rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6329/1:b..l P47/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=11193, q=1088 ncpus=2)
task:kworker/1:1 state:R running task stack:21072 pid:47 tgid:47 ppid:2 task_flags:0x4208060 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6944
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6968
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
unwind_next_frame+0x18f8/0x22d0 arch/x86/kernel/unwind_orc.c:672
__unwind_start+0x59a/0x740 arch/x86/kernel/unwind_orc.c:760
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0xe5/0x150 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
save_stack+0xfb/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x76/0x430 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1127 [inline]
free_frozen_pages+0xe0d/0x10e0 mm/page_alloc.c:2660
discard_slab mm/slub.c:2684 [inline]
__put_partials+0x160/0x1c0 mm/slub.c:3153
put_cpu_partial+0x17c/0x250 mm/slub.c:3228
__slab_free+0x290/0x380 mm/slub.c:4479
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385
kasan_kmalloc include/linux/kasan.h:260 [inline]
__kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4325
kmalloc_noprof include/linux/slab.h:901 [inline]
usb_control_msg+0xbb/0x4c0 drivers/usb/core/message.c:144
usb_clear_port_feature drivers/usb/core/hub.c:454 [inline]
port_event drivers/usb/core/hub.c:5730 [inline]
hub_event+0xa4e/0x5150 drivers/usb/core/hub.c:5915
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xac0/0x18e0 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x7ab/0x920 kernel/kthread.c:464
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
task:syz.4.99 state:R running task stack:25056 pid:6329 tgid:6328 ppid:5839 task_flags:0x40054c flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6944
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6968
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
zap_pte_range mm/memory.c:1772 [inline]
zap_pmd_range mm/memory.c:1834 [inline]
zap_pud_range mm/memory.c:1863 [inline]
zap_p4d_range mm/memory.c:1884 [inline]
unmap_page_range+0x3a0d/0x4510 mm/memory.c:1905
unmap_vmas+0x3cc/0x5f0 mm/memory.c:1995
exit_mmap+0x283/0xd40 mm/mmap.c:1284
__mmput+0x115/0x420 kernel/fork.c:1356
exit_mm+0x220/0x310 kernel/exit.c:570
do_exit+0x9ad/0x28e0 kernel/exit.c:925
do_group_exit+0x207/0x2c0 kernel/exit.c:1087
get_signal+0x168c/0x1720 kernel/signal.c:3036
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f376ef8d0a9
RSP: 002b:00007f376fdcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 0000000000000000 RBX: 00007f376f1a5fa8 RCX: 00007f376ef8d0a9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f376f1a5fa8
RBP: 00007f376f1a5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f376f1a5fac
R13: 0000000000000000 R14: 00007ffc7b42e530 R15: 00007ffc7b42e618
rcu: rcu_preempt kthread starved for 1465 jiffies! g11193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25240 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5378 [inline]
__schedule+0x190e/0x4c90 kernel/sched/core.c:6765
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7087
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:_raw_spin_lock_irqsave+0x2a/0x120 kernel/locking/spinlock.c:161
Code: f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 83 ec 60 49 89 fe 65 48 8b 04 25 28 00 00 00 48 89 44 24 40 <49> bf 00 00 00 00 00 fc ff df 4c 8d 64 24 20 48 c7 04 24 b3 8a b5
RSP: 0018:ffffc90000167820 EFLAGS: 00000282
RAX: 84c63e72d19ead00 RBX: ffffffff9a81b3e8 RCX: 00000000000008e8
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffffff9a81b3f0
RBP: ffffc900001678b0 R08: ffffc9000016792f R09: ffffc90000167920
R10: dffffc0000000000 R11: fffff5200002cf26 R12: dffffc0000000000
R13: ffffffff8c2cc000 R14: ffffffff9a81b3f0 R15: ffffc90000167920
debug_object_assert_init+0x17c/0x4b0 lib/debugobjects.c:1007
