============================= WARNING: suspicious RCU usage 6.9.0-rc5-next-20240426-syzkaller #0 Not tainted ----------------------------- kernel/rcu/tree.c:276 Illegal rcu_softirq_qs() in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by ksoftirqd/1/24: #0: ffffffff8e333b20 (rcu_read_lock_sched){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333b20 (rcu_read_lock_sched){....}-{1:2}, at: rcu_read_lock_sched include/linux/rcupdate.h:933 [inline] #0: ffffffff8e333b20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid include/linux/mmzone.h:2022 [inline] #0: ffffffff8e333b20 (rcu_read_lock_sched){....}-{1:2}, at: __virt_addr_valid+0x183/0x520 arch/x86/mm/physaddr.c:65 stack backtrace: CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.9.0-rc5-next-20240426-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 rcu_softirq_qs+0xd9/0x370 kernel/rcu/tree.c:273 __do_softirq+0x5fd/0x980 kernel/softirq.c:568 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 common_interrupt+0xaa/0xd0 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 RIP: 0010:pfn_valid include/linux/mmzone.h:2023 [inline] RIP: 0010:__virt_addr_valid+0x23b/0x520 arch/x86/mm/physaddr.c:65 Code: 00 48 c7 c2 20 62 c8 8b e8 02 c7 30 00 4d 85 ff 74 36 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 78 c9 b9 00 49 8b 1f <48> 89 de 48 83 e6 02 31 ff e8 b7 19 54 00 48 89 d8 48 83 e0 02 75 RSP: 0018:ffffc900001e7a58 EFLAGS: 00000246 RAX: 1ffff11027fff20c RBX: ffffea000000000f RCX: ffff888017af0000 RDX: 0000000000000000 RSI: ffffffff8c1fc4c0 RDI: ffffffff8c1fc480 RBP: dffffc0000000000 R08: ffffffff81423fc4 R09: 1ffffffff25f2cb0 R10: dffffc0000000000 R11: fffffbfff25f2cb1 R12: 000000001a705378 R13: 1ffff9200003cf64 R14: ffffffff81423f93 R15: ffff88813fff9060 kasan_addr_to_slab+0xd/0x80 mm/kasan/common.c:37 __kasan_record_aux_stack+0x11/0xc0 mm/kasan/generic.c:526 __call_rcu_common kernel/rcu/tree.c:3103 [inline] call_rcu+0x167/0xa70 kernel/rcu/tree.c:3207 context_switch kernel/sched/core.c:5411 [inline] __schedule+0x17f0/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 smpboot_thread_fn+0x61e/0xa30 kernel/smpboot.c:160 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 48 c7 c2 20 62 c8 8b mov $0xffffffff8bc86220,%rdx 7: e8 02 c7 30 00 call 0x30c70e c: 4d 85 ff test %r15,%r15 f: 74 36 je 0x47 11: 4c 89 f8 mov %r15,%rax 14: 48 c1 e8 03 shr $0x3,%rax 18: 80 3c 28 00 cmpb $0x0,(%rax,%rbp,1) 1c: 74 08 je 0x26 1e: 4c 89 ff mov %r15,%rdi 21: e8 78 c9 b9 00 call 0xb9c99e 26: 49 8b 1f mov (%r15),%rbx * 29: 48 89 de mov %rbx,%rsi <-- trapping instruction 2c: 48 83 e6 02 and $0x2,%rsi 30: 31 ff xor %edi,%edi 32: e8 b7 19 54 00 call 0x5419ee 37: 48 89 d8 mov %rbx,%rax 3a: 48 83 e0 02 and $0x2,%rax 3e: 75 .byte 0x75