rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5360/1:b..l P5226/1:b..l P5373/2:b..l P1122/2:b..l rcu: (detected by 0, t=10503 jiffies, g=6681, q=824512 ncpus=2) task:kworker/u8:5 state:R running task stack:23120 pid:1122 tgid:1122 ppid:2 flags:0x00004000 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6861 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6885 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x171d/0x3ed0 net/core/dev.c:4455 dev_queue_xmit include/linux/netdevice.h:3094 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip6_finish_output2+0xfc9/0x1730 net/ipv6/ip6_output.c:141 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:226 NF_HOOK+0x9e/0x430 include/linux/netfilter.h:314 mld_sendpack+0x843/0xdb0 net/ipv6/mcast.c:1819 ipv6_mc_dad_complete+0x88/0x490 net/ipv6/mcast.c:2245 addrconf_dad_completed+0x712/0xcd0 net/ipv6/addrconf.c:4342 addrconf_dad_work+0xdc2/0x16f0 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 task:syz.0.28 state:R running task stack:23088 pid:5373 tgid:5372 ppid:5228 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6861 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6885 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x171d/0x3ed0 net/core/dev.c:4455 dev_queue_xmit include/linux/netdevice.h:3094 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip6_finish_output2+0xfc9/0x1730 net/ipv6/ip6_output.c:141 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:226 NF_HOOK include/linux/netfilter.h:314 [inline] ip6_xmit+0xef8/0x18b0 net/ipv6/ip6_output.c:366 inet6_csk_xmit+0x468/0x710 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0x1ed1/0x3b30 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_connect+0x1b7b/0x4940 net/ipv4/tcp_output.c:4143 tcp_v6_connect+0x14b1/0x1e40 net/ipv6/tcp_ipv6.c:333 __inet_stream_connect+0x262/0xf30 net/ipv4/af_inet.c:679 inet_stream_connect+0x65/0xa0 net/ipv4/af_inet.c:750 kernel_connect+0x10b/0x160 net/socket.c:3652 smc_connect+0x72c/0xde0 net/smc/af_smc.c:1679 __sys_connect_file net/socket.c:2071 [inline] __sys_connect+0x2d1/0x300 net/socket.c:2088 __do_sys_connect net/socket.c:2098 [inline] __se_sys_connect net/socket.c:2095 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2095 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb67737dff9 RSP: 002b:00007fb6781af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fb677535f80 RCX: 00007fb67737dff9 RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 RBP: 00007fb6773f0296 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fb677535f80 R15: 00007ffe54f8da78 task:syz-executor state:R running task stack:20560 pid:5226 tgid:5226 ppid:5213 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6861 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6885 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] copy_pte_range mm/memory.c:1194 [inline] copy_pmd_range+0x7b90/0x85f0 mm/memory.c:1255 copy_pud_range mm/memory.c:1292 [inline] copy_p4d_range mm/memory.c:1316 [inline] copy_page_range+0x99f/0xe90 mm/memory.c:1414 dup_mmap kernel/fork.c:750 [inline] dup_mm kernel/fork.c:1674 [inline] copy_mm+0x11fb/0x1f40 kernel/fork.c:1723 copy_process+0x1845/0x3d50 kernel/fork.c:2372 kernel_clone+0x223/0x880 kernel/fork.c:2784 __do_sys_clone kernel/fork.c:2927 [inline] __se_sys_clone kernel/fork.c:2911 [inline] __x64_sys_clone+0x258/0x2a0 kernel/fork.c:2911 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3da1f74853 RSP: 002b:00007ffe27795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3da1f74853 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 00005555890f47d0 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000001023d R14: 00000000000101b6 R15: 00007ffe27795310 task:syz.4.20 state:R running task stack:23808 pid:5360 tgid:5360 ppid:5217 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7004 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 kernel/rcu/update.c:320 Code: f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 