rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (9950 ticks this GP) idle=885/1/0x4000000000000000 softirq=36810/36813 fqs=4 (t=10500 jiffies g=55841 q=1881) rcu: rcu_preempt kthread starved for 10491 jiffies! g55841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26168 pid: 15 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x12c4/0x45b0 kernel/sched/core.c:6376 schedule+0x11b/0x1f0 kernel/sched/core.c:6459 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1884 rcu_gp_fqs_loop+0x2bf/0x1080 kernel/rcu/tree.c:1972 rcu_gp_kthread+0xa4/0x360 kernel/rcu/tree.c:2145 kthread+0x3f6/0x4f0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7935 Comm: syz-executor.4 Not tainted 5.15.151-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x80 kernel/kcov.c:285 Code: 39 d0 77 22 89 f8 89 f6 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 c3 0f 1f 00 <4c> 8b 04 24 65 48 8b 15 c4 36 82 7e 65 8b 05 c5 36 82 7e a9 00 01 RSP: 0018:ffffc90000dceb78 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000010b03 RDX: ffff888018c45940 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90000dcecb0 R08: ffffffff81a530ad R09: fffffbfff1f79e19 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff920001b9d80 R14: 0000000000000008 R15: ffffc90000dced00 FS: 00007f535e53d6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c006a29000 CR3: 0000000072d98000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __perf_output_begin kernel/events/ring_buffer.c:170 [inline] perf_output_begin_forward+0x1a6/0xac0 kernel/events/ring_buffer.c:271 __perf_event_output kernel/events/core.c:7719 [inline] perf_event_output_forward+0x1c8/0x310 kernel/events/core.c:7737 __perf_event_overflow+0x35d/0x530 kernel/events/core.c:9432 perf_swevent_hrtimer+0x3fd/0x560 kernel/events/core.c:10828 __run_hrtimer kernel/time/hrtimer.c:1686 [inline] __hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:lock_is_held_type+0x137/0x180 Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc90000dcf3e8 EFLAGS: 00000206 RAX: d33eeb06ebfc7a00 RBX: 000000000000000c RCX: ffff888018c45940 RDX: 0000000000000b03 RSI: ffffffff8a8b27a0 RDI: ffffffff8ad88f40 RBP: 0000000000000000 R08: ffffffff88f68f85 R09: ffffffff88f7e245 R10: 000000000000000b R11: ffff888018c45940 R12: 0000000000000246 R13: ffff888018c45940 R14: 00000000ffffffff R15: ffffffff8d9db908 lock_is_held include/linux/lockdep.h:287 [inline] lockdep_rtnl_is_held+0x17/0x30 net/core/rtnetlink.c:137 __in6_dev_get include/net/addrconf.h:321 [inline] ipv6_dev_get_saddr+0x4ae/0xb50 net/ipv6/addrconf.c:1844 ip6_route_get_saddr include/net/ip6_route.h:145 [inline] ip6_dst_lookup_tail+0xc87/0x11a0 net/ipv6/ip6_output.c:1099 icmpv6_route_lookup+0xe8/0x650 net/ipv6/icmp.c:366 icmp6_send+0x1352/0x21e0 net/ipv6/icmp.c:601 __icmpv6_send include/linux/icmpv6.h:28 [inline] icmpv6_send include/linux/icmpv6.h:49 [inline] ip6_link_failure+0x37/0x4a0 net/ipv6/route.c:2790 dst_link_failure include/net/dst.h:422 [inline] vti6_xmit net/ipv6/ip6_vti.c:548 [inline] vti6_tnl_xmit+0x13ac/0x1ab0 net/ipv6/ip6_vti.c:587 __netdev_start_xmit include/linux/netdevice.h:5019 [inline] netdev_start_xmit include/linux/netdevice.h:5033 [inline] xmit_one net/core/dev.c:3617 [inline] dev_hard_start_xmit+0x298/0x7a0 net/core/dev.c:3633 __dev_queue_xmit+0x1cee/0x3230 net/core/dev.c:4248 neigh_output include/net/neighbour.h:509 [inline] ip6_finish_output2+0xee8/0x14f0 net/ipv6/ip6_output.c:126 ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline] udp_tunnel6_xmit_skb+0x538/0x970 