rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8865/1:b..l P5834/1:b..l P2/1:b..l P5182/1:b..l P6808/1:b..l P12/1:b..l rcu: (detected by 0, t=10502 jiffies, g=37033, q=818697 ncpus=2) task:kworker/u8:0 state:R running task stack:22824 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:100 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:227 [inline] RIP: 0010:unwind_next_frame+0x12f6/0x2390 arch/x86/kernel/unwind_orc.c:494 Code: 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 <49> 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 RSP: 0018:ffffc90000116f78 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff8fae130c RCX: 0000000000000000 RDX: ffffffff8fae129c RSI: ffffffff90273ed0 RDI: ffffffff8bc07680 RBP: ffffffff8fae130c R08: 000000000000001f R09: ffffffff8173cd25 R10: ffffc90000117098 R11: ffffffff81ac6cd0 R12: ffffffff81331fe9 R13: ffffffff8fae1308 R14: ffffc90000117048 R15: 0000000000000000 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kmalloc_noprof+0x411/0x7f0 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ieee802_11_parse_elems_full+0x152/0x2ab0 net/mac80211/parse.c:1011 ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2470 [inline] ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2477 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1569 [inline] ieee80211_ibss_rx_queued_mgmt+0x47a/0x2af0 net/mac80211/ibss.c:1600 ieee80211_iface_process_skb net/mac80211/iface.c:1694 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1748 cfg80211_wiphy_work+0x2bb/0x470 net/wireless/core.c:435 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:udevd state:R running task stack:22792 pid:6808 tgid:6808 ppid:5197 task_flags:0x400140 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 RIP: 0010:lock_is_held_type+0x137/0x190 kernel/locking/lockdep.c:5945 Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 09 2a 45 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc9000b2a76e0 EFLAGS: 00000206 RAX: 304441dc53dcd700 RBX: 0000000000000001 RCX: 304441dc53dcd700 RDX: 0000000000000000 RSI: ffffffff8d9d1546 RDI: ffffffff8bc076e0 RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8231052a R10: dffffc0000000000 R11: ffffed100b9f3ee6 R12: 0000000000000246 R13: ffff8880287fbc80 R14: ffffffff8e13d2e0 R15: 0000000000000002 lookup_page_ext mm/page_ext.c:254 [inline] page_ext_lookup+0xe7/0x180 mm/page_ext.c:509 page_ext_iter_begin include/linux/page_ext.h:132 [inline] __page_table_check_zero+0x18f/0x530 mm/page_table_check.c:139 page_table_check_free include/linux/page_table_check.h:43 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbd7/0xd30 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x146/0x170 mm/slub.c:3857 put_cpu_partial+0x1f2/0x2e0 mm/slub.c:3932 __slab_free+0x2b9/0x390 mm/slub.c:5906 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:408 kasan_kmalloc include/linux/kasan.h:262 [inline] __do_kmalloc_node mm/slub.c:5627 [inline] __kmalloc_noprof+0x411/0x7f0 mm/slub.c:5639 kmalloc_noprof include/linux/slab.h:961 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x213/0x4b0 security/tomoyo/file.c:822 security_inode_getattr+0x12f/0x330 security/security.c:2416 vfs_getattr fs/stat.c:259 [inline] vfs_fstat fs/stat.c:281 [inline] __do_sys_newfstat fs/stat.c:555 [inline] __se_sys_newfstat fs/stat.c:550 [inline] __x64_sys_newfstat+0xfc/0x200 fs/stat.c:550 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa68c111ad7 RSP: 002b:00007fff5313f748 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 RAX: ffffffffffffffda RBX: 00005590a03538a0 RCX: 00007fa68c111ad7 RDX: 00007fa68c1efea0 RSI: 00007fff5313f750 RDI: 0000000000000008 RBP: 00007fa68c1efff0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a R13: 0000000000003fff R14: 0000000000000000 R15: 00005590a03538a0 task:acpid state:R running task stack:21672 pid:5182 tgid:5182 ppid:1 task_flags:0x400040 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:406 [inline] RIP: 0010:unwind_next_frame+0xc52/0x2390 arch/x86/kernel/unwind_orc.c:585 Code: 96 c0 20 c8 3c 01 0f 85 df 0c 00 00 48 89 df e8 84 23 00 00 48 89 c3 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 <4c> 8b 7c 24 18 74 08 4c 89 ff e8 1f 1c b2 00 49 89 1f 48 8b 44 24 RSP: 0018:ffffc90003007258 EFLAGS: 00000246 RAX: 1ffff92000600e7a RBX: ffffffff81ac6c7c RCX: 1ffff92000600e01 RDX: ffffffff902b79ac RSI: 0000000000000002 RDI: ffffc90003007418 RBP: dffffc0000000000 R08: 0000000000000002 R09: ffffffff8173cd25 R10: ffffc900030073d8 R11: fffff52000600e7d