syzbot

watchdog: BUG: soft lockup - CPU#0 stuck for 122s! [jbd2/sda1-8:65]
Modules linked in:
CPU: 0 PID: 65 Comm: jbd2/sda1-8 Tainted: G        W          6.1.68-syzkaller-00162-g7ce117301e1b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:queued_write_lock_slowpath+0x15c/0x547 kernel/locking/qrwlock.c:85
Code: 00 00 bb ff 00 00 00 43 0f b6 44 3d 00 84 c0 74 38 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2b 4c 89 f7 e8 88 3b bd fc eb 21 f3 90 <43> 0f b6 44 3d 00 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c
RSP: 0018:ffffc90000957720 EFLAGS: 00000206
RAX: 0000000000000300 RBX: 00000000000000ff RCX: ffffffff84fed96c
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88810e56005c
RBP: ffffc900009577d0 R08: dffffc0000000000 R09: ffffed1021cac00c
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200012aeee
R13: 1ffff11021cac00b R14: ffff88810e56005c R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32531000 CR3: 0000000159683000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 queued_write_lock include/asm-generic/qrwlock.h:101 [inline]
 __raw_write_lock include/linux/rwlock_api_smp.h:210 [inline]
 _raw_write_lock+0x10a/0x170 kernel/locking/spinlock.c:300
 jbd2_journal_commit_transaction+0x4f3/0x5f20 fs/jbd2/commit.c:442
 kjournald2+0x437/0x7a0 fs/jbd2/journal.c:210
 kthread+0x26d/0x300 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 32312 Comm: syz-executor.3 Tainted: G        W          6.1.68-syzkaller-00162-g7ce117301e1b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:preempt_count_add+0xdd/0x1a0 kernel/sched/core.c:5883
Code: 70 08 65 48 8b 1d c3 23 b3 7e 48 81 c3 c8 0a 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 c6 cb 6c 00 4c 89 33 <5b> 41 5e 41 5f 5d c3 e8 a7 f7 22 01 85 c0 74 89 48 c7 c0 d8 19 4f
RSP: 0018:ffffc900001afd70 EFLAGS: 00000002
RAX: 0000000000010302 RBX: 0000000000000001 RCX: ffffffff87731f03
RDX: ffff88811c62a880 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffffc900001afd88 R08: ffffffff8183b4f1 R09: ffffed10379b3a2c
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000020 R15: dffffc0000000000
FS:  00007f68df0d76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3252f000 CR3: 00000001bb118000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 irq_work_queue+0xa1/0x160 kernel/irq_work.c:113
 __perf_event_overflow+0x501/0x630 kernel/events/core.c:9403
 perf_swevent_hrtimer+0x38e/0x4f0 kernel/events/core.c:10807
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x41a/0xad0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x40c/0xaa0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0xfd/0x3c0 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x44/0xc0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:u64_stats_inc include/linux/u64_stats_sync.h:94 [inline]
RIP: 0010:dev_lstats_add include/linux/netdevice.h:2764 [inline]
RIP: 0010:veth_xmit+0x5cd/0x940 drivers/net/veth.c:345
Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f6 ab 9c fe 48 8b 03 48 8b 4d d0 4a 01 4c 38 08 4a ff 04 38 45 31 f6 <eb> 05 e8 dc ee 55 fe e8 d7 d0 41 fe 44 89 f0 48 83 c4 30 5b 41 5c
RSP: 0018:ffffc900001b03d8 EFLAGS: 00000246
RAX: ffff8881f7100000 RBX: ffffffff86306878 RCX: 0000000000000046
RDX: 0000000000000301 RSI: 0000000000000001 RDI: 0000000000000008
