aoe: skb alloc failure aoe: skb alloc failure aoe: skb alloc failure aoe: skb alloc failure rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 1-....: (2429 ticks this GP) idle=af6/1/0x4000000000000000 softirq=18406/18406 fqs=134 (t=10500 jiffies g=16913 q=129579) rcu: rcu_preempt kthread starved for 1349 jiffies! g16913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:28776 pid: 13 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4327 [inline] __schedule+0x8de/0x2170 kernel/sched/core.c:5078 schedule+0xcf/0x270 kernel/sched/core.c:5157 schedule_timeout+0x11b/0x210 kernel/time/timer.c:1878 rcu_gp_fqs_loop kernel/rcu/tree.c:1940 [inline] rcu_gp_kthread+0xbbe/0x1d90 kernel/rcu/tree.c:2113 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 NMI backtrace for cpu 1 CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 5.11.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:79 [inline] dump_stack+0x9a/0xcc lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x30/0x99 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x11f/0x170 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x1f4/0x230 kernel/rcu/tree_stall.h:337 print_cpu_stall kernel/rcu/tree_stall.h:569 [inline] check_cpu_stall kernel/rcu/tree_stall.h:643 [inline] rcu_pending kernel/rcu/tree.c:3751 [inline] rcu_sched_clock_irq.cold+0x48e/0xedf kernel/rcu/tree.c:2580 update_process_times+0x13b/0x1c0 kernel/time/timer.c:1782 tick_sched_handle+0x6f/0x130 kernel/time/tick-sched.c:226 tick_sched_timer+0x132/0x210 kernel/time/tick-sched.c:1369 __run_hrtimer kernel/time/hrtimer.c:1519 [inline] __hrtimer_run_queues+0x18a/0xb00 kernel/time/hrtimer.c:1583 hrtimer_interrupt+0x300/0x930 kernel/time/hrtimer.c:1645 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline] __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106 asm_call_irq_on_stack+0xf/0x20 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline] run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline] sysvec_apic_timer_interrupt+0xbd/0x100 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629 RIP: 0010:filter_irq_stacks+0x39/0x50 lib/stackdepot.c:333 Code: 89 c6 48 81 fa 00 01 40 88 72 0d 48 81 fa d0 0d 40 88 73 04 8d 46 01 c3 48 81 fa 00 00 60 88 72 09 48 81 fa f6 09 60 88 72 ea <48> 83 c0 01 49 39 c0 75 c9 89 c8 c3 31 c0 c3 0f 1f 84 00 00 00 00 RSP: 0018:ffffc90000d87628 EFLAGS: 00000287 RAX: 0000000000000002 RBX: ffff888044640dc8 RCX: 0000000000000011 RDX: ffffffff81a13090 RSI: 0000000000000002 RDI: ffffc90000d87630 RBP: ffff888044640dc0 R08: 0000000000000011 R09: ffffffff8ca7933e R10: 0000000000076083 R11: 000000000000014a R12: 0000000000000800 R13: ffffffff81a0f0a2 R14: ffff888044640dc0 R15: 0000000000000246 kasan_save_stack+0x25/0x40 mm/kasan/common.c:39 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:356 ____kasan_slab_free+0xe1/0x110 mm/kasan/common.c:362 kasan_slab_free include/linux/kasan.h:192 [inline] slab_free_hook mm/slub.c:1547 [inline] slab_free_freelist_hook+0x5d/0x150 mm/slub.c:1580 slab_free mm/slub.c:3143 [inline] kmem_cache_free+0x82/0x350 mm/slub.c:3159 br_ip6_multicast_alloc_query net/bridge/br_multicast.c:904 [inline] br_multicast_alloc_query net/bridge/br_multicast.c:1022 [inline] __br_multicast_send_query+0x2a3f/0x3f60 net/bridge/br_multicast.c:1449 br_multicast_send_query+0x20c/0x390 net/bridge/br_multicast.c:1504 br_multicast_query_expired net/bridge/br_multicast.c:3192 [inline] br_ip6_multicast_query_expired+0xb9/0xe0 net/bridge/br_multicast.c:3208 call_timer_fn+0x163/0x4b0 kernel/time/timer.c:1417 expire_timers kernel/time/timer.c:1462 [inline] __run_timers.part.0+0x52a/0x8b0 kernel/time/timer.c:1731 __run_timers kernel/time/timer.c:1712 [inline] run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1744 __do_softirq+0x29b/0x9f6 kernel/softirq.c:343 run_ksoftirqd kernel/softirq.c:650 [inline] run_ksoftirqd+0x2d/0x50 kernel/softirq.c:642 smpboot_thread_fn+0x561/0x8e0 kernel/smpboot.c:165 kthread+0x36f/0x450 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 ---------------- Code disassembly (best guess): 0: 89 c6 mov %eax,%esi 2: 48 81 fa 00 01 40 88 cmp $0xffffffff88400100,%rdx 9: 72 0d jb 0x18 b: 48 81 fa d0 0d 40 88 cmp $0xffffffff88400dd0,%rdx 12: 73 04 jae 0x18 14: 8d 46 01 lea 0x1(%rsi),%eax 17: c3 retq 18: 48 81 fa 00 00 60 88 cmp $0xffffffff88600000,%rdx 1f: 72 09 jb 0x2a 21: 48 81 fa f6 09 60 88 cmp $0xffffffff886009f6,%rdx 28: 72 ea jb 0x14 * 2a: 48 83 c0 01 add $0x1,%rax <-- trapping instruction 2e: 49 39 c0 cmp %rax,%r8 31: 75 c9 jne 0xfffffffc 33: 89 c8 mov %ecx,%eax 35: c3 retq 36: 31 c0 xor %eax,%eax 38: c3 retq 39: 0f .byte 0xf 3a: 1f (bad) 3b: 84 00 test %al,(%rax) 3d: 00 00 add %al,(%rax)