rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (1 GPs behind) idle=644c/1/0x4000000000000000 softirq=14044/14050 fqs=4667
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:  1043379          0            0
rcu: 	cputime:    23862      28606           84   ==> 52470(ms)
rcu: 	(t=10500 jiffies g=6765 q=2421 ncpus=2)
CPU: 0 UID: 0 PID: 6133 Comm: syz.2.104 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:kasan_check_range+0x9f/0x2c0
Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
RSP: 0018:ffffc900000072a0 EFLAGS: 00000246
RAX: ffffffff81a12201 RBX: fffffffffffffff4 RCX: ffffffff81a1229f
RDX: 0000000000000000 RSI: 0000000000000066 RDI: ffffffff99af5880
RBP: ffffc90000007430 R08: ffffffff99af58e5 R09: 1ffffffff335eb1c
R10: dffffc0000000000 R11: fffffbfff335eb11 R12: 000000000000000d
R13: ffffffff99af5880 R14: fffffbfff335eb1d R15: 1ffffffff335eb10
FS:  00007fbe9e1306c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3081cff8 CR3: 0000000106bbc000 CR4: 00000000000006f0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 __asan_memmove+0x29/0x70
 record_print_text+0x24f/0x430
 printk_get_next_message+0x26d/0x7b0
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0xb0/0x150
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0018:ffffc9000438fa20 EFLAGS: 00000282
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: 0000000000000006 RSI: ffffffff8d998727 RDI: 0000000000000001
RBP: ffffc9000438fac0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000871f44
 irqentry_exit+0x6f/0x90
 asm_sysvec_call_function_single+0x1a/0x20
RIP: 0010:lock_acquire+0x175/0x360
Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc9000438fb88 EFLAGS: 00000206
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: ffffffff9363c318 RSI: ffffffff8db86408 RDI: ffffffff8be29f80
RBP: ffffffff894c784e R08: 0000000000000100 R09: 00000000e0bbab7a
R10: 0000000025493d32 R11: 0000000000ce8945 R12: 0000000000000000
R13: ffff88810cd82258 R14: 0000000000000001 R15: 0000000000000246
 lock_sock_nested+0x48/0x100
 sk_setsockopt+0xd9e/0x2d30
 do_sock_setsockopt+0x11b/0x1b0
 __x64_sys_setsockopt+0x13f/0x1b0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe9d38eb69
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe9e130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fbe9d5b6080 RCX: 00007fbe9d38eb69
RDX: 0000000000000023 RSI: 0000000000000001 RDI: 000000000000000b
RBP: 00007fbe9d411df1 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fbe9d5b6080 R15: 00007ffe68a847c8
 </TASK>
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 6133 Comm: syz.2.104 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:native_apic_msr_write+0x39/0x50
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 d0 86 03 66
RSP: 0018:ffffc90000006d28 EFLAGS: 00000046
RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f
RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
RBP: ffffc90000006df8 R08: ffffc90000006d87 R09: 1ffff92000000db0
R10: dffffc0000000000 R11: fffff52000000db1 R12: ffff88804b03af01
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804b0314f0
FS:  00007fbe9e1306c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3081cff8 CR3: 0000000106bbc000 CR4: 00000000000006f0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 arch_irq_work_raise+0x6d/0x80
 __irq_work_queue_local+0x1d7/0x550
 irq_work_queue_on+0x122/0x230
 rcu_read_unlock_special+0x3ab/0x4c0
 __rcu_read_unlock+0x84/0xe0
 trace_call_bpf+0x5ae/0x850
 perf_trace_run_bpf_submit+0x78/0x170
 perf_trace_preemptirq_template+0x280/0x340
 trace_irq_disable+0xee/0x110
 irqentry_enter+0x3d/0x60
 sysvec_apic_timer_interrupt+0xe/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:kasan_check_range+0x9f/0x2c0
Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
RSP: 0018:ffffc900000072a0 EFLAGS: 00000246
RAX: ffffffff81a12201 RBX: fffffffffffffff4 RCX: ffffffff81a1229f
RDX: 0000000000000000 RSI: 0000000000000066 RDI: ffffffff99af5880
RBP: ffffc90000007430 R08: ffffffff99af58e5 R09: 1ffffffff335eb1c
R10: dffffc0000000000 R11: fffffbfff335eb11 R12: 000000000000000d
R13: ffffffff99af5880 R14: fffffbfff335eb1d R15: 1ffffffff335eb10
 __asan_memmove+0x29/0x70
 record_print_text+0x24f/0x430
 printk_get_next_message+0x26d/0x7b0
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0xb0/0x150
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0018:ffffc9000438fa20 EFLAGS: 00000282
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: 0000000000000006 RSI: ffffffff8d998727 RDI: 0000000000000001
RBP: ffffc9000438fac0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000871f44
 irqentry_exit+0x6f/0x90
 asm_sysvec_call_function_single+0x1a/0x20
