vkms_vblank_simulate: vblank timer overrun rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13717/1:b..l P13693/1:b..l P13468/1:b..l rcu: (detected by 0, t=10503 jiffies, g=86809, q=456 ncpus=2) task:syz-executor.0 state:R running task stack:24672 pid:13468 tgid:13468 ppid:5084 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7067 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 kernel/kcov.c:207 Code: 00 d5 03 00 65 8b 15 f0 ad 6d 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc RSP: 0018:ffffc9000adff6e0 EFLAGS: 00000246 RAX: ffffffff81410e72 RBX: 0000000080000000 RCX: ffff88807e8f9e00 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc9000adff7c0 R08: ffffffff81410e65 R09: ffffffff8141095f R10: 0000000000000003 R11: ffff88807e8f9e00 R12: ffffc9000adffc60 R13: dffffc0000000000 R14: ffffc9000adf8000 R15: ffffc9000adffc68 unwind_next_frame+0x1e82/0x2a00 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x75/0x3f0 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1088 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2583 vfree+0x186/0x2e0 mm/vmalloc.c:3346 kcov_put kernel/kcov.c:429 [inline] kcov_close+0x2b/0x50 kernel/kcov.c:525 __fput+0x408/0x8b0 fs/file_table.c:422 task_work_run+0x251/0x310 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa27/0x27e0 kernel/exit.c:874 do_group_exit+0x207/0x2c0 kernel/exit.c:1023 __do_sys_exit_group kernel/exit.c:1034 [inline] __se_sys_exit_group kernel/exit.c:1032 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1032 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fca0047cf29 RSP: 002b:00007ffdcb817ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007fca005b49d8 RCX: 00007fca0047cf29 RDX: 00007fca0047bc30 RSI: 000000000000000c RDI: 0000000000000043 RBP: 00007ffdcb817cb0 R08: 00007ffdcb815946 R09: 00000000ffffffff R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000043 R13: 00007fca005b3f40 R14: 0000000000000003 R15: 000000000000000c task:kworker/u8:12 state:R running task stack:24864 pid:13693 tgid:13693 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7067 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 2a 84 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90004f17860 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920009e2f18 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff840 RBP: ffffc90004f179a8 R08: ffffffff92fab587 R09: 1ffffffff25f56b0 R10: dffffc0000000000 R11: fffffbfff25f56b1 R12: 1ffff920009e2f14 R13: dffffc0000000000 R14: ffffc90004f178c0 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock include/linux/rcupdate.h:781 [inline] batadv_iv_ogm_slide_own_bcast_window net/batman-adv/bat_iv_ogm.c:754 [inline] batadv_iv_ogm_schedule_buff net/batman-adv/bat_iv_ogm.c:825 [inline] batadv_iv_ogm_schedule+0x43f/0x1090 net/batman-adv/bat_iv_ogm.c:868 batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 net/batman-adv/bat_iv_ogm.c:1712 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2e/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 task:syz-executor.5 state:R running task stack:22656 pid:13717 tgid:13714 ppid:10407 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6924 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6948 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1682 [inline] zap_pmd_range mm/memory.c:1730 [inline] zap_pud_range mm/memory.c:1759 [inline] zap_p4d_range mm/memory.c:1780 [inline] unmap_page_range+0x40f7/0x4bf0 mm/memory.c:1801 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1891 unmap_region+0x1ec/0x350 mm/mmap.c:2365 do_vmi_align_munmap+0x1122/0x18c0 mm/mmap.c:2683 do_vmi_munmap+0x261/0x2f0 mm/mmap.c:2759 __vm_munmap+0x1fc/0x400 mm/mmap.c:3038 __do_sys_munmap mm/mmap.c:3055 [inline] __se_sys_munmap mm/mmap.c:3052 [inline] __x64_sys_munmap+0x68/0x80 mm/mmap.c:3052 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fccbd27cfb7 RSP: 002b:00007fccbdf45ea8 EFLAGS: 00000246 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007fccbd27cfb7 RDX: 0000000000000000 RSI: 0000000008400000 RDI: 00007fccb3000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005598 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 R13: 00007fccbdf45f80 R14: 00007fccbdf45f40 R15: 00007fccb3000000 rcu: rcu_preempt kthread starved for 10607 jiffies! g86809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25328 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2000 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13725 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:lock_pin_lock+0x182/0x440 kernel/locking/lockdep.c:5846 Code: 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 5d 02 00 00 45 31 ed 83 3d c0 e8 3a 0e 00 0f 84 fa 00 00 00 <4c> 89 7c 24 08 4d 8d bc 24 d8 0a 00 00 4d 89 fd 49 c1 ed 03 48 b8 RSP: 0018:ffffc900031ff720 EFLAGS: 00000002 RAX: 0000000000000000 RBX: 1ffff9200063fef0 RCX: dffffc0000000000 RDX: dffffc0000000000 RSI: ffffffff8bcac860 RDI: ffffffff8c1ff840 RBP: ffffc900031ff7f0 R08: 0000000000000003 R09: fffff5200063fee8 R10: dffffc0000000000 R11: fffff5200063fee8 R12: ffff888026270000 R13: 0000000000000000 R14: ffffc900031ff780 R15: 1ffff9200063fee8 FS: 00007fcf705156c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30b23000 CR3: 0000000063c30000 CR4: 0000000000350ef0 Call Trace: rq_pin_lock kernel/sched/sched.h:1620 [inline] rq_lock kernel/sched/sched.h:1703 [inline] __schedule+0x3ca/0x4a20 kernel/sched/core.c:6653 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 futex_wait_queue+0x14e/0x1d0 kernel/futex/waitwake.c:370 __futex_wait+0x17f/0x320 kernel/futex/waitwake.c:669 futex_wait+0x101/0x360 kernel/futex/waitwake.c:697 do_futex+0x33b/0x560 kernel/futex/syscalls.c:102 __do_sys_futex kernel/futex/syscalls.c:179 [inline] __se_sys_futex+0x3f9/0x480 kernel/futex/syscalls.c:160 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcf6f87cf29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcf70515178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007fcf6f9b3f88 RCX: 00007fcf6f87cf29 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf6f9b3f88 RBP: 00007fcf6f9b3f80 R08: 00007fcf705156c0 R09: 00007fcf705156c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf6f9b3f8c R13: 000000000000000b R14: 00007ffe8fc9a630 R15: 00007ffe8fc9a718