rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (0 ticks this GP) idle=1e7/1/0x4000000000000000 softirq=80484/80484 fqs=0
(detected by 0, t=10502 jiffies, g=124681, q=1414)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 21070 Comm: syz-executor.3 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:check_preemption_disabled+0x2/0x170 lib/smp_processor_id.c:13
Code: 1f 44 00 00 e8 5f d3 56 f8 65 48 8b 3c 25 40 70 02 00 e8 41 09 0e f8 eb 99 0f 1f 44 00 00 0f 0b e9 23 ff ff ff cc cc cc 41 56 <41> 55 49 89 f5 41 54 55 48 89 fd 53 0f 1f 44 00 00 65 44 8b 25 dd
RSP: 0018:ffffc90000fd8da8 EFLAGS: 00000082
RAX: 0000000080010401 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888041a04040 RSI: ffffffff8a04a060 RDI: ffffffff8a04a0a0
RBP: 0000000140000002 R08: 0000000000000001 R09: 0000000040000001
R10: ffffffff8729f638 R11: 0000000000000000 R12: ffff888076df5300
R13: 177c4c47aef8988f R14: ffff888076df5320 R15: 177c4c47aef8988f
FS: 00007eff2b71d700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f721000 CR3: 0000000029646000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_dynticks_curr_cpu_in_eqs kernel/rcu/tree.c:330 [inline]
rcu_is_watching+0xe/0xb0 kernel/rcu/tree.c:1121
rcu_read_unlock include/linux/rcupdate.h:717 [inline]
advance_sched+0x4d2/0x9a0 net/sched/sch_taprio.c:769
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 ea 05 15 f8 48 89 ef e8 a2 7b 15 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 33 46 08 f8 65 8b 05 2c 9a bb 76 85 c0 74 0a 5b 5d c3 e8 a0 32
RSP: 0018:ffffc90003327060 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b21e01
RDX: 0000000000000000 RSI: 0000000000000401 RDI: 0000000000000001
RBP: ffffffff906b5540 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817d08b8 R11: 0000000000000001 R12: ffff88806fbfbf58
R13: 1ffff92000664e1e R14: ffffffff906b5540 R15: ffffffff906b5538
__debug_object_init+0x409/0xd10 lib/debugobjects.c:605
debug_object_init lib/debugobjects.c:620 [inline]
debug_object_activate+0x32c/0x3e0 lib/debugobjects.c:706
debug_rcu_head_queue kernel/rcu/rcu.h:176 [inline]
__call_rcu kernel/rcu/tree.c:2969 [inline]
call_rcu+0x2c/0x740 kernel/rcu/tree.c:3065
dst_release net/core/dst.c:177 [inline]
dst_release+0x79/0xe0 net/core/dst.c:167
refdst_drop include/net/dst.h:261 [inline]
skb_dst_drop include/net/dst.h:273 [inline]
__dev_queue_xmit+0x1a21/0x3650 net/core/dev.c:4185
neigh_hh_output include/net/neighbour.h:511 [inline]
neigh_output include/net/neighbour.h:525 [inline]
ip_finish_output2+0x14cb/0x2160 net/ipv4/ip_output.c:221
__ip_finish_output net/ipv4/ip_output.c:299 [inline]
__ip_finish_output+0x396/0x640 net/ipv4/ip_output.c:281
ip_finish_output+0x32/0x200 net/ipv4/ip_output.c:309
NF_HOOK_COND include/linux/netfilter.h:296 [inline]
ip_mc_output+0x212/0x700 net/ipv4/ip_output.c:408
dst_output include/net/dst.h:450 [inline]
ip_local_out net/ipv4/ip_output.c:126 [inline]
ip_send_skb+0xd4/0x260 net/ipv4/ip_output.c:1555
udp_send_skb+0x6d2/0x11a0 net/ipv4/udp.c:966
udp_sendmsg+0x1bad/0x2740 net/ipv4/udp.c:1253
inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:819
sock_sendmsg_nosec net/socket.c:704 [inline]
sock_sendmsg+0xcf/0x120 net/socket.c:724
____sys_sendmsg+0x331/0x810 net/socket.c:2409
___sys_sendmsg+0xf3/0x170 net/socket.c:2463
__sys_sendmmsg+0x195/0x470 net/socket.c:2549
__do_sys_sendmmsg net/socket.c:2578 [inline]
__se_sys_sendmmsg net/socket.c:2575 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2575
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7eff2cda7e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007eff2b71d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007eff2cebaf60 RCX: 00007eff2cda7e99
RDX: 000000000000003d RSI: 0000000020007fc0 RDI: 0000000000000003
RBP: 00007eff2ce01ff1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001c00 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd09f96edf R14: 00007eff2b71d300 R15: 0000000000022000
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g124681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=71580
rcu: rcu_preempt kthread starved for 10502 jiffies! g124681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:28648 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4972 [inline]
__schedule+0xa9a/0x4900 kernel/sched/core.c:6253
schedule+0xd2/0x260 kernel/sched/core.c:6326
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1955
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2128
