rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (1 GPs behind) idle=e8dc/1/0x4000000000000000 softirq=15754/15756 fqs=3
rcu: 	(t=10502 jiffies g=17425 q=725 ncpus=2)
rcu: rcu_preempt kthread starved for 10415 jiffies! g17425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27528 pid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5381 [inline]
 __schedule+0x15ae/0x4660 kernel/sched/core.c:6700
 schedule+0xbd/0x170 kernel/sched/core.c:6774
 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168
 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667
 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866
 kthread+0x2fa/0x390 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 6822 Comm: syz.5.233 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:unwind_next_frame+0x1c71/0x2990 arch/x86/kernel/unwind_orc.c:665
Code: 00 41 8b 6d 00 89 ef 44 8b b4 24 94 00 00 00 44 89 f6 e8 a2 a6 4b 00 44 39 f5 0f 85 9e 00 00 00 48 8b 44 24 68 42 80 3c 38 00 <74> 08 48 89 df e8 75 19 a4 00 4d 8b 75 38 49 8d 7d 08 48 89 f8 48
RSP: 0018:ffffc900000061d0 EFLAGS: 00000046
RAX: 1ffff92000000c73 RBX: ffffc90000006398 RCX: 0000000000000100
RDX: ffff888021df5a00 RSI: 0000000000000002 RDI: 0000000000000002
RBP: 0000000000000002 R08: ffff888021df5a00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000006518
R13: ffffc90000006360 R14: 0000000000000002 R15: dffffc0000000000
FS:  00007fe64b0c96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f59301456b8 CR3: 0000000042dbc000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 __unwind_start+0x5bb/0x730 arch/x86/kernel/unwind_orc.c:760
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 perf_callchain_kernel+0x2a2/0x690 arch/x86/events/core.c:-1
 get_perf_callchain+0x231/0x510 kernel/events/callchain.c:204
 perf_callchain kernel/events/core.c:7734 [inline]
 perf_sample_save_callchain include/linux/perf_event.h:1232 [inline]
 perf_prepare_sample+0x3c7/0x1db0 kernel/events/core.c:7778
 __perf_event_output kernel/events/core.c:7966 [inline]
 perf_event_output_forward+0x187/0x3e0 kernel/events/core.c:7987
 __perf_event_overflow+0x461/0x660 kernel/events/core.c:9712
 perf_swevent_overflow+0x274/0x340 kernel/events/core.c:9795
 perf_swevent_event+0x45c/0x570 kernel/events/core.c:-1
 perf_tp_event+0x620/0x1550 kernel/events/core.c:10373
 perf_trace_run_bpf_submit+0xf4/0x1c0 kernel/events/core.c:10292
 perf_trace_preemptirq_template+0x269/0x330 include/trace/events/preemptirq.h:14
 trace_irq_disable+0xbb/0xe0 include/trace/events/preemptirq.h:36
 irqentry_enter+0x37/0x50 kernel/entry/common.c:381
 sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1088
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 kernel/locking/spinlock.c:194
Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 4b e4 ce f6 65 8b 05 1c 33 76 75 85 c0 74 3c 48 c7 04 24 0e 36
RSP: 0018:ffffc90000006e00 EFLAGS: 00000206
RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: a23f8f7d4b513e00
RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001
RBP: ffffc90000006e90 R08: ffffffff911bc5ff R09: 1ffffffff22378bf
R10: dffffc0000000000 R11: fffffbfff22378c0 R12: dffffc0000000000
R13: ffff88802c6ad140 R14: ffff8880b8e3da10 R15: 1ffff92000000dc0
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 rps_unlock_irq_restore net/core/dev.c:241 [inline]
 enqueue_to_backlog+0xa8f/0xe90 net/core/dev.c:4902
 netif_rx_internal+0x119/0x4e0 net/core/dev.c:5176
 __netif_rx+0x78/0xc0 net/core/dev.c:5196
 veth_forward_skb drivers/net/veth.c:325 [inline]
 veth_xmit+0x57a/0xa30 drivers/net/veth.c:378
 __netdev_start_xmit include/linux/netdevice.h:4943 [inline]
 netdev_start_xmit include/linux/netdevice.h:4957 [inline]
 xmit_one net/core/dev.c:3644 [inline]
 dev_hard_start_xmit+0x269/0x790 net/core/dev.c:3660
 __dev_queue_xmit+0x198c/0x3630 net/core/dev.c:4454
 dev_queue_xmit include/linux/netdevice.h:3113 [inline]
 vlan_dev_hard_start_xmit+0x35a/0x5c0 net/8021q/vlan_dev.c:125
 __netdev_start_xmit include/linux/netdevice.h:4943 [inline]
 netdev_start_xmit include/linux/netdevice.h:4957 [inline]
 xmit_one net/core/dev.c:3644 [inline]
 dev_hard_start_xmit+0x269/0x790 net/core/dev.c:3660
 __dev_queue_xmit+0x198c/0x3630 net/core/dev.c:4454
 neigh_output include/net/neighbour.h:543 [inline]
 ip6_finish_output2+0xe2e/0x1620 net/ipv6/ip6_output.c:141
 dst_output include/net/dst.h:467 [inline]
 NF_HOOK include/linux/netfilter.h:304 [inline]
 ndisc_send_skb+0xbb9/0x1480 net/ipv6/ndisc.c:513
 addrconf_rs_timer+0x36b/0x640 net/ipv6/addrconf.c:4029
 call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x570/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x27d/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5255
