rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31536/3:b..l rcu: (detected by 0, t=10502 jiffies, g=105765, q=255 ncpus=2) task:syz.2.11036 state:R running task stack:23728 pid:31536 tgid:31535 ppid:5850 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pmdp_get_lockless include/linux/pgtable.h:615 [inline] RIP: 0010:__pte_offset_map+0x137/0x380 mm/pgtable-generic.c:289 Code: 03 00 00 48 c7 c2 60 72 15 8c e8 e4 43 85 ff 48 8d 5c 24 40 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 f9 8a 14 00 <4c> 89 6c 24 10 4d 8b 6d 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 RSP: 0018:ffffc90004317000 EFLAGS: 00000246 RAX: 1ffff1100bfaed02 RBX: ffffc90004317040 RCX: 0000000000080000 RDX: ffffc9000cd81000 RSI: 000000000007ffff RDI: 0000000000080000 RBP: ffffc900043170b0 R08: ffffffff81f5ce72 R09: 1ffffffff2857110 R10: dffffc0000000000 R11: fffffbfff2857111 R12: 1ffff92000862e04 R13: ffff88805fd76810 R14: dffffc0000000000 R15: ffffc90004317140 __pte_offset_map_lock+0xc7/0x300 mm/pgtable-generic.c:398 pte_offset_map_lock include/linux/mm.h:3026 [inline] filemap_map_pages+0x820/0x20d0 mm/filemap.c:3656 do_fault_around mm/memory.c:5280 [inline] do_read_fault mm/memory.c:5313 [inline] do_fault mm/memory.c:5456 [inline] do_pte_missing mm/memory.c:3979 [inline] handle_pte_fault+0x31d6/0x68a0 mm/memory.c:5801 __handle_mm_fault mm/memory.c:5944 [inline] handle_mm_fault+0x1106/0x1bb0 mm/memory.c:6112 faultin_page mm/gup.c:1187 [inline] __get_user_pages+0x1c82/0x49e0 mm/gup.c:1485 populate_vma_page_range+0x264/0x330 mm/gup.c:1923 __mm_populate+0x27a/0x460 mm/gup.c:2026 mm_populate include/linux/mm.h:3386 [inline] vm_mmap_pgoff+0x2c3/0x3d0 mm/util.c:585 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f308497ff19 RSP: 002b:00007f3085754058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007f3084b45fa0 RCX: 00007f308497ff19 RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 RBP: 00007f30849f3986 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f3084b45fa0 R15: 00007f3084c6fa38 rcu: rcu_preempt kthread starved for 4333 jiffies! g105765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25040 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6848 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:nbp_switchdev_frame_mark_tx_fwd_offload+0x0/0x120 net/bridge/br_switchdev.c:40 Code: ff 89 d9 80 e1 07 38 c1 7c e7 48 89 df e8 b8 52 68 f7 eb dd 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 54 53 49 89 f6 48 89 fb e8 49 6b fd RSP: 0018:ffffc900001e6f78 EFLAGS: 00000246 RAX: ffffffff8a98ef6c RBX: ffff88803e7dd780 RCX: ffff88801d2f8000 RDX: 0000000000000100 RSI: ffff88803e8ee000 RDI: ffff888029892800 RBP: ffffc900001e7050 R08: ffff88805ffe0163 R09: 1ffff1100bffc02c R10: dffffc0000000000 R11: ffffed100bffc02d R12: dffffc0000000000 R13: 0000000000000000 R14: ffff88803e8ee000 R15: ffff888029892800 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fce220fad58 CR3: 0000000034d30000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __br_forward+0x87/0x660 net/bridge/br_forward.c:84 deliver_clone net/bridge/br_forward.c:131 [inline] maybe_deliver+0xb3/0x150 net/bridge/br_forward.c:190 br_flood+0x2e4/0x660 net/bridge/br_forward.c:236 br_handle_frame_finish+0x18ba/0x1fe0 net/bridge/br_input.c:215 nf_hook_bridge_pre net/bridge/br_input.c:299 [inline] br_handle_frame+0xbf8/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x14eb/0x4690 net/core/dev.c:5566 __netif_receive_skb_one_core net/core/dev.c:5670 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5785 process_backlog+0x662/0x15b0 net/core/dev.c:6117 __napi_poll+0xcb/0x490 net/core/dev.c:6877 napi_poll net/core/dev.c:6946 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:7068 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:943 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244