rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2670 jiffies s: 29609 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 7999 Comm: syz.0.910 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__kasan_check_read+0x6/0x10 mm/kasan/shadow.c:31
Code: 41 5f 5d c3 48 c7 c7 fa c5 39 8c eb 0a 48 c7 c7 ec 2d 23 8c 48 89 de e8 68 53 34 08 31 ed eb d7 00 00 cc cc 89 f6 48 8b 0c 24 <31> d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9
RSP: 0018:ffffc90004e1ebf8 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 000000000000002c RCX: ffffffff81631812
RDX: 00000000968d2a5a RSI: 0000000000000008 RDI: ffffffff908c8240
RBP: ffffc90004e1ee50 R08: dffffc0000000000 R09: fffffbfff2119049
R10: fffffbfff2119049 R11: 1ffffffff2119048 R12: 00000000e55f941a
R13: 0000000096e58b3a R14: 000000007ef67db9 R15: ffff8880766e6410
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff7dc1156c0 CR3: 000000000c68e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class kernel/locking/lockdep.c:228 [inline]
 __lock_acquire+0x10b2/0x7c50 kernel/locking/lockdep.c:5045
 lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5662
 rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 rcu_read_lock include/linux/rcupdate.h:791 [inline]
 trace_call_bpf+0xe0/0x680 kernel/trace/bpf_trace.c:134
 perf_trace_run_bpf_submit+0x79/0x1c0 kernel/events/core.c:9997
 perf_trace_preemptirq_template+0x287/0x330 include/trace/events/preemptirq.h:14
 trace_irq_enable_rcuidle+0xd3/0x140 include/trace/events/preemptirq.h:40
 trace_hardirqs_on+0x24/0x40 kernel/trace/trace_preemptirq.c:44
 asm_sysvec_irq_work+0x16/0x20 arch/x86/include/asm/idtentry.h:728
RIP: 0010:rcu_read_unlock_special+0x84/0x500 kernel/rcu/tree_plugin.h:685
Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 fd 86 96 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
RSP: 0018:ffffc90004e1f2c0 EFLAGS: 00000206
RAX: 65d3ddad93ad6a00 RBX: 1ffff920009c3e60 RCX: 65d3ddad93ad6a00
RDX: dffffc0000000000 RSI: ffffffff8a6c0600 RDI: ffffffff8abef920
RBP: ffffc90004e1f3b8 R08: dffffc0000000000 R09: fffffbfff2119049
R10: fffffbfff2119049 R11: 1ffffffff2119048 R12: 0000000000000246
R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001
 __rcu_read_unlock+0x78/0xd0 kernel/rcu/tree_plugin.h:426
 rcu_read_unlock include/linux/rcupdate.h:823 [inline]
 __folio_memcg_unlock+0xea/0x110 mm/memcontrol.c:2151
 page_remove_rmap+0x7e3/0xea0 mm/rmap.c:1462
 zap_pte_range mm/memory.c:1453 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x1149/0x2500 mm/memory.c:1645
 unmap_vmas+0x22c/0x330 mm/memory.c:1730
 exit_mmap+0x1cc/0x8e0 mm/mmap.c:3250
 __mmput+0x118/0x3c0 kernel/fork.c:1200
 exit_mm+0x1e6/0x2c0 kernel/exit.c:565
 do_exit+0x8c1/0x2400 kernel/exit.c:867
 do_group_exit+0x217/0x2d0 kernel/exit.c:1022
 get_signal+0x1272/0x1350 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb7/0x1240 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe0de38f749
Code: Unable to access opcode bytes at 0x7fe0de38f71f.
RSP: 002b:00007fe0df1e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fe0de5e5fa8 RCX: 00007fe0de38f749
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe0de5e5fa8
RBP: 00007fe0de5e5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe0de5e6038 R14: 00007ffc3e74c450 R15: 00007ffc3e74c538
 </TASK>