Extracting prog: 2m30.506801252s
Minimizing prog: 22m39.599262802s
Simplifying prog options: 0s
Extracting C: 3m58.992575506s
Simplifying C: 40m7.674082092s


extracting reproducer from 35 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300ffffffffff", 0x68, 0x0, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink
detailed listing:
executing program 0:
socket$netlink(0x10, 0x3, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto
detailed listing:
executing program 0:
sendto(0xffffffffffffffff, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300ffffffffff", 0x68, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in corrupted
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program did not crash
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in netlink_sendmsg
a never seen crash title: INFO: rcu detected stall in netlink_sendmsg, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in tc_ctl_action
a never seen crash title: INFO: rcu detected stall in tc_ctl_action, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in netlink_sendmsg
a never seen crash title: INFO: rcu detected stall in netlink_sendmsg, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in x64_sys_call
a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in x64_sys_call
a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in inet6_rtm_newaddr
a never seen crash title: INFO: rcu detected stall in inet6_rtm_newaddr, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in sys_close
a never seen crash title: INFO: rcu detected stall in sys_close, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in tc_ctl_action
a never seen crash title: INFO: rcu detected stall in tc_ctl_action, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in tc_ctl_action
a never seen crash title: INFO: rcu detected stall in tc_ctl_action, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in x64_sys_call
a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in x64_sys_call
a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in x64_sys_call
a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300ffffffffff", 0x68, 0x0, 0x0, 0x0)

program crashed: INFO: rcu detected stall in x64_sys_call
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300ffffffffff", 0x68, 0x0, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendto
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300ffffffffff", 0x68, 0x0, 0x0, 0x0)

program crashed: INFO: rcu detected stall in clock_nanosleep
validation run: crashed=true
reproducing took 1h17m10.693235581s
repro crashed as (corrupted=false):
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=ee84/1/0x4000000000000000 softirq=17643/17656 fqs=6
rcu: 	(t=10501 jiffies g=17997 q=368 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10489 jiffies! g17997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=4136
rcu: rcu_preempt kthread starved for 10492 jiffies! g17997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:63
Code: de 4b 8c e8 b2 8b 55 f5 e8 bd 86 60 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 80 dd 4b 8c e9 fd fe ff ff cc cc cc
RSP: 0018:ffffc90000a08d08 EFLAGS: 00000046
RAX: 9a128e8915b6f13c RBX: 0000000000000006 RCX: 0000000000000102
RDX: 0000000000000001 RSI: ffffffff9a7ca748 RDI: ffffffff8e4b61fd
RBP: ffff88802e552ac8 R08: ffffffff81b408d5 R09: 0000000000080000
R10: 0000000000000000 R11: ffffffff9a7ca748 R12: 0000000000000001
R13: 0000000000000001 R14: ffffffff9a7ca748 R15: ffff88802e551f00
FS:  0000555578a96500(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 0000000077274000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline]
 lock_release+0x259/0x3c0 kernel/locking/lockdep.c:5891
 seqcount_lockdep_reader_access+0xa4/0x100 include/linux/seqlock.h:74
 ktime_get+0x45/0x220 kernel/time/timekeeping.c:971
 gate_get_time net/sched/act_gate.c:23 [inline]
 gate_timer_func+0x1dc/0x450 net/sched/act_gate.c:101
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2113
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:198
Code: f7 e8 1d 9b ce f5 f7 c3 00 02 00 00 74 05 e8 90 7f fa f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 24 b1 bf f5 65 8b 05 1d 41 98 07 85 c0 74 18 5b 41 5e e9 81 48
RSP: 0018:ffffc90003bafba8 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8e231192 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: dffffc0000000000
R13: ffff8880b8728280 R14: ffff8880b87281c0 R15: 0000000000000000
 unlock_hrtimer_base kernel/time/hrtimer.c:1039 [inline]
