rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10642/1:b..l P10631/1:b..l P9305/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=64273, q=906 ncpus=2)
task:syz-executor state:R running task stack:23600 pid:9305 tgid:9305 ppid:9280 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5315 [inline]
__schedule+0xef5/0x5750 kernel/sched/core.c:6675
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6854
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
copy_pte_range mm/memory.c:1194 [inline]
copy_pmd_range mm/memory.c:1255 [inline]
copy_pud_range mm/memory.c:1292 [inline]
copy_p4d_range mm/memory.c:1316 [inline]
copy_page_range+0x100b/0x4f40 mm/memory.c:1414
dup_mmap kernel/fork.c:750 [inline]
dup_mm kernel/fork.c:1674 [inline]
copy_mm kernel/fork.c:1723 [inline]
copy_process+0x7dcb/0x8db0 kernel/fork.c:2372
kernel_clone+0xfd/0x960 kernel/fork.c:2784
__do_sys_clone+0xba/0x100 kernel/fork.c:2927
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd589174853
RSP: 002b:00007ffc12c5f108 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd589174853
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 000055559529d7d0 R11: 0000000000000246 R12: 0000000000000000
R13: 00005555952b0590 R14: 00000000000d4d86 R15: 00007ffc12c5f290
task:syz.2.932 state:R running task stack:26096 pid:10631 tgid:10625 ppid:7726 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5315 [inline]
__schedule+0xef5/0x5750 kernel/sched/core.c:6675
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6997
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:check_region_inline mm/kasan/generic.c:169 [inline]
RIP: 0010:kasan_check_range+0x150/0x1a0 mm/kasan/generic.c:189
Code: c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 85 c0 48 89 c2 75 93 48 89 da 4c 89 d8 4c 29 da e9 2c ff ff ff 5b 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 01 00 00 00 c3 cc cc cc
RSP: 0018:ffffc90008df72f8 EFLAGS: 00000246
RAX: fffff94000274cd1 RBX: ffffea00013a6680 RCX: ffffffff81c359d1
RDX: fffff94000274cd1 RSI: 0000000000000008 RDI: ffffea00013a6680
RBP: fffff94000274cd0 R08: 0000000000000000 R09: fffff94000274cd0
R10: ffffea00013a6687 R11: 0000000000000000 R12: 1ffff920011bee6b
R13: ffffc90008df7378 R14: fffffffffffffffe R15: 0000000000000001
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
folio_test_writeback include/linux/page-flags.h:555 [inline]
find_lock_entries+0x821/0xbd0 mm/filemap.c:2112
shmem_undo_range+0x20d/0x1170 mm/shmem.c:1014
shmem_truncate_range mm/shmem.c:1144 [inline]
shmem_evict_inode+0x3a3/0xba0 mm/shmem.c:1272
evict+0x409/0x970 fs/inode.c:723
iput_final fs/inode.c:1875 [inline]
iput fs/inode.c:1901 [inline]
iput+0x530/0x890 fs/inode.c:1887
dentry_unlink_inode+0x29c/0x480 fs/dcache.c:412
__dentry_kill+0x1d0/0x600 fs/dcache.c:615
dput.part.0+0x4b1/0x9b0 fs/dcache.c:857
dput+0x1f/0x30 fs/dcache.c:847
__fput+0x513/0xb60 fs/file_table.c:439
task_work_run+0x14e/0x250 kernel/task_work.c:228
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0xadd/0x2d70 kernel/exit.c:939
do_group_exit+0xd3/0x2a0 kernel/exit.c:1088
get_signal+0x25fb/0x2770 kernel/signal.c:2917
arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f315337dff9
RSP: 002b:00007f31541ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: 0000000020000000 RBX: 00007f3153535f80 RCX: 00007f315337dff9
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 00007f31533f0296 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f3153535f80 R15: 00007ffc1d37ee18
task:syz.3.924 state:R running task stack:25824 pid:10642 tgid:10642 ppid:10324 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5315 [inline]
__schedule+0xef5/0x5750 kernel/sched/core.c:6675
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6854
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
_raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
spin_unlock include/linux/spinlock.h:391 [inline]
zap_pte_range mm/memory.c:1691 [inline]
zap_pmd_range mm/memory.c:1739 [inline]
zap_pud_range mm/memory.c:1768 [inline]
zap_p4d_range mm/memory.c:1789 [inline]
unmap_page_range+0x1e78/0x3cf0 mm/memory.c:1810
unmap_single_vma+0x194/0x2b0 mm/memory.c:1856
unmap_vmas+0x22f/0x490 mm/memory.c:1900
exit_mmap+0x1c6/0xb30 mm/mmap.c:1864
__mmput+0x12a/0x480 kernel/fork.c:1347
mmput+0x62/0x70 kernel/fork.c:1369
