sched: DL replenish lagged too much rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5596/1:b..l P13/1:b..l P43/1:b..l rcu: (detected by 0, t=10502 jiffies, g=47369, q=1066048 ncpus=1) task:kworker/u8:2 state:R running task stack:22904 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound toggle_allocation_gate Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 preempt_schedule_common+0x3c/0xb0 kernel/sched/core.c:7449 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] __text_poke+0x502/0xae0 arch/x86/kernel/alternative.c:2477 smp_text_poke_batch_finish+0x2fb/0xc60 arch/x86/kernel/alternative.c:2809 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x37a/0x550 kernel/jump_label.c:910 static_key_disable_cpuslocked+0x162/0x1c0 kernel/jump_label.c:240 static_key_disable+0x1a/0x20 kernel/jump_label.c:248 toggle_allocation_gate mm/kfence/core.c:909 [inline] toggle_allocation_gate+0x149/0x2d0 mm/kfence/core.c:894 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387 process_scheduled_works kernel/workqueue.c:3470 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kworker/u8:1 state:R running task stack:24184 pid:13 tgid:13 ppid:2 task_flags:0x24248160 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 preempt_schedule_notrace+0x57/0xd0 kernel/sched/core.c:7542 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x90/0xc0 kernel/rcu/tree.c:754 trace_lock_acquire include/trace/events/lock.h:23 [inline] lock_acquire+0x306/0x370 kernel/locking/lockdep.c:5849 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] percpu_ref_put_many include/linux/percpu-refcount.h:331 [inline] percpu_ref_put include/linux/percpu-refcount.h:352 [inline] blk_mq_dispatch_list+0x56c/0x1360 block/blk-mq.c:2922 blk_mq_flush_plug_list block/blk-mq.c:2966 [inline] blk_mq_flush_plug_list+0x130/0x600 block/blk-mq.c:2938 __blk_flush_plug+0x2c4/0x4b0 block/blk-core.c:1270 blk_flush_plug include/linux/blk_plug.h:51 [inline] io_schedule_prepare kernel/sched/core.c:8159 [inline] io_schedule+0x85/0xf0 kernel/sched/core.c:8189 rq_qos_wait+0x22d/0x330 block/blk-rq-qos.c:307 __wbt_wait block/blk-wbt.c:598 [inline] wbt_wait+0x18a/0x310 block/blk-wbt.c:658 __rq_qos_throttle+0x56/0xa0 block/blk-rq-qos.c:66 rq_qos_throttle block/blk-rq-qos.h:164 [inline] rq_qos_throttle block/blk-rq-qos.h:160 [inline] blk_mq_get_new_requests block/blk-mq.c:3032 [inline] blk_mq_submit_bio+0xc03/0x3000 block/blk-mq.c:3170 __submit_bio+0x90/0x3d0 block/blk-core.c:673 __submit_bio_noacct_mq block/blk-core.c:756 [inline] submit_bio_noacct_nocheck+0x549/0xc00 block/blk-core.c:790 submit_bio_noacct+0xc93/0x2130 block/blk-core.c:925 blk_crypto_submit_bio include/linux/blk-crypto.h:212 [inline] ext4_io_submit+0xf7/0x1a0 fs/ext4/page-io.c:396 ext4_do_writepages+0x9d8/0x3e80 fs/ext4/inode.c:2888 ext4_writepages+0x34a/0x750 fs/ext4/inode.c:3032 do_writepages+0x278/0x600 mm/page-writeback.c:2560 __writeback_single_inode+0x164/0x1560 fs/fs-writeback.c:1788 writeback_sb_inodes+0x766/0x1c50 fs/fs-writeback.c:2099 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2175 wb_writeback+0x6f6/0xb50 fs/fs-writeback.c:2286 wb_check_old_data_flush fs/fs-writeback.c:2390 [inline] wb_do_writeback fs/fs-writeback.c:2469 [inline] wb_workfn+0x93f/0xc80 fs/fs-writeback.c:2497 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387 process_scheduled_works kernel/workqueue.c:3470 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz-executor state:R running task stack:23464 pid:5596 tgid:5596 ppid:5592 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7592 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:rcu_preempt_read_exit kernel/rcu/tree_plugin.h:396 [inline] RIP: 0010:__rcu_read_unlock+0x16/0x5e0 kernel/rcu/tree_plugin.h:435 Code: 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 55 53 65 48 8b 1d 12 a2 9a 12 <48> 8d bb c4 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 RSP: 0018:ffffc900048772c8 EFLAGS: 00000292 RAX: 0000000000000000 RBX: ffff888032ff2580 RCX: ffffc900048772c4 RDX: 0000000000000000 RSI: ffffffff8e3c4977 RDI: ffffffff8c61f080 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000000001 R12: ffffc900048773c0 R13: ffffc90004877370 R14: ffffc90004877f48 R15: 0000000004878001 rcu_read_unlock include/linux/rcupdate.h:882 [inline] class_rcu_destructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0x3c8/0x2090 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:183 __reset_page_owner+0x84/0x190 mm/page_owner.c:338 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] free_unref_folios+0xa4a/0x1790 mm/page_alloc.c:3022 folios_put_refs+0x585/0xaa0 mm/folio.c:1055 