rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 0-...!: (1 GPs behind) idle=e934/1/0x4000000000000000 softirq=16546/16550 fqs=0
rcu: hardirqs softirqs csw/system
rcu: number: 8 16 2
rcu: cputime: 0 16 0 ==> 105330(ms)
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5758/1:b..l
rcu: (detected by 1, t=10504 jiffies, g=16545, q=2051 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_power_efficient gc_worker
RIP: 0010:match_held_lock+0x0/0xb0 kernel/locking/lockdep.c:5321
Code: 67 48 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f e9 c5 00 03 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72
RSP: 0018:ffffc90000007d38 EFLAGS: 00000087
RAX: 0000000000000004 RBX: ffff88801deccaa0 RCX: 0000000001000001
RDX: 0000000001000001 RSI: ffff8880b8628198 RDI: ffff88801deccaa0
RBP: 00000000ffffffff R08: 0000000001000001 R09: 1ffffffff352f974
R10: dffffc0000000000 R11: fffffbfff352f975 R12: 0000000000000046
R13: ffff88801decbe80 R14: ffff8880b8628198 R15: 0000000000000003
FS: 0000000000000000(0000) GS:ffff888124f24000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000559ead7d3aa0 CR3: 0000000077602000 CR4: 00000000003526f0
Call Trace:
__lock_is_held kernel/locking/lockdep.c:5619 [inline]
lock_is_held_type+0x89/0x150 kernel/locking/lockdep.c:5958
lock_is_held include/linux/lockdep.h:249 [inline]
__remove_hrtimer+0x82/0x3e0 kernel/time/hrtimer.c:1172
__run_hrtimer kernel/time/hrtimer.c:2047 [inline]
__hrtimer_run_queues+0x295/0xa10 kernel/time/hrtimer.c:2124
hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2243
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
__sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 include/linux/seqlock.h:76
Code: 00 75 11 e8 a5 cb d2 f7 4d 85 f6 75 16 e8 9b cb d2 f7 eb 15 e8 94 cb d2 f7 e8 ff 32 e4 01 4d 85 f6 74 ea e8 85 cb d2 f7 fb 5b <41> 5e e9 4c 38 e7 01 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
RSP: 0018:ffffc900000f7990 EFLAGS: 00000293
RAX: ffffffff89f441cb RBX: 0000000000000001 RCX: ffff88801decbe80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900000f7af0 R08: ffffffff90589237 R09: 1ffffffff20b1246
R10: dffffc0000000000 R11: fffffbfff20b1247 R12: ffff88801b040018
R13: 1ffff11003bd9868 R14: 0000000000000200 R15: 000000000000f743
nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:343 [inline]
gc_worker+0x31b/0x1890 net/netfilter/nf_conntrack_core.c:1534
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa88/0x14c0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz-executor state:R running task stack:21552 pid:5758 tgid:5758 ppid:5755 task_flags:0x400140 flags:0x00080001
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d4/0x5630 kernel/sched/core.c:7239
preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7561
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x14f/0x910 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 kernel/rcu/update.c:320
Code: 8e 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 23 19 80 04 00 <74> 1d 83 3d fa 48 80 04 00 74 14 65 48 8b 0d b8 45 97 07 31 c0 83
RSP: 0018:ffffc900035164f8 EFLAGS: 00000202
RAX: 0000000000000000 RBX: ffffffff89ae9416 RCX: 0000000000000046
RDX: 00000000ce1df5ab RSI: ffffffff8e4dc38e RDI: ffffffff8c4cd780
RBP: 1ffff920006a2cbc R08: ffffffff8177710f R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb5a1e0 R12: dffffc0000000000
R13: ffffffff8177710f R14: ffffc900035165a8 R15: 1ffff920006a2cb5
rcu_read_lock include/linux/rcupdate.h:841 [inline]
class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
unwind_next_frame+0xb5/0x2550 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:57 [inline]
kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
unpoison_slab_object mm/kasan/common.c:340 [inline]
__kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
kmem_cache_alloc_noprof+0x2a4/0x5f0 mm/slub.c:4931
