rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P144/1:b..l P21987
(detected by 1, t=10502 jiffies, g=93993, q=2266)
task:syz.0.6460 state:R running task stack:22624 pid:21987 ppid: 21237 flags:0x00004008
Call Trace:
sched_show_task+0x4a4/0x640 kernel/sched/core.c:8637
rcu_print_detail_task_stall_rnp kernel/rcu/tree_stall.h:233 [inline]
print_other_cpu_stall+0x1111/0x14d0 kernel/rcu/tree_stall.h:573
check_cpu_stall kernel/rcu/tree_stall.h:745 [inline]
rcu_pending kernel/rcu/tree.c:3932 [inline]
rcu_sched_clock_irq+0xa38/0x1150 kernel/rcu/tree.c:2619
update_process_times+0x196/0x200 kernel/time/timer.c:1818
tick_sched_handle kernel/time/tick-sched.c:254 [inline]
tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473
__run_hrtimer kernel/time/hrtimer.c:1688 [inline]
__hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1752
hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1814
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
__sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:skb_set_owner_w+0x0/0x380 net/core/sock.c:2251
Code: 5b 41 5c 41 5e 41 5f 5d e9 ed e0 c5 fb 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6b ff ff ff 48 89 df e8 25 a1 86 f9 e9 5e ff ff ff <55> 41 57 41 56 41 55 41 54 53 50 48 89 34 24 49 89 ff 49 bd 00 00
RSP: 0018:ffffc90000dd0a08 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff8880744ee500 RCX: ffff888072c7d940
RDX: 0000000000000100 RSI: ffff88805bcbecc0 RDI: ffff8880744ee500
RBP: 0000000000000038 R08: dffffc0000000000 R09: ffffed100854e29d
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805bcbecc0
R13: dffffc0000000000 R14: ffff888048d58000 R15: 0000000000000038
ndisc_alloc_skb+0x1de/0x2c0 net/ipv6/ndisc.c:439
ndisc_send_rs+0x269/0x6a0 net/ipv6/ndisc.c:689
addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959
call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
expire_timers kernel/time/timer.c:1496 [inline]
__run_timers+0x67c/0x890 kernel/time/timer.c:1767
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
__do_softirq kernel/softirq.c:592 [inline]
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:should_resched arch/x86/include/asm/preempt.h:103 [inline]
RIP: 0010:__local_bh_enable_ip+0x16c/0x1f0 kernel/softirq.c:390
Code: 8a e8 d8 e2 e6 08 65 66 8b 05 50 19 b6 7e 66 85 c0 75 57 bf 01 00 00 00 e8 c1 ed 09 00 e8 9c 5b 39 00 fb 65 8b 05 3c f0 b4 7e <85> c0 75 05 e8 0b 0d b3 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
RSP: 0018:ffffc90003977420 EFLAGS: 00000282
RAX: 0000000000000000 RBX: 1ffff9200072ee88 RCX: ffffffff96868f03
RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0
RBP: ffffc900039774d0 R08: ffffffff8186db50 R09: ffffffff8f677048
R10: ffffffff8f677058 R11: ffffffff8f677050 R12: dffffc0000000000
R13: 1ffff9200072ee8c R14: ffffc90003977460 R15: 0000000000000200
rcu_read_unlock_bh include/linux/rcupdate.h:809 [inline]
__dev_queue_xmit+0x1c56/0x3230 net/core/dev.c:4275
__bpf_tx_skb net/core/filter.c:2118 [inline]
__bpf_redirect_no_mac net/core/filter.c:2152 [inline]
__bpf_redirect+0x79c/0xe90 net/core/filter.c:2175
____bpf_clone_redirect net/core/filter.c:2442 [inline]
bpf_clone_redirect+0x249/0x360 net/core/filter.c:2414
bpf_prog_973cd02a7a0e8181+0x56/0x820
bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
bpf_test_run+0x3f4/0x8a0 net/bpf/test_run.c:119
bpf_prog_test_run_skb+0xb41/0x1420 net/bpf/test_run.c:669
bpf_prog_test_run+0x32f/0x3a0 kernel/bpf/syscall.c:3368
