rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4670/1:b..l P4663/1:b..l P9508/1:b..l P4894/1:b..l P9479/1:b..l rcu: (detected by 0, t=10504 jiffies, g=49045, q=19 ncpus=2) task:syz.0.1178 state:R running task stack:25456 pid:9479 tgid:9479 ppid:5552 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__unwind_start+0x3e/0x7c0 arch/x86/kernel/unwind_orc.c:689 Code: 4c 24 10 49 89 d4 48 89 f3 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 d1 36 52 00 ba 60 00 00 00 4c 89 f7 31 f6 e8 62 7b b9 00 <4d> 8d 6e 28 4d 89 ef 49 c1 ef 03 41 80 3c 2f 00 74 08 4c 89 ef e8 RSP: 0018:ffffc9000cc07138 EFLAGS: 00000246 RAX: ffffc9000cc071a0 RBX: ffff8880224fda00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000cc07200 RBP: dffffc0000000000 R08: ffffc9000cc071ff R09: 0000000000000000 R10: ffffc9000cc071a0 R11: fffff52001980e40 R12: 0000000000000000 R13: ffffffff817f30e0 R14: ffffc9000cc071a0 R15: 0000000000000000 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x103/0x1b0 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1094 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2612 discard_slab mm/slub.c:2583 [inline] __put_partials+0xeb/0x130 mm/slub.c:3051 put_cpu_partial+0x17c/0x250 mm/slub.c:3126 __slab_free+0x2ea/0x3d0 mm/slub.c:4343 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:322 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3988 [inline] slab_alloc_node mm/slub.c:4037 [inline] __do_kmalloc_node mm/slub.c:4157 [inline] __kmalloc_noprof+0x1a6/0x400 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] kzalloc_noprof include/linux/slab.h:807 [inline] kobject_get_path+0xb8/0x230 lib/kobject.c:161 kobject_uevent_env+0x2a5/0x8e0 lib/kobject_uevent.c:545 __kobject_del+0xd3/0x310 lib/kobject.c:601 kobject_cleanup lib/kobject.c:680 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x245/0x480 lib/kobject.c:737 net_rx_queue_update_kobjects+0x52b/0x5b0 net/core/net-sysfs.c:1174 remove_queue_kobjects net/core/net-sysfs.c:1950 [inline] netdev_unregister_kobject+0x104/0x250 net/core/net-sysfs.c:2104 unregister_netdevice_many_notify+0x1709/0x1c40 net/core/dev.c:11386 unregister_netdevice_many net/core/dev.c:11414 [inline] unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11289 unregister_netdevice include/linux/netdevice.h:3129 [inline] __tun_detach+0x6b9/0x1600 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x108/0x1b0 drivers/net/tun.c:3510 __fput+0x24a/0x8a0 fs/file_table.c:422 task_work_run+0x24f/0x310 kernel/task_work.c:228 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcb77f79e79 RSP: 002b:00007fcb7823fb98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 0000000000058baf RCX: 00007fcb77f79e79 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fcb7823fc68 R08: 0000000000000001 R09: 00007fcb7823fe7f R10: 00007fcb77e00000 R11: 0000000000000246 R12: 0000000000000032 R13: 00007fcb7823fc90 R14: 00007fcb7823fcb0 R15: ffffffffffffffff task:dhcpcd state:R running task stack:23632 pid:4894 tgid:4894 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_notrace+0x100/0x140 kernel/sched/core.c:6801 preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk.S:13 rcu_lockdep_current_cpu_online+0x106/0x120 kernel/rcu/tree.c:4708 rcu_read_lock_held_common kernel/rcu/update.c:113 [inline] rcu_read_lock_held+0x1e/0x50 kernel/rcu/update.c:349 lookup_page_ext mm/page_ext.c:254 [inline] page_ext_get+0x192/0x2a0 mm/page_ext.c:526 __page_table_check_zero+0xb1/0x350 mm/page_table_check.c:148 page_table_check_free include/linux/page_table_check.h:41 [inline] free_pages_prepare mm/page_alloc.c:1095 [inline] free_unref_page+0xd36/0xea0 mm/page_alloc.c:2612 discard_slab mm/slub.c:2583 [inline] __put_partials+0xeb/0x130 mm/slub.c:3051 put_cpu_partial+0x17c/0x250 mm/slub.c:3126 __slab_free+0x2ea/0x3d0 mm/slub.c:4343 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:378 kasan_kmalloc include/linux/kasan.h:211 [inline] __do_kmalloc_node mm/slub.c:4158 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] kzalloc_noprof include/linux/slab.h:807 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_number_perm+0x23a/0x880 security/tomoyo/file.c:723 security_file_ioctl+0x75/0xb0 security/security.c:2791 __do_sys_ioctl fs/ioctl.c:901 [inline] __se_sys_ioctl+0x47/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f256059cd49 RSP: 