RBP: ffffc900001b0430 R08: ffffffff831f6915 R09: ffffed10228cf408
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811467a000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000607e08c0c050
 __netdev_start_xmit include/linux/netdevice.h:4908 [inline]
 netdev_start_xmit include/linux/netdevice.h:4922 [inline]
 xmit_one net/core/dev.c:3631 [inline]
 dev_hard_start_xmit+0x1de/0x630 net/core/dev.c:3647
 __dev_queue_xmit+0x18a4/0x36e0 net/core/dev.c:4297
 dev_queue_xmit include/linux/netdevice.h:3076 [inline]
 neigh_hh_output include/net/neighbour.h:536 [inline]
 neigh_output include/net/neighbour.h:550 [inline]
 ip6_finish_output2+0x100d/0x1820 net/ipv6/ip6_output.c:134
 __ip6_finish_output net/ipv6/ip6_output.c:201 [inline]
 ip6_finish_output+0x50f/0xa60 net/ipv6/ip6_output.c:212
 NF_HOOK_COND include/linux/netfilter.h:294 [inline]
 ip6_output+0x1f7/0x4d0 net/ipv6/ip6_output.c:233
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ndisc_send_skb+0x7cf/0xdc0 net/ipv6/ndisc.c:509
 ndisc_send_rs+0x47d/0x5f0 net/ipv6/ndisc.c:719
 addrconf_rs_timer+0x2d1/0x600 net/ipv6/addrconf.c:3963
 call_timer_fn+0x3b/0x2d0 kernel/time/timer.c:1480
 expire_timers kernel/time/timer.c:1525 [inline]
 __run_timers+0x72a/0xa10 kernel/time/timer.c:1796
 run_timer_softirq+0x69/0xf0 kernel/time/timer.c:1809
 __do_softirq+0x1d8/0x661 kernel/softirq.c:617
 invoke_softirq kernel/softirq.c:472 [inline]
 __irq_exit_rcu+0x50/0xf0 kernel/softirq.c:700
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:712
 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:queued_read_lock_slowpath+0x1c3/0x3f0 kernel/locking/qrwlock.c:59
Code: 48 c7 44 24 20 0e 36 e0 45 49 c7 44 1d 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 60 0f 85 da 00 00 00 48 8d 65 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 4d 89 f7 49 c1 ef 03 43 0f b6 04
RSP: 0018:ffffc900028772b0 EFLAGS: 00000246
RAX: c1e20ff0c9cefe00 RBX: 1ffff9200050ee48 RCX: ffffffff84fed554
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88810e560060
RBP: ffffc900028772d8 R08: dffffc0000000000 R09: ffffed1021cac00c
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810e560060
R13: dffffc0000000000 R14: ffff88810e56005c R15: 1ffff9200050ee4c
 queued_read_lock include/asm-generic/qrwlock.h:87 [inline]
 __raw_read_lock include/linux/rwlock_api_smp.h:151 [inline]
 _raw_read_lock+0x3a/0x40 kernel/locking/spinlock.c:228
 jbd2_log_wait_commit+0x90/0x360 fs/jbd2/journal.c:682
 __jbd2_journal_force_commit+0x163/0x1e0 fs/jbd2/journal.c:558
 jbd2_journal_force_commit_nested+0x15/0x30 fs/jbd2/journal.c:579
 move_extent_per_page+0x1d79/0x2680 fs/ext4/move_extent.c:411
 ext4_move_extents+0x94a/0xe30 fs/ext4/move_extent.c:672
 __ext4_ioctl fs/ext4/ioctl.c:1358 [inline]
 ext4_ioctl+0x34d3/0x5900 fs/ext4/ioctl.c:1614
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl+0x114/0x190 fs/ioctl.c:856
 __x64_sys_ioctl+0x7b/0x90 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f68de27dda9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f68df0d70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f68de3abf80 RCX: 00007f68de27dda9
RDX: 00000000200005c0 RSI: 00000000c028660f RDI: 0000000000000005
RBP: 00007f68de2ca47a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f68de3abf80 R15: 00007ffe88d54ad8
 </TASK>