rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11482/1:b..l P11484/1:b..l P11422/1:b..l P11427/1:b..l rcu: (detected by 0, t=10503 jiffies, g=54593, q=498 ncpus=2) task:syz-executor.3 state:R running task stack:24664 pid:11427 tgid:11427 ppid:10431 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6925 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6949 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1674 [inline] zap_pmd_range mm/memory.c:1722 [inline] zap_pud_range mm/memory.c:1751 [inline] zap_p4d_range mm/memory.c:1772 [inline] unmap_page_range+0x3dac/0x4870 mm/memory.c:1793 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1883 exit_mmap+0x2cb/0xd60 mm/mmap.c:3267 __mmput+0x115/0x3c0 kernel/fork.c:1346 exit_mm+0x220/0x310 kernel/exit.c:569 do_exit+0x99e/0x27e0 kernel/exit.c:865 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 __do_sys_exit_group kernel/exit.c:1038 [inline] __se_sys_exit_group kernel/exit.c:1036 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7146e7dea9 RSP: 002b:00007ffd95df2d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f7146e7dea9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 00000000000006b0 R09: 0000000000000000 R10: 0000001b2f620000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 task:syz-executor.4 state:R running task stack:24112 pid:11422 tgid:11419 ppid:10521 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6925 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6949 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1674 [inline] zap_pmd_range mm/memory.c:1722 [inline] zap_pud_range mm/memory.c:1751 [inline] zap_p4d_range mm/memory.c:1772 [inline] unmap_page_range+0x3dac/0x4870 mm/memory.c:1793 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1883 exit_mmap+0x2cb/0xd60 mm/mmap.c:3267 __mmput+0x115/0x3c0 kernel/fork.c:1346 exit_mm+0x220/0x310 kernel/exit.c:569 do_exit+0x99e/0x27e0 kernel/exit.c:865 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 get_signal+0x16a1/0x1740 kernel/signal.c:2911 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f198ec7dea9 RSP: 002b:00007f198fa4f178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f198edabf88 RCX: 00007f198ec7dea9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f198edabf88 RBP: 00007f198edabf80 R08: 00007f198fa4f6c0 R09: 00007f198fa4f6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f198edabf8c R13: 000000000000000b R14: 00007ffd26296e90 R15: 00007ffd26296f78 task:syz-executor.2 state:R running task stack:23696 pid:11484 tgid:11483 ppid:5117 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7068 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:104 [inline] RIP: 0010:lock_is_held_type+0x6e/0x190 kernel/locking/lockdep.c:5821 Code: 2c 25 c0 d3 03 00 41 83 bd d4 0a 00 00 00 0f 85 da 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 4c 8b 24 24 48 c7 c7 80 c5 ca 8b e8 55 1b 00 00 65 ff 05 2e 49 82 74 41 83 RSP: 0018:ffffc90009a5f578 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000000 RDX: ffffc9000a476000 RSI: 00000000ffffffff RDI: ffffffff8e3623c8 RBP: ffffc90009a5f6a8 R08: ffffffff81e2a179 R09: 1ffffffff25e6aa0 R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: 0000000000000246 R13: ffff8880300a5a00 R14: 00000000ffffffff R15: ffffffff8e3623c8 lock_is_held include/linux/lockdep.h:231 [inline] task_css include/linux/cgroup.h:434 [inline] mem_cgroup_from_task+0x62/0x120 mm/memcontrol.c:1056 count_memcg_event_mm+0x195/0x420 include/linux/memcontrol.h:1119 mm_account_fault mm/memory.c:5475 [inline] handle_mm_fault+0x4cc/0x8a0 mm/memory.c:5622 do_user_addr_fault arch/x86/mm/fault.c:1413 [inline] handle_page_fault arch/x86/mm/fault.c:1505 [inline] exc_page_fault+0x2a8/0x8e0 arch/x86/mm/fault.c:1563 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0010:fault_in_readable+0x165/0x2b0 mm/gup.c:2009 Code: b6 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 a5 1b b6 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 RSP: 0018:ffffc90009a5f840 EFLAGS: 00050287 RAX: ffffffff81dff67b RBX: 000000002002c000 RCX: 0000000000040000 RDX: ffffc9000a476000 RSI: 000000000000fdfa RDI: 000000000000fdfb RBP: ffffc90009a5f8f8 R08: ffffffff81dff618 R09: ffffffff84acfb69 R10: 0000000000000002 