rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14450/1:b..l P14466/1:b..l rcu: (detected by 1, t=10502 jiffies, g=60033, q=321 ncpus=2) task:syz-executor.2 state:R running task stack:23984 pid:14466 tgid:14465 ppid:5086 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7058 irqentry_exit+0x5e/0x90 kernel/entry/common.c:348 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:instrument_atomic_read include/linux/instrumented.h:68 [inline] RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] RIP: 0010:test_ti_thread_flag include/linux/thread_info.h:118 [inline] RIP: 0010:test_tsk_thread_flag include/linux/sched.h:1950 [inline] RIP: 0010:signal_pending include/linux/sched/signal.h:391 [inline] RIP: 0010:bpf_test_timer_continue+0x66/0x350 net/bpf/test_run.c:75 Code: 84 c0 48 89 14 24 0f 85 56 02 00 00 03 2a 89 2a 89 ef 89 de e8 ab 98 0a f8 39 dd 0f 83 c2 00 00 00 65 48 8b 1c 25 80 d0 03 00 <48> 89 df be 08 00 00 00 e8 5d e8 6d f8 49 89 dc 49 c1 ec 03 43 80 RSP: 0018:ffffc9000f787958 EFLAGS: 00000287 RAX: 0000000000000002 RBX: ffff88805ba61e00 RCX: 0000000000040000 RDX: ffff88805ba61e00 RSI: 0000000060000000 RDI: 0000000000022ac0 RBP: 0000000000022ac0 R08: ffffffff898a5e65 R09: 1ffffffff1f0e74d R10: dffffc0000000000 R11: fffffbfff1f0e74e R12: ffffc9000f787cb0 R13: ffffc9000f787ae0 R14: 1ffff92001ef0f5c R15: dffffc0000000000 bpf_test_run+0x459/0x900 net/bpf/test_run.c:427 bpf_prog_test_run_skb+0xafa/0x13a0 net/bpf/test_run.c:1058 bpf_prog_test_run+0x33c/0x3b0 kernel/bpf/syscall.c:4240 __sys_bpf+0x48d/0x810 kernel/bpf/syscall.c:5649 __do_sys_bpf kernel/bpf/syscall.c:5738 [inline] __se_sys_bpf kernel/bpf/syscall.c:5736 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5736 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f676927dda9 RSP: 002b:00007f67685ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007f67693abf80 RCX: 00007f676927dda9 RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 000000000000000a RBP: 00007f67692ca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f67693abf80 R15: 00007fff2be42ef8 task:syz-executor.0 state:R running task stack:24248 pid:14450 tgid:14450 ppid:5083 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7058 irqentry_exit+0x5e/0x90 kernel/entry/common.c:348 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:lock_acquire+0x25b/0x530 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 d3 a8 86 00 f6 44 24 61 02 0f 85 8e 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000ebbf320 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92001d77e70 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8baad360 RDI: ffffffff8bfed300 RBP: ffffc9000ebbf468 R08: ffffffff92ce5507 R09: 1ffffffff259caa0 R10: dffffc0000000000 R11: fffffbfff259caa1 R12: 1ffff92001d77e6c R13: dffffc0000000000 R14: ffffc9000ebbf380 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:298 [inline] rcu_read_lock include/linux/rcupdate.h:750 [inline] __pte_offset_map+0x9e/0x380 mm/pgtable-generic.c:285 __pte_offset_map_lock+0xc7/0x300 mm/pgtable-generic.c:369 pte_offset_map_lock include/linux/mm.h:2958 [inline] zap_pte_range mm/memory.c:1429 [inline] zap_pmd_range mm/memory.c:1597 [inline] zap_pud_range mm/memory.c:1626 [inline] zap_p4d_range mm/memory.c:1647 [inline] unmap_page_range+0xa14/0x3610 mm/memory.c:1668 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1758 exit_mmap+0x2c6/0xd40 mm/mmap.c:3287 __mmput+0x115/0x3c0 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:569 do_exit+0x99e/0x27e0 kernel/exit.c:865 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 __do_sys_exit_group kernel/exit.c:1038 [inline] __se_sys_exit_group kernel/exit.c:1036 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f3bbd87dda9 RSP: 002b:00007ffef6ca3488 