rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (6737 ticks this GP) idle=ddf/1/0x4000000000000000 softirq=37752/37752 fqs=31 
	(t=10500 jiffies g=63117 q=477)
rcu: rcu_preempt kthread starved for 10421 jiffies! g63117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28952 pid:   14 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4969 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6250
 schedule+0xd2/0x260 kernel/sched/core.c:6323
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
 rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1955
 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2128
 kthread+0x405/0x4f0 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 19892 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:lockdep_hardirqs_on+0x27/0x100 kernel/locking/lockdep.c:4314
Code: 0f 0b c3 44 8b 05 b5 83 36 04 55 53 65 48 8b 1c 25 40 70 02 00 45 85 c0 0f 84 85 00 00 00 65 8b 05 6e 3a c9 76 a9 00 00 f0 00 <48> 89 fd 75 41 65 8b 05 dd 44 c9 76 85 c0 75 69 65 8b 05 ae 41 c9
RSP: 0018:ffffc9000ea67ba8 EFLAGS: 00000046
RAX: 0000000080000001 RBX: ffff888030a74180 RCX: 1ffffffff1fb13b6
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff893c1b10
RBP: ffffffff9044eba8 R08: 0000000000000001 R09: ffffffff8fd4aaa7
R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffffff898d4c60 R14: 1ffff92001d4cf7f R15: ffff88807189d6d0
FS:  00007f7d83352700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb03d78000 CR3: 000000001539f000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock_irqrestore+0x50/0x70 kernel/locking/spinlock.c:194
 debug_object_active_state lib/debugobjects.c:945 [inline]
 debug_object_active_state+0x260/0x350 lib/debugobjects.c:914
 debug_rcu_head_queue kernel/rcu/rcu.h:177 [inline]
 __call_rcu kernel/rcu/tree.c:2969 [inline]
 call_rcu+0x44/0x740 kernel/rcu/tree.c:3065
 netlink_release+0xdd2/0x1dd0 net/netlink/af_netlink.c:815
 __sock_release+0xcd/0x280 net/socket.c:649
 sock_close+0x18/0x20 net/socket.c:1314
 __fput+0x286/0x9f0 fs/file_table.c:280
 task_work_run+0xdd/0x1a0 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:175 [inline]
 exit_to_user_mode_prepare+0x27e/0x290 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7d85ddcae9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7d83352188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: 0000000000000034 RBX: 00007f7d85eeff60 RCX: 00007f7d85ddcae9
RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005
RBP: 00007f7d85e36f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc5c698b6f R14: 00007f7d83352300 R15: 0000000000022000
 </TASK>
NMI backtrace for cpu 0
CPU: 0 PID: 19887 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343
 print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
 rcu_pending kernel/rcu/tree.c:3878 [inline]
 rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597
 update_process_times+0x16d/0x200 kernel/time/timer.c:1785
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1421
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:pie_calculate_probability+0x280/0x7c0 net/sched/sch_pie.c:348
Code: 89 6c 24 38 e8 31 03 24 fa 47 8d 24 a4 31 d2 4c 89 ff 43 8d 0c 24 48 c1 ed 02 48 b8 ff ff ff ff ff ff ff 00 48 f7 f1 49 89 c5 <48> 89 c6 48 c1 eb 02 49 89 cc e8 b1 0a 24 fa 4d 39 ef 73 18 e8 f7
RSP: 0018:ffffc90000007c50 EFLAGS: 00000203
RAX: 000000a7c5ac471b RBX: 000000000abcc771 RCX: 00000000000186a0
RDX: 0000000000006d1f RSI: ffffffff8752fb7f RDI: 0000000000000000
RBP: 000000000044b82f R08: 00000000000f4240 R09: 0000000000000000
R10: ffffffff8752fbc6 R11: 0000000000000000 R12: 000000000000c350
R13: 000000a7c5ac471b R14: 0000000000000003 R15: 0000000000000000
 fq_pie_timer+0x170/0x2a0 net/sched/sch_fq_pie.c:383
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
 expire_timers kernel/time/timer.c:1466 [inline]
 __run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734
 __run_timers kernel/time/timer.c:1715 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:636
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__sanitizer_cov_trace_pc+0x3c/0x60 kernel/kcov.c:200
Code: 00 65 48 8b 14 25 40 70 02 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 a4 15 00 00 85 c0 74 2b 8b 82 80 15 00 00 83 f8 02 75 20 <48> 8b 8a 88 15 00 00 8b 92 84 15 00 00 48 8b 01 48 83 c0 01 48 39
RSP: 0018:ffffc9000e8dfa48 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffff888023b4f7c0 RCX: 0000000000000000
RDX: ffff888039abc200 RSI: ffffffff81c6cac2 RDI: ffff888023b4f7c0
RBP: ffff88801a3a9a48 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff81cc105b R11: 0000000000000000 R12: ffff888023b4f844
R13: ffffc9000e8dfc40 R14: ffff888023b4f7d0 R15: 0000000000000000
 do_dentry_open+0x22/0x1250 fs/open.c:775
 do_open fs/namei.c:3426 [inline]
 path_openat+0x1cad/0x2750 fs/namei.c:3559
 do_filp_open+0x1aa/0x400 fs/namei.c:3586
 do_sys_openat2+0x16d/0x4d0 fs/open.c:1212
 do_sys_open fs/open.c:1228 [inline]
 __do_sys_openat fs/open.c:1244 [inline]
 __se_sys_openat fs/open.c:1239 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1239
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7ff0516e6ae9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff04ec5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ff0517f9f60 RCX: 00007ff0516e6ae9
RDX: 2f606557d6081b8a RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 00007ff051740f25 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdb7cc0bcf R14: 00007ff04ec5c300 R15: 0000000000022000
 </TASK>
sched: RT throttling activated
----------------
Code disassembly (best guess):
   0:	0f 0b                	ud2
   2:	c3                   	retq
   3:	44 8b 05 b5 83 36 04 	mov    0x43683b5(%rip),%r8d        # 0x43683bf
   a:	55                   	push   %rbp
   b:	53                   	push   %rbx
   c:	65 48 8b 1c 25 40 70 	mov    %gs:0x27040,%rbx
  13:	02 00
  15:	45 85 c0             	test   %r8d,%r8d
  18:	0f 84 85 00 00 00    	je     0xa3
  1e:	65 8b 05 6e 3a c9 76 	mov    %gs:0x76c93a6e(%rip),%eax        # 0x76c93a93
  25:	a9 00 00 f0 00       	test   $0xf00000,%eax
* 2a:	48 89 fd             	mov    %rdi,%rbp <-- trapping instruction
  2d:	75 41                	jne    0x70
  2f:	65 8b 05 dd 44 c9 76 	mov    %gs:0x76c944dd(%rip),%eax        # 0x76c94513
  36:	85 c0                	test   %eax,%eax
  38:	75 69                	jne    0xa3
  3a:	65                   	gs
  3b:	8b                   	.byte 0x8b
  3c:	05                   	.byte 0x5
  3d:	ae                   	scas   %es:(%rdi),%al
  3e:	41 c9                	rex.B leaveq