RIP: 0010:lock_acquire+0x175/0x360
Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc9000438fb88 EFLAGS: 00000206
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: ffffffff9363c318 RSI: ffffffff8db86408 RDI: ffffffff8be29f80
RBP: ffffffff894c784e R08: 0000000000000100 R09: 00000000e0bbab7a
R10: 0000000025493d32 R11: 0000000000ce8945 R12: 0000000000000000
R13: ffff88810cd82258 R14: 0000000000000001 R15: 0000000000000246
 lock_sock_nested+0x48/0x100
 sk_setsockopt+0xd9e/0x2d30
 do_sock_setsockopt+0x11b/0x1b0
 __x64_sys_setsockopt+0x13f/0x1b0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe9d38eb69
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe9e130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fbe9d5b6080 RCX: 00007fbe9d38eb69
RDX: 0000000000000023 RSI: 0000000000000001 RDI: 000000000000000b
RBP: 00007fbe9d411df1 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fbe9d5b6080 R15: 00007ffe68a847c8
 </TASK>
watchdog: BUG: soft lockup - CPU#0 stuck for 266s! [syz.2.104:6133]
Modules linked in:
irq event stamp: 11007627
hardirqs last  enabled at (11007626): [<ffffffff8b6e9424>] irqentry_exit+0x74/0x90
hardirqs last disabled at (11007627): [<ffffffff8b6e7f6e>] sysvec_apic_timer_interrupt+0xe/0xc0
softirqs last  enabled at (954098): [<ffffffff8185bd4a>] __irq_exit_rcu+0xca/0x1f0
softirqs last disabled at (954101): [<ffffffff8185bd4a>] __irq_exit_rcu+0xca/0x1f0
CPU: 0 UID: 0 PID: 6133 Comm: syz.2.104 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:printk_get_next_message+0x657/0x7b0
Code: 83 c1 28 4c 89 ef 4c 89 e6 48 c7 c2 e0 8b 8b 8b e8 ae 76 00 00 4c 8b 74 24 50 49 01 de 49 01 c6 eb 08 e8 dc fe 1e 00 45 31 f6 <48> 8b 5c 24 38 48 83 c3 08 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84
RSP: 0018:ffffc90000007440 EFLAGS: 00000246
RAX: 000000000000007e RBX: 0000000000000004 RCX: ffff8880214d8000
RDX: 0000000000000100 RSI: 0000000000000800 RDI: 0000000000000000
RBP: ffffc90000007610 R08: 322e30382020205b R09: 205b5d3737353937
R10: 5b5d373735393732 R11: 205d304320202020 R12: ffffc90000007500
R13: 1ffff92000000ea2 R14: 000000000000007e R15: dffffc0000000000
FS:  00007fbe9e1306c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3081cff8 CR3: 0000000106bbc000 CR4: 00000000000006f0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 console_flush_all+0x4ca/0xc40
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 clocksource_watchdog+0xdca/0x11c0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0x67/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0xb0/0x150
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0018:ffffc9000438fa20 EFLAGS: 00000282
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: 0000000000000006 RSI: ffffffff8d998727 RDI: 0000000000000001
RBP: ffffc9000438fac0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000871f44
 irqentry_exit+0x6f/0x90
 asm_sysvec_call_function_single+0x1a/0x20
RIP: 0010:lock_acquire+0x175/0x360
Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb de 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc9000438fb88 EFLAGS: 00000206
RAX: 643bd19b9e52fb00 RBX: 0000000000000000 RCX: 643bd19b9e52fb00
RDX: ffffffff9363c318 RSI: ffffffff8db86408 RDI: ffffffff8be29f80
RBP: ffffffff894c784e R08: 0000000000000100 R09: 00000000e0bbab7a
R10: 0000000025493d32 R11: 0000000000ce8945 R12: 0000000000000000
R13: ffff88810cd82258 R14: 0000000000000001 R15: 0000000000000246
 lock_sock_nested+0x48/0x100
 sk_setsockopt+0xd9e/0x2d30
 do_sock_setsockopt+0x11b/0x1b0
 __x64_sys_setsockopt+0x13f/0x1b0
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbe9d38eb69
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe9e130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007fbe9d5b6080 RCX: 00007fbe9d38eb69
RDX: 0000000000000023 RSI: 0000000000000001 RDI: 000000000000000b
RBP: 00007fbe9d411df1 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fbe9d5b6080 R15: 00007ffe68a847c8
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:pv_native_safe_halt+0x13/0x20
Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
RAX: c6999f55f2940700 RBX: ffffffff81975f18 RCX: c6999f55f2940700
RDX: 0000000000000001 RSI: ffffffff8d998727 RDI: ffffffff8be29f80
RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa1e8f0
R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
FS:  0000000000000000(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555d7bcace08 CR3: 000000010dbcc000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 default_idle+0x13/0x20
 default_idle_call+0x74/0xb0
 do_idle+0x1e8/0x510
 cpu_startup_entry+0x44/0x60
 start_secondary+0x101/0x110
 common_startup_64+0x13e/0x147
 </TASK>
