rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=32a4/1/0x4000000000000000 softirq=12743/12744 fqs=209
rcu: 	(t=10501 jiffies g=12057 q=445 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10083 jiffies! g12057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=7015
rcu: rcu_preempt kthread starved for 10086 jiffies! g12057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27160 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x15ae/0x4660 kernel/sched/core.c:6701
 schedule+0xbd/0x170 kernel/sched/core.c:6775
 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168
 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 28 Comm: kworker/1:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_power_efficient neigh_managed_work
RIP: 0010:queued_write_lock_slowpath+0x12c/0x29f kernel/locking/qrwlock.c:85
Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 f8 78 46 f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08
RSP: 0018:ffffc90000a4fa00 EFLAGS: 00000206
RAX: 00000000000001ff RBX: 1ffffffff1c9d4b4 RCX: ffffffff8a997702
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e4ea5a0
RBP: ffffc90000a4fa90 R08: ffffffff8e4ea5a3 R09: 1ffffffff1c9d4b4
R10: dffffc0000000000 R11: fffffbfff1c9d4b5 R12: dffffc0000000000
R13: 1ffff92000149f40 R14: ffffffff8e4ea5a0 R15: ffffc90000a4fa30
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd85d0bed0 CR3: 000000000cf32000 CR4: 00000000003506e0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 queued_write_lock include/asm-generic/qrwlock.h:101 [inline]
 do_raw_write_lock+0x1ea/0x260 kernel/locking/spinlock_debug.c:210
 neigh_managed_work+0x34/0x240 net/core/neighbour.c:1618
 process_one_work kernel/workqueue.c:2657 [inline]
 process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734
 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
CPU: 0 PID: 6381 Comm: syz.0.139 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:debug_smp_processor_id+0xb/0x20 lib/smp_processor_id.c:60
Code: d7 f9 e9 64 ff ff ff 48 c7 c7 40 68 1d 8d 4c 89 f6 e8 19 51 d7 f9 e9 6e ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 00 33 1d 8b <48> c7 c6 40 33 1d 8b eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 55
RSP: 0018:ffffc900000073b8 EFLAGS: 00000203
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816885e7
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8b1d3300
RBP: ffffc900000074e8 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5
R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 1ffff92000000e88
R13: ffffffff8d131e60 R14: 0000000000000000 R15: dffffc0000000000
FS:  00007fe496cee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 000000002bd0c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline]
 rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:700
 trace_lock_acquire include/trace/events/lock.h:24 [inline]
 lock_acquire+0xc6/0x420 kernel/locking/lockdep.c:5725
 rcu_lock_acquire include/linux/rcupdate.h:334 [inline]
 rcu_read_lock_sched include/linux/rcupdate.h:878 [inline]
 pfn_valid include/linux/mmzone.h:2011 [inline]
 __virt_addr_valid+0x128/0x380 arch/x86/mm/physaddr.c:65
 kasan_addr_to_slab+0xd/0xd0 mm/kasan/common.c:36
 __kasan_record_aux_stack+0xf/0xc0 mm/kasan/generic.c:477
 kvfree_call_rcu+0xee/0x780 kernel/rcu/tree.c:3452
 neigh_del net/core/neighbour.c:226 [inline]
 neigh_remove_one+0x5f1/0x700 net/core/neighbour.c:247
 neigh_forced_gc net/core/neighbour.c:280 [inline]
 neigh_alloc net/core/neighbour.c:486 [inline]
 ___neigh_create+0x491/0x23d0 net/core/neighbour.c:649
 ip6_finish_output2+0x15b9/0x1690 net/ipv6/ip6_output.c:134
 dst_output include/net/dst.h:467 [inline]
 NF_HOOK include/linux/netfilter.h:304 [inline]
 ndisc_send_skb+0xbb9/0x1480 net/ipv6/ndisc.c:513
 addrconf_rs_timer+0x36b/0x640 net/ipv6/addrconf.c:4036
 call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x570/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x27d/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:schedule_debug kernel/sched/core.c:5939 [inline]
RIP: 0010:__schedule+0x16e/0x4660 kernel/sched/core.c:6592
Code: f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 29 4e 48 f7 49 81 3e 9d 6e ac 57 <0f> 85 c6 16 00 00 45 85 e4 4c 8b 74 24 28 75 60 49 83 c6 18 4c 89
RSP: 0018:ffffc900192577c0 EFLAGS: 00000246
RAX: 1ffff9200324a000 RBX: ffffffff8ca96a30 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90019257960
RBP: ffffc900192579d0 R08: ffffc9001925795f R09: 0000000000000000
R10: ffffc90019257950 R11: fffff5200324af2c R12: 0000000000000001
R13: ffff8880b8e00000 R14: ffffc90019250000 R15: ffff8880b8e3cc60
 preempt_schedule_common+0x82/0xc0 kernel/sched/core.c:6868
 preempt_schedule+0xc0/0xd0 kernel/sched/core.c:6892
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45
 smp_call_function_single+0x48d/0x5a0 kernel/smp.c:652
 task_function_call kernel/events/core.c:120 [inline]
 perf_install_in_context+0x5bb/0x920 kernel/events/core.c:2958
 __do_sys_perf_event_open kernel/events/core.c:12957 [inline]
 __se_sys_perf_event_open+0x1841/0x1c60 kernel/events/core.c:12609
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe495d9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe496cee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007fe496025fa0 RCX: 00007fe495d9e159
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480
RBP: 00007fe495e35024 R08: 000000000000000a R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe496026038 R14: 00007fe496025fa0 R15: 00007ffd00cf0878
 </TASK>