rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-...!: (10500 ticks this GP) idle=caec/1/0x4000000000000000 softirq=47922/47922 fqs=0
rcu: (t=10500 jiffies g=36941 q=3077 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g36941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=0 timer-softirq=15692
rcu: rcu_preempt kthread starved for 10500 jiffies! g36941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:27136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14bc/0x5000 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6960
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
CPU: 0 UID: 0 PID: 11042 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:qdisc_dev include/net/sch_generic.h:594 [inline]
RIP: 0010:taprio_dequeue_from_txq+0x64/0x980 net/sched/sch_taprio.c:711
Code: 74 08 4c 89 ef e8 1c f0 b5 f8 4c 8d a3 80 02 00 00 4d 8b 6d 00 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 f2 ef b5 f8 4d 8b 6d 00 4c 89 e0 48 c1 e8 03 48
RSP: 0018:ffffc90000007ad8 EFLAGS: 00000246
RAX: 1ffff1100ad78000 RBX: ffff8880559ba000 RCX: dffffc0000000000
RDX: 0000000000000100 RSI: 000000000000000a RDI: ffff8880559ba000
RBP: 1ffff1100ab3746a R08: ffffffff897172b6 R09: ffffffff8df41a20
R10: 0000000000000001 R11: ffffffff8964b5e0 R12: ffff8880559ba280
R13: ffff888056bc0000 R14: ffff888068690000 R15: 000000000000000a
FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555593b33588 CR3: 000000000dd3a000 CR4: 00000000003526f0
Call Trace:
taprio_dequeue_tc_priority+0x1ac/0x750 net/sched/sch_taprio.c:793
taprio_dequeue+0x186/0x550 net/sched/sch_taprio.c:-1
dequeue_skb net/sched/sch_generic.c:297 [inline]
qdisc_restart net/sched/sch_generic.c:402 [inline]
__qdisc_run+0x23f/0x1510 net/sched/sch_generic.c:420
qdisc_run+0xc7/0x300 include/net/pkt_sched.h:120
net_tx_action+0x7ac/0x9f0 net/core/dev.c:5781
handle_softirqs+0x27d/0x850 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723
irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194
Code: 74 05 e8 7b 2a 6b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 ae 32 f6 65 8b 05 ec 50 20 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc90003417740 EFLAGS: 00000206
RAX: 451a4ee4cb210d00 RBX: 0000000000000a06 RCX: 451a4ee4cb210d00
RDX: 0000000000000006 RSI: ffffffff8d7925e3 RDI: 0000000000000001
RBP: ffffc900034177d8 R08: ffffffff8f822077 R09: 1ffffffff1f0440e
R10: dffffc0000000000 R11: fffffbfff1f0440f R12: dffffc0000000000
R13: 0000000000000003 R14: ffff88813ffa5480 R15: 1ffff92000682ee8
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
get_partial_node+0x3dd/0x460 mm/slub.c:3550
get_partial mm/slub.c:3630 [inline]
___slab_alloc+0xe7f/0x1960 mm/slub.c:4631
__slab_alloc+0x65/0x100 mm/slub.c:4779
__slab_alloc_node mm/slub.c:4855 [inline]
slab_alloc_node mm/slub.c:5251 [inline]
__kmalloc_cache_noprof+0x41e/0x700 mm/slub.c:5771
kmalloc_noprof include/linux/slab.h:957 [inline]
slab_free_hook mm/slub.c:2492 [inline]
slab_free mm/slub.c:6668 [inline]
kmem_cache_free+0x16b/0x620 mm/slub.c:6779
exit_mmap+0x52c/0xb10 mm/mmap.c:1302
__mmput+0x118/0x430 kernel/fork.c:1173
exit_mm+0x1da/0x2c0 kernel/exit.c:581
do_exit+0x658/0x2310 kernel/exit.c:959
do_group_exit+0x21c/0x2d0 kernel/exit.c:1112
__do_sys_exit_group kernel/exit.c:1123 [inline]
__se_sys_exit_group kernel/exit.c:1121 [inline]
__x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121
x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0ddb2a46c5
Code: Unable to access opcode bytes at 0x7f0ddb2a469b.
RSP: 002b:00007ffff04dbbd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f0ddb3a5fe8 RCX: 00007f0ddb2a46c5
RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
RBP: 0000000000000001 R08: 00007ffff04dbb68 R09: 0000000000000000
R10: 00007ffff04dba00 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f0ddb3a4680 R15: 00007f0ddb3a6000