002b:00007fff6aa29298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000055e3c36dbe00 RCX: 00007f256059cd49 RDX: 00007fff6aa292a0 RSI: 0000000000008921 RDI: 0000000000000011 RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000036 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6aa292a0 R13: 000055e3bd017f88 R14: 000055e3c36dbe00 R15: 000055e3c36dece0 task:syz-executor state:R running task stack:26736 pid:9508 tgid:9508 ppid:5207 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x2124/0x2a00 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1094 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2612 discard_slab mm/slub.c:2583 [inline] __put_partials+0xeb/0x130 mm/slub.c:3051 put_cpu_partial+0x17c/0x250 mm/slub.c:3126 __slab_free+0x2ea/0x3d0 mm/slub.c:4343 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:378 kasan_kmalloc include/linux/kasan.h:211 [inline] __do_kmalloc_node mm/slub.c:4158 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] kzalloc_noprof include/linux/slab.h:807 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283 tomoyo_realpath_nofollow+0xba/0x100 security/tomoyo/realpath.c:304 tomoyo_find_next_domain+0x272/0x1cf0 security/tomoyo/domain.c:727 tomoyo_bprm_check_security+0x115/0x180 security/tomoyo/tomoyo.c:102 security_bprm_check+0x65/0x90 security/security.c:1191 search_binary_handler fs/exec.c:1815 [inline] exec_binprm fs/exec.c:1869 [inline] bprm_execve+0xa56/0x1770 fs/exec.c:1920 do_execveat_common+0x55f/0x6f0 fs/exec.c:2027 do_execve fs/exec.c:2101 [inline] __do_sys_execve fs/exec.c:2177 [inline] __se_sys_execve fs/exec.c:2172 [inline] __x64_sys_execve+0x92/0xb0 fs/exec.c:2172 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f638afacd77 RSP: 002b:00007f638bde2e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 00007f638b00c8b0 RCX: 00007f638afacd77 RDX: 00007ffea94d69b0 RSI: 00007ffea94d6bf0 RDI: 00007ffea94d7ef3 RBP: 00007ffea94d6a20 R08: 00007f638bde2f20 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000246 R12: 000055555ebf8610 R13: 0000000000000100 R14: 00007ffea94d69d0 R15: 00007ffea94d6780 task:syslogd state:R running task stack:23680 pid:4663 tgid:4663 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5763 Code: 2b 00 74 08 4c 89 f7 e8 0a 00 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc9000313f4e0 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92000627ea8 RCX: 8c3e16d497947b00 RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d80 RBP: ffffc9000313f640 R08: ffffffff93734847 R09: 1ffffffff26e6908 R10: dffffc0000000000 R11: fffffbfff26e6909 R12: 1ffff92000627ea4 R13: dffffc0000000000 R14: ffffc9000313f540 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:326 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] page_ext_get+0x3d/0x2a0 mm/page_ext.c:525 __page_table_check_zero+0xb1/0x350 mm/page_table_check.c:148 page_table_check_free include/linux/page_table_check.h:41 [inline] free_pages_prepare mm/page_alloc.c:1095 [inline] free_unref_page+0xd36/0xea0 mm/page_alloc.c:2612 discard_slab mm/slub.c:2583 [inline] __put_partials+0xeb/0x130 mm/slub.c:3051 put_cpu_partial+0x17c/0x250 mm/slub.c:3126 __slab_free+0x2ea/0x3d0 mm/slub.c:4343 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:378 kasan_kmalloc include/linux/kasan.h:211 [inline] __do_kmalloc_node mm/slub.c:4158 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4170 kmalloc_noprof include/linux/slab.h:685 [inline] kzalloc_noprof include/linux/slab.h:807 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x2b7/0x740 security/tomoyo/file.c:822 security_inode_getattr+0xd8/0x130 security/security.c:2269 vfs_getattr+0x45/0x430 fs/stat.c:204 vfs_fstat fs/stat.c:229 [inline] vfs_fstatat+0xe4/0x190 fs/stat.c:338 __do_sys_newfstatat fs/stat.c:505 [inline] __se_sys_newfstatat fs/stat.c:499 [inline] __x64_sys_newfstatat+0x11d/0x1a0 fs/stat.c:499 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f95f367d5f4 RSP: 002b:00007ffe0a740938 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00005600225bb910 RCX: 00007f95f367d5f4 RDX: 00007ffe0a740960 RSI: 00007f95f371a130 RDI: 0000000000000003 RBP: 00007ffe0a740a40 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000001000 R11: 0000000000000206 R12: 00005600225bbc50 R13: 0000000066c98e72 R14: 0000000000000004 R15: 00005600225bba60 task:klogd state:R running task stack:22608 