rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 1-....: (1 GPs behind) idle=5c7/1/0x4000000000000000 softirq=38915/38916 fqs=2476 (t=10501 jiffies g=57297 q=1430) NMI backtrace for cpu 1 CPU: 1 PID: 5413 Comm: syz.0.107 Not tainted 5.15.163-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline] rcu_dump_cpu_stacks+0x223/0x390 kernel/rcu/tree_stall.h:349 print_cpu_stall+0x320/0x600 kernel/rcu/tree_stall.h:633 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline] rcu_pending kernel/rcu/tree.c:3932 [inline] rcu_sched_clock_irq+0x8d9/0x1150 kernel/rcu/tree.c:2619 update_process_times+0x196/0x200 kernel/time/timer.c:1818 tick_sched_handle kernel/time/tick-sched.c:254 [inline] tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1686 [inline] __hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:52 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:178 [inline] RIP: 0010:unwind_next_frame+0x53a/0x1fa0 arch/x86/kernel/unwind_orc.c:448 Code: 1c 46 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 e8 4c 0f 46 f1 48 8d 43 fc 48 0f 47 e8 <4c> 0f 46 e3 49 39 ee 76 b3 e9 31 fd ff ff 89 d9 80 e1 07 80 c1 03 RSP: 0018:ffffc90000dcfee8 EFLAGS: 00000287 RAX: ffffffff8e44913c RBX: ffffffff8e449140 RCX: ffffffff8e449144 RDX: dffffc0000000000 RSI: ffffffff8ed4fa64 RDI: ffffffff8e44913c RBP: ffffffff8e449144 R08: 0000000000000003 R09: ffffc90000dd0090 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8e44913c R13: ffffffff88fc2236 R14: ffffffff8e449144 R15: ffffc90000dcffa0 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x4b/0x80 mm/kasan/common.c:46 kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:360 ____kasan_slab_free+0xd8/0x120 mm/kasan/common.c:366 kasan_slab_free include/linux/kasan.h:230 [inline] slab_free_hook mm/slub.c:1705 [inline] slab_free_freelist_hook+0xdd/0x160 mm/slub.c:1731 slab_free mm/slub.c:3499 [inline] kfree+0xf1/0x270 mm/slub.c:4559 skb_free_head net/core/skbuff.c:655 [inline] skb_release_data+0x73a/0x8a0 net/core/skbuff.c:677 skb_release_all net/core/skbuff.c:742 [inline] __kfree_skb net/core/skbuff.c:756 [inline] consume_skb+0xa3/0x140 net/core/skbuff.c:914 netlink_broadcast_filtered+0x1083/0x11a0 net/netlink/af_netlink.c:1536 netlink_broadcast net/netlink/af_netlink.c:1558 [inline] nlmsg_multicast include/net/netlink.h:1033 [inline] nlmsg_notify+0xf7/0x1b0 net/netlink/af_netlink.c:2547 neigh_cleanup_and_release+0xa5/0x260 net/core/neighbour.c:101 neigh_del net/core/neighbour.c:197 [inline] neigh_remove_one+0x4b1/0x5c0 net/core/neighbour.c:218 neigh_forced_gc net/core/neighbour.c:251 [inline] neigh_alloc net/core/neighbour.c:429 [inline] ___neigh_create+0x45a/0x2220 net/core/neighbour.c:591 ip6_finish_output2+0x11aa/0x14f0 net/ipv6/ip6_output.c:123 dst_output include/net/dst.h:443 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:509 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3958 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451 expire_timers kernel/time/timer.c:1496 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1767 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780 handle_softirqs+0x3a7/0x930 kernel/softirq.c:558 __do_softirq kernel/softirq.c:592 [inline] invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641 irq_exit_rcu+0x5/0x20 kernel/softirq.c:653 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:init_wait_entry+0x0/0xd0 kernel/sched/wait.c:294 Code: fe ff ff 0f 0b e9 79 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 97 6c 6a 00 e9 16 fe ff ff 66 90 <55> 41 57 41 56 53 89 f5 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 RSP: 0018:ffffc90003527138 EFLAGS: 00000246 RAX: ffffc900035272f0 RBX: ffffc900035271d0 RCX: 0000000000000000 RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900035272f0 RBP: ffffc90003527388 R08: dffffc0000000000 R09: ffffc900035272f0 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900035272f0 R13: ffffc90003527700 R14: 1ffff920006a4e2c R15: 0000000000009458 synchronize_rcu_expedited+0x58b/0x740 kernel/rcu/tree_exp.h:861 dev_deactivate_many+0x608/0xbf0 net/sched/sch_generic.c:1310 __dev_close_many+0x26d/0x3c0 net/core/dev.c:1577 dev_close_many+0x22a/0x530 net/core/dev.c:1615 unregister_netdevice_many+0x4b0/0x18f0 net/core/dev.c:11070 ip_tunnel_delete_nets+0x2ed/0x330 net/ipv4/ip_tunnel.c:1150 ops_exit_list net/core/net_namespace.c:177 [inline] setup_net+0x81c/0x9e0 net/core/net_namespace.c:355 copy_net_ns+0x392/0x5d0 net/core/net_namespace.c:476 create_new_namespaces+0x425/0x7a0 kernel/nsproxy.c:110 copy_namespaces+0x365/0x3b0 kernel/nsproxy.c:178 copy_process+0x1841/0x3ef0 kernel/fork.c:2209 kernel_clone+0x210/0x960 kernel/fork.c:2604 __do_sys_clone kernel/fork.c:2721 [inline] __se_sys_clone kernel/fork.c:2705 [inline] __x64_sys_clone+0x23f/0x290 kernel/fork.c:2705 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f1476c34b59 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f14756b4ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f1476dc4f60 RCX: 00007f1476c34b59 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 RBP: 00007f1476ca3e5d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 000000000000000b R14: 00007f1476dc4f60 R15: 00007fff7bebc2f8