__sys_bpf+0x3ac/0x670 kernel/bpf/syscall.c:4669
__do_sys_bpf kernel/bpf/syscall.c:4755 [inline]
__se_sys_bpf kernel/bpf/syscall.c:4753 [inline]
__x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:4753
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f93dd437ff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f93db8b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f93dd5eff80 RCX: 00007f93dd437ff9
RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a
RBP: 00007f93dd4aa296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f93dd5eff80 R15: 00007ffdfd4165a8
task:kworker/u4:1 state:R running task stack:18808 pid: 144 ppid: 2 flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
context_switch kernel/sched/core.c:5027 [inline]
__schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6777
irqentry_exit+0x53/0x80 kernel/entry/common.c:432
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:413 [inline]
RIP: 0010:batadv_nc_worker+0x154/0x5b0 net/batman-adv/network-coding.c:723
Code: be e5 02 00 00 48 c7 c2 00 72 9e 8b e8 f5 c1 51 f7 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8f dc b8 f7 48 8b 1b <48> 85 db 74 50 48 81 c3 38 fe ff ff 74 47 4c 89 f7 48 89 de 48 c7
RSP: 0018:ffffc9000174fbf8 EFLAGS: 00000246
RAX: 1ffff11005d0c870 RBX: 0000000000000000 RCX: ffff8880199dd940
RDX: 0000000000000000 RSI: ffffffff8ad904a0 RDI: ffffffff8ad90460
RBP: 0000000000000001 R08: ffffffff8a114781 R09: fffffbfff20e2419
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000070
R13: dffffc0000000000 R14: ffff888031d44c80 R15: ffff888049364640
process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
rcu: rcu_preempt kthread starved for 10584 jiffies! g93993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:26712 pid: 15 ppid: 2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5027 [inline]
__schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
schedule+0x11b/0x1f0 kernel/sched/core.c:6456
schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1914
rcu_gp_fqs_loop+0x2bf/0x1080 kernel/rcu/tree.c:1972
rcu_gp_kthread+0xa4/0x360 kernel/rcu/tree.c:2145
kthread+0x3f6/0x4f0 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 21992 Comm: syz.2.6462 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:irqentry_exit+0x7/0x80 kernel/entry/common.c:407
Code: 17 e8 3d 7f 52 f7 31 c0 5b c3 e8 f4 f9 ff ff e8 2f 7f 52 f7 b0 01 5b c3 eb e7 66 0f 1f 84 00 00 00 00 00 83 3d 2d 36 b5 03 00 <74> 16 65 8b 05 e0 1a ce 75 85 c0 75 0b 65 8b 05 05 18 ce 75 85 c0
RSP: 0018:ffffc900000073c0 EFLAGS: 00000002
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000010101
RDX: 1ffffffff1ecee00 RSI: 0000000000000000 RDI: ffffc900000073c8
RBP: 0000000000000000 R08: ffffffff8f677000 R09: ffffffff8f677008
R10: ffffffff8f677018 R11: ffffffff8f677010 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS: 00007f6258d9c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32720000 CR3: 000000002e2cf000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:memset_erms+0xb/0x10 arch/x86/lib/memset_64.S:65
Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01
RSP: 0018:ffffc90000007478 EFLAGS: 00000202
RAX: ffff888021aa5900 RBX: ffff888021aa5940 RCX: 0000000000000000
RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90000007540
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffc900000074e0
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: ffffffff816df9a0 R14: ffffc900000074e0 R15: 0000000000000000
__unwind_start+0x32/0x720 arch/x86/kernel/unwind_orc.c:632
unwind_start arch/x86/include/asm/unwind.h:60 [inline]
