------------[ cut here ]------------
1
WARNING: kernel/rcu/tree_stall.h:1063 at rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1063, CPU#0: syz.2.441/7443
Modules linked in:
CPU: 0 UID: 0 PID: 7443 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1063
Code: ff ff 48 c7 c7 c0 d6 a1 9a be 04 00 00 00 e8 33 a9 8a 00 4c 89 f7 b8 01 00 00 00 87 05 b5 f8 f4 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 23 d6 8e 74 47 48 c7 c0 80 44 7a 90 48 c1 e8
RSP: 0018:ffffc90000007d78 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81acddfd
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8ed62340
RBP: ffffc90000007f20 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff3543ad8 R12: 0000000000002904
R13: dffffc0000000000 R14: ffffffff8ed62340 R15: dffffc0000000000
FS: 00007f22e89bd6c0(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30823ffc CR3: 0000000053294000 CR4: 0000000000350ef0
Call Trace:
rcu_core+0x5c6/0x1260 kernel/rcu/tree.c:2914
handle_softirqs+0x226/0x860 kernel/softirq.c:645
__do_softirq kernel/softirq.c:679 [inline]
invoke_softirq kernel/softirq.c:519 [inline]
__irq_exit_rcu+0xcb/0x220 kernel/softirq.c:767
irq_exit_rcu+0x9/0x30 kernel/softirq.c:784
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:220 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:229
Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 1a ad bc f5 48 89 df e8 d2 24 bd f5 e8 cd 61 e9 f5 fb bf 01 00 00 00 82 3e ae f5 65 48 8b 05 2a c1 ad 07 48 85 c0 74 07 5b e9 1a a2
RSP: 0018:ffffc90003befc90 EFLAGS: 00000202
RAX: 0000000004c4acd9 RBX: ffff88801fbb3780 RCX: 8000000000000001
RDX: 0000000000000000 RSI: ffffffff8e474257 RDI: 0000000000000001
RBP: ffffc90003befee0 R08: ffffffff907a137f R09: 1ffffffff20f426f
R10: dffffc0000000000 R11: fffffbfff20f4270 R12: 00007f22e89bcb38
R13: 0000000000000000 R14: 00000000ffffffff R15: 1ffff9200077dfa0
__ia32_sys_rt_sigreturn+0x2b3/0x8c0 arch/x86/kernel/signal_64.c:263
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f22e7b3f4d9
Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
RSP: 002b:00007f22e89bcb40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
RAX: ffffffffffffffda RBX: 00007f22e7e25fa8 RCX: 00007f22e7b3f4d9
RDX: 00007f22e89bcb40 RSI: 00007f22e89bcc70 RDI: 0000000000000021
RBP: 00007f22e7e25fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f22e7e26038 R14: 00007ffeafa31360 R15: 00007ffeafa31448
----------------
Code disassembly (best guess):
0: 90 nop
1: f3 0f 1e fa endbr64
5: 53 push %rbx
6: 48 89 fb mov %rdi,%rbx
9: 48 83 c7 18 add $0x18,%rdi
d: 48 8b 74 24 08 mov 0x8(%rsp),%rsi
12: e8 1a ad bc f5 call 0xf5bcad31
17: 48 89 df mov %rbx,%rdi
1a: e8 d2 24 bd f5 call 0xf5bd24f1
1f: e8 cd 61 e9 f5 call 0xf5e961f1
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 82 3e ae f5 call 0xf5ae3eb1 <-- trapping instruction
2f: 65 48 8b 05 2a c1 ad mov %gs:0x7adc12a(%rip),%rax # 0x7adc161
36: 07
37: 48 85 c0 test %rax,%rax
3a: 74 07 je 0x43
3c: 5b pop %rbx
3d: e9 .byte 0xe9
3e: 1a .byte 0x1a
3f: a2 .byte 0xa2