Memory cgroup out of memory: Kill process 19650 (syz-executor2) score 1110 or sacrifice child
Killed process 19650 (syz-executor2) total-vm:70740kB, anon-rss:4272kB, file-rss:32768kB, shmem-rss:0kB
ip6_tunnel:  xmit: Local address not yet configured!
ip6_tunnel:  xmit: Local address not yet configured!
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 1, t=10502 jiffies, g=227905, q=20)
rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295089066-4295078564), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor2   R  running task    11288 18570  14675 0x80000002
Call Trace:
 <IRQ>
 sched_show_task.cold.84+0x2b6/0x30a kernel/sched/core.c:5293
 print_other_cpu_stall.cold.66+0x7dd/0x8bb kernel/rcu/tree.c:1286
 check_cpu_stall kernel/rcu/tree.c:1415 [inline]
 rcu_pending kernel/rcu/tree.c:2961 [inline]
 rcu_check_callbacks+0xfd7/0x13f0 kernel/rcu/tree.c:2506
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:__sanitizer_cov_trace_switch+0x36/0x90 kernel/kcov.c:223
Code: 53 48 8b 46 08 48 83 f8 10 74 6b 76 4a 48 83 f8 20 74 5b 48 83 f8 40 41 be 07 00 00 00 75 2d 4c 8b 3e 31 db 49 89 f4 49 89 fd <4d> 85 ff 74 1d 49 8b 74 dc 10 4c 89 ea 4c 89 f7 48 83 c3 01 48 8b
RSP: 0018:ffff8881631d5968 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000020 RBX: 0000000000000000 RCX: ffffc9000c301000
RDX: 0000000000040000 RSI: ffffffff88325bc0 RDI: 0000000000000003
RBP: ffff8881631d5990 R08: ffff8881b7e26600 R09: ffff8881d85ea2a0
R10: ffffed103b0bd454 R11: ffff8881d85ea2a7 R12: ffffffff88325bc0
R13: 0000000000000003 R14: 0000000000000005 R15: 0000000000000003
 get_scan_count mm/vmscan.c:2462 [inline]
 shrink_node_memcg+0x3e5/0x18f0 mm/vmscan.c:2510
 shrink_node+0x3bc/0x16b0 mm/vmscan.c:2755
 shrink_zones mm/vmscan.c:2987 [inline]
 do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3049
 try_to_free_mem_cgroup_pages+0x4cf/0xcd0 mm/vmscan.c:3350
 try_charge+0x521/0x1700 mm/memcontrol.c:2211
 mem_cgroup_try_charge+0x627/0xe20 mm/memcontrol.c:5890
 mem_cgroup_try_charge_delay+0x1d/0xa0 mm/memcontrol.c:5905
 wp_page_copy+0x520/0x2500 mm/memory.c:2270
 do_wp_page+0x520/0x2920 mm/memory.c:2549
 handle_pte_fault mm/memory.c:3781 [inline]
 __handle_mm_fault+0x3bef/0x5be0 mm/memory.c:3889
 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926
 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline]
 __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489
 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 arch/x86/lib/copy_user_64.S:181
Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83
RSP: 0018:ffff8881631d7888 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
RDX: 0000000000001000 RSI: ffff8881bcafcb00 RDI: 0000000020d9d000
RBP: ffff8881631d78c0 R08: 0000000000000000 R09: 0000000000000040
R10: ffffed103795f9ff R11: ffff8881bcafcfff R12: 0000000020d9d500
R13: 0000000020d9c500 R14: ffff8881bcafc000 R15: 00007ffffffff000
 copy_page_to_iter_iovec lib/iov_iter.c:209 [inline]
 copy_page_to_iter+0x447/0x1000 lib/iov_iter.c:879
 pipe_to_user+0xb4/0x170 fs/splice.c:1242
 splice_from_pipe_feed fs/splice.c:503 [inline]
 __splice_from_pipe+0x38b/0x7c0 fs/splice.c:627
 vmsplice_to_user fs/splice.c:1266 [inline]
 do_vmsplice.part.15+0x338/0x3d0 fs/splice.c:1344
 do_vmsplice fs/splice.c:1338 [inline]
 __do_sys_vmsplice+0x251/0x2f0 fs/splice.c:1365
 __se_sys_vmsplice fs/splice.c:1347 [inline]
 __x64_sys_vmsplice+0x97/0xf0 fs/splice.c:1347
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457669
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7b88948c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457669
RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b889496d4
R13: 00000000004c5ae1 R14: 00000000004da350 R15: 00000000ffffffff
rcu: rcu_preempt kthread starved for 10502 jiffies! g227905 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    22392    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
ip6_tunnel:  xmit: Local address not yet configured!