rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (1 GPs behind) idle=1acc/1/0x4000000000000000 softirq=9752/9753 fqs=2
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6166/1:b..l
rcu: (detected by 1, t=10505 jiffies, g=14665, q=551 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6201 Comm: syz-executor.3 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
RIP: 0010:timerqueue_add+0x48/0x330 lib/timerqueue.c:38
Code: 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 92 02 00 00 48 8b 5d 00 48 89 ee 48 89 df e8 d8 7a c9 f6 <48> 39 eb 0f 85 47 02 00 00 e8 7a 80 c9 f6 48 8b 14 24 48 b8 00 00
RSP: 0018:ffffc90000007dc0 EFLAGS: 00000046
RAX: 0000000080010002 RBX: ffff888079e44340 RCX: ffffffff8ac37828
RDX: ffff888020e59e00 RSI: ffff888079e44340 RDI: 0000000000000006
RBP: ffff888079e44340 R08: 0000000000000006 R09: ffff888079e44340
R10: ffff888079e44340 R11: ffffffff8b0f38c0 R12: ffff8880b942c9c0
R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88e73220
FS: 00007fc1d8b516c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30721000 CR3: 000000002e19c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
enqueue_hrtimer+0x1c9/0x390 kernel/time/hrtimer.c:1098
__run_hrtimer kernel/time/hrtimer.c:1709 [inline]
__hrtimer_run_queues+0xa15/0xc20 kernel/time/hrtimer.c:1756
hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1818
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x10f/0x410 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 3f 95 f6 48 89 df e8 0e bb 95 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 08 87 f6 65 8b 05 e6 d0 2d 75 85 c0 74 16 5b
RSP: 0018:ffffc90003bbfa60 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff8880b942c9c0 RCX: 1ffffffff27b4f6f
RDX: 0000000000000000 RSI: ffffffff8b0cb740 RDI: ffffffff8b6e88a0
RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff27b4e30
R10: ffffffff93da7187 R11: 0000000000000002 R12: fe2329cadbb11c44
R13: 0000000000000000 R14: 0000001adb7d1f9e R15: dffffc0000000000
clock_was_set+0x591/0x850 kernel/time/hrtimer.c:973
timekeeping_inject_offset+0x4d1/0x640 kernel/time/timekeeping.c:1396
do_adjtimex+0x373/0xaa0 kernel/time/timekeeping.c:2445
do_clock_adjtime kernel/time/posix-timers.c:1159 [inline]
__do_sys_clock_adjtime+0x173/0x290 kernel/time/posix-timers.c:1171
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7fc1d7e7dda9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc1d8b510c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
RAX: ffffffffffffffda RBX: 00007fc1d7fabf80 RCX: 00007fc1d7e7dda9
RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000
RBP: 00007fc1d7eca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fc1d7fabf80 R15: 00007fff7d91c008
task:syz-executor.4 state:R running task stack:27216 pid:6166 tgid:6164 ppid:5088 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5409 [inline]
__schedule+0xf15/0x5c70 kernel/sched/core.c:6736
preempt_schedule_notrace+0x62/0xe0 kernel/sched/core.c:7008
preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:13
local_clock+0x23/0x30 kernel/sched/clock.c:316
__set_page_owner_handle+0x2b/0x3b0 mm/page_owner.c:169
__set_page_owner+0x48/0x60 mm/page_owner.c:200
set_page_owner include/linux/page_owner.h:31 [inline]
post_alloc_hook+0x2d4/0x350 mm/page_alloc.c:1533
prep_new_page mm/page_alloc.c:1540 [inline]
get_page_from_freelist+0xa28/0x3780 mm/page_alloc.c:3311
__alloc_pages+0x22b/0x2410 mm/page_alloc.c:4569
alloc_pages_mpol+0x258/0x600 mm/mempolicy.c:2133
shmem_alloc_folio+0x114/0x150 mm/shmem.c:1634
shmem_alloc_and_add_folio+0x14f/0x7b0 mm/shmem.c:1674
shmem_get_folio_gfp+0x685/0x13e0 mm/shmem.c:2061
shmem_get_folio mm/shmem.c:2166 [inline]
shmem_write_begin+0x15a/0x370 mm/shmem.c:2750
generic_perform_write+0x272/0x620 mm/filemap.c:3930
shmem_file_write_iter+0x114/0x140 mm/shmem.c:2926
call_write_iter include/linux/fs.h:2108 [inline]
new_sync_write fs/read_write.c:497 [inline]
vfs_write+0x6db/0x1100 fs/read_write.c:590
ksys_write+0x12f/0x260 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7ff4cac7caef
RSP: 002b:00007ff4cba3ee80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007ff4cac7caef
RDX: 0000000001000000 RSI: 00007ff4c1200000 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000061e8
R10: 0000000020000482 R11: 0000000000000293 R12: 0000000000000003
R13: 00007ff4cba3ef80 R14: 00007ff4cba3ef40 R15: 00007ff4c1200000
rcu: rcu_preempt kthread starved for 10495 jiffies! g14665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:29072 pid:16 tgid:16 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5409 [inline]
__schedule+0xf15/0x5c70 kernel/sched/core.c:6736
__schedule_loop kernel/sched/core.c:6813 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6828
schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2572
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:1663
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:1862
kthread+0x2c1/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 11 Comm: kworker/u8:1 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:311 [inline]
RIP: 0010:smp_call_function_many_cond+0x4e7/0x1590 kernel/smp.c:855
Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 4b 05 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 5d 0e 00 00 8b 43 08 31
RSP: 0018:ffffc90000107910 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880b94464e0 RCX: ffffffff8180f38b
RDX: ffff88801769bc00 RSI: ffffffff8180f365 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017288c9d
R13: 0000000000000001 R14: ffff8880b94464e8 R15: ffff8880b953f840
FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0013e44dc CR3: 000000000d57a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:2086 [inline]
text_poke_bp_batch+0x22b/0x760 arch/x86/kernel/alternative.c:2296
text_poke_flush arch/x86/kernel/alternative.c:2487 [inline]
text_poke_flush arch/x86/kernel/alternative.c:2484 [inline]
text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2494
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
jump_label_update+0x1d7/0x400 kernel/jump_label.c:829
static_key_enable_cpuslocked+0x1b7/0x270 kernel/jump_label.c:205
static_key_enable+0x1a/0x20 kernel/jump_label.c:218
toggle_allocation_gate mm/kfence/core.c:826 [inline]
toggle_allocation_gate+0xf8/0x250 mm/kfence/core.c:818
process_one_work+0x9a9/0x1a60 kernel/workqueue.c:3254
process_scheduled_works kernel/workqueue.c:3335 [inline]
worker_thread+0x6c8/0xf70 kernel/workqueue.c:3416
kthread+0x2c1/0x3a0 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243