rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-....: (8642 ticks this GP) idle=395/1/0x4000000000000000 softirq=34359/34359 fqs=4469
(t=10500 jiffies g=50473 q=355)
NMI backtrace for cpu 0
CPU: 0 PID: 9979 Comm: syz-executor.1 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
rcu_pending kernel/rcu/tree.c:3878 [inline]
rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597
update_process_times+0x16d/0x200 kernel/time/timer.c:1785
tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:pie_calculate_probability+0x225/0x7c0 net/sched/sch_pie.c:348
Code: 0f 87 42 02 00 00 e8 ea e7 19 fa 49 c1 ec 05 4c 89 fe 48 c1 ed 05 48 bf 8e c2 f5 28 5c 8f 02 00 4c 89 64 24 20 e8 5b ea 19 fa <48> b8 8e c2 f5 28 5c 8f 02 00 49 39 c7 0f 87 88 00 00 00 48 89 5c
RSP: 0018:ffffc90000007c50 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff888056567070 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88807a455700 RDI: 0000000000000003
RBP: 00000000112e0be8 R08: 00028f5c28f5c28e R09: 0000000000000000
R10: ffffffff875dcaf5 R11: 0000000000000000 R12: 00000000abcc7711
R13: ffff88802264cb00 R14: 0000000000000000 R15: 0000000000000000
fq_pie_timer+0x170/0x2a0 net/sched/sch_fq_pie.c:383
call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734
__run_timers kernel/time/timer.c:1715 [inline]
run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_schedule_irq+0x49/0x90 kernel/sched/core.c:6668
Code: 55 53 65 48 8b 1c 25 40 70 02 00 48 89 dd 48 c1 ed 03 48 01 c5 bf 01 00 00 00 e8 92 e0 09 f8 e8 0d c5 37 f8 fb bf 01 00 00 00 12 a9 ff ff 9c 58 fa f6 c4 02 75 27 bf 01 00 00 00 e8 c0 cf 09
RSP: 0018:ffffc90010227698 EFLAGS: 00000202
RAX: 000000000014f907 RBX: ffff88807a455700 RCX: 1ffffffff1fef92e
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffed100f48aae0 R08: 0000000000000001 R09: ffffffff8ff74a17
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
irqentry_exit+0x31/0x80 kernel/entry/common.c:425
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5605
Code: ae a5 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc90010227760 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff92002044eee RCX: ffffffff815c794f
RDX: 1ffff1100f48ac2b RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8ff74a17
R10: fffffbfff1fee942 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8bca81c0 R15: 0000000000000000
__fs_reclaim_acquire mm/page_alloc.c:4535 [inline]
fs_reclaim_acquire+0x115/0x160 mm/page_alloc.c:4549
might_alloc include/linux/sched/mm.h:227 [inline]
slab_pre_alloc_hook mm/slab.h:492 [inline]
slab_alloc_node mm/slub.c:3148 [inline]
slab_alloc mm/slub.c:3242 [inline]
__kmalloc+0x58/0x340 mm/slub.c:4419
kmalloc include/linux/slab.h:595 [inline]
io_alloc_async_data fs/io_uring.c:3373 [inline]
io_connect+0x429/0x690 fs/io_uring.c:5251
io_issue_sqe+0xc64/0x7060 fs/io_uring.c:6712
__io_queue_sqe fs/io_uring.c:7018 [inline]
io_queue_sqe fs/io_uring.c:7060 [inline]
io_submit_sqe fs/io_uring.c:7263 [inline]
io_submit_sqes+0x1bca/0x8a20 fs/io_uring.c:7369
__do_sys_io_uring_enter+0xf6e/0x1f50 fs/io_uring.c:10072
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd141014e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd13f98a168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
RAX: ffffffffffffffda RBX: 00007fd141127f60 RCX: 00007fd141014e99
RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003
RBP: 00007fd14106eff1 R08: 0000000000000000 R09: 0000000000001800
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd14165bb1f R14: 00007fd13f98a300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 0f 87 42 02 00 00 ja 0x248
6: e8 ea e7 19 fa callq 0xfa19e7f5
b: 49 c1 ec 05 shr $0x5,%r12
f: 4c 89 fe mov %r15,%rsi
12: 48 c1 ed 05 shr $0x5,%rbp
16: 48 bf 8e c2 f5 28 5c movabs $0x28f5c28f5c28e,%rdi
1d: 8f 02 00
20: 4c 89 64 24 20 mov %r12,0x20(%rsp)
25: e8 5b ea 19 fa callq 0xfa19ea85
* 2a: 48 b8 8e c2 f5 28 5c movabs $0x28f5c28f5c28e,%rax <-- trapping instruction
31: 8f 02 00
34: 49 39 c7 cmp %rax,%r15
37: 0f 87 88 00 00 00 ja 0xc5
3d: 48 rex.W
3e: 89 .byte 0x89
3f: 5c pop %rsp