folio_batch_release include/linux/folio_batch.h:101 [inline] shmem_undo_range+0x5e5/0x1570 mm/shmem.c:1160 shmem_truncate_range mm/shmem.c:1288 [inline] shmem_evict_inode+0x3b1/0xca0 mm/shmem.c:1419 evict+0x3c2/0xad0 fs/inode.c:822 iput_final fs/inode.c:2015 [inline] iput.part.0+0x989/0x1050 fs/inode.c:2064 iput+0x35/0x40 fs/inode.c:2030 filename_unlinkat+0x466/0x730 fs/namei.c:5723 __do_sys_unlink fs/namei.c:5754 [inline] __se_sys_unlink fs/namei.c:5751 [inline] __x64_sys_unlink+0x46/0x70 fs/namei.c:5751 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6e7519d1c7 RSP: 002b:00007ffd1d2fdef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e7519d1c7 RDX: 00007ffd1d2fdf20 RSI: 00007ffd1d2fdfb0 RDI: 00007ffd1d2fdfb0 RBP: 00007ffd1d2fdfb0 R08: 00007ffd1d2fefb0 R09: 00000000ffffffff R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd1d2ff040 R13: 00007f6e75234474 R14: 000000000004d73b R15: 00007ffd1d2ff080 rcu: rcu_preempt kthread starved for 396 jiffies! g47369 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27576 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x1259/0x6920 kernel/sched/core.c:7270 __schedule_loop kernel/sched/core.c:7347 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7362 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x8f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x17a/0x220 kernel/rcu/tree.c:2330 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 3221 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 Workqueue: bat_events batadv_tt_purge RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 kernel/kcov.c:310 Code: bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 1a fe ff ff 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffffc90000006f60 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffff8881d1fb1500 RCX: ffffffff899bc177 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000005 R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000028 R13: ffff8881d1fb1581 R14: ffff8881d1fb1558 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd422d6f90 CR3: 000000007acf8000 CR4: 00000000003526f0 Call Trace: __netif_rx+0x47/0xb0 net/core/dev.c:5798 loopback_xmit+0x284/0x6e0 drivers/net/loopback.c:90 __netdev_start_xmit include/linux/netdevice.h:5429 [inline] netdev_start_xmit include/linux/netdevice.h:5438 [inline] xmit_one net/core/dev.c:3937 [inline] dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926 dev_queue_xmit include/linux/netdevice.h:3461 [inline] neigh_hh_output include/net/neighbour.h:544 [inline] neigh_output include/net/neighbour.h:558 [inline] ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314 __ip_finish_output net/ipv4/ip_output.c:302 [inline] ip_finish_output net/ipv4/ip_output.c:324 [inline] NF_HOOK_COND include/linux/netfilter.h:314 [inline] ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437 dst_output include/net/dst.h:470 [inline] ip_local_out+0x193/0x1f0 net/ipv4/ip_output.c:131 synproxy_send_tcp.isra.0+0x4c6/0x6e0 net/netfilter/nf_synproxy_core.c:442 synproxy_send_client_synack+0x6ea/0x970 net/netfilter/nf_synproxy_core.c:487 nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:59 [inline] nft_synproxy_do_eval+0xa1c/0xce0 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x2e5/0x19d0 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0xf3/0x400 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619 nf_hook.constprop.0+0x2a6/0x750 include/linux/netfilter.h:280 NF_HOOK include/linux/netfilter.h:323 [inline] ip_local_deliver+0x163/0x1f0 net/ipv4/ip_input.c:262 dst_input include/net/dst.h:480 [inline] ip_rcv_finish net/ipv4/ip_input.c:492 [inline] NF_HOOK include/linux/netfilter.h:325 [inline] NF_HOOK include/linux/netfilter.h:319 [inline] ip_rcv+0x33a/0x3c0 net/ipv4/ip_input.c:612 __netif_receive_skb_one_core+0x197/0x1e0 net/core/dev.c:6264 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6377 process_backlog+0x487/0x1600 net/core/dev.c:6728 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0xa40/0xf20 net/core/dev.c:8007 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645 do_softirq kernel/softirq.c:546 [inline] do_softirq+0xaf/0xf0 kernel/softirq.c:533 __local_bh_enable_ip+0xff/0x120 kernel/softirq.c:473 spin_unlock_bh include/linux/spinlock.h:407 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2390 [inline] batadv_tt_purge+0x25d/0xbd0 net/batman-adv/translation-table.c:3754 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387 process_scheduled_works kernel/workqueue.c:3470 [inline] rescuer_thread+0x918/0x14e0 kernel/workqueue.c:3694 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245