rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9728/1:b..l P57/1:b..l P9643/1:b..l P9678/1:b..l P9730/1:b..l P9731/3:b..l P9658/1:b..l rcu: (detected by 1, t=10502 jiffies, g=36449, q=1856 ncpus=2) task:syz.3.975 state:R running task stack:26312 pid:9658 tgid:9656 ppid:5641 task_flags:0x40044c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0x10f/0x2550 include/linux/rcupdate.h:-1 Code: 43 a3 0e 00 75 1f c6 05 63 43 a3 0e 01 48 c7 c7 40 a3 c9 8b be 48 03 00 00 48 c7 c2 80 a3 c9 8b e8 c6 0c 2b 00 4c 89 64 24 78 <48> 89 5c 24 70 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 40 80 RSP: 0018:ffffc900059c7538 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff823ace11 RCX: 0000000080000001 RDX: 000000005a44979c RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cd20 R10: ffffc900059c7658 R11: ffffffff81b0e210 R12: ffffc900059c7640 R13: 1ffff92000b38ec1 R14: ffffc900059c7608 R15: ffffffff8176e256 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 vfree+0x1d1/0x2f0 mm/vmalloc.c:3472 kcov_put kernel/kcov.c:442 [inline] kcov_close+0x28/0x50 kernel/kcov.c:543 __fput+0x44f/0xa60 fs/file_table.c:510 task_work_run+0x1d9/0x270 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x70f/0x22c0 kernel/exit.c:976 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 get_signal+0x1284/0x1330 kernel/signal.c:3038 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0xa9/0x680 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5afe15d68e RSP: 002b:00007f5aff002e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 0000000000000020 RBX: 00007f5aff0046c0 RCX: 00007f5afe15d68e RDX: 0000000000000020 RSI: 00007f5aff003000 RDI: 0000000000000005 RBP: 0000000000000000 R08: 00007f5aff002f04 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 R13: 00007f5aff002f58 R14: 00007f5aff003000 R15: 0000000000000000 task:modprobe state:R running task stack:24216 pid:9731 tgid:9731 ppid:6402 task_flags:0x400000 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3f/0x50 kernel/locking/spinlock.c:190 spin_unlock include/linux/spinlock.h:390 [inline] filemap_map_pages+0x1a2a/0x2100 mm/filemap.c:3942 do_fault_around mm/memory.c:5867 [inline] do_read_fault mm/memory.c:5900 [inline] do_fault mm/memory.c:6043 [inline] do_pte_missing+0x1f38/0x33f0 mm/memory.c:4566 handle_pte_fault mm/memory.c:6427 [inline] __handle_mm_fault mm/memory.c:6565 [inline] handle_mm_fault+0x1bf2/0x3170 mm/memory.c:6734 do_user_addr_fault+0xa73/0x1340 arch/x86/mm/fault.c:1334 handle_page_fault arch/x86/mm/fault.c:1474 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7ff8ee0a0c50 RSP: 002b:00007ffd2a750ec8 EFLAGS: 00010246 RAX: 00007ff8ee0a0c50 RBX: 00007ff8ee008068 RCX: 00007ff8ee2835f0 RDX: 00007ff8edfea580 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffd2a750ff0 R08: 0000000000000000 R09: 0000000000000000 R10: 00007ff8edfea580 R11: 00007ff8edfe1000 R12: 00007ff8ee2835f0 R13: 00007ff8ee0082d8 R14: 00007ff8ee1b1ca0 R15: 00007ff8edfe1000 task:modprobe state:R running task stack:24312 pid:9730 tgid:9730 ppid:6392 task_flags:0x40000c flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 01 de 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 68 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 d3 08 0a cc 48 8d 3d e8 ee 91 RSP: 0018:ffffc90005ea72f8 EFLAGS: 00000282 RAX: 348a3b92e84ee600 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 000000004cfe2b93 RSI: ffffffff8e217416 RDI: ffffffff8c28b9e0 RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd20 R10: ffffc90005ea7468 R11: fffff52000bd4e99 R12: 0000000000000002 R13: ffffffff8e95cd20 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 __unwind_start+0x5b8/0x760 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556 slab_free_hook mm/slub.c:2650 [inline] slab_free mm/slub.c:6251 [inline] kmem_cache_free+0x44f/0x650 mm/slub.c:6378 anon_vma_free mm/rmap.c:137 [inline] __put_anon_vma+0x12b/0x2d0 mm/rmap.c:2917 put_anon_vma mm/internal.h:216 [inline] unlink_anon_vmas+0x58b/0x730 mm/rmap.c:536 free_pgtables+0x836/0xb70 mm/memory.c:414 exit_mmap+0x490/0x9e0 mm/mmap.c:1312 __mmput+0x118/0x430 kernel/fork.c:1178 exit_mm+0x1f6/0x2d0 kernel/exit.c:582 do_exit+0x6a2/0x22c0 kernel/exit.c:964 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 __do_sys_exit_group kernel/exit.c:1130 [inline] __se_sys_exit_group kernel/exit.c:1128 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1128 x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe1c1a316c5 RSP: 002b:00007ffeed7299c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007fe1c1b32fe8 RCX: 00007fe1c1a316c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 RBP: 0000000000000001 