rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...!: (1 GPs behind) idle=c5d4/1/0x4000000000000000 softirq=101881/101883 fqs=730 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19111/1:b..l (detected by 1, t=10506 jiffies, g=167557, q=129 ncpus=2) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7074 Comm: syz-executor.3 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 RIP: 0010:pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:596 [inline] RIP: 0010:queued_spin_unlock arch/x86/include/asm/qspinlock.h:57 [inline] RIP: 0010:do_raw_spin_unlock+0x167/0x230 kernel/locking/spinlock_debug.c:141 Code: df bf 8b c7 45 08 ff ff ff ff 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 b6 00 00 00 48 83 3d a1 d4 60 0a 00 <74> 4b 48 89 ef e8 2f d8 ff ff 90 5d 41 5c 41 5d c3 48 c7 c6 c0 ed RSP: 0018:ffffc90000007cf0 EFLAGS: 00000086 RAX: 1ffffffff177fbe1 RBX: 0000000000000006 RCX: ffffffff815f0950 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffffff91190d50 RBP: ffffffff91190d50 R08: 0000000000000000 R09: ffffffff91190d53 R10: fffffbfff22321aa R11: 0000000000000001 R12: ffffffff91190d58 R13: ffffffff91190d60 R14: 1ffff92000000fa7 R15: ffffffff89cee880 FS: 000055555690f400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f95898d53a5 CR3: 00000000390cd000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock_irqrestore+0x1e/0x70 kernel/locking/spinlock.c:194 debug_object_activate+0x287/0x3e0 lib/debugobjects.c:693 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline] debug_activate kernel/time/hrtimer.c:475 [inline] enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:1084 __run_hrtimer kernel/time/hrtimer.c:1702 [inline] __hrtimer_run_queues+0xaf3/0xe40 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:memcg_account_kmem+0x31/0x80 mm/memcontrol.c:3126 Code: f5 53 9c 58 fa 25 00 02 00 00 48 89 c3 75 20 89 f2 be 2d 00 00 00 e8 3e fe ff ff 9c 58 f6 c4 02 75 40 48 85 db 74 01 fb 66 90 <5b> 5d 41 5c c3 e8 75 82 b3 ff 89 ea be 2d 00 00 00 4c 89 e7 e8 16 RSP: 0018:ffffc9000b71fae0 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b798f1 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801e868000 R13: ffff88801f948400 R14: ffff88801e868000 R15: dffffc0000000000 obj_cgroup_charge_pages mm/memcontrol.c:3167 [inline] __memcg_kmem_charge_page+0x198/0x3d0 mm/memcontrol.c:3189 memcg_kmem_charge_page include/linux/memcontrol.h:1788 [inline] memcg_charge_kernel_stack.part.0+0x6c/0x150 kernel/fork.c:258 memcg_charge_kernel_stack kernel/fork.c:255 [inline] alloc_thread_stack_node kernel/fork.c:320 [inline] dup_task_struct kernel/fork.c:971 [inline] copy_process+0x1456/0x7080 kernel/fork.c:2068 kernel_clone+0xe7/0xab0 kernel/fork.c:2652 __do_sys_clone+0xba/0x100 kernel/fork.c:2786 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f95888877fb Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 RSP: 002b:00007ffc76cee6f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95888877fb RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555690f400 R10: 000055555690f6d0 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc76cee7d0 task:syz-executor.4 state:R running task stack:27112 pid:19111 ppid: 9322 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5184 [inline] __schedule+0xa09/0x4f10 kernel/sched/core.c:6496 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6804 irqentry_exit+0x31/0x80 kernel/entry/common.c:428 asm_sysvec_reschedule_ipi+0x1b/0x20 arch/x86/include/asm/idtentry.h:654 RIP: 0010:lock_acquire+0x1ef/0x570 kernel/locking/lockdep.c:5633 Code: e7 a3 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90005d47458 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff92000ba8e8d RCX: 006021468a84c951 RDX: 1ffff11005b38899 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff906a5947 R10: fffffbfff20d4b28 