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 21070 Comm: syz-executor.3 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rcu_read_unlock_sched_notrace include/linux/rcupdate.h:810 [inline]
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:lock_acquire+0x44d/0x510 kernel/locking/lockdep.c:5608
Code: ff ff e8 65 5e a4 ff e9 59 fc ff ff 65 ff 05 1a 89 a6 7e 48 8b 05 93 07 21 0c e8 6e c8 05 00 85 c0 74 17 65 ff 0d 03 89 a6 7e <0f> 85 78 fc ff ff e8 37 5e a4 ff e9 6e fc ff ff e8 ee 0c e8 07 85
RSP: 0018:ffffc90000fd8d40 EFLAGS: 00000082
RAX: 0000000000000001 RBX: 1ffff920001fb1aa RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000010403 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8d911b97
R10: fffffbfff1b22372 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880b9d2a418 R15: 0000000000000000
FS: 00007eff2b71d700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f721000 CR3: 0000000029646000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline]
_raw_spin_lock_irq+0x32/0x50 kernel/locking/spinlock.c:170
__run_hrtimer kernel/time/hrtimer.c:1689 [inline]
__hrtimer_run_queues+0x243/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 ea 05 15 f8 48 89 ef e8 a2 7b 15 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 33 46 08 f8 65 8b 05 2c 9a bb 76 85 c0 74 0a 5b 5d c3 e8 a0 32
RSP: 0018:ffffc90003327060 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b21e01
RDX: 0000000000000000 RSI: 0000000000000401 RDI: 0000000000000001
RBP: ffffffff906b5540 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817d08b8 R11: 0000000000000001 R12: ffff88806fbfbf58
R13: 1ffff92000664e1e R14: ffffffff906b5540 R15: ffffffff906b5538
__debug_object_init+0x409/0xd10 lib/debugobjects.c:605
debug_object_init lib/debugobjects.c:620 [inline]
debug_object_activate+0x32c/0x3e0 lib/debugobjects.c:706
debug_rcu_head_queue kernel/rcu/rcu.h:176 [inline]
__call_rcu kernel/rcu/tree.c:2969 [inline]
call_rcu+0x2c/0x740 kernel/rcu/tree.c:3065
dst_release net/core/dst.c:177 [inline]
dst_release+0x79/0xe0 net/core/dst.c:167
refdst_drop include/net/dst.h:261 [inline]
skb_dst_drop include/net/dst.h:273 [inline]
__dev_queue_xmit+0x1a21/0x3650 net/core/dev.c:4185
neigh_hh_output include/net/neighbour.h:511 [inline]
neigh_output include/net/neighbour.h:525 [inline]
ip_finish_output2+0x14cb/0x2160 net/ipv4/ip_output.c:221
__ip_finish_output net/ipv4/ip_output.c:299 [inline]
__ip_finish_output+0x396/0x640 net/ipv4/ip_output.c:281
ip_finish_output+0x32/0x200 net/ipv4/ip_output.c:309
NF_HOOK_COND include/linux/netfilter.h:296 [inline]
ip_mc_output+0x212/0x700 net/ipv4/ip_output.c:408
dst_output include/net/dst.h:450 [inline]
ip_local_out net/ipv4/ip_output.c:126 [inline]
ip_send_skb+0xd4/0x260 net/ipv4/ip_output.c:1555
udp_send_skb+0x6d2/0x11a0 net/ipv4/udp.c:966
udp_sendmsg+0x1bad/0x2740 net/ipv4/udp.c:1253
inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:819
sock_sendmsg_nosec net/socket.c:704 [inline]
sock_sendmsg+0xcf/0x120 net/socket.c:724
____sys_sendmsg+0x331/0x810 net/socket.c:2409
___sys_sendmsg+0xf3/0x170 net/socket.c:2463
__sys_sendmmsg+0x195/0x470 net/socket.c:2549
__do_sys_sendmmsg net/socket.c:2578 [inline]
__se_sys_sendmmsg net/socket.c:2575 [inline]
__x64_sys_sendmmsg+0x99/0x100 net/socket.c:2575
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7eff2cda7e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007eff2b71d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007eff2cebaf60 RCX: 00007eff2cda7e99
RDX: 000000000000003d RSI: 0000000020007fc0 RDI: 0000000000000003
RBP: 00007eff2ce01ff1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001c00 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd09f96edf R14: 00007eff2b71d300 R15: 0000000000022000
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 44 00 00 add %r8b,(%rax)
3: e8 5f d3 56 f8 callq 0xf856d367
8: 65 48 8b 3c 25 40 70 mov %gs:0x27040,%rdi
f: 02 00
11: e8 41 09 0e f8 callq 0xf80e0957
16: eb 99 jmp 0xffffffb1
18: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
1d: 0f 0b ud2
1f: e9 23 ff ff ff jmpq 0xffffff47
24: cc int3
25: cc int3
26: cc int3
27: 41 56 push %r14
* 29: 41 55 push %r13 <-- trapping instruction
2b: 49 89 f5 mov %rsi,%r13
2e: 41 54 push %r12
30: 55 push %rbp
31: 48 89 fd mov %rdi,%rbp
34: 53 push %rbx
35: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
3a: 65 gs
3b: 44 rex.R
3c: 8b .byte 0x8b
3d: 25 .byte 0x25
3e: dd .byte 0xdd