rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4986/1:b..l P2/1:b..l P24209/1:b..l P5604/1:b..l P24236/1:b..l
rcu: 	(detected by 1, t=10503 jiffies, g=100001, q=779 ncpus=2)
task:modprobe        state:R  running task     stack:24344 pid:24236 tgid:24236 ppid:19074  task_flags:0x400000 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:check_kcov_mode kernel/kcov.c:194 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:246 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 kernel/kcov.c:314
Code: 98 55 74 11 65 8b 0d b9 55 74 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 17 00 00 00 74 52 8b 8a f8 16 00 00 <83> f9 03 75 47 48 8b 8a 00 17 00 00 44 8b 8a fc 16 00 00 49 c1 e1
RSP: 0018:ffffc90005ddf720 EFLAGS: 00000246
RAX: ffffffff823cc60e RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888051481f00 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffff88801f0d2dbf R09: 1ffff11003e1a5b7
R10: dffffc0000000000 R11: ffffed1003e1a5b8 R12: ffffffff823cc35a
R13: 000000000008aa2c R14: dffffc0000000000 R15: ffff88801f0d2dc0
 rcu_read_unlock include/linux/rcupdate.h:869 [inline]
 __page_table_check_zero+0x31e/0x3e0 mm/page_table_check.c:145
 page_table_check_free include/linux/page_table_check.h:46 [inline]
 __free_pages_prepare mm/page_alloc.c:1398 [inline]
 __free_frozen_pages+0xc1d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4610 [inline]
 slab_alloc_node mm/slub.c:4939 [inline]
 kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946
 vm_area_alloc+0x24/0x140 mm/vma_init.c:32
 __install_special_mapping mm/mmap.c:1459 [inline]
 _install_special_mapping+0x2e/0x350 mm/mmap.c:1509
 map_vdso+0x257/0x6a0 arch/x86/entry/vdso/vma.c:198
 load_elf_binary+0x1d52/0x2950 fs/binfmt_elf.c:1291
 search_binary_handler fs/exec.c:1694 [inline]
 exec_binprm fs/exec.c:1726 [inline]
 bprm_execve+0x9c7/0x1630 fs/exec.c:1778
 kernel_execve+0x8c3/0x9c0 fs/exec.c:1922
 call_usermodehelper_exec_async+0x20f/0x360 kernel/umh.c:109
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
task:syz-executor    state:R  running task     stack:22040 pid:5604  tgid:5604  ppid:5603   task_flags:0x400100 flags:0x00080800
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:110 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
RIP: 0010:unwind_next_frame+0x29e/0x2550 arch/x86/kernel/unwind_orc.c:510
Code: 39 e8 0f 84 07 04 00 00 4a 8d 14 ad 34 fc 43 90 45 29 e8 4e 8d 24 82 49 83 c4 fc 49 89 d5 4c 39 e2 0f 86 22 02 00 00 49 29 d5 <49> c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 49 bc 00
RSP: 0018:ffffc900038af648 EFLAGS: 00000202
RAX: ffffffff9049f960 RBX: ffffffff9049f964 RCX: ffffffff9049f968
RDX: ffffffff9049f944 RSI: ffffffff90c5a02c RDI: ffffffff8c2910c0
RBP: ffffffff8176cc9c R08: 0000000000000009 R09: 0000000000000000
R10: ffffc900038af748 R11: fffff52000715ef5 R12: ffffffff9049f964
R13: 0000000000000020 R14: ffffc900038af748 R15: ffffffff9049f968
 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4610 [inline]
 slab_alloc_node mm/slub.c:4939 [inline]
 kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946
 lsm_file_alloc security/security.c:171 [inline]
 security_file_alloc+0x34/0x310 security/security.c:2406
 init_file+0x90/0x2b0 fs/file_table.c:184
 alloc_empty_file+0x74/0x1d0 fs/file_table.c:266
 alloc_file fs/file_table.c:396 [inline]
 alloc_file_pseudo+0x115/0x1e0 fs/file_table.c:427
 create_pipe_files+0x325/0x7c0 fs/pipe.c:1042
 __do_pipe_flags+0x46/0x1f0 fs/pipe.c:1088
 do_pipe2+0xaa/0x190 fs/pipe.c:1136
 __do_sys_pipe2 fs/pipe.c:1154 [inline]
 __se_sys_pipe2 fs/pipe.c:1152 [inline]
 __x64_sys_pipe2+0x5a/0x70 fs/pipe.c:1152
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fabb0b9be89
RSP: 002b:00007ffcc8a61d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
RAX: ffffffffffffffda RBX: 000055555de25050 RCX: 00007fabb0b9be89
RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffcc8a61da8
RBP: 00007ffcc8a62370 R08: 00007fabb0dede20 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc8a621b0
R13: 000055555de96128 R14: 000055555de29230 R15: 00007ffcc8a61ef0
 </TASK>
task:syz.0.5077      state:R  running task     stack:24600 pid:24209 tgid:24207 ppid:15977  task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_notrace+0x57/0x90 kernel/sched/core.c:7502
 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:753
