rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7995/1:b..l P5808/1:b..l P5811/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=22341, q=2477 ncpus=2)
task:syz-executor state:R running task stack:22536 pid:5811 tgid:5811 ppid:5799 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 kernel/kcov.c:213
Code: 60 00 be 03 00 00 00 5b e9 62 25 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 88 05 12 <48> 8b 34 24 65 48 8b 15 61 88 05 12 a9 00 01 ff 00 74 1b f6 c4 01
RSP: 0018:ffffc90003db78a8 EFLAGS: 00000246
RAX: 0000000080000000 RBX: 0000000000000008 RCX: ffffffff82824538
RDX: dffffc0000000000 RSI: ffffffff82824060 RDI: 0000000000000008
RBP: ffffea00010e5800 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 000000403b30b216 R14: 0000000000000002 R15: 0000000000000002
__nr_to_section+0x13/0x100 include/linux/mmzone.h:1970
__pfn_to_section include/linux/mmzone.h:2114 [inline]
lookup_page_ext+0x46/0x100 mm/page_ext.c:255
page_ext_get+0x58/0x1a0 mm/page_ext.c:532
__reset_page_owner+0x2b/0x190 mm/page_owner.c:306
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1433 [inline]
__free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4538 [inline]
slab_alloc_node mm/slub.c:4866 [inline]
__do_kmalloc_node mm/slub.c:5259 [inline]
__kmalloc_noprof+0x2b9/0x850 mm/slub.c:5272
kmalloc_noprof include/linux/slab.h:954 [inline]
tomoyo_realpath_from_path+0xb6/0x690 security/tomoyo/realpath.c:251
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827
security_inode_getattr+0x116/0x280 security/security.c:1870
vfs_getattr fs/stat.c:259 [inline]
vfs_fstat+0x4b/0xe0 fs/stat.c:281
__do_sys_newfstat+0x8b/0x110 fs/stat.c:551
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8791b9ae27
RSP: 002b:00007ffd0fbaa978 EFLAGS: 00000206 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8791b9ae27
RDX: 0000000000000000 RSI: 00007ffd0fbaa980 RDI: 0000000000000003
RBP: 00007ffd0fbaaa7c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000094
R13: 0000000000000000 R14: 000000000002c237 R15: 00007ffd0fbaaad0
task:syz-executor state:R running task stack:22536 pid:5808 tgid:5808 ppid:5798 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__lt_find include/linux/rbtree_latch.h:109 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:210 [inline]
RIP: 0010:bpf_ksym_find+0x48/0x1c0 kernel/bpf/core.c:716
Code: f0 ff 8b 05 8a 35 28 0c 41 89 c6 89 44 24 04 41 83 e6 01 49 63 c6 48 8d 3c c5 70 14 41 8e 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 5f 01 00 00 49 63 c6 48 83 c0 06 48 8b 1c c5 40 14 41 8e 48
RSP: 0018:ffffc90003517610 EFLAGS: 00000246
RAX: 1ffffffff1c8228e RBX: 0000000000000001 RCX: ffffffff821a8e02
RDX: ffff88807aef24c0 RSI: ffffffff8218deb0 RDI: ffffffff8e411470
RBP: 00007efee379b907 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00007efee379b907
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807aef24c0
is_bpf_text_address+0x58/0x1a0 kernel/bpf/core.c:749
kernel_text_address kernel/extable.c:125 [inline]
kernel_text_address+0x8d/0x100 kernel/extable.c:94
__kernel_text_address+0xd/0x30 kernel/extable.c:79
unwind_get_return_address+0x59/0xa0 arch/x86/kernel/unwind_orc.c:385
arch_stack_walk+0xa6/0xf0 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1433 [inline]
__free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4538 [inline]
slab_alloc_node mm/slub.c:4866 [inline]
__do_kmalloc_node mm/slub.c:5259 [inline]
__kmalloc_noprof+0x2b9/0x850 mm/slub.c:5272
kmalloc_noprof include/linux/slab.h:954 [inline]
tomoyo_realpath_from_path+0xb6/0x690 security/tomoyo/realpath.c:251
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827
tomoyo_path_unlink+0x91/0xe0 security/tomoyo/tomoyo.c:162
security_path_unlink+0x145/0x2b0 security/security.c:1458
