rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 0-...!: (1 GPs behind) idle=dfd/1/0x4000000000000000 softirq=17336/17337 fqs=3
(t=10501 jiffies g=21761 q=949)
rcu: rcu_preempt kthread starved for 10495 jiffies! g21761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26304 pid: 15 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5027 [inline]
__schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
schedule+0x11b/0x1f0 kernel/sched/core.c:6456
schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1914
rcu_gp_fqs_loop+0x2bf/0x1080 kernel/rcu/tree.c:1972
rcu_gp_kthread+0xa4/0x360 kernel/rcu/tree.c:2145
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 6510 Comm: syz.0.822 Not tainted 5.15.165-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:match_held_lock+0x1/0xb0 kernel/locking/lockdep.c:5070
Code: 03 00 75 cf 48 c7 c7 c0 28 8b 8a 48 c7 c6 00 29 8b 8a e8 02 b2 18 f7 0f 0b eb b6 e8 09 fb ff ff 66 0f 1f 84 00 00 00 00 00 55 <53> bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10 00
RSP: 0000:ffffc90000dcfc28 EFLAGS: 00000097
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000010502
RDX: ffff88801d238000 RSI: ffffffff8c91fbe0 RDI: ffff88801d238af0
RBP: ffff88801d238af0 R08: ffffffff81a5732d R09: fffffbfff1f8e219
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000046
R13: ffff88801d238000 R14: 00000000ffffffff R15: ffffffff8c91fbe0
FS: 00007f4ac21246c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c30c955 CR3: 000000007481b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
__lock_is_held kernel/locking/lockdep.c:5366 [inline]
lock_is_held_type+0xa4/0x180 kernel/locking/lockdep.c:5666
__perf_output_begin kernel/events/ring_buffer.c:170 [inline]
perf_output_begin_forward+0x19b/0xac0 kernel/events/ring_buffer.c:271
__perf_event_output kernel/events/core.c:7769 [inline]
perf_event_output_forward+0x1c8/0x310 kernel/events/core.c:7787
__perf_event_overflow+0x35d/0x530 kernel/events/core.c:9480
perf_swevent_hrtimer+0x3fd/0x560 kernel/events/core.c:10876
__run_hrtimer kernel/time/hrtimer.c:1686 [inline]
__hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750
hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
__sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:queued_write_lock_slowpath+0x154/0x440 kernel/locking/qrwlock.c:78
Code: 32 ea 65 00 f0 41 81 0f 00 01 00 00 48 8b 5c 24 08 43 0f b6 04 2e 84 c0 0f 85 94 00 00 00 41 8b 07 3d 00 01 00 00 74 27 f3 90 <43> 0f b6 04 2e 84 c0 74 eb 44 89 f9 80 e1 07 80 c1 03 38 c1 7c de
RSP: 0000:ffffc90000dd0500 EFLAGS: 00000206
RAX: 00000000000001ff RBX: 1ffff920001ba0aa RCX: ffffffff816441de
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8db32e18
RBP: ffffc90000dd05b0 R08: dffffc0000000000 R09: fffffbfff1b665c4
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000dd0550
R13: dffffc0000000000 R14: 1ffffffff1b665c3 R15: ffffffff8db32e18
queued_write_lock include/asm-generic/qrwlock.h:97 [inline]
do_raw_write_lock+0x38b/0x4e0 kernel/locking/spinlock_debug.c:210
neigh_forced_gc net/core/neighbour.c:236 [inline]
neigh_alloc net/core/neighbour.c:429 [inline]
___neigh_create+0x202/0x2220 net/core/neighbour.c:591
ip6_finish_output2+0x11aa/0x14f0 net/ipv6/ip6_output.c:123
dst_output include/net/dst.h:443 [inline]
NF_HOOK include/linux/netfilter.h:302 [inline]
ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:511
addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959
call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
expire_timers kernel/time/timer.c:1496 [inline]
__run_timers+0x67c/0x890 kernel/time/timer.c:1767
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
__do_softirq kernel/softirq.c:592 [inline]
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x80 kernel/sched/sched.h:1339
Code: 38 c1 7c cb 4c 89 f7 e8 85 8e 70 00 eb c1 0f 1f 00 41 57 41 56 53 48 89 fb 66 90 48 89 df e8 5e 47 e3 08 e8 39 46 2d 00 fb 5b <41> 5e 41 5f c3 49 bf 00 00 00 00 00 fc ff df 4c 8d b3 58 0d 00 00
RSP: 0000:ffffc90002e17ce8 EFLAGS: 00000282
RAX: 299bf8f27e767700 RBX: ffff8880b9b3a300 RCX: ffffffff91468f03
RDX: dffffc0000000000 RSI: ffffffff8a8b2a20 RDI: ffffffff8ad8f7c0
RBP: ffffc90002e17ed0 R08: ffffffff8186e260 R09: ffffed1017367461
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801d238000
R13: dffffc0000000000 R14: ffff88801d238000 R15: ffff88801d238080
__schedule+0x1462/0x45b0 kernel/sched/core.c:6379
schedule+0x11b/0x1f0 kernel/sched/core.c:6456
exit_to_user_mode_loop+0x44/0x130 kernel/entry/common.c:169
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214
irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:320
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0033:0x7f4ac3ca7e79
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4ac2124038 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00007f4ac3e43f80 RCX: 00007f4ac3ca7e79
RDX: 00000000200006c0 RSI: 0000000000005452 RDI: 0000000000000003
RBP: 00007f4ac3d1593e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f4ac3e43f80 R15: 00007fff2f9a12e8
NMI backtrace for cpu 0
CPU: 0 PID: 6190 Comm: syz.4.807 Not tainted 5.15.165-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111
nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
rcu_dump_cpu_stacks+0x223/0x390 kernel/rcu/tree_stall.h:349
print_cpu_stall+0x320/0x600 kernel/rcu/tree_stall.h:633
check_cpu_stall kernel/rcu/tree_stall.h:727 [inline]
rcu_pending kernel/rcu/tree.c:3932 [inline]
rcu_sched_clock_irq+0x8d9/0x1150 kernel/rcu/tree.c:2619
update_process_times+0x196/0x200 kernel/time/timer.c:1818
tick_sched_handle kernel/time/tick-sched.c:254 [inline]
tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473
__run_hrtimer kernel/time/hrtimer.c:1686 [inline]
__hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750
hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
__sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:get_entry mm/page_ext.c:121 [inline]
RIP: 0010:lookup_page_ext+0xf4/0x120 mm/page_ext.c:218
Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 c1 ed f7 ff 48 8b 1b 48 85 db 74 12 e8 e4 24 ae ff 4c 0f af 3d 1c 95 ce 0a <4c> 01 fb eb 07 e8 d2 24 ae ff 31 db 48 89 d8 5b 41 5c 41 5e 41 5f
RSP: 0018:ffffc90000007048 EFLAGS: 00000202
RAX: ffffffff81d23cbc RBX: ffff888013300000 RCX: ffff888023ecd940
RDX: 0000000000000100 RSI: 0000000001d32b40 RDI: 000000ffffffffc0
RBP: ffffea0001d32b40 R08: ffffffff81d23c12 R09: ffffed100e995a00
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000941 R14: 00000000000001c0 R15: 00000000015e6070
__set_page_owner+0x23/0x300 mm/page_owner.c:175
prep_new_page mm/page_alloc.c:2426 [inline]
