rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (1 GPs behind) idle=9294/1/0x4000000000000000 softirq=10497/10498 fqs=9
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4551/1:b..l
(detected by 0, t=10502 jiffies, g=10749, q=1341 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4548 Comm: syz.3.54 Not tainted 6.1.142-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:85 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x7b/0x290 mm/kasan/generic.c:189
Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c1 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb
RSP: 0018:ffffc900001e0b20 EFLAGS: 00000046
RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81642e5e
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff96c7eef0
RBP: ffffc900001e0bf0 R08: dffffc0000000000 R09: fffffbfff2d8fdde
R10: fffffbfff2d8fddf R11: 1ffffffff2d8fdde R12: ffffffff96c7ef00
R13: ffffffff96c7eef8 R14: 0000000000000001 R15: dffffc0000000001
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c31c029 CR3: 00000000280a2000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
instrument_atomic_read_write include/linux/instrumented.h:102 [inline]
atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:541 [inline]
queued_spin_lock include/asm-generic/qspinlock.h:111 [inline]
do_raw_spin_lock+0x10e/0x280 kernel/locking/spinlock_debug.c:115
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline]
_raw_spin_lock_irqsave+0xb0/0xf0 kernel/locking/spinlock.c:162
debug_object_deactivate+0x63/0x340 lib/debugobjects.c:753
debug_hrtimer_deactivate kernel/time/hrtimer.c:453 [inline]
debug_deactivate+0x29/0x240 kernel/time/hrtimer.c:509
__run_hrtimer kernel/time/hrtimer.c:1720 [inline]
__hrtimer_run_queues+0x2df/0xd60 kernel/time/hrtimer.c:1816
hrtimer_interrupt+0x3c5/0x9c0 kernel/time/hrtimer.c:1878
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
__sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1118
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 kernel/kcov.c:216
Code: 48 8b 3d e0 b7 7d 0c 48 89 de 5b e9 b7 b2 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d b4 97 81 7e 65 8b 15 b5 97 81 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00
RSP: 0018:ffffc9000509f498 EFLAGS: 00000246
RAX: ffffffff81be7677 RBX: 0000000000000000 RCX: ffff888055b11dc0
RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000509f5f0 R08: dffffc0000000000 R09: fffffbfff1bfd1a6
R10: fffffbfff1bfd1a6 R11: 1ffffffff1bfd1a5 R12: 1ffffd40002df2e1
R13: ffffea00016f9700 R14: ffffea00016f9708 R15: 800000005be5c007
zap_pte_range mm/memory.c:1448 [inline]
zap_pmd_range mm/memory.c:1574 [inline]
zap_pud_range mm/memory.c:1603 [inline]
zap_p4d_range mm/memory.c:1624 [inline]
unmap_page_range+0x1037/0x2500 mm/memory.c:1645
unmap_vmas+0x22c/0x330 mm/memory.c:1730
exit_mmap+0x1cc/0x8e0 mm/mmap.c:3246
__mmput+0x118/0x3c0 kernel/fork.c:1200
exit_mm+0x1e6/0x2c0 kernel/exit.c:565
do_exit+0x8c1/0x2400 kernel/exit.c:867
do_group_exit+0x217/0x2d0 kernel/exit.c:1022
get_signal+0x1272/0x1350 kernel/signal.c:2871
arch_do_signal_or_restart+0xb0/0x1230 arch/x86/kernel/signal.c:871
exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f8d2ed8e929
Code: Unable to access opcode bytes at 0x7f8d2ed8e8ff.
RSP: 002b:00007f8d2fb1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000001 RBX: 00007f8d2efb5fa8 RCX: 00007f8d2ed8e929
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d2efb5fac
RBP: 00007f8d2efb5fa0 R08: 00099f2a952917b4 R09: 0000000000000000
R10: 000000000000045c R11: 0000000000000246 R12: 00007f8d2efb5fac
R13: 0000000000000000 R14: 00007ffd31e99610 R15: 00007ffd31e996f8
task:syz.1.57 state:R running task stack:26240 pid:4551 ppid:4258 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
preempt_schedule_notrace+0xca/0x110 kernel/sched/core.c:6823
preempt_schedule_notrace_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
rcu_is_watching+0x76/0xa0 kernel/rcu/tree.c:722
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0xe8/0x490 kernel/locking/lockdep.c:5633
rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
rcu_read_lock include/linux/rcupdate.h:791 [inline]
dput+0x53/0x1d0 fs/dcache.c:904
__fput+0x5e0/0x920 fs/file_table.c:328
task_work_run+0x1ca/0x250 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:177
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa24478e929
RSP: 002b:00007ffffa74e348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 000000000001835b RCX: 00007fa24478e929
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007fa2449b7ba0 R08: 0000000000000001 R09: 00000009fa74e63f
R10: 00007fa244400000 R11: 0000000000000246 R12: 00007fa2449b5fac
R13: 00007fa2449b5fa0 R14: ffffffffffffffff R15: 00007ffffa74e460
rcu: rcu_preempt kthread starved for 10455 jiffies! g10749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26880 pid:16 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
schedule+0xb9/0x180 kernel/sched/core.c:6637
schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 4430 Comm: kworker/u4:13 Not tainted 6.1.142-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:424 [inline]
RIP: 0010:smp_call_function_many_cond+0xe80/0x1270 kernel/smp.c:998
Code: 1f 89 de 83 e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 de e5 0a 00 eb e5 44 89
RSP: 0018:ffffc90004d0f800 EFLAGS: 00000293
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880187b8000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90004d0f960 R08: dffffc0000000000 R09: fffffbfff2117249
R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: 1ffff110171e81c1
R13: ffff8880b8e3bb40 R14: 0000000000000001 R15: ffff8880b8f40e08
FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c400944 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
on_each_cpu_cond_mask+0x3b/0x80 kernel/smp.c:1166
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:1574 [inline]
text_poke_bp_batch+0x2b0/0x7d0 arch/x86/kernel/alternative.c:1774
text_poke_flush arch/x86/kernel/alternative.c:1965 [inline]
text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1972
arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x11f/0x240 kernel/jump_label.c:207
static_key_enable+0x16/0x20 kernel/jump_label.c:220
toggle_allocation_gate+0xb4/0x430 mm/kfence/core.c:805
process_one_work+0x898/0x1160 kernel/workqueue.c:2292
worker_thread+0xaa2/0x1250 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295