GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 GPs behind) idle=1eb4/1/0x4000000000000000 softirq=25727/25728 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9010/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=22957, q=305 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 7319 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 kernel/kcov.c:314
Code: 44 0a 20 e9 55 64 5b 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d7 03 00 65 8b 05 e0 fa 6e 7e 25 00 01 ff 00 74
RSP: 0018:ffffc90000a18c88 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88805a1d5a00
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff89cc5acb R09: fffff52000143180
R10: dffffc0000000000 R11: fffff52000143180 R12: 0000000000000002
R13: ffffffff89cc5a10 R14: ffff88805c2ee340 R15: ffff88805a1d64c8
FS: 0000555562555500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000640 CR3: 000000002c892000 CR4: 0000000000350ef0
Call Trace:
advance_sched+0xbb/0xca0 net/sched/sch_taprio.c:925
__run_hrtimer kernel/time/hrtimer.c:1691 [inline]
__hrtimer_run_queues+0x59d/0xd50 kernel/time/hrtimer.c:1755
hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1817
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x112/0x420 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:202
Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 da c6 9f f5 48 89 df e8 f2 0c a1 f5 e8 7d f9 cb f5 fb bf 01 00 00 00 f2 87 92 f5 65 8b 05 c3 31 33 74 85 c0 74 06 5b e9 fc 9a 1f 00
RSP: 0018:ffffc9000c4ff638 EFLAGS: 00000282
RAX: b77bc06582291800 RBX: ffff88807f199dc8 RCX: ffffffff8170be1a
RDX: dffffc0000000000 RSI: ffffffff8c0acaa0 RDI: 0000000000000001
RBP: 1ffff1100fe333b8 R08: ffffffff942ca817 R09: 1ffffffff2859502
R10: dffffc0000000000 R11: fffffbfff2859503 R12: ffffc9000c4ff778
R13: ffffea0001162900 R14: ffffea0001162900 R15: ffff88807f199dc0
spin_unlock_irq include/linux/spinlock.h:401 [inline]
filemap_remove_folio+0x110/0x2e0 mm/filemap.c:266
truncate_inode_folio+0x5d/0x70 mm/truncate.c:178
shmem_undo_range+0x43c/0x1cf0 mm/shmem.c:1028
shmem_truncate_range mm/shmem.c:1144 [inline]
shmem_evict_inode+0x29b/0xa80 mm/shmem.c:1272
evict+0x4ea/0x9b0 fs/inode.c:725
__dentry_kill+0x20d/0x630 fs/dcache.c:615
dput+0x19f/0x2b0 fs/dcache.c:857
__fput+0x5d2/0x880 fs/file_table.c:439
task_work_run+0x251/0x310 kernel/task_work.c:239
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fce7797d3aa
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 13 8c 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 73 8c 02 00 8b 44 24
RSP: 002b:00007fff33a6ed60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fce7797d3aa
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fff33a6edac R08: 0000000000000000 R09: 00007fff33a6eac7
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 000000000002f84d R14: 000000000002edd9 R15: 00007fff33a6ee00
task:syz.0.1054 state:R running task stack:23808 pid:9010 tgid:9010 ppid:5836 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0x18af/0x4bd0 kernel/sched/core.c:6690
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6869
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6893
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
do_anonymous_page mm/memory.c:4830 [inline]
do_pte_missing mm/memory.c:3963 [inline]
handle_pte_fault+0x4c2d/0x6800 mm/memory.c:5755
__handle_mm_fault mm/memory.c:5898 [inline]
handle_mm_fault+0x1106/0x1bb0 mm/memory.c:6066
do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f9654e3e8bf
RSP: 002b:00007ffd51a92978 EFLAGS: 00010206
RAX: 0000000081e478b4 RBX: 00007f9655c65720 RCX: 0000000000000003
RDX: 00000000000018b4 RSI: ffffffff81e478b4 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00007f9655120000 R09: 00007f9655122000
R10: 0000000081e478b8 R11: 0000000000000000 R12: ffffffff81e476c6
R13: 00007f9655136018 R14: 0000000000000008 R15: 0000000000000001
rcu: rcu_preempt kthread starved for 10502 jiffies! g22957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25200 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0x18af/0x4bd0 kernel/sched/core.c:6690
__schedule_loop kernel/sched/core.c:6767 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6782
schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 786 Comm: kworker/u8:5 Not tainted 6.12.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_many_cond+0x19f8/0x2ca0 kernel/smp.c:884
Code: 89 e6 83 e6 01 31 ff e8 96 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 41 ef 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 25 ef 0b 00 eb e4 44
RSP: 0018:ffffc9000357f6e0 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 1ffff110170e8919 RCX: ffff8880250a9e00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc9000357f8e0 R08: ffffffff8188e93a R09: 1ffffffff2859500
R10: dffffc0000000000 R11: fffffbfff2859501 R12: dffffc0000000000
R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa2c9209f98 CR3: 000000000e734000 CR4: 0000000000350ef0
Call Trace:
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1051
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:2085 [inline]
text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2295
text_poke_flush arch/x86/kernel/alternative.c:2486 [inline]
text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate+0xbc/0x260 mm/kfence/core.c:849
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244