syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (2 ticks this GP) idle=5f74/1/0x4000000000000000 softirq=17687/17687 fqs=0
rcu: 	(detected by 1, t=10502 jiffies, g=8281, q=1362 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5989 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:instrument_atomic_write include/linux/instrumented.h:82 [inline]
RIP: 0010:atomic_set include/linux/atomic/atomic-instrumented.h:67 [inline]
RIP: 0010:taprio_set_budgets+0x251/0x3b0 net/sched/sch_taprio.c:677
Code: 11 00 00 00 4c 89 e6 e8 bd 03 25 f8 49 83 fc 10 77 6c e8 d2 fe 24 f8 49 8d 2c 1f 48 81 c5 80 00 00 00 48 89 ef be 04 00 00 00 <e8> aa 6a 88 f8 48 8b 44 24 28 48 8d 3c 18 48 89 f8 48 c1 e8 03 48
RSP: 0018:ffffc90000007c00 EFLAGS: 00000082
RAX: ffffffff899aac5e RBX: 0000000000000000 RCX: ffff88802ea90000
RDX: 0000000000010000 RSI: 0000000000000004 RDI: ffff888028b9c480
RBP: ffff888028b9c480 R08: ffff8880772c22e7 R09: 1ffff1100ee5845c
R10: dffffc0000000000 R11: ffffed100ee5845d R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880772c22e0 R15: ffff888028b9c400
FS:  0000555575b0d500(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32e24000 CR3: 00000000747ac000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 advance_sched+0x963/0xc90 net/sched/sch_taprio.c:982
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x52c/0xc60 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:memset_orig+0x79/0xb0 arch/x86/lib/memset_64.S:93
Code: 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 <75> f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c 89 d0 c3 cc
RSP: 0018:ffffc90003eff5d0 EFLAGS: 00000202
RAX: 0000000000000000 RBX: ffffc90003eff6e0 RCX: 0000000000000001
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003eff700
RBP: dffffc0000000000 R08: ffffc90003eff707 R09: 0000000000000000
R10: ffffc90003eff6f8 R11: fffff520007dfee1 R12: ffffc90003effbe0
R13: ffffc90003eff6f8 R14: ffffc90003eff6a8 R15: ffffc90003eff6f0
 unwind_next_frame+0xc98/0x2390 arch/x86/kernel/unwind_orc.c:592
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:243 [inline]
 __kasan_slab_free+0x5b/0x80 mm/kasan/common.c:275
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2417 [inline]
 slab_free mm/slub.c:4680 [inline]
 kfree+0x18e/0x440 mm/slub.c:4879
 ref_tracker_free+0x4dd/0x7d0 lib/ref_tracker.c:340
 __netns_tracker_free include/net/net_namespace.h:374 [inline]
 put_net_track include/net/net_namespace.h:389 [inline]
 __sk_destruct+0x3c3/0x660 net/core/sock.c:2368
 sock_put include/net/sock.h:1960 [inline]
 unix_release_sock+0xa57/0xd30 net/unix/af_unix.c:732
 unix_release+0x92/0xd0 net/unix/af_unix.c:1196
 __sock_release net/socket.c:649 [inline]
 sock_close+0xc0/0x240 net/socket.c:1439
 __fput+0x44c/0xa70 fs/file_table.c:468
 fput_close_sync+0x119/0x200 fs/file_table.c:573
 __do_sys_close fs/open.c:1587 [inline]
 __se_sys_close fs/open.c:1572 [inline]
 __x64_sys_close+0x7f/0x110 fs/open.c:1572
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9157f8e347
Code: 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb bc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffee4d6b338 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9157f8e347
RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000005
RBP: 00007ffee4d6b340 R08: 0000000000000000 R09: 00696669775f7472
R10: 000000000000002f R11: 0000000000000246 R12: 0000000000000003
R13: 00007f9158ce4620 R14: 0000000000000006 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g8281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=0 timer-softirq=5420
rcu: rcu_preempt kthread starved for 10502 jiffies! g8281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27560 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5357 [inline]
 __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
 __schedule_loop kernel/sched/core.c:7043 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7058
 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>