rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 GPs behind) idle=13cc/1/0x4000000000000000 softirq=16767/16768 fqs=1
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6185/1:b..l P5616/1:b..l
rcu: (detected by 0, t=10505 jiffies, g=12197, q=541 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6196 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:enqueue_hrtimer+0x99/0x2f0 kernel/time/hrtimer.c:1110
Code: ef e8 9b 17 14 03 41 0f b6 d4 44 89 ee 48 89 ef e8 cc f9 ff ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 1d 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c
RSP: 0018:ffffc90000a08e68 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffff8880b8528540 RCX: ffffffff81f4da06
RDX: 1ffff110170a50a8 RSI: ffffffff81f4d8c7 RDI: ffff88802fa6ca80
RBP: ffff888078ce0300 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: ffffc90000a08ff8 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b8528590
FS: 00007ffb1b0c46c0(0000) GS:ffff88812441a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33921ff8 CR3: 000000007ddca000 CR4: 00000000003526f0
Call Trace:
__run_hrtimer kernel/time/hrtimer.c:2048 [inline]
__hrtimer_run_queues+0x6ed/0x9c0 kernel/time/hrtimer.c:2096
hrtimer_interrupt+0x3e5/0x940 kernel/time/hrtimer.c:2215
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
__sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:futex_to_flags kernel/futex/futex.h:51 [inline]
RIP: 0010:do_futex+0x8e/0x440 kernel/futex/syscalls.c:111
Code: c7 00 f1 f1 f1 f1 c7 40 04 04 f3 f3 f3 65 48 8b 05 bf a2 14 12 48 89 44 24 70 8b 84 24 b0 00 00 00 89 44 24 38 e8 c2 a1 0d 00 <89> ee 31 ff e8 69 9c 0d 00 83 fd 01 19 ed 41 81 e7 00 01 00 00 e8
RSP: 0018:ffffc9000606fd70 EFLAGS: 00000283
RAX: 000000000000014f RBX: 0000000000000081 RCX: ffffc90006089000
RDX: 0000000000080000 RSI: ffffffff81fbbd5e RDI: 00007ffb1a415fac
RBP: 0000000000000080 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000c0dfb1
R13: 00007ffb1a415fac R14: 0000000000000001 R15: 0000000000000081
__do_sys_futex kernel/futex/syscalls.c:210 [inline]
__se_sys_futex kernel/futex/syscalls.c:191 [inline]
__x64_sys_futex+0x34f/0x4d0 kernel/futex/syscalls.c:191
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ffb1a19ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffb1b0c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007ffb1a415fa8 RCX: 00007ffb1a19ce59
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb1a415fac
RBP: 00007ffb1a415fa0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffb1a416038 R14: 00007ffed3c123f0 R15: 00007ffed3c124d8
task:syz-executor state:R running task stack:23976 pid:5616 tgid:5616 ppid:5606 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5504 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7228
preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7409
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:190
spin_unlock include/linux/spinlock.h:390 [inline]
copy_pte_range mm/memory.c:1347 [inline]
copy_pmd_range mm/memory.c:1408 [inline]
copy_pud_range mm/memory.c:1445 [inline]
copy_p4d_range mm/memory.c:1469 [inline]
copy_page_range+0x1c1f/0x5b20 mm/memory.c:1555
dup_mmap+0xd44/0x21b0 mm/mmap.c:1840
dup_mm kernel/fork.c:1538 [inline]
copy_mm kernel/fork.c:1590 [inline]
copy_process+0x4588/0x7ff0 kernel/fork.c:2288
kernel_clone+0x176/0x9d0 kernel/fork.c:2746
__do_sys_clone+0xd9/0x120 kernel/fork.c:2887
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f050bdc58d2
RSP: 002b:00007fff5a0a9ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fff5a0a9ae0 RCX: 00007f050bdc58d2
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007fff5a0a9c6c R08: 0000000000000000 R09: 0000000000000001
R10: 00005555681497d0 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000000927c0 R14: 0000000000018c86 R15: 00007fff5a0a9cc0
task:syz.2.83 state:R running task stack:26520 pid:6185 tgid:6180 ppid:5611 task_flags:0x400040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5504 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7228
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7552
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:679
RIP: 0010:__update_page_owner_handle+0x242/0x550 mm/page_owner.c:258
