rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (1 GPs behind) idle=1954/1/0x4000000000000000 softirq=16374/16375 fqs=6
rcu: 	(detected by 1, t=10502 jiffies, g=19885, q=431 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7133 Comm: syz.0.519 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:check_preemption_disabled+0x2/0x120 lib/smp_processor_id.c:13
Code: 8f 3f 8c 48 c7 c6 20 90 3f 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24
RSP: 0018:ffffc90000007c38 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff888021ff3c00
RDX: ffff888021ff3c00 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f9040
RBP: 0000000000000003 R08: ffffffff89b46f5b R09: fffff52000000f80
R10: dffffc0000000000 R11: fffff52000000f80 R12: 0000000000000046
R13: ffff888021ff3c00 R14: 00000000ffffffff R15: ffff88802d992300
FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31918ff8 CR3: 000000000e534000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 lockdep_recursion_finish kernel/locking/lockdep.c:466 [inline]
 lock_is_held_type+0x101/0x190 kernel/locking/lockdep.c:5832
 lock_is_held include/linux/lockdep.h:249 [inline]
 advance_sched+0x1c2/0xca0 net/sched/sch_taprio.c:929
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:is_zero_pfn include/linux/pgtable.h:1568 [inline]
RIP: 0010:is_zero_page include/linux/mm.h:1976 [inline]
RIP: 0010:is_zero_folio include/linux/mm.h:1987 [inline]
RIP: 0010:__folio_rmap_sanity_checks+0x8b/0x670 include/linux/rmap.h:204
Code: 48 bb 00 00 00 00 00 16 00 00 4c 01 e3 48 c1 fb 06 48 c7 c0 20 ab f6 8f 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 0c 48 c7 c7 20 ab f6 8f e8 87 b3 10 00 48 8b 2d 30 c7 0f 0e 48
RSP: 0018:ffffc90002d9f518 EFLAGS: 00000246
RAX: 1ffffffff1fed564 RBX: 000000000004deff RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000000
RBP: 0000000000000000 R08: ffffffff81e6e3a0 R09: 1ffffd400026f7f8
R10: dffffc0000000000 R11: fffff9400026f7f9 R12: ffffea000137bfc0
R13: ffffea000137bfc0 R14: 0000000000000001 R15: 0000000000000000
 __folio_remove_rmap mm/rmap.c:1518 [inline]
 folio_remove_rmap_ptes+0x3d/0x490 mm/rmap.c:1599
 zap_present_folio_ptes mm/memory.c:1517 [inline]
 zap_present_ptes mm/memory.c:1576 [inline]
 zap_pte_range mm/memory.c:1618 [inline]
 zap_pmd_range mm/memory.c:1736 [inline]
 zap_pud_range mm/memory.c:1765 [inline]
 zap_p4d_range mm/memory.c:1786 [inline]
 unmap_page_range+0x1b93/0x42c0 mm/memory.c:1807
 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1897
 exit_mmap+0x264/0xc80 mm/mmap.c:3412
 __mmput+0x115/0x380 kernel/fork.c:1345
 exit_mm+0x220/0x310 kernel/exit.c:571
 do_exit+0x9b2/0x27f0 kernel/exit.c:869
 do_group_exit+0x207/0x2c0 kernel/exit.c:1031
 __do_sys_exit_group kernel/exit.c:1042 [inline]
 __se_sys_exit_group kernel/exit.c:1040 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040
 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe87e3799f9
Code: Unable to access opcode bytes at 0x7fe87e3799cf.
RSP: 002b:00007ffc7bb0fac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe87e3799f9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffc7bb0fb1c R08: 00007ffc7bb0fbaf R09: 0000000000031f40
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032
R13: 0000000000031f40 R14: 0000000000031a74 R15: 00007ffc7bb0fb70
 </TASK>
rcu: rcu_preempt kthread starved for 10463 jiffies! g19885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:25816 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6621
 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 7131 Comm: syz.3.518 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:csd_lock_wait kernel/smp.c:312 [inline]
RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 kernel/smp.c:856
Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 79 14 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 24 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 08 10
RSP: 0018:ffffc900048a6680 EFLAGS: 00000246
RAX: ffffffff818766e8 RBX: 1ffff11017248c61 RCX: 0000000000040000
RDX: ffffc90009c19000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc900048a6860 R08: ffffffff818766b7 R09: 1ffffffff269e31b
R10: dffffc0000000000 R11: fffffbfff269e31c R12: dffffc0000000000
R13: ffff8880b9246308 R14: ffff8880b933fb40 R15: 0000000000000000
FS:  00007fba78cc96c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3180bff8 CR3: 000000004d48e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023
 __buffer_migrate_folio+0x321/0x5d0 mm/migrate.c:798
 move_to_new_folio+0x2f0/0x12e0 mm/migrate.c:980
 migrate_folio_move mm/migrate.c:1288 [inline]
 migrate_pages_batch+0x2937/0x3960 mm/migrate.c:1812
 migrate_pages_sync mm/migrate.c:1878 [inline]
 migrate_pages+0x1f59/0x3460 mm/migrate.c:1987
 compact_zone+0x3404/0x4af0 mm/compaction.c:2671
 compact_node mm/compaction.c:2935 [inline]
 compact_nodes mm/compaction.c:2957 [inline]
 sysctl_compaction_handler+0x496/0x990 mm/compaction.c:3008
 proc_sys_call_handler+0x551/0x8b0 fs/proc/proc_sysctl.c:590
 iter_file_splice_write+0xbd7/0x14e0 fs/splice.c:743
 do_splice_from fs/splice.c:941 [inline]
 direct_splice_actor+0x11e/0x220 fs/splice.c:1164
 splice_direct_to_actor+0x58e/0xc90 fs/splice.c:1108
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0x28c/0x3e0 fs/splice.c:1233
 do_sendfile+0x56d/0xe20 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1356 [inline]
 __se_sys_sendfile64+0x100/0x1e0 fs/read_write.c:1348
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fba77f799f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fba78cc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fba78116058 RCX: 00007fba77f799f9
RDX: 00000000200001c0 RSI: 000000000000000a RDI: 000000000000000b
RBP: 00007fba77fe78ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fba78116058 R15: 00007ffc90879dd8
 </TASK>