rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-....: (1 GPs behind) idle=231/1/0x4000000000000000 softirq=94378/94380 fqs=2099
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28689/1:b..l
(detected by 0, t=10506 jiffies, g=122097, q=1001)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 28697 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:irq_work_run_list+0xdf/0x340 kernel/irq_work.c:176
Code: 3c 28 00 74 08 48 89 df e8 1e 33 39 00 48 83 3b 00 0f 84 21 02 00 00 48 89 df be 08 00 00 00 e8 a7 34 39 00 45 31 f6 4c 87 33 <4d> 85 f6 0f 84 0c 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74
RSP: 0000:ffffc90000dd0f00 EFLAGS: 00000046
RAX: 1ffff11017226701 RBX: ffff8880b9133d70 RCX: ffffffff818521d9
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880b9133d70
RBP: ffffc90000dd0fb0 R08: ffff8880b9133d77 R09: 1ffff110172267ae
R10: dffffc0000000000 R11: ffffed10172267af R12: 0000000000000000
R13: dffffc0000000000 R14: ffff8880b913b1f0 R15: 1ffff920001ba1e4
FS: 0000555582677500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4af2c1b690 CR3: 0000000049692000 CR4: 00000000003506e0
DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
irq_work_run+0x63/0xe0 kernel/irq_work.c:186
__sysvec_irq_work+0x98/0x240 arch/x86/kernel/irq_work.c:22
instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline]
sysvec_irq_work+0x98/0xc0 arch/x86/kernel/irq_work.c:17
asm_sysvec_irq_work+0x16/0x20 arch/x86/include/asm/idtentry.h:713
RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 kernel/rcu/tree_plugin.h:674
Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 df 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
RSP: 0000:ffffc900034cfa00 EFLAGS: 00000206
RAX: 21fcc863b8305300 RBX: 1ffff92000699f44 RCX: 21fcc863b8305300
RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700
RBP: ffffc900034cfad0 R08: ffffffff901d60c7 R09: 1ffffffff203ac18
R10: dffffc0000000000 R11: fffffbfff203ac19 R12: ffffffff8c323800
R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
__rcu_read_unlock+0x78/0xd0 kernel/rcu/tree_plugin.h:422
rcu_read_unlock include/linux/rcupdate.h:772 [inline]
__unlock_page_memcg+0xea/0x100 mm/memcontrol.c:2093
wp_page_copy+0xef5/0x2050 mm/memory.c:3148
handle_pte_fault mm/memory.c:4668 [inline]
__handle_mm_fault mm/memory.c:4785 [inline]
handle_mm_fault+0x1f06/0x4410 mm/memory.c:4883
do_user_addr_fault+0x489/0xc80 arch/x86/mm/fault.c:1355
handle_page_fault arch/x86/mm/fault.c:1443 [inline]
exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f4af1d3f762
Code: 14 00 00 4c 8b 05 86 bf ed 00 48 8b 0d 3f bf ed 00 31 c0 48 8d ac 24 30 01 00 00 48 8d 15 6e a3 1c 00 be 40 00 00 00 48 89 ef 05 27 bf ed 00 01 e8 c2 1b 0e 00 31 c0 48 89 ee bf 0f 00 00 00
RSP: 002b:00007ffd0813f200 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007
RDX: 00007f4af1f09ac8 RSI: 0000000000000040 RDI: 00007ffd0813f330
RBP: 00007ffd0813f330 R08: 0000000000001941 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000201
R13: 00000000000927c0 R14: 00000000000fb847 R15: 00007ffd0813f490
task:syz.9.6461 state:R running task stack:25584 pid:28689 ppid: 27785 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5049 [inline]
__schedule+0x11ef/0x43c0 kernel/sched/core.c:6395
preempt_schedule_irq+0xbb/0x160 kernel/sched/core.c:6799
irqentry_exit+0x63/0x70 kernel/entry/common.c:432
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:seqcount_lockdep_reader_access+0x144/0x190 include/linux/seqlock.h:106
Code: 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 42 41 f7 c5 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 43 c7 44 27 08 00 00 00 00 65 48 8b 04 25
RSP: 0018:ffffc9000348f240 EFLAGS: 00000206
RAX: dffffc0000000004 RBX: ffff88813fffb7c0 RCX: 6e09135077589000
RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700
RBP: ffffc9000348f300 R08: ffff8880b913b30b R09: 1ffff11017227661
R10: dffffc0000000000 R11: ffffed1017227662 R12: dffffc0000000000
R13: 0000000000000a06 R14: ffffffff81b55237 R15: 1ffff92000691e48
read_seqbegin include/linux/seqlock.h:897 [inline]
zone_span_seqbegin include/linux/memory_hotplug.h:83 [inline]
page_outside_zone_boundaries mm/page_alloc.c:580 [inline]
bad_range+0x77/0x2d0 mm/page_alloc.c:607
rmqueue mm/page_alloc.c:3760 [inline]
get_page_from_freelist+0x1b9c/0x1ca0 mm/page_alloc.c:4189
__alloc_pages+0x1ee/0x480 mm/page_alloc.c:5501
alloc_slab_page mm/slub.c:1780 [inline]
allocate_slab mm/slub.c:1917 [inline]
new_slab+0xc0/0x4b0 mm/slub.c:1980
___slab_alloc+0x80a/0xdd0 mm/slub.c:3013
__slab_alloc mm/slub.c:3100 [inline]
slab_alloc_node mm/slub.c:3191 [inline]
__kmalloc_node_track_caller+0x1fc/0x3a0 mm/slub.c:4963
kmalloc_reserve net/core/skbuff.c:356 [inline]
pskb_expand_head+0x127/0x10f0 net/core/skbuff.c:1709
__bpf_try_make_writable net/core/filter.c:1667 [inline]
bpf_try_make_writable net/core/filter.c:1673 [inline]
bpf_try_make_head_writable net/core/filter.c:1681 [inline]
____bpf_clone_redirect net/core/filter.c:2456 [inline]
bpf_clone_redirect+0x1bb/0x470 net/core/filter.c:2425
bpf_prog_b36a1f39e2fdd4f4+0x56/0x1f0
bpf_dispatcher_nop_func include/linux/bpf.h:888 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
bpf_test_run+0x2a8/0x800 net/bpf/test_run.c:119
bpf_prog_test_run_skb+0x9cc/0x1180 net/bpf/test_run.c:674
bpf_prog_test_run+0x31e/0x390 kernel/bpf/syscall.c:3374
__sys_bpf+0x5a5/0x6f0 kernel/bpf/syscall.c:4675
__do_sys_bpf kernel/bpf/syscall.c:4761 [inline]
__se_sys_bpf kernel/bpf/syscall.c:4759 [inline]
__x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:4759
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f5a88681e59
RSP: 002b:00007f5a868db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f5a888fafa0 RCX: 00007f5a88681e59
RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
RBP: 00007f5a88717d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5a888fb038 R14: 00007f5a888fafa0 R15: 00007ffd2114eb18