4f a9 5e 04 00 <74> 1e 83 3d 96 da 5e 04 00 74 15 65 48 8b 0c 25 80 d7 03 00 31 c0 RSP: 0018:ffffc90004527a50 EFLAGS: 00000202 RAX: 0000000000000000 RBX: ffffea00009e2680 RCX: 67edd587f7105300 RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c602720 RBP: dffffc0000000000 R08: ffffffff94292807 R09: 1ffffffff2852500 R10: dffffc0000000000 R11: fffffbfff2852501 R12: 0000000000000000 R13: 1ffffd400013c4d0 R14: ffffffff82083f60 R15: ffffea00009e2680 rcu_read_lock include/linux/rcupdate.h:850 [inline] page_ext_get+0x46/0x2a0 mm/page_ext.c:525 __page_table_check_zero+0xb1/0x350 mm/page_table_check.c:148 page_table_check_free include/linux/page_table_check.h:41 [inline] free_pages_prepare mm/page_alloc.c:1109 [inline] free_unref_page+0xce4/0xf00 mm/page_alloc.c:2638 vfree+0x186/0x2e0 mm/vmalloc.c:3361 vb2_vmalloc_put+0x68/0xb0 drivers/media/common/videobuf2/videobuf2-vmalloc.c:68 __vb2_buf_mem_free+0xfa/0x2a0 drivers/media/common/videobuf2/videobuf2-core.c:275 __vb2_free_mem drivers/media/common/videobuf2/videobuf2-core.c:571 [inline] __vb2_queue_free+0x452/0xb70 drivers/media/common/videobuf2/videobuf2-core.c:599 vb2_core_queue_release+0x6c/0x150 drivers/media/common/videobuf2/videobuf2-core.c:2678 v4l2_m2m_ctx_release+0x1e/0x40 drivers/media/v4l2-core/v4l2-mem2mem.c:1276 vicodec_release+0x94/0x110 drivers/media/test-drivers/vicodec/vicodec-core.c:1939 v4l2_release+0x1f5/0x3b0 drivers/media/v4l2-core/v4l2-dev.c:456 __fput+0x23f/0x880 fs/file_table.c:431 task_work_run+0x24f/0x310 kernel/task_work.c:228 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa32357dff9 RSP: 002b:00007ffc892b8e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fa323737a80 RCX: 00007fa32357dff9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fa323737a80 R08: 00007fa323722000 R09: 00007ffc892b90ff R10: 00000000005fbf94 R11: 0000000000000246 R12: 000000000001033a R13: 00007ffc892b8f10 R14: 0000000000000032 R15: ffffffffffffffff rcu: rcu_preempt kthread starved for 10637 jiffies! g6681 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26144 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5322 [inline] __schedule+0x1843/0x4ae0 kernel/sched/core.c:6682 __schedule_loop kernel/sched/core.c:6759 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6774 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5309 Comm: kworker/1:7 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events nsim_dev_trap_report_work RIP: 0010:deref_stack_reg+0x1a4/0x210 arch/x86/kernel/unwind_orc.c:408 Code: 00 00 49 89 c6 48 8b 6c 24 18 48 89 e8 48 c1 e8 03 80 3c 18 00 74 08 48 89 ef e8 67 e7 b9 00 4c 89 75 00 b0 01 48 83 c4 20 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f1 80 e1 07 80 c1 RSP: 0018:ffffc90000a17ae0 EFLAGS: 00000286 RAX: 1ffff92000142f01 RBX: ffffffff912c93bc RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: ffffc90000a18870 RBP: ffffc90000a17c20 R08: ffffc90000a18870 R09: 0000000000000000 R10: ffffc90000a17c30 R11: fffff52000142f88 R12: 1ffff92000142f7d R13: 1ffff92000142f7e R14: ffffc90000a18990 R15: ffffc90000a19000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3201aff8 CR3: 000000006313e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unwind_next_frame+0x1799/0x22d0 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4264 [inline] __kmalloc_node_track_caller_noprof+0x225/0x440 mm/slub.c:4283 kmalloc_reserve+0x111/0x2a0 net/core/skbuff.c:609 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:678 alloc_skb include/linux/skbuff.h:1322 [inline] synproxy_send_client_synack_ipv6+0x1ba/0xc30 net/netfilter/nf_synproxy_core.c:873 nft_synproxy_eval_v6 net/netfilter/nft_synproxy.c:90 [inline] nft_synproxy_do_eval+0x739/0xa60 net/netfilter/nft_synproxy.c:145 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5666 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 do_softirq+0x11b/0x1e0 kernel/softirq.c:455 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244