EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
 loop0: p2 p3 p7
loop4: detected capacity change from 0 to 8192
 loop4: p1 p2 p3
 loop4: p1 p2 p3
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (16970 ticks this GP) idle=778c/1/0x4000000000000000 softirq=131223/131224 fqs=69
rcu: 	(t=21003 jiffies g=62961 q=10571 ncpus=4)
rcu: rcu_preempt kthread starved for 14593 jiffies! g62961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=3
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:29568 pid:16    tgid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xcf2/0x23f0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x79/0x290 kernel/sched/core.c:6848
 schedule_timeout+0x106/0x220 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x205/0xe70 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0x3d3/0x540 kernel/rcu/tree.c:2247
 kthread+0x25a/0x330 kernel/kthread.c:389
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 3:
NMI backtrace for cpu 3
CPU: 3 UID: 0 PID: 248 Comm: syz-fuzzer Not tainted 6.13.0-rc5-00012-g0bc21e701a6f #2
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
RIP: 0010:virt_spin_lock arch/x86/include/asm/qspinlock.h:106 [inline]
RIP: 0010:queued_spin_lock_slowpath+0x2b4/0xae0 kernel/locking/qspinlock.c:324
Code: 40 ba 01 00 00 00 89 04 24 f0 0f b1 13 0f 85 d4 02 00 00 0f 1f 44 00 00 65 ff 0d b3 ed 9a 72 e9 53 fe ff ff 89 44 24 40 f3 90 <e9> f1 fd ff ff f0 0f ba 2b 08 be 04 00 00 00 48 89 df 40 0f 92 c5
RSP: 0018:ffff8881083177d8 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffffff8ff18ae0 RCX: ffffffff8d68b3a7
RDX: fffffbfff1fe315c RSI: 0000000000000004 RDI: ffffffff8ff18ae0
RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff1fe315c
R10: 0000000000000003 R11: ffff888100927558 R12: 1ffff11021062efd
R13: 0000000000000003 R14: fffffbfff1fe315c R15: ffff888108317818
FS:  000000c000060098(0000) GS:ffff88811b380000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564242ddd010 CR3: 0000000112270000 CR4: 0000000000350ef0
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock include/linux/spinlock_api_smp.h:134 [inline]
 _raw_spin_lock+0xcb/0xe0 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 pgd_dtor arch/x86/mm/pgtable.c:151 [inline]
 pgd_free+0x49/0x200 arch/x86/mm/pgtable.c:490
 mm_free_pgd kernel/fork.c:804 [inline]
 __mmdrop+0xcb/0x330 kernel/fork.c:920
 mmdrop include/linux/sched/mm.h:55 [inline]
 mmdrop_sched include/linux/sched/mm.h:83 [inline]
 mmdrop_lazy_tlb_sched include/linux/sched/mm.h:110 [inline]
 finish_task_switch.isra.0+0x3bb/0x670 kernel/sched/core.c:5268
 context_switch kernel/sched/core.c:5372 [inline]
 __schedule+0xcfa/0x23f0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x79/0x290 kernel/sched/core.c:6848
 futex_wait_queue+0xc2/0x160 kernel/futex/waitwake.c:370
 __futex_wait+0x25f/0x370 kernel/futex/waitwake.c:669
 futex_wait+0xe9/0x370 kernel/futex/waitwake.c:697
 do_futex+0x20c/0x310 kernel/futex/syscalls.c:102
 __do_sys_futex kernel/futex/syscalls.c:179 [inline]
 __se_sys_futex kernel/futex/syscalls.c:160 [inline]
 __x64_sys_futex+0x1bc/0x3f0 kernel/futex/syscalls.c:160
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xa6/0x1a0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x47ac23
Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
RSP: 002b:000000c000041e80 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047ac23
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000029065e0
RBP: 000000c000041ec8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c000041eb8 R11: 0000000000000202 R12: 000000c000041eb8
R13: 000000c0000b1008 R14: 000000c000006540 R15: 0003ffffffffffff
 </TASK>
CPU: 0 UID: 0 PID: 6584 Comm: syz-executor.7 Not tainted 6.13.0-rc5-00012-g0bc21e701a6f #2
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:403 [inline]
RIP: 0010:unwind_next_frame+0xa42/0x2440 arch/x86/kernel/unwind_orc.c:585
Code: d7 64 00 e9 06 f7 ff ff 4d 8d 7e f8 ba 08 00 00 00 4c 89 ef 4c 89 44 24 20 4c 89 fe 48 89 4c 24 18 e8 b2 f3 ff ff 4d 8d 4d 40 <84> c0 0f 84 af f8 ff ff 4c 89 ff e8 8e eb ff ff 48 89 ee 48 8b 4c
RSP: 0018:ffff88811b209508 EFLAGS: 00000292
RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffff88811b20a000
RDX: ffff88811b209a01 RSI: ffff88811b209a80 RDI: ffff88811b209578
RBP: ffff88811b2095d0 R08: ffffffff8f5146c4 R09: ffff88811b2095b8
R10: ffff88811b209578 R11: 000000000002a37a R12: ffff88811b2095d8
