rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (0 ticks this GP) idle=cd24/1/0x4000000000000000 softirq=14954/14954 fqs=9 rcu: (detected by 0, t=10502 jiffies, g=10705, q=681 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 27 Comm: kdevtmpfs Not tainted 6.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:147 [inline] RIP: 0010:lock_is_held_type+0x11c/0x190 kernel/locking/lockdep.c:5899 Code: 00 00 00 48 c7 c7 20 dc 0a 8c e8 df 1a 00 00 b8 ff ff ff ff 65 0f c1 05 d2 9e 3b 74 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb RSP: 0018:ffffc90000a18d10 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff88801e690000 RDX: ffff88801e690000 RSI: ffffffff8c0adc20 RDI: ffffffff8c610360 RBP: 0000000000000002 R08: ffffffff8182316e R09: ffff888075c9f340 R10: dffffc0000000000 R11: ffffed100eb93e6b R12: 0000000000000046 R13: ffff88801e690000 R14: 00000000ffffffff R15: ffff8880b872c898 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020003c80 CR3: 0000000024536000 CR4: 0000000000350ef0 Call Trace: lock_is_held include/linux/lockdep.h:249 [inline] __run_hrtimer kernel/time/hrtimer.c:1657 [inline] __hrtimer_run_queues+0x2d9/0xd50 kernel/time/hrtimer.c:1755 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1817 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x112/0x420 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:deref_stack_reg+0x17f/0x210 Code: 74 48 4d 39 c4 77 43 4d 39 c7 76 3e 49 8d 48 08 31 c0 4c 39 e1 76 33 4c 39 f9 77 2e 4c 89 c7 48 89 d3 e8 f4 07 00 00 49 89 c6 <48> 8b 6c 24 18 48 89 e8 48 c1 e8 03 80 3c 18 00 74 08 48 89 ef e8 RSP: 0018:ffffc90000a27138 EFLAGS: 00000287 RAX: 0000000000000017 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffffc90000a20000 RDI: ffffc90000a27640 RBP: ffffc90000a27268 R08: ffffc90000a27640 R09: ffffc90000a272b0 R10: dffffc0000000000 R11: fffff52000144e58 R12: 1ffff92000144e4d R13: 1ffff92000144e4e R14: 0000000000000017 R15: ffffc90000a28000 unwind_next_frame+0x1799/0x22d0 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4264 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4276 kmalloc_noprof include/linux/slab.h:882 [inline] tomoyo_add_entry security/tomoyo/common.c:2023 [inline] tomoyo_supervisor+0xe0d/0x11f0 security/tomoyo/common.c:2095 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline] tomoyo_path_permission+0x243/0x360 security/tomoyo/file.c:587 tomoyo_path_perm+0x480/0x740 security/tomoyo/file.c:838 security_inode_getattr+0x130/0x330 security/security.c:2373 vfs_getattr+0x45/0x430 fs/stat.c:204 handle_remove drivers/base/devtmpfs.c:323 [inline] handle drivers/base/devtmpfs.c:386 [inline] devtmpfs_work_loop+0x546/0x1040 drivers/base/devtmpfs.c:399 devtmpfsd+0x4c/0x50 drivers/base/devtmpfs.c:441 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: rcu_preempt kthread starved for 10483 jiffies! g10705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24376 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x18af/0x4bd0 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 6452 Comm: syz.0.191 Not tainted 6.12.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:srso_alias_safe_ret+0x0/0x7 arch/x86/lib/retpoline.S:171 Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc RSP: 0018:ffffc900104473f0 EFLAGS: 00000293 RAX: ffffffff8188e96b RBX: 1ffff110170e8919 RCX: ffff8880611b8000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90010447600 R08: ffffffff8188e93a R09: 1ffffffff203a065 R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555f26b5c8 CR3: 0000000029938000 CR4: 0000000000350ef0 Call Trace: srso_alias_return_thunk+0x5/0xfbef5 arch/x86/lib/retpoline.S:181 csd_lock_wait kernel/smp.c:340 [inline] smp_call_function_many_cond+0x1a0b/0x2ca0 kernel/smp.c:884 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1051 __flush_tlb_multi arch/x86/include/asm/paravirt.h:91 [inline] flush_tlb_multi arch/x86/mm/tlb.c:938 [inline] flush_tlb_mm_range+0x329/0x5c0 arch/x86/mm/tlb.c:1024 tlb_flush arch/x86/include/asm/tlb.h:20 [inline] tlb_flush_mmu_tlbonly include/asm-generic/tlb.h:465 [inline] tlb_flush_mmu+0x1aa/0x680 mm/mmu_gather.c:372 tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465 exit_mmap+0x496/0xc40 mm/mmap.c:1887 __mmput+0x115/0x390 kernel/fork.c:1347 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x28e0 kernel/exit.c:926 do_group_exit+0x207/0x2c0 kernel/exit.c:1088 get_signal+0x16a3/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f24fb97e719 Code: Unable to access opcode bytes at 0x7f24fb97e6ef. RSP: 002b:00007f24fc7ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f24fbb35f88 RCX: 00007f24fb97e719 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24fbb35f88 RBP: 00007f24fbb35f80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24fbb35f8c R13: 0000000000000000 R14: 00007fffab7b0ad0 R15: 00007fffab7b0bb8