rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31168/1:b..l P18260/1:b..l P16049/1:b..l rcu: (detected by 0, t=10503 jiffies, g=129833, q=201 ncpus=2) task:syz-executor.1 state:R running task stack:24256 pid:16049 tgid:16049 ppid:16047 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xee2/0x59a0 kernel/sched/core.c:6688 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7008 irqentry_exit+0x35/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:unwind_get_return_address+0x0/0xe0 arch/x86/kernel/unwind_orc.c:365 Code: 5d 41 5c c3 48 89 df e8 9e 1d a5 00 e9 47 ff ff ff 48 89 ef e8 91 1d a5 00 e9 09 ff ff ff e8 47 1d a5 00 eb a9 0f 1f 44 00 00 0f 1e fa 41 54 55 53 48 89 fb e8 d0 2c 4e 00 48 89 da 48 b8 00 RSP: 0018:ffffc9000321f428 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff813250e9 RDX: ffff88803ebd3b80 RSI: ffffffff81325096 RDI: ffffc9000321f438 RBP: ffffc9000321f4c8 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000321f438 R13: ffffffff8175f8c0 R14: ffffc9000321f4f8 R15: ffff88803ebd3b80 arch_stack_walk+0xbe/0x170 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:128 __reset_page_owner+0x5a/0x190 mm/page_owner.c:149 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1137 [inline] free_unref_page_prepare+0x4f8/0xa90 mm/page_alloc.c:2347 free_unref_page_list+0xe6/0xb30 mm/page_alloc.c:2533 release_pages+0x32a/0x14e0 mm/swap.c:1042 __folio_batch_release+0x77/0xe0 mm/swap.c:1062 folio_batch_release include/linux/pagevec.h:83 [inline] shmem_undo_range+0x57a/0x1030 mm/shmem.c:1004 shmem_truncate_range mm/shmem.c:1096 [inline] shmem_evict_inode+0x39f/0xba0 mm/shmem.c:1224 evict+0x2ed/0x6b0 fs/inode.c:664 iput_final fs/inode.c:1775 [inline] iput.part.0+0x55e/0x7a0 fs/inode.c:1801 iput+0x5c/0x80 fs/inode.c:1791 dentry_unlink_inode+0x292/0x430 fs/dcache.c:401 __dentry_kill+0x3b8/0x640 fs/dcache.c:607 dentry_kill fs/dcache.c:733 [inline] dput+0x8b7/0xf80 fs/dcache.c:913 __fput+0x3b9/0xbb0 fs/file_table.c:402 task_work_run+0x14d/0x240 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0x215/0x240 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x60 kernel/entry/common.c:296 do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:88 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7fd53707c84b RSP: 002b:00007ffefdb33330 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fd53707c84b RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 RBP: 00007ffefdb333ec R08: 0000000000000000 R09: 00007ffefdb330d7 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b R13: 00000000001daaa6 R14: 00000000001daa74 R15: 0000000000000001 task:kworker/u4:1 state:R running task stack:23488 pid:18260 tgid:18260 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_nc_worker Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xee2/0x59a0 kernel/sched/core.c:6688 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7008 irqentry_exit+0x35/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5721 Code: c1 05 dd 7d 99 7e 83 f8 01 0f 85 b0 02 00 00 9c 58 f6 c4 02 0f 85 9b 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc9000a257ac8 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff9200144af5b RCX: 0000000000000001 RDX: 1ffff1100de078c7 RSI: ffffffff8accbc20 RDI: ffffffff8b2eeb40 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff23e3fd0 R10: ffffffff91f1fe87 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8cfacfe0 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:301 [inline] rcu_read_lock include/linux/rcupdate.h:747 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline] batadv_nc_worker+0x16e/0x10e0 net/batman-adv/network-coding.c:719 process_one_work+0x884/0x15c0 kernel/workqueue.c:2630 process_scheduled_works kernel/workqueue.c:2703 [inline] worker_thread+0x8b9/0x1290 kernel/workqueue.c:2784 kthread+0x33c/0x440 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 task:syz-executor.5 state:R running task stack:26880 pid:31168 tgid:31160 ppid:14397 flags:0x00004006 Call Trace: rcu: rcu_preempt kthread starved for 10510 jiffies! g129833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27952 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xee2/0x59a0 kernel/sched/core.c:6688 __schedule_loop kernel/sched/core.c:6763 [inline] schedule+0xe7/0x270 kernel/sched/core.c:6778 schedule_timeout+0x157/0x2c0 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x1ec/0xb10 kernel/rcu/tree.c:1626 rcu_gp_kthread+0x249/0x380 kernel/rcu/tree.c:1825 kthread+0x33c/0x440 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 31165 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-15365-g305230142ae0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline] RIP: 0010:smp_call_function_many_cond+0x4db/0x1570 kernel/smp.c:855 Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 0c c5 0b 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 3c 0e 00 00 8b 43 08 31 ff 83 e0 01 41 RSP: 0018:ffffc90009e57a58 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff8880b98442c0 RCX: ffffffff817cd79a RDX: ffff88802566bb80 RSI: ffffffff817cd774 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1017308859 R13: 0000000000000001 R14: ffff8880b993d8c0 R15: ffff8880b98442c8 FS: 000055555694b480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e835000 CR3: 0000000018f90000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2006 [inline] text_poke_bp_batch+0x2ce/0x960 arch/x86/kernel/alternative.c:2216 text_poke_flush arch/x86/kernel/alternative.c:2407 [inline] text_poke_flush arch/x86/kernel/alternative.c:2404 [inline] text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2414 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x32e/0x410 kernel/jump_label.c:829 static_key_disable_cpuslocked+0x154/0x1b0 kernel/jump_label.c:235 static_key_disable+0x1a/0x20 kernel/jump_label.c:243 tracepoint_remove_func kernel/tracepoint.c:417 [inline] tracepoint_probe_unregister+0x4a1/0xd20 kernel/tracepoint.c:551 bpf_raw_tp_link_release+0x55/0xa0 kernel/bpf/syscall.c:3286 bpf_link_free+0xe4/0x1b0 kernel/bpf/syscall.c:2851 bpf_link_put_direct kernel/bpf/syscall.c:2882 [inline] bpf_link_release+0x63/0x80 kernel/bpf/syscall.c:2889 __fput+0x270/0xbb0 fs/file_table.c:394 __fput_sync+0x47/0x50 fs/file_table.c:475 __do_sys_close fs/open.c:1590 [inline] __se_sys_close fs/open.c:1575 [inline] __x64_sys_close+0x87/0xf0 fs/open.c:1575 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f4ba767b9da Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007ffdfb780340 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4ba767b9da RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 0000000000000032 R08: 0000001b2ee20000 R09: 00000000000006e4 R10: 00000000817407d1 R11: 0000000000000293 R12: 00007f4ba72040f0 R13: ffffffffffffffff R14: 00007f4ba7200000 R15: 00000000001dbe20