rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12378/1:b..l P12778/1:b..l P12857/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=88225, q=1184 ncpus=2)
task:syz.5.1981 state:R running task stack:23760 pid:12857 tgid:12856 ppid:11809 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6529
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5763
Code: 2b 00 74 08 4c 89 f7 e8 0a fd 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc90003be6760 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff9200077ccf8 RCX: 4cea0f2a10c3e700
RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d40
RBP: ffffc90003be68a8 R08: ffffffff93733847 R09: 1ffffffff26e6708
R10: dffffc0000000000 R11: fffffbfff26e6709 R12: 1ffff9200077ccf4
R13: dffffc0000000000 R14: ffffc90003be67c0 R15: 0000000000000246
rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
rcu_read_lock include/linux/rcupdate.h:838 [inline]
is_bpf_text_address+0x46/0x2a0 kernel/bpf/core.c:767
kernel_text_address+0xa7/0xe0 kernel/extable.c:125
__kernel_text_address+0xd/0x40 kernel/extable.c:79
unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369
arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
__kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
kasan_slab_free include/linux/kasan.h:184 [inline]
slab_free_hook mm/slub.c:2252 [inline]
slab_free mm/slub.c:4473 [inline]
kmem_cache_free+0x145/0x350 mm/slub.c:4548
skb_kfree_head net/core/skbuff.c:1082 [inline]
skb_free_head net/core/skbuff.c:1096 [inline]
skb_release_data+0x64d/0x880 net/core/skbuff.c:1123
skb_release_all net/core/skbuff.c:1188 [inline]
__kfree_skb+0x55/0x70 net/core/skbuff.c:1202
tcp_shifted_skb+0x659/0x9b0 net/ipv4/tcp_input.c:1546
tcp_shift_skb_data net/ipv4/tcp_input.c:1689 [inline]
tcp_sacktag_walk+0x128e/0x2130 net/ipv4/tcp_input.c:1754
tcp_sacktag_write_queue+0x1f1e/0x3e30 net/ipv4/tcp_input.c:2015
tcp_ack+0x1692/0x6bc0 net/ipv4/tcp_input.c:3968
tcp_rcv_established+0xc00/0x2020 net/ipv4/tcp_input.c:6219
tcp_v4_do_rcv+0x96d/0xc70 net/ipv4/tcp_ipv4.c:1909
sk_backlog_rcv include/net/sock.h:1111 [inline]
__release_sock+0x214/0x350 net/core/sock.c:3004
release_sock+0x61/0x1f0 net/core/sock.c:3558
sk_stream_wait_memory+0x762/0xfa0 net/core/stream.c:145
tcp_sendmsg_locked+0x1471/0x4e10 net/ipv4/tcp.c:1312
tcp_sendmsg+0x30/0x50 net/ipv4/tcp.c:1354
sock_sendmsg_nosec net/socket.c:730 [inline]
__sock_sendmsg+0x1a6/0x270 net/socket.c:745
__sys_sendto+0x3a4/0x4f0 net/socket.c:2204
__do_sys_sendto net/socket.c:2216 [inline]
__se_sys_sendto net/socket.c:2212 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2212
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f65fd379e79
RSP: 002b:00007f65fe21f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f65fd515f80 RCX: 00007f65fd379e79
RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 0000000000000003
RBP: 00007f65fd3e7916 R08: 0000000000000000 R09: 0000000000000027
R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f65fd515f80 R15: 00007ffe82253de8
task:syz.1.1957 state:R running task stack:25168 pid:12778 tgid:12772 ppid:12066 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6529
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
unwind_next_frame+0x2124/0x2a00 arch/x86/kernel/unwind_orc.c:672
arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
save_stack+0xfb/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x76/0x430 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1094 [inline]
free_unref_folios+0x103a/0x1b00 mm/page_alloc.c:2660
folios_put_refs+0x76e/0x860 mm/swap.c:1039
folio_batch_release include/linux/pagevec.h:101 [inline]
shmem_undo_range+0x6de/0x1df0 mm/shmem.c:1023
shmem_truncate_range mm/shmem.c:1132 [inline]
shmem_evict_inode+0x29b/0xa80 mm/shmem.c:1260
evict+0x534/0x950 fs/inode.c:704
__dentry_kill+0x20d/0x630 fs/dcache.c:610
dput+0x19f/0x2b0 fs/dcache.c:852
__fput+0x5f8/0x8a0 fs/file_table.c:430
task_work_run+0x251/0x310 kernel/task_work.c:228
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0xa2f/0x27f0 kernel/exit.c:882
