3a af 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0000:ffffc900034cfd70 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff92000699fb0 RCX: 000000000164051f RDX: 0000000000000001 RSI: ffffffff8b2cb260 RDI: ffffffff8b900680 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284dc58 R10: ffffffff9426e2c7 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8dbb1920 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock include/linux/rcupdate.h:781 [inline] count_memcg_event_mm.part.0+0x37/0x340 include/linux/memcontrol.h:1074 count_memcg_event_mm include/linux/memcontrol.h:580 [inline] mm_account_fault mm/memory.c:5557 [inline] handle_mm_fault+0x1b8/0xa00 mm/memory.c:5704 do_user_addr_fault+0x426/0xe50 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fb800e2afe6 RSP: 002b:00007fffccfbc5a8 EFLAGS: 00010287 RAX: 0000001b32f42000 RBX: 00007fb7ffe01498 RCX: 0000001b32f20000 RDX: 0000001b32f41ffc RSI: 00007fb7ffe1d5c8 RDI: ffffffff8178b3a2 RBP: 00007fb800fb41b8 R08: 0000001b33520000 R09: 000000008ae7fe86 R10: 0000000000000000 R11: 000000008ae7fe86 R12: 0000000000000792 R13: 0000001b32f3fc24 R14: 00007fb7ffe04c98 R15: 00007fb800fb41b8 task:syz-executor.0 state:R running task stack:29136 pid:10005 tgid:9990 ppid:5112 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7067 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x1f2/0x560 kernel/locking/lockdep.c:5722 Code: c1 05 3a af 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc9000340fa78 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff92000681f51 RCX: 00000000d439196c RDX: 0000000000000001 RSI: ffffffff8b2cb260 RDI: ffffffff8b900680 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284dc58 R10: ffffffff9426e2c7 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8dbb1920 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock include/linux/rcupdate.h:781 [inline] generic_map_lookup_batch+0x50c/0xb90 kernel/bpf/syscall.c:1956 bpf_map_do_batch+0x2c1/0x720 kernel/bpf/syscall.c:5193 __sys_bpf+0x475d/0x49a0 kernel/bpf/syscall.c:5745 __do_sys_bpf kernel/bpf/syscall.c:5795 [inline] __se_sys_bpf kernel/bpf/syscall.c:5793 [inline] __x64_sys_bpf+0x78/0xc0 kernel/bpf/syscall.c:5793 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faac3e7cea9 RSP: 002b:00007faac4b7d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007faac3fb4050 RCX: 00007faac3e7cea9 RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 RBP: 00007faac3eebff4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007faac3fb4050 R15: 00007ffde97e7c38 rcu: rcu_preempt kthread starved for 10472 jiffies! g53673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0xf15/0x5d00 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6837 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2000 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2202 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:113 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 b3 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 1f b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffffff8d807d70 EFLAGS: 00000246 RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae80889 RDX: 0000000000000001 RSI: ffff888019a97000 RDI: ffff888019a97064 RBP: ffff888019a97064 R08: 0000000000000001 R09: ffffed1017246fe5 R10: ffff8880b9237f2b R11: 0000000000000000 R12: ffff88801a352800 R13: ffffffff8e744e60 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000795b2000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: acpi_idle_enter+0xc5/0x160 drivers/acpi/processor_idle.c:707 cpuidle_enter_state+0x85/0x500 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388 cpuidle_idle_call kernel/sched/idle.c:236 [inline] do_idle+0x313/0x3f0 kernel/sched/idle.c:332 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 rest_init+0x16b/0x2b0 init/main.c:747 start_kernel+0x3df/0x4c0 init/main.c:1103 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x148