rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (1 GPs behind) idle=0a94/1/0x4000000000000000 softirq=30796/30798 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10210/2:b..l
rcu: (detected by 1, t=10506 jiffies, g=38849, q=34 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 10211 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
RIP: 0010:lockdep_recursion_finish kernel/locking/lockdep.c:467 [inline]
RIP: 0010:lock_acquire+0x200/0x520 kernel/locking/lockdep.c:5693
Code: 00 ff 75 10 ff 74 24 48 e8 7d 04 00 00 48 83 c4 28 48 c7 c7 a0 9e ea 8a e8 ad f5 43 09 b8 ff ff ff ff 65 0f c1 05 68 75 97 7e <83> f8 01 0f 85 a4 01 00 00 49 89 de 48 c1 eb 03 42 80 3c 2b 00 74
RSP: 0018:ffffc90000007b20 EFLAGS: 00000057
RAX: 0000000000000001 RBX: ffffc90000007b80 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8aea9ea0 RDI: ffffffff8b384340
RBP: ffffc90000007c68 R08: dffffc0000000000 R09: fffffbfff2064e80
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000f6c
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046
FS: 00007f0e045fe700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200aa030 CR3: 0000000067733000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:350 [inline]
advance_sched+0xae/0xc80 net/sched/sch_taprio.c:929
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x59f/0xd10 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x396/0x980 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
__sysvec_apic_timer_interrupt+0x13f/0x480 arch/x86/kernel/apic/apic.c:1112
sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1106
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 80 2a f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 2b a6 f6 65 8b 05 24 e7 4a 75 85 c0 74 3f 48 c7 04 24 0e 36
RSP: 0018:ffffc900148ef560 EFLAGS: 00000206
RAX: 817ac28ca1da8f00 RBX: 1ffff9200291deb0 RCX: ffffffff816b81fa
RDX: dffffc0000000000 RSI: ffffffff8aea8d20 RDI: 0000000000000001
RBP: ffffc900148ef5f0 R08: dffffc0000000000 R09: fffffbfff2064e62
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff9200291deac R14: ffffc900148ef580 R15: 0000000000000246
spin_unlock_irqrestore include/linux/spinlock.h:405 [inline]
__skb_try_recv_datagram+0x1cb/0x6a0 net/core/datagram.c:265
__unix_dgram_recvmsg+0x3c5/0x1260 net/unix/af_unix.c:2452
sock_recvmsg_nosec+0x86/0xd0 net/socket.c:1019
____sys_recvmsg+0x475/0x570 net/socket.c:2720
___sys_recvmsg net/socket.c:2764 [inline]
do_recvmmsg+0x471/0xad0 net/socket.c:2858
__sys_recvmmsg net/socket.c:2937 [inline]
__do_sys_recvmmsg net/socket.c:2960 [inline]
__se_sys_recvmmsg net/socket.c:2953 [inline]
__x64_sys_recvmmsg+0x199/0x240 net/socket.c:2953
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0e05a8c169
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0e045fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f0e05bac050 RCX: 00007f0e05a8c169
RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
RBP: 00007f0e05ae7ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff41da78af R14: 00007f0e045fe300 R15: 0000000000022000
task:syz-executor.4 state:R running task stack:26808 pid:10210 ppid:5019 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5343 [inline]
__schedule+0x187b/0x4900 kernel/sched/core.c:6669
preempt_schedule_irq+0xfb/0x1b0 kernel/sched/core.c:6981
irqentry_exit+0x57/0x80 kernel/entry/common.c:433
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:lock_acquire+0x25a/0x520 kernel/locking/lockdep.c:5695
Code: 2b 00 74 08 4c 89 f7 e8 f4 3c 78 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc9001490f320 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92002921e70 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8aea9ea0 RDI: ffffffff8b384340
RBP: ffffc9001490f468 R08: dffffc0000000000 R09: fffffbfff2064e4d
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92002921e6c
R13: dffffc0000000000 R14: ffffc9001490f380 R15: 0000000000000246