Code: 26 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 3b 30 09 e8 7e 0b 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0018:ffffc90003547940 EFLAGS: 00000286
RAX: a23f8f7d4b513e00 RBX: 0000000000000000 RCX: a23f8f7d4b513e00
RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0
RBP: ffffc90003547990 R08: ffffffff911bc5ff R09: 1ffffffff22378bf
R10: dffffc0000000000 R11: fffffbfff22378c0 R12: ffff888021df5a00
R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48
 context_switch kernel/sched/core.c:5384 [inline]
 __schedule+0x15b6/0x4660 kernel/sched/core.c:6700
 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7010
 irqentry_exit+0x67/0x70 kernel/entry/common.c:438
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 kernel/kcov.c:234
Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 80 d2 7c 7e 65 8b
RSP: 0018:ffffc90003547d20 EFLAGS: 00000287
RAX: ffffffff81ae2cfb RBX: ffff88801db84000 RCX: 0000000000080000
RDX: ffffc9001b9fe000 RSI: 000000000000090b RDI: 000000000000090c
RBP: ffffc90003547f10 R08: ffffffff911bc5ff R09: 1ffffffff22378bf
R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 0000000000000000
R13: 1ffff920006a8fb8 R14: 1ffff1100605859b R15: ffff888021df5a00
 perf_unpin_context+0xb/0x70 kernel/events/core.c:1469
 __do_sys_perf_event_open kernel/events/core.c:12950 [inline]
 __se_sys_perf_event_open+0x1849/0x1c60 kernel/events/core.c:12601
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe64a19ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe64b0c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007fe64a415fa0 RCX: 00007fe64a19ce59
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000012c0
RBP: 00007fe64a232e6f R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe64a416038 R14: 00007fe64a415fa0 R15: 00007ffc404420d8
 </TASK>
CPU: 1 PID: 6819 Comm: syz.7.232 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:skb_network_header include/linux/skbuff.h:2944 [inline]
RIP: 0010:ipv6_hdr include/linux/ipv6.h:101 [inline]
RIP: 0010:ip6t_mangle_out net/ipv6/netfilter/ip6table_mangle.c:44 [inline]
RIP: 0010:ip6table_mangle_hook+0x20c/0x700 net/ipv6/netfilter/ip6table_mangle.c:71
Code: 8b 44 24 28 42 80 3c 28 00 48 8b 5c 24 20 74 08 48 89 df e8 16 23 8e f8 4c 8b 33 48 bb 00 00 00 00 00 fc ff df 41 0f b6 04 1c <84> c0 0f 85 0f 04 00 00 48 8b 44 24 18 0f b7 00 4d 8d 2c 06 49 8d
RSP: 0018:ffffc900001f0740 EFLAGS: 00000246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff89513666
RDX: 0000000000000010 RSI: ffff8880752af4a8 RDI: ffffc900001f07e0
RBP: ffffc900001f0860 R08: 00000000000002ff R09: 0200000000000000
R10: 00000000000002ff R11: 0200000000000000 R12: 1ffff1100cdbb817
R13: dffffc0000000000 R14: ffff8880752af400 R15: 1ffff9200003e0f4
FS:  00007f3fca3166c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000100000000 CR3: 00000000665d9000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline]
 nf_hook_slow+0xbd/0x200 net/netfilter/core.c:626
 nf_hook include/linux/netfilter.h:259 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0x1331/0x1480 net/ipv6/ndisc.c:513
 addrconf_rs_timer+0x36b/0x640 net/ipv6/addrconf.c:4029
 call_timer_fn+0x189/0x540 kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x570/0x810 kernel/time/timer.c:2023
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2036
 handle_softirqs+0x27d/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5255
Code: 26 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 3b 30 09 e8 7e 0b 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0018:ffffc90003587880 EFLAGS: 00000282
RAX: 9308158ae2d0c600 RBX: 0000000000000000 RCX: 9308158ae2d0c600
RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0
RBP: ffffc900035878d0 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd
R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: ffff8880284b9e00
R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48
 context_switch kernel/sched/core.c:5384 [inline]
 __schedule+0x15b6/0x4660 kernel/sched/core.c:6700
 schedule+0xbd/0x170 kernel/sched/core.c:6774
 futex_wait_queue+0x138/0x1b0 kernel/futex/waitwake.c:355
 futex_wait+0x1e9/0x5c0 kernel/futex/waitwake.c:656
 do_futex+0x2ff/0x3e0 kernel/futex/syscalls.c:134
 __do_sys_futex kernel/futex/syscalls.c:211 [inline]
 __se_sys_futex+0x3a9/0x440 kernel/futex/syscalls.c:192
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f3fc939ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3fca3160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00007f3fc9616098 RCX: 00007f3fc939ce59
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fc9616098
RBP: 00007f3fc9616090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3fc9616128 R14: 00007ffc10ae8a80 R15: 00007ffc10ae8b68
 </TASK>