rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (0 ticks this GP) idle=b11/1/0x4000000000000000 softirq=69702/69702 fqs=1
(detected by 0, t=10502 jiffies, g=116957, q=42)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 6589 Comm: syz-executor.4 Not tainted 5.15.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0xc/0x12
Code: 56 57 41 50 41 51 41 52 41 53 e8 df 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 02 5a c3 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 55 48
RSP: 0018:ffffc90000dc0c10 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 1ffff110173a4449 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b9d22240
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10173a4449
R10: ffffed10173a4449 R11: 0000000000000000 R12: 1ffff110173a444a
R13: ffff8880b9d22250 R14: ffff8880b9d22248 R15: ffff8880b9d22240
FS: 0000555556778400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d321000 CR3: 00000000825f6000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:590 [inline]
queued_spin_unlock arch/x86/include/asm/qspinlock.h:56 [inline]
do_raw_spin_unlock+0x134/0x8a0 kernel/locking/spinlock_debug.c:141
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:159 [inline]
_raw_spin_unlock_irqrestore+0x7d/0x130 kernel/locking/spinlock.c:194
__run_hrtimer kernel/time/hrtimer.c:1681 [inline]
__hrtimer_run_queues+0x487/0xa60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:kasan_check_range+0x22a/0x2f0 mm/kasan/generic.c:189
Code: 4d 85 f6 49 0f 49 de 48 83 e3 f8 49 29 de 74 11 45 0f b6 1f 45 84 db 75 64 49 ff c7 49 ff ce 75 ef 5b 41 5c 41 5d 41 5e 41 5f 45 84 db 75 50 45 8a 59 01 45 84 db 0f 85 8a 00 00 00 45 8a 59
RSP: 0018:ffffc90002d3f4b8 EFLAGS: 00000256
RAX: ffffffff81bc8501 RBX: ffffea000202e3c0 RCX: ffffffff81bc85b1
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000202e3c0
RBP: ffffc90002d3f710 R08: dffffc0000000000 R09: fffff94000405c79
R10: fffff94000405c79 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888026795050 R14: 00fff00000000000 R15: 0000000000000000
instrument_atomic_read include/linux/instrumented.h:71 [inline]
test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline]
PageSwapBacked include/linux/page-flags.h:362 [inline]
mm_counter_file include/linux/mm.h:1959 [inline]
mm_counter include/linux/mm.h:1968 [inline]
copy_present_pte mm/memory.c:956 [inline]
copy_pte_range+0xc31/0x30b0 mm/memory.c:1070
copy_pmd_range mm/memory.c:1156 [inline]
copy_pud_range mm/memory.c:1193 [inline]
copy_p4d_range mm/memory.c:1217 [inline]
copy_page_range+0xce6/0x1140 mm/memory.c:1290
dup_mmap+0xa87/0xfd0 kernel/fork.c:610
dup_mm+0x8c/0x310 kernel/fork.c:1453
copy_mm kernel/fork.c:1505 [inline]
copy_process+0x28d7/0x5c80 kernel/fork.c:2194
kernel_clone+0x230/0x7d0 kernel/fork.c:2584
__do_sys_clone kernel/fork.c:2701 [inline]
__se_sys_clone kernel/fork.c:2685 [inline]
__x64_sys_clone+0x245/0x2b0 kernel/fork.c:2685
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7eff74338ecb
Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
RSP: 002b:00007ffd64758cc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff74338ecb
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556778400
R10: 00005555567786d0 R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd64758da0
rcu: rcu_preempt kthread starved for 10500 jiffies! g116957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26768 pid: 14 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:4940 [inline]
__schedule+0xc8d/0x1270 kernel/sched/core.c:6287
schedule+0x14b/0x210 kernel/sched/core.c:6366
schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1881
rcu_gp_fqs_loop+0x1fd/0x770 kernel/rcu/tree.c:1957
