rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (1 GPs behind) idle=f944/1/0x4000000000000000 softirq=21467/21468 fqs=5249
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:   989919          0            0
rcu: 	cputime:    24186      28313           91   ==> 52500(ms)
rcu: 	(t=10501 jiffies g=12509 q=2771 ncpus=2)
CPU: 0 UID: 0 PID: 7649 Comm: syz.1.556 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:format_decode+0x571/0xe30
Code: 0f b6 04 10 84 c0 0f 85 8b 04 00 00 41 0f b6 5d 00 31 ff 89 de e8 5f 70 55 f6 85 db 74 62 4c 89 7c 24 10 4d 8d 7d 03 4c 89 f8 <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85
RSP: 0018:ffffc90000007050 EFLAGS: 00000202
RAX: ffffffff8cb9df37 RBX: 0000000000000001 RCX: 0000000000000100
RDX: ffff88811aadd640 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff8b8b8943 R08: ffff88811aadd640 R09: 0000000000000002
R10: 0000000000000025 R11: 0000000000000100 R12: ffffffff8b8b8944
R13: ffffffff8cb9df34 R14: 0000000000000000 R15: ffffffff8cb9df37
FS:  00007f93873256c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9387324fc8 CR3: 000000011c58a000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 vsnprintf+0x102/0xf00
 sprintf+0xd9/0x120
 info_print_prefix+0x155/0x310
 record_print_text+0x154/0x430
 printk_get_next_message+0x26d/0x7b0
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
Code: 74 05 e8 cb 9e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 cd 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc900097bf340 EFLAGS: 00000206
RAX: 6c7e529a8512e000 RBX: 0000000000000a02 RCX: 6c7e529a8512e000
RDX: 0000000000000000 RSI: ffffffff8d998836 RDI: 0000000000000001
RBP: ffffc900097bf3c0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: ffff88803a990000 R14: ffffffff99c9b370 R15: 1ffff920012f7e68
 debug_check_no_obj_freed+0x451/0x470
 __free_frozen_pages+0x509/0xe70
 __folio_put+0x21b/0x2c0
 free_large_kmalloc+0x145/0x200
 bpf_check+0x16552/0x1d2e0
 bpf_prog_load+0x1318/0x1930
 __sys_bpf+0x528/0x870
 __x64_sys_bpf+0x7c/0x90
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f938658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9387325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f93867b6080 RCX: 00007f938658e9a9
RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
RBP: 00007f9386610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f93867b6080 R15: 00007ffde6e10468
 </TASK>
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7649 Comm: syz.1.556 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:native_apic_msr_write+0x39/0x50
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
RSP: 0018:ffffc90000006ac8 EFLAGS: 00000046
RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
RBP: ffffc90000006b98 R08: ffffc90000006b27 R09: 1ffff92000000d64
R10: dffffc0000000000 R11: fffff52000000d65 R12: ffff88804b03af01
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804b0314f0
FS:  00007f93873256c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9387324fc8 CR3: 000000011c58a000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 arch_irq_work_raise+0x6d/0x80
 __irq_work_queue_local+0x1d7/0x550
 irq_work_queue_on+0x122/0x230
 rcu_read_unlock_special+0x3ab/0x4c0
 __rcu_read_unlock+0x84/0xe0
 trace_call_bpf+0x5ae/0x850
 perf_trace_run_bpf_submit+0x78/0x170
 perf_trace_preemptirq_template+0x280/0x340
 trace_irq_disable+0xee/0x110
 irqentry_enter+0x3d/0x60
 sysvec_apic_timer_interrupt+0xe/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:format_decode+0x619/0xe30
Code: ba 00 00 00 00 00 fc ff df 49 83 c5 02 4c 89 e8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 4d 05 00 00 41 0f b6 6d 00 4c 8b 7c 24 08 <4c> 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 55 05 00 00 41 08 2f
RSP: 0018:ffffc90000007050 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88811aadd640
RDX: dffffc0000000000 RSI: 000000000000000a RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff88811aadd640 R09: 0000000000000002
R10: 0000000000000025 R11: 0000000000000100 R12: ffffffff8b8b8944
R13: ffffffff8cb9df36 R14: 0000000000000000 R15: ffffc900000070f8
 vsnprintf+0x102/0xf00
 sprintf+0xd9/0x120
 info_print_prefix+0x155/0x310
 record_print_text+0x154/0x430
 printk_get_next_message+0x26d/0x7b0
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