 hrtimer_try_to_cancel+0x4a7/0x680 kernel/time/hrtimer.c:1634
 hrtimer_cancel kernel/time/hrtimer.c:1750 [inline]
 do_nanosleep+0x226/0x6a0 kernel/time/hrtimer.c:2401
 hrtimer_nanosleep+0x18f/0x3a0 kernel/time/hrtimer.c:2445
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1406 [inline]
 __se_sys_clock_nanosleep+0x35b/0x3b0 kernel/time/posix-timers.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f26aed5e90e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffd5c0a0ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 0000555578a96500 RCX: 00007f26aed5e90e
RDX: 00007ffd5c0a0d40 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffd5c0a0dac R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000000927c0 R14: 000000000001d7e9 R15: 00007ffd5c0a0e00
 </TASK>
CPU: 0 UID: 0 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 include/linux/seqlock.h:76
Code: 00 75 11 e8 96 0f 13 00 4d 85 ff 75 16 e8 8c 0f 13 00 eb 15 e8 85 0f 13 00 e8 a0 10 1e 0a 4d 85 ff 74 ea e8 76 0f 13 00 fb 5b <41> 5e 41 5f e9 0b 13 21 0a cc 66 2e 0f 1f 84 00 00 00 00 00 90 90
RSP: 0018:ffffc90000007d80 EFLAGS: 00000246
RAX: ffffffff81b4048a RBX: 0000000000000000 RCX: ffff88802c5e5d00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000009dec5a88 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: ffff888032f05318
R13: ffff888073d7e6b0 R14: ffffffff81b408d5 R15: 0000000000000200
FS:  000055558ff1d500(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005653b94e9fd0 CR3: 0000000025594000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 ktime_get+0x45/0x220 kernel/time/timekeeping.c:971
 gate_get_time net/sched/act_gate.c:23 [inline]
 gate_timer_func+0x1dc/0x450 net/sched/act_gate.c:101
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2113
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:preempt_count_sub+0xf6/0x170 kernel/sched/core.c:6009
Code: 43 5e c3 0e 00 75 13 48 8d 3d 36 18 c6 0e 48 c7 c6 80 0e ec 8b 67 48 0f b9 3a 90 e9 79 ff ff ff 48 c7 c1 80 65 78 9a 80 e1 07 <80> c1 03 38 c1 0f 8c 26 ff ff ff 89 fd 48 c7 c7 80 65 78 9a e8 f1
RSP: 0018:ffffc9000353f148 EFLAGS: 00000246
RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff9a786500
RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: 0000000000000001
RBP: 1ffff110058bcba3 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: ffff88802c5e5d2c
R13: dffffc0000000000 R14: 1ffff110058bcba0 R15: ffff88802c5e7038
 __schedule_loop kernel/sched/core.c:7312 [inline]
 schedule+0x16e/0x2b0 kernel/sched/core.c:7326
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
 rtnl_newlink+0xc10/0x1c30 net/core/rtnetlink.c:4214
 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7132
 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775
 __sock_sendmsg net/socket.c:790 [inline]
 __sys_sendto+0x408/0x5a0 net/socket.c:2252
 __do_sys_sendto net/socket.c:2259 [inline]
 __se_sys_sendto net/socket.c:2255 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2255
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdc2455e90e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffc64673b08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000055558ff1d500 RCX: 00007fdc2455e90e
RDX: 0000000000000020 RSI: 00007fdc25354670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffc64673b84 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fdc25354670 R15: 0000000000000000
 </TASK>

final repro crashed as (corrupted=false):
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=ee84/1/0x4000000000000000 softirq=17643/17656 fqs=6
rcu: 	(t=10501 jiffies g=17997 q=368 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10489 jiffies! g17997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=4136
rcu: rcu_preempt kthread starved for 10492 jiffies! g17997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5772 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:63
Code: de 4b 8c e8 b2 8b 55 f5 e8 bd 86 60 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 80 dd 4b 8c e9 fd fe ff ff cc cc cc
RSP: 0018:ffffc90000a08d08 EFLAGS: 00000046
RAX: 9a128e8915b6f13c RBX: 0000000000000006 RCX: 0000000000000102
RDX: 0000000000000001 RSI: ffffffff9a7ca748 RDI: ffffffff8e4b61fd
RBP: ffff88802e552ac8 R08: ffffffff81b408d5 R09: 0000000000080000
R10: 0000000000000000 R11: ffffffff9a7ca748 R12: 0000000000000001
R13: 0000000000000001 R14: ffffffff9a7ca748 R15: ffff88802e551f00
FS:  0000555578a96500(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 0000000077274000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline]
