rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4685/1:b..l P7065/2:b..l P7148/2:b..l P7124/1:b..l rcu: (detected by 0, t=10503 jiffies, g=29249, q=1314927 ncpus=2) task:syz.0.453 state:R running task stack:21872 pid:7124 tgid:7123 ppid:6672 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6854 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6878 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1691 [inline] zap_pmd_range mm/memory.c:1739 [inline] zap_pud_range mm/memory.c:1768 [inline] zap_p4d_range mm/memory.c:1789 [inline] unmap_page_range+0x36b1/0x40e0 mm/memory.c:1810 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1900 exit_mmap+0x275/0xc40 mm/mmap.c:1864 __mmput+0x115/0x390 kernel/fork.c:1347 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x28e0 kernel/exit.c:926 do_group_exit+0x207/0x2c0 kernel/exit.c:1088 get_signal+0x16a3/0x1740 kernel/signal.c:2917 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc710d7dff9 RSP: 002b:00007fc711bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: 0000000000000090 RBX: 00007fc710f35f80 RCX: 00007fc710d7dff9 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000d RBP: 00007fc710df0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fc710f35f80 R15: 00007ffef50551b8 task:syz.1.459 state:R running task stack:23896 pid:7148 tgid:7146 ppid:6670 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6854 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6878 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x171d/0x3ed0 net/core/dev.c:4455 dev_queue_xmit include/linux/netdevice.h:3101 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236 ip_local_out net/ipv4/ip_output.c:130 [inline] __ip_queue_xmit+0x118c/0x1b80 net/ipv4/ip_output.c:536 __tcp_transmit_skb+0x2544/0x3b30 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_send_syn_data net/ipv4/tcp_output.c:4059 [inline] tcp_connect+0x2c1d/0x4940 net/ipv4/tcp_output.c:4148 tcp_v4_connect+0x1127/0x1ba0 net/ipv4/tcp_ipv4.c:341 __inet_stream_connect+0x262/0xf30 net/ipv4/af_inet.c:679 tcp_sendmsg_fastopen+0x3a2/0x5d0 net/ipv4/tcp.c:1039 tcp_sendmsg_locked+0x48d2/0x4f30 net/ipv4/tcp.c:1091 tcp_sendmsg+0x30/0x50 net/ipv4/tcp.c:1358 smc_sendmsg+0x258/0x530 net/smc/af_smc.c:2786 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2602 ___sys_sendmsg net/socket.c:2656 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2685 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f18bb97dff9 RSP: 002b:00007f18bc6c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f18bbb35f80 RCX: 00007f18bb97dff9 RDX: 000000002000488c RSI: 0000000020000040 RDI: 000000000000000a RBP: 00007f18bb9f0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f18bbb35f80 R15: 00007fff559fff98 task:udevd state:R running task stack:26064 pid:7065 tgid:7065 ppid:4685 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5829 Code: 2b 00 74 08 4c 89 f7 e8 aa 46 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90003bdf4c0 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff9200077bea4 RCX: e0897893a1f39e00 RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60f860 RBP: ffffc90003bdf608 R08: ffffffff942c6807 R09: 1ffffffff2858d00 R10: dffffc0000000000 R11: fffffbfff2858d01 R12: 1ffff9200077bea0 R13: dffffc0000000000 R14: ffffc90003bdf520 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] prepend_path+0x1f0/0xbe0 fs/d_path.c:168 d_absolute_path+0x179/0x310 fs/d_path.c:234 tomoyo_get_absolute_path security/tomoyo/realpath.c:101 [inline] tomoyo_realpath_from_path+0x2b4/0x5e0 security/tomoyo/realpath.c:271 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path2_perm+0x3eb/0xbb0 security/tomoyo/file.c:923 tomoyo_path_rename+0x198/0x1e0 security/tomoyo/hooks.h:274 security_path_rename+0x266/0x4e0 security/security.c:2020 do_renameat2+0x94a/0x13f0 fs/namei.c:5157 __do_sys_rename fs/namei.c:5217 [inline] __se_sys_rename fs/namei.c:5215 [inline] __x64_sys_rename+0x82/0x90 fs/namei.c:5215 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f87c091293b RSP: 002b:00007ffece2835d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87c091293b RDX: 000055a683cf5a86 RSI: 00007ffece2835f8 RDI: 00007ffece2839f8 RBP: 000055a3d9f27380 R08: 0000000000000006 R09: 03d6e7edb3835b33 R10: 00000000000001b6 R11: 0000000000000202 R12: 000055a3d9f46770 R13: 00007ffece2835f8 R14: 00007ffece2839f8 R15: 000055a3d47f4160 task:udevd state:R running task stack:21504 pid:4685 tgid:4685 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6854 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6878 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0x130/0x140 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108 sock_def_readable+0x20f/0x5b0 net/core/sock.c:3453 __netlink_sendskb net/netlink/af_netlink.c:1278 [inline] netlink_sendskb+0x9e/0x140 net/netlink/af_netlink.c:1284 netlink_unicast+0x39d/0x990 net/netlink/af_netlink.c:1372 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2602 ___sys_sendmsg net/socket.c:2656 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2685 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f87c099ca4b RSP: 002b:00007ffece283fa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000055a3d9f08df0 RCX: 00007f87c099ca4b RDX: 0000000000000000 RSI: 00007ffece283fb8 RDI: 0000000000000004 RBP: 000055a3d9f1e9c0 R08: 0000000000000001 R09: 0000000000000000 R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 R13: 00000000000000b3 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10451 jiffies! g29249 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25200 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 __schedule_loop kernel/sched/core.c:6752 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6767 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00360-g09cf85ef183a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data kernel/kcov.c:246 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0x90 kernel/kcov.c:314 Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 c0 d7 03 00 <65> 8b 05 c0 f7 6e 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 RSP: 0018:ffffc900001e6890 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000008000000 RCX: ffff88801d2f0000 RDX: ffff88801d2f0000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881f68f81c1 R08: ffffffff867314f4 R09: 1ffffffff2039e25 R10: dffffc0000000000 R11: ffffffff86731400 R12: ffff8881f68f8140 R13: ffff8881f68f8140 R14: dffffc0000000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3716402039 CR3: 0000000060692000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skb_clear_tstamp include/linux/skbuff.h:4334 [inline] loopback_xmit+0xf4/0x6b0 drivers/net/loopback.c:77 __netdev_start_xmit include/linux/netdevice.h:4923 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3588 [inline] dev_hard_start_xmit+0x27a/0x7e0 net/core/dev.c:3604 __dev_queue_xmit+0x1b11/0x3ed0 net/core/dev.c:4428 dev_queue_xmit include/linux/netdevice.h:3101 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236 synproxy_send_client_synack+0x8b8/0xf30 net/netfilter/nf_synproxy_core.c:484 nft_synproxy_eval_v4+0x3ca/0x610 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x362/0xa60 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5666 [inline] __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:927 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244