------------[ cut here ]------------
WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1049, CPU#0: syz.0.25/6062
Modules linked in:
CPU: 0 UID: 0 PID: 6062 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1049
Code: ff ff 48 c7 c7 a0 35 af 99 be 04 00 00 00 e8 83 35 80 00 4c 89 f7 b8 01 00 00 00 87 05 95 07 07 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff c0 46 14 8e 74 47 48 c7 c0 a0 5f a2 8f 48 c1 e8
RSP: 0018:ffffc90000007b78 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000a06 RCX: ffffffff81a82dfd
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e1446c0
RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff335e6b4 R12: 0000000000002904
R13: 1ffff110170c7762 R14: ffffffff8e1446c0 R15: dffffc0000000000
FS:  0000555572af3500(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056121a793950 CR3: 0000000029d6c000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 rcu_core+0x6a9/0x1870 kernel/rcu/tree.c:2852
 handle_softirqs+0x27d/0x850 kernel/softirq.c:626
 __do_softirq kernel/softirq.c:660 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:727
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:743
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:should_resched arch/x86/include/asm/preempt.h:104 [inline]
RIP: 0010:__local_bh_enable_ip+0x135/0x1c0 kernel/softirq.c:457
Code: 8b e8 bf 63 d8 09 65 66 8b 05 6f 44 1a 11 66 85 c0 75 5a bf 01 00 00 00 e8 f8 9e 0b 00 e8 b3 27 44 00 fb 65 8b 05 4b 44 1a 11 <85> c0 75 05 e8 e2 0b ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
RSP: 0018:ffffc900030e7cc0 EFLAGS: 00000282
RAX: 0000000080000000 RBX: 0000000000000200 RCX: b585c1d91f8c5200
RDX: 0000000000000000 RSI: ffffffff8d997e54 RDI: ffffffff8be07960
RBP: ffffc900030e7d50 R08: ffffffff8fa22f77 R09: 1ffffffff1f445ee
R10: dffffc0000000000 R11: fffffbfff1f445ef R12: ffffffff8169ae11
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200061cf98
 handle_signal arch/x86/kernel/signal.c:310 [inline]
 arch_do_signal_or_restart+0x44c/0x7a0 arch/x86/kernel/signal.c:339
 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
 exit_to_user_mode_loop+0x87/0x4f0 kernel/entry/common.c:75
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
 do_syscall_64+0x2d0/0xf80 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb0be44d6e0
Code: 44 24 20 0f 29 44 24 30 0f 29 44 24 40 48 8b 44 24 08 ff d0 48 83 c4 50 31 c0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 80 00 00 00 00 <c3> 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f
RSP: 002b:00007fffc8b65e38 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007fb0be7e5fa0 RCX: 00007fb0be58f749
RDX: 00007fffc8b65e40 RSI: 00007fffc8b65f70 RDI: 0000000000000011
RBP: 00007fb0be613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb0be7e5fa0 R14: 00007fb0be7e5fa0 R15: 0000000000000004
 </TASK>
----------------
Code disassembly (best guess):
   0:	8b e8                	mov    %eax,%ebp
   2:	bf 63 d8 09 65       	mov    $0x6509d863,%edi
   7:	66 8b 05 6f 44 1a 11 	mov    0x111a446f(%rip),%ax        # 0x111a447d
   e:	66 85 c0             	test   %ax,%ax
  11:	75 5a                	jne    0x6d
  13:	bf 01 00 00 00       	mov    $0x1,%edi
  18:	e8 f8 9e 0b 00       	call   0xb9f15
  1d:	e8 b3 27 44 00       	call   0x4427d5
  22:	fb                   	sti
  23:	65 8b 05 4b 44 1a 11 	mov    %gs:0x111a444b(%rip),%eax        # 0x111a4475
* 2a:	85 c0                	test   %eax,%eax <-- trapping instruction
  2c:	75 05                	jne    0x33
  2e:	e8 e2 0b ae ff       	call   0xffae0c15
  33:	48 c7 04 24 0e 36 e0 	movq   $0x45e0360e,(%rsp)
  3a:	45
  3b:	4b                   	rex.WXB
  3c:	c7                   	.byte 0xc7
  3d:	04 37                	add    $0x37,%al