rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5816/1:b..l P6198/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=8933, q=1544 ncpus=2)
task:syz.3.69 state:R running task stack:22920 pid:6198 tgid:6198 ppid:5816 task_flags:0x400640 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190
irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:write_comp_data+0x42/0x90 kernel/kcov.c:246
Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 6c 16 00 00 85 c0 74 4f 8b 82 48 16 00 00 <83> f8 03 75 44 48 8b 82 50 16 00 00 8b 92 4c 16 00 00 48 8b 38 48
RSP: 0018:ffffc9000bcbed78 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000001b3029d000 RCX: ffffffff8213588e
RDX: ffff88807885a4c0 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 0000000074b3c067 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: ffff88807885aff0 R12: 0000000000000000
R13: ffff888074a3ec08 R14: ffffc9000bcbeea0 R15: 1ffff92001797dd0
pmd_pfn_mask arch/x86/include/asm/pgtable_types.h:453 [inline]
pmd_flags_mask arch/x86/include/asm/pgtable_types.h:461 [inline]
pmd_flags arch/x86/include/asm/pgtable_types.h:466 [inline]
pmd_present arch/x86/include/asm/pgtable.h:992 [inline]
___pte_offset_map+0xde/0x380 mm/pgtable-generic.c:295
__pte_offset_map include/linux/mm.h:3346 [inline]
__pte_offset_map_lock+0x8d/0x310 mm/pgtable-generic.c:399
pte_offset_map_lock include/linux/mm.h:3361 [inline]
follow_page_pte+0xab/0x1390 mm/gup.c:812
follow_pmd_mask mm/gup.c:928 [inline]
follow_pud_mask mm/gup.c:967 [inline]
follow_p4d_mask mm/gup.c:984 [inline]
follow_page_mask mm/gup.c:1023 [inline]
__get_user_pages+0x918/0x3590 mm/gup.c:1426
__get_user_pages_locked mm/gup.c:1692 [inline]
get_dump_page+0x257/0x3d0 mm/gup.c:2192
dump_user_range+0x195/0xb70 fs/coredump.c:1366
elf_core_dump+0x29c3/0x3c10 fs/binfmt_elf.c:2111
coredump_write fs/coredump.c:1049 [inline]
do_coredump fs/coredump.c:1126 [inline]
vfs_coredump+0x2b85/0x55e0 fs/coredump.c:1200
get_signal+0x22e1/0x26d0 kernel/signal.c:3019
arch_do_signal_or_restart+0x8f/0x7e0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop kernel/entry/common.c:75 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
irqentry_exit+0x38a/0x8c0 kernel/entry/common.c:196
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f36b3d8f751
RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f36b3fe5fa0 RCX: 00007f36b3d8f749
RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
RBP: 00007f36b3e13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f36b3fe6038 R14: 00007f36b3fe5fa0 R15: 00007ffc4b5cec48
task:syz-executor state:R running task stack:22552 pid:5816 tgid:5816 ppid:5813 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190
irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:60 [inline]
RIP: 0010:stack_access_ok+0x9c/0x200 arch/x86/kernel/unwind_orc.c:409
Code: 84 c0 74 08 3c 03 0f 8e 0b 01 00 00 8b 13 85 d2 74 23 49 39 ef 77 1e 48 39 e9 76 19 4a 8d 54 25 00 49 39 d7 0f 92 c0 48 39 d1 <0f> 93 c2 20 d0 0f 85 ba 00 00 00 48 8d 7b 28 48 8d 4b 20 48 b8 00
RSP: 0018:ffffc9000460edd0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: ffffc9000460ee80 RCX: ffffc90004610000
RDX: ffffc9000460fab0 RSI: ffffc9000460faa8 RDI: ffffc9000460ee80
RBP: ffffc9000460faa8 R08: ffffffff912e6e38 R09: 00000000ffffffff
R10: 0000000000000002 R11: 000000000001175f R12: 0000000000000008
R13: ffffc9000460ee90 R14: ffffc9000460ee88 R15: ffffc90004608000
deref_stack_reg arch/x86/kernel/unwind_orc.c:419 [inline]
unwind_next_frame+0xb7d/0x20b0 arch/x86/kernel/unwind_orc.c:600
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x160/0x1f0 mm/page_owner.c:165
__set_page_owner+0x91/0x560 mm/page_owner.c:341
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x1af/0x220 mm/page_alloc.c:1846
prep_new_page mm/page_alloc.c:1854 [inline]
get_page_from_freelist+0xd0b/0x31a0 mm/page_alloc.c:3915
