rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (0 ticks this GP) idle=890c/1/0x4000000000000000 softirq=39818/39818 fqs=0 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12080/2:b..l (detected by 0, t=10506 jiffies, g=48681, q=119 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7869 Comm: kworker/1:14 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Workqueue: events p9_poll_workfn RIP: 0010:halt arch/x86/include/asm/irqflags.h:99 [inline] RIP: 0010:kvm_wait+0xc1/0x100 arch/x86/kernel/kvm.c:1060 Code: f4 48 83 c4 10 c3 89 74 24 0c 48 89 3c 24 e8 26 f9 4c 00 8b 74 24 0c 48 8b 3c 24 e9 6a ff ff ff 66 90 0f 00 2d 10 28 b4 08 f4 bf 89 74 24 0c 48 89 3c 24 e8 70 44 93 00 8b 74 24 0c 48 8b 3c RSP: 0018:ffffc9000c6279c0 EFLAGS: 00000046 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff888075ea7000 RBP: ffff888075ea7000 R08: 0000000000000001 R09: ffff888075ea7000 R10: ffffed100ebd4e00 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed100ebd4e00 R14: 0000000000000001 R15: ffff8880b9b3adc0 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f22d000 CR3: 000000007a3da000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_wait arch/x86/include/asm/paravirt.h:603 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline] __pv_queued_spin_lock_slowpath+0x8c7/0xb50 kernel/locking/qspinlock.c:511 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:591 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x200/0x2a0 kernel/locking/spinlock_debug.c:115 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline] _raw_spin_lock_irqsave+0x41/0x50 kernel/locking/spinlock.c:162 p9_tag_remove net/9p/client.c:367 [inline] p9_req_put net/9p/client.c:375 [inline] p9_req_put+0xc6/0x250 net/9p/client.c:372 p9_conn_cancel+0x640/0x970 net/9p/trans_fd.c:213 p9_poll_mux net/9p/trans_fd.c:627 [inline] p9_poll_workfn+0x25d/0x4e0 net/9p/trans_fd.c:1147 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.3 state:R running task stack:28168 pid:12080 ppid:3646 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5197 [inline] __schedule+0xae5/0x52c0 kernel/sched/core.c:6509 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6821 irqentry_exit+0x31/0x80 kernel/entry/common.c:428 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:85 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0xde/0x180 mm/kasan/generic.c:189 Code: 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 80 38 00 <74> f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c 2c eb 0c RSP: 0018:ffffc90003ddf598 EFLAGS: 00000246 RAX: fffffbfff1bbdd8a RBX: fffffbfff1bbdd8b RCX: ffffffff815fabb8 RDX: fffffbfff1bbdd8b RSI: 0000000000000008 RDI: ffffffff8ddeec50 RBP: fffffbfff1bbdd8a R08: 0000000000000000 R09: ffffffff8ddeec57 R10: fffffbfff1bbdd8a R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8bf8adc0 R15: 0000000000000000 instrument_atomic_read include/linux/instrumented.h:71 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] cpumask_test_cpu include/linux/cpumask.h:390 [inline] cpu_online include/linux/cpumask.h:965 [inline] trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0xb8/0x570 kernel/locking/lockdep.c:5637 rcu_lock_acquire include/linux/rcupdate.h:304 [inline] rcu_read_lock include/linux/rcupdate.h:738 [inline] percpu_ref_tryget_many include/linux/percpu-refcount.h:241 [inline] percpu_ref_tryget include/linux/percpu-refcount.h:266 [inline] css_tryget include/linux/cgroup.h:354 [inline] css_tryget include/linux/cgroup.h:351 [inline] get_mem_cgroup_from_mm+0x24e/0x530 mm/memcontrol.c:970 __mem_cgroup_charge+0x16/0x90 mm/memcontrol.c:6839 mem_cgroup_charge include/linux/memcontrol.h:688 [inline] __filemap_add_folio+0x511/0x1620 mm/filemap.c:851 filemap_add_folio+0xab/0x1d0 mm/filemap.c:933 __filemap_get_folio+0x385/0xed0 mm/filemap.c:1975 pagecache_get_page+0x2e/0x290 mm/folio-compat.c:104 ext4_da_write_begin+0x3f3/0xae0 fs/ext4/inode.c:2988 generic_perform_write+0x246/0x560 mm/filemap.c:3745 ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:270 ext4_file_write_iter+0x44a/0x1660 fs/ext4/file.c:679 call_write_iter include/linux/fs.h:2188 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x9e9/0xdd0 fs/read_write.c:578 ksys_write+0x127/0x250 fs/read_write.c:631 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd21aa893c9 RSP: 002b:00007fd21bb71168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fd21ab9c050 RCX: 00007fd21aa893c9 RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000006 RBP: 00007fd21aae433f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe0e539dbf R14: 00007fd21bb71300 R15: 0000000000022000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g48681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=28913 rcu: rcu_preempt kthread starved for 10506 jiffies! g48681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:29160 pid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5197 [inline] __schedule+0xae5/0x52c0 kernel/sched/core.c:6509 schedule+0xda/0x1b0 kernel/sched/core.c:6585 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1658 rcu_gp_kthread+0x236/0x360 kernel/rcu/tree.c:1857 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7869 Comm: kworker/1:14 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Workqueue: events p9_poll_workfn RIP: 0010:halt arch/x86/include/asm/irqflags.h:99 [inline] RIP: 0010:kvm_wait+0xc1/0x100 arch/x86/kernel/kvm.c:1060 Code: f4 48 83 c4 10 c3 89 74 24 0c 48 89 3c 24 e8 26 f9 4c 00 8b 74 24 0c 48 8b 3c 24 e9 6a ff ff ff 66 90 0f 00 2d 10 28 b4 08 f4 bf 89 74 24 0c 48 89 3c 24 e8 70 44 93 00 8b 74 24 0c 48 8b 3c RSP: 0018:ffffc9000c6279c0 EFLAGS: 00000046 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff888075ea7000 RBP: ffff888075ea7000 R08: 0000000000000001 R09: ffff888075ea7000 R10: ffffed100ebd4e00 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed100ebd4e00 R14: 0000000000000001 R15: ffff8880b9b3adc0 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f22d000 CR3: 000000007a3da000 CR4: 00000000003526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_wait arch/x86/include/asm/paravirt.h:603 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline] __pv_queued_spin_lock_slowpath+0x8c7/0xb50 kernel/locking/qspinlock.c:511 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:591 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x200/0x2a0 kernel/locking/spinlock_debug.c:115 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline] _raw_spin_lock_irqsave+0x41/0x50 kernel/locking/spinlock.c:162 p9_tag_remove net/9p/client.c:367 [inline] p9_req_put net/9p/client.c:375 [inline] p9_req_put+0xc6/0x250 net/9p/client.c:372 p9_conn_cancel+0x640/0x970 net/9p/trans_fd.c:213 p9_poll_mux net/9p/trans_fd.c:627 [inline] p9_poll_workfn+0x25d/0x4e0 net/9p/trans_fd.c:1147 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306