------------[ cut here ]------------
WARNING: CPU: 1 PID: 16522 at kernel/rcu/tree_stall.h:1050 rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1050
Modules linked in:
CPU: 1 UID: 0 PID: 16522 Comm: syz.6.3094 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1050
Code: ff ff 48 c7 c7 60 94 7d 99 be 04 00 00 00 e8 33 d7 7e 00 4c 89 f7 b8 01 00 00 00 87 05 c5 af d6 17 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 26 f4 8d 74 47 48 c7 c0 90 04 7d 8f 48 c1 e8
RSP: 0000:ffffc90000a08bb8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a6e48d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8df42600
RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff32fb28c R12: 0000000000002904
R13: 1ffff11017127602 R14: ffffffff8df42600 R15: dffffc0000000000
FS: 00007f0bd01606c0(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000007f000 CR3: 000000006b656000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0006000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
rcu_core+0x5fa/0x1770 kernel/rcu/tree.c:2856
handle_softirqs+0x286/0x870 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723
irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:7256
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 10 00 00 00 74 64 bf 01 00 00 00 e8 3b c4 48 f6 e8 46 97 80 f6 fb bf 01 00 00 00 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0000:ffffc90014d57dc0 EFLAGS: 00000282
RAX: cb3d1b8f599cba00 RBX: 0000000000000000 RCX: cb3d1b8f599cba00
RDX: 0000000000000000 RSI: ffffffff8d70bc9a RDI: 0000000000000001
RBP: ffffc90014d57e60 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e
R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920029aafb8
irqentry_exit+0x6f/0x90 kernel/entry/common.c:211
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:exit_to_user_mode_loop kernel/entry/common.c:-1 [inline]
RIP: 0010:exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
RIP: 0010:irqentry_exit_to_user_mode+0x51/0x110 kernel/entry/common.c:73
Code: 07 85 c0 0f 85 c0 00 00 00 e8 ab 26 64 f6 65 4c 8b 34 25 08 20 6e 92 49 8b 3e f7 c7 37 03 00 00 74 50 49 89 ff e8 8f 25 64 f6 <4c> 89 f8 a8 30 74 08 e8 93 19 01 00 4c 89 f8 a9 00 01 00 00 74 0b
RSP: 0000:ffffc90014d57f28 EFLAGS: 00000282
RAX: cb3d1b8f599cba00 RBX: ffffc90014d57f48 RCX: cb3d1b8f599cba00
RDX: 0000000000000000 RSI: ffffffff8d70bc9a RDI: ffffffff8bbf0460
RBP: 0000000000000000 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e
R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880307a8000 R15: 0000000000000010
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0033:0x7f0bcf25eca3
Code: 25 90 ff ff ff 01 e8 ec 9b 0b 00 48 8b 0c 24 8b 00 48 83 b9 88 00 00 00 ff 89 81 90 00 00 00 75 04 85 c0 74 1e 48 63 54 24 10 <48> 89 d0 48 c1 e0 04 48 01 d0 48 8d 15 6c c4 23 00 48 83 7c c2 28
RSP: 002b:00007f0bd0160060 EFLAGS: 00000213
RAX: 000000000000000e RBX: 00007f0bcf5e5fa0 RCX: 00007f0bcf5e5fa0
RDX: 0000000000001300 RSI: 0000000000000000 RDI: 00002000000000c0
RBP: 00007f0bcf411f91 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007f0bcf5e6038 R14: 00007f0bcf5e5fa0 R15: 00007ffebc2ba5d8
----------------
Code disassembly (best guess):
0: 24 20 and $0x20,%al
2: f6 44 24 21 02 testb $0x2,0x21(%rsp)
7: 74 0c je 0x15
9: 90 nop
a: 0f 0b ud2
c: 48 f7 03 10 00 00 00 testq $0x10,(%rbx)
13: 74 64 je 0x79
15: bf 01 00 00 00 mov $0x1,%edi
1a: e8 3b c4 48 f6 call 0xf648c45a
1f: e8 46 97 80 f6 call 0xf680976a
24: fb sti
25: bf 01 00 00 00 mov $0x1,%edi
* 2a: e8 5b ab ff ff call 0xffffab8a <-- trapping instruction
2f: 48 c7 44 24 40 00 00 movq $0x0,0x40(%rsp)
36: 00 00
38: 9c pushf
39: 8f 44 24 40 pop 0x40(%rsp)
3d: 8b .byte 0x8b
3e: 44 rex.R
3f: 24 .byte 0x24