rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 1-....: (10499 ticks this GP) idle=813/1/0x4000000000000000 softirq=169477/169477 fqs=4306
(t=10500 jiffies g=295857 q=8907)
NMI backtrace for cpu 1
CPU: 1 PID: 4089 Comm: syz-executor.0 Not tainted 5.15.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x22d/0x390 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
rcu_pending kernel/rcu/tree.c:3880 [inline]
rcu_sched_clock_irq+0x1e33/0x2bc0 kernel/rcu/tree.c:2599
update_process_times+0x197/0x200 kernel/time/timer.c:1785
tick_sched_handle kernel/time/tick-sched.c:226 [inline]
tick_sched_timer+0x27d/0x420 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x4cb/0xa60 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x3b3/0x1040 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:unwind_next_frame+0xbb3/0x1fa0
Code: 00 80 3b 00 0f 85 9e 0c 00 00 80 3d 96 b1 8e 0c 00 0f 85 91 0c 00 00 c6 05 89 b1 8e 0c 01 48 c7 c7 60 6c 4b 8a e9 1b 01 00 00 <48> 89 5c 24 60 49 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74
RSP: 0018:ffffc90000dc03c0 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffffff8ee2b2fb RCX: ffffffff8e4a17cc
RDX: ffffc9000b36ff58 RSI: 0000000000000001 RDI: 0000000000000001
RBP: 1ffffffff1dc565f R08: 0000000000000012 R09: ffffc90000dc0570
R10: fffff520001b809c R11: 0000000000000000 R12: 1ffffffff1dc565f
R13: ffffc90000dc0480 R14: dffffc0000000000 R15: ffffffff8ee2b2fa
arch_stack_walk+0x112/0x140 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x11b/0x1e0 kernel/stacktrace.c:121
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track+0x4c/0x80 mm/kasan/common.c:46
kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:360
____kasan_slab_free+0x10d/0x150 mm/kasan/common.c:366
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:1700 [inline]
slab_free_freelist_hook+0x129/0x1a0 mm/slub.c:1725
slab_free mm/slub.c:3483 [inline]
kmem_cache_free+0x85/0x180 mm/slub.c:3499
kfree_skb_list+0x41/0x70 net/core/skbuff.c:782
__dev_xmit_skb net/core/dev.c:3867 [inline]
__dev_queue_xmit+0x2384/0x34c0 net/core/dev.c:4170
mrp_queue_xmit net/802/mrp.c:364 [inline]
mrp_join_timer+0x418/0x820 net/802/mrp.c:608
call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers+0x71a/0x910 kernel/time/timer.c:1734
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747
__do_softirq+0x392/0x7a3 kernel/softirq.c:558
__irq_exit_rcu+0xec/0x170 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 12 72 d2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f7 f3 5d f7 65 8b 05 f8 92 06 76 85 c0 74 3f 48 c7 04 24 0e 36
RSP: 0018:ffffc9000b36f220 EFLAGS: 00000206
RAX: e2ae3a2c64401c00 RBX: 1ffff9200166de48 RCX: ffffffff90930803
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc9000b36f2b0 R08: ffffffff8188f3b3 R09: ffffed10173a64a2
R10: ffffed10173a64a2 R11: 0000000000000000 R12: dffffc0000000000
R13: 1ffff9200166de44 R14: ffffc9000b36f240 R15: 0000000000000246
rcu_preempt_deferred_qs_irqrestore+0x870/0xc40
rcu_read_unlock_special kernel/rcu/tree_plugin.h:669 [inline]
__rcu_read_unlock+0x4d8/0x630 kernel/rcu/tree_plugin.h:422
rcu_read_unlock include/linux/rcupdate.h:719 [inline]
__d_lookup+0x661/0x720 fs/dcache.c:2444
lookup_fast+0xe0/0x800 fs/namei.c:1615
walk_component+0x11b/0x790 fs/namei.c:1966
link_path_walk+0x697/0xd00
path_openat+0x25b/0x3670 fs/namei.c:3557
do_filp_open+0x277/0x4f0 fs/namei.c:3588
do_sys_openat2+0x13b/0x500 fs/open.c:1200
do_sys_open fs/open.c:1216 [inline]
__do_sys_openat fs/open.c:1232 [inline]
__se_sys_openat fs/open.c:1227 [inline]
__x64_sys_openat+0x243/0x290 fs/open.c:1227
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4e247aa7f4
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f4e21d6dcc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f4e247aa7f4
RDX: 0000000000000000 RSI: 00007f4e21d6dd60 RDI: 00000000ffffff9c
RBP: 00007f4e21d6dd60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00007ffed71c85ff R14: 00007f4e21d6e300 R15: 0000000000022000
----------------
Code disassembly (best guess):
0: 00 80 3b 00 0f 85 add %al,-0x7af0ffc5(%rax)
6: 9e sahf
7: 0c 00 or $0x0,%al
9: 00 80 3d 96 b1 8e add %al,-0x714e69c3(%rax)
f: 0c 00 or $0x0,%al
11: 0f 85 91 0c 00 00 jne 0xca8
17: c6 05 89 b1 8e 0c 01 movb $0x1,0xc8eb189(%rip) # 0xc8eb1a7
1e: 48 c7 c7 60 6c 4b 8a mov $0xffffffff8a4b6c60,%rdi
25: e9 1b 01 00 00 jmpq 0x145
* 2a: 48 89 5c 24 60 mov %rbx,0x60(%rsp) <-- trapping instruction
2f: 49 8d 7d 08 lea 0x8(%r13),%rdi
33: 48 89 f8 mov %rdi,%rax
36: 48 c1 e8 03 shr $0x3,%rax
3a: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1)
3f: 74 .byte 0x74