rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 GPs behind) idle=5ebc/1/0x4000000000000000 softirq=105648/105667 fqs=4
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24483/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=113885, q=1086 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 24481 Comm: syz.1.4655 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:timerqueue_add+0x33/0x290 lib/timerqueue.c:38
Code: 41 55 41 54 53 48 83 ec 30 49 89 f7 49 89 fc 48 bb 00 00 00 00 00 fc ff df e8 f9 d9 da f5 4c 89 fd 48 c1 ed 03 80 7c 1d 00 00 <74> 08 4c 89 ff e8 23 44 41 f6 49 8b 1f 48 89 df 4c 89 fe e8 35 dc
RSP: 0018:ffffc90000a18ca0 EFLAGS: 00000046
RAX: ffffffff8bc4a877 RBX: dffffc0000000000 RCX: ffff888034e30000
RDX: 0000000000010000 RSI: ffff88805bc45340 RDI: ffff8880b872cad0
RBP: 1ffff1100b788a68 R08: ffffffff818d18c0 R09: 1ffffffff2033076
R10: dffffc0000000000 R11: fffffbfff2033077 R12: ffff8880b872cad0
R13: ffff8880b872cad0 R14: ffff88805bc45340 R15: ffff88805bc45340
FS: 00007f281de836c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3c5fe3 CR3: 0000000064fac000 CR4: 0000000000350ef0
Call Trace:
enqueue_hrtimer+0x1b2/0x3c0 kernel/time/hrtimer.c:1084
__run_hrtimer kernel/time/hrtimer.c:1756 [inline]
__hrtimer_run_queues+0x6cb/0xd30 kernel/time/hrtimer.c:1803
hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1865
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x112/0x420 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5853
Code: 2b 00 74 08 4c 89 f7 e8 0a 2b 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc900056bec80 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92000ad7d9c RCX: ffff888034e30ad8
RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5fb220
RBP: ffffc900056bedd0 R08: ffffffff942a5897 R09: 1ffffffff2854b12
R10: dffffc0000000000 R11: fffffbfff2854b13 R12: 1ffff92000ad7d98
R13: dffffc0000000000 R14: ffffc900056bece0 R15: 0000000000000246
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:351 [inline]
inode_add_bytes+0x37/0x150 fs/stat.c:915
__dquot_alloc_space+0x2d0/0x10c0 fs/quota/dquot.c:1695
dquot_alloc_space_nodirty include/linux/quotaops.h:299 [inline]
dquot_alloc_block_nodirty include/linux/quotaops.h:326 [inline]
shmem_inode_acct_blocks+0x2b4/0x460 mm/shmem.c:244
shmem_alloc_and_add_folio+0x9de/0x1080 mm/shmem.c:1868
shmem_get_folio_gfp+0x621/0x1840 mm/shmem.c:2358
shmem_fault+0x220/0x5b0 mm/shmem.c:2559
__do_fault+0x137/0x390 mm/memory.c:4907
do_read_fault mm/memory.c:5322 [inline]
do_fault mm/memory.c:5456 [inline]
do_pte_missing mm/memory.c:3979 [inline]
handle_pte_fault+0x39eb/0x5ed0 mm/memory.c:5801
__handle_mm_fault mm/memory.c:5944 [inline]
handle_mm_fault+0x1106/0x1bb0 mm/memory.c:6112
faultin_page mm/gup.c:1196 [inline]
__get_user_pages+0x1c82/0x49e0 mm/gup.c:1494
populate_vma_page_range+0x264/0x330 mm/gup.c:1932
__mm_populate+0x27a/0x460 mm/gup.c:2035
mm_populate include/linux/mm.h:3397 [inline]
vm_mmap_pgoff+0x2c3/0x3d0 mm/util.c:580
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f281cf85d29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f281de83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f281d175fa0 RCX: 00007f281cf85d29
RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 00007f281d001b08 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f281d175fa0 R15: 00007ffe2a8379e8
task:syz.3.4652 state:R running task stack:25312 pid:24483 tgid:24482 ppid:22888 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6935
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6959
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
_raw_spin_unlock_irq+0x44/0x50 kernel/locking/spinlock.c:202
spin_unlock_irq include/linux/spinlock.h:401 [inline]
loop_queue_work drivers/block/loop.c:894 [inline]
loop_queue_rq+0xa01/0xaf0 drivers/block/loop.c:1876
__blk_mq_issue_directly block/blk-mq.c:2687 [inline]
blk_mq_request_issue_directly+0x354/0x6a0 block/blk-mq.c:2774
blk_mq_plug_issue_direct+0x2ec/0x670 block/blk-mq.c:2795
blk_mq_flush_plug_list+0x838/0x1870 block/blk-mq.c:2906
__blk_flush_plug+0x420/0x500 block/blk-core.c:1213
blk_finish_plug block/blk-core.c:1240 [inline]
__submit_bio+0x46a/0x560 block/blk-core.c:637
__submit_bio_noacct_mq block/blk-core.c:710 [inline]
submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:739
submit_bh fs/buffer.c:2819 [inline]
__bread_slow fs/buffer.c:1264 [inline]
__bread_gfp+0x23c/0x400 fs/buffer.c:1488
sb_bread include/linux/buffer_head.h:346 [inline]
isofs_read_inode fs/isofs/inode.c:1280 [inline]
__isofs_iget+0x366/0x2060 fs/isofs/inode.c:1509
isofs_iget fs/isofs/isofs.h:133 [inline]
isofs_lookup+0xd53/0xfb0 fs/isofs/namei.c:171
__lookup_slow+0x28e/0x3f0 fs/namei.c:1791
lookup_slow+0x53/0x70 fs/namei.c:1808
walk_component+0x2e1/0x410 fs/namei.c:2112
lookup_last fs/namei.c:2610 [inline]
path_lookupat+0x16f/0x450 fs/namei.c:2634
filename_lookup+0x2a3/0x670 fs/namei.c:2663
user_path_at+0x3a/0x60 fs/namei.c:3070
__do_sys_chdir fs/open.c:553 [inline]
__se_sys_chdir+0xbc/0x220 fs/open.c:547
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff3fd185d29
RSP: 002b:00007ff3fdfbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
RAX: ffffffffffffffda RBX: 00007ff3fd375fa0 RCX: 00007ff3fd185d29
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300
RBP: 00007ff3fd201b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ff3fd375fa0 R15: 00007ffe4c46c798
rcu: rcu_preempt kthread starved for 10494 jiffies! g113885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 13123 Comm: kworker/u8:21 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 kernel/smp.c:884
Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c6 e6 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 71 e2 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 55 e2
RSP: 0018:ffffc900031576e0 EFLAGS: 00000293
RAX: ffffffff8193a01b RBX: 1ffff110170e88e9 RCX: ffff8880792e9e00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900031578e0 R08: ffffffff81939fea R09: 1ffffffff2854b10
R10: dffffc0000000000 R11: fffffbfff2854b11 R12: dffffc0000000000
R13: ffff8880b8744748 R14: ffff8880b863fac0 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbad1985f98 CR3: 000000000e736000 CR4: 0000000000350ef0
Call Trace:
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1051
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:2114 [inline]
text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2324
text_poke_flush arch/x86/kernel/alternative.c:2515 [inline]
text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2522
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate+0xbc/0x260 mm/kfence/core.c:849
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xa68/0x1840 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244