 trace_lock_acquire include/trace/events/lock.h:23 [inline]
 lock_acquire+0x5f/0x350 kernel/locking/lockdep.c:5831
 rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 rcu_read_lock include/linux/rcupdate.h:840 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4610 [inline]
 slab_alloc_node mm/slub.c:4939 [inline]
 kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946
 lsm_inode_alloc security/security.c:254 [inline]
 security_inode_alloc+0x39/0x310 security/security.c:1215
 inode_init_always_gfp+0x97e/0xd30 fs/inode.c:301
 inode_init_always include/linux/fs.h:2945 [inline]
 alloc_inode+0x82/0x1b0 fs/inode.c:348
 new_inode+0x1f/0x170 fs/inode.c:1177
 debugfs_get_inode fs/debugfs/inode.c:72 [inline]
 __debugfs_create_file+0xb8/0x400 fs/debugfs/inode.c:433
 debugfs_create_file_short+0x3f/0x60 fs/debugfs/inode.c:471
 add_files net/mac80211/debugfs_netdev.c:942 [inline]
 ieee80211_debugfs_add_netdev net/mac80211/debugfs_netdev.c:1010 [inline]
 ieee80211_debugfs_recreate_netdev+0x28b/0x14c0 net/mac80211/debugfs_netdev.c:1034
 ieee80211_if_add+0xdd8/0x1600 net/mac80211/iface.c:2365
 ieee80211_register_hw+0x3e79/0x4a50 net/mac80211/main.c:1644
 mac80211_hwsim_new_radio+0x3238/0x5680 drivers/net/wireless/virtual/mac80211_hwsim_main.c:6102
 hwsim_new_radio_nl+0xd8b/0xf90 drivers/net/wireless/virtual/mac80211_hwsim_main.c:6893
 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114
 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
 genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209
 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2556
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec net/socket.c:775 [inline]
 __sock_sendmsg net/socket.c:790 [inline]
 ____sys_sendmsg+0x9b9/0xa20 net/socket.c:2684
 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2738
 __sys_sendmsg net/socket.c:2770 [inline]
 __do_sys_sendmsg net/socket.c:2775 [inline]
 __se_sys_sendmsg net/socket.c:2773 [inline]
 __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1e4ff9ce59
RSP: 002b:00007f1e50f14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f1e50215fa0 RCX: 00007f1e4ff9ce59
RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
RBP: 00007f1e50032e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1e50216038 R14: 00007f1e50215fa0 R15: 00007ffe4ffe4848
 </TASK>
task:kthreadd        state:R  running task     stack:26536 pid:2     tgid:2     ppid:0      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:deref_stack_reg+0xa/0x220 arch/x86/kernel/unwind_orc.c:418
Code: ba 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 10 48 89 d3 49 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff
RSP: 0018:ffffc90000077348 EFLAGS: 00000283
RAX: fffffffffffffff0 RBX: ffffffff90d3a9e0 RCX: 0000000000000000
RDX: ffffc90000077468 RSI: ffffc90000077870 RDI: ffffc90000077428
RBP: 1ffffffff21a753c R08: ffffc90000077870 R09: 0000000000000000
R10: ffffc90000077478 R11: fffff5200000ee91 R12: dffffc0000000000
R13: ffffffff90d3a9e1 R14: ffffc90000077428 R15: ffffc90000077470
 unwind_next_frame+0x19bd/0x2550 arch/x86/kernel/unwind_orc.c:-1
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x318/0x660 mm/slub.c:5451
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1286 [inline]
 set_kthread_struct+0xbb/0x340 kernel/kthread.c:107
 copy_process+0x1796/0x42e0 kernel/fork.c:2215
 kernel_clone+0x2d7/0x940 kernel/fork.c:2745
 kernel_thread+0x13f/0x1b0 kernel/fork.c:2806
 create_kthread kernel/kthread.c:459 [inline]
 kthreadd+0x4ec/0x6e0 kernel/kthread.c:817
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
task:udevd           state:R  running task     stack:23160 pid:4986  tgid:4986  ppid:1      task_flags:0x400140 flags:0x00080800
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:228 [inline]
RIP: 0010:unwind_next_frame+0x1f6/0x2550 arch/x86/kernel/unwind_orc.c:510
Code: 08 8b 15 dd 29 b1 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 24 a1 71 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d
RSP: 0018:ffffc90002f5f360 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000080000000
RDX: 00000000000aabd9 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0
RBP: ffffffff8222d9ec R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90002f5f458 R11: ffffffff81b10630 R12: dffffc0000000000
R13: ffffffff91762c88 R14: ffffc90002f5f408 R15: 00000000000122d9