R08: 00007ffeed729958 R09: 0000000000000000 R10: 00007ffeed7297f0 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fe1c1b31680 R15: 00007fe1c1b33000 task:syz.2.978 state:R running task stack:26656 pid:9678 tgid:9675 ppid:5630 task_flags:0x40044c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__reset_page_owner+0x5f/0x1f0 mm/page_owner.c:312 Code: 47 71 0c 48 8d 1c 08 48 83 c3 08 48 89 d9 48 c1 e9 03 48 ba 00 00 00 00 00 fc ff df 0f b6 0c 11 84 c9 0f 85 49 01 00 00 8b 1b <48> 89 c7 e8 f9 ba 01 00 bf 00 20 00 00 e8 8f 01 00 00 44 0f b7 e5 RSP: 0018:ffffc90005d37890 EFLAGS: 00000246 RAX: ffff88801dc58a70 RBX: 00000000026c01eb RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff823c85e2 R09: ffffffff8e95cd20 R10: dffffc0000000000 R11: fffff94000308ddf R12: ffffea0001846ec0 R13: 1ffffd4000308dd9 R14: ffffea0001846ec0 R15: 00000032f758ba67 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 vfree+0x1d1/0x2f0 mm/vmalloc.c:3472 kcov_put kernel/kcov.c:442 [inline] kcov_close+0x28/0x50 kernel/kcov.c:543 __fput+0x44f/0xa60 fs/file_table.c:510 task_work_run+0x1d9/0x270 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x70f/0x22c0 kernel/exit.c:976 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 get_signal+0x1284/0x1330 kernel/signal.c:3038 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0xa9/0x680 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f461f15d68e RSP: 002b:00007f461d3d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: 0000000000000020 RBX: 00007f461d3d56c0 RCX: 00007f461f15d68e RDX: 0000000000000020 RSI: 00007f461d3d4000 RDI: 0000000000000010 RBP: 0000000000000000 R08: 00007f461d3d3f04 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 R13: 00007f461d3d3f58 R14: 00007f461d3d4000 R15: 0000000000000000 task:syz.0.971 state:R running task stack:23832 pid:9643 tgid:9642 ppid:5637 task_flags:0x40054c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_notrace+0x57/0x90 kernel/sched/core.c:7463 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:753 rcu_read_lock include/linux/rcupdate.h:839 [inline] __update_page_owner_free_handle+0x68/0x470 mm/page_owner.c:283 __reset_page_owner+0x85/0x1f0 mm/page_owner.c:321 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 vfree+0x1d1/0x2f0 mm/vmalloc.c:3472 kcov_put kernel/kcov.c:442 [inline] kcov_close+0x28/0x50 kernel/kcov.c:543 __fput+0x44f/0xa60 fs/file_table.c:510 task_work_run+0x1d9/0x270 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x70f/0x22c0 kernel/exit.c:976 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 get_signal+0x1284/0x1330 kernel/signal.c:3038 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0xa9/0x680 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa215b9ce59 RSP: 002b:00007fa216ad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: 000000000000008c RBX: 00007fa215e15fa0 RCX: 00007fa215b9ce59 RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 RBP: 00007fa215c32d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa215e16038 R14: 00007fa215e15fa0 R15: 00007ffdc39b4a68 task:kworker/u8:4 state:R running task stack:23768 pid:57 tgid:57 ppid:2 task_flags:0x24248060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:deref_stack_reg+0x194/0x230 arch/x86/kernel/unwind_orc.c:422 Code: 39 c3 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 RSP: 0018:ffffc900015e6660 EFLAGS: 00000202 RAX: ffffc900015e6c01 RBX: ffffc900015e0000 RCX: 0000000000000001 RDX: ffffc900015e67c8 RSI: dffffc0000000000 RDI: ffffc900015e6788 RBP: 1ffff920002bccf1 R08: ffffc900015e6c48 R09: 0000000000000000 R10: ffffc900015e67d8 R11: fffff520002bccfd R12: 1ffff920002bccf2 R13: 1ffff920002bccf3 R14: ffffc900015e8000 R15: ffffc900015e6788 unwind_next_frame+0x19d5/0x2550 arch/x86/kernel/unwind_orc.c:-1 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5613 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4906 ext4_init_io_end+0x29/0x130 fs/ext4/page-io.c:310 ext4_do_writepages+0xb7c/0x4670 fs/ext4/inode.c:2889 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3042 do_writepages+0x32e/0x550 mm/page-writeback.c:2571 __writeback_single_inode+0x133/0x10e0 fs/fs-writeback.c:1764 writeback_sb_inodes+0x979/0x19d0 fs/fs-writeback.c:2056 __writeback_inodes_wb+0x111/0x240 fs/fs-writeback.c:2132 wb_writeback+0x459/0xb00 fs/fs-writeback.c:2243 wb_check_old_data_flush fs/fs-writeback.c:2347 [inline] wb_do_writeback fs/fs-writeback.c:2400 [inline] wb_workfn+0xb12/0xf10 fs/fs-writeback.c:2428 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:modprobe state:R running task stack:24312 pid:9728 tgid:9728 ppid:6404 task_flags:0x400000 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline] RIP: 