filename_unlinkat+0x316/0x730 fs/namei.c:5543
__do_sys_unlink fs/namei.c:5581 [inline]
__se_sys_unlink fs/namei.c:5578 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5578
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efee379b907
RSP: 002b:00007fff9cefa2b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efee379b907
RDX: 00007fff9cefa2e0 RSI: 00007fff9cefa370 RDI: 00007fff9cefa370
RBP: 00007fff9cefa370 R08: 00007fff9cefb370 R09: 00000000ffffffff
R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff9cefb400
R13: 00007efee3832048 R14: 000000000002bfa5 R15: 00007fff9cefb440
task:syz.2.636 state:R running task stack:26216 pid:7995 tgid:7980 ppid:5811 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:704
RIP: 0010:unwind_next_frame+0x4d6/0x1ea0 arch/x86/kernel/unwind_orc.c:520
Code: e8 6f f3 ff ff 48 89 c1 48 85 c0 0f 84 2d 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bd 13 00 00 0f b6 41 05
RSP: 0018:ffffc90003826d78 EFLAGS: 00000a07
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91817c22
RDX: 1ffffffff2302f84 RSI: 0000000000000000 RDI: ffffffff90f7cfb0
RBP: ffffc90003826e30 R08: ffffffff91817c28 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000011d05 R12: ffffc90003826e38
R13: ffffc90003826de8 R14: ffffc90003826e1d R15: ffffffff91817c27
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__set_page_owner+0x8c/0x540 mm/page_owner.c:341
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x153/0x170 mm/page_alloc.c:1889
prep_new_page mm/page_alloc.c:1897 [inline]
get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962
__alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250
__alloc_pages_noprof mm/page_alloc.c:5284 [inline]
alloc_pages_bulk_noprof+0x782/0x1490 mm/page_alloc.c:5204
___alloc_pages_bulk mm/kasan/shadow.c:345 [inline]
__kasan_populate_vmalloc_do mm/kasan/shadow.c:370 [inline]
__kasan_populate_vmalloc+0xf0/0x210 mm/kasan/shadow.c:424
kasan_populate_vmalloc include/linux/kasan.h:580 [inline]
alloc_vmap_area+0x95d/0x2bd0 mm/vmalloc.c:2129
__get_vm_area_node+0x1ca/0x330 mm/vmalloc.c:3232
__vmalloc_node_range_noprof+0x213/0x1530 mm/vmalloc.c:4024
__bpf_map_area_alloc+0x12e/0x200 kernel/bpf/syscall.c:404
array_map_alloc+0x27e/0x750 kernel/bpf/arraymap.c:142
map_create+0x84e/0x2ba0 kernel/bpf/syscall.c:1507
__sys_bpf+0x2091/0x4b90 kernel/bpf/syscall.c:6231
__do_sys_bpf kernel/bpf/syscall.c:6362 [inline]
__se_sys_bpf kernel/bpf/syscall.c:6360 [inline]
__x64_sys_bpf+0x7b/0xc0 kernel/bpf/syscall.c:6360
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8791b9c819
RSP: 002b:00007f878f991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f8791e16270 RCX: 00007f8791b9c819
RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000
RBP: 00007f8791c32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8791e16308 R14: 00007f8791e16270 R15: 00007ffd0fbaa6d8
rcu: rcu_preempt kthread starved for 331 jiffies! g22341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
__schedule_loop kernel/sched/core.c:6993 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7008
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]
RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]
RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
RIP: 0010:rcu_is_watching+0x71/0xc0 kernel/rcu/tree.c:752
Code: e0 c8 12 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 <8b> 03 c1 e8 02 83 e0 01 65 ff 0d 80 08 21 12 74 07 5b 5d c3 cc cc
RSP: 0018:ffffc90000006a10 EFLAGS: 00000246
RAX: 0000000000000003 RBX: ffff8880b8433ce8 RCX: 0000000000000002
RDX: 0000000000000000 RSI: ffffffff8c1b1e20 RDI: ffffffff8e12c8e0