pid:4670 tgid:4670 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6708 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6732 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x2124/0x2a00 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1094 [inline] free_unref_page+0xd22/0xea0 mm/page_alloc.c:2612 discard_slab mm/slub.c:2583 [inline] __put_partials+0xeb/0x130 mm/slub.c:3051 put_cpu_partial+0x17c/0x250 mm/slub.c:3126 __slab_free+0x2ea/0x3d0 mm/slub.c:4343 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9e/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:322 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3988 [inline] slab_alloc_node mm/slub.c:4037 [inline] __do_kmalloc_node mm/slub.c:4157 [inline] __kmalloc_node_track_caller_noprof+0x1cd/0x440 mm/slub.c:4177 kmalloc_reserve+0x111/0x2a0 net/core/skbuff.c:605 __alloc_skb+0x1f3/0x440 net/core/skbuff.c:674 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xc3/0x770 net/core/skbuff.c:6526 sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2815 unix_dgram_sendmsg+0x6d3/0x1f80 net/unix/af_unix.c:2030 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2212 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcf3677a9b5 RSP: 002b:00007ffd5089c2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcf3677a9b5 RDX: 000000000000005b RSI: 000055f718a41fe0 RDI: 0000000000000003 RBP: 000055f718a3c910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 R13: 00007fcf36908212 R14: 00007ffd5089c3a8 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 214 jiffies! g49045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25584 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2034 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2236 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:stack_trace_consume_entry+0xcf/0x280 kernel/stacktrace.c:93 Code: 10 00 74 26 4c 89 0c 24 48 89 df 49 89 f5 4d 89 c6 e8 45 9e 7b 00 4d 89 f0 4c 8b 0c 24 4c 89 ee 48 ba 00 00 00 00 00 fc ff df <48> 8b 1b 45 8d 70 01 41 0f b6 04 17 84 c0 0f 85 31 01 00 00 45 89 RSP: 0018:ffffc900000068b0 EFLAGS: 00000246 RAX: 1ffff92000000d3c RBX: ffffc900000069e0 RCX: ffffffff8e694680 RDX: dffffc0000000000 RSI: ffffffff89882cc2 RDI: ffffc900000069ec RBP: ffffc900000069e8 R08: 0000000000000011 R09: ffffc900000069f0 R10: 0000000000000003 R11: ffffffff817f30e0 R12: 1ffff92000000d3d R13: 1ffff92000000d3d R14: 0000000000000000 R15: 1ffff92000000d3e FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e3c3703188 CR3: 000000002e066000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_stack_walk+0x143/0x1b0 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2252 [inline] slab_free mm/slub.c:4473 [inline] kmem_cache_free+0x145/0x350 mm/slub.c:4548 skb_kfree_head net/core/skbuff.c:1082 [inline] skb_free_head net/core/skbuff.c:1096 [inline] skb_release_data+0x64d/0x880 net/core/skbuff.c:1123 skb_release_all net/core/skbuff.c:1188 [inline] __kfree_skb net/core/skbuff.c:1202 [inline] consume_skb+0xb1/0x160 net/core/skbuff.c:1426 netlink_broadcast_filtered+0x116d/0x12a0 net/netlink/af_netlink.c:1542 nlmsg_multicast_filtered include/net/netlink.h:1125 [inline] nlmsg_multicast include/net/netlink.h:1144 [inline] nlmsg_notify+0xfb/0x1c0 net/netlink/af_netlink.c:2593 br_fdb_update+0x55d/0x740 net/bridge/br_fdb.c:941 br_handle_frame_finish+0x739/0x1fe0 net/bridge/br_input.c:141 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5555 __netif_receive_skb_one_core net/core/dev.c:5659 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 21 b3 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 RAX: ffffffff8e694680 RBX: ffff8880192b6064 RCX: 00000000005182a9 RDX: 0000000000000001 RSI: ffff8880192b6000 RDI: ffff8880192b6064 RBP: 000000000003a678 R08: ffff8880b9237c7b R09: 1ffff11017246f8f R10: dffffc0000000000 R11: ffffffff8bb6fcf0 R12: ffff88801c35d000 R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0dece0 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:702 cpuidle_enter_state+0x112/0x480 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:388 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x375/0x5d0 kernel/sched/idle.c:326 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:424 rest_init+0x2dc/0x300 init/main.c:747 start_kernel+0x47a/0x500 init/main.c:1103 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x147