rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9339/1:b..l P9335/1:b..l rcu: (detected by 0, t=10502 jiffies, g=33825, q=382 ncpus=2) task:syz.3.943 state:R running task stack:22368 pid:9335 tgid:9335 ppid:5799 task_flags:0x400840 flags:0x0008000a Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0x1553/0x5240 kernel/sched/core.c:6911 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7238 irqentry_exit+0x599/0x620 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_is_held_type+0x45/0x150 kernel/locking/lockdep.c:-1 Code: 84 e4 00 00 00 65 8b 05 b9 b1 2b 07 85 c0 0f 85 d5 00 00 00 65 4c 8b 2d 01 6b 2b 07 41 83 bd b4 0b 00 00 00 0f 85 bf 00 00 00 <89> f5 49 89 fe 9c 41 5c fa 48 c7 c7 67 9b 57 8d e8 a6 18 00 00 65 RSP: 0018:ffffc900046a7080 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000001 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ddcb980 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed102808aa2b R12: 0000000000000000 R13: ffff88802ee68000 R14: 0000000000000000 R15: 0000000000000000 css_next_descendant_pre+0x32/0x260 kernel/cgroup/cgroup.c:4819 mem_cgroup_iter+0x1dc/0x450 mm/memcontrol.c:1062 shrink_node_memcgs mm/vmscan.c:5981 [inline] shrink_node+0xeb6/0x2950 mm/vmscan.c:6061 shrink_zones mm/vmscan.c:6300 [inline] do_try_to_free_pages+0x6ed/0x1980 mm/vmscan.c:6362 try_to_free_mem_cgroup_pages+0x2eb/0x840 mm/vmscan.c:6683 try_charge_memcg+0x859/0x1630 mm/memcontrol.c:2414 obj_cgroup_charge_pages mm/memcontrol.c:2857 [inline] __memcg_kmem_charge_page+0x2dd/0x460 mm/memcontrol.c:2901 memcg_kmem_charge_page include/linux/memcontrol.h:1725 [inline] memcg_charge_kernel_stack+0x2f5/0x4e0 kernel/fork.c:318 alloc_thread_stack_node kernel/fork.c:362 [inline] dup_task_struct+0x290/0x9a0 kernel/fork.c:924 copy_process+0x508/0x3cd0 kernel/fork.c:2050 kernel_clone+0x249/0x840 kernel/fork.c:2653 __do_sys_clone3 kernel/fork.c:2955 [inline] __se_sys_clone3+0x33c/0x360 kernel/fork.c:2934 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c80a0d589 RSP: 002b:00007fffbaa5aeb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f3c809c8b20 RCX: 00007f3c80a0d589 RDX: 00007f3c809c8b20 RSI: 0000000000000058 RDI: 00007fffbaa5af10 RBP: 00007f3c7ec3d6c0 R08: 00007f3c7ec3d6c0 R09: 00007fffbaa5aff7 R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 R13: 000000000000006e R14: 00007fffbaa5af10 R15: 00007fffbaa5aff8 task:syz.3.943 state:R running task stack:22152 pid:9339 tgid:9335 ppid:5799 task_flags:0x400940 flags:0x0008000a Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0x1553/0x5240 kernel/sched/core.c:6911 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7238 irqentry_exit+0x599/0x620 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_release+0x2d7/0x3d0 kernel/locking/lockdep.c:5893 Code: 1d ae 10 00 00 00 00 eb b5 e8 a5 69 82 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 15 d7 ad 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 72 f9 cc RSP: 0018:ffffc9000e1e6e60 EFLAGS: 00000286 RAX: 94b764f70f709400 RBX: 0000000000000202 RCX: 0000000000000046 RDX: 0000000000000000 RSI: ffffffff8d7bd2ec RDI: ffffffff8ba66700 RBP: ffff88806a6daa38 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000406 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8ddcb980 R15: ffff88806a6d9e80 rcu_lock_release include/linux/rcupdate.h:322 [inline] rcu_read_unlock include/linux/rcupdate.h:881 [inline] list_lru_count_one+0x252/0x2d0 mm/list_lru.c:261 list_lru_shrink_count include/linux/list_lru.h:190 [inline] super_cache_count+0x1a7/0x240 fs/super.c:266 do_shrink_slab+0x91/0x1170 mm/shrinker.c:384 shrink_slab_memcg mm/shrinker.c:550 [inline] shrink_slab+0x830/0x1150 mm/shrinker.c:628 shrink_node_memcgs mm/vmscan.c:6022 [inline] shrink_node+0x124d/0x2950 mm/vmscan.c:6061 shrink_zones mm/vmscan.c:6300 [inline] do_try_to_free_pages+0x6ed/0x1980 mm/vmscan.c:6362 try_to_free_mem_cgroup_pages+0x2eb/0x840 mm/vmscan.c:6683 try_charge_memcg+0x859/0x1630 mm/memcontrol.c:2414 obj_cgroup_charge_pages mm/memcontrol.c:2857 [inline] __memcg_kmem_charge_page+0x2dd/0x460 mm/memcontrol.c:2901 __alloc_frozen_pages_noprof+0x1c1/0x380 mm/page_alloc.c:5267 __alloc_pages_noprof mm/page_alloc.c:5284 [inline] alloc_pages_bulk_noprof+0x5f1/0x7d0 mm/page_alloc.c:5204 alloc_pages_bulk_node_noprof include/linux/gfp.h:259 [inline] io_region_allocate_pages+0x175/0x470 io_uring/memmap.c:170 io_create_region+0x37a/0x4a0 io_uring/memmap.c:220 io_allocate_scq_urings+0x220/0x820 io_uring/io_uring.c:2703 io_uring_create+0x46b/0x980 io_uring/io_uring.c:3006 io_uring_setup io_uring/io_uring.c:3076 [inline] __do_sys_io_uring_setup io_uring/io_uring.c:3110 [inline] __se_sys_io_uring_setup+0x2a8/0x2c0 io_uring/io_uring.c:3101 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c80a0c799 RSP: 002b:00007f3c7ec5dfb8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: ffffffffffffffda RBX: 00007f3c80c85fa0 RCX: 00007f3c80a0c799 RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000837 RBP: 0000200000000180 R08: 0000000000000000 R09: 0000200000000140 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000837 R15: 0000200000000140 rcu: rcu_preempt kthread starved for 10502 jiffies! g33825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27776 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0x1553/0x5240 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0x164/0x360 kernel/sched/core.c:7008 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63 Code: 6e 5d 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 9c 26 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246 RAX: 0000000000de03f3 RBX: ffffffff81996dba RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8d560c6d RDI: ffffffff8ba66700 RBP: ffffffff8da07eb0 R08: ffff8880b8833f1b R09: 1ffff110171067e3 R10: dffffc0000000000 R11: ffffed10171067e4 R12: ffffffff8f6a3bb0 R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b605d8 FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5f36c356b8 CR3: 00000000745fe000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1ba/0x5d0 kernel/sched/idle.c:341 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:439 rest_init+0x2de/0x300 init/main.c:760 start_kernel+0x385/0x3d0 init/main.c:1210 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147