syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8783/1:b..l P8790/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=18877, q=321 ncpus=2)
task:syz-executor    state:R  running task     stack:22912 pid:8790  tgid:8790  ppid:8767   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rtnl_get_link+0xdc/0x2d0 net/core/rtnetlink.c:369
Code: 85 ed 74 61 e8 35 01 04 f8 49 63 c7 48 8d 5c c5 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 07 62 6a f8 48 8b 1b <e8> af b3 2c 02 89 c5 31 ff 89 c6 e8 44 05 04 f8 85 ed 74 6c 48 c7
RSP: 0018:ffffc90004d0f758 EFLAGS: 00000246
RAX: 1ffff110043d9b0c RBX: 0000000000000000 RCX: ffff88802704bc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff888021ecd800 R08: ffffffff899b5cf4 R09: 1ffffffff2854310
R10: dffffc0000000000 R11: fffffbfff2854311 R12: 000000000000000c
R13: 1ffff920009a1ef8 R14: dffffc0000000000 R15: 000000000000000c
 rtnetlink_rcv_msg+0x30b/0xcf0 net/core/rtnetlink.c:6893
 netlink_rcv_skb+0x1e5/0x430 net/netlink/af_netlink.c:2542
 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
 netlink_unicast+0x7f8/0x990 net/netlink/af_netlink.c:1347
 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891
 sock_sendmsg_nosec net/socket.c:711 [inline]
 __sock_sendmsg+0x223/0x270 net/socket.c:726
 __sys_sendto+0x363/0x4c0 net/socket.c:2197
 __do_sys_sendto net/socket.c:2204 [inline]
 __se_sys_sendto net/socket.c:2200 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2200
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f31ccb81dac
RSP: 002b:00007ffe81dad0c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f31cd874620 RCX: 00007f31ccb81dac
RDX: 0000000000000030 RSI: 00007f31cd874670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffe81dad114 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f31cd874670 R15: 0000000000000000
 </TASK>
task:kworker/u8:9    state:R  running task     stack:25488 pid:8783  tgid:8783  ppid:2      flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 preempt_schedule_notrace+0x100/0x140 kernel/sched/core.c:7028
 preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x7e/0xb0 kernel/rcu/tree.c:738
 rcu_read_lock include/linux/rcupdate.h:850 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x10b/0x610 net/batman-adv/network-coding.c:719
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa68/0x1840 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: rcu_preempt kthread starved for 10483 jiffies! g18877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:25976 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0x1850/0x4c30 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6848
 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5928 Comm: kworker/1:7 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_long defense_work_handler
RIP: 0010:kasan_check_range+0x1be/0x290 mm/kasan/generic.c:189
Code: 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e 41 5f <5d> e9 27 97 ea 09 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 c5 00
RSP: 0018:ffffc90000a186a0 EFLAGS: 00000056
RAX: 0000000000000001 RBX: 00000000000003f4 RCX: ffffffff817aa802
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942a18f8
RBP: 0000000000000000 R08: ffffffff942a18ff R09: 1ffffffff285431f
R10: dffffc0000000000 R11: fffffbfff2854320 R12: 0000000000000002
R13: ffff88802fd70b50 R14: 0000000000000002 R15: ffff88802fd70b50
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30313ff8 CR3: 000000002f8ac000 CR4: 0000000000350ef0
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class kernel/locking/lockdep.c:228 [inline]
 check_wait_context kernel/locking/lockdep.c:4875 [inline]
 __lock_acquire+0x8a2/0x2100 kernel/locking/lockdep.c:5176
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 usb_hcd_unlink_urb_from_ep+0x2c/0x110 drivers/usb/core/hcd.c:1224
 dummy_timer+0x83a/0x4620 drivers/usb/gadget/udc/dummy_hcd.c:1991
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x59d/0xd30 kernel/time/hrtimer.c:1803
 hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1820
 handle_softirqs+0x2d6/0x9b0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:should_resched arch/x86/include/asm/preempt.h:103 [inline]
RIP: 0010:__local_bh_enable_ip+0x170/0x200 kernel/softirq.c:396
Code: 8c e8 94 73 66 0a 65 66 8b 05 34 21 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 18 73 45 00 fb 65 8b 05 f8 20 a2 7e <85> c0 75 05 e8 77 92 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
RSP: 0018:ffffc900031a7980 EFLAGS: 00000282
RAX: 0000000080000000 RBX: 1ffff92000634f34 RCX: ffffffff817b11ca
RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5f9680
RBP: ffffc900031a7a30 R08: ffffffff942a1927 R09: 1ffffffff2854324
R10: dffffc0000000000 R11: fffffbfff2854325 R12: dffffc0000000000
R13: 1ffff92000634f38 R14: ffffc900031a79c0 R15: 0000000000000200
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 update_defense_level+0x8ec/0xcf0 net/netfilter/ipvs/ip_vs_ctl.c:210
 defense_work_handler+0x22/0xd0 net/netfilter/ipvs/ip_vs_ctl.c:235
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa68/0x1840 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>