rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l P13122/1:b..l P1128/1:b..l rcu: (detected by 1, t=10503 jiffies, g=115065, q=668 ncpus=2) task:kworker/1:2 state:R running task stack:20120 pid:1128 tgid:1128 ppid:2 flags:0x00004000 Workqueue: events_power_efficient gc_worker Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5763 Code: 2b 00 74 08 4c 89 f7 e8 ea e1 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90003d07900 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920007a0f2c RCX: 1ccb9f4f3ee63400 RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fbb00 RBP: ffffc90003d07a48 R08: ffffffff93fa6847 R09: 1ffffffff27f4d08 R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: 1ffff920007a0f28 R13: dffffc0000000000 R14: ffffc90003d07960 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:326 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] gc_worker+0x28c/0x1530 net/netfilter/nf_conntrack_core.c:1486 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x870/0xd30 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 task:udevd state:R running task stack:24816 pid:13122 tgid:13122 ppid:4675 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:bpf_tree_comp kernel/bpf/core.c:637 [inline] RIP: 0010:__lt_find include/linux/rbtree_latch.h:115 [inline] RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline] RIP: 0010:bpf_ksym_find kernel/bpf/core.c:735 [inline] RIP: 0010:is_bpf_text_address+0x134/0x2a0 kernel/bpf/core.c:768 Code: 48 8d 6c 6d 00 48 f7 dd 4c 8d a4 2b e0 fd ff ff 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c0 71 55 00 4d 8b 24 24 <4c> 89 e7 4c 89 fe e8 61 50 f1 ff 4d 39 fc 76 0b e8 f7 4d f1 ff 48 RSP: 0018:ffffc900097171a0 EFLAGS: 00000246 RAX: 1ffff1100b90d62a RBX: ffff88805c86b370 RCX: ffff88801fbfbc00 RDX: 0000000000000000 RSI: 00007f649c55f5f4 RDI: ffffffffa00038c0 RBP: 0000000000000000 R08: ffffffff81a23e5f R09: 1ffffffff27f4d08 R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: ffffffffa0001d64 R13: dffffc0000000000 R14: 0000000000000001 R15: 00007f649c55f5f4 kernel_text_address+0xa7/0xe0 kernel/extable.c:125 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2256 [inline] slab_free mm/slub.c:4477 [inline] kfree+0x149/0x360 mm/slub.c:4598 smk_fetch+0x109/0x140 security/smack/smack_lsm.c:314 smack_d_instantiate+0x8af/0xa50 security/smack/smack_lsm.c:3648 security_d_instantiate+0x9f/0x100 security/security.c:3942 d_splice_alias+0x6f/0x330 fs/dcache.c:2987 __lookup_slow+0x28c/0x3f0 fs/namei.c:1718 lookup_slow+0x53/0x70 fs/namei.c:1735 walk_component+0x2e1/0x410 fs/namei.c:2039 lookup_last fs/namei.c:2542 [inline] path_lookupat+0x16f/0x450 fs/namei.c:2566 filename_lookup+0x256/0x610 fs/namei.c:2595 vfs_statx+0x103/0x490 fs/stat.c:312 vfs_fstatat+0x145/0x190 fs/stat.c:341 __do_sys_newfstatat fs/stat.c:505 [inline] __se_sys_newfstatat fs/stat.c:499 [inline] __x64_sys_newfstatat+0x11d/0x1a0 fs/stat.c:499 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f649c55f5f4 RSP: 002b:00007fffe0736058 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055d6fa3fe550 RCX: 00007f649c55f5f4 RDX: 00007fffe0736068 RSI: 00007fffe07360f8 RDI: 00000000ffffff9c RBP: 000055d6ea8d27ac R08: 000055d6ea8d27ac R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000206 R12: 0000000000000000 R13: 000055d6fa3fe640 R14: 00007fffe07360f8 R15: 000055d6fa3e9a10 task:kworker/u8:1 state:R running task stack:18136 pid:12 tgid:12 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 spin_unlock_bh include/linux/spinlock.h:396 [inline] __fib6_clean_all+0x327/0x4b0 net/ipv6/ip6_fib.c:2277 rt6_sync_down_dev net/ipv6/route.c:4908 [inline] rt6_disable_ip+0x164/0x7e0 net/ipv6/route.c:4913 addrconf_ifdown+0x15d/0x1bd0 net/ipv6/addrconf.c:3856 addrconf_notify+0x3cb/0x1020 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_close_many+0x33c/0x4c0 net/core/dev.c:1587 unregister_netdevice_many_notify+0x50b/0x1c40 net/core/dev.c:11327 unregister_netdevice_many net/core/dev.c:11414 [inline] default_device_exit_batch+0xa0f/0xa90 net/core/dev.c:11897 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x870/0xd30 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: rcu_preempt kthread starved for 6488 jiffies! g115065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25520 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 13932 Comm: syz.1.1648 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:87 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:104 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x86/0x290 mm/kasan/generic.c:189 Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc RSP: 0018:ffffc900090e77d0 EFLAGS: 00000046 RAX: 0000000000000001 RBX: 1ffffffff1fee945 RCX: ffffffff816fccb4 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff74a28 RBP: ffffffffffffffff R08: ffffffff8ff74a2f R09: 1ffffffff1fee945 R10: dffffc0000000000 R11: fffffbfff1fee945 R12: 1ffff9200121cf08 R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff1fee946 FS: 00007fb2facfe6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2a0903 CR3: 000000003e666000 CR4: 00000000003506f0 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] cpumask_test_cpu include/linux/cpumask.h:562 [inline] cpu_online include/linux/cpumask.h:1105 [inline] trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0xd4/0x550 kernel/locking/lockdep.c:5730 local_lock_acquire include/linux/local_lock_internal.h:29 [inline] refill_obj_stock+0x13d/0x650 mm/memcontrol.c:2889 obj_cgroup_uncharge mm/memcontrol.c:2960 [inline] __memcg_slab_free_hook+0x1df/0x310 mm/memcontrol.c:3047 memcg_slab_free_hook mm/slub.c:2190 [inline] slab_free mm/slub.c:4474 [inline] kmem_cache_free+0x1cf/0x350 mm/slub.c:4552 __sigqueue_free kernel/signal.c:451 [inline] collect_signal kernel/signal.c:594 [inline] __dequeue_signal+0x4ac/0x5c0 kernel/signal.c:616 dequeue_signal+0x169/0x5a0 kernel/signal.c:639 get_signal+0x602/0x1740 kernel/signal.c:2796 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb2f9f7def9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb2facfe0e8 EFLAGS: 00000246 RAX: fffffffffffffffc RBX: 00007fb2fa135f88 RCX: 00007fb2f9f7def9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2fa135f88 RBP: 00007fb2fa135f80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2fa135f8c R13: 0000000000000000 R14: 00007ffd8fc26180 R15: 00007ffd8fc26268