rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10230/2:b..l.. P10156/1:b..l.. P10234/1:b..l..
rcu: (detected by 1, t=10583 jiffies, g=49489, q=458 ncpus=2)
task:syz.1.717 state:R running task stack:25608 pid:10234 tgid:10233 ppid:5607 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662
irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline]
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947
Code: 05 0f a1 ce 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 5f 80 10 0f 82 c9 02 00 00 8b 35 de 8e 80 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad a0 ce 13 0f 85 09 03 00 00 48 83 c4
RSP: 0018:ffffc9000505ea88 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200
RDX: 0000000000000000 RSI: ffffffff8e5f4e6e RDI: ffffffff8c830780
RBP: ffffffff8ffeb420 R08: 0000000005c59b81 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
unwind_next_frame+0xd1/0x2090 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:183
__set_page_owner+0x8c/0x540 mm/page_owner.c:359
set_page_owner include/linux/page_owner.h:33 [inline]
post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1854
prep_new_page mm/page_alloc.c:1862 [inline]
get_page_from_freelist+0x1113/0x35e0 mm/page_alloc.c:3933
__alloc_frozen_pages_noprof+0x2f6/0x3190 mm/page_alloc.c:5429
alloc_pages_mpol+0x201/0x560 mm/mempolicy.c:2511
folio_alloc_mpol_noprof+0x36/0x260 mm/mempolicy.c:2530
shmem_alloc_folio+0x135/0x160 mm/shmem.c:2140
shmem_alloc_and_add_folio+0x371/0xd40 mm/shmem.c:2182
shmem_get_folio_gfp+0x758/0x1af0 mm/shmem.c:2735
shmem_fault+0x1fb/0xa30 mm/shmem.c:2929
__do_fault+0x10b/0x440 mm/memory.c:5537
do_read_fault mm/memory.c:5972 [inline]
do_fault+0xb3f/0x1890 mm/memory.c:6106
do_pte_missing mm/memory.c:4666 [inline]
handle_pte_fault mm/memory.c:6530 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6679
handle_mm_fault+0x363/0xa20 mm/memory.c:6846
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x8a9/0x2c20 mm/gup.c:1428
populate_vma_page_range+0x267/0x3f0 mm/gup.c:1860
__mm_populate+0x107/0x3a0 mm/gup.c:1963
mm_populate include/linux/mm.h:4271 [inline]
vm_mmap_pgoff+0x441/0x470 mm/util.c:586
ksys_mmap_pgoff+0xe4/0x610 mm/mmap.c:619
__do_sys_mmap arch/x86/kernel/sys_x86_64.c:96 [inline]
__se_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
__x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:89
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8105b9f559
RSP: 002b:00007f8106a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f8105e25fa0 RCX: 00007f8105b9f559
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007f8105c36b20 R08: ffffffffffffffff R09: 00000000d6d1c000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8105e26038 R14: 00007f8105e25fa0 R15: 00007ffdb17f3948
task:syz.3.702 state:R running task stack:19056 pid:10156 tgid:10156 ppid:5624 task_flags:0xc00e40 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_common kernel/sched/core.c:7561 [inline]
preempt_schedule+0x57/0xd0 kernel/sched/core.c:7585
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:220 [inline]
_raw_spin_unlock_irq+0x44/0x50 kernel/locking/spinlock.c:229
spin_unlock_irq include/linux/spinlock.h:413 [inline]
lruvec_unlock_irq include/linux/memcontrol.h:1562 [inline]
evict_folios+0x25c/0x1770 mm/vmscan.c:5089
try_to_shrink_lruvec+0x32e/0x7b0 mm/vmscan.c:5266
lru_gen_shrink_lruvec mm/vmscan.c:5417 [inline]
shrink_lruvec+0x313/0x22e0 mm/vmscan.c:6194
shrink_node_memcgs mm/vmscan.c:6433 [inline]
shrink_node+0x74f/0x42e0 mm/vmscan.c:6477
shrink_zones mm/vmscan.c:6696 [inline]
do_try_to_free_pages+0x2da/0x1500 mm/vmscan.c:6758
try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:7039
try_charge_memcg+0x50a/0xfd0 mm/memcontrol.c:2774
