rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (3 ticks this GP) idle=e2f4/1/0x4000000000000000 softirq=10696/10696 fqs=0
	(detected by 1, t=10504 jiffies, g=10537, q=734 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4426 Comm: kworker/u4:7 Not tainted 6.1.140-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: writeback wb_workfn (flush-8:0)
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:101 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x5f/0x290 mm/kasan/generic.c:189
Code: 00 00 fc ff df 49 89 fb 49 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 <4d> 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c
RSP: 0018:ffffc90000007b40 EFLAGS: 00000807
RAX: 0000000000000001 RBX: 1ffffffff1bfd005 RCX: ffffffff8162e9d9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfe8028
RBP: ffffc90000007c68 R08: dffffc0000000000 R09: fffffbfff1bfd005
R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: 0000000000000000
R13: 1ffff92000000f78 R14: fffffbfff1bfd006 R15: dffffc0000000001
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005626dabd09e8 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 cpumask_test_cpu include/linux/cpumask.h:444 [inline]
 cpu_online include/linux/cpumask.h:1030 [inline]
 trace_lock_acquire include/trace/events/lock.h:24 [inline]
 lock_acquire+0xd9/0x490 kernel/locking/lockdep.c:5633
 rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 rcu_read_lock include/linux/rcupdate.h:791 [inline]
 advance_sched+0x6e8/0x970 net/sched/sch_taprio.c:753
 __run_hrtimer kernel/time/hrtimer.c:1691 [inline]
 __hrtimer_run_queues+0x522/0xc80 kernel/time/hrtimer.c:1755
 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1817
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__kasan_check_read+0x0/0x10 mm/kasan/shadow.c:31
Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 20 42 39 8c eb 0a 48 c7 c7 35 98 22 8c 48 89 de e8 08 d7 31 08 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24
RSP: 0018:ffffc90003466cf8 EFLAGS: 00000293
RAX: ffffffff81b821a5 RBX: ffffea0001bd6800 RCX: ffff88802fff8000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001bd6800
RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff9400037ad01
R10: fffff9400037ad01 R11: 1ffffd400037ad00 R12: 1ffffd400037ad01
R13: 1ffffd400037ad00 R14: ffffea0001bd6808 R15: dffffc0000000000
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 folio_test_swapbacked include/linux/page-flags.h:502 [inline]
 folio_test_swapcache include/linux/page-flags.h:543 [inline]
 folio_mapping+0xe2/0x4d0 mm/util.c:775
 folio_mkclean+0x15c/0x330 mm/rmap.c:1046
 folio_clear_dirty_for_io+0x20a/0xc30 mm/page-writeback.c:2886
 mpage_submit_page+0x8a/0x210 fs/ext4/inode.c:2122
 mpage_map_and_submit_buffers fs/ext4/inode.c:2387 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2526 [inline]
 ext4_writepages+0x1a84/0x2e50 fs/ext4/inode.c:2855
 do_writepages+0x3b7/0x610 mm/page-writeback.c:2491
 __writeback_single_inode+0x156/0x1160 fs/fs-writeback.c:1612
 writeback_sb_inodes+0xad8/0x17d0 fs/fs-writeback.c:1903
 __writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:1974
 wb_writeback+0x47a/0xd00 fs/fs-writeback.c:2079
 wb_check_old_data_flush fs/fs-writeback.c:2179 [inline]
 wb_do_writeback fs/fs-writeback.c:2232 [inline]
 wb_workfn+0xb66/0xec0 fs/fs-writeback.c:2260
 process_one_work+0x898/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10503 jiffies! g10537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=0 timer-softirq=3253
rcu: rcu_preempt kthread starved for 10504 jiffies! g10537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:28192 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4426 Comm: kworker/u4:7 Not tainted 6.1.140-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: writeback wb_workfn (flush-8:0)
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0xcd/0x910 kernel/locking/lockdep.c:5673
Code: 69 16 9b 0c 0f 83 22 05 00 00 41 89 de c1 eb 06 48 8d 3c dd 28 80 fe 8d be 08 00 00 00 e8 bb e2 6e 00 4c 0f a3 35 3b 14 9b 0c <73> 0d e8 cc 99 07 00 84 c0 0f 84 29 05 00 00 48 c7 c0 e4 b4 fe 8d
RSP: 0018:ffffc90000007b40 EFLAGS: 00000057
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81636be5
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfe8028
RBP: ffffc90000007c60 R08: dffffc0000000000 R09: fffffbfff1bfd006
R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: ffff88807bb412e8
R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f74
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005626dabd09e8 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_unlock include/linux/spinlock_api_smp.h:141 [inline]
 _raw_spin_unlock+0x12/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 advance_sched+0x687/0x970 net/sched/sch_taprio.c:749
 __run_hrtimer kernel/time/hrtimer.c:1691 [inline]
 __hrtimer_run_queues+0x522/0xc80 kernel/time/hrtimer.c:1755
 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1817
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__kasan_check_read+0x0/0x10 mm/kasan/shadow.c:31
Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 20 42 39 8c eb 0a 48 c7 c7 35 98 22 8c 48 89 de e8 08 d7 31 08 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24
RSP: 0018:ffffc90003466cf8 EFLAGS: 00000293
RAX: ffffffff81b821a5 RBX: ffffea0001bd6800 RCX: ffff88802fff8000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001bd6800
RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff9400037ad01
R10: fffff9400037ad01 R11: 1ffffd400037ad00 R12: 1ffffd400037ad01
R13: 1ffffd400037ad00 R14: ffffea0001bd6808 R15: dffffc0000000000
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 folio_test_swapbacked include/linux/page-flags.h:502 [inline]
 folio_test_swapcache include/linux/page-flags.h:543 [inline]
 folio_mapping+0xe2/0x4d0 mm/util.c:775
 folio_mkclean+0x15c/0x330 mm/rmap.c:1046
 folio_clear_dirty_for_io+0x20a/0xc30 mm/page-writeback.c:2886
 mpage_submit_page+0x8a/0x210 fs/ext4/inode.c:2122
 mpage_map_and_submit_buffers fs/ext4/inode.c:2387 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2526 [inline]
 ext4_writepages+0x1a84/0x2e50 fs/ext4/inode.c:2855
 do_writepages+0x3b7/0x610 mm/page-writeback.c:2491
 __writeback_single_inode+0x156/0x1160 fs/fs-writeback.c:1612
 writeback_sb_inodes+0xad8/0x17d0 fs/fs-writeback.c:1903
 __writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:1974
 wb_writeback+0x47a/0xd00 fs/fs-writeback.c:2079
 wb_check_old_data_flush fs/fs-writeback.c:2179 [inline]
 wb_do_writeback fs/fs-writeback.c:2232 [inline]
 wb_workfn+0xb66/0xec0 fs/fs-writeback.c:2260
 process_one_work+0x898/0x1160 kernel/workqueue.c:2292
 worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>