rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (0 ticks this GP) idle=2194/1/0x4000000000000000 softirq=38136/38136 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2462/1:b..l P13016/1:b..l P5086/1:b..l P13019/1:b..l P5099/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=54593, q=129 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 13034 Comm: syz-executor.0 Not tainted 6.7.0-rc2-syzkaller-00014-gc2d5304e6c64 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
RIP: 0010:do_raw_write_seqcount_barrier include/linux/seqlock.h:622 [inline]
RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1714 [inline]
RIP: 0010:__hrtimer_run_queues+0x6e2/0xd20 kernel/time/hrtimer.c:1752
Code: ee 31 d2 e8 00 29 00 00 eb 11 e8 d9 1b 11 00 4c 8b 6c 24 38 eb 0a e8 cd 1b 11 00 48 8b 5c 24 10 48 8b 74 24 50 42 0f b6 04 3e <84> c0 48 8b 54 24 18 0f 85 a8 01 00 00 ff 02 42 0f b6 04 3e 84 c0
RSP: 0018:ffffc900001f0d60 EFLAGS: 00000086
RAX: 0000000000000000 RBX: ffff8880b992b9c8 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 1ffff11017325732 RDI: ffff888080adb340
RBP: ffffc900001f0ea8 R08: ffff888080adb357 R09: 0000000000000000
R10: ffff888080adb340 R11: ffffed101015b66b R12: ffff8880b992b880
R13: ffff8880b992b980 R14: ffff888080adb340 R15: dffffc0000000000
FS: 00007f8ff5d086c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8ff5198000 CR3: 00000000177d1000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hrtimer_interrupt+0x396/0x980 kernel/time/hrtimer.c:1814
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline]
__sysvec_apic_timer_interrupt+0x104/0x3a0 arch/x86/kernel/apic/apic.c:1082
sysvec_apic_timer_interrupt+0x92/0xb0 arch/x86/kernel/apic/apic.c:1076
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e 22 c9 f6 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 33 75 3f f6 65 8b 05 f4 82 e2 74 85 c0 74 3f 48 c7 04 24 0e 36
RSP: 0018:ffffc900057d7b40 EFLAGS: 00000206
RAX: 3428d6fee23aae00 RBX: 1ffff92000afaf6c RCX: ffffffff925cc303
RDX: dffffc0000000000 RSI: ffffffff8b6aaf60 RDI: 0000000000000001
RBP: ffffc900057d7bd0 R08: ffffffff8f00c02f R09: 1ffffffff1e01805
R10: dffffc0000000000 R11: fffffbfff1e01806 R12: dffffc0000000000
R13: 1ffff92000afaf68 R14: ffffc900057d7b60 R15: 0000000000000246
do_adjtimex+0x6a6/0xab0 kernel/time/timekeeping.c:2470
do_clock_adjtime kernel/time/posix-timers.c:1159 [inline]
__do_sys_clock_adjtime kernel/time/posix-timers.c:1171 [inline]
__se_sys_clock_adjtime kernel/time/posix-timers.c:1162 [inline]
__x64_sys_clock_adjtime+0x1e0/0x290 kernel/time/posix-timers.c:1162
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f8ff507cae9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f8ff5d080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
RAX: ffffffffffffffda RBX: 00007f8ff519bf80 RCX: 00007f8ff507cae9
RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000
RBP: 00007f8ff50c847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f8ff519bf80 R15: 00007fff6207e9a8
task:syz-executor.1 state:R running task stack:19632 pid:5099 tgid:5099 ppid:5080 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
preempt_schedule_common+0x83/0xc0 kernel/sched/core.c:6865
preempt_schedule+0xdd/0xf0 kernel/sched/core.c:6889
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3a/0x40 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
copy_pte_range mm/memory.c:1115 [inline]
copy_pmd_range mm/memory.c:1176 [inline]
copy_pud_range mm/memory.c:1213 [inline]
copy_p4d_range mm/memory.c:1237 [inline]
copy_page_range+0x3793/0x43e0 mm/memory.c:1335
dup_mmap kernel/fork.c:758 [inline]
dup_mm kernel/fork.c:1691 [inline]
copy_mm+0x11fc/0x1f10 kernel/fork.c:1740
copy_process+0x1d6f/0x3fb0 kernel/fork.c:2502
kernel_clone+0x222/0x840 kernel/fork.c:2907
__do_sys_clone kernel/fork.c:3050 [inline]
__se_sys_clone kernel/fork.c:3034 [inline]
__x64_sys_clone+0x258/0x2a0 kernel/fork.c:3034
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fef19079b13
RSP: 002b:00007ffc0e399b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef19079b13
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 0000555556357750 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