get_page_from_freelist+0x322a/0x33c0 mm/page_alloc.c:4159
__alloc_pages+0x272/0x700 mm/page_alloc.c:5423
alloc_slab_page mm/slub.c:1775 [inline]
allocate_slab mm/slub.c:1912 [inline]
new_slab+0xbb/0x4b0 mm/slub.c:1975
___slab_alloc+0x6f6/0xe10 mm/slub.c:3008
__slab_alloc mm/slub.c:3095 [inline]
slab_alloc_node mm/slub.c:3186 [inline]
kmem_cache_alloc_node+0x1ba/0x2c0 mm/slub.c:3256
__alloc_skb+0xdd/0x590 net/core/skbuff.c:415
alloc_skb include/linux/skbuff.h:1167 [inline]
nlmsg_new include/net/netlink.h:953 [inline]
__neigh_notify+0x7c/0x130 net/core/neighbour.c:3375
neigh_cleanup_and_release+0xa5/0x260 net/core/neighbour.c:101
neigh_del net/core/neighbour.c:197 [inline]
neigh_remove_one+0x4b1/0x5c0 net/core/neighbour.c:218
neigh_forced_gc net/core/neighbour.c:251 [inline]
neigh_alloc net/core/neighbour.c:429 [inline]
___neigh_create+0x45a/0x2220 net/core/neighbour.c:591
ip6_finish_output2+0x11aa/0x14f0 net/ipv6/ip6_output.c:123
dst_output include/net/dst.h:443 [inline]
NF_HOOK include/linux/netfilter.h:302 [inline]
ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:511
addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959
call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
expire_timers kernel/time/timer.c:1496 [inline]
__run_timers+0x67c/0x890 kernel/time/timer.c:1767
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
__do_softirq kernel/softirq.c:592 [inline]
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:list_empty include/linux/list.h:290 [inline]
RIP: 0010:netdev_run_todo+0xab4/0xc40 net/core/dev.c:10624
Code: 00 48 c7 c7 e0 92 a2 8d be 03 00 00 00 ba 01 00 00 00 31 c9 e8 2d d4 12 f9 49 83 c7 70 4c 89 ff e8 c1 68 df fb 48 8b 44 24 20 <42> 80 3c 20 00 74 08 4c 89 ef e8 ed 4d 7d f9 48 8b 9c 24 a0 00 00
RSP: 0018:ffffc900030e77e0 EFLAGS: 00000282
RAX: 1ffff9200061cf10 RBX: ffff888078ac1ac8 RCX: ffff888023ecd940
RDX: 0000000000000000 RSI: ffffffff8a8b2a20 RDI: ffffffff8ad8f7c0
RBP: ffffc900030e7920 R08: ffffffff8186e260 R09: fffffbfff1bd2a56
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffffc900030e7880 R14: ffff8880789105a8 R15: ffff888078910608
tun_detach drivers/net/tun.c:705 [inline]
tun_chr_close+0x136/0x1b0 drivers/net/tun.c:3440
__fput+0x3fe/0x8e0 fs/file_table.c:280
task_work_run+0x129/0x1a0 kernel/task_work.c:188
exit_task_work include/linux/task_work.h:33 [inline]
do_exit+0x6a3/0x2480 kernel/exit.c:874
do_group_exit+0x144/0x310 kernel/exit.c:996
get_signal+0xc66/0x14e0 kernel/signal.c:2897
arch_do_signal_or_restart+0xc3/0x1890 arch/x86/kernel/signal.c:867
handle_signal_work kernel/entry/common.c:154 [inline]
exit_to_user_mode_loop+0x97/0x130 kernel/entry/common.c:178
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214
__syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
syscall_exit_to_user_mode+0x5d/0x240 kernel/entry/common.c:307
do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f43a0735e79
Code: Unable to access opcode bytes at RIP 0x7f43a0735e4f.
RSP: 002b:00007f439ebb20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f43a08d1f88 RCX: 00007f43a0735e79
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f43a08d1f88
RBP: 00007f43a08d1f80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43a08d1f8c
R13: 0000000000000000 R14: 00007ffc3b6e3760 R15: 00007ffc3b6e3848