rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9878/1:b..l.. P9421/1:b..l.. P9894/3:b..l..
rcu: (detected by 0, t=10578 jiffies, g=54193, q=447 ncpus=2)
task:syz.0.951 state:R running task stack:25608 pid:9894 tgid:9892 ppid:5618 task_flags:0x400040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662
irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline]
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:37 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:179 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 kernel/kcov.c:223
Code: 48 89 df 5b e9 9d 7a 6d 00 be 03 00 00 00 5b e9 d2 7b 2a 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <65> 48 8b 05 3c cd aa 13 48 8b 34 24 65 48 8b 15 20 cd aa 13 48 63
RSP: 0018:ffffc90004f2f448 EFLAGS: 00000282
RAX: dffffc0000000000 RBX: 00002000004f0000 RCX: ffffc90006991000
RDX: 1ffff11006fe4802 RSI: ffffffff827160fb RDI: 0000000000000001
RBP: 1ffff920009e5e8a R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000200 R11: 0000000000000001 R12: ffffc90004f2f570
R13: ffff888037f24010 R14: 0000000074266067 R15: ffffc90004f2f918
__pte_offset_map+0xf4/0x470 mm/pgtable-generic.c:308
pte_offset_map_lock+0x8d/0x320 mm/pgtable-generic.c:419
filemap_map_pages+0x42a/0x2020 mm/filemap.c:3959
do_fault_around mm/memory.c:6027 [inline]
do_read_fault mm/memory.c:6060 [inline]
do_fault+0xa76/0x1890 mm/memory.c:6203
do_pte_missing mm/memory.c:4763 [inline]
handle_pte_fault mm/memory.c:6627 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6776
handle_mm_fault+0x363/0xa20 mm/memory.c:6943
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x8a9/0x2c20 mm/gup.c:1428
populate_vma_page_range+0x2bb/0x450 mm/gup.c:1864
__mm_populate+0x107/0x3a0 mm/gup.c:1967
mm_populate include/linux/mm.h:4447 [inline]
vm_mmap_pgoff+0x44a/0x490 mm/util.c:586
ksys_mmap_pgoff+0xe4/0x610 mm/mmap.c:619
__do_sys_mmap arch/x86/kernel/sys_x86_64.c:96 [inline]
__se_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
__x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:89
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa87a79f559
RSP: 002b:00007fa87b5e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fa87aa25fa0 RCX: 00007fa87a79f559
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007fa87a836b20 R08: ffffffffffffffff R09: 00000000d6d1c000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa87aa26038 R14: 00007fa87aa25fa0 R15: 00007ffd8373be58
task:syz.2.823 state:R running task stack:19768 pid:9421 tgid:9421 ppid:5617 task_flags:0xc00e40 flags:0x0008000b
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662
irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline]
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947
Code: 05 cf c9 cf 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de a1 80 10 0f 82 c9 02 00 00 8b 35 be d1 80 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d c9 cf 13 0f 85 09 03 00 00 48 83 c4
RSP: 0018:ffffc90003316170 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200
RDX: 0000000000000000 RSI: ffffffff8e5faf72 RDI: ffffffff8c833580
RBP: ffffffff8ffeb4e0 R08: 0000000077819771 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
shrink_slab_memcg mm/shrinker.c:552 [inline]
shrink_slab+0x8d0/0x12d0 mm/shrinker.c:647
shrink_node_memcgs mm/vmscan.c:6440 [inline]
shrink_node+0x7c1/0x4410 mm/vmscan.c:6482
shrink_zones mm/vmscan.c:6701 [inline]
do_try_to_free_pages+0x2da/0x1500 mm/vmscan.c:6763
try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:7044
try_charge_memcg+0x505/0xf30 mm/memcontrol.c:2773
charge_memcg+0x1ae/0x210 mm/memcontrol.c:5373
__mem_cgroup_charge+0x2b/0x1e0 mm/memcontrol.c:5390
mem_cgroup_charge include/linux/memcontrol.h:682 [inline]
shmem_alloc_and_add_folio+0x451/0xd40 mm/shmem.c:2189
shmem_get_folio_gfp+0x758/0x1af0 mm/shmem.c:2732
shmem_fault+0x1fb/0xa30 mm/shmem.c:2926
