rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18177/1:b..l rcu: (detected by 0, t=10505 jiffies, g=180261, q=204 ncpus=2) task:syz-executor.1 state:R running task stack:24240 pid:18177 tgid:18177 ppid:18176 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xedb/0x5af0 kernel/sched/core.c:6688 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6865 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3a/0x40 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] copy_pte_range mm/memory.c:1115 [inline] copy_pmd_range mm/memory.c:1176 [inline] copy_pud_range mm/memory.c:1213 [inline] copy_p4d_range mm/memory.c:1237 [inline] copy_page_range+0x12c1/0x3c40 mm/memory.c:1335 dup_mmap+0x13da/0x1d90 kernel/fork.c:758 dup_mm kernel/fork.c:1691 [inline] copy_mm kernel/fork.c:1740 [inline] copy_process+0x43c8/0x73f0 kernel/fork.c:2502 kernel_clone+0xfd/0x930 kernel/fork.c:2907 __do_sys_clone+0xba/0x100 kernel/fork.c:3050 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7fbb85479c13 RSP: 002b:00007fff5f6c1ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb85479c13 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 000055555703f750 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g180261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=225103 rcu: rcu_preempt kthread starved for 10503 jiffies! g180261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28192 pid:16 tgid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5376 [inline] __schedule+0xedb/0x5af0 kernel/sched/core.c:6688 __schedule_loop kernel/sched/core.c:6763 [inline] schedule+0xe9/0x270 kernel/sched/core.c:6778 schedule_timeout+0x137/0x290 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x1ec/0xb10 kernel/rcu/tree.c:1631 rcu_gp_kthread+0x24b/0x380 kernel/rcu/tree.c:1830 kthread+0x2c6/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 25934 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:84 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:127 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:178 [inline] RIP: 0010:kasan_check_range+0xf7/0x190 mm/kasan/generic.c:187 Code: 00 00 48 85 d2 74 1e 41 83 e2 07 49 39 d1 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 c1 ed ff ff 83 f0 01 5b 5d 41 5c c3 <48> 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 RSP: 0018:ffffc900003f8ab8 EFLAGS: 00000083 RAX: fffffbfff23e1fd0 RBX: fffffbfff23e1fd1 RCX: ffffffff8166037e RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff91f0fe80 RBP: fffffbfff23e1fd0 R08: 0000000000000000 R09: fffffbfff23e1fd0 R10: ffffffff91f0fe87 R11: 0000000000000002 R12: ffff888077cd0c90 R13: ffffed100ef9a187 R14: 0000000000000001 R15: 0000000000000002 FS: 00007f8d315bc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd952435000 CR3: 000000007a07b000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228 __lock_acquire+0xc65/0x3b20 kernel/locking/lockdep.c:5134 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1ae/0x520 kernel/locking/lockdep.c:5719 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162 debug_object_deactivate lib/debugobjects.c:783 [inline] debug_object_deactivate+0x113/0x320 lib/debugobjects.c:771 debug_hrtimer_deactivate kernel/time/hrtimer.c:427 [inline] debug_deactivate kernel/time/hrtimer.c:483 [inline] __run_hrtimer kernel/time/hrtimer.c:1656 [inline] __hrtimer_run_queues+0x470/0xc20 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline] __sysvec_apic_timer_interrupt+0x105/0x400 arch/x86/kernel/apic/apic.c:1082 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x70 kernel/locking/spinlock.c:194 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 37 e4 f6 48 89 df e8 ee ae e4 f6 f7 c5 00 02 00 00 75 1f 9c 58 f6 c4 02 75 2f 01 00 00 00 e8 25 68 d6 f6 65 8b 05 a6 10 81 75 85 c0 74 12 5b RSP: 0018:ffffc90003a8fa40 EFLAGS: 00000246 RAX: 0000000000000006 RBX: ffff8880795d1488 RCX: 1ffffffff1e306c9 RDX: 0000000000000000 RSI: ffffffff8acc9f40 RDI: ffffffff8b2ed3e0 RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff8f1868d7 R11: 0000000000000000 R12: dffffc0000000000 R13: 197f35ecb9001bbb R14: 17a25f9cb9001bbb R15: ffff8880795d1488 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] timerfd_clock_was_set+0x164/0x310 fs/timerfd.c:113 clock_was_set+0x67d/0x850 kernel/time/hrtimer.c:982 timekeeping_inject_offset+0x4d1/0x640 kernel/time/timekeeping.c:1395 do_adjtimex+0x373/0xaa0 kernel/time/timekeeping.c:2444 do_clock_adjtime kernel/time/posix-timers.c:1159 [inline] __do_sys_clock_adjtime+0x173/0x280 kernel/time/posix-timers.c:1171 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f8d32a7cbe9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8d315bc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 RAX: ffffffffffffffda RBX: 00007f8d32b9c120 RCX: 00007f8d32a7cbe9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 RBP: 00007f8d32ac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f8d32b9c120 R15: 00007ffcf38e72d8