------------[ cut here ]------------
WARNING: CPU: 0 PID: 5847 at kernel/rcu/tree_stall.h:1015 rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1015
Modules linked in:
CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-gea2aecdf7a95 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1015
Code: ff ff 48 c7 c7 40 e4 af 99 be 04 00 00 00 e8 93 4b 7d 00 4c 89 f7 b8 01 00 00 00 87 05 65 2d 08 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 42 14 8e 74 47 48 c7 c0 30 23 a2 8f 48 c1 e8
RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7b6cd
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144200
RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff335fc88 R12: 0000000000002904
R13: 1ffff110170c75fa R14: ffffffff8e144200 R15: dffffc0000000000
FS:  0000555555693500(0000) GS:ffff888125c19000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000400000002 CR3: 000000007b7dc000 CR4: 00000000003526f0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 rcu_core+0x5f7/0x1710 kernel/rcu/tree.c:2827
 handle_softirqs+0x286/0x870 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline]
 sysvec_irq_work+0xa3/0xc0 arch/x86/kernel/irq_work.c:17
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:158 [inline]
RIP: 0010:___slab_alloc+0x4ab/0x1480 mm/slub.c:3750
Code: 04 24 00 02 00 00 0f 84 bb fb ff ff fb 89 dd e9 b3 fb ff ff e8 26 81 55 09 f7 c3 00 02 00 00 0f 84 98 fe ff ff fb 8b 6c 24 08 <eb> 1a 48 8b 74 24 08 48 c7 46 10 00 00 00 00 4c 8b 6c 24 10 4c 89
RSP: 0018:ffffc9000406f6b8 EFLAGS: 00000206
RAX: df915ae6e008f000 RBX: 0000000000000246 RCX: df915ae6e008f000
RDX: 0000000000000006 RSI: ffffffff8d99947e RDI: ffffffff8be2a340
RBP: 00000000ffffffff R08: ffffffff8fa1f1f7 R09: 1ffffffff1f43e3e
R10: dffffc0000000000 R11: fffffbfff1f43e3f R12: 0000000000000000
R13: ffff88801ba94140 R14: ffff8880b8640440 R15: ffff8880b8640460
 __slab_alloc mm/slub.c:3949 [inline]
 __slab_alloc_node mm/slub.c:4024 [inline]
 slab_alloc_node mm/slub.c:4185 [inline]
 kmem_cache_alloc_noprof+0x283/0x3c0 mm/slub.c:4204
 anon_vma_alloc mm/rmap.c:94 [inline]
 anon_vma_fork+0xde/0x500 mm/rmap.c:360
 dup_mmap+0x9eb/0x1ac0 mm/mmap.c:1801
 dup_mm kernel/fork.c:1477 [inline]
 copy_mm+0x13c/0x4b0 kernel/fork.c:1529
 copy_process+0x1706/0x3c00 kernel/fork.c:2169
 kernel_clone+0x21e/0x870 kernel/fork.c:2599
 __do_sys_clone kernel/fork.c:2742 [inline]
 __se_sys_clone kernel/fork.c:2726 [inline]
 __x64_sys_clone+0x18b/0x1e0 kernel/fork.c:2726
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f117c785193
Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffe8034fa18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f117c785193
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
R10: 00005555556937d0 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000000927c0 R14: 000000000003067d R15: 00007ffe8034fbb0
 </TASK>
----------------
Code disassembly (best guess):
   0:	04 24                	add    $0x24,%al
   2:	00 02                	add    %al,(%rdx)
   4:	00 00                	add    %al,(%rax)
   6:	0f 84 bb fb ff ff    	je     0xfffffbc7
   c:	fb                   	sti
   d:	89 dd                	mov    %ebx,%ebp
   f:	e9 b3 fb ff ff       	jmp    0xfffffbc7
  14:	e8 26 81 55 09       	call   0x955813f
  19:	f7 c3 00 02 00 00    	test   $0x200,%ebx
  1f:	0f 84 98 fe ff ff    	je     0xfffffebd
  25:	fb                   	sti
  26:	8b 6c 24 08          	mov    0x8(%rsp),%ebp
* 2a:	eb 1a                	jmp    0x46 <-- trapping instruction
  2c:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  31:	48 c7 46 10 00 00 00 	movq   $0x0,0x10(%rsi)
  38:	00
  39:	4c 8b 6c 24 10       	mov    0x10(%rsp),%r13
  3e:	4c                   	rex.WR
  3f:	89                   	.byte 0x89