__do_fault+0x10b/0x440 mm/memory.c:5634
do_read_fault mm/memory.c:6069 [inline]
do_fault+0xb3f/0x1890 mm/memory.c:6203
do_pte_missing mm/memory.c:4763 [inline]
handle_pte_fault mm/memory.c:6627 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6776
handle_mm_fault+0x363/0xa20 mm/memory.c:6943
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x8a9/0x2c20 mm/gup.c:1428
__get_user_pages_locked mm/gup.c:1692 [inline]
get_dump_page+0x27e/0x3d0 mm/gup.c:2207
dump_user_range+0x19c/0xe90 fs/coredump.c:1593
elf_core_dump+0x2d97/0x3d60 fs/binfmt_elf.c:2106
coredump_write fs/coredump.c:1150 [inline]
do_coredump fs/coredump.c:1235 [inline]
vfs_coredump+0x2606/0x5920 fs/coredump.c:1310
get_signal+0x1f20/0x21d0 kernel/signal.c:3097
arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
irqentry_exit+0x542/0xab0 kernel/entry/common.c:152
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x0
RSP: 002b:0000200000000388 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f4ac7226090 RCX: 00007f4ac6f9f559
RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000020000
RBP: 00007f4ac7036b20 R08: 00002000000003c0 R09: 00002000000003c0
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f4ac7226128 R14: 00007f4ac7226090 R15: 00007ffd9244c2d8
task:syz.5.944 state:R running task stack:21336 pid:9878 tgid:9877 ppid:6655 task_flags:0x40054c flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_common kernel/sched/core.c:7561 [inline]
preempt_schedule+0x57/0xd0 kernel/sched/core.c:7585
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:213
spin_unlock include/linux/spinlock.h:401 [inline]
zap_pte_range mm/memory.c:2058 [inline]
zap_pmd_range mm/memory.c:2114 [inline]
zap_pud_range mm/memory.c:2142 [inline]
zap_p4d_range mm/memory.c:2163 [inline]
__zap_vma_range+0x23c4/0x4980 mm/memory.c:2203
unmap_vmas+0x294/0x5f0 mm/memory.c:2272
exit_mmap+0x1ef/0xa40 mm/mmap.c:1315
__mmput+0x12a/0x410 kernel/fork.c:1192
mmput+0x62/0x70 kernel/fork.c:1215
exit_mm kernel/exit.c:586 [inline]
do_exit+0x80c/0x2a00 kernel/exit.c:967
do_group_exit+0xd5/0x2a0 kernel/exit.c:1123
get_signal+0x1ebd/0x21d0 kernel/signal.c:3112
arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop+0x139/0x700 kernel/entry/common.c:101
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline]
do_syscall_64+0x661/0x790 arch/x86/entry/syscall_64.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb34e79f559
RSP: 002b:00007fb34f69d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fb34ea25fa8 RCX: 00007fb34e79f559
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb34ea25fa8
RBP: 00007fb34ea25fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb34ea26038 R14: 00007ffea40792c0 R15: 00007ffea40793a8
rcu: rcu_preempt kthread starved for 10593 jiffies! g54193 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28248 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x930 kernel/rcu/tree.c:2122
rcu_gp_kthread+0x179/0x260 kernel/rcu/tree.c:2330
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 47 a3 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 dd 1f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8fc07cf0 EFLAGS: 00000242
RAX: 0000000002069ad9 RBX: ffffffff8fc91540 RCX: ffffffff8bebe325
RDX: 0000000000000001 RSI: ffffffff8e621faf RDI: ffffffff8c833580
RBP: fffffbfff1f922a8 R08: 0000000000000001 R09: ffffed1017006825
R10: ffff8880b803412b R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffffffff1f80fa2 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff88812248e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33724224 CR3: 0000000059d37000 CR4: 00000000003526f0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:768
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
rest_init+0x2d3/0x2e0 init/main.c:789
start_kernel+0x48e/0x490 init/main.c:1247
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x158