exit_mm kernel/exit.c:571 [inline]
do_exit+0x9bf/0x2d70 kernel/exit.c:926
do_group_exit+0xd3/0x2a0 kernel/exit.c:1088
__do_sys_exit_group kernel/exit.c:1099 [inline]
__se_sys_exit_group kernel/exit.c:1097 [inline]
__x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1097
x64_sys_call+0x14a9/0x16a0 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9cd237dff9
RSP: 002b:00007ffcb81e1fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cd237dff9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffcb81e1ffc R08: 00007ffcb81e208f R09: 00000000000d494f
R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000032
R13: 00000000000d494f R14: 00000000000d4757 R15: 00007ffcb81e2050
rcu: rcu_preempt kthread starved for 10584 jiffies! g64273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28256 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5315 [inline]
__schedule+0xef5/0x5750 kernel/sched/core.c:6675
__schedule_loop kernel/sched/core.c:6752 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6767
schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2615
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5234 Comm: kworker/1:3 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events nsim_dev_trap_report_work
RIP: 0010:hlock_class kernel/locking/lockdep.c:223 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4851 [inline]
RIP: 0010:__lock_acquire+0x6ad/0x3ce0 kernel/locking/lockdep.c:5152
Code: 74 08 3c 03 0f 8e 7f 22 00 00 45 3b af d8 0a 00 00 0f 8d dd 00 00 00 48 8b 3c 24 49 63 c5 48 8d 04 80 48 8d 2c c7 48 8d 7d 20 <48> 89 f9 48 c1 e9 03 42 0f b6 0c 21 84 c9 74 09 80 f9 03 0f 8e 3c
RSP: 0018:ffffc90000a17ee0 EFLAGS: 00000082
RAX: 0000000000000014 RBX: ffffed100c522c9b RCX: 0000000000000007
RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff8880629165a0
RBP: ffff888062916580 R08: ffff888062916558 R09: fffffbfff2dc4d88
R10: ffffffff96e26c47 R11: 0000000000000002 R12: dffffc0000000000
R13: 0000000000000004 R14: 0000000000000002 R15: ffff888062915a00
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b331fcff8 CR3: 000000002912e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5825
rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
ip6_pol_route+0x18c/0x1120 net/ipv6/route.c:2229
pol_lookup_func include/net/ip6_fib.h:616 [inline]
fib6_rule_lookup+0x24c/0x720 net/ipv6/fib6_rules.c:117
ip6_route_output_flags_noref net/ipv6/route.c:2639 [inline]
ip6_route_output_flags+0x1d0/0x640 net/ipv6/route.c:2651
ip6_route_output include/net/ip6_route.h:93 [inline]
__nf_ip6_route+0x4c/0xe0 net/ipv6/netfilter.c:113
nf_ip6_route include/linux/netfilter_ipv6.h:111 [inline]
synproxy_send_tcp_ipv6+0x369/0x690 net/netfilter/nf_synproxy_core.c:835
synproxy_send_client_synack_ipv6+0x95f/0xc60 net/netfilter/nf_synproxy_core.c:897
nft_synproxy_eval_v6 net/netfilter/nft_synproxy.c:90 [inline]
nft_synproxy_do_eval+0x923/0xd60 net/netfilter/nft_synproxy.c:145
expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]
nft_do_chain+0x2e6/0x18f0 net/netfilter/nf_tables_core.c:288
nft_do_chain_inet+0x18b/0x350 net/netfilter/nft_chain_filter.c:161
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
nf_hook.constprop.0+0x42e/0x750 include/linux/netfilter.h:269
NF_HOOK include/linux/netfilter.h:312 [inline]
ip6_input+0x7c/0xd0 net/ipv6/ip6_input.c:490
dst_input include/net/dst.h:460 [inline]
ip6_rcv_finish net/ipv6/ip6_input.c:79 [inline]
NF_HOOK include/linux/netfilter.h:314 [inline]
NF_HOOK include/linux/netfilter.h:308 [inline]
ipv6_rcv+0x265/0x680 net/ipv6/ip6_input.c:309
__netif_receive_skb_one_core+0x12e/0x1e0 net/core/dev.c:5666
__netif_receive_skb+0x1d/0x160 net/core/dev.c:5779
process_backlog+0x443/0x15f0 net/core/dev.c:6111
__napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6775
napi_poll net/core/dev.c:6844 [inline]
net_rx_action+0xa92/0x1010 net/core/dev.c:6966
handle_softirqs+0x213/0x8f0 kernel/softirq.c:554
do_softirq kernel/softirq.c:455 [inline]
do_softirq+0xb2/0xf0 kernel/softirq.c:442
__local_bh_enable_ip+0x100/0x120 kernel/softirq.c:382
spin_unlock_bh include/linux/spinlock.h:396 [inline]
nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]
nsim_dev_trap_report_work+0x870/0xc80 drivers/net/netdevsim/dev.c:850
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244