net/ipv6/ip6_udp_tunnel.c:109 geneve6_xmit_skb drivers/net/geneve.c:1053 [inline] geneve_xmit+0x255f/0x39d0 drivers/net/geneve.c:1082 __netdev_start_xmit include/linux/netdevice.h:5019 [inline] netdev_start_xmit include/linux/netdevice.h:5033 [inline] xmit_one net/core/dev.c:3617 [inline] dev_hard_start_xmit+0x298/0x7a0 net/core/dev.c:3633 __dev_queue_xmit+0x1cee/0x3230 net/core/dev.c:4248 neigh_output include/net/neighbour.h:509 [inline] ip6_finish_output2+0xee8/0x14f0 net/ipv6/ip6_output.c:126 dst_output include/net/dst.h:443 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:509 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3957 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1737 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1750 __do_softirq+0x3b3/0x93a kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:finish_lock_switch+0x91/0x100 kernel/sched/core.c:4785 Code: 45 31 c9 68 57 6c 59 81 e8 dc 1a 09 00 48 83 c4 08 4c 89 ff e8 60 da fe ff 66 90 4c 89 ff e8 76 b8 cb 08 e8 e1 46 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 RSP: 0018:ffffc90003f17838 EFLAGS: 00000286 RAX: d33eeb06ebfc7a00 RBX: ffff888024345974 RCX: ffffffff8162f4e8 RDX: dffffc0000000000 RSI: ffffffff8a8b1500 RDI: ffffffff8ad88f40 RBP: ffffc90003f178b0 R08: dffffc0000000000 R09: fffffbfff1f79e1f R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff1101736760b R14: ffff8880b9b3b058 R15: ffff8880b9b3a300 finish_task_switch+0x134/0x630 kernel/sched/core.c:4902 context_switch kernel/sched/core.c:5033 [inline] __schedule+0x12cc/0x45b0 kernel/sched/core.c:6376 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6780 irqentry_exit+0x53/0x80 kernel/entry/common.c:426 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:lock_acquire+0x252/0x4f0 kernel/locking/lockdep.c:5627 Code: 2b 00 74 08 4c 89 f7 e8 7c 68 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0000:ffffc90003f17c20 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920007e2f90 RCX: ffffffff816340b2 RDX: dffffc0000000000 RSI: ffffffff8a8b27a0 RDI: ffffffff8ad88f40 RBP: ffffc90003f17d78 R08: dffffc0000000000 R09: fffffbfff1f79e1f R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920007e2f8c R13: dffffc0000000000 R14: ffffc90003f17c80 R15: 0000000000000246 __might_fault+0xb4/0x110 mm/memory.c:5324 clear_rseq_cs kernel/rseq.c:220 [inline] rseq_ip_fixup kernel/rseq.c:254 [inline] __rseq_handle_notify_resume+0x5de/0x1250 kernel/rseq.c:292 rseq_handle_notify_resume include/linux/sched.h:2204 [inline] tracehook_notify_resume include/linux/tracehook.h:201 [inline] exit_to_user_mode_loop+0xdc/0x130 kernel/entry/common.c:175 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:208 irqentry_exit_to_user_mode+0x5/0x40 kernel/entry/common.c:314 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0033:0x7f535ffbcda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f535e53d178 EFLAGS: 00000246 RAX: 0000000000000001 RBX: 00007f53600eaf88 RCX: 00007f535ffbcda9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53600eaf8c RBP: 00007f53600eaf80 R08: 0000000000000010 R09: 00007f535e53d6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53600eaf8c R13: 000000000000000b R14: 00007ffd41390950 R15: 00007ffd41390a38 NMI backtrace for cpu 0 CPU: 0 PID: 7945 Comm: syz-executor.3 Not tainted 5.15.151-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline] rcu_dump_cpu_stacks+0x223/0x390 kernel/rcu/tree_stall.h:349 print_cpu_stall+0x320/0x600 kernel/rcu/tree_stall.h:633 