rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (0 ticks this GP) idle=ec7/1/0x4000000000000000 softirq=104185/104185 fqs=0
(detected by 0, t=10506 jiffies, g=163973, q=224)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 30241 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00153-g2fe1020d73ca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hlock_class kernel/locking/lockdep.c:197 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4703 [inline]
RIP: 0010:__lock_acquire+0x489/0x56c0 kernel/locking/lockdep.c:4979
Code: 20 66 81 e5 ff 1f 0f b7 ed be 08 00 00 00 48 89 e8 48 c1 f8 06 48 8d 3c c5 00 29 07 90 e8 4f f1 66 00 48 0f a3 2d a7 ab aa 0e <0f> 83 af 0c 00 00 48 8d 6c 6d 00 48 c1 e5 06 48 81 c5 20 2d 07 90
RSP: 0018:ffffc900003f8af0 EFLAGS: 00000047
RAX: 0000000000000001 RBX: ffffffff90800638 RCX: ffffffff815c7d51
RDX: fffffbfff200e521 RSI: 0000000000000008 RDI: ffffffff90072900
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90072907
R10: fffffbfff200e520 R11: 0000000000000001 R12: ffff888020056b48
R13: ffff8880200560c0 R14: 0000000000044000 R15: 0000000000000002
FS: 0000555556c69400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2df21000 CR3: 000000001e5a1000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire kernel/locking/lockdep.c:5641 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5606
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
debug_object_deactivate lib/debugobjects.c:735 [inline]
debug_object_deactivate+0x101/0x300 lib/debugobjects.c:723
debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
debug_deactivate kernel/time/hrtimer.c:481 [inline]
__run_hrtimer kernel/time/hrtimer.c:1653 [inline]
__hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 6a ae ec f7 48 89 ef e8 b2 2d ed f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 43 4d e0 f7 65 8b 05 ac 42 92 76 85 c0 74 0a 5b 5d c3 e8 f0 90
RSP: 0018:ffffc9000442fe18 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b716c1
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff8880b9d28218 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817ebe48 R11: 0000000000000000 R12: ffff88807c3f04f8
R13: ffff888074256100 R14: ffffffff8bf26320 R15: ffff888011c8c220
timerfd_release+0x105/0x290 fs/timerfd.c:245
__fput+0x277/0x9d0 fs/file_table.c:317
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:201
__syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:294
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd58783bd2b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe512f8350 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fd58783bd2b
RDX: 00007fd5879a0440 RSI: ffffffffffffffff RDI: 0000000000000003
RBP: 00007fd58799d960 R08: 0000000000000000 R09: 00007fd5879a0448
R10: 00007ffe512f8450 R11: 0000000000000293 R12: 00000000001912a3
R13: 00007ffe512f8450 R14: 00007fd58799bf60 R15: 0000000000000032
rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g163973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=92480
rcu: rcu_preempt kthread starved for 10506 jiffies! g163973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:28824 pid: 16 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5073 [inline]
__schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
schedule+0xd2/0x1f0 kernel/sched/core.c:6460
schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1884
rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1971
rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2144
kthread+0x2e9/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 30241 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00153-g2fe1020d73ca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:write_comp_data kernel/kcov.c:221 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x22/0x80 kernel/kcov.c:273
Code: 10 c3 66 0f 1f 44 00 00 53 41 89 fb 41 89 f1 bf 03 00 00 00 65 48 8b 0c 25 00 70 02 00 48 89 ce 4c 8b 54 24 08 e8 ae f7 ff ff <84> c0 74 51 48 8b 81 88 15 00 00 44 8b 81 84 15 00 00 48 8b 10 49
RSP: 0018:ffffc900003f8df0 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff88802edd2340 RCX: ffff8880200560c0
RDX: 0000000000000000 RSI: ffff8880200560c0 RDI: 0000000000000003
RBP: ffff8880b9d2a6c0 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff816757a8 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: ffff8880b9d2a5c0 R15: 0000000000000000
FS: 0000555556c69400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2df21000 CR3: 000000001e5a1000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__remove_hrtimer+0x78/0x2a0 kernel/time/hrtimer.c:1113
__run_hrtimer kernel/time/hrtimer.c:1665 [inline]
__hrtimer_run_queues+0x4ea/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194
Code: 74 24 10 e8 6a ae ec f7 48 89 ef e8 b2 2d ed f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 43 4d e0 f7 65 8b 05 ac 42 92 76 85 c0 74 0a 5b 5d c3 e8 f0 90
RSP: 0018:ffffc9000442fe18 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b716c1
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff8880b9d28218 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817ebe48 R11: 0000000000000000 R12: ffff88807c3f04f8
R13: ffff888074256100 R14: ffffffff8bf26320 R15: ffff888011c8c220
timerfd_release+0x105/0x290 fs/timerfd.c:245
__fput+0x277/0x9d0 fs/file_table.c:317
task_work_run+0xdd/0x1a0 kernel/task_work.c:164
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop kernel/entry/common.c:169 [inline]
exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:201
__syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:294
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd58783bd2b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe512f8350 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fd58783bd2b
RDX: 00007fd5879a0440 RSI: ffffffffffffffff RDI: 0000000000000003
RBP: 00007fd58799d960 R08: 0000000000000000 R09: 00007fd5879a0448
R10: 00007ffe512f8450 R11: 0000000000000293 R12: 00000000001912a3
R13: 00007ffe512f8450 R14: 00007fd58799bf60 R15: 0000000000000032
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 66 81 e5 ff 1f and $0x1fff,%bp
5: 0f b7 ed movzwl %bp,%ebp
8: be 08 00 00 00 mov $0x8,%esi
d: 48 89 e8 mov %rbp,%rax
10: 48 c1 f8 06 sar $0x6,%rax
14: 48 8d 3c c5 00 29 07 lea -0x6ff8d700(,%rax,8),%rdi
1b: 90
1c: e8 4f f1 66 00 callq 0x66f170
21: 48 0f a3 2d a7 ab aa bt %rbp,0xeaaaba7(%rip) # 0xeaaabd0
28: 0e
* 29: 0f 83 af 0c 00 00 jae 0xcde <-- trapping instruction
2f: 48 8d 6c 6d 00 lea 0x0(%rbp,%rbp,2),%rbp
34: 48 c1 e5 06 shl $0x6,%rbp
38: 48 81 c5 20 2d 07 90 add $0xffffffff90072d20,%rbp