R12: ffffc90003008000 R13: 1ffff92000600e73 R14: ffffc90003007388 R15: ffffc90003000000 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:758 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x146/0x170 mm/slub.c:3857 put_cpu_partial+0x1f2/0x2e0 mm/slub.c:3932 __slab_free+0x2b9/0x390 mm/slub.c:5906 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] kmem_cache_alloc_noprof+0x367/0x6e0 mm/slub.c:5272 lsm_file_alloc security/security.c:739 [inline] security_file_alloc+0x34/0x330 security/security.c:2927 init_file+0x93/0x2f0 fs/file_table.c:159 alloc_empty_file+0x6e/0x1d0 fs/file_table.c:241 path_openat+0x107/0x3830 fs/namei.c:4120 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f016c7d2407 RSP: 002b:00007ffce650f170 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f016c748740 RCX: 00007f016c7d2407 RDX: 0000000000080800 RSI: 00007ffce650f380 RDI: ffffffffffffff9c RBP: 00007ffce650f380 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 R13: 00007ffce650f480 R14: 000055efad1f97fe R15: 00007ffce650f4a0 task:kthreadd state:R running task stack:26120 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb ac f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90000077500 EFLAGS: 00000206 RAX: a73b05d4340f6500 RBX: 0000000000000000 RCX: a73b05d4340f6500 RDX: 0000000000000000 RSI: ffffffff8d9d1546 RDI: ffffffff8bc076e0 RBP: ffffffff8231052a R08: 0000000000000000 R09: ffffffff8231052a R10: dffffc0000000000 R11: ffffed100b9f3ee6 R12: 0000000000000002 R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] __page_table_check_zero+0xd7/0x530 mm/page_table_check.c:138 page_table_check_free include/linux/page_table_check.h:43 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbd7/0xd30 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x146/0x170 mm/slub.c:3857 put_cpu_partial+0x1f2/0x2e0 mm/slub.c:3932 __slab_free+0x2b9/0x390 mm/slub.c:5906 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] kmem_cache_alloc_noprof+0x367/0x6e0 mm/slub.c:5272 copy_sighand+0x50/0x230 kernel/fork.c:1611 copy_process+0x165f/0x3c00 kernel/fork.c:2175 kernel_clone+0x21e/0x840 kernel/fork.c:2609 kernel_thread+0x10d/0x160 kernel/fork.c:2670 create_kthread kernel/kthread.c:486 [inline] kthreadd+0x575/0x770 kernel/kthread.c:846 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz-executor state:R running task stack:21480 pid:5834 tgid:5834 ppid:5822 task_flags:0x400140 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:-1 [inline] RIP: 0010:stack_access_ok arch/x86/kernel/unwind_orc.c:393 [inline] RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:403 [inline] RIP: 0010:unwind_next_frame+0xae0/0x2390 arch/x86/kernel/unwind_orc.c:585 Code: 00 4c 89 7c 24 28 4d 8d 7e 08 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 80 7c 05 00 00 74 08 4c 89 ff e8 b0 1c b2 00 <4c> 89 7c 24 60 48 89 5c 24 78 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 RSP: 0018:ffffc90003fbf2b8 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffffffff9039dc9d RCX: ffffffff8fba7bd4 RDX: ffffffff9039dc98 RSI: 0000000000000002 RDI: ffffffff8bc07680 RBP: 1ffff920007f7e72 R08: 0000000000000006 R09: ffffffff8173cd25 R10: ffffc90003fbf3d8 R11: ffffffff81ac6cd0 R12: ffffc90003fbf830 R13: ffffc90003fbf3d8 R14: ffffc90003fbf388 R15: ffffc90003fbf390 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2906 discard_slab mm/slub.c:3310 [inline] __put_partials+0x146/0x170 mm/slub.c:3857 put_cpu_partial+0x1f2/0x2e0 mm/slub.c:3932 __slab_free+0x2b9/0x390 mm/slub.c:5906 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] kmem_cache_alloc_noprof+0x367/0x6e0 mm/slub.c:5272 lsm_file_alloc security/security.c:739 [inline] security_file_alloc+0x34/0x330 security/security.c:2927 init_file+0x93/0x2f0 fs/file_table.c:159 alloc_empty_file+0x6e/0x1d0 fs/file_table.c:241 path_openat+0x107/0x3830 fs/namei.c:4120 do_filp_open+0x1fa/0x410 fs/namei.c:4161 do_sys_openat2+0x121/0x1c0 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1463 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb51398e7c1 RSP: 002b:00007fb513d0fd40 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000244 RCX: 00007fb51398e7c1 RDX: 0000000000090800 RSI: 00007fb513a12286 RDI: 00000000ffffff9c RBP: 00007fb513d0fdec R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000287 R12: 00000000000000c2 R13: 0000000000000000 R14: 0000000000044f4f R15: 00007fb513d0fe40 task:syz-executor state:R running task stack:26888 pid:8865 tgid:8851 ppid:5813 task_flags:0x40044c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_common+0x83/0xd0 