charge_memcg+0x1ae/0x210 mm/memcontrol.c:5325
__mem_cgroup_charge+0x2b/0x1c0 mm/memcontrol.c:5342
mem_cgroup_charge include/linux/memcontrol.h:681 [inline]
shmem_alloc_and_add_folio+0x451/0xd40 mm/shmem.c:2192
shmem_get_folio_gfp+0x758/0x1af0 mm/shmem.c:2735
shmem_fault+0x1fb/0xa30 mm/shmem.c:2929
__do_fault+0x10b/0x440 mm/memory.c:5537
do_read_fault mm/memory.c:5972 [inline]
do_fault+0xb3f/0x1890 mm/memory.c:6106
do_pte_missing mm/memory.c:4666 [inline]
handle_pte_fault mm/memory.c:6530 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6679
handle_mm_fault+0x363/0xa20 mm/memory.c:6846
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x8a9/0x2c20 mm/gup.c:1428
__get_user_pages_locked mm/gup.c:1692 [inline]
get_dump_page+0x27e/0x3d0 mm/gup.c:2203
dump_user_range+0x19c/0xe90 fs/coredump.c:1593
elf_core_dump+0x2d97/0x3d60 fs/binfmt_elf.c:2106
coredump_write fs/coredump.c:1150 [inline]
do_coredump fs/coredump.c:1235 [inline]
vfs_coredump+0x2606/0x58c0 fs/coredump.c:1310
get_signal+0x1f20/0x21d0 kernel/signal.c:3097
arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
irqentry_exit+0x542/0xab0 kernel/entry/common.c:152
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f910259f561
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f9102826090 RCX: 00007f910259f559
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007f9102636b20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f9102826128 R14: 00007f9102826090 R15: 00007fff30491a38
task:syz.4.713 state:R running task stack:25608 pid:10230 tgid:10229 ppid:5606 task_flags:0x400040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7662
irqentry_exit_cond_resched arch/x86/include/asm/fred.h:105 [inline]
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:453 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
irqentry_exit+0x33f/0xab0 kernel/entry/common.c:154
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947
Code: 05 0f a1 ce 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 5f 80 10 0f 82 c9 02 00 00 8b 35 de 8e 80 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad a0 ce 13 0f 85 09 03 00 00 48 83 c4
RSP: 0018:ffffc90004e9f578 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200
RDX: 0000000000000000 RSI: ffffffff8e5f4e6e RDI: ffffffff8c830780
RBP: ffffffff8ffeb420 R08: 00000000cd3458d0 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
filemap_map_pages+0x1e8/0x2020 mm/filemap.c:3939
do_fault_around mm/memory.c:5930 [inline]
do_read_fault mm/memory.c:5963 [inline]
do_fault+0xa76/0x1890 mm/memory.c:6106
do_pte_missing mm/memory.c:4666 [inline]
handle_pte_fault mm/memory.c:6530 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6679
handle_mm_fault+0x363/0xa20 mm/memory.c:6846
faultin_page mm/gup.c:1126 [inline]
__get_user_pages+0x8a9/0x2c20 mm/gup.c:1428
populate_vma_page_range+0x267/0x3f0 mm/gup.c:1860
__mm_populate+0x107/0x3a0 mm/gup.c:1963
mm_populate include/linux/mm.h:4271 [inline]
vm_mmap_pgoff+0x441/0x470 mm/util.c:586
ksys_mmap_pgoff+0xe4/0x610 mm/mmap.c:619
__do_sys_mmap arch/x86/kernel/sys_x86_64.c:96 [inline]
__se_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline]
__x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:89
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd7b599f559
RSP: 002b:00007fd7b6783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fd7b5c25fa0 RCX: 00007fd7b599f559
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007fd7b5a36b20 R08: ffffffffffffffff R09: 00000000d6d1c000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd7b5c26038 R14: 00007fd7b5c25fa0 R15: 00007ffc493dd048
rcu: rcu_preempt kthread starved for 10583 jiffies! g49489 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27400 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x125e/0x6990 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7474