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3bbd87dda9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000849 R09: 0000000000000000 R10: 0000001b31020000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g60033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=29293 rcu: rcu_preempt kthread starved for 10502 jiffies! g60033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:24920 pid:16 tgid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5409 [inline] __schedule+0x17d3/0x4a20 kernel/sched/core.c:6736 __schedule_loop kernel/sched/core.c:6813 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6828 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2572 rcu_gp_fqs_loop+0x2df/0x1370 kernel/rcu/tree.c:1663 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1862 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 14476 Comm: syz-executor.5 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:206 Code: 8b 3d 6c 1c 1c 0c 48 89 de 5b e9 23 fb 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 80 d0 03 00 65 8b 15 20 db 6e 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc90000007c28 EFLAGS: 00000087 RAX: ffffffff898196ed RBX: 0000000004000000 RCX: ffff888024e49e00 RDX: ffff888024e49e00 RSI: 0000000004000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff898196d4 R09: fffff52000000f80 R10: dffffc0000000000 R11: fffff52000000f80 R12: 0000000000000000 R13: ffff88802b9d7000 R14: ffff88802b9d7000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31a21000 CR3: 0000000068f84000 CR4: 0000000000350ef0 Call Trace: taprio_set_budgets+0x17d/0x370 net/sched/sch_taprio.c:666 advance_sched+0x98d/0xca0 net/sched/sch_taprio.c:977 __run_hrtimer kernel/time/hrtimer.c:1692 [inline] __hrtimer_run_queues+0x597/0xd00 kernel/time/hrtimer.c:1756 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x109/0x3a0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x25b/0x530 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 d3 a8 86 00 f6 44 24 61 02 0f 85 8e 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9001010f1e0 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92002021e48 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8baad360 RDI: ffffffff8bfed300 RBP: ffffc9001010f328 R08: ffffffff92ce5507 R09: 1ffffffff259caa0 R10: dffffc0000000000 R11: fffffbfff259caa1 R12: 1ffff92002021e44 R13: dffffc0000000000 R14: ffffc9001010f240 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:298 [inline] rcu_read_lock_sched include/linux/rcupdate.h:842 [inline] pfn_valid+0x113/0x440 include/linux/mmzone.h:2016 page_table_check_clear+0x21/0x730 mm/page_table_check.c:68 zap_pte_range mm/memory.c:1452 [inline] zap_pmd_range mm/memory.c:1597 [inline] zap_pud_range mm/memory.c:1626 [inline] zap_p4d_range mm/memory.c:1647 [inline] unmap_page_range+0x1f7a/0x3610 mm/memory.c:1668 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1758 exit_mmap+0x2c6/0xd40 mm/mmap.c:3287 __mmput+0x115/0x3c0 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:569 do_exit+0x99e/0x27e0 kernel/exit.c:865 do_group_exit+0x207/0x2c0 kernel/exit.c:1027 get_signal+0x176e/0x1850 kernel/signal.c:2907 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:105 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline] syscall_exit_to_user_mode+0xc9/0x360 kernel/entry/common.c:212 do_syscall_64+0x10a/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f741a47dda9 Code: Unable to access opcode bytes at 0x7f741a47dd7f. RSP: 002b:00007f741b0fd178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f741a5abf88 RCX: 00007f741a47dda9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f741a5abf88 RBP: 00007f741a5abf80 R08: 00007f741b0fd6c0 R09: 00007f741b0fd6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f741a5abf8c R13: 000000000000000b R14: 00007fffdebc0040 R15: 00007fffdebc0128