rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3256 jiffies s: 384193 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 12384 Comm: syz.3.7931 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:24 [inline]
RIP: 0010:lock_acquire+0xdc/0x550 kernel/locking/lockdep.c:5725
Code: 08 0f 83 f4 02 00 00 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 4d ad 8f be 08 00 00 00 e8 4c 77 89 00 48 0f a3 1d cc e5 3a 0e <73> 16 e8 1d ec 09 00 84 c0 75 0d 80 3d cd 55 25 0e 00 0f 84 f9 02
RSP: 0018:ffffc90000a188e0 EFLAGS: 00000057
RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817267d4
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fad4da8
RBP: ffffc90000a18a28 R08: ffffffff8fad4daf R09: 1ffffffff1f5a9b5
R10: dffffc0000000000 R11: fffffbfff1f5a9b6 R12: 1ffff92000143124
R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 000000000c3ee3a2 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline]
 _raw_spin_lock_irq+0xd3/0x120 kernel/locking/spinlock.c:170
 __run_hrtimer kernel/time/hrtimer.c:1693 [inline]
 __hrtimer_run_queues+0x670/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:variable_ffs arch/x86/include/asm/bitops.h:321 [inline]
RIP: 0010:handle_softirqs+0x1df/0x970 kernel/softirq.c:542
Code: 89 7c 24 70 0f b7 db 48 c7 c7 40 b0 c9 8b e8 08 03 2c 0a 65 66 c7 05 b6 d2 a9 7e 00 00 e8 f9 88 43 00 fb 49 c7 c4 c0 a0 00 8e <b8> ff ff ff ff 0f bc c3 41 89 c7 41 ff c7 0f 84 e6 03 00 00 89 5c
RSP: 0018:ffffc90000a18e40 EFLAGS: 00000286
RAX: cc1a2f97333ef400 RBX: 0000000000000386 RCX: ffffffff8172da0a
RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe940
RBP: ffffc90000a18f50 R08: ffffffff92fa76ef R09: 1ffffffff25f4edd
R10: dffffc0000000000 R11: fffffbfff25f4ede R12: ffffffff8e00a0c0
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001431dc
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758
Code: 2b 00 74 08 4c 89 f7 e8 6a 73 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc9000ddef4a0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92001bbdea0 RCX: 0000000000000001
RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe940
RBP: ffffc9000ddef5e8 R08: ffffffff94047077 R09: 1ffffffff2808e0e
R10: dffffc0000000000 R11: fffffbfff2808e0f R12: 1ffff92001bbde9c
R13: dffffc0000000000 R14: ffffc9000ddef500 R15: 0000000000000246
 touch_wq_lockdep_map kernel/workqueue.c:3895 [inline]
 __flush_workqueue+0x1c9/0x1710 kernel/workqueue.c:3937
 drain_workqueue+0xc9/0x3a0 kernel/workqueue.c:4101
 hci_dev_close_sync+0x484/0xf60 net/bluetooth/hci_sync.c:5048
 hci_dev_do_close net/bluetooth/hci_core.c:556 [inline]
 hci_unregister_dev+0x1db/0x4e0 net/bluetooth/hci_core.c:2760
 vhci_release+0x83/0xd0 drivers/bluetooth/hci_vhci.c:666
 __fput+0x24a/0x8a0 fs/file_table.c:422
 task_work_run+0x24f/0x310 kernel/task_work.c:180
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa27/0x27e0 kernel/exit.c:874
 do_group_exit+0x207/0x2c0 kernel/exit.c:1023
 get_signal+0x16a1/0x1740 kernel/signal.c:2909
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xc9/0x360 kernel/entry/common.c:218
 __do_fast_syscall_32+0xc4/0x120 arch/x86/entry/common.c:389
 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf73e0579
Code: Unable to access opcode bytes at 0xf73e054f.
RSP: 002b:00000000f7532a9c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000360 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>