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4610 [inline]
 slab_alloc_node mm/slub.c:4939 [inline]
 __do_kmalloc_node mm/slub.c:5333 [inline]
 __kmalloc_noprof+0x312/0x750 mm/slub.c:5347
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 tomoyo_realpath_from_path+0xef/0x640 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827
 security_inode_getattr+0x12b/0x310 security/security.c:1895
 vfs_getattr+0x23/0x70 fs/stat.c:259
 vfs_statx_path+0x2b/0x230 fs/stat.c:299
 vfs_statx+0x12e/0x200 fs/stat.c:356
 vfs_fstatat+0x11b/0x170 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat fs/stat.c:532 [inline]
 __x64_sys_newfstatat+0x151/0x200 fs/stat.c:532
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8293911b0a
RSP: 002b:00007ffc4a2d41a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 000055fcb4412420 RCX: 00007f8293911b0a
RDX: 00007ffc4a2d41b0 RSI: 000055fcb4400ef3 RDI: 00000000ffffff9c
RBP: 000055fcbbbbe148 R08: 00063478c1c69200 R09: 3fffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffc4a2d41b0 R14: 0000000000000000 R15: 00063478c1c69200
 </TASK>
rcu: rcu_preempt kthread starved for 10237 jiffies! g100001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28120 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 __schedule_loop kernel/sched/core.c:7307 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7322
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 19072 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: krds_cp_wq#24/3 rds_shutdown_worker
RIP: 0010:rt6_score_route+0x46/0x380 net/ipv6/route.c:-1
Code: ff df e8 1d ab 71 f7 31 ff 89 de e8 54 af 71 f7 85 db 74 53 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9a ff dc f7 <41> bc e0 00 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84
RSP: 0018:ffffc900000069c0 EFLAGS: 00000246
RAX: 1ffff1100b058719 RBX: 000000000000004a RCX: 0000000000000100
RDX: ffff888032de3e00 RSI: 000000000000004a RDI: 0000000000000000
RBP: 0000000000000003 R08: ffffc90000006d00 R09: ffffc90000006d10
R10: ffffc90000006b60 R11: fffff52000000d6e R12: 0000000000000003
R13: dffffc0000000000 R14: ffff8880582c38c8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0d9b358c50 CR3: 000000005affa000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 find_match+0x119/0xb40 net/ipv6/route.c:788
 __find_rr_leaf+0x243/0x740 net/ipv6/route.c:872
 find_rr_leaf net/ipv6/route.c:893 [inline]
 rt6_select net/ipv6/route.c:937 [inline]
 fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2255
 ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2292
 pol_lookup_func include/net/ip6_fib.h:669 [inline]
 __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline]
 fib6_rule_action+0x9d7/0xc00 net/ipv6/fib6_rules.c:278
 fib_rules_lookup+0x770/0xeb0 net/core/fib_rules.c:340
 fib6_rule_lookup+0x1a0/0x730 net/ipv6/fib6_rules.c:115
 ip6_route_input_lookup net/ipv6/route.c:2363 [inline]
 ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2666
 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318
 __netif_receive_skb_one_core net/core/dev.c:6206 [inline]
 __netif_receive_skb net/core/dev.c:6319 [inline]
 netif_receive_skb_internal net/core/dev.c:6405 [inline]
 netif_receive_skb+0x278/0xbf0 net/core/dev.c:6464
 NF_HOOK+0xa4/0x3a0 include/linux/netfilter.h:318
 br_handle_frame_finish+0x1192/0x1990 net/bridge/br_input.c:-1
 nf_hook_bridge_pre net/bridge/br_input.c:313 [inline]
 br_handle_frame+0x81b/0x1510 net/bridge/br_input.c:442
 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6093
 __netif_receive_skb_one_core net/core/dev.c:6204 [inline]
 __netif_receive_skb net/core/dev.c:6319 [inline]
 process_backlog+0x706/0x1860 net/core/dev.c:6670
 __napi_poll+0xaa/0x330 net/core/dev.c:7729
 napi_poll net/core/dev.c:7792 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:7949
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 do_softirq+0x76/0xd0 kernel/softirq.c:523
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450
 lock_sock include/net/sock.h:1713 [inline]
 inet_shutdown+0x6a/0x390 net/ipv4/af_inet.c:913
 rds_tcp_conn_path_shutdown+0x24b/0xac0 net/rds/tcp_connect.c:248
 rds_conn_shutdown+0x4b8/0xab0 net/rds/connection.c:414
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3478
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
net_ratelimit: 14134 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)