rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19456/1:b..l P19453/1:b..l P4899/1:b..l P19435/1:b..l P19459/1:b..l P4900/1:b..l rcu: (detected by 1, t=10502 jiffies, g=200129, q=962468 ncpus=2) task:dhcpcd state:R running task stack:20672 pid:4900 tgid:4900 ppid:4899 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x130/0x140 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108 sock_def_readable+0x20f/0x5b0 net/core/sock.c:3374 unix_dgram_sendmsg+0x1493/0x1f80 net/unix/af_unix.c:2170 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 sock_write_iter+0x2dd/0x400 net/socket.c:1160 do_iter_readv_writev+0x60a/0x890 vfs_writev+0x37c/0xbb0 fs/read_write.c:971 do_writev+0x1b1/0x350 fs/read_write.c:1018 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fac49319e03 RSP: 002b:00007fff2b8507a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 00007fff2b870c08 RCX: 00007fac49319e03 RDX: 0000000000000005 RSI: 00007fff2b8507c0 RDI: 000000000000000c RBP: 00007fff2b870c08 R08: 000000000000000c R09: 00007fff2b850800 R10: 00007fff2b850808 R11: 0000000000000246 R12: 000055e29205ce30 R13: 00007fff2b860a48 R14: 0000000000000148 R15: 0000000000000004 task:syz.1.2387 state:R running task stack:25968 pid:19459 tgid:19458 ppid:18329 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1688 [inline] zap_pmd_range mm/memory.c:1736 [inline] zap_pud_range mm/memory.c:1765 [inline] zap_p4d_range mm/memory.c:1786 [inline] unmap_page_range+0x3818/0x42c0 mm/memory.c:1807 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1897 exit_mmap+0x264/0xc80 mm/mmap.c:3412 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7feef6b7def9 RSP: 002b:00007feef7a3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 00007feef6d35f88 RCX: 00007feef6b7def9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feef6d35f88 RBP: 00007feef6d35f80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007feef6d35f8c R13: 0000000000000000 R14: 00007feef6e5f940 R15: 00007feef6e5fa28 task:syz.0.2379 state:R running task stack:24432 pid:19435 tgid:19434 ppid:18136 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1688 [inline] zap_pmd_range mm/memory.c:1736 [inline] zap_pud_range mm/memory.c:1765 [inline] zap_p4d_range mm/memory.c:1786 [inline] unmap_page_range+0x3818/0x42c0 mm/memory.c:1807 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1897 exit_mmap+0x264/0xc80 mm/mmap.c:3412 __mmput+0x115/0x390 kernel/fork.c:1345 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x27f0 kernel/exit.c:869 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 get_signal+0x16a1/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fedcab7def9 RSP: 002b:00007fedcb957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: fffffffffffffe00 RBX: 00007fedcad35f80 RCX: 00007fedcab7def9 RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 RBP: 00007fedcabf0b76 R08: 00000000200002c0 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fedcad35f80 R15: 00007fedcae5fa28 task:dhcpcd state:R running task stack:23632 pid:4899 tgid:4899 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x130/0x140 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108 sock_def_readable+0x20f/0x5b0 net/core/sock.c:3374 unix_dgram_sendmsg+0x1493/0x1f80 net/unix/af_unix.c:2170 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 sock_write_iter+0x2dd/0x400 net/socket.c:1160 do_iter_readv_writev+0x60a/0x890 vfs_writev+0x37c/0xbb0 fs/read_write.c:971 do_writev+0x1b1/0x350 fs/read_write.c:1018 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fac49319e03 RSP: 002b:00007fff2b8708c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 00007fff2b870c08 RCX: 00007fac49319e03 RDX: 0000000000000005 RSI: 00007fff2b8708e0 RDI: 000000000000000a RBP: 0000000000004801 R08: 000000000000000a R09: 00007fff2b870920 R10: 00007fff2b870928 R11: 0000000000000246 R12: 000055e292038c00 R13: 000055e276125f88 R14: 00000000ffffffff R15: 000055e2925e4a10 task:syz.2.2385 state:R running task stack:25744 pid:19453 tgid:19453 ppid:19110 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_is_watching+0x67/0xb0 kernel/rcu/tree.c:727 Code: 89 f7 e8 ac 11 81 00 48 c7 c3 78 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d c1 13 8a 7e <74> 10 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc e8 22 f3 86 RSP: 0018:ffffc9000427f980 EFLAGS: 00000286 RAX: 00000000004d6cc4 RBX: ffff8880b8837c78 RCX: ffff88802f7a1e00 RDX: ffff88802f7a1e00 RSI: ffffffff8c608f20 RDI: ffffffff8c608ee0 RBP: 0000000000000001 R08: ffffffff81b61230 R09: 1ffffffff283c908 R10: dffffc0000000000 R11: fffffbfff283c909 R12: 1ffff110052340a9 R13: ffff8880291a0000 R14: ffffffff8e29fa50 R15: dffffc0000000000 rcu_read_unlock include/linux/rcupdate.h:867 [inline] bpf_task_storage_free+0x179/0x2a0 kernel/bpf/bpf_task_storage.c:80 security_task_free+0x48/0xc0 security/security.c:3057 copy_process+0x29e8/0x3dc0 kernel/fork.c:2646 kernel_clone+0x226/0x8f0 kernel/fork.c:2781 __do_sys_clone3 kernel/fork.c:3085 [inline] __se_sys_clone3+0x2cb/0x350 kernel/fork.c:3064 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4174db1f29 RSP: 002b:00007f417505f8f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f4174d34870 RCX: 00007f4174db1f29 RDX: 00007f4174d34870 RSI: 0000000000000058 RDI: 00007f417505f940 RBP: 00007f4175bb26c0 R08: 00007f4175bb26c0 R09: 00007f417505fa27 R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 R13: 000000000000006e R14: 00007f417505f940 R15: 00007f417505fa28 task:syz.3.2386 state:R running task stack:26288 pid:19456 tgid:19456 ppid:18833 flags:0x00004004 Call Trace: rcu: rcu_preempt kthread starved for 10460 jiffies! g200129 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:23544 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 2927 Comm: kworker/u8:9 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:312 [inline] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 kernel/smp.c:856 Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 39 18 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e4 13 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 c8 13 RSP: 0018:ffffc90009ae7700 EFLAGS: 00000293 RAX: ffffffff818778e8 RBX: 1ffff110171288f1 RCX: ffff888031248000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90009ae78e0 R08: ffffffff818778b7 R09: 1ffffffff283c908 R10: dffffc0000000000 R11: fffffbfff283c909 R12: dffffc0000000000 R13: ffff8880b8944788 R14: ffff8880b883fb40 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f531c96d866 CR3: 000000000e734000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1023 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2085 [inline] text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2295 text_poke_flush arch/x86/kernel/alternative.c:2486 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_disable_cpuslocked+0xd2/0x1c0 kernel/jump_label.c:240 static_key_disable+0x1a/0x20 kernel/jump_label.c:248 toggle_allocation_gate+0x1b8/0x250 mm/kfence/core.c:838 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x870/0xd30 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244