rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-....: (9163 ticks this GP) idle=a91/1/0x4000000000000000 softirq=35474/35648 fqs=5143 (t=10503 jiffies g=47981 q=18092) NMI backtrace for cpu 0 CPU: 0 PID: 15 Comm: migration/0 Not tainted 5.16.0-syzkaller-11423-ge2bcbd7769ee #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Stopper: 0x0 <- 0x0 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:604 [inline] check_cpu_stall kernel/rcu/tree_stall.h:688 [inline] rcu_pending kernel/rcu/tree.c:3919 [inline] rcu_sched_clock_irq.cold+0x5c/0x759 kernel/rcu/tree.c:2617 update_process_times+0x16d/0x200 kernel/time/timer.c:1785 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202 Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 1e 21 11 f8 48 89 ef e8 d6 96 11 f8 e8 e1 7b 32 f8 fb bf 01 00 00 00 26 52 04 f8 65 8b 05 7f 50 b6 76 85 c0 74 02 5d c3 e8 eb 25 b4 RSP: 0018:ffffc90000007e08 EFLAGS: 00000202 RAX: 000000000013d5d6 RBX: ffffffff88f82b30 RCX: 1ffffffff1b26bb9 RDX: 0000000000000000 RSI: 0000000000000103 RDI: 0000000000000001 RBP: ffff8880b9c28480 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff817e9b48 R11: 0000000000000000 R12: ffffc90000007e98 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b9c28480 expire_timers kernel/time/timer.c:1465 [inline] __run_timers.part.0+0x66c/0xa30 kernel/time/timer.c:1734 __run_timers kernel/time/timer.c:1715 [inline] run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_irq_work+0x93/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x12/0x20 arch/x86/include/asm/idtentry.h:664 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194 Code: 74 24 10 e8 da 20 11 f8 48 89 ef e8 92 96 11 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 d3 51 04 f8 65 8b 05 2c 50 b6 76 85 c0 74 0a 5b 5d c3 e8 70 7b RSP: 0018:ffffc90000d47e90 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1b26bb9 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 RBP: ffff8880b9c2b148 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff817e9b48 R11: 0000000000000000 R12: ffff8880b9c2b148 R13: ffffffff8174f450 R14: ffff888011983a00 R15: 0000000000000001 cpu_stop_should_run+0x7a/0xc0 kernel/stop_machine.c:482 smpboot_thread_fn+0x2c2/0x9c0 kernel/smpboot.c:158 kthread+0x2e9/0x3a0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ---------------- Code disassembly (best guess): 0: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 5: 55 push %rbp 6: 48 8b 74 24 08 mov 0x8(%rsp),%rsi b: 48 89 fd mov %rdi,%rbp e: 48 83 c7 18 add $0x18,%rdi 12: e8 1e 21 11 f8 callq 0xf8112135 17: 48 89 ef mov %rbp,%rdi 1a: e8 d6 96 11 f8 callq 0xf81196f5 1f: e8 e1 7b 32 f8 callq 0xf8327c05 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi * 2a: e8 26 52 04 f8 callq 0xf8045255 <-- trapping instruction 2f: 65 8b 05 7f 50 b6 76 mov %gs:0x76b6507f(%rip),%eax # 0x76b650b5 36: 85 c0 test %eax,%eax 38: 74 02 je 0x3c 3a: 5d pop %rbp 3b: c3 retq 3c: e8 .byte 0xe8 3d: eb 25 jmp 0x64 3f: b4 .byte 0xb4