rcu_gp_kthread+0xa5/0x350 kernel/rcu/tree.c:2130
kthread+0x453/0x480 kernel/kthread.c:319
ret_from_fork+0x1f/0x30
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 32100 Comm: syz-executor.0 Not tainted 5.15.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_check_gp_kthread_starvation+0x1ff/0x270 kernel/rcu/tree_stall.h:481
print_other_cpu_stall kernel/rcu/tree_stall.h:586 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:729 [inline]
rcu_pending kernel/rcu/tree.c:3880 [inline]
rcu_sched_clock_irq+0x23d5/0x2bc0 kernel/rcu/tree.c:2599
update_process_times+0x197/0x200 kernel/time/timer.c:1785
tick_sched_handle kernel/time/tick-sched.c:226 [inline]
tick_sched_timer+0x27d/0x420 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:csd_lock_wait kernel/smp.c:440 [inline]
RIP: 0010:smp_call_function_many_cond+0xbb2/0xda0 kernel/smp.c:969
Code: 83 e6 01 31 ff e8 ae 9f 0b 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0e e8 89 9b 0b 00 eb 4c 0f 1f 80 00 00 00 00 f3 90 <42> 0f b6 04 3b 84 c0 75 11 41 f7 45 00 01 00 00 00 74 2b e8 66 9b
RSP: 0018:ffffc900031cf4a0 EFLAGS: 00000246
RAX: ffffffff8176d73a RBX: 1ffff110173a6e4d RCX: 0000000000040000
RDX: ffffc900182b1000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc900031cf5e0 R08: ffffffff8176d702 R09: ffffffff843540e0
R10: 0000000000000009 R11: ffff888072125580 R12: 0000000000000001
R13: ffff8880b9d37268 R14: ffff8880b9c325c0 R15: dffffc0000000000
on_each_cpu_cond_mask+0x3b/0x80 kernel/smp.c:1135
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:929 [inline]
text_poke_bp_batch+0x310/0x940 arch/x86/kernel/alternative.c:1114
text_poke_bp+0xc7/0x140 arch/x86/kernel/alternative.c:1314
arch_static_call_transform+0x7a/0x1b0 arch/x86/kernel/static_call.c:101
__static_call_update+0xff/0x690 kernel/static_call.c:136
tracepoint_update_call kernel/tracepoint.c:317 [inline]
tracepoint_add_func+0x7c6/0x960 kernel/tracepoint.c:358
tracepoint_probe_register_prio kernel/tracepoint.c:511 [inline]
tracepoint_probe_register+0x109/0x170 kernel/tracepoint.c:531
perf_trace_event_reg kernel/trace/trace_event_perf.c:129 [inline]
perf_trace_event_init+0x49b/0x950 kernel/trace/trace_event_perf.c:204
perf_trace_init+0x259/0x2f0 kernel/trace/trace_event_perf.c:228
perf_tp_event_init+0x88/0x110 kernel/events/core.c:9761
perf_try_init_event+0x13e/0x3d0 kernel/events/core.c:11219
perf_init_event kernel/events/core.c:11283 [inline]
perf_event_alloc+0x1155/0x2c10 kernel/events/core.c:11574
__do_sys_perf_event_open kernel/events/core.c:12095 [inline]
__se_sys_perf_event_open+0x7b2/0x4280 kernel/events/core.c:11987
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f885c6638d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f8859bda188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f885c767f60 RCX: 00007f885c6638d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000500
RBP: 00007f885c6bdcb4 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd8eb9faaf R14: 00007f8859bda300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 56 push %rsi
1: 57 push %rdi
2: 41 50 push %r8
4: 41 51 push %r9
6: 41 52 push %r10
8: 41 53 push %r11
a: e8 df 0a 00 00 callq 0xaee
f: 41 5b pop %r11
11: 41 5a pop %r10
13: 41 59 pop %r9
15: 41 58 pop %r8
17: 5f pop %rdi
18: 5e pop %rsi
19: 5a pop %rdx
1a: 59 pop %rcx
1b: c3 retq
1c: 66 90 xchg %ax,%ax
1e: 52 push %rdx
1f: b8 01 00 00 00 mov $0x1,%eax
24: 31 d2 xor %edx,%edx
26: f0 0f b0 17 lock cmpxchg %dl,(%rdi)
* 2a: 3c 01 cmp $0x1,%al <-- trapping instruction
2c: 75 02 jne 0x30
2e: 5a pop %rdx
2f: c3 retq
30: 56 push %rsi
31: 0f b6 f0 movzbl %al,%esi
34: e8 c5 ff ff ff callq 0xfffffffe
39: 5e pop %rsi
3a: 5a pop %rdx
3b: c3 retq
3c: 66 90 xchg %ax,%ax
3e: 55 push %rbp
3f: 48 rex.W