rcu_lock_acquire+0x24/0x30 include/linux/rcupdate.h:327
rcu_read_lock include/linux/rcupdate.h:773 [inline]
percpu_ref_tryget_many include/linux/percpu-refcount.h:241 [inline]
percpu_ref_tryget+0x10/0x140 include/linux/percpu-refcount.h:266
css_tryget include/linux/cgroup_refcnt.h:45 [inline]
get_mem_cgroup_from_objcg+0xa3/0x120 include/linux/memcontrol.h:526
uncharge_folio+0x103/0x6c0 mm/memcontrol.c:7171
__mem_cgroup_uncharge_list+0xbe/0x150 mm/memcontrol.c:7238
mem_cgroup_uncharge_list include/linux/memcontrol.h:706 [inline]
release_pages+0x218b/0x2470 mm/swap.c:1041
tlb_batch_pages_flush mm/mmu_gather.c:97 [inline]
tlb_flush_mmu_free mm/mmu_gather.c:292 [inline]
tlb_flush_mmu+0x100/0x210 mm/mmu_gather.c:299
tlb_finish_mmu+0xd4/0x1f0 mm/mmu_gather.c:391
exit_mmap+0x3da/0xaf0 mm/mmap.c:3123
__mmput+0x115/0x3c0 kernel/fork.c:1351
exit_mm+0x227/0x310 kernel/exit.c:564
do_exit+0x612/0x2290 kernel/exit.c:858
do_group_exit+0x206/0x2c0 kernel/exit.c:1021
get_signal+0x1701/0x17e0 kernel/signal.c:2874
arch_do_signal_or_restart+0x91/0x670 arch/x86/kernel/signal.c:306
exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:168
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204
__syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
syscall_exit_to_user_mode+0x64/0x280 kernel/entry/common.c:297
do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f61e808c169
RSP: 002b:00007f61e8df1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000001 RBX: 00007f61e81abf88 RCX: 00007f61e808c169
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61e81abf8c
RBP: 00007f61e81abf80 R08: 0000000000000010 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f61e81abf8c
R13: 00007ffd995b0adf R14: 00007f61e8df1300 R15: 0000000000022000
rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g38849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=32624
rcu: rcu_preempt kthread starved for 10506 jiffies! g38849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:26520 pid:16 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5343 [inline]
__schedule+0x187b/0x4900 kernel/sched/core.c:6669
schedule+0xc3/0x180 kernel/sched/core.c:6745
schedule_timeout+0x1bd/0x310 kernel/time/timer.c:2167
rcu_gp_fqs_loop+0x2c6/0x1010 kernel/rcu/tree.c:1609
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:1808
kthread+0x2b8/0x350 kernel/kthread.c:379
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.4.0-rc2-syzkaller-00290-gd635f6cc934b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:csd_lock_wait kernel/smp.c:285 [inline]
RIP: 0010:smp_call_function_many_cond+0x14fb/0x1f60 kernel/smp.c:828
Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 4e 0f 0b 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 89 0b 0b 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 6d 0b
RSP: 0018:ffffc900001177c0 EFLAGS: 00000293
RAX: ffffffff81807133 RBX: 1ffff110173089c5 RCX: ffff888015a7d940
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900001179c0 R08: ffffffff81807102 R09: fffffbfff2064e4d
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9844e28
R13: ffff8880b993d308 R14: dffffc0000000000 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc216bad988 CR3: 000000000cd30000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:996
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:1770 [inline]
text_poke_bp_batch+0x2bf/0x950 arch/x86/kernel/alternative.c:1970
text_poke_flush arch/x86/kernel/alternative.c:2161 [inline]
text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:2168
arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x132/0x250 kernel/jump_label.c:205
static_key_enable+0x1a/0x20 kernel/jump_label.c:218
toggle_allocation_gate+0xb5/0x250 mm/kfence/core.c:831
process_one_work+0x8a0/0x10e0 kernel/workqueue.c:2405
worker_thread+0xa63/0x1210 kernel/workqueue.c:2552
kthread+0x2b8/0x350 kernel/kthread.c:379
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308