rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12927/1:b..l rcu: (detected by 1, t=10502 jiffies, g=65213, q=513 ncpus=2) task:syz.1.2204 state:R running task stack:22888 pid:12927 tgid:12927 ppid:5609 task_flags:0x40064c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:190 spin_unlock include/linux/spinlock.h:390 [inline] zap_pte_range mm/memory.c:1964 [inline] zap_pmd_range mm/memory.c:2020 [inline] zap_pud_range mm/memory.c:2048 [inline] zap_p4d_range mm/memory.c:2069 [inline] __zap_vma_range+0x16f7/0x4a30 mm/memory.c:2109 unmap_vmas+0x299/0x5f0 mm/memory.c:2178 exit_mmap+0x1ef/0xa00 mm/mmap.c:1300 __mmput+0x12a/0x410 kernel/fork.c:1187 mmput+0x67/0x80 kernel/fork.c:1210 exit_mm kernel/exit.c:615 [inline] do_exit+0x8b1/0x2ae0 kernel/exit.c:997 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152 get_signal+0x1ec7/0x21e0 kernel/signal.c:3046 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x402/0xa00 kernel/entry/common.c:165 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f857079e021 RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f8570a25fa0 RCX: 00007f857079e019 RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 RBP: 00007f857083500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f8570a26038 R14: 00007f8570a25fa0 R15: 00007ffee2e678e8 rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g65213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=21459 rcu: rcu_preempt kthread starved for 10500 jiffies! g65213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 12986 Comm: syz.6.2224 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:lock_is_held_type+0x2e/0x140 kernel/locking/lockdep.c:5925 Code: 8b 0d ba 13 67 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 65 8b 15 d2 05 a9 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 <55> 53 48 83 ec 08 65 48 8b 2d fc be a8 08 8b 95 9c 0b 00 00 85 d2 RSP: 0018:ffffc90000007e40 EFLAGS: 00000046 RAX: 00000000ffffffff RBX: ffff8880b8428640 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b8428418 RBP: ffff888032e2a300 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428690 FS: 00007f731a1dc6c0(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc66f942000 CR3: 0000000032d47000 CR4: 00000000003526f0 Call Trace: lock_is_held include/linux/lockdep.h:249 [inline] enqueue_hrtimer+0x24f/0x2f0 kernel/time/hrtimer.c:1107 __run_hrtimer kernel/time/hrtimer.c:2048 [inline] __hrtimer_run_queues+0x6ed/0x9c0 kernel/time/hrtimer.c:2096 hrtimer_interrupt+0x3e5/0x940 kernel/time/hrtimer.c:2215 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:198 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 5f 27 f6 48 89 df e8 fe ae 27 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 be 16 f6 65 8b 05 4e c7 a5 08 85 c0 74 16 5b RSP: 0018:ffffc90006377b28 EFLAGS: 00000246 RAX: 0000000000000002 RBX: ffffffff9b7413d8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8e1a76e9 RDI: ffffffff8c402680 RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffffffffffffffff R12: ffffffff9b741140 R13: 0000000000000000 R14: ffffc90006377c80 R15: ffffffff9b74131c class_raw_spinlock_irqsave_destructor include/linux/spinlock.h:571 [inline] __do_adjtimex+0x892/0xe70 kernel/time/timekeeping.c:2953 do_adjtimex+0xa0/0x370 kernel/time/timekeeping.c:2996 do_clock_adjtime kernel/time/posix-timers.c:1169 [inline] __do_sys_clock_adjtime+0x177/0x290 kernel/time/posix-timers.c:1181 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f731939e019 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f731a1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 RAX: ffffffffffffffda RBX: 00007f7319625fa0 RCX: 00007f731939e019 RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 RBP: 00007f731943500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7319626038 R14: 00007f7319625fa0 R15: 00007fff4a1a1278