rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-....: (1 GPs behind) idle=dfb/1/0x4000000000000000 softirq=120483/120484 fqs=5243
(t=10502 jiffies g=206173 q=787)
NMI backtrace for cpu 0
CPU: 0 PID: 4144 Comm: kworker/u4:7 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound io_ring_exit_work
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343
print_cpu_stall kernel/rcu/tree_stall.h:627 [inline]
check_cpu_stall kernel/rcu/tree_stall.h:711 [inline]
rcu_pending kernel/rcu/tree.c:3878 [inline]
rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597
update_process_times+0x16d/0x200 kernel/time/timer.c:1785
tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1421
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
__sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:unwind_next_frame+0xce4/0x1ce0 arch/x86/kernel/unwind_orc.c:539
Code: 89 44 24 20 e8 ed f1 ff ff 4c 8b 44 24 28 84 c0 48 8b 4c 24 30 0f 84 33 07 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 <4c> 8b 64 24 60 48 c1 ea 03 80 3c 02 00 0f 85 98 0e 00 00 48 8b 14
RSP: 0018:ffffc900033af640 EFLAGS: 00000202
RAX: dffffc0000000000 RBX: 1ffff92000675ed0 RCX: ffffffff8deb88b9
RDX: ffffc900033af750 RSI: ffffc900033aff10 RDI: ffffc900033aff10
RBP: 0000000000000001 R08: ffffffff8deb88b4 R09: 0000000000000001
R10: fffff52000675eee R11: 0000000000086089 R12: ffffc900033af760
R13: ffffc900033af74d R14: ffffc900033af718 R15: ffffffff8deb88b8
arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:360
____kasan_slab_free mm/kasan/common.c:366 [inline]
____kasan_slab_free mm/kasan/common.c:328 [inline]
__kasan_slab_free+0xff/0x130 mm/kasan/common.c:374
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:1700 [inline]
slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1726
slab_free mm/slub.c:3492 [inline]
kfree+0xf3/0x550 mm/slub.c:4552
__io_remove_buffers.part.0+0x115/0x220 fs/io_uring.c:4327
__io_remove_buffers fs/io_uring.c:9263 [inline]
io_destroy_buffers fs/io_uring.c:9263 [inline]
io_ring_ctx_free fs/io_uring.c:9319 [inline]
io_ring_exit_work+0x74d/0xbe8 fs/io_uring.c:9495
process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298
worker_thread+0x658/0x11f0 kernel/workqueue.c:2445
kthread+0x405/0x4f0 kernel/kthread.c:327
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
0: 89 44 24 20 mov %eax,0x20(%rsp)
4: e8 ed f1 ff ff callq 0xfffff1f6
9: 4c 8b 44 24 28 mov 0x28(%rsp),%r8
e: 84 c0 test %al,%al
10: 48 8b 4c 24 30 mov 0x30(%rsp),%rcx
15: 0f 84 33 07 00 00 je 0x74e
1b: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
22: fc ff df
25: 48 8b 54 24 08 mov 0x8(%rsp),%rdx
* 2a: 4c 8b 64 24 60 mov 0x60(%rsp),%r12 <-- trapping instruction
2f: 48 c1 ea 03 shr $0x3,%rdx
33: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1)
37: 0f 85 98 0e 00 00 jne 0xed5
3d: 48 rex.W
3e: 8b .byte 0x8b
3f: 14 .byte 0x14