rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-....: (1 GPs behind) idle=887/1/0x4000000000000000 softirq=224641/224649 fqs=5188
(t=10502 jiffies g=343069 q=5300)
NMI backtrace for cpu 0
CPU: 0 PID: 13763 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x22d/0x390 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
rcu_pending kernel/rcu/tree.c:3878 [inline]
rcu_sched_clock_irq+0x1e33/0x2bc0 kernel/rcu/tree.c:2597
update_process_times+0x197/0x200 kernel/time/timer.c:1785
tick_sched_handle kernel/time/tick-sched.c:226 [inline]
tick_sched_timer+0x27d/0x420 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:trace_lock_acquire+0x6b/0x190 include/trace/events/lock.h:13
Code: 98 0c 73 21 65 83 05 cb 81 9c 7e 01 48 8b 05 84 98 85 0c e8 97 2b 08 00 85 c0 74 18 65 ff 0d b4 81 9c 7e 74 49 48 83 c4 08 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 e8 76 20 ac 08 85 c0 74 df 80 3d d7
RSP: 0000:ffffc900000079e8 EFLAGS: 00000292
RAX: 0000000000000001 RBX: ffff888023505478 RCX: 0000000000000103
RDX: 0000000000000000 RSI: 0000000000000103 RDI: 0000000000000000
RBP: ffffc90000007b70 R08: dffffc0000000000 R09: fffffbfff1bfd18e
R10: fffffbfff1bfd18e R11: 0000000000000000 R12: 0000000000000000
R13: 1ffff92000000f4c R14: 0000000000000000 R15: dffffc0000000000
lock_acquire+0xa5/0x4d0 kernel/locking/lockdep.c:5608
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:349 [inline]
garp_join_timer+0x1f/0x130 net/802/garp.c:418
call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers+0x71a/0x910 kernel/time/timer.c:1734
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747
__do_softirq+0x392/0x7a3 kernel/softirq.c:558
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:lock_acquire+0x21f/0x4d0 kernel/locking/lockdep.c:5641
Code: 08 4c 89 f7 e8 12 71 6a 00 f6 84 24 81 00 00 00 02 0f 85 13 02 00 00 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 09 00 00 00 00 43 c7 44 2f 11
RSP: 0000:ffffc9001a6671c0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff920034cce48 RCX: ffff88816cfe8a58
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc9001a667320 R08: dffffc0000000000 R09: fffffbfff1ff35dd
R10: fffffbfff1ff35dd R11: 0000000000000000 R12: 0000000000000246
R13: 1ffff920034cce40 R14: ffffc9001a667240 R15: dffffc0000000000
rcu_lock_acquire+0x20/0x30 include/linux/rcupdate.h:268
rcu_read_lock include/linux/rcupdate.h:688 [inline]
__mod_lruvec_page_state+0xab/0x3b0 mm/memcontrol.c:740
page_remove_file_rmap mm/rmap.c:1289 [inline]
page_remove_rmap+0xa96/0x10f0 mm/rmap.c:1351
zap_pte_range+0xa25/0x1ba0 mm/memory.c:1357
zap_pmd_range mm/memory.c:1467 [inline]
zap_pud_range mm/memory.c:1496 [inline]
zap_p4d_range mm/memory.c:1517 [inline]
unmap_page_range+0x745/0xa20 mm/memory.c:1538
unmap_vmas+0x202/0x390 mm/memory.c:1615
exit_mmap+0x3c6/0x6f0 mm/mmap.c:3170
__mmput+0x111/0x3a0 kernel/fork.c:1113
exit_mm+0x211/0x2f0 kernel/exit.c:507
do_exit+0x688/0x24f0 kernel/exit.c:819
do_group_exit+0x168/0x2d0 kernel/exit.c:929
get_signal+0x1740/0x2120 kernel/signal.c:2852
arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f8b5c8eaae9
Code: Unable to access opcode bytes at RIP 0x7f8b5c8eaabf.
RSP: 002b:00007f8b59e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: 0000000000000007 RBX: 00007f8b5c9fe020 RCX: 00007f8b5c8eaae9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000700
RBP: 00007f8b5c944f6d R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffb67a336f R14: 00007f8b59e3f300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 98 cwtl
1: 0c 73 or $0x73,%al
3: 21 65 83 and %esp,-0x7d(%rbp)
6: 05 cb 81 9c 7e add $0x7e9c81cb,%eax
b: 01 48 8b add %ecx,-0x75(%rax)
e: 05 84 98 85 0c add $0xc859884,%eax
13: e8 97 2b 08 00 callq 0x82baf
18: 85 c0 test %eax,%eax
1a: 74 18 je 0x34
1c: 65 ff 0d b4 81 9c 7e decl %gs:0x7e9c81b4(%rip) # 0x7e9c81d7
23: 74 49 je 0x6e
25: 48 83 c4 08 add $0x8,%rsp
29: 5b pop %rbx
* 2a: 41 5c pop %r12 <-- trapping instruction
2c: 41 5d pop %r13
2e: 41 5e pop %r14
30: 41 5f pop %r15
32: 5d pop %rbp
33: c3 retq
34: e8 76 20 ac 08 callq 0x8ac20af
39: 85 c0 test %eax,%eax
3b: 74 df je 0x1c
3d: 80 .byte 0x80
3e: 3d .byte 0x3d
3f: d7 xlat %ds:(%rbx)