rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (1 GPs behind) idle=6e14/1/0x4000000000000000 softirq=70804/70805 fqs=32
	(t=10500 jiffies g=93245 q=122 ncpus=2)
rcu: rcu_preempt kthread starved for 10422 jiffies! g93245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26048 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5243 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6560
 schedule+0xbf/0x180 kernel/sched/core.c:6636
 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2d2/0x1150 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0xa3/0x3b0 kernel/rcu/tree.c:1905
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 17902 Comm: syz.2.3207 Not tainted 6.1.131-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:rb_next+0x36/0xe0 lib/rbtree.c:521
Code: 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 56 da 36 f7 4d 39 24 24 75 0e 45 31 f6 4c 89 f0 <5b> 41 5c 41 5e 41 5f c3 4d 8d 74 24 08 4c 89 f0 48 c1 e8 03 42 80
RSP: 0018:ffffc90000007d00 EFLAGS: 00000086
RAX: ffff8880b8e2adc0 RBX: ffff8880b8e2adc0 RCX: ffff88802f9ebb80
RDX: 0000000000010000 RSI: ffff88807a273250 RDI: ffff8880b8e2adc8
RBP: dffffc0000000000 R08: ffffffff8aaba934 R09: fffffbfff1d4168e
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b8e2adc0
R13: ffff88807a273250 R14: ffff8880b8e2adc0 R15: dffffc0000000000
FS:  00007f6212e026c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000040000006b000 CR3: 0000000026e33000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 rb_erase_cached include/linux/rbtree.h:124 [inline]
 timerqueue_del+0x85/0xf0 lib/timerqueue.c:57
 __remove_hrtimer kernel/time/hrtimer.c:1118 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1669 [inline]
 __hrtimer_run_queues+0x409/0xe50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1107 [inline]
 __sysvec_apic_timer_interrupt+0x158/0x5b0 arch/x86/kernel/apic/apic.c:1124
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1118
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202
Code: a1 84 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e dc ae f6 48 89 df e8 f6 1a b0 f6 e8 51 6d d5 f6 fb bf 01 00 00 00 <e8> d6 9b a2 f6 65 8b 05 f7 71 46 75 85 c0 74 02 5b c3 e8 94 95 44
RSP: 0018:ffffc90005e1fb30 EFLAGS: 00000286
RAX: fd154b8b9428f600 RBX: ffff8880207ec0c0 RCX: ffffffff973c0103
RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: 0000000000000001
RBP: ffffc90005e1fc70 R08: dffffc0000000000 R09: ffffed10040fd819
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110040fd8ab
R13: 000000001c000004 R14: 0000000000000021 R15: ffff8880207ec558
 spin_unlock_irq include/linux/spinlock.h:401 [inline]
 get_signal+0x151f/0x17a0 kernel/signal.c:2874
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6211f8d167
Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
RSP: 002b:00007f6212e02038 EFLAGS: 00000246
RAX: 0000000000000113 RBX: 00007f62121a5fa0 RCX: 00007f6211f8d169
RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 00007f621200e2a0 R08: 0000000008000f28 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f62121a5fa0 R15: 00007ffe24e21a28
 </TASK>
CPU: 1 PID: 17911 Comm: syz.5.3208 Not tainted 6.1.131-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202
Code: a1 84 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e dc ae f6 48 89 df e8 f6 1a b0 f6 e8 51 6d d5 f6 fb bf 01 00 00 00 <e8> d6 9b a2 f6 65 8b 05 f7 71 46 75 85 c0 74 02 5b c3 e8 94 95 44
RSP: 0018:ffffc9000c06fb30 EFLAGS: 00000286
RAX: b19ee9501a9ff800 RBX: ffff88802fbf1280 RCX: ffffffff973c0103
RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: 0000000000000001
RBP: ffffc9000c06fc70 R08: dffffc0000000000 R09: ffffed1005f7e251
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005f7e2e3
R13: 000000001c000004 R14: 0000000000000021 R15: ffff88802fbf1718
FS:  00007fe56f2896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6212dc0d58 CR3: 000000007dd49000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 spin_unlock_irq include/linux/spinlock.h:401 [inline]
 get_signal+0x151f/0x17a0 kernel/signal.c:2874
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe56e38d167
Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
RSP: 002b:00007fe56f2890e8 EFLAGS: 00000246
RAX: 00000000000000ca RBX: 00007fe56e5a5fa8 RCX: 00007fe56e38d169
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe56e5a5fa8
RBP: 00007fe56e5a5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe56e5a5fac
R13: 0000000000000000 R14: 00007fff6cecaf20 R15: 00007fff6cecb008
 </TASK>