rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 GPs behind) idle=968c/1/0x4000000000000000 softirq=21902/21902 fqs=2
rcu: (detected by 0, t=10502 jiffies, g=20169, q=1120 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6538 Comm: sed Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:rcu_is_watching+0x67/0xb0 kernel/rcu/tree.c:753
Code: 89 f7 e8 7c 8c 86 00 48 c7 c3 d8 e9 3e 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 11 93 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 07 69 0b 0a cc e8 d1 0f
RSP: 0018:ffffc90000a08c48 EFLAGS: 00000006
RAX: 000000000003968c RBX: ffff8880b87339d8 RCX: 0000000000010001
RDX: 0000000000000000 RSI: ffffffff8c27efe0 RDI: ffffffff8c27efa0
RBP: ffffffff89b9e128 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed10065c9656 R12: 0000000000000002
R13: ffffffff8e95d020 R14: ffffffff8e276798 R15: dffffc0000000000
FS: 00007f3710e22c80(0000) GS:ffff888125345000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3710ff6a90 CR3: 0000000076596000 CR4: 00000000003526f0
Call Trace:
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0x5f/0x350 kernel/locking/lockdep.c:5831
rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
rcu_read_lock include/linux/rcupdate.h:838 [inline]
advance_sched+0xa14/0xc90 net/sched/sch_taprio.c:991
__run_hrtimer kernel/time/hrtimer.c:1930 [inline]
__hrtimer_run_queues+0x3c0/0xa20 kernel/time/hrtimer.c:1994
hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
__sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1061
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_is_held_type+0x106/0x150 kernel/locking/lockdep.c:5945
Code: 19 00 00 b8 ff ff ff ff 65 0f c1 05 64 dd 8a 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7
RSP: 0018:ffffc90003867428 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046
RDX: 0000000000000000 RSI: ffffffff8e22a119 RDI: ffffffff8c27f000
RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff354174c R12: 0000000000000246
R13: ffff888027585c40 R14: ffff88802e694cb8 R15: 0000000000000000
lock_is_held include/linux/lockdep.h:249 [inline]
mt_locked lib/maple_tree.c:-1 [inline]
mt_slot lib/maple_tree.c:736 [inline]
mas_slot lib/maple_tree.c:769 [inline]
mas_validate_parent_slot lib/maple_tree.c:6982 [inline]
mt_validate+0x7a6/0x4320 lib/maple_tree.c:7172
validate_mm+0xd4/0x4c0 mm/vma.c:649
__split_vma+0x909/0xa40 mm/vma.c:567
split_vma mm/vma.c:596 [inline]
vma_modify+0xa30/0x2060 mm/vma.c:1680
vma_modify_flags+0x24b/0x330 mm/vma.c:1700
mprotect_fixup+0x47a/0xa80 mm/mprotect.c:756
do_mprotect_pkey+0x8ab/0xcd0 mm/mprotect.c:930
__do_sys_mprotect mm/mprotect.c:951 [inline]
__se_sys_mprotect mm/mprotect.c:948 [inline]
__x64_sys_mprotect+0x80/0x90 mm/mprotect.c:948
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f37111b92c7
Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83
RSP: 002b:00007ffc55df79e8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 00007f3710e900c0 RCX: 00007f37111b92c7
RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f3710e8d000
RBP: 00007ffc55df7cb0 R08: 0000000000000000 R09: 00007f3710f2bc90
R10: 00007f3710e900c0 R11: 0000000000000206 R12: 0000000000000030
R13: 0000004548ffebb6 R14: 0000000000000000 R15: 00007f37111cd310
rcu: rcu_preempt kthread starved for 10498 jiffies! g20169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x17b4/0x5680 kernel/sched/core.c:7183
__schedule_loop kernel/sched/core.c:7262 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7277
schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 6365 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline]
RIP: 0010:smp_call_function_many_cond+0xe32/0x1210 kernel/smp.c:892
Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 77 e7 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 22 e3 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 06 e3
RSP: 0000:ffffc90002f27820 EFLAGS: 00000293
RAX: ffffffff81b97aea RBX: 1ffff110170e8165 RCX: ffff88802f00bd80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90002f27950 R08: ffffffff903215b7 R09: 1ffffffff20642b6
R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b8740b28
R13: dffffc0000000000 R14: ffff8880b863c148 R15: 0000000000000001
FS: 00007f461a585880(0000) GS:ffff888125245000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005565a0a32a38 CR3: 000000007766e000 CR4: 00000000003526f0
Call Trace:
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1057
__flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline]
flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline]
flush_tlb_mm_range+0x5c3/0x10b0 arch/x86/mm/tlb.c:1451
flush_tlb_page arch/x86/include/asm/tlbflush.h:345 [inline]
ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:103
wp_page_copy mm/memory.c:3846 [inline]
do_wp_page+0x4129/0x5a00 mm/memory.c:4241
handle_pte_fault mm/memory.c:6333 [inline]
__handle_mm_fault mm/memory.c:6455 [inline]
handle_mm_fault+0x1520/0x3310 mm/memory.c:6624
do_user_addr_fault+0xa73/0x1340 arch/x86/mm/fault.c:1334
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f461a5aaa9a
Code: 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 53 48 85 ff 74 2f 48 8b 47 08 48 39 c7 74 21 48 8b 1f 48 39 df 74 19 48 89 18 <48> 89 43 08 e8 8d d9 ff ff 48 89 d8 5b c3 0f 1f 84 00 00 00 00 00
RSP: 002b:00007ffd829778c0 EFLAGS: 00010202
RAX: 00005565a0a330b0 RBX: 00005565a0a32a30 RCX: 0000000000000000
RDX: 00005565a0a3e430 RSI: 00005565a0a3af60 RDI: 00005565a0a384e0
RBP: 00005565a0a384e0 R08: 00005565a0a3af70 R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000297 R12: 0000556599b97588
R13: 00007ffd82977970 R14: 0000000000000000 R15: 0000000000000000