rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11471/1:b..l rcu: (detected by 0, t=10504 jiffies, g=58061, q=262 ncpus=2) task:syz.4.1345 state:R running task stack:25080 pid:11471 tgid:11470 ppid:5605 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa00 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline] RIP: 0010:unwind_next_frame+0x2ec/0x2090 arch/x86/kernel/unwind_orc.c:510 Code: 4f 8d 84 00 c8 89 ba 91 49 81 f8 66 3d 83 92 0f 87 8f 08 00 00 29 ca 48 8d 3c bd b4 bc 34 91 4c 89 f9 48 89 c6 e8 34 f5 ff ff <48> 89 c1 48 85 c9 0f 85 c5 01 00 00 48 b8 00 00 00 00 00 fc ff df RSP: 0018:ffffc9000db669f8 EFLAGS: 00000296 RAX: ffffffff91ba89da RBX: 0000000000000001 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9134bcc0 RBP: ffffc9000db66ab0 R08: ffffffff91ba8aa6 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000000001 R12: ffffc9000db66ab8 R13: ffffc9000db66a68 R14: ffffc9000db66a9d R15: ffffffff8100012f arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950 compute_subprog_args.constprop.0+0x40a9/0x6eb0 kernel/bpf/liveness.c:1760 analyze_subprog+0x406/0x31d0 kernel/bpf/liveness.c:1890 bpf_compute_subprog_arg_access+0x278/0x14e0 kernel/bpf/liveness.c:2032 bpf_compute_live_registers+0x59c/0x1310 kernel/bpf/liveness.c:2244 bpf_check+0x697f/0xb7d0 kernel/bpf/verifier.c:19872 bpf_prog_load+0x244d/0x2fa0 kernel/bpf/syscall.c:3197 __sys_bpf+0x18dc/0x4e80 kernel/bpf/syscall.c:6418 __do_sys_bpf kernel/bpf/syscall.c:6537 [inline] __se_sys_bpf kernel/bpf/syscall.c:6534 [inline] __x64_sys_bpf+0xce/0x140 kernel/bpf/syscall.c:6534 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f10f939de59 RSP: 002b:00007f10fa1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007f10f9625fa0 RCX: 00007f10f939de59 RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 RBP: 00007f10f9433e6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f10f9626038 R14: 00007f10f9625fa0 R15: 00007ffece59eb38 rcu: rcu_preempt kthread starved for 10502 jiffies! g58061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 11469 Comm: syz.5.1344 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline] RIP: 0010:smp_call_function_many_cond+0x5ad/0x16c0 kernel/smp.c:892 Code: c9 95 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 13 90 0c 00 <45> 85 f6 75 d0 e8 99 95 0c 00 e8 94 95 0c 00 83 c3 01 bf 07 00 00 RSP: 0018:ffffc9000e0bf650 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd46fd RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88807eb42540 RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c348ea9 CR3: 0000000040ec5000 CR4: 00000000003526f0 DR0: 0000000000000002 DR1: 00000000000012ad DR2: 0000000000007611 DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1057 __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x45f/0x16f0 arch/x86/mm/tlb.c:1451 tlb_flush arch/x86/include/asm/tlb.h:23 [inline] tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:509 [inline] tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:499 [inline] tlb_flush_mmu mm/mmu_gather.c:423 [inline] tlb_finish_mmu+0x3fe/0x810 mm/mmu_gather.c:549 exit_mmap+0x454/0xa00 mm/mmap.c:1313 __mmput+0x12a/0x410 kernel/fork.c:1187 mmput+0x67/0x80 kernel/fork.c:1210 exit_mm kernel/exit.c:615 [inline] do_exit+0x8b1/0x2ae0 kernel/exit.c:997 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x139/0x6f0 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0a0cb9de59 Code: Unable to access opcode bytes at 0x7f0a0cb9de2f. RSP: 002b:00007f0a0da2d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f0a0ce26098 RCX: 00007f0a0cb9de59 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a0ce26098 RBP: 00007f0a0ce26090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0a0ce26128 R14: 00007fff73886d90 R15: 00007fff73886e78