rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5103 rcu: (detected by 1, t=10502 jiffies, g=20521, q=407 ncpus=2) task:syz-fuzzer state:R running task stack:22048 pid:5103 tgid:5082 ppid:5080 flags:0x0000400e Call Trace: sched_show_task+0x578/0x740 kernel/sched/core.c:7432 rcu_print_detail_task_stall_rnp kernel/rcu/tree_stall.h:263 [inline] print_other_cpu_stall+0x11fe/0x15b0 kernel/rcu/tree_stall.h:644 check_cpu_stall kernel/rcu/tree_stall.h:810 [inline] rcu_pending kernel/rcu/tree.c:4338 [inline] rcu_sched_clock_irq+0xa2c/0x10d0 kernel/rcu/tree.c:2665 update_process_times+0x1ce/0x230 kernel/time/timer.c:2485 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x37c/0x500 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1687 [inline] __hrtimer_run_queues+0x551/0xd50 kernel/time/hrtimer.c:1751 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5066 Code: c9 50 e8 09 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 c0 14 32 0a e8 8b 2f 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc RSP: 0018:ffffc900035dee28 EFLAGS: 00000282 RAX: 497eaa7045f62900 RBX: ffff88807b1ada00 RCX: ffffffff8172caea RDX: dffffc0000000000 RSI: ffffffff8bcac1e0 RDI: ffffffff8c200e00 RBP: ffffc900035dee70 R08: ffffffff92fc96f7 R09: 1ffffffff25f92de R10: dffffc0000000000 R11: fffffbfff25f92df R12: 1ffff110172a7ec7 R13: dffffc0000000000 R14: ffff8880b943e8c0 R15: ffff8880b953f638 context_switch kernel/sched/core.c:5195 [inline] __schedule+0x17f0/0x4a20 kernel/sched/core.c:6529 preempt_schedule_notrace+0x100/0x140 kernel/sched/core.c:6801 preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk.S:13 rcu_lockdep_current_cpu_online+0x106/0x120 kernel/rcu/tree.c:4702 rcu_read_lock_held_common kernel/rcu/update.c:113 [inline] rcu_read_lock_held+0x1e/0x50 kernel/rcu/update.c:349 lookup_page_ext mm/page_ext.c:253 [inline] page_ext_get+0x192/0x2a0 mm/page_ext.c:522 __reset_page_owner+0x2f/0x3f0 mm/page_owner.c:290 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1089 [inline] free_unref_folios+0x103a/0x1b00 mm/page_alloc.c:2669 folios_put_refs+0x76e/0x860 mm/swap.c:1020 free_pages_and_swap_cache+0x2ea/0x690 mm/swap_state.c:332 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:366 [inline] tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373 tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465 zap_page_range_single+0x501/0x630 mm/memory.c:1934 madvise_dontneed_single_vma mm/madvise.c:846 [inline] madvise_dontneed_free mm/madvise.c:927 [inline] madvise_vma_behavior mm/madvise.c:1046 [inline] madvise_walk_vmas mm/madvise.c:1268 [inline] do_madvise+0x20a9/0x4590 mm/madvise.c:1464 __do_sys_madvise mm/madvise.c:1481 [inline] __se_sys_madvise mm/madvise.c:1479 [inline] __x64_sys_madvise+0xa6/0xc0 mm/madvise.c:1479 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x4734f7 Code: 10 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 RSP: 002b:000000c0008f9ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 0000000000200000 RCX: 00000000004734f7 RDX: 0000000000000004 RSI: 0000000000200000 RDI: 000000c002a00000 RBP: 000000c0008f9ef8 R08: 0000000000200000 R09: 0000000000000fff R10: 000000000147f120 R11: 0000000000000246 R12: 000080c002bfffff R13: 000000000147f160 R14: 000000c000891380 R15: 0000000000000003 rcu: rcu_preempt kthread starved for 10553 jiffies! g20521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5192 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:709 RIP: 0010:preempt_count_add+0x34/0x190 kernel/sched/core.c:5649 Code: fb 48 c7 c0 20 18 7c 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d ac 8b 16 13 00 <75> 07 65 8b 05 8b 49 9e 7e 65 01 1d 84 49 9e 7e 48 c7 c0 20 18 7c RSP: 