loop4: detected capacity change from 0 to 140 EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-....: (0 ticks this GP) idle=5fd/1/0x4000000000000000 softirq=198980/198980 fqs=21268 (detected by 1, t=105002 jiffies, g=194553, q=76364) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5933 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211224 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:match_held_lock+0xc/0xc0 kernel/locking/lockdep.c:5086 Code: f2 ff 48 c7 c7 60 b6 66 84 e8 e9 6f f2 ff e8 e4 01 f5 ff 31 c0 5d c3 0f 1f 80 00 00 00 00 53 48 89 fb 48 83 ec 08 48 39 77 10 <74> 6a 66 f7 47 22 f0 ff 74 5a 48 8b 46 08 48 89 f7 48 85 c0 74 42 RSP: 0018:ffff88803f476e00 EFLAGS: 00000046 RAX: 000000000000000a RBX: ffff88800fad3f78 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff85201e80 RDI: ffff88800fad3f78 RBP: ffffffff85201e80 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff81558da4 R11: 0000000000000060 R12: ffff88800fad3580 R13: ffff88800fad3f28 R14: 00000000ffffffff R15: ffff88800fad3f78 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000001 CR3: 0000000005026000 CR4: 0000000000350ef0 Call Trace: __lock_is_held kernel/locking/lockdep.c:5380 [inline] lock_is_held_type+0xa7/0x130 kernel/locking/lockdep.c:5682 get_callchain_entry+0x136/0x390 kernel/events/callchain.c:161 get_perf_callchain+0xa3/0x520 kernel/events/callchain.c:187 perf_callchain+0x165/0x1c0 kernel/events/core.c:7312 perf_prepare_sample+0x9f9/0x1e00 kernel/events/core.c:7339 __perf_event_output kernel/events/core.c:7508 [inline] perf_event_output_forward+0xda/0x280 kernel/events/core.c:7528 __perf_event_overflow+0x13f/0x3d0 kernel/events/core.c:9228 perf_swevent_overflow kernel/events/core.c:9304 [inline] perf_swevent_event+0x344/0x550 kernel/events/core.c:9332 perf_tp_event+0x2e5/0xbc0 kernel/events/core.c:9760 perf_trace_run_bpf_submit+0xf5/0x1d0 kernel/events/core.c:9734 perf_trace_preemptirq_template+0x289/0x440 include/trace/events/preemptirq.h:14 trace_irq_enable_rcuidle include/trace/events/preemptirq.h:40 [inline] trace_irq_enable_rcuidle include/trace/events/preemptirq.h:40 [inline] trace_hardirqs_on+0x138/0x190 kernel/trace/trace_preemptirq.c:44 asm_sysvec_irq_work+0x12/0x20 arch/x86/include/asm/idtentry.h:664 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__rcu_read_unlock+0xc4/0x510 kernel/rcu/tree_plugin.h:427 Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 93 01 00 00 8b 85 f8 03 00 00 85 c0 75 54 <65> 48 8b 1c 25 40 6f 02 00 48 8d bb f4 03 00 00 48 b8 00 00 00 00 RSP: 0018:ffff88803f4776e0 EFLAGS: 00000206 RAX: 0000000000000459 RBX: ffffffff8520bcc0 RCX: 1ffffffff0d41a7e RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff86a06817 R10: fffffbfff0d40d02 R11: 0000000000000001 R12: ffff88806ce38800 R13: ffff88803f477a00 R14: 0000000000000200 R15: dffffc0000000000 rcu_read_unlock+0xe/0x60 include/linux/rcupdate.h:726 zap_pte_range mm/memory.c:1358 [inline] zap_pmd_range mm/memory.c:1468 [inline] zap_pud_range mm/memory.c:1497 [inline] zap_p4d_range mm/memory.c:1518 [inline] unmap_page_range+0xd36/0x2380 mm/memory.c:1539 unmap_single_vma+0x198/0x310 mm/memory.c:1584 unmap_vmas+0x16b/0x2f0 mm/memory.c:1616 exit_mmap+0x1d0/0x630 mm/mmap.c:3179 __mmput kernel/fork.c:1116 [inline] mmput+0xc8/0x380 kernel/fork.c:1137 exit_mm kernel/exit.c:507 [inline] do_exit+0xa3c/0x2840 kernel/exit.c:780 do_group_exit+0x128/0x330 kernel/exit.c:932 get_signal+0x494/0x26e0 kernel/signal.c:2868 arch_do_signal_or_restart+0x2b0/0x1720 arch/x86/kernel/signal.c:868 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x143/0x1c0 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:300 do_syscall_64+0x48/0x90 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f09db8f9b19 Code: Unable to access opcode bytes at RIP 0x7f09db8f9aef. RSP: 002b:00007f09d8e6f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f09dba0cf68 RCX: 00007f09db8f9b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f09dba0cf68 RBP: 00007f09dba0cf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09dba0cf6c R13: 00007ffd7be9ec6f R14: 00007f09d8e6f300 R15: 0000000000022000 rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 108035 jiffies s: 641 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Task dump for CPU 0: task:syz-executor.2 state:R running task stack:26296 pid: 5933 ppid: 293 flags:0x00004008 Call Trace: ---------------- Code disassembly (best guess), 2 bytes skipped: 0: 48 c7 c7 60 b6 66 84 mov $0xffffffff8466b660,%rdi 7: e8 e9 6f f2 ff callq 0xfff26ff5 c: e8 e4 01 f5 ff callq 0xfff501f5 11: 31 c0 xor %eax,%eax 13: 5d pop %rbp 14: c3 retq 15: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 1c: 53 push %rbx 1d: 48 89 fb mov %rdi,%rbx 20: 48 83 ec 08 sub $0x8,%rsp 24: 48 39 77 10 cmp %rsi,0x10(%rdi) * 28: 74 6a je 0x94 <-- trapping instruction 2a: 66 f7 47 22 f0 ff testw $0xfff0,0x22(%rdi) 30: 74 5a je 0x8c 32: 48 8b 46 08 mov 0x8(%rsi),%rax 36: 48 89 f7 mov %rsi,%rdi 39: 48 85 c0 test %rax,%rax 3c: 74 42 je 0x80