task:syz-executor.3 state:R running task stack:24560 pid:13019 tgid:13019 ppid:5108 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
preempt_schedule_common+0x83/0xc0 kernel/sched/core.c:6865
preempt_schedule+0xdd/0xf0 kernel/sched/core.c:6889
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3a/0x40 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
insert_page mm/memory.c:1880 [inline]
vm_insert_page+0x3e4/0x680 mm/memory.c:2032
kcov_mmap+0xed/0x160 kernel/kcov.c:496
call_mmap include/linux/fs.h:2025 [inline]
mmap_region+0xf47/0x1fa0 mm/mmap.c:2851
do_mmap+0x76b/0xde0 mm/mmap.c:1379
vm_mmap_pgoff+0x1e2/0x420 mm/util.c:556
ksys_mmap_pgoff+0x4ff/0x6d0 mm/mmap.c:1425
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fa80987cb23
RSP: 002b:00007ffd9997d3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fa80999c288 RCX: 00007fa80987cb23
RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 00000000000000db R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 00007fa80999c1f0
R13: 0000000000000f53 R14: 00007fa80999c1f0 R15: 00007ffd9997d4e8
task:syz-executor.5 state:R running task stack:19672 pid:5086 tgid:5086 ppid:5078 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
preempt_schedule_common+0x83/0xc0 kernel/sched/core.c:6865
preempt_schedule+0xdd/0xf0 kernel/sched/core.c:6889
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45
unwind_next_frame+0x211e/0x29e0 arch/x86/kernel/unwind_orc.c:672
arch_stack_walk+0x146/0x1a0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x117/0x1c0 kernel/stacktrace.c:122
save_stack+0xfa/0x1e0 mm/page_owner.c:128
__reset_page_owner+0x4f/0x190 mm/page_owner.c:149
reset_page_owner include/linux/page_owner.h:24 [inline]
free_pages_prepare mm/page_alloc.c:1137 [inline]
free_unref_page_prepare+0x931/0xa60 mm/page_alloc.c:2347
free_unref_page_list+0x5a0/0x840 mm/page_alloc.c:2533
release_pages+0x2117/0x2400 mm/swap.c:1042
__folio_batch_release+0x84/0x100 mm/swap.c:1062
folio_batch_release include/linux/pagevec.h:83 [inline]
shmem_undo_range+0x6aa/0x19d0 mm/shmem.c:1004
shmem_truncate_range mm/shmem.c:1096 [inline]
shmem_evict_inode+0x29b/0xa60 mm/shmem.c:1224
evict+0x2a4/0x630 fs/inode.c:664
__dentry_kill+0x436/0x660 fs/dcache.c:607
dentry_kill+0xbb/0x290
dput+0x21e/0x470 fs/dcache.c:913
__fput+0x60b/0xa10 fs/file_table.c:402
task_work_run+0x24a/0x300 kernel/task_work.c:180
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:171
exit_to_user_mode_prepare+0xb1/0x150 kernel/entry/common.c:204
__syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
syscall_exit_to_user_mode+0x69/0x2a0 kernel/entry/common.c:296
do_syscall_64+0x52/0x110 arch/x86/entry/common.c:88
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fadece7de17
RSP: 002b:00007ffe594d5508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadece7de17
RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe594d55c0
RBP: 00007ffe594d55c0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe594d6680
R13: 00007fadecec73b9 R14: 00000000000e30d7 R15: 0000000000000004
task:syz-executor.2 state:R running task stack:23536 pid:13016 tgid:13012 ppid:5096 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
preempt_schedule_irq+0xfb/0x1b0 kernel/sched/core.c:7008
irqentry_exit+0x5a/0x80 kernel/entry/common.c:432
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:lock_acquire+0x25a/0x530 kernel/locking/lockdep.c:5757
Code: 2b 00 74 08 4c 89 f7 e8 64 31 7d 00 f6 44 24 61 02 0f 85 8a 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc900055beee0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92000ab7de8 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8b6ac0e0 RDI: ffffffff8bbdf380
RBP: ffffc900055bf028 R08: ffffffff90dd4367 R09: 1ffffffff21ba86c
R10: dffffc0000000000 R11: fffffbfff21ba86d R12: 1ffff92000ab7de4
R13: dffffc0000000000 R14: ffffc900055bef40 R15: 0000000000000246
rcu_lock_acquire include/linux/rcupdate.h:301 [inline]
rcu_read_lock include/linux/rcupdate.h:747 [inline]
__pte_offset_map+0x9e/0x380 mm/pgtable-generic.c:285
__pte_offset_map_lock+0xc7/0x300 mm/pgtable-generic.c:369
pte_offset_map_lock include/linux/mm.h:2946 [inline]
