rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8269/1:b..l rcu: (detected by 1, t=10503 jiffies, g=27645, q=1075998 ncpus=2) task:syz.4.623 state:R running task stack:25384 pid:8269 tgid:8266 ppid:5629 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 15 b8 RSP: 0018:ffffc9000374f0c0 EFLAGS: 00000286 RAX: 74883bba50dd7f00 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 0000000031a87f5c RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80 RBP: ffffffff8177927f R08: ffffffff8177927f R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:840 [inline] class_rcu_constructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950 __slab_free+0x274/0x2c0 mm/slub.c:5741 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5334 [inline] __kmalloc_noprof+0x375/0x720 mm/slub.c:5359 _kmalloc_noprof include/linux/slab.h:992 [inline] _kzalloc_noprof include/linux/slab.h:1309 [inline] __register_sysctl_table+0x6f/0x1370 fs/proc/proc_sysctl.c:1378 neigh_sysctl_register+0x9b1/0xa90 net/core/neighbour.c:3915 addrconf_sysctl_register+0xb3/0x1c0 net/ipv6/addrconf.c:7395 ipv6_add_dev+0xd26/0x13a0 net/ipv6/addrconf.c:460 addrconf_notify+0x771/0x1050 net/ipv6/addrconf.c:3685 notifier_call_chain+0x1a5/0x3d0 kernel/notifier.c:85 call_netdevice_notifiers_extack net/core/dev.c:2291 [inline] call_netdevice_notifiers net/core/dev.c:2305 [inline] register_netdevice+0x18a4/0x1eb0 net/core/dev.c:11489 register_netdev+0x40/0x60 net/core/dev.c:11567 ip6gre_init_net+0x28f/0x3b0 net/ipv6/ip6_gre.c:1609 ops_init+0x35d/0x5d0 net/core/net_namespace.c:137 setup_net+0x118/0x350 net/core/net_namespace.c:450 copy_net_ns+0x4f9/0x720 net/core/net_namespace.c:583 create_new_namespaces+0x3f0/0x6b0 kernel/nsproxy.c:132 unshare_nsproxy_namespaces+0x149/0x190 kernel/nsproxy.c:234 ksys_unshare+0x57d/0xa00 kernel/fork.c:3269 __do_sys_unshare kernel/fork.c:3343 [inline] __se_sys_unshare kernel/fork.c:3341 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3341 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6a1c19e019 RSP: 002b:00007f6a1cff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f6a1c425fa0 RCX: 00007f6a1c19e019 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 RBP: 00007f6a1c23500c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f6a1c426038 R14: 00007f6a1c425fa0 R15: 00007fff427a9938 rcu: rcu_preempt kthread starved for 245 jiffies! g27645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: krds_cp_wq#3/0 rds_connect_worker RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 15 b8 RSP: 0018:ffffc90000a07d00 EFLAGS: 00000286 RAX: aaf3ed4a7ab73800 RBX: 0000000000000000 RCX: 0000000080000101 RDX: 00000000fc18173c RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80 RBP: ffffffff8177927f R08: ffffffff8177927f R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 FS: 0000000000000000(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555564965a38 CR3: 00000000769de000 CR4: 00000000003526f0 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:840 [inline] class_rcu_constructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4584 [inline] slab_alloc_node mm/slub.c:4917 [inline] kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4931 kmem_alloc_batch lib/debugobjects.c:371 [inline] fill_pool+0x165/0x610 lib/debugobjects.c:420 debug_objects_fill_pool lib/debugobjects.c:780 [inline] debug_object_activate+0x38d/0x420 lib/debugobjects.c:869 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline] __call_rcu_common kernel/rcu/tree.c:3144 [inline] call_rcu+0x43/0x8b0 kernel/rcu/tree.c:3279 refdst_drop include/net/dst.h:272 [inline] skb_dst_drop include/net/dst.h:284 [inline] skb_release_head_state+0x71/0x360 net/core/skbuff.c:1171 skb_release_all net/core/skbuff.c:1195 [inline] __kfree_skb+0x24/0x210 net/core/skbuff.c:1211 nft_synproxy_eval_v4+0x36a/0x4e0 net/netfilter/nft_synproxy.c:-1 nft_synproxy_do_eval+0x335/0x550 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x48d/0x1b10 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x360/0x4b0 net/netfilter/nft_chain_filter.c:162 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:280 [inline] NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:323 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6215 [inline] __netif_receive_skb net/core/dev.c:6328 [inline] process_backlog+0xa34/0x1860 net/core/dev.c:6679 __napi_poll+0xaa/0x330 net/core/dev.c:7738 napi_poll net/core/dev.c:7801 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7958 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 __inet6_bind+0x386/0xf30 net/ipv6/af_inet6.c:419 kernel_bind+0x13e/0x1c0 net/socket.c:3646 rds_tcp_conn_path_connect+0x53b/0x920 net/rds/tcp_connect.c:175 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245