rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2661 jiffies s: 36945 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 20243 Comm: syz.1.4365 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:taprio_set_budgets+0xd0/0x370 net/sched/sch_taprio.c:664
Code: 08 84 c0 0f 85 97 02 00 00 0f b7 1b 31 ff 89 de e8 75 84 de f7 66 85 db 0f 8e 6a 02 00 00 49 81 c7 30 01 00 00 48 83 04 24 20 <48> 8d 04 9d fc ff ff ff 48 89 44 24 20 4c 89 fb 45 31 e4 4c 89 f8
RSP: 0000:ffffc90000a18c30 EFLAGS: 00000082
RAX: 0000000000010000 RBX: 0000000000000002 RCX: dffffc0000000000
RDX: ffff88807ab8bc00 RSI: 0000000000000002 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff89b509db R09: fffff52000143180
R10: dffffc0000000000 R11: fffff52000143180 R12: dffffc0000000000
R13: ffff88802b7f6c08 R14: ffff88802b7f6c00 R15: ffff88802b7f7d30
FS:  0000555590903500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2de1fffc CR3: 000000001e642000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 advance_sched+0x98d/0xca0 net/sched/sch_taprio.c:977
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:try_charge_memcg+0x4de/0x1010 mm/memcontrol.c:2171
Code: 44 24 30 00 02 00 00 75 1b 80 7c 24 28 00 75 20 e9 74 08 00 00 e8 22 89 ae 09 f7 44 24 30 00 02 00 00 74 e5 fb 80 7c 24 28 00 <0f> 84 59 08 00 00 e9 06 02 00 00 44 89 fb 48 8b bc 24 80 00 00 00
RSP: 0000:ffffc90004abf3c0 EFLAGS: 00000246
RAX: dbf1a835825aae00 RBX: 1ffff92000957e90 RCX: ffffffff8170410a
RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffc90004abf480
RBP: ffffc90004abf550 R08: ffffffff934f48e7 R09: 1ffffffff269e91c
R10: dffffc0000000000 R11: fffffbfff269e91d R12: ffff88805e688000
R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000040
 obj_cgroup_charge_pages+0x91/0x200 mm/memcontrol.c:2660
 __memcg_kmem_charge_page+0xc8/0x1d0 mm/memcontrol.c:2687
 __alloc_pages_noprof+0x28c/0x6c0 mm/page_alloc.c:4712
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2263
 pagetable_alloc_noprof include/linux/mm.h:2868 [inline]
 __pte_alloc_one_noprof include/asm-generic/pgalloc.h:70 [inline]
 pte_alloc_one+0x88/0x5d0 arch/x86/mm/pgtable.c:33
 __do_fault+0xd0/0x460 mm/memory.c:4650
 do_shared_fault mm/memory.c:5121 [inline]
 do_fault mm/memory.c:5195 [inline]
 do_pte_missing mm/memory.c:3947 [inline]
 handle_pte_fault+0x1176/0x6fc0 mm/memory.c:5521
 __handle_mm_fault mm/memory.c:5664 [inline]
 handle_mm_fault+0xf70/0x1880 mm/memory.c:5832
 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f73210589c6
Code: 4d 89 f5 41 83 e5 03 0f 85 f7 01 00 00 48 89 df be 04 00 00 00 e8 2a b6 fe ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 <89> 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f
RSP: 002b:00007ffc143fffc0 EFLAGS: 00010202
RAX: 0000001b2de20000 RBX: 00007f7321e45720 RCX: 0000001b2d820210
RDX: 0000001b2de1fffc RSI: 00000000005ffdf0 RDI: 00007f7321e45700
RBP: 0000000000000000 R08: 00007f7321300000 R09: 00007f7321302000
R10: 00007f7321e45700 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000aea
 </TASK>