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x930 kernel/rcu/tree.c:2122
rcu_gp_kthread+0x179/0x260 kernel/rcu/tree.c:2330
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 10231 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
RIP: 0010:lruvec_pgdat include/linux/mmzone.h:1681 [inline]
RIP: 0010:mod_memcg_lruvec_state mm/memcontrol.c:1022 [inline]
RIP: 0010:mod_lruvec_state+0x6d/0x370 mm/memcontrol.c:1054
Code: ee e8 07 76 d1 ff 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 3c 02 00 00 48 8d 7b c0 <4c> 8b ab b8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
RSP: 0000:ffffc90004c367f0 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffff88801f6bd140 RCX: ffffffff95b9e543
RDX: 1ffff11003ed7aff RSI: 0000000000000014 RDI: ffff88801f6bd100
RBP: 0000000000000002 R08: ffffffff95b9e540 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000001 R12: ffffffffffffffff
R13: ffff88801f6bd7f8 R14: 0000000000000002 R15: 0000000000000001
FS: 0000555582008500(0000) GS:ffff8881224a4000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33421530 CR3: 0000000073c13000 CR4: 00000000003526f0
Call Trace:
__update_lru_size include/linux/mm_inline.h:53 [inline]
lru_gen_update_size+0x3b5/0x12f0 include/linux/mm_inline.h:287
lru_gen_del_folio+0x2e9/0x720 include/linux/mm_inline.h:381
isolate_folio mm/vmscan.c:4887 [inline]
scan_folios mm/vmscan.c:4934 [inline]
isolate_folios.constprop.0+0x1592/0x2b50 mm/vmscan.c:5027
evict_folios+0x229/0x1770 mm/vmscan.c:5081
try_to_shrink_lruvec+0x32e/0x7b0 mm/vmscan.c:5266
lru_gen_shrink_lruvec mm/vmscan.c:5417 [inline]
shrink_lruvec+0x313/0x22e0 mm/vmscan.c:6194
shrink_node_memcgs mm/vmscan.c:6433 [inline]
shrink_node+0x74f/0x42e0 mm/vmscan.c:6477
shrink_zones mm/vmscan.c:6696 [inline]
do_try_to_free_pages+0x2da/0x1500 mm/vmscan.c:6758
try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:7039
try_charge_memcg+0x50a/0xfd0 mm/memcontrol.c:2774
try_charge mm/memcontrol.c:2922 [inline]
obj_cgroup_charge_pages+0x2b/0x1f0 mm/memcontrol.c:3223
__obj_cgroup_charge mm/memcontrol.c:3601 [inline]
__memcg_slab_post_alloc_hook+0x476/0x10b0 mm/memcontrol.c:3731
memcg_slab_post_alloc_hook mm/slub.c:2549 [inline]
slab_post_alloc_hook mm/slub.c:4739 [inline]
slab_alloc_node mm/slub.c:5033 [inline]
kmem_cache_alloc_noprof+0x4f5/0x6a0 mm/slub.c:5047
alloc_buffer_head+0x21/0x140 fs/buffer.c:2873
folio_alloc_buffers+0x197/0x8e0 fs/buffer.c:749
create_empty_buffers+0x3a/0x5f0 fs/buffer.c:1579
folio_create_buffers+0x13b/0x1a0 fs/buffer.c:1688
__block_write_begin_int+0x393/0x19c0 fs/buffer.c:2012
block_page_mkwrite+0x348/0x460 fs/buffer.c:2552
ext4_page_mkwrite+0xde7/0x1850 fs/ext4/inode.c:6920
do_page_mkwrite+0x17a/0x430 mm/memory.c:3782
do_shared_fault mm/memory.c:6048 [inline]
do_fault+0x659/0x1890 mm/memory.c:6110
do_pte_missing mm/memory.c:4666 [inline]
handle_pte_fault mm/memory.c:6530 [inline]
__handle_mm_fault+0x150b/0x2f60 mm/memory.c:6679
handle_mm_fault+0x363/0xa20 mm/memory.c:6846
do_user_addr_fault+0x745/0x12f0 arch/x86/mm/fault.c:1394
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f9102473c09
Code: 89 dc 41 83 e4 03 0f 85 c9 01 00 00 4c 89 ff be 04 00 00 00 e8 88 8f fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3
RSP: 002b:00007fff30491ad0 EFLAGS: 00010212
RAX: 0000001b33421534 RBX: ffffffffffffd534 RCX: ffffffff821666fc
RDX: 0000001b33421530 RSI: 0000000000000004 RDI: 00007f9103355720
RBP: 0000000000000000 R08: 00007f9102810000 R09: 00007f9102812000
R10: 0000000082166700 R11: 000000000000000d R12: 0000000000000000
R13: 0000000000000848 R14: ffffffff82166347 R15: 00007f9103355720