rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=8084/1/0x4000000000000000 softirq=16946/16961 fqs=11 rcu: (detected by 1, t=10502 jiffies, g=22513, q=789 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5964 Comm: udevd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:kasan_check_range+0x1be/0x290 mm/kasan/generic.c:189 Code: 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e 41 5f <5d> e9 77 87 b5 09 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 c5 00 RSP: 0018:ffffc90000007c20 EFLAGS: 00000056 RAX: 1ffff1100bda7f01 RBX: ffff88805f03a2e0 RCX: ffffffff89980e0a RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805f03a2e0 RBP: 0000000000000000 R08: ffff88805f03a2e7 R09: 1ffff1100be0745c R10: dffffc0000000000 R11: ffffed100be0745d R12: 0000000000000000 R13: ffff88805ed3f800 R14: ffff88805ed3f800 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd4b7366866 CR3: 000000007e55e000 CR4: 0000000000350ef0 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] atomic64_read include/linux/atomic/atomic-instrumented.h:1610 [inline] taprio_set_budgets+0x1ba/0x370 net/sched/sch_taprio.c:670 advance_sched+0x98d/0xca0 net/sched/sch_taprio.c:977 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59d/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:121 [inline] RIP: 0010:lock_acquire+0x144/0x550 kernel/locking/lockdep.c:5735 Code: 8b 05 e0 dd 92 7e 85 c0 0f 85 8f 01 00 00 65 48 8b 1c 25 40 d7 03 00 48 81 c3 dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 e5 02 00 00 83 3b 00 0f 85 62 01 00 00 4c 8d bc 24 80 RSP: 0018:ffffc900048bf3c0 EFLAGS: 00000217 RAX: 0000000000000000 RBX: ffff88802311c6dc RCX: ffffffff816fac54 RDX: 0000000000000000 RSI: ffffffff8c209f40 RDI: ffffffff8c209f00 RBP: ffffc900048bf510 R08: ffffffff8fafa6af R09: 1ffffffff1f5f4d5 R10: dffffc0000000000 R11: fffffbfff1f5f4d6 R12: 1ffff92000917e80 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88813fff9040 rcu_lock_acquire include/linux/rcupdate.h:326 [inline] rcu_read_lock_sched include/linux/rcupdate.h:930 [inline] pfn_valid+0x113/0x450 include/linux/mmzone.h:2024 page_table_check_clear+0x1e/0x550 mm/page_table_check.c:70 clear_full_ptes include/linux/pgtable.h:715 [inline] zap_present_folio_ptes mm/memory.c:1506 [inline] zap_present_ptes mm/memory.c:1576 [inline] zap_pte_range mm/memory.c:1618 [inline] zap_pmd_range mm/memory.c:1736 [inline] zap_pud_range mm/memory.c:1765 [inline] zap_p4d_range mm/memory.c:1786 [inline] unmap_page_range+0x2b66/0x42c0 mm/memory.c:1807 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1897 exit_mmap+0x264/0xc80 mm/mmap.c:3382 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 __do_sys_exit_group kernel/exit.c:1042 [inline] __se_sys_exit_group kernel/exit.c:1040 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040 x64_sys_call+0x26c3/0x26d0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd4b6efca90 Code: Unable to access opcode bytes at 0x7fd4b6efca66. RSP: 002b:00007fffb5b2b3e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd4b6efca90 RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000007 R09: b418f48b22457ef2 R10: 00000000ffffffff R11: 0000000000000206 R12: 0000562742c652b0 R13: 00007fffb5b2b428 R14: 0000000000000001 R15: 0000562742c4e910 rcu: rcu_preempt kthread starved for 10401 jiffies! g22513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24720 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 2884 Comm: kworker/u8:12 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:312 [inline] RIP: 0010:smp_call_function_many_cond+0x1873/0x29d0 kernel/smp.c:856 Code: e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 34 10 0c 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e 18 10 0c 00 eb e4 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 4c 89 RSP: 0018:ffffc90009b67700 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 1ffff11017288c61 RCX: ffff88802b7cda00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90009b678e0 R08: ffffffff81877337 R09: 1ffffffff2600500 R10: dffffc0000000000 R11: fffffbfff2600501 R12: dffffc0000000000 R13: ffff8880b9446308 R14: ffff8880b953fb80 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f097673abd0 CR3: 000000000e134000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2085 [inline] text_poke_bp_batch+0x726/0xb30 arch/x86/kernel/alternative.c:2357 text_poke_flush arch/x86/kernel/alternative.c:2486 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xb5/0x250 mm/kfence/core.c:833 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2e/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244