rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (1 GPs behind) idle=8eac/1/0x4000000000000000 softirq=115726/115764 fqs=3
rcu: (detected by 1, t=10502 jiffies, g=99269, q=1069 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 20365 Comm: syz.7.4080 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
RIP: 0010:arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:107 [inline]
RIP: 0010:raw_atomic_try_cmpxchg_acquire include/linux/atomic/atomic-arch-fallback.h:2170 [inline]
RIP: 0010:atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1302 [inline]
RIP: 0010:queued_spin_lock include/asm-generic/qspinlock.h:111 [inline]
RIP: 0010:do_raw_spin_lock+0x139/0x260 kernel/locking/spinlock_debug.c:116
Code: 28 00 00 00 00 e8 e7 97 94 00 be 04 00 00 00 48 8d 7c 24 28 e8 d8 97 94 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 2a 8d 7d 12 48 b8 00 00 00
RSP: 0018:ffffc90000007d50 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff88807ebf22a8 RCX: ffffffff81e5c2e8
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007d78
RBP: ffff88807ebf22b0 R08: 0000000000000001 R09: fffff52000000faf
R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000000fab
R13: ffff88807ebf22b8 R14: ffff8880b8428640 R15: ffff8880b8428690
FS: 00007ff16fa656c0(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c24e89e CR3: 000000007a4c0000 CR4: 00000000003526f0
Call Trace:
spin_lock include/linux/spinlock.h:342 [inline]
advance_sched+0xe5/0xd20 net/sched/sch_taprio.c:930
__run_hrtimer kernel/time/hrtimer.c:2032 [inline]
__hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2096
hrtimer_interrupt+0x3e5/0x940 kernel/time/hrtimer.c:2215
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
__sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:198
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 4f 29 f6 48 89 df e8 9e 9e 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 af 18 f6 65 8b 05 ee 28 a7 08 85 c0 74 16 5b
RSP: 0018:ffffc9000de0f5c8 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffffffff9b974f18 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8e1a3212 RDI: ffffffff8c400f80
RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801416a000
__debug_check_no_obj_freed lib/debugobjects.c:1180 [inline]
debug_check_no_obj_freed+0x31f/0x630 lib/debugobjects.c:1201
__free_pages_prepare mm/page_alloc.c:1413 [inline]
free_pages_prepare+0x3a7/0xd80 mm/page_alloc.c:1451
__free_contig_range_common+0x14f/0x250 mm/page_alloc.c:6897
__free_contig_range mm/page_alloc.c:6942 [inline]
free_pages_bulk+0xbd/0x200 mm/page_alloc.c:5257
vm_area_free_pages+0xad/0x2b0 mm/vmalloc.c:3439
vfree mm/vmalloc.c:3488 [inline]
vfree+0x107/0x750 mm/vmalloc.c:3462
htable_put net/netfilter/xt_hashlimit.c:426 [inline]
hashlimit_mt_destroy+0x7e/0xa0 net/netfilter/xt_hashlimit.c:981
cleanup_match net/ipv6/netfilter/ip6_tables.c:477 [inline]
cleanup_entry+0x1a2/0x3b0 net/ipv6/netfilter/ip6_tables.c:661
translate_table+0xcc8/0x16c0 net/ipv6/netfilter/ip6_tables.c:744
do_replace net/ipv6/netfilter/ip6_tables.c:1152 [inline]
do_ip6t_set_ctl+0x689/0xd00 net/ipv6/netfilter/ip6_tables.c:1643
nf_setsockopt+0x8d/0xf0 net/netfilter/nf_sockopt.c:101
ipv6_setsockopt+0x135/0x170 net/ipv6/ipv6_sockglue.c:970
rawv6_setsockopt+0xee/0x5a0 net/ipv6/raw.c:1048
do_sock_setsockopt+0xf3/0x1d0 net/socket.c:2368
__sys_setsockopt+0x195/0x220 net/socket.c:2393
__do_sys_setsockopt net/socket.c:2399 [inline]
__se_sys_setsockopt net/socket.c:2396 [inline]
__x64_sys_setsockopt+0xbd/0x160 net/socket.c:2396
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff16eb9de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff16fa65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007ff16ee25fa0 RCX: 00007ff16eb9de59
RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
RBP: 00007ff16ec33e6f R08: 0000000000000538 R09: 0000000000000000
R10: 0000200000019200 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ff16ee26038 R14: 00007ff16ee25fa0 R15: 00007ffdd0549b88
rcu: rcu_preempt kthread starved for 10486 jiffies! g99269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7326
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 15917 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
RIP: 0010:csd_lock_wait kernel/smp.c:342 [inline]
RIP: 0010:smp_call_function_many_cond+0x58e/0x16c0 kernel/smp.c:892
Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41
RSP: 0018:ffffc900025b7618 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd45bd
RDX: ffff88807a192540 RSI: ffffffff81fd4597 RDI: ffff88807a192540
RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880
FS: 0000555577518500(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c280100 CR3: 0000000033c50000 CR4: 00000000003526f0
Call Trace:
on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1057
__flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline]
flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline]
flush_tlb_mm_range+0x45f/0x16f0 arch/x86/mm/tlb.c:1451
dup_mmap+0x1307/0x21b0 mm/mmap.c:1905
dup_mm kernel/fork.c:1543 [inline]
copy_mm kernel/fork.c:1595 [inline]
copy_process+0x4588/0x8030 kernel/fork.c:2289
kernel_clone+0x176/0x9d0 kernel/fork.c:2748
__do_sys_clone+0xd9/0x120 kernel/fork.c:2889
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f31d09c68d2
Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffc934e9830 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007ffc934e9830 RCX: 00007f31d09c68d2
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffc934e99bc R08: 0000000000000000 R09: 0000000000000001
R10: 00005555775187d0 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000000927c0 R14: 00000000000d3287 R15: 00007ffc934e9a10