R11: ffff8880300a5a00 R12: 0000000000001000 R13: dffffc0000000000 R14: 000000002002d000 R15: 1ffff9200134bf10 fault_in_iov_iter_readable+0x229/0x280 lib/iov_iter.c:94 generic_perform_write+0x220/0x640 mm/filemap.c:3964 ext4_buffered_write_iter+0xc6/0x350 fs/ext4/file.c:299 ext4_file_write_iter+0x1de/0x1a10 call_write_iter include/linux/fs.h:2110 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa86/0xcb0 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9757e7dea9 RSP: 002b:00007f9758b980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f9757fabf80 RCX: 00007f9757e7dea9 RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000009 RBP: 00007f9757eca4a4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f9757fabf80 R15: 00007ffce442bfd8 task:syz-executor.0 state:R running task stack:25752 pid:11482 tgid:11481 ppid:11024 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6925 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6949 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1674 [inline] zap_pmd_range mm/memory.c:1722 [inline] zap_pud_range mm/memory.c:1751 [inline] zap_p4d_range mm/memory.c:1772 [inline] unmap_page_range+0x3dac/0x4870 mm/memory.c:1793 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1883 exit_mmap+0x2cb/0xd60 mm/mmap.c:3267 __mmput+0x115/0x3c0 kernel/fork.c:1346 exit_mm+0x220/0x310 kernel/exit.c:569 do_exit+0x99e/0x27e0 kernel/exit.c:865 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 get_signal+0x16a1/0x1740 kernel/signal.c:2911 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2a2dc7dea9 RSP: 002b:00007f2a2e995178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f2a2ddabf88 RCX: 00007f2a2dc7dea9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a2ddabf88 RBP: 00007f2a2ddabf80 R08: 00007f2a2e9956c0 R09: 00007f2a2e9956c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a2ddabf8c R13: 000000000000000b R14: 00007ffe487d88e0 R15: 00007ffe487d89c8 rcu: rcu_preempt kthread starved for 10671 jiffies! g54593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24496 pid:16 tgid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6838 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2582 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:1663 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1862 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 11480 Comm: syz-executor.5 Not tainted 6.9.0-rc6-syzkaller-00053-g0106679839f7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__lock_acquire+0x139b/0x1fd0 kernel/locking/lockdep.c:5144 Code: 40 02 10 48 8b 5c 24 28 75 50 48 8b 44 24 38 80 3c 10 00 74 12 48 89 df e8 62 0a 88 00 48 ba 00 00 00 00 00 fc ff df 48 89 2b <48> 8b 44 24 40 0f b6 04 10 84 c0 0f 85 84 09 00 00 48 8b 0c 24 8b RSP: 0018:ffffc9000991f5f0 EFLAGS: 00000046 RAX: 1ffff1100d21fc99 RBX: ffff8880690fe4c8 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff92f35500 RBP: eda6c846b68f3cf5 R08: ffffffff92f35507 R09: 1ffffffff25e6aa0 R10: dffffc0000000000 R11: fffffbfff25e6aa1 R12: ffff8880690fda00 R13: ffff8880690fda00 R14: 0000000000000000 R15: ffff8880690fda00 FS: 00007f7671b306c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7671b2ff00 CR3: 0000000061392000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 debug_object_activate+0x16d/0x510 lib/debugobjects.c:708 debug_hrtimer_activate kernel/time/hrtimer.c:423 [inline] debug_activate kernel/time/hrtimer.c:478 [inline] enqueue_hrtimer+0x30/0x3c0 kernel/time/hrtimer.c:1090 __hrtimer_start_range_ns kernel/time/hrtimer.c:1265 [inline] hrtimer_start_range_ns+0xaa0/0xc60 kernel/time/hrtimer.c:1305 posixtimer_rearm+0x1b4/0x3f0 kernel/time/posix-timers.c:267 dequeue_signal+0x249/0x5a0 kernel/signal.c:696 get_signal+0x602/0x1740 kernel/signal.c:2790 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x102/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7670e7dea7 Code: 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 RSP: 002b:00007f7671b300c8 EFLAGS: 00000246 RAX: 00000000000000ca RBX: 00007f7670fac050 RCX: 00007f7670e7dea9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002000cffc RBP: 00007f7670eca4a4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f7670fac050 R15: 00007ffd0792aec8 sched: RT throttling activated