------------[ cut here ]------------
WARNING: CPU: 1 PID: 5844 at kernel/rcu/tree_stall.h:989 rcu_check_gp_start_stall+0x2cf/0x460 kernel/rcu/tree_stall.h:989
Modules linked in:
CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-g6ccf6adb05d0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:rcu_check_gp_start_stall+0x2cf/0x460 kernel/rcu/tree_stall.h:989
Code: c7 80 1a 69 9a be 04 00 00 00 e8 cc 44 81 00 b8 01 00 00 00 87 05 21 68 c1 18 85 c0 0f 85 1a ff ff ff 48 c7 c0 c0 dc b3 8e 90 <0f> 0b 90 49 39 c7 74 47 48 c7 c0 10 1c 3d 90 48 c1 e8 03 42 0f b6
RSP: 0018:ffffc90000a18bb8 EFLAGS: 00010046
RAX: ffffffff8eb3dcc0 RBX: 00000000ffffe1c7 RCX: ffffffff81a7b254
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9a691a80
RBP: ffffc90000a18e10 R08: 0000000000000003 R09: fffffbfff34d2350
R10: dffffc0000000000 R11: fffffbfff34d2350 R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8eb3dcc0
FS: 000055556d8f5500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000f000 CR3: 0000000060ac6000 CR4: 00000000003526f0
DR0: fff8000000000000 DR1: 0000000000000000 DR2: 0000200000000300
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
rcu_core+0x650/0x17a0 kernel/rcu/tree.c:2797
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline]
sysvec_irq_work+0xa3/0xc0 arch/x86/kernel/irq_work.c:17
asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738
RIP: 0010:rcu_read_unlock_special+0x88/0x570 kernel/rcu/tree_plugin.h:694
Code: f1 f1 f1 00 f2 f2 f2 49 89 04 14 66 41 c7 44 14 09 f3 f3 41 c6 44 14 0b f3 65 44 8b 3d 49 f0 5b 7e 41 f7 c7 00 00 f0 00 74 49 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 22 00 00 00 00 66 42 c7 44 22
RSP: 0018:ffffc9000408f880 EFLAGS: 00000206
RAX: b9942b4a881a3200 RBX: 1ffff92000811f18 RCX: ffffffff819d265a
RDX: dffffc0000000000 RSI: ffffffff8c2aa440 RDI: ffffffff8c80ee80
RBP: ffffc9000408f958 R08: ffffffff94547877 R09: 1ffffffff28a8f0e
R10: dffffc0000000000 R11: fffffbfff28a8f0f R12: 1ffff92000811f14
R13: ffff88803563de60 R14: ffffc9000408f8c0 R15: ffffffff8eb3dd00
__rcu_read_unlock+0xa1/0x110 kernel/rcu/tree_plugin.h:438
rcu_read_unlock include/linux/rcupdate.h:882 [inline]
trace_call_bpf+0x607/0x8a0 kernel/trace/bpf_trace.c:148
perf_trace_run_bpf_submit+0x82/0x180 kernel/events/core.c:10509
do_perf_trace_lock include/trace/events/lock.h:50 [inline]
perf_trace_lock+0x388/0x490 include/trace/events/lock.h:50
__do_trace_lock_release include/trace/events/lock.h:69 [inline]
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0x9cc/0xa30 kernel/locking/lockdep.c:5862
_inline_copy_from_user include/linux/uaccess.h:162 [inline]
_copy_from_user+0x28/0xb0 lib/usercopy.c:18
copy_from_user include/linux/uaccess.h:212 [inline]
get_timespec64+0x97/0x280 kernel/time/time.c:877
__do_sys_clock_nanosleep kernel/time/posix-timers.c:1391 [inline]
__se_sys_clock_nanosleep+0x1a5/0x3c0 kernel/time/posix-timers.c:1379
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f13e07bfa25
Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
RSP: 002b:00007ffeaa79d7e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 0000000000000076 RCX: 00007f13e07bfa25
RDX: 00007ffeaa79d820 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffeaa79d88c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
R13: 00000000000927c0 R14: 000000000001d106 R15: 00007ffeaa79d8e0
----------------
Code disassembly (best guess):
0: f1 int1
1: f1 int1
2: f1 int1
3: 00 f2 add %dh,%dl
5: f2 f2 49 89 04 14 repnz repnz mov %rax,(%r12,%rdx,1)
b: 66 41 c7 44 14 09 f3 movw $0xf3f3,0x9(%r12,%rdx,1)
12: f3
13: 41 c6 44 14 0b f3 movb $0xf3,0xb(%r12,%rdx,1)
19: 65 44 8b 3d 49 f0 5b mov %gs:0x7e5bf049(%rip),%r15d # 0x7e5bf06a
20: 7e
21: 41 f7 c7 00 00 f0 00 test $0xf00000,%r15d
28: 74 49 je 0x73
* 2a: 48 c7 44 24 20 0e 36 movq $0x45e0360e,0x20(%rsp) <-- trapping instruction
31: e0 45
33: 4a c7 04 22 00 00 00 movq $0x0,(%rdx,%r12,1)
3a: 00
3b: 66 data16
3c: 42 rex.X
3d: c7 .byte 0xc7
3e: 44 rex.R
3f: 22 .byte 0x22