rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2665 jiffies s: 12597 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6274 Comm: syz-executor.2 Not tainted 6.9.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:match_held_lock+0x1/0xb0 kernel/locking/lockdep.c:5199 Code: 75 11 48 89 d8 48 83 c4 10 5b 41 5e 41 5f c3 cc cc cc cc e8 11 f9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <53> bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 20 00 RSP: 0018:ffffc90000007b30 EFLAGS: 00000087 RAX: 0000000000000004 RBX: 0000000000000003 RCX: ffffc90000007b03 RDX: 1ffff92000000f78 RSI: ffffffff8e334d20 RDI: ffff888025968b50 RBP: ffffc90000007c80 R08: ffffffff8fa7b5ef R09: 1ffffffff1f4f6bd R10: dffffc0000000000 R11: fffffbfff1f4f6be R12: 0000000000000003 R13: 000000000000000f R14: ffff888025968ad8 R15: ffff888025968b50 FS: 000055556015a480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555560163938 CR3: 0000000068b5e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_held_lock kernel/locking/lockdep.c:5244 [inline] __lock_release kernel/locking/lockdep.c:5429 [inline] lock_release+0x255/0x9f0 kernel/locking/lockdep.c:5774 rcu_lock_release include/linux/rcupdate.h:339 [inline] rcu_read_unlock include/linux/rcupdate.h:814 [inline] advance_sched+0xb37/0xca0 net/sched/sch_taprio.c:987 __run_hrtimer kernel/time/hrtimer.c:1692 [inline] __hrtimer_run_queues+0x5a5/0xd50 kernel/time/hrtimer.c:1756 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1818 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:stackdepot_memcmp lib/stackdepot.c:527 [inline] RIP: 0010:find_stack lib/stackdepot.c:561 [inline] RIP: 0010:stack_depot_save_flags+0x1bf/0x830 lib/stackdepot.c:618 Code: 8b 44 24 08 45 85 e4 75 68 4d 8b 3f 49 39 d7 74 5d 45 39 77 10 75 f2 45 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 20 75 df <48> ff c0 41 39 c5 75 ed 40 f6 c5 02 74 39 49 8d 7f 1c 45 8b 67 1c RSP: 0018:ffffc900046b78b0 EFLAGS: 00000246 RAX: 000000000000000a RBX: 00000000dc1597e5 RCX: ffffffff8b769bc5 RDX: ffff88823ba7ccb0 RSI: 0000000000000003 RDI: 00000000ee2b3c31 RBP: 0000000000000001 R08: ffffc900046b7910 R09: 000000000000000c R10: dffffc0000000000 R11: fffffbfff1f4f6be R12: 0000000000000000 R13: 000000000000000c R14: 0000000090ee7ccb R15: ffff88802e4b2a50 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3798 [inline] slab_alloc_node mm/slub.c:3845 [inline] kmem_cache_alloc+0x174/0x340 mm/slub.c:3852 kmem_cache_zalloc include/linux/slab.h:739 [inline] jbd2_alloc_handle include/linux/jbd2.h:1591 [inline] new_handle fs/jbd2/transaction.c:476 [inline] jbd2__journal_start+0x14d/0x5d0 fs/jbd2/transaction.c:503 __ext4_journal_start_sb+0x239/0x600 fs/ext4/ext4_jbd2.c:112 __ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline] ext4_dirty_inode+0x92/0x110 fs/ext4/inode.c:5939 __mark_inode_dirty+0x325/0xe20 fs/fs-writeback.c:2477 generic_update_time fs/inode.c:1907 [inline] inode_update_time fs/inode.c:1920 [inline] touch_atime+0x42c/0x670 fs/inode.c:1992 file_accessed include/linux/fs.h:2459 [inline] iterate_dir+0x5df/0x6f0 fs/readdir.c:113 __do_sys_getdents64 fs/readdir.c:409 [inline] __se_sys_getdents64+0x20d/0x4f0 fs/readdir.c:394 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa236ea93a3 Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 RSP: 002b:00007fffbdedc048 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055556015b930 RCX: 00007fa236ea93a3 RDX: 0000000000008000 RSI: 000055556015b930 RDI: 0000000000000003 RBP: 000055556015b904 R08: 0000000000000000 R09: 00007fa237b8f0b0 R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 R13: 0000000000000016 R14: 000055556015b900 R15: 0000000000000005