arch_stack_walk+0xdb/0x140 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track+0x4b/0x80 mm/kasan/common.c:46
kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:360
____kasan_slab_free+0xd8/0x120 mm/kasan/common.c:366
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:1705 [inline]
slab_free_freelist_hook+0xdd/0x160 mm/slub.c:1731
slab_free mm/slub.c:3499 [inline]
kmem_cache_free+0x91/0x1f0 mm/slub.c:3515
tcp_rtx_queue_purge net/ipv4/tcp.c:2952 [inline]
tcp_write_queue_purge+0x1ff/0x3e0 net/ipv4/tcp.c:2965
tcp_done_with_error+0x3d/0xc0 net/ipv4/tcp_input.c:4358
tcp_write_err net/ipv4/tcp_timer.c:70 [inline]
tcp_write_timeout net/ipv4/tcp_timer.c:273 [inline]
tcp_retransmit_timer+0x112b/0x2680 net/ipv4/tcp_timer.c:543
tcp_write_timer_handler+0x1f7/0x970 net/ipv4/tcp_timer.c:655
tcp_write_timer+0x12e/0x280 net/ipv4/tcp_timer.c:675
call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
expire_timers kernel/time/timer.c:1496 [inline]
__run_timers+0x67c/0x890 kernel/time/timer.c:1767
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
__do_softirq kernel/softirq.c:592 [inline]
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__lt_find include/linux/rbtree_latch.h:113 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:208 [inline]
RIP: 0010:bpf_ksym_find kernel/bpf/core.c:688 [inline]
RIP: 0010:is_bpf_text_address+0x17f/0x260 kernel/bpf/core.c:722
Code: f7 73 43 e8 13 5d f3 ff 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 19 27 3d 00 48 8b 1b 48 85 db 74 0a ec 5c f3 ff e9 5f ff ff ff e8 e2 5c f3 ff 31 ed eb 0e e8 d9 5c
RSP: 0018:ffffc900036cf3c0 EFLAGS: 00000282
RAX: 1ffff1100e90b03f RBX: ffffffff8da34270 RCX: 0000000000040000
RDX: ffffc90005d99000 RSI: 0000000000000826 RDI: 0000000000000827
RBP: 0000000000000000 R08: ffffffff818cfd14 R09: fffffbfff20e2419
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000000 R14: 00007f625a923ff9 R15: ffffffffa002a23c
kernel_text_address kernel/extable.c:151 [inline]
__kernel_text_address+0x94/0x100 kernel/extable.c:105
unwind_get_return_address+0x49/0x80 arch/x86/kernel/unwind_orc.c:323
arch_stack_walk+0xf3/0x140 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track mm/kasan/common.c:46 [inline]
set_alloc_info mm/kasan/common.c:434 [inline]
__kasan_slab_alloc+0x8e/0xc0 mm/kasan/common.c:467
kasan_slab_alloc include/linux/kasan.h:254 [inline]
slab_post_alloc_hook+0x53/0x380 mm/slab.h:519
slab_alloc_node mm/slub.c:3220 [inline]
kmem_cache_alloc_node+0x121/0x2c0 mm/slub.c:3256
alloc_vmap_area+0x1ba/0x19a0 mm/vmalloc.c:1531
__get_vm_area_node+0x16e/0x2f0 mm/vmalloc.c:2423
__vmalloc_node_range+0xe3/0x8c0 mm/vmalloc.c:3019
__vmalloc_node mm/vmalloc.c:3079 [inline]
__vmalloc+0x75/0x80 mm/vmalloc.c:3093
bpf_prog_alloc_no_stats+0x33/0x2f0 kernel/bpf/core.c:90
bpf_prog_alloc+0x18/0x1d0 kernel/bpf/core.c:124
bpf_prog_load+0x800/0x1b60 kernel/bpf/syscall.c:2300
__sys_bpf+0x343/0x670 kernel/bpf/syscall.c:4651
__do_sys_bpf kernel/bpf/syscall.c:4755 [inline]
__se_sys_bpf kernel/bpf/syscall.c:4753 [inline]
__x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:4753
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f625a923ff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6258d9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f625aadbf80 RCX: 00007f625a923ff9
RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000005
RBP: 00007f625a996296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f625aadbf80 R15: 00007ffd53153be8