rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6292/1:b..l rcu: (detected by 1, t=10503 jiffies, g=120505, q=670 ncpus=2) task:kworker/0:5 state:R running task stack:22408 pid:6292 tgid:6292 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient gc_worker Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256 irqentry_exit+0x36/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:227 [inline] RIP: 0010:nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:342 [inline] RIP: 0010:gc_worker+0x2d5/0x16e0 net/netfilter/nf_conntrack_core.c:1548 Code: 00 00 48 c7 c7 68 e7 83 90 e8 67 3e 12 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 75 60 36 f8 58 48 85 db 0f 85 d4 0f 00 00 f6 64 36 f8 8b 1d 00 02 fd 06 41 89 dc 31 ff 41 83 e4 01 44 89 RSP: 0000:ffffc900036b7b48 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8986f099 RDX: ffff88802da14900 RSI: ffffffff8986f0a8 RDI: 0000000000000007 RBP: ffffffff9afc442c R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888024600000 R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 1242 jiffies! g120505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:7026 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xaf0 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x26d/0x380 kernel/rcu/tree.c:2285 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 3404 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: bat_events batadv_dat_purge RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline] RIP: 0010:check_preemption_disabled+0xf/0xe0 lib/smp_processor_id.c:16 Code: 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d f5 f5 3c 08 <65> 8b 05 ea f5 3c 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d RSP: 0018:ffffc90000006810 EFLAGS: 00000082 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000007f1fed10 RDX: 0000000000000000 RSI: ffffffff8dae09c4 RDI: ffffffff8bf1de40 RBP: 0000000000000002 R08: 03813abc02fcf7df R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881249d1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f01a81b4f18 CR3: 0000000034e18000 CR4: 00000000003526f0 Call Trace: lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lock_acquire kernel/locking/lockdep.c:5870 [inline] lock_acquire+0x189/0x350 kernel/locking/lockdep.c:5825 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2530 [inline] slab_free mm/slub.c:6619 [inline] kmem_cache_free+0x2d4/0x6c0 mm/slub.c:6729 __skb_ext_put+0x102/0x2c0 net/core/skbuff.c:7160 __skb_ext_del+0xf3/0x340 net/core/skbuff.c:7127 skb_ext_del include/linux/skbuff.h:4979 [inline] nf_bridge_info_free net/bridge/br_netfilter_hooks.c:156 [inline] br_nf_dev_queue_xmit+0x7a0/0x2b20 net/bridge/br_netfilter_hooks.c:919 NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] br_nf_post_routing+0x8e7/0x1190 net/bridge/br_netfilter_hooks.c:966 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xbe/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:273 NF_HOOK include/linux/netfilter.h:316 [inline] br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66 br_nf_hook_thresh+0x307/0x410 net/bridge/br_netfilter_hooks.c:1167 br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:662 NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] br_nf_forward_ip.part.0+0x609/0x810 net/bridge/br_netfilter_hooks.c:716 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:676 [inline] br_nf_forward+0xf0f/0x1be0 net/bridge/br_netfilter_hooks.c:773 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xbe/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:273 NF_HOOK include/linux/netfilter.h:316 [inline] __br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] br_flood+0x39c/0x650 net/bridge/br_forward.c:250 br_handle_frame_finish+0x10e6/0x1ec0 net/bridge/br_input.c:229 br_nf_hook_thresh+0x307/0x410 net/bridge/br_netfilter_hooks.c:1167 br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x3cd/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xad8/0x14b0 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 net/core/dev.c:5966 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6077 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6192 process_backlog+0x439/0x15e0 net/core/dev.c:6544 __napi_poll.constprop.0+0xba/0x550 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x97f/0xef0 net/core/dev.c:7784 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:510 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge.part.0+0x279/0x3a0 net/batman-adv/distributed-arp-table.c:185 __batadv_dat_purge net/batman-adv/distributed-arp-table.c:166 [inline] batadv_dat_purge+0x4b/0xa0 net/batman-adv/distributed-arp-table.c:204 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] rescuer_thread+0x620/0xea0 kernel/workqueue.c:3523 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 2693 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) net_ratelimit: 3015 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:b7:76:b8:73:75, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)