rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2680 jiffies s: 15809 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7229 Comm: syz.4.905 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 RIP: 0010:irq_work_run+0x19e/0x2f0 kernel/irq_work.c:253 Code: bf 08 00 00 00 89 c6 e8 30 a6 f3 ff 41 83 fe 07 0f 87 30 01 00 00 e8 c1 a2 f3 ff 4c 8d 34 dd 80 f9 64 8c 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 53 8e 44 00 48 c7 c3 00 41 03 00 RSP: 0018:ffffc900001e0f20 EFLAGS: 00000802 RAX: 1ffffffff18c9f31 RBX: 0000000000000001 RCX: ffff88802f271dc0 RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000008 RBP: ffffc900001e0fc8 R08: ffff8880b8f3b9fb R09: 1ffff110171e773f R10: dffffc0000000000 R11: ffffed10171e7740 R12: 1ffff9200003c1e4 R13: 0000000000000000 R14: ffffffff8c64f988 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32115ff8 CR3: 000000002eb29000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: __sysvec_irq_work+0xba/0x350 arch/x86/kernel/irq_work.c:22 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0x98/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x16/0x20 arch/x86/include/asm/idtentry.h:728 RIP: 0010:rcu_read_unlock_special+0x7f/0x510 kernel/rcu/tree_plugin.h:685 Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 RSP: 0018:ffffc900039ff2a0 EFLAGS: 00000206 RAX: b755021c89c3fb00 RBX: 1ffff9200073fe5c RCX: b755021c89c3fb00 RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 RBP: ffffc900039ff398 R08: ffffffff90af4247 R09: 1ffffffff215e848 R10: dffffc0000000000 R11: fffffbfff215e849 R12: 0000000000000246 R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 __rcu_read_unlock+0x78/0xd0 kernel/rcu/tree_plugin.h:426 rcu_read_unlock include/linux/rcupdate.h:823 [inline] __folio_memcg_unlock+0xea/0x110 mm/memcontrol.c:2151 page_remove_rmap+0x7e3/0xea0 mm/rmap.c:1462 zap_pte_range mm/memory.c:1451 [inline] zap_pmd_range mm/memory.c:1572 [inline] zap_pud_range mm/memory.c:1601 [inline] zap_p4d_range mm/memory.c:1622 [inline] unmap_page_range+0x114a/0x2500 mm/memory.c:1643 unmap_vmas+0x260/0x390 mm/memory.c:1728 exit_mmap+0x20d/0x960 mm/mmap.c:3250 __mmput+0x118/0x3c0 kernel/fork.c:1205 exit_mm+0x1fe/0x2d0 kernel/exit.c:565 do_exit+0x905/0x2480 kernel/exit.c:867 do_group_exit+0x217/0x2d0 kernel/exit.c:1022 get_signal+0x1272/0x1350 kernel/signal.c:2871 arch_do_signal_or_restart+0xc4/0x1350 arch/x86/kernel/signal.c:871 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f4eeb19aeb9 Code: Unable to access opcode bytes at 0x7f4eeb19ae8f. RSP: 002b:00007f4eec001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: 0000000000000000 RBX: 00007f4eeb415fa0 RCX: 00007f4eeb19aeb9 RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a RBP: 00007f4eeb208c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4eeb416038 R14: 00007f4eeb415fa0 R15: 00007fff3625ec68