rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2636 jiffies s: 5205 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4574 Comm: syz.5.16 Tainted: G        W          6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline]
RIP: 0010:static_key_false include/linux/jump_label.h:207 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:147 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:254 [inline]
RIP: 0010:native_apic_msr_write+0x35/0x50 arch/x86/include/asm/apic.h:206
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 af 8d 34 03 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc90000006ba0 EFLAGS: 00000046
RAX: 000000000000007f RBX: ffffffff8cda5a30 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000838
RBP: 000000000000007f R08: ffffffff817ce0ad R09: fffffbfff1d3608e
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b8e271c0
R13: dffffc0000000000 R14: 000000000000007f R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d615ff8 CR3: 000000002474e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 apic_write arch/x86/include/asm/apic.h:394 [inline]
 lapic_next_event+0x5b/0x70 arch/x86/kernel/apic/apic.c:478
 clockevents_program_event+0x1c5/0x310 kernel/time/clockevents.c:334
 hrtimer_interrupt+0x546/0x980 kernel/time/hrtimer.c:1828
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x158/0x5b0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:unwind_next_frame+0xdb/0x2220 arch/x86/kernel/unwind_orc.c:436
Code: 21 00 48 89 1c 24 48 83 c3 50 48 89 d8 48 c1 e8 03 48 89 44 24 40 42 80 3c 30 00 74 08 48 89 df e8 1a 51 a5 00 48 89 5c 24 20 <48> 8b 1b 48 85 db 74 2f 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03
RSP: 0018:ffffc90000006e00 EFLAGS: 00000246
RAX: 1ffff92000000df2 RBX: ffffc90000006f90 RCX: ffffffff97355103
RDX: dffffc0000000000 RSI: ffffffff8cc7c30a RDI: 0000000000000001
RBP: 1ffff92000000de8 R08: dffffc0000000000 R09: ffffc90000006f40
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000000dea
R13: ffffc90000006f50 R14: dffffc0000000000 R15: ffffffff813cfa3f
 __unwind_start+0x59d/0x720 arch/x86/kernel/unwind_orc.c:717
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xdb/0x140 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:45 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:52
 kasan_save_free_info+0x27/0x40 mm/kasan/generic.c:516
 ____kasan_slab_free+0xd6/0x120 mm/kasan/common.c:236
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1724 [inline]
 slab_free_freelist_hook mm/slub.c:1750 [inline]
 slab_free mm/slub.c:3661 [inline]
 __kmem_cache_free+0x25c/0x3c0 mm/slub.c:3674
 skb_free_head net/core/skbuff.c:762 [inline]
 skb_release_data+0x5de/0x7a0 net/core/skbuff.c:791
 skb_release_all net/core/skbuff.c:856 [inline]
 __kfree_skb net/core/skbuff.c:870 [inline]
 consume_skb+0xa3/0x140 net/core/skbuff.c:1035
 netlink_broadcast+0xf8b/0x10b0 net/netlink/af_netlink.c:1508
 nlmsg_multicast include/net/netlink.h:1071 [inline]
 nlmsg_notify+0xfb/0x1c0 net/netlink/af_netlink.c:2536
 neigh_cleanup_and_release+0xcc/0x300 net/core/neighbour.c:101
 neigh_del net/core/neighbour.c:225 [inline]
 neigh_remove_one+0x5c6/0x6d0 net/core/neighbour.c:246
 neigh_forced_gc net/core/neighbour.c:279 [inline]
 neigh_alloc net/core/neighbour.c:485 [inline]
 ___neigh_create+0x459/0x24b0 net/core/neighbour.c:648
 ip6_finish_output2+0x15ae/0x15f0 net/ipv6/ip6_output.c:129
 __ip6_finish_output net/ipv6/ip6_output.c:205 [inline]
 ip6_finish_output+0x6a0/0xa80 net/ipv6/ip6_output.c:216
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0xbab/0x14e0 net/ipv6/ndisc.c:511
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3982
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1504
 expire_timers kernel/time/timer.c:1549 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1820
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1833
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__mod_lruvec_page_state+0x1/0x420 mm/memcontrol.c:826
Code: 89 df 44 89 fe 44 89 f2 5b 41 5e 41 5f 5d e9 e6 fc ff ff 5b 41 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 10 89 54 24 04 41 89 f6 48 89
RSP: 0018:ffffc900035972b0 EFLAGS: 00000297
RAX: ffffffff81d34eca RBX: 0000000000000001 RCX: ffff888026ea9dc0
RDX: 00000000ffffffff RSI: 0000000000000012 RDI: ffffea00014eda40
RBP: 00000000ffffffff R08: ffffffff81d34ec0 R09: fffff9400029db4f
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffea00014eda40
R13: 0000000000000000 R14: 1ffffd400029db49 R15: ffff88802f71a0d8
 page_remove_rmap+0x779/0xed0
 zap_pte_range mm/memory.c:1453 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x1217/0x2740 mm/memory.c:1645
 unmap_vmas+0x48b/0x640 mm/memory.c:1730
 exit_mmap+0x249/0x980 mm/mmap.c:3238
 __mmput+0x115/0x3c0 kernel/fork.c:1200
 exit_mm+0x226/0x300 kernel/exit.c:565
 do_exit+0x9f6/0x26a0 kernel/exit.c:858
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0994185d29
Code: Unable to access opcode bytes at 0x7f0994185cff.
RSP: 002b:00007f0994f1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: 000000000000000d RBX: 00007f0994375fa0 RCX: 00007f0994185d29
RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005
RBP: 00007f0994201aa8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f0994375fa0 R15: 00007ffdb60351f8
 </TASK>