rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11696/1:b..l P18604/1:b..l P19725/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=148253, q=203 ncpus=2)
task:syz.1.4469 state:R running task stack:27680 pid:19725 tgid:19719 ppid:14119 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xe37/0x5490 kernel/sched/core.c:6529
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6708
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
zap_pte_range mm/memory.c:1688 [inline]
zap_pmd_range mm/memory.c:1736 [inline]
zap_pud_range mm/memory.c:1765 [inline]
zap_p4d_range mm/memory.c:1786 [inline]
unmap_page_range+0xbb8/0x3c10 mm/memory.c:1807
unmap_single_vma+0x194/0x2b0 mm/memory.c:1853
unmap_vmas+0x22f/0x490 mm/memory.c:1897
exit_mmap+0x1b8/0xb20 mm/mmap.c:3412
__mmput+0x12a/0x480 kernel/fork.c:1345
mmput+0x62/0x70 kernel/fork.c:1367
exit_mm kernel/exit.c:571 [inline]
do_exit+0x9bf/0x2bb0 kernel/exit.c:869
do_group_exit+0xd3/0x2a0 kernel/exit.c:1031
get_signal+0x25fd/0x2770 kernel/signal.c:2917
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f037e576e9b
RSP: 002b:00007f037df99f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffffc RBX: 000000000000000b RCX: 00007f037e576e9b
RDX: 00007f037df9aff0 RSI: 0000000080085502 RDI: 000000000000000b
RBP: 00007f037df9aff0 R08: 0000000000000080 R09: 00007f037df99fe8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000024 R15: 00007f037e5edee8
task:syz.2.4168 state:R running task stack:26712 pid:18604 tgid:18603 ppid:14139 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xe37/0x5490 kernel/sched/core.c:6529
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:mtree_range_walk+0x545/0xbe0 lib/maple_tree.c:2781
Code: f6 48 8b 44 24 38 48 89 44 24 28 e8 f5 7f 8d f6 48 8b 04 24 4c 8d b0 80 00 00 00 e9 27 fc ff ff e8 e0 7f 8d f6 e8 db 7f 8d f6 <44> 89 e6 bf 01 00 00 00 e8 6e 7a 8d f6 41 80 fc 01 0f 86 b0 03 00
RSP: 0018:ffffc900034bf798 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 000000000000000f RCX: ffffc9000403a000
RDX: 0000000000040000 RSI: ffffffff8afd12f5 RDI: 0000000000000006
RBP: 0000000000000000 R08: 0000000000000006 R09: 000000001fffefff
R10: 0000000020013000 R11: 0000000000000000 R12: 000000000000000a
R13: 0000000000000000 R14: 0000000020013000 R15: 000000001fffefff
mas_state_walk lib/maple_tree.c:3678 [inline]
mt_find+0x5af/0xa20 lib/maple_tree.c:6932
find_vma+0xc0/0x140 mm/mmap.c:2019
lock_mm_and_find_vma+0x62/0x6a0 mm/memory.c:5933
do_user_addr_fault+0x2b5/0x13f0 arch/x86/mm/fault.c:1361
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71
Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
RSP: 0018:ffffc900034bfb40 EFLAGS: 00050246
RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040
RDX: fffff52000697f81 RSI: ffffc900034bfbc8 RDI: 0000000020013000
RBP: 0000000020013000 R08: 0000000000000000 R09: fffff52000697f80
R10: ffffc900034bfc07 R11: 0000000000000000 R12: ffffc900034bfbc8
R13: 0000000020013040 R14: 0000000000000000 R15: 0000000000011580
copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline]
_copy_to_user lib/usercopy.c:46 [inline]
_copy_to_user+0xac/0xc0 lib/usercopy.c:39
copy_to_user include/linux/uaccess.h:191 [inline]
rng_dev_read+0x25d/0x720 drivers/char/hw_random/core.c:251
do_loop_readv_writev fs/read_write.c:761 [inline]
do_loop_readv_writev fs/read_write.c:749 [inline]
vfs_readv+0x6cb/0x8a0 fs/read_write.c:934
do_preadv fs/read_write.c:1049 [inline]
__do_sys_preadv fs/read_write.c:1099 [inline]
__se_sys_preadv fs/read_write.c:1094 [inline]
__x64_sys_preadv+0x22b/0x310 fs/read_write.c:1094
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f714b377299
RSP: 002b:00007f714c133048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f714b505f80 RCX: 00007f714b377299
RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000008
RBP: 00007f714b3e48e6 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f714b505f80 R15: 00007ffd3fb2bf98
