syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8289/1:b..l P8091/1:b..l
rcu: 	(detected by 1, t=10503 jiffies, g=34417, q=44209 ncpus=2)
task:syz.1.593       state:R  running task     stack:21184 pid:8091  tgid:8091  ppid:5640   task_flags:0x40064c flags:0x00080001
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5387 [inline]
 __schedule+0x17b4/0x5680 kernel/sched/core.c:7188
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7512
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline]
 irqentry_exit+0x14f/0x730 kernel/entry/common.c:164
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:deref_stack_reg+0x1cf/0x230 arch/x86/kernel/unwind_orc.c:424
Code: 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 23 dd b9 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 80 c1 03 38 c1
RSP: 0018:ffffc9000665ed98 EFLAGS: 00000282
RAX: 1ffff92000ccbd01 RBX: ffffffff90c98962 RCX: 0000000000000001
RDX: ffffc9000665eec8 RSI: dffffc0000000000 RDI: ffffc9000665efb0
RBP: 1ffff92000ccbdd1 R08: ffffc9000665efb0 R09: 0000000000000000
R10: ffffc9000665eed8 R11: fffff52000ccbddd R12: ffffc9000665efb0
R13: 1ffff92000ccbdd3 R14: ffffc9000665f0e8 R15: dffffc0000000000
 unwind_next_frame+0x19d5/0x2550 arch/x86/kernel/unwind_orc.c:-1
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1402 [inline]
 free_unref_folios+0xcec/0x1480 mm/page_alloc.c:3004
 folios_put_refs+0x9ff/0xb40 mm/swap.c:1008
 folio_batch_release include/linux/folio_batch.h:101 [inline]
 shmem_undo_range+0x52c/0x1660 mm/shmem.c:1149
 shmem_truncate_range mm/shmem.c:1277 [inline]
 shmem_evict_inode+0x289/0xae0 mm/shmem.c:1407
 evict+0x61e/0xb10 fs/inode.c:841
 __dentry_kill+0x1a2/0x690 fs/dcache.c:718
 finish_dput+0xc9/0x480 fs/dcache.c:927
 __fput+0x691/0xa60 fs/file_table.c:518
 task_work_run+0x1d9/0x270 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x70f/0x22c0 kernel/exit.c:975
 do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
 get_signal+0x1284/0x1330 kernel/signal.c:3037
 arch_do_signal_or_restart+0xbc/0x830 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:98 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:252 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:323 [inline]
 irqentry_exit+0x284/0x730 kernel/entry/common.c:162
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f39bdc52877
RSP: 002b:00007f39beb8a120 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f39bdd9cdd9
RDX: 00007f39beb8a140 RSI: 00007f39beb8a270 RDI: 000000000000000b
RBP: 00007f39bde32d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f39be016038 R14: 00007f39be015fa0 R15: 00007f39be13fa48
 </TASK>
task:syz.0.633       state:R  running task     stack:25408 pid:8289  tgid:8287  ppid:5641   task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5387 [inline]
 __schedule+0x17b4/0x5680 kernel/sched/core.c:7188
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7512
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline]
 irqentry_exit+0x14f/0x730 kernel/entry/common.c:164
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__kasan_check_byte+0x6/0x40 mm/kasan/common.c:572
Code: 89 df 4c 89 f6 5b 41 5c 41 5e 41 5f e9 33 fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 56 <53> 48 89 f3 49 89 fe e8 3e 15 00 00 84 c0 75 16 be 01 00 00 00 4c
RSP: 0018:ffffc9000e1d6a28 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8176e273 RDI: ffffffff8e95cd60
RBP: ffffffff8176e256 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc9000e1d6bf8 R11: ffffffff81b0d870 R12: 0000000000000002
R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000000
 kasan_check_byte include/linux/kasan.h:402 [inline]
 lock_acquire+0x84/0x350 kernel/locking/lockdep.c:5842
 rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 rcu_read_lock include/linux/rcupdate.h:838 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1181 [inline]
 unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __set_page_owner+0x8d/0x4c0 mm/page_owner.c:341
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1858
 prep_new_page mm/page_alloc.c:1866 [inline]
 get_page_from_freelist+0x24ba/0x2540 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5226
 alloc_pages_mpol+0x235/0x490 mm/mempolicy.c:2490
 folio_alloc_mpol_noprof+0x39/0x160 mm/mempolicy.c:2509
 vma_alloc_folio_noprof+0xe1/0x1e0 mm/mempolicy.c:2544
 folio_prealloc mm/memory.c:-1 [inline]
 wp_page_copy mm/memory.c:3859 [inline]
 do_wp_page+0x118a/0x4cc0 mm/memory.c:4320
 handle_pte_fault mm/memory.c:6427 [inline]
 __handle_mm_fault mm/memory.c:6549 [inline]
 handle_mm_fault+0x151d/0x3170 mm/memory.c:6718
 do_user_addr_fault+0x75b/0x1340 arch/x86/mm/fault.c:1385
 handle_page_fault arch/x86/mm/fault.c:1474 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0010:__put_user_nocheck_4+0x3/0x10 arch/x86/lib/putuser.S:104
Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 81 03 00 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc9000e1d78b8 EFLAGS: 00050202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003ca030
RDX: ffff88803283bd80 RSI: 0000000000000002 RDI: 00000000ffffffff
RBP: ffffc9000e1d7a30 R08: ffffc9000e1d7687 R09: 1ffff92001c3aed0
R10: dffffc0000000000 R11: fffff52001c3aed1 R12: 1ffff92001c3af24
R13: 0000000000000002 R14: 00002000003ca000 R15: dffffc0000000000
 ____sys_recvmsg+0x2be/0x4a0 net/socket.c:2931
 ___sys_recvmsg+0x215/0x590 net/socket.c:2960
 do_recvmmsg+0x334/0x800 net/socket.c:3055
 __sys_recvmmsg net/socket.c:3129 [inline]
 __do_sys_recvmmsg net/socket.c:3152 [inline]
 __se_sys_recvmmsg net/socket.c:3145 [inline]
 __x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f69a839cdd9
RSP: 002b:00007f69a92c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f69a8616090 RCX: 00007f69a839cdd9
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
RBP: 00007f69a8432d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f69a8616128 R14: 00007f69a8616090 R15: 00007f69a873fa48
 </TASK>