rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5000/1:b..l..
rcu: (detected by 1, t=10655 jiffies, g=239361, q=1019 ncpus=2)
task:udevd state:R running task stack:23400 pid:5000 tgid:5000 ppid:1 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7662
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
irqentry_exit+0x14f/0x9b0 kernel/entry/common.c:154
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__asan_memset+0x7/0x50 mm/kasan/shadow.c:83
Code: 00 00 e9 5c e5 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 <53> 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00
RSP: 0018:ffffc90003327228 EFLAGS: 00000246
RAX: ffffc90003327738 RBX: ffffc90003327338 RCX: 1ffff92000664e01
RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003327338
RBP: 1ffffffff248a4da R08: ffffc90003327738 R09: 0000000000000000
R10: ffffc90003327338 R11: ffffffff81b3a880 R12: dffffc0000000000
R13: ffffffff924526d2 R14: ffffc900033272e8 R15: ffffc90003327330
unwind_next_frame+0xd04/0x2550 arch/x86/kernel/unwind_orc.c:621
arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
save_stack+0x122/0x230 mm/page_owner.c:183
__reset_page_owner+0x73/0x2a0 mm/page_owner.c:338
reset_page_owner include/linux/page_owner.h:26 [inline]
__free_pages_prepare mm/page_alloc.c:1403 [inline]
__free_frozen_pages+0xc97/0xd90 mm/page_alloc.c:2954
__slab_free+0x269/0x2c0 mm/slub.c:5926
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:361
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4720 [inline]
slab_alloc_node mm/slub.c:5033 [inline]
__do_kmalloc_node mm/slub.c:5530 [inline]
__kmalloc_noprof+0x302/0x710 mm/slub.c:5556
_kmalloc_noprof include/linux/slab.h:995 [inline]
tomoyo_realpath_from_path+0xef/0x640 security/tomoyo/realpath.c:251
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827
security_inode_getattr+0x12b/0x310 security/security.c:1917
vfs_getattr+0x23/0x70 fs/stat.c:263
vfs_statx_path+0x2b/0x230 fs/stat.c:303
vfs_statx+0x12e/0x200 fs/stat.c:360
vfs_fstatat+0x11b/0x170 fs/stat.c:377
__do_sys_newfstatat fs/stat.c:542 [inline]
__se_sys_newfstatat+0x118/0x3a0 fs/stat.c:536
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5d8c111b0a
RSP: 002b:00007fffff79da58 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 000055e0e1736400 RCX: 00007f5d8c111b0a
RDX: 00007fffff79da60 RSI: 000055e0e1724296 RDI: 00000000ffffff9c
RBP: 000055e0e8e5b148 R08: 000000004f73c2bb R09: 3fffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffff79da60 R14: 0000000000000000 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 9316 jiffies! g239361 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5583 [inline]
__schedule+0x17dd/0x5830 kernel/sched/core.c:7382
__schedule_loop kernel/sched/core.c:7459 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7474
schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x30c/0x1230 kernel/rcu/tree.c:2122
rcu_gp_kthread+0x9c/0x340 kernel/rcu/tree.c:2330
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3376 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:check_preemption_disabled+0x6/0xd0 lib/smp_processor_id.c:14
Code: c7 c6 60 8c 8e 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 eb 4b bd 08 65 48 8b 0d bb 4b bd 08 85 c9 74 0c 5b 41 5e
RSP: 0018:ffffc90000007340 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000101
RDX: ffff888034368000 RSI: ffffffff8e92d42e RDI: ffffffff8c8e8c80
RBP: 00000000ffffffff R08: 0000000000000100 R09: ffffc90000007630
R10: ffffc90000007480 R11: fffff52000000e92 R12: 0000000000000246
R13: ffff888034368000 R14: ffffffff8ff5a320 R15: 0000000000000003
FS: 0000000000000000(0000) GS:ffff888123620000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcf85cf2fb3 CR3: 000000007e8a8000 CR4: 00000000003526f0
Call Trace:
lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline]
lock_is_held_type+0xdf/0x150 kernel/locking/lockdep.c:6017
__find_rr_leaf+0x34d/0x740 net/ipv6/route.c:847
find_rr_leaf net/ipv6/route.c:902 [inline]
rt6_select net/ipv6/route.c:946 [inline]
fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2233
ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2270
pol_lookup_func include/net/ip6_fib.h:672 [inline]
fib6_rule_lookup+0x512/0x6e0 net/ipv6/fib6_rules.c:123
ip6_route_input_lookup net/ipv6/route.c:2341 [inline]
ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2644
ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117
NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325
__netif_receive_skb_one_core net/core/dev.c:6433 [inline]
__netif_receive_skb net/core/dev.c:6546 [inline]
process_backlog+0x795/0x18b0 net/core/dev.c:6897
__napi_poll+0xaa/0x330 net/core/dev.c:7966
napi_poll net/core/dev.c:8029 [inline]
net_rx_action+0x61d/0xf50 net/core/dev.c:8186
handle_softirqs+0x265/0x8d0 kernel/softirq.c:669
do_softirq+0x77/0xd0 kernel/softirq.c:569
__local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473
ieee80211_rx_bss_info net/mac80211/ibss.c:1137 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1546 [inline]
ieee80211_ibss_rx_queued_mgmt+0x1e95/0x2c40 net/mac80211/ibss.c:1573
ieee80211_iface_process_skb net/mac80211/iface.c:1805 [inline]
ieee80211_iface_work+0x769/0xfa0 net/mac80211/iface.c:1859
cfg80211_wiphy_work+0x29e/0x420 net/wireless/core.c:610
process_one_work kernel/workqueue.c:3495 [inline]
process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 12854 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:59:78:f4:99:f2, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:59:78:f4:99:f2, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:59:78:f4:99:f2, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:59:78:f4:99:f2, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:e6:59:78:f4:99:f2, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)