kernel/sched/core.c:7113 preempt_schedule+0xae/0xc0 kernel/sched/core.c:7137 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3f/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1884 [inline] zap_pmd_range mm/memory.c:1946 [inline] zap_pud_range mm/memory.c:1975 [inline] zap_p4d_range mm/memory.c:1996 [inline] unmap_page_range+0x3a7f/0x4370 mm/memory.c:2017 unmap_single_vma mm/memory.c:2060 [inline] unmap_vmas+0x399/0x580 mm/memory.c:2104 exit_mmap+0x240/0xb40 mm/mmap.c:1280 __mmput+0x118/0x430 kernel/fork.c:1133 exit_mm+0x1da/0x2c0 kernel/exit.c:582 do_exit+0x648/0x2300 kernel/exit.c:954 do_group_exit+0x21c/0x2d0 kernel/exit.c:1107 get_signal+0x1285/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0xa0/0x790 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x72/0x130 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0xfa0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3b1978eb5d RSP: 002b:00007f3b181f6b60 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 RAX: fffffffffffffffa RBX: 0000000000000000 RCX: 00007f3b1978eb5d RDX: 0000000000000004 RSI: 00007f3b181f6ba0 RDI: 00000000000000ca RBP: 00007f3b181f6d00 R08: 0000000000000000 R09: 00007ffe96bd08a7 R10: 0000000000000008 R11: 0000000000000293 R12: 00007f3b181f6cf0 R13: 000600046003fd00 R14: 00007ffe96bd07c0 R15: 00007ffe96bd08a8 rcu: rcu_preempt kthread starved for 7695 jiffies! g37033 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline] RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline] RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] RIP: 0010:rcu_is_watching+0x4e/0xb0 kernel/rcu/tree.c:751 Code: ff df 4c 8d 34 dd d0 ad a0 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 fc 65 7f 00 48 c7 c3 d8 6f 92 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d f9 RSP: 0018:ffffc90000a07718 EFLAGS: 00000287 RAX: 1ffffffff1b415bb RBX: ffff8880b8732fd8 RCX: f595141a43142700 RDX: 0000000000000000 RSI: ffffffff8bc076c0 RDI: ffffffff8bc07680 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8173cd25 R10: ffffc90000a07868 R11: fffff52000140f19 R12: 1ffff92000140f0d R13: ffffc90000a078a0 R14: ffffffff8da0add8 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555590a675c8 CR3: 000000007c9a4000 CR4: 00000000003526f0 Call Trace: rcu_read_lock include/linux/rcupdate.h:868 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xd4/0x2390 arch/x86/kernel/unwind_orc.c:479 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:758 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 unpoison_slab_object mm/kasan/common.c:342 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:368 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4955 [inline] slab_alloc_node mm/slub.c:5265 [inline] kmem_cache_alloc_noprof+0x367/0x6e0 mm/slub.c:5272 dst_alloc+0x105/0x170 net/core/dst.c:89 rt_dst_alloc net/ipv4/route.c:1646 [inline] __mkroute_output net/ipv4/route.c:2650 [inline] ip_route_output_key_hash_rcu+0x1560/0x23e0 net/ipv4/route.c:2870 ip_route_output_key_hash+0x174/0x280 net/ipv4/route.c:2700 __ip_route_output_key include/net/route.h:169 [inline] ip_route_output_flow+0x2a/0x150 net/ipv4/route.c:2927 ip_route_output_key include/net/route.h:179 [inline] ip_route_me_harder+0x6c4/0xf10 net/ipv4/netfilter.c:53 synproxy_send_tcp+0x3a7/0x700 net/netfilter/nf_synproxy_core.c:431 synproxy_send_client_synack+0x8bb/0xe20 net/netfilter/nf_synproxy_core.c:484 nft_synproxy_eval_v4+0x36e/0x560 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x345/0x570 net/netfilter/nft_synproxy.c:141 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x40c/0x1920 net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x25d/0x340 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:623 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK+0x206/0x3a0 include/linux/netfilter.h:316 NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6079 [inline] __netif_receive_skb+0x143/0x380 net/core/dev.c:6192 process_backlog+0x60e/0x14f0 net/core/dev.c:6544 __napi_poll+0xc7/0x360 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x5f7/0xdf0 net/core/dev.c:7784 handle_softirqs+0x286/0x870 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 RAX: f595141a43142700 RBX: ffffffff8196bc07 RCX: f595141a43142700 RDX: 0000000000000001 RSI: ffffffff8d7e8390 RDI: ffffffff8bc076e0 RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1170 R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e7/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147