rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (1 ticks this GP) idle=b764/1/0x4000000000000000 softirq=108800/108800 fqs=1 rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20199/1:b..l P20403/1:b..l rcu: (detected by 0, t=10502 jiffies, g=128081, q=944 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:do_raw_spin_lock+0x4/0x2f0 kernel/locking/spinlock_debug.c:114 Code: e1 07 80 c1 03 38 c1 7c 90 48 89 df e8 d5 e5 94 00 eb 86 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 RSP: 0018:ffffc90000a18db8 EFLAGS: 00000092 RAX: 73148bbff56f6b00 RBX: 0000000000000001 RCX: 0000000001000101 RDX: 00000000001caf3d RSI: ffffffff8e6f2158 RDI: ffff8880b8528280 RBP: ffff8880765fc300 R08: ffffffff81b47156 R09: 0000000000000001 R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: ffff8880b8528280 R13: 0000000000000001 R14: ffff8880b8528420 R15: 1ffff110170a507a FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d511ff8 CR3: 00000000543fc000 CR4: 0000000000350ef0 Call Trace: __run_hrtimer kernel/time/hrtimer.c:2078 [inline] __hrtimer_run_queues+0x466/0xa10 kernel/time/hrtimer.c:2131 hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2250 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947 Code: ff ff ff e8 50 4d 45 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b2 a7 f2 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7a d8 6c ff cc 48 8d 3d 67 45 da RSP: 0018:ffffc900001e7620 EFLAGS: 00000292 RAX: 73148bbff56f6b00 RBX: 0000000000000000 RCX: 8000000000000100 RDX: 00000000aeaa6479 RSI: ffffffff8e6f2158 RDI: ffffffff8c6dde80 RBP: ffff88801f6e5dc0 R08: ffffffff817811df R09: 0000000000000000 R10: dffffc0000000000 R11: ffffffff81b2c570 R12: ffffffff8fd5c8a0 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:264 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6509 [inline] kmem_cache_free+0x182/0x650 mm/slub.c:6636 dst_destroy+0x22f/0x340 net/core/dst.c:122 rcu_do_batch kernel/rcu/tree.c:2650 [inline] rcu_core+0x926/0x1260 kernel/rcu/tree.c:2919 handle_softirqs+0x226/0x860 kernel/softirq.c:645 run_ksoftirqd+0x36/0x60 kernel/softirq.c:1099 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz.3.4722 state:R running task stack:26736 pid:20403 tgid:20388 ppid:16918 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_notrace+0x56/0x90 kernel/sched/core.c:7556 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x81/0xb0 kernel/rcu/tree.c:754 trace_lock_acquire include/trace/events/lock.h:23 [inline] lock_acquire+0x58/0x350 kernel/locking/lockdep.c:5905 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:409 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:426 kasan_kmalloc include/linux/kasan.h:263 [inline] __kmalloc_cache_noprof+0x321/0x600 mm/slub.c:5563 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] kobject_uevent_env+0x289/0x9e0 lib/kobject_uevent.c:543 device_add+0x544/0xb80 drivers/base/core.c:3742 cdev_device_add+0x1c6/0x380 fs/char_dev.c:553 posix_clock_register+0x59/0x170 kernel/time/posix-clock.c:167 ptp_clock_register+0x118c/0x1660 drivers/ptp/ptp_clock.c:452 ptp_vclock_register+0x202/0x530 drivers/ptp/ptp_vclock.c:217 n_vclocks_store+0x296/0x750 drivers/ptp/ptp_sysfs.c:226 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f51ecf9e1d9 RSP: 002b:00007f51ede2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f51ed226360 RCX: 00007f51ecf9e1d9 RDX: 0000000000000001 RSI: 0000200000000900 RDI: 000000000000000b RBP: 00007f51ed035888 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f51ed2263f8 R14: 00007f51ed226360 R15: 00007ffc15a089e8 task:syz-executor state:R running task stack:22048 pid:20199 tgid:20199 ppid:20195 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7606 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x920 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:878 [inline] RIP: 0010:class_rcu_destructor include/linux/rcupdate.h:1216 [inline] RIP: 0010:unwind_next_frame+0x1b5f/0x2550 arch/x86/kernel/unwind_orc.c:709 Code: c6 03 01 4c 8b 6c 24 50 4c 8b 7c 24 10 43 0f b6 04 27 84 c0 0f 85 6d 02 00 00 41 c7 06 00 00 00 00 31 ed e8 e3 8e 70 0a 85 c0 <74> 3a e8 ba 70 34 00 84 c0 75 31 e8 d1 8e 70 0a 85 c0 74 28 80 3d RSP: 0018:ffffc90004aa6640 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffc90004aa66f8 RCX: ffff888069293e80 RDX: ffffc90004aa6701 RSI: dffffc0000000000 RDI: ffffc90004aa66f0 RBP: 1ffffffff242e301 R08: ffffc90004aa6810 R09: ffffc90004aa6738 R10: dffffc0000000000 R11: fffff52000954ce9 R12: ffffc90004aa0000 R13: ffffffff817811df R14: ffffc90004aa66e8 R15: ffffc90004aa6820 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:264 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2748 [inline] slab_free mm/slub.c:6509 [inline] kfree+0x1c5/0x650 mm/slub.c:6802 kobject_uevent_env+0x375/0x9e0 lib/kobject_uevent.c:643 rx_queue_add_kobject net/core/net-sysfs.c:1259 [inline] net_rx_queue_update_kobjects+0x3fe/0x780 net/core/net-sysfs.c:1301 register_queue_kobjects net/core/net-sysfs.c:2093 [inline] netdev_register_kobject+0x23e/0x350 net/core/net-sysfs.c:2344 register_netdevice+0x1433/0x1eb0 net/core/dev.c:11549 veth_newlink+0x4d7/0xdd0 drivers/net/veth.c:1873 rtnl_newlink_create+0x305/0x7b0 net/core/rtnetlink.c:3974 __rtnl_newlink net/core/rtnetlink.c:4103 [inline] rtnl_newlink+0x166d/0x1c30 net/core/rtnetlink.c:4220 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7137 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2575 netlink_unicast_kernel net/netlink/af_netlink.c:1338 [inline] netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1364 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800 __sock_sendmsg net/socket.c:815 [inline] __sys_sendto+0x408/0x5a0 net/socket.c:2281 __do_sys_sendto net/socket.c:2288 [inline] __se_sys_sendto net/socket.c:2284 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2284 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcdd0f5ea0e RSP: 002b:00007fff876365a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555f146500 RCX: 00007fcdd0f5ea0e RDX: 0000000000000084 RSI: 00007fcdd1d54670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007fff87636624 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fcdd1d54670 R15: 0000000000000000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g128081 f0x0 RCU_GP_WAIT_FQS(5) ->state=I rcu: Possible timer handling issue on cpu=1 timer-softirq=49577 rcu: rcu_preempt kthread starved for 10500 jiffies! g128081 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245