rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12679/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=25513, q=49 ncpus=2)
task:syz.7.1298      state:R  running task     stack:26048 pid:12679 tgid:12679 ppid:10618  flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6935
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 zap_pte_range mm/memory.c:1705 [inline]
 zap_pmd_range mm/memory.c:1753 [inline]
 zap_pud_range mm/memory.c:1782 [inline]
 zap_p4d_range mm/memory.c:1803 [inline]
 unmap_page_range+0xb87/0x3d60 mm/memory.c:1824
 unmap_single_vma+0x194/0x2b0 mm/memory.c:1870
 unmap_vmas+0x22f/0x490 mm/memory.c:1914
 exit_mmap+0x1c6/0xb30 mm/mmap.c:1667
 __mmput+0x12a/0x480 kernel/fork.c:1347
 mmput+0x62/0x70 kernel/fork.c:1369
 exit_mm kernel/exit.c:570 [inline]
 do_exit+0x9bf/0x2d70 kernel/exit.c:925
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096
 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f41a4b80809
RSP: 002b:00007fff2579aac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41a4b80809
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007fff2579ab1c R08: 00007fff2579abaf R09: 00000000000ae401
R10: 000000000001d234 R11: 0000000000000246 R12: 0000000000000032
R13: 00000000000ae401 R14: 00000000000adfbb R15: 00007fff2579ab70
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g25513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=44205
rcu: rcu_preempt kthread starved for 10502 jiffies! g25513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:28424 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 12684 Comm: syz.6.1301 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:65
Code: c6 c0 e1 d1 8b 48 c7 c7 00 e2 d1 8b e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 40 e2 d1 8b e9 cd fe ff ff 66 2e 0f
RSP: 0018:ffffc90000a18c80 EFLAGS: 00000046
RAX: 0000000000000007 RBX: 1ffff92000143192 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8b6ce1a0
RBP: 0000000000000046 R08: 0000000000000001 R09: 0000000000000000
R10: ffffffff9060bed7 R11: 0000000000000002 R12: 0000000000000000
R13: ffff88805c41b300 R14: 0000000000000000 R15: 0000000000000000
FS:  00005555725c2500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30703ff8 CR3: 0000000031fa8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 lockdep_recursion_inc kernel/locking/lockdep.c:462 [inline]
 lock_acquire.part.0+0xe0/0x380 kernel/locking/lockdep.c:5848
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 advance_sched+0xd8/0xc60 net/sched/sch_taprio.c:924
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803
 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_is_held include/linux/lockdep.h:249 [inline]
RIP: 0010:mt_locked lib/maple_tree.c:796 [inline]
RIP: 0010:mt_slot lib/maple_tree.c:803 [inline]
RIP: 0010:mas_slot lib/maple_tree.c:836 [inline]
RIP: 0010:mas_validate_limits lib/maple_tree.c:7519 [inline]
RIP: 0010:mt_validate+0x1627/0x41b0 lib/maple_tree.c:7605
Code: 00 e8 9d 38 71 f6 4c 89 e0 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 0e 27 00 00 4d 8b 24 24 4d 85 e4 74 42 <e8> 74 38 71 f6 be ff ff ff ff 4c 89 e7 e8 97 f8 11 00 31 ff 41 89
RSP: 0018:ffffc9000e98f6e0 EFLAGS: 00000286
RAX: 1ffff1100f759278 RBX: 000000000000000e RCX: ffffffff8b1d9804
RDX: dffffc0000000000 RSI: ffffffff8b1d9403 RDI: 0000000000000005
RBP: ffff8880328d88f0 R08: 0000000000000005 R09: 0000000000000300
R10: 0000000000000300 R11: 0000000000000001 R12: ffff88807bac9560
R13: 0000000000000000 R14: 0000000000000300 R15: 0000000000000001
 validate_mm+0xb1/0x530 mm/vma.c:584
 __split_vma+0xc09/0x1160 mm/vma.c:481
 split_vma mm/vma.c:510 [inline]
 vma_modify.constprop.0+0x1f9/0x3b0 mm/vma.c:1520
 vma_modify_flags+0x209/0x2a0 mm/vma.c:1546
 mprotect_fixup+0x2c2/0xbe0 mm/mprotect.c:666
 do_mprotect_pkey+0x981/0xcf0 mm/mprotect.c:840
 __do_sys_mprotect mm/mprotect.c:861 [inline]
 __se_sys_mprotect mm/mprotect.c:858 [inline]
 __x64_sys_mprotect+0x78/0xc0 mm/mprotect.c:858
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe5ff1808c7
Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffd245dd28 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 00007fe5fff516c0 RCX: 00007fe5ff1808c7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe5fff32000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffd245de80
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>