rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (10500 ticks this GP) idle=caec/1/0x4000000000000000 softirq=47922/47922 fqs=0 rcu: (t=10500 jiffies g=36941 q=3077 ncpus=2) rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g36941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=15692 rcu: rcu_preempt kthread starved for 10500 jiffies! g36941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x14bc/0x5000 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 CPU: 0 UID: 0 PID: 11042 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:qdisc_dev include/net/sch_generic.h:594 [inline] RIP: 0010:taprio_dequeue_from_txq+0x64/0x980 net/sched/sch_taprio.c:711 Code: 74 08 4c 89 ef e8 1c f0 b5 f8 4c 8d a3 80 02 00 00 4d 8b 6d 00 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 f2 ef b5 f8 4d 8b 6d 00 4c 89 e0 48 c1 e8 03 48 RSP: 0018:ffffc90000007ad8 EFLAGS: 00000246 RAX: 1ffff1100ad78000 RBX: ffff8880559ba000 RCX: dffffc0000000000 RDX: 0000000000000100 RSI: 000000000000000a RDI: ffff8880559ba000 RBP: 1ffff1100ab3746a R08: ffffffff897172b6 R09: ffffffff8df41a20 R10: 0000000000000001 R11: ffffffff8964b5e0 R12: ffff8880559ba280 R13: ffff888056bc0000 R14: ffff888068690000 R15: 000000000000000a FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555593b33588 CR3: 000000000dd3a000 CR4: 00000000003526f0 Call Trace: taprio_dequeue_tc_priority+0x1ac/0x750 net/sched/sch_taprio.c:793 taprio_dequeue+0x186/0x550 net/sched/sch_taprio.c:-1 dequeue_skb net/sched/sch_generic.c:297 [inline] qdisc_restart net/sched/sch_generic.c:402 [inline] __qdisc_run+0x23f/0x1510 net/sched/sch_generic.c:420 qdisc_run+0xc7/0x300 include/net/pkt_sched.h:120 net_tx_action+0x7ac/0x9f0 net/core/dev.c:5781 handle_softirqs+0x27d/0x850 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194 Code: 74 05 e8 7b 2a 6b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 ae 32 f6 65 8b 05 ec 50 20 07 85 c0 74 40 48 c7 04 24 0e 36 RSP: 0018:ffffc90003417740 EFLAGS: 00000206 RAX: 451a4ee4cb210d00 RBX: 0000000000000a06 RCX: 451a4ee4cb210d00 RDX: 0000000000000006 RSI: ffffffff8d7925e3 RDI: 0000000000000001 RBP: ffffc900034177d8 R08: ffffffff8f822077 R09: 1ffffffff1f0440e R10: dffffc0000000000 R11: fffffbfff1f0440f R12: dffffc0000000000 R13: 0000000000000003 R14: ffff88813ffa5480 R15: 1ffff92000682ee8 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] get_partial_node+0x3dd/0x460 mm/slub.c:3550 get_partial mm/slub.c:3630 [inline] ___slab_alloc+0xe7f/0x1960 mm/slub.c:4631 __slab_alloc+0x65/0x100 mm/slub.c:4779 __slab_alloc_node mm/slub.c:4855 [inline] slab_alloc_node mm/slub.c:5251 [inline] __kmalloc_cache_noprof+0x41e/0x700 mm/slub.c:5771 kmalloc_noprof include/linux/slab.h:957 [inline] slab_free_hook mm/slub.c:2492 [inline] slab_free mm/slub.c:6668 [inline] kmem_cache_free+0x16b/0x620 mm/slub.c:6779 exit_mmap+0x52c/0xb10 mm/mmap.c:1302 __mmput+0x118/0x430 kernel/fork.c:1173 exit_mm+0x1da/0x2c0 kernel/exit.c:581 do_exit+0x658/0x2310 kernel/exit.c:959 do_group_exit+0x21c/0x2d0 kernel/exit.c:1112 __do_sys_exit_group kernel/exit.c:1123 [inline] __se_sys_exit_group kernel/exit.c:1121 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121 x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0ddb2a46c5 Code: Unable to access opcode bytes at 0x7f0ddb2a469b. RSP: 002b:00007ffff04dbbd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f0ddb3a5fe8 RCX: 00007f0ddb2a46c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 RBP: 0000000000000001 R08: 00007ffff04dbb68 R09: 0000000000000000 R10: 00007ffff04dba00 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f0ddb3a4680 R15: 00007f0ddb3a6000