------------[ cut here ]------------ WARNING: CPU: 1 PID: 4893 at kernel/rcu/tree_stall.h:894 rcu_check_gp_start_stall.part.0+0x325/0x4b0 kernel/rcu/tree_stall.h:886 Modules linked in: CPU: 1 PID: 4893 Comm: syz-executor.3 Not tainted 5.14.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rcu_check_gp_start_stall.part.0+0x325/0x4b0 kernel/rcu/tree_stall.h:894 Code: 0f 88 fa 00 00 00 be 04 00 00 00 48 c7 c7 60 45 22 90 e8 2e 32 5a 00 b8 01 00 00 00 87 05 33 95 c0 0e 85 c0 0f 85 c9 00 00 00 <0f> 0b 48 81 fd c0 4f 98 8b 48 c7 c3 2c b2 6c 8d 74 58 48 b8 00 00 RSP: 0018:ffffc90000dc0e30 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 00000001000424c8 RCX: ffffffff8161b022 RDX: fffffbfff20448ac RSI: 0000000000000004 RDI: ffffffff90224560 RBP: ffffffff8b984fc0 R08: 0000000000000001 R09: 0000000000000003 R10: fffffbfff20448ac R11: 1ffff110173aa53e R12: 1ffffffff16c1e30 R13: 0000000000000246 R14: ffff8880b9d52912 R15: 0000000000000001 FS: 00007f7031d8a700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e071f74160 CR3: 000000007472e000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_check_gp_start_stall kernel/rcu/tree_stall.h:857 [inline] rcu_core+0x4df/0x1380 kernel/rcu/tree.c:2780 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x16e/0x1c0 kernel/softirq.c:636 irq_exit_rcu+0x5/0x20 kernel/softirq.c:648 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__add_wb_stat include/linux/backing-dev.h:70 [inline] RIP: 0010:dec_wb_stat include/linux/backing-dev.h:80 [inline] RIP: 0010:account_page_cleaned mm/page-writeback.c:2461 [inline] RIP: 0010:account_page_cleaned+0x1e5/0x320 mm/page-writeback.c:2455 Code: b6 14 11 38 d0 7c 08 84 d2 0f 85 df 00 00 00 49 8d bc 24 98 00 00 00 b8 ff ff ff ff 48 c7 c6 ff ff ff ff 0f bd 05 6f 8e cf 0b <8d> 14 c5 08 00 00 00 e8 af 4c 4f 02 48 b8 00 00 00 00 00 fc ff df RSP: 0018:ffffc9000246f4c0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000200 RCX: 1ffffffff1ad901c RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffff88801f2580f8 RBP: ffffea0000d3a180 R08: 0000000000000000 R09: 0000000000057220 R10: ffffffff819cf20f R11: 0000000000000000 R12: ffff88801f258060 R13: 0000000000000000 R14: ffff8880a2b1b510 R15: 0000000000000000 __cancel_dirty_page+0x489/0x730 mm/page-writeback.c:2649 cancel_dirty_page include/linux/mm.h:1868 [inline] try_to_free_buffers+0x44a/0x630 fs/buffer.c:3254 ext4_releasepage+0x355/0x470 fs/ext4/inode.c:3311 try_to_release_page+0x289/0x3f0 mm/filemap.c:3850 block_invalidatepage+0x575/0x640 fs/buffer.c:1539 do_invalidatepage mm/truncate.c:157 [inline] truncate_cleanup_page+0x393/0x560 mm/truncate.c:176 truncate_inode_pages_range+0x26c/0x1030 mm/truncate.c:325 truncate_inode_pages mm/truncate.c:424 [inline] truncate_pagecache+0x63/0x90 mm/truncate.c:736 ext4_setattr+0x11dc/0x2000 fs/ext4/inode.c:5498 notify_change+0xb28/0x10f0 fs/attr.c:398 do_truncate+0x13c/0x200 fs/open.c:64 handle_truncate fs/namei.c:3030 [inline] do_open fs/namei.c:3378 [inline] path_openat+0x20f4/0x27f0 fs/namei.c:3507 do_filp_open+0x1aa/0x400 fs/namei.c:3534 do_sys_openat2+0x16d/0x420 fs/open.c:1204 do_sys_open fs/open.c:1220 [inline] __do_sys_openat fs/open.c:1236 [inline] __se_sys_openat fs/open.c:1231 [inline] __x64_sys_openat+0x13f/0x1f0 fs/open.c:1231 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7031d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000000007a05 RSI: 0000000020000280 RDI: ffffffffffffff9c RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000001700 R11: 0000000000000246 R12: 000000000056c038 R13: 00007ffd3f25ed8f R14: 00007f7031d8a300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 0f 88 fa 00 00 00 js 0x100 6: be 04 00 00 00 mov $0x4,%esi b: 48 c7 c7 60 45 22 90 mov $0xffffffff90224560,%rdi 12: e8 2e 32 5a 00 callq 0x5a3245 17: b8 01 00 00 00 mov $0x1,%eax 1c: 87 05 33 95 c0 0e xchg %eax,0xec09533(%rip) # 0xec09555 22: 85 c0 test %eax,%eax 24: 0f 85 c9 00 00 00 jne 0xf3 2a: 0f 0b ud2 <-- trapping instruction 2c: 48 81 fd c0 4f 98 8b cmp $0xffffffff8b984fc0,%rbp 33: 48 c7 c3 2c b2 6c 8d mov $0xffffffff8d6cb22c,%rbx 3a: 74 58 je 0x94 3c: 48 rex.W 3d: b8 .byte 0xb8