task:syz.4.2215 state:R running task stack:24320 pid:11696 tgid:11683 ppid:6359 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xe37/0x5490 kernel/sched/core.c:6529
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60 kernel/kcov.c:207
Code: c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 64 48 79 7e <65> 8b 05 65 48 79 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74
RSP: 0018:ffffc90003c774e8 EFLAGS: 00000202
RAX: ffffffff81cf49c1 RBX: ffff88807c54d580 RCX: ffffffff81cf49d7
RDX: ffff888026181e00 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000017
R13: ffffc90003c775f8 R14: 0000000000000000 R15: ffff88807c54d580
rcu_read_lock include/linux/rcupdate.h:839 [inline]
count_memcg_event_mm.part.0+0x13f/0x340 include/linux/memcontrol.h:1016
count_memcg_event_mm include/linux/memcontrol.h:560 [inline]
mm_account_fault mm/memory.c:5699 [inline]
handle_mm_fault+0x1b5/0x7b0 mm/memory.c:5859
do_user_addr_fault+0x7a3/0x13f0 arch/x86/mm/fault.c:1389
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71
Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
RSP: 0018:ffffc90003c776a0 EFLAGS: 00050206
RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000
RDX: 0000000000000000 RSI: ffff888060897000 RDI: 00000000201ff000
RBP: 00000000201ff000 R08: 0000000000000000 R09: ffffed100c112fff
R10: ffff888060897fff R11: 0000000000000000 R12: ffffc90003c77b38
R13: 0000000020200000 R14: ffff888060897000 R15: 0000000000000000
copy_user_generic arch/x86/include/asm/uaccess_64.h:110 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:131 [inline]
copy_to_user_iter lib/iov_iter.c:25 [inline]
iterate_ubuf include/linux/iov_iter.h:29 [inline]
iterate_and_advance2 include/linux/iov_iter.h:245 [inline]
iterate_and_advance include/linux/iov_iter.h:271 [inline]
_copy_to_iter+0x37e/0x1150 lib/iov_iter.c:185
copy_page_to_iter lib/iov_iter.c:362 [inline]
copy_page_to_iter+0xf1/0x180 lib/iov_iter.c:349
copy_folio_to_iter include/linux/uio.h:180 [inline]
filemap_read+0x69f/0xd10 mm/filemap.c:2676
blkdev_read_iter+0x18d/0x490 block/fops.c:764
aio_read+0x31c/0x4e0 fs/aio.c:1602
__io_submit_one fs/aio.c:2003 [inline]
io_submit_one+0x1487/0x1df0 fs/aio.c:2052
__do_sys_io_submit fs/aio.c:2111 [inline]
__se_sys_io_submit fs/aio.c:2081 [inline]
__x64_sys_io_submit+0x19d/0x330 fs/aio.c:2081
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f183c177299
RSP: 002b:00007f183ce73048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 00007f183c306058 RCX: 00007f183c177299
RDX: 00000000200000c0 RSI: 00000000000000ca RDI: 00007f183ce52000
RBP: 00007f183c1e48e6 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f183c306058 R15: 00007fff72b49be8
rcu: rcu_preempt kthread starved for 10613 jiffies! g148253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0xe37/0x5490 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6621
schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2034
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2236
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 48 69 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d b8 82 aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246
RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b115519
RDX: 0000000000000001 RSI: ffff888019edc800 RDI: ffff888019edc864
RBP: ffff888019edc864 R08: 0000000000000001 R09: ffffed1017266fe1
R10: ffff8880b9337f0b R11: 0000000000000000 R12: ffff888019bbd800
R13: ffffffff8e94eac0 R14: 0000000000000001 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000db7c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
acpi_idle_enter+0xc5/0x160 drivers/acpi/processor_idle.c:702
cpuidle_enter_state+0x85/0x500 drivers/cpuidle/cpuidle.c:267
cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388
cpuidle_idle_call kernel/sched/idle.c:230 [inline]
do_idle+0x313/0x3f0 kernel/sched/idle.c:326
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:424
start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313
common_startup_64+0x13e/0x148