rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29711/3:b..l P29718/1:b..l rcu: (detected by 1, t=10502 jiffies, g=115233, q=110 ncpus=2) task:syz.1.6147 state:R running task stack:28216 pid:29718 tgid:29718 ppid:5828 task_flags:0x40004c flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5875 Code: 55 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 b3 10 0f 0f 82 74 02 00 00 8b 35 da e5 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 55 37 12 0f 85 c7 02 00 00 48 83 c4 RSP: 0018:ffffc90005b4f3d0 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000d3addaf6 RDX: 0000000000000000 RSI: ffffffff8de0ab05 RDI: ffffffff8c157260 RBP: 0000000000000002 R08: 328b0d0cf36cb5da R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1248 [inline] free_unref_folios+0xa65/0x1800 mm/page_alloc.c:2763 folios_put_refs+0x56f/0x740 mm/swap.c:992 free_pages_and_swap_cache+0x245/0x4a0 mm/swap_state.c:264 __tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136 tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:397 [inline] tlb_flush_mmu mm/mmu_gather.c:404 [inline] tlb_finish_mmu+0x168/0x7c0 mm/mmu_gather.c:497 exit_mmap+0x403/0xb90 mm/mmap.c:1297 __mmput+0x12a/0x410 kernel/fork.c:1121 mmput+0x62/0x70 kernel/fork.c:1144 exit_mm kernel/exit.c:581 [inline] do_exit+0x7c4/0x2bd0 kernel/exit.c:952 do_group_exit+0xd3/0x2a0 kernel/exit.c:1105 __do_sys_exit_group kernel/exit.c:1116 [inline] __se_sys_exit_group kernel/exit.c:1114 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1114 x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb078f8e9a9 RSP: 002b:00007ffe2bfa5508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb078f8e9a9 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffe2bfa556c R08: 0000001e2bfa55ff R09: 00000000000927c0 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000572 R13: 00000000000927c0 R14: 00000000001f2a33 R15: 00007ffe2bfa55c0 task:syz.6.6144 state:R running task stack:28216 pid:29711 tgid:29711 ppid:9575 task_flags:0x400040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6966 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] filemap_map_pages+0xe2e/0x1680 mm/filemap.c:3757 do_fault_around mm/memory.c:5548 [inline] do_read_fault mm/memory.c:5581 [inline] do_fault mm/memory.c:5724 [inline] do_pte_missing mm/memory.c:4251 [inline] handle_pte_fault mm/memory.c:6069 [inline] __handle_mm_fault+0x3b38/0x5490 mm/memory.c:6212 handle_mm_fault+0x589/0xd10 mm/memory.c:6381 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fa83346ecfd RSP: 002b:00007ffdc32ffdd0 EFLAGS: 00010246 RAX: 000000110c29c000 RBX: 00007fa8342e5720 RCX: 0000000000000000 RDX: 0000000000001a83 RSI: 000000000000316a RDI: 0000000000000001 RBP: ffffffff850c5a83 R08: 00007fa8337b6038 R09: 00007fa8337a2000 R10: 00007fa832bff008 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff850c5da5 R15: 0000000000000017