debug_timer_assert_init kernel/time/timer.c:845 [inline]
debug_assert_init kernel/time/timer.c:890 [inline]
__try_to_del_timer_sync+0x29/0x390 kernel/time/timer.c:1499
__timer_delete_sync+0x245/0x310 kernel/time/timer.c:1662
del_timer_sync include/linux/timer.h:185 [inline]
schedule_timeout+0x162/0x290 kernel/time/sleep_timeout.c:100
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2024
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2226
kthread+0x7ab/0x920 kernel/kthread.c:464
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3396 Comm: kworker/R-bat_e Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: bat_events batadv_tt_purge
RIP: 0010:lock_is_held_type+0x126/0x190 kernel/locking/lockdep.c:5925
Code: e8 7f 1a 00 00 b8 ff ff ff ff 65 0f c1 05 62 48 fa 73 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48
RSP: 0018:ffffc90000006318 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000101
RDX: ffff888031a61e00 RSI: ffffffff8c2ab6a0 RDI: ffffffff8c80ee00
RBP: 0000000000000002 R08: ffffffff89d07076 R09: ffffc90000006690
R10: ffffc90000006680 R11: fffff52000000c9e R12: 0000000000000246
R13: ffff888031a61e00 R14: 00000000ffffffff R15: ffffffff8eb38f60
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd89231db8 CR3: 000000005cdaa000 CR4: 0000000000350ef0
Call Trace:
__in6_dev_get include/net/addrconf.h:347 [inline]
ip6_ignore_linkdown include/net/addrconf.h:443 [inline]
find_match+0xf9/0xc10 net/ipv6/route.c:747
__find_rr_leaf+0x275/0x8e0 net/ipv6/route.c:835
find_rr_leaf net/ipv6/route.c:856 [inline]
rt6_select net/ipv6/route.c:900 [inline]
fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195
ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231
pol_lookup_func include/net/ip6_fib.h:616 [inline]
fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:119
ip6_route_input_lookup net/ipv6/route.c:2300 [inline]
ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596
ip6_rcv_finish+0x140/0x3d0 net/ipv6/ip6_input.c:77
ip_sabotage_in+0x205/0x290 net/bridge/br_netfilter_hooks.c:993
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xc5/0x220 net/netfilter/core.c:626
nf_hook include/linux/netfilter.h:269 [inline]
NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312
__netif_receive_skb_one_core net/core/dev.c:5899 [inline]
__netif_receive_skb+0x1ea/0x650 net/core/dev.c:6012
netif_receive_skb_internal net/core/dev.c:6098 [inline]
netif_receive_skb+0x1e8/0x890 net/core/dev.c:6157
NF_HOOK+0xa0/0x400 include/linux/netfilter.h:314
br_handle_frame_finish+0x1905/0x2000
br_nf_hook_thresh+0x474/0x590
br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:282 [inline]
br_handle_frame+0x9f5/0x1530 net/bridge/br_input.c:433
__netif_receive_skb_core+0x13e9/0x4540 net/core/dev.c:5793
__netif_receive_skb_one_core net/core/dev.c:5897 [inline]
__netif_receive_skb+0x12f/0x650 net/core/dev.c:6012
process_backlog+0x662/0x15b0 net/core/dev.c:6360
__napi_poll+0xcd/0x490 net/core/dev.c:7194
napi_poll net/core/dev.c:7263 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:7385
handle_softirqs+0x2d6/0x9b0 kernel/softirq.c:561
do_softirq+0x11b/0x1e0 kernel/softirq.c:462
__local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:389
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline]
batadv_tt_purge+0x4dd/0xa40 net/batman-adv/translation-table.c:3510
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xac0/0x18e0 kernel/workqueue.c:3317
rescuer_thread+0x650/0xf90 kernel/workqueue.c:3494
kthread+0x7ab/0x920 kernel/kthread.c:464
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 7763 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:d4:df:f9:5a:ae, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:d4:df:f9:5a:ae, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 7552 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:d4:df:f9:5a:ae, vlan:0)