============================= WARNING: suspicious RCU usage 6.9.0-rc2-next-20240404-syzkaller #0 Not tainted ----------------------------- kernel/rcu/tree.c:276 Illegal rcu_softirq_qs() in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by ksoftirqd/0/16: #0: ffffffff8e334e20 (rcu_read_lock_sched){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e334e20 (rcu_read_lock_sched){....}-{1:2}, at: rcu_read_lock_sched include/linux/rcupdate.h:933 [inline] #0: ffffffff8e334e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid include/linux/mmzone.h:2019 [inline] #0: ffffffff8e334e20 (rcu_read_lock_sched){....}-{1:2}, at: __virt_addr_valid+0x183/0x520 arch/x86/mm/physaddr.c:65 stack backtrace: CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.9.0-rc2-next-20240404-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 rcu_softirq_qs+0xd9/0x370 kernel/rcu/tree.c:273 __do_softirq+0x5fd/0x980 kernel/softirq.c:568 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_read_lock_sched include/linux/rcupdate.h:934 [inline] RIP: 0010:pfn_valid include/linux/mmzone.h:2019 [inline] RIP: 0010:__virt_addr_valid+0x1b4/0x520 arch/x86/mm/physaddr.c:65 Code: 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 56 e8 10 c5 2f 00 48 83 c4 08 e8 f7 54 41 0a 89 c3 31 ff 89 c6 e8 ec 5c 53 00 <85> db 74 10 e8 c3 9f 39 00 84 c0 74 0e e8 9a 58 53 00 eb 56 e8 93 RSP: 0018:ffffc90000157a58 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888016ec5a00 RDX: ffff888016ec5a00 RSI: 0000000000000001 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff81423114 R09: 1ffffffff25edca4 R10: dffffc0000000000 R11: fffffbfff25edca5 R12: 000000007f26b578 R13: 1ffff9200002af64 R14: ffffffff814230e3 R15: ffff88813fff91e0 kasan_addr_to_slab+0xd/0x80 mm/kasan/common.c:37 __kasan_record_aux_stack+0x11/0xc0 mm/kasan/generic.c:526 __call_rcu_common kernel/rcu/tree.c:3096 [inline] call_rcu+0x167/0xa70 kernel/rcu/tree.c:3200 context_switch kernel/sched/core.c:5412 [inline] __schedule+0x17f0/0x4a50 kernel/sched/core.c:6746 __schedule_loop kernel/sched/core.c:6823 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6838 smpboot_thread_fn+0x61e/0xa30 kernel/smpboot.c:160 kthread+0x2f0/0x390 kernel/kthread.c:388 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 ---------------- Code disassembly (best guess): 0: 31 f6 xor %esi,%esi 2: 31 d2 xor %edx,%edx 4: b9 02 00 00 00 mov $0x2,%ecx 9: 45 31 c0 xor %r8d,%r8d c: 45 31 c9 xor %r9d,%r9d f: 41 56 push %r14 11: e8 10 c5 2f 00 call 0x2fc526 16: 48 83 c4 08 add $0x8,%rsp 1a: e8 f7 54 41 0a call 0xa415516 1f: 89 c3 mov %eax,%ebx 21: 31 ff xor %edi,%edi 23: 89 c6 mov %eax,%esi 25: e8 ec 5c 53 00 call 0x535d16 * 2a: 85 db test %ebx,%ebx <-- trapping instruction 2c: 74 10 je 0x3e 2e: e8 c3 9f 39 00 call 0x399ff6 33: 84 c0 test %al,%al 35: 74 0e je 0x45 37: e8 9a 58 53 00 call 0x5358d6 3c: eb 56 jmp 0x94 3e: e8 .byte 0xe8 3f: 93 xchg %eax,%ebx