Code: 74 05 e8 cb 9e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 cd 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc900097bf340 EFLAGS: 00000206
RAX: 6c7e529a8512e000 RBX: 0000000000000a02 RCX: 6c7e529a8512e000
RDX: 0000000000000000 RSI: ffffffff8d998836 RDI: 0000000000000001
RBP: ffffc900097bf3c0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: ffff88803a990000 R14: ffffffff99c9b370 R15: 1ffff920012f7e68
 debug_check_no_obj_freed+0x451/0x470
 __free_frozen_pages+0x509/0xe70
 __folio_put+0x21b/0x2c0
 free_large_kmalloc+0x145/0x200
 bpf_check+0x16552/0x1d2e0
 bpf_prog_load+0x1318/0x1930
 __sys_bpf+0x528/0x870
 __x64_sys_bpf+0x7c/0x90
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f938658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9387325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f93867b6080 RCX: 00007f938658e9a9
RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
RBP: 00007f9386610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f93867b6080 R15: 00007ffde6e10468
 </TASK>
watchdog: BUG: soft lockup - CPU#0 stuck for 266s! [syz.1.556:7649]
Modules linked in:
irq event stamp: 11155581
hardirqs last  enabled at (11155580): [<ffffffff8b6e9424>] irqentry_exit+0x74/0x90
hardirqs last disabled at (11155581): [<ffffffff8b6e7f6e>] sysvec_apic_timer_interrupt+0xe/0xc0
softirqs last  enabled at (865434): [<ffffffff8185bdba>] __irq_exit_rcu+0xca/0x1f0
softirqs last disabled at (865437): [<ffffffff8185bdba>] __irq_exit_rcu+0xca/0x1f0
CPU: 0 UID: 0 PID: 7649 Comm: syz.1.556 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:vsnprintf+0x125/0xf00
Code: 24 48 e8 0e 0e 00 00 48 89 c5 49 89 d6 41 0f b6 fe 48 c7 c6 20 ed 88 8f e8 38 86 55 f6 41 0f b6 c6 83 f8 03 0f 8f b6 00 00 00 <83> f8 01 0f 8f 40 01 00 00 85 c0 0f 84 05 02 00 00 83 f8 01 0f 85
RSP: 0018:ffffc900000070b0 EFLAGS: 00000293
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001
RDX: ffffffff8b6aa838 RSI: ffffffff8f88ed20 RDI: 0000000000000000
RBP: ffffffff8b8b8941 R08: ffff88811aadd640 R09: 0000000000000008
R10: 0000000000000007 R11: 0000000000000100 R12: ffffc900000071a0
R13: ffffc90000007380 R14: 0000000000000000 R15: ffffffff8b8b8940
FS:  00007f93873256c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9387324fc8 CR3: 000000011c58a000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 sprintf+0xd9/0x120
 info_print_prefix+0x155/0x310
 record_print_text+0x154/0x430
 printk_get_next_message+0x26d/0x7b0
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
Code: 74 05 e8 cb 9e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 cd 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc900097bf340 EFLAGS: 00000206
RAX: 6c7e529a8512e000 RBX: 0000000000000a02 RCX: 6c7e529a8512e000
RDX: 0000000000000000 RSI: ffffffff8d998836 RDI: 0000000000000001
RBP: ffffc900097bf3c0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: ffff88803a990000 R14: ffffffff99c9b370 R15: 1ffff920012f7e68
 debug_check_no_obj_freed+0x451/0x470
 __free_frozen_pages+0x509/0xe70
 __folio_put+0x21b/0x2c0
 free_large_kmalloc+0x145/0x200
 bpf_check+0x16552/0x1d2e0
 bpf_prog_load+0x1318/0x1930
 __sys_bpf+0x528/0x870
 __x64_sys_bpf+0x7c/0x90
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f938658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9387325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f93867b6080 RCX: 00007f938658e9a9
RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005
RBP: 00007f9386610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f93867b6080 R15: 00007ffde6e10468
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:pv_native_safe_halt+0x13/0x20
Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
RAX: a71e0f46fee62700 RBX: ffffffff81976a48 RCX: a71e0f46fee62700
RDX: 0000000000000001 RSI: ffffffff8d998836 RDI: ffffffff8be29f40
RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa1e8f0
R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
FS:  0000000000000000(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bc386b1df8 CR3: 000000002928e000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 default_idle+0x13/0x20
 default_idle_call+0x74/0xb0
 do_idle+0x1e8/0x510
 cpu_startup_entry+0x44/0x60
 start_secondary+0x101/0x110
 common_startup_64+0x13e/0x147
 </TASK>
