rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 0-...0: (1 ticks this GP) idle=427/1/0x4000000000000000 softirq=9878/9878 fqs=2099 (detected by 1, t=10504 jiffies, g=12549, q=460) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5057 Comm: syz.0.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 RIP: 0010:rb_insert_color+0x61d/0x650 lib/rbtree.c:437 Code: 00 74 24 4c 89 f7 e8 02 89 b2 fd eb 1a 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 e6 88 b2 fd 49 89 1e <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4d 89 e7 4c 89 f8 48 RSP: 0018:ffffc90000007c88 EFLAGS: 00000046 RAX: 1ffff11004aac568 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000018 RSI: ffff8880b8e2a390 RDI: ffff888025562b40 RBP: 0000000000000001 R08: ffff888025562b57 R09: ffff888025562b40 R10: dffffc0000000000 R11: ffffed1004aac56b R12: ffff888025562b40 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888025562b40 FS: 00007f788a7716c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f788afe78c0 CR3: 0000000071ddb000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rb_insert_color_cached include/linux/rbtree.h:114 [inline] rb_add_cached include/linux/rbtree.h:183 [inline] timerqueue_add+0x1c6/0x1f0 lib/timerqueue.c:40 enqueue_hrtimer+0x19b/0x370 kernel/time/hrtimer.c:1077 __run_hrtimer kernel/time/hrtimer.c:1702 [inline] __hrtimer_run_queues+0x5ed/0xb60 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x397/0x8b0 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline] __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 kernel/locking/spinlock.c:194 Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 7f 5c 7f f7 65 8b 05 50 6d 2f 76 85 c0 74 3c 48 c7 04 24 0e 36 RSP: 0018:ffffc90002eded20 EFLAGS: 00000206 RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: de2fb6a618bcef00 RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: 0000000000000001 RBP: ffffc90002ededb0 R08: ffffffff9104718f R09: 1ffffffff2208e31 R10: dffffc0000000000 R11: fffffbfff2208e32 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff888025562ae8 R15: 1ffff920005dbda4 spin_unlock_irqrestore include/linux/spinlock.h:419 [inline] taprio_change+0x4398/0x52d0 net/sched/sch_taprio.c:1585 qdisc_create+0x7e4/0x11a0 net/sched/sch_api.c:1281 tc_modify_qdisc+0xae1/0x17d0 net/sched/sch_api.c:-1 rtnetlink_rcv_msg+0x7f1/0xf10 net/core/rtnetlink.c:5698 netlink_rcv_skb+0x1e9/0x430 net/netlink/af_netlink.c:2527 netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline] netlink_unicast+0x804/0x9e0 net/netlink/af_netlink.c:1340 netlink_sendmsg+0x8ba/0xbe0 net/netlink/af_netlink.c:1927 sock_sendmsg_nosec net/socket.c:706 [inline] __sock_sendmsg net/socket.c:718 [inline] ____sys_sendmsg+0x5be/0x8f0 net/socket.c:2446 ___sys_sendmsg+0x236/0x2e0 net/socket.c:2500 __sys_sendmsg net/socket.c:2529 [inline] __do_sys_sendmsg net/socket.c:2538 [inline] __se_sys_sendmsg+0x1b7/0x2a0 net/socket.c:2536 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f788b10def9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f788a771028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f788b378fa0 RCX: 00007f788b10def9 RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 RBP: 00007f788b1a2ee0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f788b379038 R14: 00007f788b378fa0 R15: 00007fff03843c38