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000200 R11: 0000000000086401 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888124338000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000001df030 CR3: 000000004ab67000 CR4: 00000000003526f0
Call Trace:
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0x317/0x380 kernel/locking/lockdep.c:5831
rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
rcu_read_lock include/linux/rcupdate.h:850 [inline]
class_rcu_constructor include/linux/rcupdate.h:1193 [inline]
unwind_next_frame+0xd1/0x1ea0 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
unpoison_slab_object mm/kasan/common.c:340 [inline]
__kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:366
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4538 [inline]
slab_alloc_node mm/slub.c:4866 [inline]
kmem_cache_alloc_noprof+0x241/0x6e0 mm/slub.c:4873
skb_clone+0x190/0x400 net/core/skbuff.c:2117
dev_queue_xmit_nit+0x255/0xa60 net/core/dev.c:2574
xmit_one net/core/dev.c:3884 [inline]
dev_hard_start_xmit+0x2f5/0x7d0 net/core/dev.c:3904
__dev_queue_xmit+0x32c1/0x4800 net/core/dev.c:4854
dev_queue_xmit include/linux/netdevice.h:3385 [inline]
neigh_hh_output include/net/neighbour.h:540 [inline]
neigh_output include/net/neighbour.h:554 [inline]
ip_finish_output2+0xf4a/0x24d0 net/ipv4/ip_output.c:237
__ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:315
__ip_finish_output net/ipv4/ip_output.c:303 [inline]
ip_finish_output net/ipv4/ip_output.c:325 [inline]
NF_HOOK_COND include/linux/netfilter.h:307 [inline]
ip_output+0x39b/0xc10 net/ipv4/ip_output.c:438
dst_output include/net/dst.h:470 [inline]
ip_local_out+0x193/0x1f0 net/ipv4/ip_output.c:131
synproxy_send_tcp.isra.0+0x481/0x680 net/netfilter/nf_synproxy_core.c:440
synproxy_send_client_synack+0x6ea/0x970 net/netfilter/nf_synproxy_core.c:485
nft_synproxy_eval_v4 net/netfilter/nft_synproxy.c:60 [inline]
nft_synproxy_do_eval+0xa73/0xd50 net/netfilter/nft_synproxy.c:142
expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
nft_do_chain+0x2e8/0x1930 net/netfilter/nf_tables_core.c:285
nft_do_chain_inet+0xee/0x340 net/netfilter/nft_chain_filter.c:161
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook.constprop.0+0x2a6/0x750 include/linux/netfilter.h:273
NF_HOOK include/linux/netfilter.h:316 [inline]
ip_local_deliver+0x163/0x1f0 net/ipv4/ip_input.c:262
dst_input include/net/dst.h:480 [inline]
ip_rcv_finish net/ipv4/ip_input.c:453 [inline]
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
ip_rcv+0x33a/0x3c0 net/ipv4/ip_input.c:573
__netif_receive_skb_one_core+0x197/0x1e0 net/core/dev.c:6181
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6294
process_backlog+0x37a/0x1580 net/core/dev.c:6645
__napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7709
napi_poll net/core/dev.c:7772 [inline]
net_rx_action+0xa40/0xf20 net/core/dev.c:7929
handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xef/0x150 kernel/softirq.c:723
irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
Code: 88 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 31 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246
RAX: 0000000000c28da3 RBX: ffffffff8e4975c0 RCX: ffffffff8b915c75
RDX: 0000000000000000 RSI: ffffffff8de7b1e3 RDI: ffffffff8c1b1ea0
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d
R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000
R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9da10
arch_safe_halt arch/x86/include/asm/paravirt.h:73 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:767
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x464/0x590 kernel/sched/idle.c:352
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:451
rest_init+0x251/0x260 init/main.c:760
start_kernel+0x47f/0x480 init/main.c:1210
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x148