------------[ cut here ]------------
WARNING: CPU: 0 PID: 6060 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:993
Modules linked in:
CPU: 0 PID: 6060 Comm: syz.1.54 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:1001
Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03
RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080
RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904
R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000
FS: 00007f02a49cb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f02a49caf98 CR3: 000000005d0e1000 CR4: 00000000003506f0
Call Trace:
rcu_core+0x612/0x1720 kernel/rcu/tree.c:2462
handle_softirqs+0x280/0x820 kernel/softirq.c:578
__do_softirq kernel/softirq.c:612 [inline]
invoke_softirq kernel/softirq.c:452 [inline]
__irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661
irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:115 [inline]
RIP: 0010:arch_atomic_fetch_or arch/x86/include/asm/atomic.h:155 [inline]
RIP: 0010:raw_atomic_fetch_or include/linux/atomic/atomic-arch-fallback.h:1677 [inline]
RIP: 0010:atomic_fetch_or include/linux/atomic/atomic-instrumented.h:954 [inline]
RIP: 0010:irq_work_claim kernel/irq_work.c:61 [inline]
RIP: 0010:irq_work_queue+0x53/0x140 kernel/irq_work.c:119
Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 9b 00 00 00 41 8b 2e 89 e9 83 c9 23 31 f6 89 e8 f0 41 0f b1 0e <41> 89 c7 41 0f 94 c4 40 0f 94 c6 bf 02 00 00 00 e8 28 22 f3 ff 45
RSP: 0018:ffffc9000b05fcf0 EFLAGS: 00000246
RAX: 0000000000000020 RBX: ffff8880b8e35048 RCX: 0000000000000023
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880b8e35050
RBP: 0000000000000020 R08: ffff8880b8e35053 R09: 1ffff110171c6a0a
R10: dffffc0000000000 R11: ffffed10171c6a0b R12: ffff8880b8e35048
R13: dffffc0000000000 R14: ffff8880b8e35050 R15: ffff888023a0bc00
bpf_send_signal_common+0x2b6/0x420 kernel/trace/bpf_trace.c:875
____bpf_send_signal kernel/trace/bpf_trace.c:884 [inline]
bpf_send_signal+0x19/0x20 kernel/trace/bpf_trace.c:882
bpf_prog_7ba5217f62dcd359+0x40/0x44
bpf_dispatcher_nop_func include/linux/bpf.h:1223 [inline]
__bpf_prog_run include/linux/filter.h:612 [inline]
bpf_prog_run include/linux/filter.h:619 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:2322 [inline]
bpf_trace_run2+0x1d1/0x3c0 kernel/trace/bpf_trace.c:2361
trace_sys_enter+0x69/0x80 include/trace/events/syscalls.h:18
syscall_trace_enter+0xf0/0x150 kernel/entry/common.c:81
do_syscall_64+0x28/0xb0 arch/x86/entry/common.c:77
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f02a3b2af79
Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
RSP: 002b:00007f02a49cab40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
RAX: ffffffffffffffda RBX: 00007f02a3de6098 RCX: 00007f02a3b2af79
RDX: 00007f02a49cab40 RSI: 00007f02a49cac70 RDI: 0000000000000011
RBP: 00007f02a3de6090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f02a3de6128 R14: 00007fff3ccb61d0 R15: 00007fff3ccb62b8
----------------
Code disassembly (best guess):
0: c1 e8 03 shr $0x3,%eax
3: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx
a: fc ff df
d: 0f b6 04 08 movzbl (%rax,%rcx,1),%eax
11: 84 c0 test %al,%al
13: 0f 85 9b 00 00 00 jne 0xb4
19: 41 8b 2e mov (%r14),%ebp
1c: 89 e9 mov %ebp,%ecx
1e: 83 c9 23 or $0x23,%ecx
21: 31 f6 xor %esi,%esi
23: 89 e8 mov %ebp,%eax
25: f0 41 0f b1 0e lock cmpxchg %ecx,(%r14)
* 2a: 41 89 c7 mov %eax,%r15d <-- trapping instruction
2d: 41 0f 94 c4 sete %r12b
31: 40 0f 94 c6 sete %sil
35: bf 02 00 00 00 mov $0x2,%edi
3a: e8 28 22 f3 ff call 0xfff32267
3f: 45 rex.RB