0010:lock_release+0x44/0x3c0 kernel/locking/lockdep.c:5879 Code: 8b 05 f0 39 96 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 f3 39 96 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 9c 61 8e 0e <73> 0d e8 c5 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d 76 94 8e 0e 00 RSP: 0018:ffffc90005e6f6d0 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffffffff90d3e201 RCX: 0000000080000001 RDX: ffffc90005e6f801 RSI: ffffffff8176e256 RDI: ffffffff8e95cd20 RBP: dffffc0000000000 R08: ffffc90005e6fd30 R09: 0000000000000000 R10: ffffc90005e6f858 R11: fffff52000bcdf0d R12: ffffc90005e6fd40 R13: ffffffff8176e256 R14: ffffffff8e95cd20 R15: ffffffff8176e256 rcu_lock_release include/linux/rcupdate.h:310 [inline] rcu_read_unlock include/linux/rcupdate.h:869 [inline] class_rcu_destructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0x1bba/0x2550 arch/x86/kernel/unwind_orc.c:709 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5613 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4906 alloc_filename fs/namei.c:142 [inline] do_getname+0x2e/0x250 fs/namei.c:182 getname include/linux/fs.h:2526 [inline] getname_maybe_null include/linux/fs.h:2533 [inline] class_filename_maybe_null_constructor include/linux/fs.h:2557 [inline] vfs_fstatat+0x45/0x170 fs/stat.c:368 __do_sys_newfstatat fs/stat.c:538 [inline] __se_sys_newfstatat fs/stat.c:532 [inline] __x64_sys_newfstatat+0x151/0x200 fs/stat.c:532 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f08a2ad7eaa RSP: 002b:00007ffdcd3f43d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00007ffdcd3f43eb RCX: 00007f08a2ad7eaa RDX: 00007ffdcd3f4490 RSI: 00007ffdcd3f43e0 RDI: 00000000ffffff9c RBP: 00007ffdcd3f4550 R08: 00007ffdcd3f45d7 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 R13: 00007f08a2aac050 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 8331 jiffies! g36449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 101 PID: 8730 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:rcu_is_watching+0x0/0xb0 kernel/rcu/tree.c:748 Code: c7 c7 20 24 96 8e e8 af 44 44 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 00 42 8d 11 e8 9b d3 fc 09 89 RSP: 0018:ffffc90000007148 EFLAGS: 00000246 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88803270dd00 RDX: ffff88803270dd00 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900000072b8 R08: ffffc900000073e0 R09: ffffc900000073f0 R10: ffffc90000007240 R11: fffff52000000e4a R12: 1ffff1100b11300c R13: dffffc0000000000 R14: ffff8880588f6000 R15: ffffc900000073b8 FS: 00007f3af8d63780(0000) GS:ffff88812529f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2029a79fa0 CR3: 00000000355f8000 CR4: 00000000003526f0 Call Trace: rcu_read_lock_held_common kernel/rcu/update.c:109 [inline] rcu_read_lock_held+0x15/0x50 kernel/rcu/update.c:349 __find_rr_leaf+0x353/0x760 net/ipv6/route.c:836 find_rr_leaf net/ipv6/route.c:892 [inline] rt6_select net/ipv6/route.c:936 [inline] fib6_table_lookup+0x3b4/0xa80 net/ipv6/route.c:2254 ip6_pol_route+0x228/0x13d0 net/ipv6/route.c:2290 pol_lookup_func include/net/ip6_fib.h:667 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline] fib6_rule_action+0x9d7/0xc00 net/ipv6/fib6_rules.c:278 fib_rules_lookup+0x768/0xea0 net/core/fib_rules.c:339 fib6_rule_lookup+0x1a0/0x730 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2359 [inline] ip6_route_input+0x730/0xad0 net/ipv6/route.c:2662 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6202 [inline] __netif_receive_skb net/core/dev.c:6315 [inline] process_backlog+0x7dd/0x1950 net/core/dev.c:6666 __napi_poll+0xae/0x340 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7953 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] packet_poll+0x356/0x5c0 net/packet/af_packet.c:4308 sock_poll+0x321/0x3e0 net/socket.c:1503 vfs_poll include/linux/poll.h:82 [inline] do_pollfd fs/select.c:877 [inline] do_poll fs/select.c:920 [inline] do_sys_poll+0x96c/0x10e0 fs/select.c:1015 __do_sys_ppoll fs/select.c:1112 [inline] __se_sys_ppoll+0x209/0x2b0 fs/select.c:1092 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3af8ded407 Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffefcb44ae0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f RAX: ffffffffffffffda RBX: 00007f3af8d63780 RCX: 00007f3af8ded407 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055cc4e8de520 RBP: 00007ffefcb44e20 R08: 0000000000000008 R09: 0000000000000000 R10: 00007ffefcb44e20 R11: 0000000000000202 R12: 000055cc232945e0 R13: 000055cc4e8ccd40 R14: 0000000000000000 R15: 00007ffefcb44bd0 net_ratelimit: 7581 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)