syzbot

rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3585 jiffies s: 1545 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3762 Comm: syz-executor.4 Not tainted 6.1.93-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:236 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xc/0x80 kernel/kcov.c:304
Code: 89 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 4c 8b 04 24 65 48 8b 15 c4 d8 77 7e <65> 8b 05 c5 d8 77 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83
RSP: 0018:ffffc900001e0408 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff8880b99271f4 RCX: 0000000000000838
RDX: ffff888021a38000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817cdab0 R09: fffffbfff1ce7246
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b99271c0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
FS:  00007fb9a25326c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f21e26e66e4 CR3: 0000000058aae000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 clockevents_program_event+0x1d0/0x310 kernel/time/clockevents.c:336
 hrtimer_interrupt+0x546/0x980 kernel/time/hrtimer.c:1825
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:ip6t_do_table+0xbfe/0x1830 net/ipv6/netfilter/ip6_tables.c:315
Code: 08 00 00 48 8b 44 24 40 0f b6 18 89 de 83 e6 40 31 ff e8 45 bb 2b f8 83 e3 40 0f 85 c2 04 00 00 e8 d7 b8 2b f8 e9 eb fc ff ff <e8> cd b8 2b f8 eb 36 0f b7 f3 31 ff e8 a1 bb 2b f8 66 85 db 0f 84
RSP: 0018:ffffc900001e0640 EFLAGS: 00000246
RAX: ffff88807750b9b8 RBX: 0000000000000000 RCX: ffff888021a38000
RDX: 0000000000000301 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900001e0840 R08: ffffffff895ed71b R09: ffffc900001e0790
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807750b910
R13: 1ffff1100eea1733 R14: ffff88807750b9b8 R15: 0000000000000000
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xae/0x1e0 net/netfilter/core.c:614
 nf_hook include/linux/netfilter.h:257 [inline]
 NF_HOOK include/linux/netfilter.h:300 [inline]
 ndisc_send_skb+0x1388/0x14e0 net/ipv6/ndisc.c:509
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3962
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1504
 expire_timers kernel/time/timer.c:1549 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1820
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1833
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 kernel/sched/core.c:6870
Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 69 b2 ca f6 e8 84 a7 fd f6 fb bf 01 00 00 00 <e8> 99 b4 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 19 65 4e f7 48
RSP: 0018:ffffc900044de560 EFLAGS: 00000286
RAX: 06fe6d2a26671d00 RBX: 1ffff9200089bcb4 RCX: ffffffff816ad3ca
RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
RBP: ffffc900044de620 R08: dffffc0000000000 R09: fffffbfff2093a5c
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200089bcac
R13: 1ffff9200089bcb0 R14: ffffc900044de580 R15: dffffc0000000000
 irqentry_exit+0x53/0x80 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:phys_addr_valid arch/x86/mm/physaddr.h:7 [inline]
RIP: 0010:__phys_addr+0x98/0x170 arch/x86/mm/physaddr.c:28
Code: 00 00 00 44 0f b6 3d 84 da 35 0d bf 40 00 00 00 44 89 fe e8 7a e5 4c 00 41 83 ff 3f 0f 87 a0 00 00 00 e8 0b e3 4c 00 4c 89 f3 <44> 89 f9 48 d3 eb 31 ff 48 89 de e8 d8 e6 4c 00 48 85 db 0f 85 a2
RSP: 0018:ffffc900044de6e0 EFLAGS: 00000287
RAX: ffffffff813db005 RBX: 00000000291dd000 RCX: 0000000000040000
RDX: ffffc90004b0a000 RSI: 0000000000010243 RDI: 0000000000010244
RBP: dffffc0000000000 R08: ffffffff813daff6 R09: 000000008010000a
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888015256500
R13: 0000000000000cc0 R14: 00000000291dd000 R15: 000000000000002e
 virt_to_folio include/linux/mm.h:898 [inline]
 virt_to_slab+0x5/0xa0 mm/slab.h:175
 ___cache_free+0x16/0x90 mm/slub.c:3668
 qlink_free mm/kasan/quarantine.c:168 [inline]
 qlist_free_all+0x76/0xe0 mm/kasan/quarantine.c:187
 kasan_quarantine_reduce+0x156/0x170 mm/kasan/quarantine.c:294
 __kasan_slab_alloc+0x1f/0x70 mm/kasan/common.c:305
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x52/0x3a0 mm/slab.h:737
 slab_alloc_node mm/slub.c:3398 [inline]
 __kmem_cache_alloc_node+0x137/0x260 mm/slub.c:3437