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: ffffffff8bd87040 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:280 [inline] rcu_read_lock include/linux/rcupdate.h:706 [inline] jbd2_write_access_granted+0x9d/0x390 fs/jbd2/transaction.c:1184 jbd2_journal_get_write_access+0xe7/0x190 fs/jbd2/transaction.c:1235 __ext4_journal_get_write_access+0x1ba/0x440 fs/ext4/ext4_jbd2.c:235 ext4_mb_mark_diskspace_used+0x1d0/0x1650 fs/ext4/mballoc.c:3796 ext4_mb_new_blocks+0xda7/0x4f40 fs/ext4/mballoc.c:5655 ext4_ext_map_blocks+0x2179/0x5f50 fs/ext4/extents.c:4281 ext4_map_blocks+0x775/0x18d0 fs/ext4/inode.c:643 ext4_alloc_file_blocks.isra.0+0x2c1/0xae0 fs/ext4/extents.c:4466 ext4_zero_range fs/ext4/extents.c:4583 [inline] ext4_fallocate+0x1332/0x4020 fs/ext4/extents.c:4718 vfs_fallocate+0x487/0xe00 fs/open.c:323 ksys_fallocate fs/open.c:346 [inline] __do_sys_fallocate fs/open.c:354 [inline] __se_sys_fallocate fs/open.c:352 [inline] __x64_sys_fallocate+0xcf/0x140 fs/open.c:352 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f2716289209 RSP: 002b:00007f271745f168 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffda RBX: 00007f271639c030 RCX: 00007f2716289209 RDX: 0000000000000000 RSI: 0000000100000011 RDI: 0000000000000003 RBP: 00007f27162e3161 R08: 0000000000000000 R09: 0000000000000000 R10: 000000002811fdff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc42bd65af R14: 00007f271745f300 R15: 0000000000022000 rcu: rcu_preempt kthread timer wakeup didn't happen for 6854 jiffies! g167557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=117117 rcu: rcu_preempt kthread starved for 6855 jiffies! g167557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28664 pid: 16 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5184 [inline] __schedule+0xa09/0x4f10 kernel/sched/core.c:6496 schedule+0xd2/0x1f0 kernel/sched/core.c:6568 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1657 rcu_gp_kthread+0x234/0x360 kernel/rcu/tree.c:1854 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 rcu: Stack dump where RCU GP kthread last ran: NMI backtrace for cpu 1 CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 kernel/rcu/tree_stall.h:514 print_other_cpu_stall kernel/rcu/tree_stall.h:619 [inline] check_cpu_stall kernel/rcu/tree_stall.h:762 [inline] rcu_pending kernel/rcu/tree.c:3655 [inline] rcu_sched_clock_irq+0x2309/0x23a0 kernel/rcu/tree.c:2342 update_process_times+0x11a/0x1a0 kernel/time/timer.c:1839 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:243 tick_sched_timer+0xee/0x120 kernel/time/tick-sched.c:1480 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x1c0/0xe40 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1112 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline] RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:113 [inline] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240 drivers/acpi/processor_idle.c:555 Code: 89 de e8 9a 7a fe f7 84 db 75 98 e8 01 7e fe f7 e8 ec cc 04 f8 66 90 e8 f5 7d fe f7 0f 00 2d 7e 28 b8 00 e8 e9 7d fe f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 7a fe f7 48 85 db RSP: 0018:ffffc90000177d20 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888011a71d40 RSI: ffffffff897c3927 RDI: 0000000000000000 RBP: ffff888017259864 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 R13: ffff888017259800 R14: ffff888017259864 R15: ffff8881460fd804 acpi_idle_enter+0x364/0x500 drivers/acpi/processor_idle.c:692 cpuidle_enter_state+0x1b1/0xc80 drivers/cpuidle/cpuidle.c:238 cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:352 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:236 [inline] do_idle+0x3e8/0x590 kernel/sched/idle.c:303 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400 start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:266 secondary_startup_64_no_verify+0xce/0xdb