rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 ticks this GP) idle=c5f4/1/0x4000000000000000 softirq=17115/17115 fqs=0
	(detected by 0, t=10502 jiffies, g=21081, q=516 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__lock_release kernel/locking/lockdep.c:5323 [inline]
RIP: 0010:lock_release+0x1b6/0x910 kernel/locking/lockdep.c:5682
Code: 04 28 84 c0 0f 85 fd 04 00 00 83 3d d7 4c 9b 0c 00 0f 84 a0 03 00 00 48 8b 7c 24 08 4c 8d b7 d8 0a 00 00 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 2c 84 c0 0f 85 f6 04 00 00 41 8b 06 85 c0 0f 84 17 02
RSP: 0018:ffffc900001e0640 EFLAGS: 00000802
RAX: 0000000000000000 RBX: ffff88802f16a89c RCX: 9ce788e73f0e3300
RDX: 0000000000000000 RSI: ffffffff8a6c0cc0 RDI: ffff88802f169dc0
RBP: ffffc900001e0750 R08: dffffc0000000000 R09: fffffbfff1bfd0b6
R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: 1ffff11005e2d513
R13: dffffc0000000000 R14: ffff88802f16a898 R15: 1ffff9200003c0d4
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3c1d3c9d58 CR3: 000000005ca5b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
 _raw_spin_unlock_irqrestore+0x6d/0x100 kernel/locking/spinlock.c:194
 debug_hrtimer_deactivate kernel/time/hrtimer.c:453 [inline]
 debug_deactivate+0x29/0x240 kernel/time/hrtimer.c:509
 __run_hrtimer kernel/time/hrtimer.c:1720 [inline]
 __hrtimer_run_queues+0x2df/0xd60 kernel/time/hrtimer.c:1816
 hrtimer_interrupt+0x3c5/0x9c0 kernel/time/hrtimer.c:1878
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:seqcount_lockdep_reader_access+0x17b/0x1c0 include/linux/seqlock.h:105
Code: 00 4d 85 e4 75 16 e8 04 9e 0f 00 eb 15 e8 fd 9d 0f 00 e8 a8 58 9e 08 4d 85 e4 74 ea e8 ee 9d 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000246
RAX: ffffffff81713882 RBX: 0000000000000000 RCX: ffff88802f169dc0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900001e0c70 R08: dffffc0000000000 R09: fffffbfff2117049
R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000200
R13: 0000000000000000 R14: 1ffff9200003c178 R15: dffffc0000000000
 ktime_get+0x31/0x270 kernel/time/timekeeping.c:846
 ktime_get_ns include/linux/timekeeping.h:154 [inline]
 __blk_mq_end_request+0x5a/0x550 block/blk-mq.c:1034
 scsi_end_request+0x4f2/0xa20 drivers/scsi/scsi_lib.c:578
 scsi_io_completion+0x12e/0x390 drivers/scsi/scsi_lib.c:987
 blk_complete_reqs block/blk-mq.c:1130 [inline]
 blk_done_softirq+0x100/0x150 block/blk-mq.c:1135
 handle_softirqs+0x2a1/0x920 kernel/softirq.c:596
 __do_softirq kernel/softirq.c:630 [inline]
 invoke_softirq kernel/softirq.c:470 [inline]
 __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:679
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
 common_interrupt+0xb5/0xd0 arch/x86/kernel/irq.c:242
 </IRQ>
 <TASK>
 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:682
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 kernel/kcov.c:320
Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 0d e4 94 81 7e 65 8b 15 e5 94 81 7e 81 e2 00 01 ff 00 74
RSP: 0018:ffffc90004227420 EFLAGS: 00000246
RAX: ffffffff81dc887d RBX: ffffffff81dc87fd RCX: ffff88802f169dc0
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffea000000000f R08: dffffc0000000000 R09: fffffbfff2117049
R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000
R13: 1ffff11027fff234 R14: 00000000000681e4 R15: ffff88813fff91a0
 pfn_valid+0x14d/0x420 include/linux/mmzone.h:1858
 page_table_check_clear+0x1e/0x6b0 mm/page_table_check.c:67
 ptep_get_and_clear_full arch/x86/include/asm/jump_label.h:-1 [inline]
 zap_pte_range mm/memory.c:1435 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x1924/0x2500 mm/memory.c:1645
 unmap_vmas+0x22c/0x330 mm/memory.c:1730
 exit_mmap+0x1cc/0x8e0 mm/mmap.c:3238
 __mmput+0x118/0x3c0 kernel/fork.c:1200
 exit_mm+0x1e6/0x2c0 kernel/exit.c:565
 do_exit+0x8b9/0x2400 kernel/exit.c:858
 do_group_exit+0x217/0x2d0 kernel/exit.c:1021
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb0/0x1230 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd0e19c11e5
Code: Unable to access opcode bytes at 0x7fd0e19c11bb.
