rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 1-....: (1 GPs behind) idle=46ec/1/0x4000000000000000 softirq=38647/38656 fqs=5194
rcu: hardirqs softirqs csw/system
rcu: number: 11 0 0
rcu: cputime: 154 52331 3 ==> 52520(ms)
rcu: (t=10504 jiffies g=33041 q=1870 ncpus=2)
CPU: 1 UID: 0 PID: 11378 Comm: syz.4.1534 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:netdev_get_num_tc include/linux/netdevice.h:2509 [inline]
RIP: 0010:taprio_dequeue_from_txq+0xda/0x930 net/sched/sch_taprio.c:707
Code: 48 c1 e8 03 80 3c 10 00 74 12 48 89 df e8 5e 51 38 f8 48 ba 00 00 00 00 00 fc ff df 48 8b 2b 49 8d 5f 36 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 53 06 00 00 48 85 ed 0f 84 3c 06 00 00 4c
RSP: 0018:ffffc90000a17d38 EFLAGS: 00000a07
RAX: 1ffff1100c3a7806 RBX: ffff888061d3c036 RCX: ffff88802b7a3c00
RDX: dffffc0000000000 RSI: 000000000000000a RDI: ffff888062226000
RBP: ffff88807c17a000 R08: ffffffff89cd7c4e R09: 1ffffffff2854910
R10: dffffc0000000000 R11: ffffffff89bf7200 R12: 000000000000000a
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888061d3c000
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3adf95 CR3: 000000000e736000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
taprio_dequeue_tc_priority+0x1b5/0x7a0 net/sched/sch_taprio.c:787
taprio_dequeue+0x186/0x550
dequeue_skb net/sched/sch_generic.c:293 [inline]
qdisc_restart net/sched/sch_generic.c:398 [inline]
__qdisc_run+0x272/0x2180 net/sched/sch_generic.c:416
__dev_xmit_skb net/core/dev.c:3896 [inline]
__dev_queue_xmit+0x10dd/0x3f50 net/core/dev.c:4400
dev_queue_xmit_accel include/linux/netdevice.h:3174 [inline]
macvlan_queue_xmit drivers/net/macvlan.c:556 [inline]
macvlan_start_xmit+0x470/0x6d0 drivers/net/macvlan.c:580
__netdev_start_xmit include/linux/netdevice.h:5002 [inline]
netdev_start_xmit include/linux/netdevice.h:5011 [inline]
xmit_one net/core/dev.c:3590 [inline]
dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606
__dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434
dev_queue_xmit include/linux/netdevice.h:3168 [inline]
neigh_hh_output include/net/neighbour.h:523 [inline]
neigh_output include/net/neighbour.h:537 [inline]
ip6_finish_output2+0x1284/0x17b0 net/ipv6/ip6_output.c:141
ip6_finish_output+0x41e/0x840 net/ipv6/ip6_output.c:226
NF_HOOK include/linux/netfilter.h:314 [inline]
ndisc_send_skb+0xb30/0x1450 net/ipv6/ndisc.c:511
addrconf_rs_timer+0x371/0x670 net/ipv6/addrconf.c:4061
call_timer_fn+0x187/0x650 kernel/time/timer.c:1793
expire_timers kernel/time/timer.c:1844 [inline]
__run_timers kernel/time/timer.c:2418 [inline]
__run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2430
run_timer_base kernel/time/timer.c:2439 [inline]
run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2449
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__kasan_check_write+0xa/0x20 mm/kasan/shadow.c:37
Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90
RSP: 0018:ffffc90003456eb8 EFLAGS: 00000287
RAX: 0000000000000000 RBX: 0080000000000000 RCX: ffffffff81dcaac0
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0001ca8d34
RBP: ffffc90003456fd0 R08: ffffffff81dca9f9 R09: 1ffffd400039519e
R10: dffffc0000000000 R11: fffff9400039519f R12: 0200000000000000
R13: ffffea0001ca8d00 R14: 1ffffd40003951a0 R15: 0000000000000017
instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
atomic_sub_and_test include/linux/atomic/atomic-instrumented.h:1365 [inline]
page_ref_sub_and_test include/linux/page_ref.h:177 [inline]
folio_ref_sub_and_test include/linux/page_ref.h:186 [inline]
folios_put_refs+0x300/0x860 mm/swap.c:934
free_pages_and_swap_cache+0x2ea/0x690 mm/swap_state.c:332
__tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline]
tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]
tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373
zap_pte_range mm/memory.c:1714 [inline]
zap_pmd_range mm/memory.c:1753 [inline]
zap_pud_range mm/memory.c:1782 [inline]
zap_p4d_range mm/memory.c:1803 [inline]
unmap_page_range+0x3770/0x4040 mm/memory.c:1824
unmap_vmas+0x3cc/0x5f0 mm/memory.c:1914
exit_mmap+0x275/0xc20 mm/mmap.c:1668
__mmput+0x115/0x3c0 kernel/fork.c:1353
exit_mm+0x220/0x310 kernel/exit.c:570
do_exit+0x9b2/0x28e0 kernel/exit.c:925
do_group_exit+0x207/0x2c0 kernel/exit.c:1087
get_signal+0x16b2/0x1750 kernel/signal.c:3017
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6e02985d29
Code: Unable to access opcode bytes at 0x7f6e02985cff.
RSP: 002b:00007f6e0381f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffed RBX: 00007f6e02b75fa0 RCX: 00007f6e02985d29
RDX: 0000000020001440 RSI: 00000000000089f0 RDI: 0000000000000004
RBP: 00007f6e02a01b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f6e02b75fa0 R15: 00007ffd12ac3498
sched: DL replenish lagged too much