0018:ffffc90000167b48 EFLAGS: 00000246 RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff947c1803 RDX: dffffc0000000000 RSI: ffffffff8bcac1e0 RDI: 0000000000000001 RBP: ffff888017698000 R08: ffffffff8fae026f R09: 1ffffffff1f5c04d R10: dffffc0000000000 R11: fffffbfff1f5c04e R12: dffffc0000000000 R13: 1ffff9200002cf74 R14: ffffffff8b971ed0 R15: dffffc0000000000 __schedule_loop kernel/sched/core.c:6605 [inline] schedule+0x144/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2029 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2231 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6743 Comm: syz-executor.4 Not tainted 6.10.0-rc2-next-20240607-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:check_kcov_mode kernel/kcov.c:175 [inline] RIP: 0010:write_comp_data kernel/kcov.c:236 [inline] RIP: 0010:__sanitizer_cov_trace_switch+0xbc/0x120 kernel/kcov.c:341 Code: c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 e4 6c 6d 7e a9 00 01 ff 00 74 11 a9 00 01 00 00 74 de 41 83 bb 1c 16 00 00 00 74 d4 <41> 8b 83 f8 15 00 00 83 f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb RSP: 0018:ffffc9000308f020 EFLAGS: 00000046 RAX: 0000000080000006 RBX: 0000000000000bf4 RCX: dffffc0000000000 RDX: 0000000000000011 RSI: ffffffff8e382a20 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000005 R09: ffffffff819a04d2 R10: 0000000000000020 R11: ffff888020a80000 R12: ffff888015086434 R13: 0000000000000424 R14: 0000000000000011 R15: 000000000019c744 FS: 00007efd953a06c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30b2b000 CR3: 0000000077f02000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: check_buffer+0x2c2/0xae0 kernel/trace/ring_buffer.c:3471 __rb_reserve_next kernel/trace/ring_buffer.c:3591 [inline] rb_reserve_next_event kernel/trace/ring_buffer.c:3723 [inline] ring_buffer_lock_reserve+0x11fc/0x2110 kernel/trace/ring_buffer.c:3782 __trace_buffer_lock_reserve kernel/trace/trace.c:1008 [inline] trace_event_buffer_lock_reserve+0x2ab/0x6a0 kernel/trace/trace.c:2715 trace_event_buffer_reserve+0x2b7/0x3f0 kernel/trace/trace_events.c:515 trace_event_raw_event_bpf_trace_printk+0x102/0x260 kernel/trace/./bpf_trace.h:11 trace_bpf_trace_printk+0x186/0x1f0 kernel/trace/./bpf_trace.h:11 ____bpf_trace_printk kernel/trace/bpf_trace.c:392 [inline] bpf_trace_printk+0x1bf/0x230 kernel/trace/bpf_trace.c:375 bpf_prog_0605f9f479290f07+0x37/0x3b bpf_dispatcher_nop_func include/linux/bpf.h:1243 [inline] __bpf_prog_run include/linux/filter.h:691 [inline] bpf_prog_run include/linux/filter.h:698 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2403 [inline] bpf_trace_run4+0x334/0x590 kernel/trace/bpf_trace.c:2446 __traceiter_sched_switch+0x98/0xd0 include/trace/events/sched.h:222 trace_sched_switch include/trace/events/sched.h:222 [inline] __schedule+0x2587/0x4a20 kernel/sched/core.c:6526 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 futex_wait_queue+0x14e/0x1d0 kernel/futex/waitwake.c:370 __futex_wait+0x17f/0x320 kernel/futex/waitwake.c:669 futex_wait+0x101/0x360 kernel/futex/waitwake.c:697 do_futex+0x33b/0x560 kernel/futex/syscalls.c:102 __do_sys_futex kernel/futex/syscalls.c:179 [inline] __se_sys_futex+0x3f9/0x480 kernel/futex/syscalls.c:160 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efd9467cf69 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007efd953a0178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007efd947b4128 RCX: 00007efd9467cf69 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd947b4128 RBP: 00007efd947b4120 R08: 00007efd953a06c0 R09: 00007efd953a06c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd947b412c R13: 000000000000006e R14: 00007ffdf306c0b0 R15: 00007ffdf306c198