rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (2 ticks this GP) idle=967c/1/0x4000000000000000 softirq=33147/33147 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8064/1:b..l rcu: (detected by 0, t=10502 jiffies, g=36477, q=595 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8081 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-10323-g8f6a15f095a6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:__lock_acquire+0xcb1/0x1fd0 kernel/locking/lockdep.c:5111 Code: 38 80 3c 38 00 74 12 48 89 df e8 0a 81 89 00 48 bf 00 00 00 00 00 fc ff df 45 31 f6 48 89 5c 24 28 4c 8b 23 48 83 7c 24 30 00 <75> 30 48 c7 c0 e0 96 7a 94 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 47 RSP: 0018:ffffc90000a18a30 EFLAGS: 00000002 RAX: 1ffff11005fe751a RBX: ffff88802ff3a8d0 RCX: ffffffff8172886d RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 RBP: ffff88802ff3a930 R08: ffffffff92fb1587 R09: 1ffffffff25f62b0 R10: dffffc0000000000 R11: fffffbfff25f62b1 R12: 3fe3dc1f97eb34f7 R13: ffff88802ff39e00 R14: 0000000000000000 R15: ffff88802ff3a950 FS: 0000000000000000(0000) GS:ffff8880b9500000(0063) knlGS:00000000f5ea1b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000002d321000 CR3: 00000000297ba000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 rcu_lock_acquire include/linux/rcupdate.h:329 [inline] rcu_read_lock include/linux/rcupdate.h:781 [inline] advance_sched+0xa1e/0xca0 net/sched/sch_taprio.c:985 __run_hrtimer kernel/time/hrtimer.c:1687 [inline] __hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1751 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 95 68 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 93 2f d2 f5 65 8b 05 c4 60 70 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc9000fd06b20 EFLAGS: 00000206 RAX: 50b0388b1bb21d00 RBX: 1ffff92001fa0d68 RCX: ffffffff8172e86a RDX: dffffc0000000000 RSI: ffffffff8bcab880 RDI: 0000000000000001 RBP: ffffc9000fd06bb0 R08: ffffffff92fb16d7 R09: 1ffffffff25f62da R10: dffffc0000000000 R11: fffffbfff25f62db R12: dffffc0000000000 R13: 1ffff92001fa0d64 R14: ffffc9000fd06b40 R15: 0000000000000246 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] taprio_change+0x339b/0x42d0 net/sched/sch_taprio.c:1971 taprio_init+0x9da/0xc80 net/sched/sch_taprio.c:2112 qdisc_create+0x9d4/0x11a0 net/sched/sch_api.c:1355 tc_modify_qdisc+0xa26/0x1e40 net/sched/sch_api.c:1777 rtnetlink_rcv_msg+0x89b/0x10d0 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2564 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x7ea/0x980 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x8e1/0xcb0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2668 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb8/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf72af579 Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5ea15ac EFLAGS: 00000206 ORIG_RAX: 0000000000000172 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 task:syz-executor.0 state:R running task stack:26520 pid:8064 tgid:8064 ppid:7586 flags:0x20004002 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6924 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6948 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1682 [inline] zap_pmd_range mm/memory.c:1730 [inline] zap_pud_range mm/memory.c:1759 [inline] zap_p4d_range mm/memory.c:1780 [inline] unmap_page_range+0x4206/0x4d00 mm/memory.c:1801 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1891 exit_mmap+0x264/0xc80 mm/mmap.c:3312 __mmput+0x115/0x3c0 kernel/fork.c:1346 exit_mm+0x220/0x310 kernel/exit.c:568 do_exit+0x99e/0x27e0 kernel/exit.c:864 do_group_exit+0x207/0x2c0 kernel/exit.c:1026 __do_sys_exit_group kernel/exit.c:1037 [inline] __se_sys_exit_group kernel/exit.c:1035 [inline] __ia32_sys_exit_group+0x3f/0x40 kernel/exit.c:1035 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb8/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf72de579 RSP: 002b:00000000f7580d1c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000ffffffff RSI: 00000000ffffff9c RDI: 00000000f7435ff4 RBP: 000000000000001e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g36477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=14817 rcu: rcu_preempt kthread starved for 10502 jiffies! g36477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:25880 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5408 [inline] __schedule+0x17e8/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:2000 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244