rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10590/1:b..l P9848/1:b..l P5075/2:b..l rcu: (detected by 1, t=10502 jiffies, g=55529, q=804 ncpus=2) task:syz-fuzzer state:R running task stack:21680 pid:5075 tgid:5072 ppid:5070 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x4a00 kernel/sched/core.c:6745 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6924 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6948 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:851 [inline] __dev_queue_xmit+0x16c9/0x3d30 net/core/dev.c:4420 dev_queue_xmit include/linux/netdevice.h:3095 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip_finish_output2+0xd41/0x1380 net/ipv4/ip_output.c:235 ip_local_out net/ipv4/ip_output.c:129 [inline] __ip_queue_xmit+0x118c/0x1b70 net/ipv4/ip_output.c:535 __tcp_transmit_skb+0x2557/0x3b80 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_write_xmit+0x18b3/0x69d0 net/ipv4/tcp_output.c:2829 __tcp_push_pending_frames+0x9b/0x360 net/ipv4/tcp_output.c:3014 tcp_sendmsg_locked+0x4313/0x4d70 net/ipv4/tcp.c:1316 tcp_sendmsg+0x30/0x50 net/ipv4/tcp.c:1348 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x1a6/0x270 net/socket.c:745 sock_write_iter+0x2dd/0x400 net/socket.c:1160 call_write_iter include/linux/fs.h:2120 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xa2d/0xc50 fs/read_write.c:590 ksys_write+0x1a0/0x2c0 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x40720e RSP: 002b:000000c000726ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000040720e RDX: 0000000000000004 RSI: 000000c0000c27a0 RDI: 0000000000000003 RBP: 000000c000727038 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 000000c000727178 R13: 0000000000000001 R14: 000000c0000061a0 R15: 000000000000000f task:syz-executor.3 state:R running task stack:20280 pid:9848 tgid:9848 ppid:9831 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x4a00 kernel/sched/core.c:6745 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6924 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6948 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] copy_pte_range mm/memory.c:1179 [inline] copy_pmd_range+0x7aa1/0x84c0 mm/memory.c:1240 copy_pud_range mm/memory.c:1277 [inline] copy_p4d_range mm/memory.c:1301 [inline] copy_page_range+0x99f/0xe90 mm/memory.c:1399 dup_mmap kernel/fork.c:751 [inline] dup_mm kernel/fork.c:1688 [inline] copy_mm+0x128d/0x2020 kernel/fork.c:1737 copy_process+0x187a/0x3dc0 kernel/fork.c:2390 kernel_clone+0x223/0x870 kernel/fork.c:2797 __do_sys_clone kernel/fork.c:2940 [inline] __se_sys_clone kernel/fork.c:2924 [inline] __x64_sys_clone+0x258/0x2a0 kernel/fork.c:2924 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe951679f13 RSP: 002b:00007fffe8a9d538 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe951679f13 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 000055556321a750 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 task:syz-executor.1 state:R running task stack:24664 pid:10590 tgid:10590 ppid:9574 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x4a00 kernel/sched/core.c:6745 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7067 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:mas_data_end lib/maple_tree.c:1454 [inline] RIP: 0010:mt_validate_nulls lib/maple_tree.c:7552 [inline] RIP: 0010:mt_validate+0x4461/0x4aa0 lib/maple_tree.c:7599 Code: 8c 4c 89 e0 48 c1 e8 03 48 ba 00 00 00 00 00 fc ff df 0f b6 04 10 84 c0 0f 85 81 03 00 00 45 0f b6 3c 24 41 8d 47 ff 0f b6 c8 <48> 8b 44 24 58 48 89 4c 24 70 48 8d 1c c8 48 89 d8 48 c1 e8 03 80 RSP: 0018:ffffc9000524f6a0 EFLAGS: 00000293 RAX: 000000000000000e RBX: 0000000000000001 RCX: 000000000000000e RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000004 RBP: ffffc9000524f890 R08: ffffffff8b76441d R09: ffffffff8b764375 R10: 0000000000000003 