rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2650 jiffies s: 100181 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 18609 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-02075-gd7933a2c7f87 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
RIP: 0010:rb_insert_color_cached include/linux/rbtree.h:113 [inline]
RIP: 0010:rb_add_cached include/linux/rbtree.h:183 [inline]
RIP: 0010:timerqueue_add+0x228/0x290 lib/timerqueue.c:40
Code: 91 f6 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 e7 e8 68 66 91 f6 4d 89 3c 24 eb 0a e8 1d b8 2e f6 4c 8b 64 24 08 <49> 8d 5c 24 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90000007cc0 EFLAGS: 00000046
RAX: ffffffff8b64b553 RBX: ffff88809c337340 RCX: ffff8880201cd940
RDX: 0000000080010002 RSI: 0000000000000000 RDI: ffff88809c337358
RBP: ffff8880302d7340 R08: ffff88809c337357 R09: 0000000000000000
R10: ffff88809c337348 R11: ffffed1013866e6b R12: ffff8880b942bad0
R13: 1ffff1100605ae6a R14: 0000000000000010 R15: ffff88809c337340
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32822000 CR3: 000000000df32000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 enqueue_hrtimer+0x1a2/0x3a0 kernel/time/hrtimer.c:1095
 __run_hrtimer kernel/time/hrtimer.c:1706 [inline]
 __hrtimer_run_queues+0x6b4/0xd00 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1065 [inline]
 __sysvec_apic_timer_interrupt+0x107/0x3a0 arch/x86/kernel/apic/apic.c:1082
 sysvec_apic_timer_interrupt+0x92/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:unwind_next_frame+0x6b5/0x29e0 arch/x86/kernel/unwind_orc.c:505
Code: e8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 65 1b 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 70 1b 00 00 0f b6 5d 01 <83> e3 07 48 89 df 48 c7 c6 60 01 fa 8d e8 d9 1e 53 00 48 85 db 74
RSP: 0018:ffffc90012aff1c8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff8880201cd940
RDX: 0000000000000000 RSI: ffffffff81f5e15e RDI: ffffffff81f5e128
RBP: ffffffff90134462 R08: ffffffff81405265 R09: ffffc90012aff390
R10: 0000000000000003 R11: ffffffff818044e0 R12: ffffffff8f9e1184
R13: dffffc0000000000 R14: 1ffff9200255fe54 R15: ffffffff9013445e
 arch_stack_walk+0x150/0x1b0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x117/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:589
 poison_slab_object+0xa6/0xe0 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2121 [inline]
 slab_free mm/slub.c:4299 [inline]
 kmem_cache_free+0x102/0x2a0 mm/slub.c:4363
 anon_vma_chain_free mm/rmap.c:147 [inline]
 unlink_anon_vmas+0x297/0x5f0 mm/rmap.c:422
 free_pgtables+0x553/0x7c0 mm/memory.c:402
 exit_mmap+0x4ae/0xd40 mm/mmap.c:3290
 __mmput+0x115/0x3c0 kernel/fork.c:1343
 exit_mm+0x21f/0x310 kernel/exit.c:569
 do_exit+0x9af/0x2740 kernel/exit.c:858
 do_group_exit+0x206/0x2c0 kernel/exit.c:1020
 get_signal+0x176d/0x1850 kernel/signal.c:2893
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:105 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline]
 syscall_exit_to_user_mode+0xc8/0x360 kernel/entry/common.c:212
 do_syscall_64+0x108/0x240 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x6f/0x77
RIP: 0033:0x7fcd7247dda9
Code: Unable to access opcode bytes at 0x7fcd7247dd7f.
RSP: 002b:00007fcd732b8178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fcd725abf88 RCX: 00007fcd7247dda9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd725abf88
RBP: 00007fcd725abf80 R08: 00007fcd732b86c0 R09: 00007fcd732b86c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd725abf8c
R13: 000000000000000b R14: 00007fff988424a0 R15: 00007fff98842588
 </TASK>