syzbot

rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P3841 1-.... } 4753 jiffies s: 2141 root: 0x2/T
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3846 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:87 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x81/0x290 mm/kasan/generic.c:189
Code: df 4f 8d 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 0f 85 c4 01 00 00 <49> ff c1 49 ff c2 75 ee e9 1d 01 00 00 45 89 cf 41 83 e7 07 0f 84
RSP: 0018:ffffc900001e0298 EFLAGS: 00000246
RAX: ffff888021c15901 RBX: 1ffff9200003c068 RCX: ffffffff813cc812
RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc900001e0340
RBP: 000000000000000c R08: dffffc0000000000 R09: fffff5200003c06c
R10: fffffffffffffff8 R11: dffffc0000000001 R12: 0000000000000000
R13: ffffffff81784820 R14: fffff5200003c074 R15: 0000000000000000
FS:  00007f70e07f66c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3292e000 CR3: 000000005715c000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 memset+0x1f/0x40 mm/kasan/shadow.c:44
 __unwind_start+0x32/0x720 arch/x86/kernel/unwind_orc.c:645
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xdb/0x140 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:45 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:52
 kasan_save_free_info+0x27/0x40 mm/kasan/generic.c:516
 ____kasan_slab_free+0xd6/0x120 mm/kasan/common.c:236
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1724 [inline]
 slab_free_freelist_hook mm/slub.c:1750 [inline]
 slab_free mm/slub.c:3661 [inline]
 kmem_cache_free+0x292/0x510 mm/slub.c:3683
 kfree_skb include/linux/skbuff.h:1220 [inline]
 ip6_mc_input+0x9bf/0xbd0 net/ipv6/ip6_input.c:589
 NF_HOOK+0x39d/0x450 include/linux/netfilter.h:302
 __netif_receive_skb_one_core net/core/dev.c:5528 [inline]
 __netif_receive_skb+0x1c6/0x530 net/core/dev.c:5642
 process_backlog+0x381/0x760 net/core/dev.c:5970
 __napi_poll+0xc7/0x470 net/core/dev.c:6537
 napi_poll net/core/dev.c:6604 [inline]
 net_rx_action+0x70f/0xeb0 net/core/dev.c:6718
 __do_softirq+0x2e9/0xa4c kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:650
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:preempt_schedule+0xa0/0xe0 kernel/sched/core.c:6749
Code: 3c 3c 00 74 08 4c 89 f7 e8 4d 82 4e f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 43 80 3c 3c 00 74 08 4c 89 f7 e8 b0 81 4e f7 <f6> 44 24 21 02 75 2d 48 c7 04 24 0e 36 e0 45 49 c7 04 1f 00 00 00
RSP: 0018:ffffc90005617440 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 1ffff92000ac2e88 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffc90005610000 RDI: 0000000000000001
RBP: ffffc900056174d8 R08: ffffc90005617b48 R09: ffffc90005617670
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000ac2e8c
R13: ffffffff8ef8a6be R14: ffffc90005617460 R15: dffffc0000000000
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 unwind_next_frame+0x1a55/0x2220 arch/x86/kernel/unwind_orc.c:629
 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 save_stack+0xf6/0x1e0 mm/page_owner.c:127
 __reset_page_owner+0x52/0x1a0 mm/page_owner.c:148
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1440 [inline]
 free_pcp_prepare mm/page_alloc.c:1490 [inline]
 free_unref_page_prepare+0xf63/0x1120 mm/page_alloc.c:3358
 free_unref_page+0x33/0x3e0 mm/page_alloc.c:3453
 free_slab mm/slub.c:2031 [inline]
 discard_slab mm/slub.c:2037 [inline]
 __unfreeze_partials+0x1b7/0x210 mm/slub.c:2586
 put_cpu_partial+0x17b/0x250 mm/slub.c:2662
 qlink_free mm/kasan/quarantine.c:168 [inline]
 qlist_free_all+0x76/0xe0 mm/kasan/quarantine.c:187
 kasan_quarantine_reduce+0x156/0x170 mm/kasan/quarantine.c:294
 __kasan_slab_alloc+0x1f/0x70 mm/kasan/common.c:305
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x52/0x3a0 mm/slab.h:737
 slab_alloc_node mm/slub.c:3398 [inline]
 kmem_cache_alloc_node+0x136/0x310 mm/slub.c:3443
 perf_event_alloc+0x15a/0x2120 kernel/events/core.c:11742
 __do_sys_perf_event_open kernel/events/core.c:12389 [inline]
 __se_sys_perf_event_open+0xb2e/0x4960 kernel/events/core.c:12281
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f70e1c7cf69
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f70e07f60c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007f70e1db3f80 RCX: 00007f70e1c7cf69
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000000
RBP: 00007f70e1cda6fe R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f70e1db3f80 R15: 00007fff667f3488
 </TASK>