rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6591/1:b..l rcu: (detected by 1, t=10503 jiffies, g=11285, q=1586078 ncpus=2) task:syz.4.596 state:R running task stack:24656 pid:6591 tgid:6589 ppid:5243 flags:0x20004006 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6682 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7004 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5829 Code: 2b 00 74 08 4c 89 f7 e8 8a 3f 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc900015d7520 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920002baeb0 RCX: 523873c7c9b2d800 RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fca0 RBP: ffffc900015d7668 R08: ffffffff942c8807 R09: 1ffffffff2859100 R10: dffffc0000000000 R11: fffffbfff2859101 R12: 1ffff920002baeac R13: dffffc0000000000 R14: ffffc900015d7580 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] __pte_offset_map+0x9e/0x380 mm/pgtable-generic.c:287 __pte_offset_map_lock+0xc7/0x300 mm/pgtable-generic.c:371 pte_offset_map_lock include/linux/mm.h:3014 [inline] follow_page_pte+0x129/0x2010 mm/gup.c:846 follow_pmd_mask mm/gup.c:969 [inline] follow_pud_mask mm/gup.c:1021 [inline] follow_p4d_mask mm/gup.c:1038 [inline] follow_page_mask mm/gup.c:1081 [inline] __get_user_pages+0xb75/0x48d0 mm/gup.c:1483 populate_vma_page_range+0x264/0x330 mm/gup.c:1923 __mm_populate+0x27a/0x460 mm/gup.c:2026 mm_populate include/linux/mm.h:3371 [inline] vm_mmap_pgoff+0x2c3/0x3d0 mm/util.c:593 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf742d579 RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 RDX: 000000000000000f RSI: 0000000004008032 RDI: 00000000ffffffff RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10373 jiffies! g11285 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25136 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6682 __schedule_loop kernel/sched/core.c:6759 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6774 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5285 Comm: kworker/0:6 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events nsim_dev_trap_report_work RIP: 0010:unwind_next_frame+0x0/0x22d0 arch/x86/kernel/unwind_orc.c:469 Code: cc cc 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 83 31 bd 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 RSP: 0018:ffffc90000006c18 EFLAGS: 00000283 RAX: ffffc90000006d10 RBX: ffffc90000006cb8 RCX: 0000000000000002 RDX: dffffc0000000000 RSI: ffffffff8e1d6f6f RDI: ffffc90000006c80 RBP: 1ffff92000000d91 R08: ffffc90000006c00 R09: 0000000000000000 R10: ffffc90000006c80 R11: fffff52000000d9c R12: 1ffff92000000d92 R13: ffffc90000006c90 R14: ffffc90000006c80 R15: ffffc90000006c88 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000032a0fff8 CR3: 000000000e734000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __unwind_start+0x59a/0x740 arch/x86/kernel/unwind_orc.c:760 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe5/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:230 [inline] slab_free_hook mm/slub.c:2342 [inline] slab_free mm/slub.c:4579 [inline] kfree+0x1a0/0x440 mm/slub.c:4727 skb_kfree_head net/core/skbuff.c:1086 [inline] skb_free_head net/core/skbuff.c:1098 [inline] skb_release_data+0x6a0/0x8a0 net/core/skbuff.c:1125 skb_release_all net/core/skbuff.c:1190 [inline] __kfree_skb net/core/skbuff.c:1204 [inline] consume_skb+0x9f/0xf0 net/core/skbuff.c:1436 nft_synproxy_eval_v4+0x3d2/0x610 net/netfilter/nft_synproxy.c:60 nft_synproxy_do_eval+0x362/0xa60 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5666 [inline] __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 do_softirq+0x11b/0x1e0 kernel/softirq.c:455 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244