rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P4641 1-.... } 2635 jiffies s: 1617 root: 0x2/T rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4640 Comm: syz.0.72 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:check_region_inline mm/kasan/generic.c:169 [inline] RIP: 0010:kasan_check_range+0xc/0x290 mm/kasan/generic.c:189 Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 RSP: 0018:ffffc90005f567f0 EFLAGS: 00000002 RAX: 0000000000000001 RBX: 1ffff92000bead08 RCX: ffffffff816d40ba RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88802cfa9e00 RBP: ffffc90005f56900 R08: dffffc0000000000 R09: 1ffffffff215fe48 R10: dffffc0000000000 R11: fffffbfff215fe49 R12: 0000000000000046 R13: 0000000000000000 R14: ffff8880b8f3b900 R15: ffff88802cfa9e00 FS: 00007f57fd7096c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564ed9c25350 CR3: 00000000255f0000 CR4: 00000000003506e0 DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: instrument_atomic_write include/linux/instrumented.h:87 [inline] set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline] set_ti_thread_flag include/linux/thread_info.h:89 [inline] set_tsk_thread_flag include/linux/sched.h:2026 [inline] set_tsk_need_resched include/linux/sched.h:2057 [inline] rcu_read_unlock_special+0x26a/0x510 kernel/rcu/tree_plugin.h:664 __rcu_read_unlock+0x78/0xd0 kernel/rcu/tree_plugin.h:426 rcu_read_unlock include/linux/rcupdate.h:823 [inline] trace_call_bpf+0x5bb/0x6b0 kernel/trace/bpf_trace.c:137 perf_trace_run_bpf_submit+0x79/0x1c0 kernel/events/core.c:10027 perf_trace_preemptirq_template+0x268/0x320 include/trace/events/preemptirq.h:14 trace_irq_enable_rcuidle+0xd3/0x140 include/trace/events/preemptirq.h:40 trace_hardirqs_on+0x24/0x40 kernel/trace/trace_preemptirq.c:44 asm_sysvec_irq_work+0x16/0x20 arch/x86/include/asm/idtentry.h:728 RIP: 0010:preempt_schedule_irq+0xb6/0x160 kernel/sched/core.c:6874 Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 c5 f6 20 f7 e8 40 ee 50 f7 fb bf 01 00 00 00 75 b9 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f RSP: 0018:ffffc90005f56c60 EFLAGS: 00000286 RAX: 5896b649a16ce800 RBX: 0000000000000000 RCX: 5896b649a16ce800 RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: 0000000000000001 RBP: ffffc90005f56d10 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000bead8c irqentry_exit+0x63/0x70 kernel/entry/common.c:439 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:212 Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 80 b0 9d 0c 48 89 de 5b e9 c7 3e 50 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 94 f3 7f 7e 65 8b 15 95 f3 7f 7e 81 e2 00 RSP: 0018:ffffc90005f56dd8 EFLAGS: 00000246 RAX: ffffffff813a12cf RBX: 0000000000000000 RCX: 0000000000000002 RDX: ffff88802cfa9e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d R10: dffffc0000000000 R11: fffffbfff1c4053e R12: dffffc0000000000 R13: 0000000000000008 R14: ffffffff813a1008 R15: ffff88813fff91e0 rcu_read_unlock_sched include/linux/rcupdate.h:906 [inline] pfn_valid include/linux/mmzone.h:1867 [inline] __virt_addr_valid+0x4e2/0x540 arch/x86/mm/physaddr.c:65 check_heap_object mm/usercopy.c:188 [inline] __check_object_size+0x109/0xa40 mm/usercopy.c:250 check_object_size include/linux/thread_info.h:199 [inline] check_copy_size include/linux/thread_info.h:235 [inline] copy_to_user include/linux/uaccess.h:168 [inline] bpf_verifier_vlog+0x164/0x390 kernel/bpf/log.c:34 verbose+0x1f2/0x2b0 kernel/bpf/verifier.c:303 print_liveness kernel/bpf/verifier.c:544 [inline] print_verifier_state+0x1f9/0x1fd0 kernel/bpf/verifier.c:794 do_check kernel/bpf/verifier.c:12501 [inline] do_check_common+0x5597/0xc6d0 kernel/bpf/verifier.c:14943 do_check_main kernel/bpf/verifier.c:15006 [inline] bpf_check+0xb08f/0x10db0 kernel/bpf/verifier.c:15583 bpf_prog_load+0x101a/0x1560 kernel/bpf/syscall.c:2651 __sys_bpf+0x5b8/0x780 kernel/bpf/syscall.c:5031 __do_sys_bpf kernel/bpf/syscall.c:5135 [inline] __se_sys_bpf kernel/bpf/syscall.c:5133 [inline] __x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:5133 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f57fc79ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f57fd709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007f57fca15fa0 RCX: 00007f57fc79ce59 RDX: 000000000000004a RSI: 0000200000000400 RDI: 0000000000000005 RBP: 00007f57fc832d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f57fca16038 R14: 00007f57fca15fa0 R15: 00007ffc72f166a8