RSP: 002b:00007ffc4317b320 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 000000000000009a RCX: 00007fd0e19c11e5
RDX: 00007ffc4317b360 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffc4317b3cc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000035
R13: 0000000000000064 R14: 000000000002a24a R15: 00007ffc4317b420
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g21081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=11304
rcu: rcu_preempt kthread starved for 10502 jiffies! g21081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:26912 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10e9/0x40d0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4252 Comm: syz-executor Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__lock_acquire+0x4dd/0x7c50 kernel/locking/lockdep.c:-1
Code: c8 8b 8c 24 d8 00 00 00 c1 e1 13 41 c1 e5 14 41 09 cd 45 09 fd 41 09 c5 48 8b 44 24 50 42 0f b6 04 00 84 c0 0f 85 22 62 00 00 <44> 8b 75 28 48 8b 44 24 78 44 89 68 20 48 8d 58 24 48 89 d8 48 c1
RSP: 0018:ffffc900001e03e0 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000006000 RCX: 0000000000080000
RDX: 000000000000005e RSI: 0000000000000000 RDI: ffff88802f16a928
RBP: ffffc900001e0630 R08: dffffc0000000000 R09: 0000000000000001
R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: ffff88802f16a918
R13: 00000000000c605e R14: ffff88802f16a884 R15: 000000000000005e
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3c1d3c9d58 CR3: 000000005ca5b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5662
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline]
 _raw_spin_lock_irq+0x9f/0xe0 kernel/locking/spinlock.c:170
 __run_hrtimer kernel/time/hrtimer.c:1756 [inline]
 __hrtimer_run_queues+0x63a/0xd60 kernel/time/hrtimer.c:1816
 hrtimer_interrupt+0x3c5/0x9c0 kernel/time/hrtimer.c:1878
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x153/0x5a0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:seqcount_lockdep_reader_access+0x17b/0x1c0 include/linux/seqlock.h:105
Code: 00 4d 85 e4 75 16 e8 04 9e 0f 00 eb 15 e8 fd 9d 0f 00 e8 a8 58 9e 08 4d 85 e4 74 ea e8 ee 9d 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
RSP: 0018:ffffc900001e0bc0 EFLAGS: 00000246
RAX: ffffffff81713882 RBX: 0000000000000000 RCX: ffff88802f169dc0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900001e0c70 R08: dffffc0000000000 R09: fffffbfff2117049
R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000200
R13: 0000000000000000 R14: 1ffff9200003c178 R15: dffffc0000000000
 ktime_get+0x31/0x270 kernel/time/timekeeping.c:846
 ktime_get_ns include/linux/timekeeping.h:154 [inline]
 __blk_mq_end_request+0x5a/0x550 block/blk-mq.c:1034
 scsi_end_request+0x4f2/0xa20 drivers/scsi/scsi_lib.c:578
 scsi_io_completion+0x12e/0x390 drivers/scsi/scsi_lib.c:987
 blk_complete_reqs block/blk-mq.c:1130 [inline]
 blk_done_softirq+0x100/0x150 block/blk-mq.c:1135
 handle_softirqs+0x2a1/0x920 kernel/softirq.c:596
 __do_softirq kernel/softirq.c:630 [inline]
 invoke_softirq kernel/softirq.c:470 [inline]
 __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:679
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
 common_interrupt+0xb5/0xd0 arch/x86/kernel/irq.c:242
 </IRQ>
 <TASK>
 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:682
RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 kernel/kcov.c:320
Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 0d e4 94 81 7e 65 8b 15 e5 94 81 7e 81 e2 00 01 ff 00 74
RSP: 0018:ffffc90004227420 EFLAGS: 00000246
RAX: ffffffff81dc887d RBX: ffffffff81dc87fd RCX: ffff88802f169dc0
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffea000000000f R08: dffffc0000000000 R09: fffffbfff2117049
R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000
R13: 1ffff11027fff234 R14: 00000000000681e4 R15: ffff88813fff91a0
 pfn_valid+0x14d/0x420 include/linux/mmzone.h:1858
 page_table_check_clear+0x1e/0x6b0 mm/page_table_check.c:67
 ptep_get_and_clear_full arch/x86/include/asm/jump_label.h:-1 [inline]
 zap_pte_range mm/memory.c:1435 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x1924/0x2500 mm/memory.c:1645
 unmap_vmas+0x22c/0x330 mm/memory.c:1730
 exit_mmap+0x1cc/0x8e0 mm/mmap.c:3238
 __mmput+0x118/0x3c0 kernel/fork.c:1200
 exit_mm+0x1e6/0x2c0 kernel/exit.c:565
 do_exit+0x8b9/0x2400 kernel/exit.c:858
 do_group_exit+0x217/0x2d0 kernel/exit.c:1021
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb0/0x1230 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd0e19c11e5
Code: Unable to access opcode bytes at 0x7fd0e19c11bb.
RSP: 002b:00007ffc4317b320 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 000000000000009a RCX: 00007fd0e19c11e5
RDX: 00007ffc4317b360 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffc4317b3cc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000035
R13: 0000000000000064 R14: 000000000002a24a R15: 00007ffc4317b420
 </TASK>