rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 GPs behind) idle=d15c/1/0x4000000000000000 softirq=20560/20591 fqs=0
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6973/1:b..l P6958/1:b..l
rcu: 	(detected by 0, t=10506 jiffies, g=12669, q=654 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 7020 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__lock_acquire+0x2d3/0xd20
Code: 8b 6c 24 68 4d 89 6c c7 18 65 8b 15 13 97 03 11 31 f6 85 d2 40 0f 95 c6 31 d2 83 bf d4 0a 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e <09> d6 8b 54 24 1c c1 e2 0f 0f b7 d2 09 f2 41 83 e4 03 41 c1 e4 10
RSP: 0018:ffffc900001e0190 EFLAGS: 00000006
RAX: 0000000000000005 RBX: ffff888136627a98 RCX: 0000000000000067
RDX: 0000000000002000 RSI: 0000000000004000 RDI: ffff888021beb980
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ada78b
R10: dffffc0000000000 R11: ffffed1026cc4f51 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff888021bec470
FS:  00007fbfde8776c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32521ff8 CR3: 000000010900e000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 lock_acquire+0x120/0x360
 _raw_spin_lock_irqsave+0xa7/0xf0
 hrtimer_try_to_cancel+0x22b/0x420
 hrtimer_cancel+0x3b/0x50
 cpu_clock_event_stop+0xd9/0x130
 __perf_event_overflow+0x580/0xe40
 perf_swevent_hrtimer+0x3c5/0x550
 __hrtimer_run_queues+0x4e0/0xc60
 hrtimer_interrupt+0x45b/0xaa0
 __sysvec_apic_timer_interrupt+0x10b/0x410
 sysvec_apic_timer_interrupt+0x52/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
Code: 74 05 e8 cb 7b 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 20 13 f6 65 8b 05 6c e1 23 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc900001e0b00 EFLAGS: 00000206
RAX: d3d433f5673c1300 RBX: 0000000000000a06 RCX: d3d433f5673c1300
RDX: 0000000000000002 RSI: ffffffff8d9ba160 RDI: 0000000000000001
RBP: ffffc900001e0b90 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
R10: dffffc0000000000 R11: fffffbfff1f47507 R12: dffffc0000000000
R13: ffffffff99e439c0 R14: ffffffff8f24ccc0 R15: 1ffff9200003c160
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0xb7/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
Code: 74 05 e8 cb 7b 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e3 20 13 f6 65 8b 05 6c e1 23 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc90007327aa0 EFLAGS: 00000206
RAX: d3d433f5673c1300 RBX: 0000000000000a02 RCX: d3d433f5673c1300
RDX: 0000000000000000 RSI: ffffffff8d9ba160 RDI: 0000000000000001
RBP: ffffc90007327b28 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
R10: dffffc0000000000 R11: fffffbfff1f47507 R12: dffffc0000000000
R13: 1ffff110050ac39b R14: ffff8880285626d0 R15: 1ffff92000e64f54
 try_to_wake_up+0x7b7/0x12b0
 wake_up_q+0x85/0xd0
 futex_wake+0x4a0/0x560
 do_futex+0x395/0x420
 __se_sys_futex+0x36f/0x400
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbfdd98eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbfde8770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007fbfddbd5fa8 RCX: 00007fbfdd98eba9
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbfddbd5fac
RBP: 00007fbfddbd5fa0 R08: 7fffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fbfddbd6038 R14: 00007fff6fcc6860 R15: 00007fff6fcc6948
 </TASK>
task:syz.2.280       state:R  running task     stack:20832 pid:6958  tgid:6958  ppid:5856   task_flags:0x40064c flags:0x00004002
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 preempt_schedule_irq+0xb5/0x150
 irqentry_exit+0x6f/0x90
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_release+0x9/0x3e0
Code: 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 a0 4f 03
RSP: 0018:ffffc900070e70a8 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffffff822bf4a9 RCX: f95216201ab67100
RDX: 0000000000000001 RSI: ffffffff822bf4a9 RDI: ffffffff8e13a120
RBP: ffffc900070e71f0 R08: 0000000000000000 R09: ffffffff822bf4a9
R10: dffffc0000000000 R11: fffff940008aac39 R12: 0000000000000010
R13: dffffc0000000000 R14: ffff8881000f9a10 R15: ffffc900070e7448
 percpu_ref_put+0xf9/0x180
 __mem_cgroup_uncharge_folios+0xf0/0x1c0
 folios_put_refs+0x551/0x640
 shmem_undo_range+0x49e/0x14b0
 shmem_evict_inode+0x272/0xa70
 evict+0x504/0x9c0
 __dentry_kill+0x209/0x660
 dput+0x19f/0x2b0
 __fput+0x68e/0xa70
 task_work_run+0x1d4/0x260
 do_exit+0x6b5/0x2300
 do_group_exit+0x21c/0x2d0
 get_signal+0x1286/0x1340
