rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2657 jiffies s: 49841 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 9027 Comm: syz-executor.1 Not tainted 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:rcu_rnp_online_cpus kernel/rcu/tree.c:4233 [inline] RIP: 0010:rcu_rdp_cpu_online kernel/rcu/tree.c:4243 [inline] RIP: 0010:rcu_lockdep_current_cpu_online+0xbf/0x120 kernel/rcu/tree.c:4284 Code: 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 d4 bf 7a 00 48 8b 1b 48 83 c3 70 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 b7 bf 7a 00 4c 23 3b 75 1a 48 c7 c7 00 66 13 8e RSP: 0018:ffffc90000006990 EFLAGS: 00000246 RAX: 1ffffffff1c26bae RBX: ffffffff8e135d70 RCX: 0000000000000104 RDX: ffff8880481cbb80 RSI: ffffffff8bfe7240 RDI: ffff8880b943d860 RBP: ffffc90000006b38 R08: ffffffff8a1372cc R09: ffffc90000006c70 R10: ffffc90000006c60 R11: fffff52000000d5a R12: ffff8880914c8800 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f216bcd5000 CR3: 000000000df32000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_lock_held_common kernel/rcu/update.c:113 [inline] rcu_read_lock_held+0x1e/0x50 kernel/rcu/update.c:349 __find_rr_leaf+0x395/0x8e0 net/ipv6/route.c:795 find_rr_leaf net/ipv6/route.c:851 [inline] rt6_select net/ipv6/route.c:895 [inline] fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2192 ip6_pol_route+0x268/0x1520 net/ipv6/route.c:2228 pol_lookup_func include/net/ip6_fib.h:614 [inline] fib6_rule_lookup+0x3c2/0x790 net/ipv6/fib6_rules.c:121 ip6_route_output_flags_noref net/ipv6/route.c:2636 [inline] ip6_route_output_flags+0x38e/0x610 net/ipv6/route.c:2648 ip6_dst_lookup_tail+0x26b/0x11a0 net/ipv6/ip6_output.c:1147 ip6_dst_lookup_flow+0xb9/0x180 net/ipv6/ip6_output.c:1250 sctp_v6_get_dst+0x1054/0x1e20 net/sctp/ipv6.c:384 sctp_transport_route+0x12c/0x2e0 net/sctp/transport.c:455 sctp_packet_config+0x460/0xdb0 net/sctp/output.c:103 sctp_packet_singleton+0x14d/0x320 net/sctp/outqueue.c:777 sctp_outq_flush_ctrl net/sctp/outqueue.c:914 [inline] sctp_outq_flush+0x6f1/0x3e60 net/sctp/outqueue.c:1212 sctp_side_effects net/sctp/sm_sideeffect.c:1198 [inline] sctp_do_sm+0x59cc/0x60c0 net/sctp/sm_sideeffect.c:1169 sctp_generate_timeout_event+0x22e/0x360 net/sctp/sm_sideeffect.c:295 call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x621/0x830 kernel/time/timer.c:2038 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051 __do_softirq+0x2bb/0x942 kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632 irq_exit_rcu+0x9/0x30 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:check_preemption_disabled+0x37/0x120 Code: 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 7c 93 9b 74 65 8b 05 71 93 9b 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 0f 85 cd 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e RSP: 0018:ffffc900148d72c8 EFLAGS: 00000206 RAX: dddfbe170ebcb700 RBX: 0000000000000000 RCX: ffff8880481cbb80 RDX: ffff8880481cbb80 RSI: ffffffff8bfe7240 RDI: ffffffff8bfe7200 RBP: 0000000000000001 R08: ffffffff8201aed8 R09: 1ffffffff2592a84 R10: dffffc0000000000 R11: fffffbfff2592a85 R12: dffffc0000000000 R13: 000000000005359f R14: ffffffff8201ad16 R15: ffff88813fff9140 rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline] rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:700 rcu_read_unlock_sched include/linux/rcupdate.h:861 [inline] pfn_valid+0x2c1/0x440 include/linux/mmzone.h:2026 page_table_check_clear+0x21/0x730 mm/page_table_check.c:68 zap_pte_range mm/memory.c:1452 [inline] zap_pmd_range mm/memory.c:1597 [inline] zap_pud_range mm/memory.c:1626 [inline] zap_p4d_range mm/memory.c:1647 [inline] unmap_page_range+0x1f79/0x3600 mm/memory.c:1668 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1758 exit_mmap+0x2c6/0xd40 mm/mmap.c:3279 __mmput+0x115/0x3c0 kernel/fork.c:1343 exit_mm+0x21f/0x310 kernel/exit.c:569 do_exit+0x9af/0x2740 kernel/exit.c:858 do_group_exit+0x206/0x2c0 kernel/exit.c:1020 get_signal+0x176d/0x1850 kernel/signal.c:2893 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:105 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline] syscall_exit_to_user_mode+0xc8/0x370 kernel/entry/common.c:212 do_syscall_64+0x108/0x240 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f4cc627dda9 Code: Unable to access opcode bytes at 0x7f4cc627dd7f. RSP: 002b:00007f4cc55ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 0000000000000001 RBX: 00007f4cc63ac050 RCX: 00007f4cc627dda9 RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 RBP: 00007f4cc62ca47a R08: 00000000200000c0 R09: 000000000000001c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f4cc63ac050 R15: 00007ffe9bb33058