rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24/2:b..l P8049/1:b..l P5000/1:b..l rcu: (detected by 1, t=10503 jiffies, g=82425, q=695 ncpus=2) task:udevd state:R running task stack:22472 pid:5000 tgid:5000 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1840/0x57a0 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8e0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_is_held_type+0x106/0x150 kernel/locking/lockdep.c:5945 Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 84 5d 94 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4b f8 02 00 cc 90 0f 0b 90 48 c7 RSP: 0018:ffffc900026df9a8 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 RDX: 0000000000000000 RSI: ffffffff8e213d22 RDI: ffffffff8c2899a0 RBP: 00000000ffffffff R08: ffffffff823a3c4e R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000246 R13: ffff88807cb59f00 R14: ffffffff8e95c780 R15: 0000000000000001 lookup_page_ext mm/page_ext.c:258 [inline] page_ext_lookup+0xe7/0x180 mm/page_ext.c:513 page_ext_iter_begin include/linux/page_ext.h:133 [inline] __update_page_owner_free_handle+0x104/0x470 mm/page_owner.c:284 __reset_page_owner+0x85/0x1f0 mm/page_owner.c:321 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5613 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4906 alloc_filename fs/namei.c:142 [inline] do_getname+0x2e/0x250 fs/namei.c:182 getname include/linux/fs.h:2526 [inline] getname_maybe_null include/linux/fs.h:2533 [inline] class_filename_maybe_null_constructor include/linux/fs.h:2557 [inline] vfs_fstatat+0x45/0x170 fs/stat.c:368 __do_sys_newfstatat fs/stat.c:538 [inline] __se_sys_newfstatat fs/stat.c:532 [inline] __x64_sys_newfstatat+0x151/0x200 fs/stat.c:532 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8f41111b0a RSP: 002b:00007ffddbcefdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00005601c5266410 RCX: 00007f8f41111b0a RDX: 00007ffddbcefdd0 RSI: 00005601c52542a8 RDI: 00000000ffffff9c RBP: 00005601fa94d148 R08: 00063478c1c69200 R09: 3fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffddbcefdd0 R14: 0000000000000000 R15: 00063478c1c69200 task:kworker/u8:17 state:R running task stack:21416 pid:8049 tgid:8049 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: krds_cp_wq#14/0 rds_connect_worker Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1840/0x57a0 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8e0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 b1 10 01 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ab 2b 95 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 0c 04 0a cc 48 8d 3d b8 a2 91 RSP: 0018:ffffc90005ac7200 EFLAGS: 00000286 RAX: aea9c93c91fae000 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 000000004e1ebbf1 RSI: ffffffff8e213d22 RDI: ffffffff8c2899a0 RBP: ffffffff81769f7f R08: ffffffff81769f7f R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000002 R13: ffffffff8e95c780 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5613 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5296 [inline] __kmalloc_noprof+0x358/0x750 mm/slub.c:5308 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] lsm_blob_alloc security/security.c:218 [inline] lsm_sock_alloc security/security.c:4478 [inline] security_sk_alloc+0x52/0x360 security/security.c:4494 sk_prot_alloc+0x101/0x210 net/core/sock.c:2255 sk_alloc+0x3a/0x390 net/core/sock.c:2308 inet_create+0x7a9/0xff0 net/ipv4/af_inet.c:333 __sock_create+0x4b3/0x9d0 net/socket.c:1665 rds_tcp_conn_path_connect+0x2d8/0x920 net/rds/tcp_connect.c:-1 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kworker/1:0 state:R running task stack:22688 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: mld mld_ifc_work Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1840/0x57a0 kernel/sched/core.c:7189 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:912 [inline] __dev_queue_xmit+0x1ed7/0x37f0 net/core/dev.c:4905 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x337/0x540 net/ipv6/ip6_output.c:246 dst_output include/net/dst.h:471 [inline] NF_HOOK+0x177/0x4f0 include/linux/netfilter.h:318 mld_sendpack+0x890/0xe10 net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x839/0xe70 net/ipv6/mcast.c:2693 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 10312 jiffies! g82425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1840/0x57a0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 13346 Comm: kworker/R-bond4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: bond4 bond_alb_monitor RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5598 [inline] RIP: 0010:lock_is_held_type+0x61/0x150 kernel/locking/lockdep.c:5940 Code: 41 83 bd 8c 0b 00 00 00 0f 85 bf 00 00 00 89 f5 49 89 fe 9c 41 5c fa 48 c7 c7 26 ba fb 8d e8 66 1b 00 00 65 ff 05 0f 5e 94 07 <41> 83 bd 88 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 90 0b 00 00 45 31 RSP: 0018:ffffc90000007128 EFLAGS: 00000002 RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000100 RDX: ffff88805409dd00 RSI: ffffffff8dfbba26 RDI: ffffffff8c2899a0 RBP: 00000000ffffffff R08: ffffc900000073e0 R09: ffffc900000073f0 R10: ffffc90000007240 R11: fffff52000000e4a R12: 0000000000000246 R13: ffff88805409dd00 R14: ffffffff8e95c780 R15: ffffc900000073b8 FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb31358d000 CR3: 0000000021af4000 CR4: 00000000003526f0 Call Trace: __find_rr_leaf+0x34d/0x760 net/ipv6/route.c:836 find_rr_leaf net/ipv6/route.c:892 [inline] rt6_select net/ipv6/route.c:936 [inline] fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2254 ip6_pol_route+0x228/0x13d0 net/ipv6/route.c:2290 pol_lookup_func include/net/ip6_fib.h:669 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline] fib6_rule_action+0x9d7/0xc00 net/ipv6/fib6_rules.c:278 fib_rules_lookup+0x770/0xeb0 net/core/fib_rules.c:340 fib6_rule_lookup+0x1a0/0x730 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2359 [inline] ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2662 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6202 [inline] __netif_receive_skb net/core/dev.c:6315 [inline] process_backlog+0x774/0x1860 net/core/dev.c:6666 __napi_poll+0xaa/0x330 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7953 handle_softirqs+0x225/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 kernel/workqueue.c:2617 Code: 00 4d 85 f6 75 16 e8 65 56 38 00 eb 15 e8 5e 56 38 00 e8 39 6b 15 0a 4d 85 f6 74 ea e8 4f 56 38 00 fb 65 48 8b 05 36 86 a9 11 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc90004c5f960 EFLAGS: 00000293 RAX: 1a05e84afcf63800 RBX: ffff888035bc9201 RCX: ffff88805409dd00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000008 R08: ffffffff902f88f7 R09: 1ffffffff205f11e R10: dffffc0000000000 R11: fffffbfff205f11f R12: 0000000002000001 R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 queue_delayed_work include/linux/workqueue.h:713 [inline] bond_alb_monitor+0x122e/0x17c0 drivers/net/bonding/bond_alb.c:1628 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 rescuer_thread+0x7b6/0x10b0 kernel/workqueue.c:3621 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245