rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-....: (1 GPs behind) idle=a83/1/0x4000000000000000 softirq=7947/7948 fqs=4849 (t=10500 jiffies g=9721 q=1312) NMI backtrace for cpu 0 CPU: 0 PID: 4454 Comm: syz.2.45 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106 nmi_cpu_backtrace+0x397/0x3d0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline] rcu_dump_cpu_stacks+0x22f/0x380 kernel/rcu/tree_stall.h:349 print_cpu_stall+0x31d/0x5f0 kernel/rcu/tree_stall.h:633 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline] rcu_pending kernel/rcu/tree.c:3936 [inline] rcu_sched_clock_irq+0x6d8/0x1110 kernel/rcu/tree.c:2619 update_process_times+0x193/0x200 kernel/time/timer.c:1818 tick_sched_handle kernel/time/tick-sched.c:254 [inline] tick_sched_timer+0x37d/0x560 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x4fe/0xc40 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline] __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0x4d/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 kernel/locking/spinlock.c:194 Code: 74 05 e8 de 0d cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 95 9e f7 65 8b 05 87 93 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 RSP: 0018:ffffc90000007960 EFLAGS: 00000206 RAX: 95f9e093b721c500 RBX: 0000000000000a06 RCX: 95f9e093b721c500 RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: 0000000000000001 RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffffbfff1ff7c2b R10: fffffbfff1ff7c2b R11: 1ffffffff1ff7c2a R12: dffffc0000000000 R13: ffff8880b90280c0 R14: ffff8880b90280c0 R15: 1ffff92000000f2c __mod_timer+0x8ee/0xd20 kernel/time/timer.c:1065 addrconf_mod_rs_timer+0x51/0xe0 net/ipv6/addrconf.c:328 addrconf_rs_timer+0x392/0x600 net/ipv6/addrconf.c:3965 call_timer_fn+0x16c/0x530 kernel/time/timer.c:1451 expire_timers kernel/time/timer.c:1496 [inline] __run_timers+0x525/0x7c0 kernel/time/timer.c:1767 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780 handle_softirqs+0x328/0x820 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] invoke_softirq kernel/softirq.c:450 [inline] __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:659 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0x9d/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x16/0x20 arch/x86/include/asm/idtentry.h:713 RIP: 0010:account_kernel_stack+0x209/0x340 kernel/fork.c:387 Code: 85 db 75 1c e8 f8 06 31 00 49 83 fd 38 75 1d eb 29 e8 eb 06 31 00 e8 b6 a8 62 08 48 85 db 74 e4 e8 dc 06 31 00 fb 49 83 fd 38 <74> 0e e8 d0 06 31 00 49 83 c5 08 e9 dc fe ff ff e8 c2 06 31 00 4c RSP: 0018:ffffc90002fff860 EFLAGS: 00000283 RAX: ffffffff8146c534 RBX: 0000000000000200 RCX: ffff888021e01dc0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90002fff968 R08: dffffc0000000000 R09: fffffbfff1ff7c1a R10: fffffbfff1ff7c1a R11: 1ffffffff1ff7c19 R12: 1ffff11028275ba4 R13: 0000000000000018 R14: ffff8881413add20 R15: 0000000000000000 release_task_stack kernel/fork.c:432 [inline] put_task_stack+0x8f/0x140 kernel/fork.c:444 finish_task_switch+0x26f/0x640 kernel/sched/core.c:4961 context_switch kernel/sched/core.c:5052 [inline] __schedule+0x11c3/0x4390 kernel/sched/core.c:6395 schedule+0x11b/0x1e0 kernel/sched/core.c:6478 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669 __mutex_lock kernel/locking/mutex.c:729 [inline] mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743 tun_detach drivers/net/tun.c:699 [inline] tun_chr_close+0x3d/0x1b0 drivers/net/tun.c:3440 __fput+0x234/0x930 fs/file_table.c:311 task_work_run+0x125/0x1a0 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x10f/0x130 kernel/entry/common.c:181 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f85f1767749 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcd9531c48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 0000000000021fdf RCX: 00007f85f1767749 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 00000009d9531f3f R10: 0000001b32320000 R11: 0000000000000246 R12: 00007f85f19bdfac R13: 00007f85f19bdfa0 R14: ffffffffffffffff R15: 0000000000000005