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline] rcu_pending kernel/rcu/tree.c:3932 [inline] rcu_sched_clock_irq+0x8d9/0x1150 kernel/rcu/tree.c:2619 update_process_times+0x196/0x200 kernel/time/timer.c:1788 tick_sched_handle kernel/time/tick-sched.c:254 [inline] tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1686 [inline] __hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:round_jiffies_common kernel/time/timer.c:291 [inline] RIP: 0010:round_jiffies+0x36/0xb0 kernel/time/timer.c:387 Code: e8 af a1 11 00 65 8b 05 70 81 93 7e 8d 04 40 4c 63 e0 4f 8d 3c 34 4c 89 f8 48 c1 e8 02 48 b9 c3 f5 28 5c 8f c2 f5 28 48 f7 e1 <48> c1 ea 02 4c 6b ea 64 45 29 ef bf 18 00 00 00 44 89 fe e8 d2 a4 RSP: 0018:ffffc90000007af0 EFLAGS: 00000a87 RAX: 851eb85207ae290f RBX: 1ffff1100677df0c RCX: 28f5c28f5c28f5c3 RDX: 000000000a3d781f RSI: 0000000000000000 RDI: 000000010000bb14 RBP: 0000000000000000 R08: dffffc0000000000 R09: ffff888033bef868 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 R13: dffffc0000000000 R14: 000000010000bb14 R15: 000000010000bb14 can_stat_update+0xb15/0xbb0 net/can/proc.c:176 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1737 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1750 __do_softirq+0x3b3/0x93a kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:mod_lruvec_page_state include/linux/vmstat.h:495 [inline] RIP: 0010:account_kernel_stack+0x192/0x420 kernel/fork.c:387 Code: 00 00 00 00 00 00 9c 8f 84 24 c0 00 00 00 4d 89 ee 48 8b 44 24 20 42 80 3c 28 00 74 0d 48 8d bc 24 c0 00 00 00 e8 be 61 7e 00 <4c> 8b ac 24 c0 00 00 00 fa be 00 02 00 00 4c 21 ee 31 ff e8 16 a9 RSP: 0018:ffffc90003167a00 EFLAGS: 00000246 RAX: 1ffff9200062cf58 RBX: ffffea0000dfa640 RCX: 0000000000040000 RDX: ffffc90019ee7000 RSI: 0000000000005013 RDI: ffff88803856a010 RBP: ffffc90003167b28 R08: ffffffff814b90f9 R09: fffffbfff1bc719e R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88803856a0a0 release_task_stack kernel/fork.c:431 [inline] put_task_stack+0x8f/0x140 kernel/fork.c:443 finish_task_switch+0x276/0x630 kernel/sched/core.c:4942 context_switch kernel/sched/core.c:5033 [inline] __schedule+0x12cc/0x45b0 kernel/sched/core.c:6376 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6780 irqentry_exit+0x53/0x80 kernel/entry/common.c:426 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:exit_to_user_mode_loop+0x3d/0x130 kernel/entry/common.c:162 Code: 49 89 fe eb 1c e8 a3 3a ae 08 65 48 8b 05 9b ed 94 7e 48 8b 18 f7 c3 0e 30 02 00 0f 84 e6 00 00 00 e8 37 31 19 00 fb f6 c3 08 <74> 05 e8 6c 62 b6 08 f7 c3 00 10 00 00 74 08 4c 89 f7 e8 1c bf 38 RSP: 0000:ffffc90003167f10 EFLAGS: 00000202 RAX: d5a1765a32ff6a00 RBX: 0000000000000008 RCX: ffffffff913c6f03 RDX: dffffc0000000000 RSI: ffffffff8a8b1500 RDI: ffffffff8ad88f40 RBP: 0000000000000000 R08: ffffffff8186b3a0 R09: ffffffff8f5d2008 R10: ffffffff8f5d2018 R11: ffffffff8f5d2010 R12: 0000000000000000 R13: 0000000000000000 R14: ffffc90003167f58 R15: ffff8880303e3b80 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:208 irqentry_exit_to_user_mode+0x5/0x40 kernel/entry/common.c:314 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0033:0x7fd720109da9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd71e68a0c8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007fd720237f80 RCX: 00007fd720109da9 RDX: 00000000200004c0 RSI: 0000000000005452 RDI: 0000000000000003 RBP: 00007fd72015647a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fd720237f80 R15: 00007ffdf939d418