============================= WARNING: suspicious RCU usage 6.9.0-rc4-next-20240418-syzkaller #0 Not tainted ----------------------------- kernel/rcu/tree.c:276 Illegal rcu_softirq_qs() in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by ksoftirqd/1/24: #0: ffffffff8e333ae0 (rcu_read_lock_sched){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e333ae0 (rcu_read_lock_sched){....}-{1:2}, at: rcu_read_lock_sched include/linux/rcupdate.h:933 [inline] #0: ffffffff8e333ae0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid include/linux/mmzone.h:2022 [inline] #0: ffffffff8e333ae0 (rcu_read_lock_sched){....}-{1:2}, at: __virt_addr_valid+0x183/0x520 arch/x86/mm/physaddr.c:65 stack backtrace: CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.9.0-rc4-next-20240418-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 rcu_softirq_qs+0xd9/0x370 kernel/rcu/tree.c:273 __do_softirq+0x5fd/0x980 kernel/softirq.c:568 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pfn_valid include/linux/mmzone.h:2023 [inline] RIP: 0010:__virt_addr_valid+0x23b/0x520 arch/x86/mm/physaddr.c:65 Code: 00 48 c7 c2 20 62 c8 8b e8 32 d2 30 00 4d 85 ff 74 36 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 28 6d b9 00 49 8b 1f <48> 89 de 48 83 e6 02 31 ff e8 67 21 54 00 48 89 d8 48 83 e0 02 75 RSP: 0018:ffffc900001e7a58 EFLAGS: 00000246 RAX: 1ffff11027fff23c RBX: ffffea000000000f RCX: ffff888017af0000 RDX: 0000000000000000 RSI: ffffffff8c1f8ba0 RDI: ffffffff8c1f8b60 RBP: dffffc0000000000 R08: ffffffff81424074 R09: 1ffffffff25ef6b4 R10: dffffc0000000000 R11: fffffbfff25ef6b5 R12: 000000007973b578 R13: 1ffff9200003cf64 R14: ffffffff81424043 R15: ffff88813fff91e0 kasan_addr_to_slab+0xd/0x80 mm/kasan/common.c:37 __kasan_record_aux_stack+0x11/0xc0 mm/kasan/generic.c:526 __call_rcu_common kernel/rcu/tree.c:3102 [inline] call_rcu+0x167/0xa70 kernel/rcu/tree.c:3206 context_switch kernel/sched/core.c:5411 [inline] __schedule+0x17f0/0x4a50 kernel/sched/core.c:6745 __schedule_loop kernel/sched/core.c:6822 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6837 smpboot_thread_fn+0x61e/0xa30 kernel/smpboot.c:160 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ---------------- Code disassembly (best guess): 0: 00 48 c7 add %cl,-0x39(%rax) 3: c2 20 62 ret $0x6220 6: c8 8b e8 32 enter $0xe88b,$0x32 a: d2 30 shlb %cl,(%rax) c: 00 4d 85 add %cl,-0x7b(%rbp) f: ff 74 36 4c push 0x4c(%rsi,%rsi,1) 13: 89 f8 mov %edi,%eax 15: 48 c1 e8 03 shr $0x3,%rax 19: 80 3c 28 00 cmpb $0x0,(%rax,%rbp,1) 1d: 74 08 je 0x27 1f: 4c 89 ff mov %r15,%rdi 22: e8 28 6d b9 00 call 0xb96d4f 27: 49 8b 1f mov (%r15),%rbx * 2a: 48 89 de mov %rbx,%rsi <-- trapping instruction 2d: 48 83 e6 02 and $0x2,%rsi 31: 31 ff xor %edi,%edi 33: e8 67 21 54 00 call 0x54219f 38: 48 89 d8 mov %rbx,%rax 3b: 48 83 e0 02 and $0x2,%rax 3f: 75 .byte 0x75