rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P3765 1-.... } 2818 jiffies s: 1429 root: 0x2/T
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3744 Comm: syz.3.8 Not tainted 6.1.107-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:match_held_lock+0x0/0xb0 kernel/locking/lockdep.c:5107
Code: dd 9e f3 03 00 75 cf 48 c7 c7 00 01 0c 8b 48 c7 c6 40 01 0c 8b e8 20 31 ac f6 0f 0b eb b6 e8 e7 fa ff ff 0f 1f 80 00 00 00 00 <55> 53 bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10
RSP: 0018:ffffc900001e00d0 EFLAGS: 00000083
RAX: 0000000000000005 RBX: 0000000000000001 RCX: ffff88807cb2bb80
RDX: ffff88807cb2bb80 RSI: ffff8880b8f2a4d8 RDI: ffff88807cb2c688
RBP: ffff88807cb2c688 R08: ffffffff8179dbe1 R09: fffffbfff1d33b4e
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000046
R13: ffff88807cb2bb80 R14: 00000000ffffffff R15: ffff8880b8f2a4d8
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd68426e243 CR3: 000000000d08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __lock_is_held kernel/locking/lockdep.c:5403 [inline]
 lock_is_held_type+0xa4/0x180 kernel/locking/lockdep.c:5705
 lock_is_held include/linux/lockdep.h:283 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1655 [inline]
 __hrtimer_run_queues+0x307/0xe50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:kfence_guarded_alloc+0x862/0xe40 mm/kfence/core.c:438
Code: aa 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 12 41 88 1f 49 ff c7 4d 39 f7 73 22 e8 be 4e a8 ff <eb> cc 44 89 f9 80 e1 07 38 c1 7c e4 4c 89 ff e8 1a ce ff ff eb da
RSP: 0018:ffffc900001e0480 EFLAGS: 00000246
RAX: ffffffff81e25fb2 RBX: 000000003bdb09a9 RCX: ffff88807cb2bb80
RDX: 0000000000000100 RSI: ffff88823bdb1000 RDI: ffff88823bdb00f0
RBP: ffffc900001e0590 R08: ffffffff81e25f71 R09: fffff940011ded81
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200003c09c
R13: ffff88801a259000 R14: ffff88823bdb1000 R15: ffff88823bdb09d4
 __kfence_alloc+0x340/0x370 mm/kfence/core.c:1048
 kfence_alloc include/linux/kfence.h:128 [inline]
 slab_alloc_node mm/slub.c:3322 [inline]
 kmem_cache_alloc_node+0x29f/0x310 mm/slub.c:3443
 __alloc_skb+0xde/0x670 net/core/skbuff.c:505
 __netdev_alloc_skb+0xfb/0x500 net/core/skbuff.c:579
 netdev_alloc_skb include/linux/skbuff.h:3206 [inline]
 dev_alloc_skb include/linux/skbuff.h:3219 [inline]
 hsr_init_skb+0xd5/0x4f0 net/hsr/hsr_device.c:246
 send_hsr_supervision_frame+0x13f/0xad0 net/hsr/hsr_device.c:289
 hsr_announce+0x1a4/0x340 net/hsr/hsr_device.c:379
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1504
 expire_timers kernel/time/timer.c:1549 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1820
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1833
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:check_kcov_mode kernel/kcov.c:193 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_cmp4+0x30/0x80 kernel/kcov.c:287
Code: 8b 15 64 bf 77 7e 65 8b 05 65 bf 77 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1
RSP: 0018:ffffc9000463f2f8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: dffffc0000000000
RDX: ffff88807cb2bb80 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 0000000000000002 R08: ffffffff81cbd2c8 R09: ffffed100faeef85
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 800000006143a007 R14: 0000000000000ce4 R15: ffffc9000463f4e0
 cpu_max_bits_warn include/linux/cpumask.h:110 [inline]
 cpumask_check include/linux/cpumask.h:117 [inline]
 cpumask_test_cpu include/linux/cpumask.h:444 [inline]
 cpu_online include/linux/cpumask.h:1030 [inline]
 trace_rss_stat include/trace/events/kmem.h:346 [inline]
 mm_trace_rss_stat+0x58/0x280 mm/memory.c:167
 add_mm_counter include/linux/mm.h:2105 [inline]
 add_mm_rss_vec+0xae/0x260 mm/memory.c:509
 zap_pte_range mm/memory.c:1509 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x2144/0x2740 mm/memory.c:1645
 unmap_vmas+0x48b/0x640 mm/memory.c:1730
 exit_mmap+0x252/0x9f0 mm/mmap.c:3227
 __mmput+0x115/0x3c0 kernel/fork.c:1199
 exit_mm+0x226/0x300 kernel/exit.c:565
 do_exit+0x9f6/0x26a0 kernel/exit.c:858
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2870
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:316
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0033:0x7fe06af7ceb9
Code: Unable to access opcode bytes at 0x7fe06af7ce8f.
RSP: 002b:00007fe06adff038 EFLAGS: 00000246
RAX: 0000000000000008 RBX: 00007fe06b135f80 RCX: 00007fe06af7ceb9
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000100
RBP: 00007fe06afeefbe R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fe06b135f80 R15: 00007ffef2742208
 </TASK>