------------[ cut here ]------------
WARNING: CPU: 1 PID: 8782 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:993
Modules linked in:
CPU: 1 PID: 8782 Comm: syz.1.742 Not tainted 6.6.95-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 kernel/rcu/tree_stall.h:1001
Code: ff ff ff 48 c7 c7 a0 e4 ee 96 be 04 00 00 00 e8 5a 21 6e 00 48 89 df b8 01 00 00 00 87 05 cc be 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 4f d3 8c 74 47 48 c7 c0 dc b2 4a 8e 48 c1 e8 03
RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffffff8cd34fc0 RCX: ffffffff817025c6
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd34fc0
RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff2dddc94 R12: 0000000000002904
R13: 1ffff110171e7a6a R14: 0000000000000a02 R15: dffffc0000000000
FS:  00007fcc65e726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c427fb5 CR3: 0000000067fd0000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_core+0x612/0x1720 kernel/rcu/tree.c:2462
 handle_softirqs+0x280/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline]
RIP: 0010:static_key_false include/linux/jump_label.h:207 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:147 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:254 [inline]
RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:196
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 97 76 19 03 0f 1f 80 00 00 00
RSP: 0018:ffffc90003977cd8 EFLAGS: 00000246
RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
RBP: 0000000000000000 R08: ffffc90003977c47 R09: 1ffff9200072ef88
R10: dffffc0000000000 R11: fffff5200072ef89 R12: ffff8880b8f35201
R13: dffffc0000000000 R14: ffff8880b8f35290 R15: 0000000000000020
 __apic_send_IPI_self arch/x86/include/asm/apic.h:454 [inline]
 arch_irq_work_raise+0x68/0x70 arch/x86/kernel/irq_work.c:31
 irq_work_queue+0x99/0x140 kernel/irq_work.c:124
 bpf_send_signal_common+0x2b6/0x420 kernel/trace/bpf_trace.c:875
 ____bpf_send_signal kernel/trace/bpf_trace.c:884 [inline]
 bpf_send_signal+0x19/0x20 kernel/trace/bpf_trace.c:882
 bpf_prog_7ba5217f62dcd359+0x40/0x44
 bpf_dispatcher_nop_func include/linux/bpf.h:1213 [inline]
 __bpf_prog_run include/linux/filter.h:612 [inline]
 bpf_prog_run include/linux/filter.h:619 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2322 [inline]
 bpf_trace_run2+0x1d1/0x3c0 kernel/trace/bpf_trace.c:2361
 trace_sys_enter+0x69/0x80 include/trace/events/syscalls.h:18
 syscall_trace_enter+0xf0/0x150 kernel/entry/common.c:81
 do_syscall_64+0x28/0xb0 arch/x86/entry/common.c:77
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fcc64f2ab19
Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
RSP: 002b:00007fcc65e71b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
RAX: ffffffffffffffda RBX: 00007fcc651b5fa8 RCX: 00007fcc64f2ab19
RDX: 00007fcc65e71b40 RSI: 00007fcc65e71c70 RDI: 0000000000000011
RBP: 00007fcc651b5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc651b5fac
R13: 0000000000000000 R14: 00007ffc32cb5240 R15: 00007ffc32cb5328
 </TASK>
----------------
Code disassembly (best guess):
   0:	74 2a                	je     0x2c
   2:	83 ff 30             	cmp    $0x30,%edi
   5:	74 25                	je     0x2c
   7:	eb 10                	jmp    0x19
   9:	81 ff d0 00 00 00    	cmp    $0xd0,%edi
   f:	74 1b                	je     0x2c
  11:	81 ff e0 00 00 00    	cmp    $0xe0,%edi
  17:	74 13                	je     0x2c
  19:	c1 ef 04             	shr    $0x4,%edi
  1c:	81 c7 00 08 00 00    	add    $0x800,%edi
  22:	89 f9                	mov    %edi,%ecx
  24:	89 f0                	mov    %esi,%eax
  26:	31 d2                	xor    %edx,%edx
  28:	0f 30                	wrmsr
* 2a:	66 90                	xchg   %ax,%ax <-- trapping instruction
  2c:	c3                   	ret
  2d:	f3 0f 1e fa          	endbr64
  31:	89 f6                	mov    %esi,%esi
  33:	31 d2                	xor    %edx,%edx
  35:	e9 97 76 19 03       	jmp    0x31976d1
  3a:	0f                   	.byte 0xf
  3b:	1f                   	(bad)
  3c:	80 00 00             	addb   $0x0,(%rax)