 lock_release+0x259/0x3c0 kernel/locking/lockdep.c:5891
 seqcount_lockdep_reader_access+0xa4/0x100 include/linux/seqlock.h:74
 ktime_get+0x45/0x220 kernel/time/timekeeping.c:971
 gate_get_time net/sched/act_gate.c:23 [inline]
 gate_timer_func+0x1dc/0x450 net/sched/act_gate.c:101
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2113
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:198
Code: f7 e8 1d 9b ce f5 f7 c3 00 02 00 00 74 05 e8 90 7f fa f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 24 b1 bf f5 65 8b 05 1d 41 98 07 85 c0 74 18 5b 41 5e e9 81 48
RSP: 0018:ffffc90003bafba8 EFLAGS: 00000206
RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8e231192 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: dffffc0000000000
R13: ffff8880b8728280 R14: ffff8880b87281c0 R15: 0000000000000000
 unlock_hrtimer_base kernel/time/hrtimer.c:1039 [inline]
 hrtimer_try_to_cancel+0x4a7/0x680 kernel/time/hrtimer.c:1634
 hrtimer_cancel kernel/time/hrtimer.c:1750 [inline]
 do_nanosleep+0x226/0x6a0 kernel/time/hrtimer.c:2401
 hrtimer_nanosleep+0x18f/0x3a0 kernel/time/hrtimer.c:2445
 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1406 [inline]
 __se_sys_clock_nanosleep+0x35b/0x3b0 kernel/time/posix-timers.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f26aed5e90e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffd5c0a0ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 0000555578a96500 RCX: 00007f26aed5e90e
RDX: 00007ffd5c0a0d40 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffd5c0a0dac R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000000927c0 R14: 000000000001d7e9 R15: 00007ffd5c0a0e00
 </TASK>
CPU: 0 UID: 0 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 include/linux/seqlock.h:76
Code: 00 75 11 e8 96 0f 13 00 4d 85 ff 75 16 e8 8c 0f 13 00 eb 15 e8 85 0f 13 00 e8 a0 10 1e 0a 4d 85 ff 74 ea e8 76 0f 13 00 fb 5b <41> 5e 41 5f e9 0b 13 21 0a cc 66 2e 0f 1f 84 00 00 00 00 00 90 90
RSP: 0018:ffffc90000007d80 EFLAGS: 00000246
RAX: ffffffff81b4048a RBX: 0000000000000000 RCX: ffff88802c5e5d00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000009dec5a88 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: ffff888032f05318
R13: ffff888073d7e6b0 R14: ffffffff81b408d5 R15: 0000000000000200
FS:  000055558ff1d500(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005653b94e9fd0 CR3: 0000000025594000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 ktime_get+0x45/0x220 kernel/time/timekeeping.c:971
 gate_get_time net/sched/act_gate.c:23 [inline]
 gate_timer_func+0x1dc/0x450 net/sched/act_gate.c:101
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2113
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:preempt_count_sub+0xf6/0x170 kernel/sched/core.c:6009
Code: 43 5e c3 0e 00 75 13 48 8d 3d 36 18 c6 0e 48 c7 c6 80 0e ec 8b 67 48 0f b9 3a 90 e9 79 ff ff ff 48 c7 c1 80 65 78 9a 80 e1 07 <80> c1 03 38 c1 0f 8c 26 ff ff ff 89 fd 48 c7 c7 80 65 78 9a e8 f1
RSP: 0018:ffffc9000353f148 EFLAGS: 00000246
RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff9a786500
RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: 0000000000000001
RBP: 1ffff110058bcba3 R08: ffffffff9057ac37 R09: 1ffffffff20af586
R10: dffffc0000000000 R11: fffffbfff20af587 R12: ffff88802c5e5d2c
R13: dffffc0000000000 R14: 1ffff110058bcba0 R15: ffff88802c5e7038
 __schedule_loop kernel/sched/core.c:7312 [inline]
 schedule+0x16e/0x2b0 kernel/sched/core.c:7326
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821
 rtnl_lock net/core/rtnetlink.c:80 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:366 [inline]
 rtnl_newlink+0xc10/0x1c30 net/core/rtnetlink.c:4214
 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7132
 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775
 __sock_sendmsg net/socket.c:790 [inline]
 __sys_sendto+0x408/0x5a0 net/socket.c:2252
 __do_sys_sendto net/socket.c:2259 [inline]
 __se_sys_sendto net/socket.c:2255 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2255
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdc2455e90e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffc64673b08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000055558ff1d500 RCX: 00007fdc2455e90e
RDX: 0000000000000020 RSI: 00007fdc25354670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffc64673b84 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fdc25354670 R15: 0000000000000000
 </TASK>