do_group_exit+0x207/0x2c0 kernel/exit.c:1031
get_signal+0x16a1/0x1740 kernel/signal.c:2917
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb17ed79e79
RSP: 002b:00007fb17fa81038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: 0000000000010106 RBX: 00007fb17ef16058 RCX: 00007fb17ed79e79
RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000007
RBP: 00007fb17ede7916 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fb17ef16058 R15: 00007ffe909a2528
task:syz-executor state:R running task stack:19568 pid:12378 tgid:12378 ppid:12351 flags:0x00000000
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6529
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5763
Code: 2b 00 74 08 4c 89 f7 e8 0a fd 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc900044a72c0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92000894e64 RCX: 41343035f6920b00
RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d40
RBP: ffffc900044a7408 R08: ffffffff93733847 R09: 1ffffffff26e6708
R10: dffffc0000000000 R11: fffffbfff26e6709 R12: 1ffff92000894e60
R13: dffffc0000000000 R14: ffffc900044a7320 R15: 0000000000000246
rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
rcu_read_lock include/linux/rcupdate.h:838 [inline]
is_bpf_text_address+0x46/0x2a0 kernel/bpf/core.c:767
kernel_text_address+0xa7/0xe0 kernel/extable.c:125
__kernel_text_address+0xd/0x40 kernel/extable.c:79
unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369
arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
__kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
kasan_slab_free include/linux/kasan.h:184 [inline]
slab_free_hook mm/slub.c:2252 [inline]
slab_free mm/slub.c:4473 [inline]
kfree+0x149/0x360 mm/slub.c:4594
xt_free_table_info+0xef/0x160 net/netfilter/x_tables.c:1209
__do_replace+0x7ec/0xa50 net/ipv6/netfilter/ip6_tables.c:1101
do_replace net/ipv6/netfilter/ip6_tables.c:1158 [inline]
do_ip6t_set_ctl+0xf11/0x1270 net/ipv6/netfilter/ip6_tables.c:1644
nf_setsockopt+0x297/0x2c0 net/netfilter/nf_sockopt.c:101
do_sock_setsockopt+0x3b1/0x720 net/socket.c:2324
__sys_setsockopt+0x1ae/0x250 net/socket.c:2347
__do_sys_setsockopt net/socket.c:2356 [inline]
__se_sys_setsockopt net/socket.c:2353 [inline]
__x64_sys_setsockopt+0xb5/0xd0 net/socket.c:2353
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdb7997bd6a
RSP: 002b:00007ffc597218d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ffc59721960 RCX: 00007fdb7997bd6a
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365
R10: 00007fdb79ae87e0 R11: 0000000000000206 R12: 00007fdb79ae8780
R13: 00007ffc597218fc R14: 0000000000000000 R15: 00007fdb79ae8e40
rcu: rcu_preempt kthread starved for 10696 jiffies! g88225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1800/0x4a60 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236
kthread+0x2f2/0x390 kernel/kthread.c:389
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d 85 3f b3 00 f3 0f 1e fa fb f4 e9 c4 5f 39 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246
RAX: ffffffff8e694680 RBX: ffff88801d690064 RCX: 00000000003744e9
RDX: 0000000000000001 RSI: ffff88801d690000 RDI: ffff88801d690064
RBP: 000000000003a678 R08: ffff8880b9237c7b R09: 1ffff11017246f8f
R10: dffffc0000000000 R11: ffffffff8bb6dcf0 R12: ffff88801d3a0000
R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0ded40
FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2de1eff8 CR3: 000000007a7a6000 CR4: 0000000000350ef0
Call Trace:
acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:702
cpuidle_enter_state+0x114/0x480 drivers/cpuidle/cpuidle.c:267
cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388
call_cpuidle kernel/sched/idle.c:155 [inline]
cpuidle_idle_call kernel/sched/idle.c:230 [inline]
do_idle+0x375/0x5d0 kernel/sched/idle.c:326
cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:424
rest_init+0x2dc/0x300 init/main.c:747
start_kernel+0x47a/0x500 init/main.c:1103
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:488
common_startup_64+0x13e/0x147