__alloc_frozen_pages_noprof+0x25f/0x2430 mm/page_alloc.c:5210
__alloc_pages_noprof mm/page_alloc.c:5244 [inline]
alloc_pages_bulk_noprof+0x77a/0x1410 mm/page_alloc.c:5164
___alloc_pages_bulk mm/kasan/shadow.c:345 [inline]
__kasan_populate_vmalloc_do mm/kasan/shadow.c:370 [inline]
__kasan_populate_vmalloc+0xfb/0x220 mm/kasan/shadow.c:424
kasan_populate_vmalloc include/linux/kasan.h:579 [inline]
alloc_vmap_area+0x98d/0x2a50 mm/vmalloc.c:2124
__get_vm_area_node+0x1ca/0x330 mm/vmalloc.c:3219
__vmalloc_node_range_noprof+0x247/0x16b0 mm/vmalloc.c:4011
__vmalloc_node_noprof+0xad/0xf0 mm/vmalloc.c:4111
xt_counters_alloc+0x4c/0x70 net/netfilter/x_tables.c:1381
__do_replace+0x97/0x9f0 net/ipv4/netfilter/arp_tables.c:894
do_replace net/ipv6/netfilter/ip6_tables.c:1158 [inline]
do_ip6t_set_ctl+0x94a/0xc50 net/ipv6/netfilter/ip6_tables.c:1644
nf_setsockopt+0x8d/0xf0 net/netfilter/nf_sockopt.c:101
ipv6_setsockopt+0x135/0x170 net/ipv6/ipv6_sockglue.c:978
tcp_setsockopt+0xa7/0x100 net/ipv4/tcp.c:4166
do_sock_setsockopt+0xf3/0x1d0 net/socket.c:2322
__sys_setsockopt+0x1a0/0x230 net/socket.c:2347
__do_sys_setsockopt net/socket.c:2353 [inline]
__se_sys_setsockopt net/socket.c:2350 [inline]
__x64_sys_setsockopt+0xbd/0x160 net/socket.c:2350
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f36b3d9163a
RSP: 002b:00007ffc4b5ce8d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ffc4b5ce960 RCX: 00007f36b3d9163a
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000558 R09: 0079746972756365
R10: 00007f36b3fb6a80 R11: 0000000000000206 R12: 00007f36b3fb6a20
R13: 00007ffc4b5ce8fc R14: 0000000000000000 R15: 00007f36b3fb7e60
rcu: rcu_preempt kthread starved for 10557 jiffies! g8933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0xe7/0x3a0 kernel/sched/core.c:6960
schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1ea/0xaf0 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x26d/0x380 kernel/rcu/tree.c:2285
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:trace_irq_enable.constprop.0+0x3d/0x110 include/trace/events/preemptirq.h:40
Code: 00 89 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 d0 b3 88 90 e8 21 c0 61 00 48 0f a3 1d b9 ab c1 0e 0f 82 92 00 00 00 <5b> 5d e9 7c 2b b4 09 48 89 fb 65 8b 05 06 a8 eb 11 83 f8 07 0f 87
RSP: 0018:ffffc90000007dc8 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81c7080f
RDX: 0000000000000000 RSI: ffffffff8bf2b300 RDI: ffffffff8dd7af20
RBP: 0000000000000283 R08: 0000000000000000 R09: fffffbfff211167a
R10: ffffffff9088b3d7 R11: ffffffff8e098670 R12: ffff8880b8428440
R13: 0000002d892daa6f R14: ffff8880302ff0b8 R15: ffffffff86e7af90
FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b3bd4b4be0 CR3: 000000002068d000 CR4: 00000000003526f0
Call Trace:
trace_hardirqs_on+0x26/0x40 kernel/trace/trace_preemptirq.c:73
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
_raw_spin_unlock_irqrestore+0x52/0x80 kernel/locking/spinlock.c:194
__run_hrtimer kernel/time/hrtimer.c:1773 [inline]
__hrtimer_run_queues+0x58f/0xc40 kernel/time/hrtimer.c:1841
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858
handle_softirqs+0x219/0x950 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:723
irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
RAX: 00000000003f3f9d RBX: 0000000000000000 RCX: ffffffff8b7816d9
RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: ffffffff8bf2b380
RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
R13: ffffffff8e097b40 R14: ffffffff9088b3d0 R15: 0000000000000000
arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
default_idle+0x13/0x20 arch/x86/kernel/process.c:767
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:191 [inline]
do_idle+0x38d/0x510 kernel/sched/idle.c:332
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
rest_init+0x16b/0x2b0 init/main.c:757
start_kernel+0x3ef/0x4d0 init/main.c:1206
x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x148