rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5249/1:b..l rcu: (detected by 1, t=10503 jiffies, g=7149, q=3274285 ncpus=2) task:syz-executor242 state:R running task stack:19248 pid:5249 tgid:5249 ppid:5245 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__reset_page_owner+0x68/0x430 Code: 00 00 00 00 00 fc ff df 48 8b 05 f3 d3 9d 0c 49 8d 5c 07 08 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 8d 03 00 00 8b 03 <89> 44 24 20 bf 00 28 00 00 e8 ca 03 00 00 41 89 c6 65 48 8b 04 25 RSP: 0018:ffffc900035ef6c0 EFLAGS: 00000246 RAX: 0000000005860282 RBX: ffff88801e52dd70 RCX: ffff88801eb3bc00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff820b362a R09: 1ffffffff284dcf8 R10: dffffc0000000000 R11: fffffbfff284dcf9 R12: 0000000000000000 R13: dffffc0000000000 R14: 1ffffd400035e2f1 R15: ffff88801e52dd60 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638 discard_slab mm/slub.c:2678 [inline] __put_partials+0xeb/0x130 mm/slub.c:3146 put_cpu_partial+0x17c/0x250 mm/slub.c:3221 __slab_free+0x2ea/0x3d0 mm/slub.c:4450 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4265 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4277 kmalloc_noprof include/linux/slab.h:882 [inline] tomoyo_realpath_from_path+0xcf/0x5e0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x2b7/0x740 security/tomoyo/file.c:822 tomoyo_path_unlink+0xd0/0x110 security/tomoyo/tomoyo.c:162 security_path_unlink+0x169/0x360 security/security.c:1959 do_unlinkat+0x3e6/0x830 fs/namei.c:4530 __do_sys_unlink fs/namei.c:4581 [inline] __se_sys_unlink fs/namei.c:4579 [inline] __x64_sys_unlink+0x47/0x50 fs/namei.c:4579 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f577bf2ced7 RSP: 002b:00007ffefe9daf38 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f577bf2ced7 RDX: 00007ffefe9daf60 RSI: 00007ffefe9daff0 RDI: 00007ffefe9daff0 RBP: 00007ffefe9daff0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffefe9dc060 R13: 0000555561cf96c0 R14: 00007ffefe9dc0a0 R15: 0000000000000002 rcu: rcu_preempt kthread starved for 10540 jiffies! g7149 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 __schedule_loop kernel/sched/core.c:6752 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6767 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:deref_stack_reg+0x18f/0x210 arch/x86/kernel/unwind_orc.c:406 Code: 31 c0 4c 39 e1 76 33 4c 39 f9 77 2e 4c 89 c7 48 89 d3 e8 f4 07 00 00 49 89 c6 48 8b 6c 24 18 48 89 e8 48 c1 e8 03 80 3c 18 00 <74> 08 48 89 ef e8 77 1a bd 00 4c 89 75 00 b0 01 48 83 c4 20 5b 41 RSP: 0018:ffffc900001e62b8 EFLAGS: 00000246 RAX: 1ffff9200003cc84 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffffc900001e0000 RDI: ffffc900001e6c30 RBP: ffffc900001e6420 R08: ffffc900001e6c30 R09: 0000000000000000 R10: ffffc900001e6430 R11: fffff5200003cc88 R12: 1ffff9200003cc7d R13: 1ffff9200003cc7e R14: ffffc900001e6d60 R15: ffffc900001e8000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555561d016f8 CR3: 000000000e734000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unwind_next_frame+0x1799/0x22d0 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4086 [inline] slab_alloc_node mm/slub.c:4135 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4142 __nf_conntrack_alloc+0x8f/0x380 net/netfilter/nf_conntrack_core.c:1677 init_conntrack+0x3c3/0x1310 net/netfilter/nf_conntrack_core.c:1768 resolve_normal_ct net/netfilter/nf_conntrack_core.c:1888 [inline] nf_conntrack_in+0xd5c/0x1890 net/netfilter/nf_conntrack_core.c:2040 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook+0x2c4/0x450 include/linux/netfilter.h:269 __ip_local_out+0x3d9/0x4e0 net/ipv4/ip_output.c:119 ip_local_out+0x26/0x70 net/ipv4/ip_output.c:128 synproxy_send_client_synack+0x8b8/0xf30 net/netfilter/nf_synproxy_core.c:484 nft_synproxy_eval_v4+0x3ca/0x610 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x362/0xa60 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5662 [inline] __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6107 __napi_poll+0xcb/0x490 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6962 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:927 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244