rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=e834/1/0x4000000000000000 softirq=158250/158251 fqs=582 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14523/1:b..l rcu: (detected by 1, t=10502 jiffies, g=243441, q=1624 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 14524 Comm: syz.3.17827 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:61 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x3a/0x290 mm/kasan/generic.c:189 Code: f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 00 00 48 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb <48> c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d RSP: 0018:ffffc90000007898 EFLAGS: 00000002 RAX: 0000000000000001 RBX: ffffffff9422f840 RCX: ffffffff81705bca RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9422f840 RBP: 000000000001ffff R08: ffffffff9422f848 R09: 1ffffffff2845f08 R10: dffffc0000000000 R11: fffffbfff2845f09 R12: ffff88808244da00 R13: dffffc0000000000 R14: 0000000000000100 R15: ffff88808244e508 FS: 00007f69785b06c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2af52d CR3: 00000000848c6000 CR4: 0000000000350ef0 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class kernel/locking/lockdep.c:227 [inline] mark_lock+0x9a/0x350 kernel/locking/lockdep.c:4655 mark_usage kernel/locking/lockdep.c:4598 [inline] __lock_acquire+0xc35/0x2040 kernel/locking/lockdep.c:5096 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 debug_object_activate+0x16d/0x510 lib/debugobjects.c:709 debug_hrtimer_activate kernel/time/hrtimer.c:423 [inline] debug_activate kernel/time/hrtimer.c:478 [inline] enqueue_hrtimer+0x30/0x3c0 kernel/time/hrtimer.c:1085 __run_hrtimer kernel/time/hrtimer.c:1706 [inline] __hrtimer_run_queues+0x6cb/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x112/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 6e 06 35 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 31 9d f5 65 8b 05 34 ef 3d 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc900033af540 EFLAGS: 00000206 RAX: 65b2a37232224c00 RBX: 1ffff92000675eac RCX: ffffffff9a386903 RDX: dffffc0000000000 RSI: ffffffff8c0ad7e0 RDI: 0000000000000001 RBP: ffffc900033af5d0 R08: ffffffff901bacef R09: 1ffffffff203759d R10: dffffc0000000000 R11: fffffbfff203759e R12: dffffc0000000000 R13: 1ffff92000675ea8 R14: ffffc900033af560 R15: 0000000000000246 debug_object_active_state+0x239/0x360 lib/debugobjects.c:946 debug_rcu_head_queue kernel/rcu/rcu.h:228 [inline] __call_rcu_common kernel/rcu/tree.c:3091 [inline] call_rcu+0xb5/0xa70 kernel/rcu/tree.c:3210 context_switch kernel/sched/core.c:5191 [inline] __schedule+0x1808/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 futex_wait_queue+0x14e/0x1d0 kernel/futex/waitwake.c:370 __futex_wait+0x17f/0x320 kernel/futex/waitwake.c:669 futex_wait+0x101/0x360 kernel/futex/waitwake.c:697 do_futex+0x33b/0x560 kernel/futex/syscalls.c:102 __do_sys_futex kernel/futex/syscalls.c:179 [inline] __se_sys_futex+0x3f9/0x480 kernel/futex/syscalls.c:160 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f697777def9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f69785b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f6977935f88 RCX: 00007f697777def9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6977935f88 RBP: 00007f6977935f80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6977935f8c R13: 0000000000000000 R14: 00007ffdb80fc1d0 R15: 00007ffdb80fc2b8 task:syz.2.17830 state:R running task stack:24672 pid:14523 tgid:14523 ppid:6950 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:867 [inline] RIP: 0010:page_ext_put+0x31/0xc0 mm/page_ext.c:550 Code: fb e8 23 51 8c ff 48 85 db 0f 84 93 00 00 00 e8 e5 77 b4 09 89 c3 31 ff 89 c6 e8 4a 55 8c ff 85 db 74 10 e8 c1 88 72 ff 84 c0 <74> 0e e8 f8 50 8c ff eb 56 e8 f1 50 8c ff eb 4f e8 ba 77 b4 09 89 RSP: 0000:ffffc900034af350 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88802dee9e00 RDX: ffff88802dee9e00 RSI: ffffffff8c60a8e0 RDI: ffffffff8c60a8a0 RBP: ffffc900034af450 R08: ffffffff82075596 R09: 1ffff11003ba092c R10: dffffc0000000000 R11: ffffed1003ba092d R12: 0000000000000001 R13: 0000000000000001 R14: ffff88801dd04988 R15: ffff88801dd049b0 __set_page_owner+0x3f0/0x800 mm/page_owner.c:328 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1500 prep_new_page mm/page_alloc.c:1508 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3446 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4702 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2263 pagetable_alloc_noprof include/linux/mm.h:2877 [inline] __pte_alloc_one_noprof include/asm-generic/pgalloc.h:70 [inline] pte_alloc_one+0x88/0x5d0 arch/x86/mm/pgtable.c:33 do_fault_around mm/memory.c:5030 [inline] do_read_fault mm/memory.c:5069 [inline] do_fault mm/memory.c:5208 [inline] do_pte_missing mm/memory.c:3964 [inline] handle_pte_fault+0x21b4/0x6fc0 mm/memory.c:5538 __handle_mm_fault mm/memory.c:5681 [inline] handle_mm_fault+0x1106/0x1bb0 mm/memory.c:5849 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline] handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fa264c5cc13 RSP: 002b:00007fff77210880 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 00007fa265a65720 RCX: 000000110c230000 RDX: ffffffff820acdc1 RSI: ffffffffbfffffff RDI: 0000000000000000 RBP: 0000000000000000 R08: 00007fa264f20000 R09: 00007fa264f22000 R10: 00000000820acdc5 R11: 0000000000000000 R12: ffffffff820ac4ab R13: 00007fa264f36018 R14: 0000000000000008 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 9315 jiffies! g243441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24848 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 14602 Comm: syz.5.17856 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:csd_lock_wait kernel/smp.c:312 [inline] RIP: 0010:smp_call_function_many_cond+0x1865/0x29d0 kernel/smp.c:856 Code: 89 e6 83 e6 01 31 ff e8 f9 16 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 a4 12 0c 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 88 12 0c 00 eb e4 44 RSP: 0018:ffffc900031cf800 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 1ffff11017108c09 RCX: 0000000000040000 RDX: ffffc9001e80a000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc900031cf9e0 R08: ffffffff818793e7 R09: 1ffffffff2845f13 R10: dffffc0000000000 R11: fffffbfff2845f14 R12: dffffc0000000000 R13: ffff8880b8846048 R14: ffff8880b893f8c0 R15: 0000000000000000 FS: 00007fd47b2996c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb4e8b36018 CR3: 000000006d2fe000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 kill_bdev block/bdev.c:90 [inline] blkdev_flush_mapping+0xfe/0x270 block/bdev.c:671 blkdev_put_whole block/bdev.c:678 [inline] bdev_release+0x460/0x700 block/bdev.c:1103 blkdev_release+0x15/0x20 block/fops.c:639 __fput+0x241/0x880 fs/file_table.c:431 task_work_run+0x251/0x310 kernel/task_work.c:228 get_signal+0x15e6/0x1740 kernel/signal.c:2689 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd47a57f69a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd47b298e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: fffffffffffffff4 RBX: 00007fd47b298ef0 RCX: 00007fd47a57f69a RDX: 0000000020004440 RSI: 0000000020000040 RDI: 00007fd47b298eb0 RBP: 0000000020004440 R08: 00007fd47b298ef0 R09: 00000000000008c0 R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000020000040 R13: 00007fd47b298eb0 R14: 000000000000442a R15: 0000000020000380