Code: 85 ff 4d 39 fe 0f 83 6f 01 00 00 e8 88 25 85 ff 48 8b 1d 81 4f 1d 0c 48 01 eb 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 74 08 3c 03 0f 8e d2 02 00 00 8b 44 24 0c 89 43 08 48 89 d8
RSP: 0018:ffffc90007696df8 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: ffff88801e04d3a8 RCX: ffffc90007739000
RDX: 0000000000080000 RSI: ffffffff82843998 RDI: ffff88801e04d3b0
RBP: ffff88801e04d3a0 R08: 0000000000000006 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000085ef1 R12: 0000000000000000
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
__set_page_owner+0x11f/0x540 mm/page_owner.c:342
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1859
prep_new_page mm/page_alloc.c:1867 [inline]
get_page_from_freelist+0xf48/0x3530 mm/page_alloc.c:3946
__alloc_frozen_pages_noprof+0x299/0x2dc0 mm/page_alloc.c:5304
alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
folio_alloc_mpol_noprof+0x36/0x260 mm/mempolicy.c:2509
vma_alloc_folio_noprof+0xed/0x1d0 mm/mempolicy.c:2544
folio_prealloc mm/memory.c:1207 [inline]
wp_page_copy mm/memory.c:3875 [inline]
do_wp_page+0xd75/0x4350 mm/memory.c:4336
handle_pte_fault mm/memory.c:6395 [inline]
__handle_mm_fault+0x1ab6/0x2a00 mm/memory.c:6517
handle_mm_fault+0x37b/0xa30 mm/memory.c:6686
do_user_addr_fault+0x74c/0x12f0 arch/x86/mm/fault.c:1394
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0010:__put_user_nocheck_4+0x3/0x20 arch/x86/lib/putuser.S:104
Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 da 03 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc900076979f8 EFLAGS: 00050246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000112030
RDX: 0000000000080000 RSI: ffffffff895ea058 RDI: ffff888075150000
RBP: ffffc90007697d88 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000001 R14: ffffc90007697dcc R15: 0000000000000002
____sys_recvmsg+0x2f7/0x670 net/socket.c:2917
___sys_recvmsg+0x16a/0x1a0 net/socket.c:2946
do_recvmmsg+0x2f3/0x740 net/socket.c:3041
__sys_recvmmsg net/socket.c:3115 [inline]
__do_sys_recvmmsg net/socket.c:3138 [inline]
__se_sys_recvmmsg net/socket.c:3131 [inline]
__x64_sys_recvmmsg+0x22a/0x280 net/socket.c:3131
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f436e39ce59
RSP: 002b:00007f436f2b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f436e616090 RCX: 00007f436e39ce59
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
RBP: 00007f436e432e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f436e616128 R14: 00007f436e616090 R15: 00007ffff61c7bb8
rcu: rcu_preempt kthread starved for 10500 jiffies! g12197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:29016 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5504 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7228
__schedule_loop kernel/sched/core.c:7307 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7322
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 5793 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: events jump_label_update_timeout
RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline]
RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 kernel/smp.c:892
Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31
RSP: 0018:ffffc90004607938 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fcc98d
RDX: ffff88802c4cca80 RSI: ffffffff81fcc967 RDI: ffff88802c4cca80
RBP: ffff8880b85410c0 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
R13: ffffed10170a8219 R14: 0000000000000001 R15: ffff8880b843c700
FS: 0000000000000000(0000) GS:ffff88812431a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000e592000 CR4: 00000000003526f0
Call Trace:
on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1057
on_each_cpu include/linux/smp.h:72 [inline]
smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2773 [inline]
smp_text_poke_batch_finish+0x337/0xc60 arch/x86/kernel/alternative.c:2983
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
jump_label_update+0x37a/0x550 kernel/jump_label.c:910
__static_key_slow_dec_cpuslocked.part.0+0xc5/0xf0 kernel/jump_label.c:315
__static_key_slow_dec_cpuslocked kernel/jump_label.c:297 [inline]
__static_key_slow_dec kernel/jump_label.c:321 [inline]
jump_label_update_timeout+0x41/0x50 kernel/jump_label.c:329
process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
process_scheduled_works kernel/workqueue.c:3405 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245