rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2690 jiffies s: 497 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 23 Comm: migration/1 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Stopper: active_load_balance_cpu_stop+0x0/0xdf0 kernel/sched/fair.c:1612 <- sched_balance_rq+0x2234/0x3460 RIP: 0010:debug_check_no_obj_freed+0x0/0x600 lib/debugobjects.c:1018 Code: ff e9 5c fe ff ff e8 df 71 88 06 e8 da 2d 5d fd e9 fd fe ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 f0 48 RSP: 0018:ffffc90000a18678 EFLAGS: 00000046 RAX: 0000000000000046 RBX: ffff88806f09ce00 RCX: dffffc0000000000 RDX: ffff888023ff8040 RSI: 0000000000000080 RDI: ffff88806f09ce00 RBP: ffffc90000a186c8 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0001bc2700 R13: 0000000000000000 R14: ffff888015841a00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f278db1ca58 CR3: 000000000db7c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: slab_free_hook mm/slub.c:2219 [inline] slab_free mm/slub.c:4473 [inline] kfree+0x284/0x3b0 mm/slub.c:4594 dummy_timer+0x1750/0x38d0 drivers/usb/gadget/udc/dummy_hcd.c:1981 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x43/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline] RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:245 Code: 1a 78 7e 65 8b 05 80 1a 78 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 <85> c0 74 4f 8b 82 f8 15 00 00 83 f8 03 75 44 48 8b 82 00 16 00 00 RSP: 0018:ffffc90000a18b78 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff88807f386580 RCX: ffffffff8924358a RDX: ffff8880182ada00 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff88802f55cb00 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807f3865b8 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 pie_calculate_probability+0x64a/0x850 net/sched/sch_pie.c:412 fq_pie_timer+0x215/0x5a0 net/sched/sch_fq_pie.c:398 call_timer_fn+0x1a0/0x610 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1843 [inline] __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417 __run_timer_base kernel/time/timer.c:2428 [inline] __run_timer_base kernel/time/timer.c:2421 [inline] run_timer_base+0x111/0x190 kernel/time/timer.c:2437 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2447 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:active_load_balance_cpu_stop+0x341/0xdf0 kernel/sched/fair.c:11618 Code: 00 4c 89 e7 85 c0 0f 85 b6 02 00 00 48 83 c7 18 e8 f4 ec 08 00 4c 89 e7 e8 3c 7a fc ff e8 d7 3a 33 00 fb 48 8b 8d d0 fe ff ff <48> b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 01 00 00 00 00 48 c7 RSP: 0018:ffffc900001d7cc8 EFLAGS: 00000206 RAX: 0000000000000b35 RBX: 000000000000359e RCX: 1ffff9200003afa2 RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0ee40 RBP: ffffc900001d7e20 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff9014179f R11: ffff8880b9228a40 R12: ffff8880b923edc0 R13: ffff888016e82000 R14: ffff8880b923fb58 R15: ffff8880b933edc0 cpu_stopper_thread+0x21b/0x490 kernel/stop_machine.c:511 smpboot_thread_fn+0x661/0xa10 kernel/smpboot.c:164 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 hrtimer: interrupt took 11993088 ns