wp_page_copy mm/memory.c:3157 [inline]
do_wp_page+0x18e7/0x4d40 mm/memory.c:3510
handle_pte_fault mm/memory.c:5054 [inline]
__handle_mm_fault mm/memory.c:5179 [inline]
handle_mm_fault+0x1b1c/0x6680 mm/memory.c:5344
do_user_addr_fault arch/x86/mm/fault.c:1413 [inline]
handle_page_fault arch/x86/mm/fault.c:1505 [inline]
exc_page_fault+0x2ad/0x870 arch/x86/mm/fault.c:1561
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0010:rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:71
Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 85 c9 75 b3
RSP: 0018:ffffc900055bf978 EFLAGS: 00050206
RAX: ffff888010790001 RBX: 00000000202d3e80 RCX: 0000000000000e80
RDX: 0000000000000000 RSI: ffff888010790180 RDI: 00000000202d4000
RBP: ffffc900055bfaf8 R08: ffff888010790fff R09: 1ffff110020f21ff
R10: dffffc0000000000 R11: ffffed10020f2200 R12: 0000000000001000
R13: 0000000000001000 R14: ffffc900055bfe30 R15: ffff888010790000
copy_user_generic arch/x86/include/asm/uaccess_64.h:112 [inline]
raw_copy_to_user arch/x86/include/asm/uaccess_64.h:133 [inline]
copy_to_user_iter lib/iov_iter.c:25 [inline]
iterate_iovec include/linux/iov_iter.h:51 [inline]
iterate_and_advance2 include/linux/iov_iter.h:247 [inline]
iterate_and_advance include/linux/iov_iter.h:271 [inline]
_copy_to_iter+0x4a0/0x1cf0 lib/iov_iter.c:186
copy_page_to_iter+0xb1/0x160 lib/iov_iter.c:381
process_vm_rw_pages mm/process_vm_access.c:45 [inline]
process_vm_rw_single_vec mm/process_vm_access.c:117 [inline]
process_vm_rw_core mm/process_vm_access.c:215 [inline]
process_vm_rw+0x86e/0xcf0 mm/process_vm_access.c:283
__do_sys_process_vm_readv mm/process_vm_access.c:295 [inline]
__se_sys_process_vm_readv mm/process_vm_access.c:291 [inline]
__x64_sys_process_vm_readv+0xe0/0xf0 mm/process_vm_access.c:291
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f0944a7cae9
RSP: 002b:00007f09458990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
RAX: ffffffffffffffda RBX: 00007f0944b9bf80 RCX: 00007f0944a7cae9
RDX: 0000000000000002 RSI: 0000000020008400 RDI: 00000000000004d9
RBP: 00007f0944ac847a R08: 0000000000000286 R09: 0000000000000000
R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f0944b9bf80 R15: 00007ffc96d52528
task:kworker/u4:7 state:R running task stack:20296 pid:2462 tgid:2462 ppid:2 flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
preempt_schedule_irq+0xfb/0x1b0 kernel/sched/core.c:7008
irqentry_exit+0x5a/0x80 kernel/entry/common.c:432
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:650
RIP: 0010:lock_acquire+0x25a/0x530 kernel/locking/lockdep.c:5757
Code: 2b 00 74 08 4c 89 f7 e8 64 31 7d 00 f6 44 24 61 02 0f 85 8a 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc9000a947a20 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92001528f50 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8b6ac0e0 RDI: ffffffff8bbdf380
RBP: ffffc9000a947b80 R08: ffffffff90dd4367 R09: 1ffffffff21ba86c
R10: dffffc0000000000 R11: fffffbfff21ba86d R12: 1ffff92001528f4c
R13: dffffc0000000000 R14: ffffc9000a947a80 R15: 0000000000000246
rcu_lock_acquire include/linux/rcupdate.h:301 [inline]
rcu_read_lock include/linux/rcupdate.h:747 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
batadv_nc_worker+0xec/0x610 net/batman-adv/network-coding.c:719
process_one_work kernel/workqueue.c:2630 [inline]
process_scheduled_works+0x90f/0x1420 kernel/workqueue.c:2703
worker_thread+0xa5f/0x1000 kernel/workqueue.c:2784
kthread+0x2d3/0x370 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g54593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=46178
rcu: rcu_preempt kthread starved for 10502 jiffies! g54593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:26256 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5376 [inline]
__schedule+0x1961/0x4ab0 kernel/sched/core.c:6688
__schedule_loop kernel/sched/core.c:6763 [inline]
schedule+0x149/0x260 kernel/sched/core.c:6778
schedule_timeout+0x1bd/0x300 kernel/time/timer.c:2167
rcu_gp_fqs_loop+0x30a/0x1500 kernel/rcu/tree.c:1631
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1830
kthread+0x2d3/0x370 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242