R13: ffff88811b209578 R14: ffff88811b209a88 R15: ffff88811b209a80
FS:  00007f2e136c7640(0000) GS:ffff88811b200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8a6bea6f4 CR3: 0000000116fd0000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8f/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 unpoison_slab_object mm/kasan/common.c:319 [inline]
 __kasan_slab_alloc+0x6e/0x70 mm/kasan/common.c:345
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4119 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 kmem_cache_alloc_noprof+0xf5/0x360 mm/slub.c:4175
 mem_pool_alloc mm/kmemleak.c:471 [inline]
 __alloc_object+0x2b/0x1f0 mm/kmemleak.c:651
 __create_object+0x1d/0x80 mm/kmemleak.c:759
 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
 slab_post_alloc_hook mm/slub.c:4123 [inline]
 slab_alloc_node mm/slub.c:4168 [inline]
 __kmalloc_cache_noprof+0x30d/0x380 mm/slub.c:4324
 kmalloc_noprof include/linux/slab.h:901 [inline]
 dst_cow_metrics_generic+0x4c/0x190 net/core/dst.c:185
 dst_metrics_write_ptr include/net/dst.h:133 [inline]
 dst_metric_set include/net/dst.h:194 [inline]
 icmp6_dst_alloc+0x4b6/0x6b0 net/ipv6/route.c:3288
 ndisc_send_skb+0x9fd/0xdc0 net/ipv6/ndisc.c:491
 ndisc_send_rs+0x11b/0x4d0 net/ipv6/ndisc.c:721
 addrconf_rs_timer+0x2b1/0x6d0 net/ipv6/addrconf.c:4061
 call_timer_fn+0x33/0x240 kernel/time/timer.c:1793
 expire_timers kernel/time/timer.c:1844 [inline]
 __run_timers kernel/time/timer.c:2418 [inline]
 __run_timer_base.part.0+0x61a/0x8e0 kernel/time/timer.c:2430
 __run_timer_base kernel/time/timer.c:2425 [inline]
 run_timer_base kernel/time/timer.c:2439 [inline]
 run_timer_softirq+0x142/0x240 kernel/time/timer.c:2449
 handle_softirqs+0x1b8/0x5c0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu kernel/softirq.c:662 [inline]
 irq_exit_rcu+0xaf/0xe0 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0x6c/0x80 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__phys_addr_nodebug arch/x86/include/asm/page_64.h:27 [inline]
RIP: 0010:virt_to_ptdesc include/linux/mm.h:2869 [inline]
RIP: 0010:pgd_list_del arch/x86/mm/pgtable.c:105 [inline]
RIP: 0010:pgd_dtor arch/x86/mm/pgtable.c:152 [inline]
RIP: 0010:pgd_free+0x70/0x200 arch/x86/mm/pgtable.c:490
Code: da f4 02 48 01 eb 0f 82 64 01 00 00 e8 39 33 33 00 48 c7 c0 00 92 43 8e 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 <0f> 85 77 01 00 00 49 c7 c4 00 00 00 80 4c 2b 25 6c bf cf 03 e8 07
RSP: 0018:ffff888105f97830 EFLAGS: 00000246
RAX: 1ffffffff1c87240 RBX: ffff8881819a2000 RCX: ffffffff8a73d267
RDX: dffffc0000000000 RSI: ffffc90000da5000 RDI: ffff888105f977d8
RBP: ffff8881019a2000 R08: 0000000000000001 R09: ffffed1020bf2efb
R10: 0000000000000003 R11: 000000000000000b R12: ffff88811b239600
R13: ffff88810090b300 R14: ffff88810966c400 R15: ffff88811b339600
 mm_free_pgd kernel/fork.c:804 [inline]
 __mmdrop+0xcb/0x330 kernel/fork.c:920
 mmdrop include/linux/sched/mm.h:55 [inline]
 mmdrop_sched include/linux/sched/mm.h:83 [inline]
 mmdrop_lazy_tlb_sched include/linux/sched/mm.h:110 [inline]
 finish_task_switch.isra.0+0x3bb/0x670 kernel/sched/core.c:5268
 context_switch kernel/sched/core.c:5372 [inline]
 __schedule+0xcfa/0x23f0 kernel/sched/core.c:6756
 preempt_schedule_common kernel/sched/core.c:6935 [inline]
 __cond_resched+0x45/0x70 kernel/sched/core.c:7280
 might_resched include/linux/kernel.h:73 [inline]
 folio_lock include/linux/pagemap.h:1149 [inline]
 unpin_user_pages_dirty_lock+0x107/0x1b0 mm/gup.c:326
 process_vm_rw_single_vec mm/process_vm_access.c:127 [inline]
 process_vm_rw_core.constprop.0+0x542/0x870 mm/process_vm_access.c:216
 process_vm_rw+0x1d6/0x280 mm/process_vm_access.c:284
 __do_sys_process_vm_writev mm/process_vm_access.c:304 [inline]
 __se_sys_process_vm_writev mm/process_vm_access.c:299 [inline]
 __x64_sys_process_vm_writev+0xe2/0x1c0 mm/process_vm_access.c:299
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xa6/0x1a0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2e143e842d
Code: c3 e8 97 2b 00 00 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2e136c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
RAX: ffffffffffffffda RBX: 00007f2e145dbf80 RCX: 00007f2e143e842d
RDX: 1000000000000005 RSI: 0000000020000000 RDI: 00000000000000ff
RBP: 00007f2e144a7922 R08: 0000000000000025 R09: 0000000000000000
R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f2e145dbf80 R15: 00007f2e136a7000
 </TASK>