R11: ffff88805316da00 R12: ffffffff8ceb4481 R13: ffff88802c0e6000 R14: 0000000000000001 R15: 000000000000000f validate_mm+0xe7/0x530 mm/mmap.c:288 __split_vma+0xa69/0xc30 mm/mmap.c:2430 split_vma mm/mmap.c:2456 [inline] vma_modify+0x194/0x350 mm/mmap.c:2490 vma_modify_flags include/linux/mm.h:3347 [inline] mprotect_fixup+0x3ea/0xa90 mm/mprotect.c:636 do_mprotect_pkey+0x903/0xdd0 mm/mprotect.c:810 __do_sys_mprotect mm/mprotect.c:831 [inline] __se_sys_mprotect mm/mprotect.c:828 [inline] __x64_sys_mprotect+0x80/0x90 mm/mprotect.c:828 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f949887cfa7 RSP: 002b:00007ffeaa4117e8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a RAX: ffffffffffffffda RBX: 00007f949962a6c0 RCX: 00007f949887cfa7 RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f949960b000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffeaa411a40 R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10607 jiffies! g55529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26320 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x1796/0x4a00 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:2000 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 17 Comm: rcu_preempt Not tainted 6.9.0-syzkaller-09429-g61307b7be41a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:__rq_lockp kernel/sched/sched.h:1279 [inline] RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1397 [inline] RIP: 0010:update_rq_clock+0x4e/0x8a0 kernel/sched/core.c:755 Code: 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 2e 06 00 00 83 3d 9e 21 46 0e 00 74 59 49 8d 9d 78 0d 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 4d 06 00 00 83 3b 00 4c 89 ef 74 20 49 RSP: 0018:ffffc90000007a78 EFLAGS: 00000806 RAX: 1ffff11017287e9f RBX: ffff8880b943f4f8 RCX: dffffc0000000000 RDX: 0000000080010005 RSI: ffffffff8bcaca00 RDI: ffff8880b943e780 RBP: ffffc90000007c08 R08: ffffffff81355f81 R09: fffff52000000f44 R10: dffffc0000000000 R11: fffff52000000f44 R12: 1ffff11017287e9f R13: ffff8880b943e780 R14: dffffc0000000000 R15: 0000000000003e35 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f949964af00 CR3: 0000000058b00000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ttwu_queue kernel/sched/core.c:4056 [inline] try_to_wake_up+0x872/0x1470 kernel/sched/core.c:4378 signal_wake_up_state+0xb4/0x120 kernel/signal.c:773 signal_wake_up include/linux/sched/signal.h:448 [inline] complete_signal+0x94a/0xcf0 kernel/signal.c:1065 __send_signal_locked+0xb1b/0xdc0 kernel/signal.c:1185 do_send_sig_info kernel/signal.c:1301 [inline] group_send_sig_info+0x292/0x310 kernel/signal.c:1453 do_bpf_send_signal+0x85/0x190 kernel/trace/bpf_trace.c:838 irq_work_single+0xe2/0x240 kernel/irq_work.c:221 irq_work_run_list kernel/irq_work.c:252 [inline] irq_work_run+0x18b/0x350 kernel/irq_work.c:261 __sysvec_irq_work+0xb8/0x430 arch/x86/kernel/irq_work.c:22 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0x9e/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738 RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5282 Code: c9 50 e8 49 d1 0b 00 48 83 c4 08 4c 89 f7 e8 ed 38 00 00 0f 1f 44 00 00 4c 89 f7 e8 c0 91 24 0a e8 ab fa 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc RSP: 0018:ffffc900001678c8 EFLAGS: 00000282 RAX: 49fda96b8646e500 RBX: ffff8880176c0000 RCX: ffffffff94760603 RDX: dffffc0000000000 RSI: ffffffff8bcab880 RDI: ffffffff8c1ee360 RBP: ffffc90000167910 R08: ffffffff8faba06f R09: 1ffffffff1f5740d R10: dffffc0000000000 R11: fffffbfff1f5740e R12: 1ffff11017287e9f R13: dffffc0000000000 R14: ffff8880b943e780 R15: ffff8880b943f4f8 context_switch kernel/sched/core.c:5411 [inline] __schedule+0x179e/0x4a00 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:2000 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 sched: RT throttling activated