fib_table_insert+0x49a/0x1b10 net/ipv4/fib_trie.c:1338
fib_magic+0x43b/0x530 net/ipv4/fib_frontend.c:1147
fib_add_ifaddr+0x3e6/0x5d0 net/ipv4/fib_frontend.c:1191
fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1529
notifier_call_chain+0x1a5/0x3d0 kernel/notifier.c:85
call_netdevice_notifiers_extack net/core/dev.c:2313 [inline]
call_netdevice_notifiers net/core/dev.c:2327 [inline]
__dev_notify_flags+0x31e/0x510 net/core/dev.c:9853
netif_change_flags+0xde/0x1b0 net/core/dev.c:9882
do_setlink+0xdd6/0x4670 net/core/rtnetlink.c:3266
rtnl_changelink net/core/rtnetlink.c:3905 [inline]
__rtnl_newlink net/core/rtnetlink.c:4076 [inline]
rtnl_newlink+0x15a3/0x1c30 net/core/rtnetlink.c:4215
rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7132
netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556
netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1345
netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
sock_sendmsg_nosec+0x13a/0x180 net/socket.c:800
__sock_sendmsg net/socket.c:815 [inline]
__sys_sendto+0x408/0x5a0 net/socket.c:2281
__do_sys_sendto net/socket.c:2288 [inline]
__se_sys_sendto net/socket.c:2284 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2284
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd9fcf5e90e
RSP: 002b:00007ffe017e92f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000055558624c500 RCX: 00007fd9fcf5e90e
RDX: 000000000000002c RSI: 00007fd9fdd54670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffe017e9374 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fd9fdd54670 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 10504 jiffies! g16545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d4/0x5630 kernel/sched/core.c:7239
__schedule_loop kernel/sched/core.c:7316 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7331
schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 5270 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:check_kcov_mode kernel/kcov.c:194 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x4f/0x80 kernel/kcov.c:217
Code: 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 34 17 00 00 00 74 2c 8b 91 08 17 00 00 <83> fa 02 75 21 48 8b 91 10 17 00 00 48 8b 32 48 8d 7e 01 8b 89 0c
RSP: 0018:ffffc900033f7458 EFLAGS: 00000246
RAX: ffffffff81badbee RBX: ffff8880b8643388 RCX: ffff888027c58000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900033f75b0 R08: ffff888027c59597 R09: 1ffff11004f8b2b2
R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170c8671
R13: 0000000000000000 R14: ffff8880b8643380 R15: 0000000000000001
FS: 00007f0ebdb26780(0000) GS:ffff888125024000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000323ef5e8e0e0 CR3: 0000000079166000 CR4: 00000000003526f0
Call Trace:
csd_lock_wait kernel/smp.c:363 [inline]
csd_lock kernel/smp.c:396 [inline]
smp_call_function_many_cond+0x63e/0x1500 kernel/smp.c:944
__flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline]
flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline]
flush_tlb_mm_range+0x8ff/0x1090 arch/x86/mm/tlb.c:1435
dup_mmap+0x1786/0x1d90 mm/mmap.c:1905
dup_mm kernel/fork.c:1549 [inline]
copy_mm+0x11a/0x480 kernel/fork.c:1601
copy_process+0x1e75/0x43e0 kernel/fork.c:2313
kernel_clone+0x2d7/0x940 kernel/fork.c:2772
__do_sys_clone kernel/fork.c:2914 [inline]
__se_sys_clone kernel/fork.c:2898 [inline]
__x64_sys_clone+0x1b6/0x230 kernel/fork.c:2898
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0ebdbfa636
Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffc41d271f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007ffc41d271f8 RCX: 00007f0ebdbfa636
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffc41d47740 R08: 0000000000000000 R09: 0000000000000001
R10: 00007f0ebdb26a50 R11: 0000000000000246 R12: 00007ffc41d27330
R13: 0000000000000000 R14: 0000000000000000 R15: 000055b7f890eac0