rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10658/1:b..l P10690/1:b..l rcu: (detected by 1, t=10502 jiffies, g=34033, q=183 ncpus=2) task:syz-executor state:R running task stack:28872 pid:10690 tgid:10690 ppid:5807 task_flags:0x400040 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:unwind_next_frame+0x611/0x20a0 arch/x86/kernel/unwind_orc.c:517 Code: 05 0f 85 cf 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 0f 16 00 00 48 89 c8 4d 8b 7d 38 <48> ba 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 34 10 48 8d 41 01 RSP: 0018:ffffc9000c327628 EFLAGS: 00000246 RAX: ffffffff915103c8 RBX: 0000000000000001 RCX: ffffffff915103c8 RDX: 1ffff92001864eda RSI: 0000000000000001 RDI: ffffffff90bb4698 RBP: ffffc9000c3276e0 R08: ffffffff915103cc R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000038f92 R12: ffffc9000c3276e8 R13: ffffc9000c327698 R14: 0000000000000005 R15: ffffc9000c327b58 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4327 [inline] __kmalloc_noprof+0x223/0x510 mm/slub.c:4339 kmalloc_noprof include/linux/slab.h:909 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] tomoyo_encode2+0x100/0x3e0 security/tomoyo/realpath.c:45 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x18f/0x6e0 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x274/0x460 security/tomoyo/file.c:822 tomoyo_path_symlink+0x97/0xe0 security/tomoyo/tomoyo.c:212 security_path_symlink+0x152/0x2e0 security/security.c:1984 do_symlinkat+0x10d/0x310 fs/namei.c:4747 __do_sys_symlinkat fs/namei.c:4765 [inline] __se_sys_symlinkat fs/namei.c:4762 [inline] __x64_sys_symlinkat+0x93/0xc0 fs/namei.c:4762 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd6d718dee7 RSP: 002b:00007ffd3c5d2668 EFLAGS: 00000202 ORIG_RAX: 000000000000010a RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6d718dee7 RDX: 00007fd6d7212308 RSI: 00000000ffffff9c RDI: 00007ffd3c5d2700 RBP: 00007ffd3c5d26ac R08: 0000000000000017 R09: 00007ffd3c5d23b7 R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000fc R13: 00000000000927c0 R14: 0000000000067a1b R15: 00007ffd3c5d2700 task:syz.2.1161 state:R running task stack:26312 pid:10658 tgid:10656 ppid:5808 task_flags:0x40044c flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_notrace+0x62/0xe0 kernel/sched/core.c:7040 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x8e/0xc0 kernel/rcu/tree.c:737 rcu_read_unlock include/linux/rcupdate.h:869 [inline] class_rcu_destructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xa92/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1258 [inline] free_unref_folios+0x999/0x1630 mm/page_alloc.c:2778 folios_put_refs+0x56f/0x740 mm/swap.c:992 free_pages_and_swap_cache+0x245/0x4a0 mm/swap_state.c:267 __tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136 tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:397 [inline] tlb_flush_mmu+0xe9/0x590 mm/mmu_gather.c:404 zap_pte_range mm/memory.c:1770 [inline] zap_pmd_range mm/memory.c:1823 [inline] zap_pud_range mm/memory.c:1852 [inline] zap_p4d_range mm/memory.c:1873 [inline] unmap_page_range+0x1ed6/0x4390 mm/memory.c:1894 unmap_single_vma+0x194/0x2a0 mm/memory.c:1940 unmap_vmas+0x22c/0x490 mm/memory.c:1984 exit_mmap+0x1b9/0xb90 mm/mmap.c:1284 __mmput+0x12a/0x410 kernel/fork.c:1380 mmput+0x62/0x70 kernel/fork.c:1402 exit_mm kernel/exit.c:589 [inline] do_exit+0x9d1/0x2c30 kernel/exit.c:940 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102 get_signal+0x2673/0x26d0 kernel/signal.c:3034 arch_do_signal_or_restart+0x8f/0x7d0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x260 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f30a298e969 RSP: 002b:00007f30a37ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: 0000000000010106 RBX: 00007f30a2bb6080 RCX: 00007f30a298e969 RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 RBP: 00007f30a2a10ab1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f30a2bb6080 R15: 00007ffe2871be58 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g34033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=25506 rcu: rcu_preempt kthread starved for 10502 jiffies! g34033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2046 rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2248 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 kernel/kcov.c:235 Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 85 d2 b4 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000007df8 EFLAGS: 00000046 RAX: 0000000080010002 RBX: ffff8880599ad340 RCX: ffffffff8b695a58 RDX: ffffffff8e097740 RSI: ffffffff8b695a66 RDI: 0000000000000006 RBP: ffff8880599ad340 R08: 0000000000000006 R09: ffff8880599ad340 R10: ffff8880599ad340 R11: ffffffff9acfe850 R12: ffff8880b8427840 R13: 0000000000000000 R14: ffff8880599ad340 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2ed1fffc CR3: 000000001bbd9000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: timerqueue_add+0x56/0x330 lib/timerqueue.c:40 __run_hrtimer kernel/time/hrtimer.c:1778 [inline] __hrtimer_run_queues+0x8ff/0xad0 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x397/0x8e0 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x108/0x3f0 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:81 Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 RAX: 00000000015a2b3f RBX: 0000000000000000 RCX: ffffffff8b6d3419 RDX: 0000000000000000 RSI: ffffffff8dbe41e5 RDI: ffffffff8bf4a220 RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff8e097740 R14: ffffffff90852e10 R15: 0000000000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:748 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x391/0x510 kernel/sched/idle.c:325 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423 rest_init+0x16b/0x2b0 init/main.c:743 start_kernel+0x3e9/0x4d0 init/main.c:1099 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:513 x86_64_start_kernel+0xb0/0xc0 arch/x86/kernel/head64.c:494 common_startup_64+0x13e/0x148