rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-...!: (1 GPs behind) idle=fb3/1/0x4000000000000000 softirq=12410/12411 fqs=13
(t=10500 jiffies g=15517 q=331)
rcu: rcu_preempt kthread starved for 10461 jiffies! g15517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27512 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4986 [inline]
__schedule+0xab2/0x4e90 kernel/sched/core.c:6296
schedule+0xd2/0x260 kernel/sched/core.c:6369
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1971
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2144
kthread+0x2e9/0x3a0 kernel/kthread.c:377
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 5277 Comm: syz-executor.5 Not tainted 5.16.0-rc6-next-20211224-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__lock_acquire+0xd52/0x5470 kernel/locking/lockdep.c:5053
Code: 09 48 8b 3c 24 e8 4e 84 66 00 41 8b 85 60 0a 00 00 83 c0 01 83 f8 2f 41 89 85 60 0a 00 00 0f 87 4e 0b 00 00 3b 05 be c8 13 0e <41> bf 01 00 00 00 0f 86 c8 00 00 00 89 05 ac c8 13 0e e9 bd 00 00
RSP: 0018:ffffc90000dc0ad8 EFLAGS: 00000087
RAX: 0000000000000005 RBX: ffffffff8f30cb40 RCX: 000000000000df11
RDX: 1ffff1100455114c RSI: 0000000000000001 RDI: ffffffff8f30cb58
RBP: c735c94dd0b594d8 R08: 0000000000000000 R09: ffffffff8ffb5947
R10: fffffbfff1ff6b28 R11: 0000000000000001 R12: ffff888022a88b08
R13: ffff888022a88000 R14: ffffffff8d936528 R15: 0000000000000000
FS: 00007f0d00359700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2ee29000 CR3: 000000001d081000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire kernel/locking/lockdep.c:5639 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5604
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:661
debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline]
debug_activate kernel/time/hrtimer.c:475 [inline]
enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:1084
__run_hrtimer kernel/time/hrtimer.c:1702 [inline]
__hrtimer_run_queues+0xb02/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:add_transaction_credits+0x10f/0xb70 fs/jbd2/transaction.c:248
Code: 44 89 fe bf 02 00 00 00 e8 9e e4 4a ff 41 83 ff 02 0f 87 49 04 00 00 e8 6f e2 4a ff 48 89 ef 41 bc 01 00 00 00 e8 b1 f3 ff ff 5c e2 4a ff 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00
RSP: 0018:ffffc90004327160 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 1ffff92000864e32 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff888022a88000 RDI: 0000000000000003
RBP: ffff88814afac000 R08: 0000000000000000 R09: ffff88802a616557
R10: ffffffff822d25bd R11: 0000000000000000 R12: 0000000000000000
R13: ffff88802a616480 R14: 0000000000000000 R15: 0000000000000800
start_this_handle+0x3a6/0x1380 fs/jbd2/transaction.c:427
jbd2__journal_start+0x399/0x930 fs/jbd2/transaction.c:525
__ext4_journal_start_sb+0x227/0x4a0 fs/ext4/ext4_jbd2.c:105
__ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline]
ext4_dirty_inode+0x9d/0x110 fs/ext4/inode.c:5923
__mark_inode_dirty+0x45b/0xfe0 fs/fs-writeback.c:2409
mark_inode_dirty include/linux/fs.h:2372 [inline]
generic_write_end+0x3ea/0x6e0 fs/buffer.c:2240
ext4_da_write_end+0x1c2/0x990 fs/ext4/inode.c:3060
generic_perform_write+0x2c6/0x510 mm/filemap.c:3820
ext4_buffered_write_iter+0x1ac/0x3b0 fs/ext4/file.c:269
ext4_file_write_iter+0x423/0x14e0 fs/ext4/file.c:681
call_write_iter include/linux/fs.h:2079 [inline]
do_iter_readv_writev+0x47a/0x750 fs/read_write.c:725
do_iter_write+0x188/0x710 fs/read_write.c:851
vfs_iter_write+0x70/0xa0 fs/read_write.c:892
iter_file_splice_write+0x723/0xc70 fs/splice.c:689
do_splice_from fs/splice.c:767 [inline]
direct_splice_actor+0x110/0x180 fs/splice.c:936
splice_direct_to_actor+0x34b/0x8c0 fs/splice.c:891
do_splice_direct+0x1b3/0x280 fs/splice.c:979
do_sendfile+0xaf2/0x1250 fs/read_write.c:1245