 arch_do_signal_or_restart+0x9a/0x750
 irqentry_exit_to_user_mode+0x81/0x120
 exc_page_fault+0x9f/0xf0
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f15bf24f927
RSP: 002b:00007f15c019a0e0 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f15bf38eba9
RDX: 00007f15c019a100 RSI: 00007f15c019a230 RDI: 000000000000000b
RBP: 00007f15bf411e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f15bf5d6038 R14: 00007f15bf5d5fa0 R15: 00007ffdd3d1dd88
 </TASK>
task:syz.2.282       state:R  running task     stack:21296 pid:6973  tgid:6973  ppid:5856   task_flags:0x400640 flags:0x00004002
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 preempt_schedule_irq+0xb5/0x150
 irqentry_exit+0x6f/0x90
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:unwind_next_frame+0x12fc/0x2390
Code: d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27
RSP: 0018:ffffc90007135fd8 EFLAGS: 00000296
RAX: ffffffff8fb6e030 RBX: ffffffff8fb6e03c RCX: 0000000000000006
RDX: ffffffff8fb6e024 RSI: ffffffff90329210 RDI: ffffffff8be33da0
RBP: ffffffff8fb6e024 R08: 0000000000000007 R09: ffffffff8172d195
R10: ffffc90007136158 R11: fffff52000e26c2d R12: ffffffff81699b03
R13: ffffffff8fb6e024 R14: ffffc90007136108 R15: ffffffff8fb6e030
 __unwind_start+0x5b9/0x760
 arch_stack_walk+0xe4/0x150
 stack_trace_save+0x9c/0xe0
 save_stack+0xf5/0x1f0
 __set_page_owner+0x8d/0x4a0
 post_alloc_hook+0x240/0x2a0
 get_page_from_freelist+0x21e4/0x22c0
 __alloc_frozen_pages_noprof+0x181/0x370
 alloc_pages_mpol+0x232/0x4a0
 folio_alloc_mpol_noprof+0x39/0x70
 shmem_alloc_and_add_folio+0x447/0xf60
 shmem_get_folio_gfp+0x59d/0x1660
 shmem_write_begin+0xf7/0x2b0
 generic_perform_write+0x2c5/0x900
 shmem_file_write_iter+0xf8/0x120
 __kernel_write_iter+0x428/0x910
 dump_user_range+0x8a0/0xc90
 elf_core_dump+0x337b/0x3990
 coredump_write+0x1169/0x1900
 vfs_coredump+0x1daa/0x2a50
 get_signal+0x1109/0x1340
 arch_do_signal_or_restart+0x9a/0x750
 irqentry_exit_to_user_mode+0x81/0x120
 exc_page_fault+0x9f/0xf0
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0xde
RSP: 002b:00002000000003d8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f15bf5d5fa0 RCX: 00007f15bf38eba9
RDX: 0000200000000200 RSI: 00002000000003d0 RDI: 0000000000400000
RBP: 00007f15bf411e19 R08: 0000200000000440 R09: 0000200000000440
R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f15bf5d6038 R14: 00007f15bf5d5fa0 R15: 00007ffdd3d1dd88
 </TASK>
rcu: rcu_preempt kthread starved for 10506 jiffies! g12669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26664 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_timeout+0x12b/0x270
 rcu_gp_fqs_loop+0x301/0x1540
 rcu_gp_kthread+0x99/0x390
 kthread+0x711/0x8a0
 ret_from_fork+0x439/0x7d0
 ret_from_fork_asm+0x1a/0x30
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 7022 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:its_return_thunk+0x0/0x10
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b 32 b6 f5 cc
RSP: 0018:ffffc90007207418 EFLAGS: 00000246
RAX: ffffffff81b4621b RBX: 1ffff11026cc7f61 RCX: 0000000000080000
RDX: ffffc90021351000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc900072075a0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff88813663fb08
R13: dffffc0000000000 R14: ffff88804b03b1c0 R15: 0000000000000001
FS:  00007f7b5108e6c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32420ff8 CR3: 000000010facc000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 smp_call_function_many_cond+0xd4b/0x12d0
 on_each_cpu_cond_mask+0x3f/0x80
 smp_text_poke_batch_finish+0x5f9/0x1130
 __static_call_transform+0x4eb/0x750
 arch_static_call_transform+0x98/0xc0
 __static_call_update+0xe4/0x5d0
 tracepoint_add_func+0x91e/0xa10
 tracepoint_probe_register+0x5d/0x90
 perf_trace_event_init+0x4e1/0x9d0
 perf_trace_init+0x23d/0x2d0
 perf_tp_event_init+0x8d/0x120
 perf_try_init_event+0x17f/0x870
 perf_event_alloc+0x133e/0x2be0
 __se_sys_perf_event_open+0x772/0x1d70
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7b5018eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7b5108e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f7b503d6090 RCX: 00007f7b5018eba9
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000200
RBP: 00007f7b50211e19 R08: 0000000000000008 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7b503d6128 R14: 00007f7b503d6090 R15: 00007fff7eda4f98
 </TASK>