__do_sys_sendfile64 fs/read_write.c:1310 [inline]
__se_sys_sendfile64 fs/read_write.c:1296 [inline]
__x64_sys_sendfile64+0x1cc/0x210 fs/read_write.c:1296
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f0d019e3e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0d00359168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f0d01af6f60 RCX: 00007f0d019e3e99
RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000005
RBP: 00007f0d01a3dff1 R08: 0000000000000000 R09: 0000000000000000
R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc7f7a3e7f R14: 00007f0d00359300 R15: 0000000000022000
NMI backtrace for cpu 0
CPU: 0 PID: 5271 Comm: syz-executor.0 Not tainted 5.16.0-rc6-next-20211224-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x262/0x3f0 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:604 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:688 [inline]
rcu_pending kernel/rcu/tree.c:3920 [inline]
rcu_sched_clock_irq.cold+0x5c/0x759 kernel/rcu/tree.c:2625
update_process_times+0x16d/0x200 kernel/time/timer.c:1785
tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 8a 4d 04 f8 48 89 ef e8 42 c3 04 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 43 7d f7 f7 65 8b 05 dc db a9 76 85 c0 74 0a 5b 5d c3 e8 a0 b8
RSP: 0018:ffffc90002ccf1e0 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1ffe386
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff88814afac2a0 R08: 0000000000000001 R09: ffffffff8ffb59df
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000246
spin_unlock_irqrestore include/linux/spinlock.h:409 [inline]
__wake_up_common_lock+0xde/0x130 kernel/sched/wait.c:140
stop_this_handle+0x464/0x560 fs/jbd2/transaction.c:759
jbd2_journal_stop+0xaba/0xf20 fs/jbd2/transaction.c:1929
__ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:127
ext4_dirty_inode+0xe8/0x110 fs/ext4/inode.c:5927
__mark_inode_dirty+0x45b/0xfe0 fs/fs-writeback.c:2409
mark_inode_dirty include/linux/fs.h:2372 [inline]
generic_write_end+0x3ea/0x6e0 fs/buffer.c:2240
ext4_da_write_end+0x1c2/0x990 fs/ext4/inode.c:3060
generic_perform_write+0x2c6/0x510 mm/filemap.c:3820
ext4_buffered_write_iter+0x1ac/0x3b0 fs/ext4/file.c:269
ext4_file_write_iter+0x423/0x14e0 fs/ext4/file.c:681
call_write_iter include/linux/fs.h:2079 [inline]
do_iter_readv_writev+0x47a/0x750 fs/read_write.c:725
do_iter_write+0x188/0x710 fs/read_write.c:851
vfs_iter_write+0x70/0xa0 fs/read_write.c:892
iter_file_splice_write+0x723/0xc70 fs/splice.c:689
do_splice_from fs/splice.c:767 [inline]
direct_splice_actor+0x110/0x180 fs/splice.c:936
splice_direct_to_actor+0x34b/0x8c0 fs/splice.c:891
do_splice_direct+0x1b3/0x280 fs/splice.c:979
do_sendfile+0xaf2/0x1250 fs/read_write.c:1245
__do_sys_sendfile64 fs/read_write.c:1310 [inline]
__se_sys_sendfile64 fs/read_write.c:1296 [inline]
__x64_sys_sendfile64+0x1cc/0x210 fs/read_write.c:1296
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7ff752363e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff750cd9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007ff752476f60 RCX: 00007ff752363e99
RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000005
RBP: 00007ff7523bdff1 R08: 0000000000000000 R09: 0000000000000000
R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd6526124f R14: 00007ff750cd9300 R15: 0000000000022000
sched: RT throttling activated
----------------
Code disassembly (best guess):
0: 09 48 8b or %ecx,-0x75(%rax)
3: 3c 24 cmp $0x24,%al
5: e8 4e 84 66 00 callq 0x668458
a: 41 8b 85 60 0a 00 00 mov 0xa60(%r13),%eax
11: 83 c0 01 add $0x1,%eax
14: 83 f8 2f cmp $0x2f,%eax
17: 41 89 85 60 0a 00 00 mov %eax,0xa60(%r13)
1e: 0f 87 4e 0b 00 00 ja 0xb72
24: 3b 05 be c8 13 0e cmp 0xe13c8be(%rip),%eax # 0xe13c8e8
* 2a: 41 bf 01 00 00 00 mov $0x1,%r15d <-- trapping instruction
30: 0f 86 c8 00 00 00 jbe 0xfe
36: 89 05 ac c8 13 0e mov %eax,0xe13c8ac(%rip) # 0xe13c8e8
3c: e9 .byte 0xe9
3d: bd .byte 0xbd