rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=815/1/0x4000000000000000 softirq=41486/41488 fqs=35 
	(t=10501 jiffies g=65205 q=1278)
rcu: rcu_preempt kthread starved for 10264 jiffies! g65205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26712 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5027 [inline]
 __schedule+0x12c4/0x45b0 kernel/sched/core.c:6373
 schedule+0x11b/0x1f0 kernel/sched/core.c:6456
 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1914
 rcu_gp_fqs_loop+0x2bf/0x1080 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0xa4/0x360 kernel/rcu/tree.c:2145
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 9768 Comm: syz.4.1938 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1654 [inline]
RIP: 0010:__hrtimer_run_queues+0x304/0xcf0 kernel/time/hrtimer.c:1752
Code: 00 85 db 74 2c 48 8b bc 24 90 00 00 00 be ff ff ff ff e8 cf e8 c4 08 89 c3 31 ff 89 c6 e8 d4 f6 10 00 85 db 0f 84 83 04 00 00 <e8> 67 f3 10 00 eb 05 e8 60 f3 10 00 48 8b 5c 24 10 4c 89 f7 e8 43
RSP: 0018:ffffc90000dcff60 EFLAGS: 00000002
RAX: 0000000000010100 RBX: 0000000000000001 RCX: ffff888027703b80
RDX: ffff888027703b80 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000dd00a8 R08: ffffffff816f66fc R09: fffffbfff1bd2c16
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b912a200
R13: ffff8880b912a280 R14: ffff888063768758 R15: dffffc0000000000
FS:  00007f02eccb56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f02ecc72f98 CR3: 000000004878b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
 __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:preempt_count_sub+0x3/0x160 kernel/sched/core.c:5509
Code: c1 48 94 e9 8d 80 e1 07 80 c1 03 38 c1 7c 80 48 c7 c7 48 94 e9 8d e8 4c b7 72 00 e9 6f ff ff ff 0f 1f 80 00 00 00 00 41 56 53 <89> fb 48 c7 c0 c0 8f 86 96 48 c1 e8 03 49 be 00 00 00 00 00 fc ff
RSP: 0018:ffffc90000dd02b0 EFLAGS: 00000297
RAX: 0000000000000002 RBX: ffffffff8eeea010 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffc900038770a8 RDI: 0000000000000001
RBP: ffffffff8eeea012 R08: ffffc900038770a8 R09: ffffc90000dd03d0
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1ddd402
R13: 1ffffffff1ddd402 R14: ffffffff8eeea011 R15: ffffc90000dd0380
 unwind_next_frame+0x1437/0x1fa0 arch/x86/kernel/unwind_orc.c:616
 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:46 [inline]
 set_alloc_info mm/kasan/common.c:434 [inline]
 __kasan_slab_alloc+0x8e/0xc0 mm/kasan/common.c:467
 kasan_slab_alloc include/linux/kasan.h:254 [inline]
 slab_post_alloc_hook+0x53/0x380 mm/slab.h:519
 slab_alloc_node mm/slub.c:3220 [inline]
 slab_alloc mm/slub.c:3228 [inline]
 kmem_cache_alloc+0xf3/0x280 mm/slub.c:3233
 dst_alloc+0x12c/0x190 net/core/dst.c:88
 ip6_dst_alloc net/ipv6/route.c:342 [inline]
 icmp6_dst_alloc+0x76/0x4f0 net/ipv6/route.c:3275
 ndisc_send_skb+0x305/0x13c0 net/ipv6/ndisc.c:491
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959
 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
 expire_timers kernel/time/timer.c:1496 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1767
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
 handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
 __do_softirq kernel/softirq.c:592 [inline]
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:schedule_debug kernel/sched/core.c:5600 [inline]
RIP: 0010:__schedule+0x1a70/0x45b0 kernel/sched/core.c:6264
Code: f7 e9 f2 f9 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fa ff ff 48 89 df e8 3c a8 8d f7 e9 4c fa ff ff 65 8b 05 d0 d7 c6 75 <e9> c7 e7 ff ff e8 c6 e4 f7 ff 41 89 c7 83 f8 08 0f 83 ac 2a 00 00
RSP: 0018:ffffc90003877160 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc90003870000 RCX: ffff888027703b80
RDX: 0000000000000010 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0
RBP: ffffc90003877330 R08: dffffc0000000000 R09: ffffc900038772c0
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9100000
R13: dffffc0000000000 R14: ffff888027703b80 R15: 0000000000000001
 preempt_schedule_common+0x83/0xd0 kernel/sched/core.c:6549
 preempt_schedule+0xd9/0xe0 kernel/sched/core.c:6574
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 unwind_next_frame+0x144d/0x1fa0 arch/x86/kernel/unwind_orc.c:616
 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 save_stack+0xf6/0x1e0 mm/page_owner.c:119
 __reset_page_owner+0x52/0x180 mm/page_owner.c:140
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1340 [inline]
 free_pcp_prepare mm/page_alloc.c:1391 [inline]
 free_unref_page_prepare+0xc34/0xcf0 mm/page_alloc.c:3317
 free_unref_page+0x95/0x2d0 mm/page_alloc.c:3396
 free_slab mm/slub.c:2015 [inline]
 discard_slab mm/slub.c:2021 [inline]
 __unfreeze_partials+0x1b7/0x210 mm/slub.c:2507
 put_cpu_partial+0x132/0x1a0 mm/slub.c:2587
 do_slab_free mm/slub.c:3487 [inline]
 ___cache_free+0xe3/0x100 mm/slub.c:3506
 qlist_free_all+0x36/0x90 mm/kasan/quarantine.c:176
 kasan_quarantine_reduce+0x162/0x180 mm/kasan/quarantine.c:283
 __kasan_slab_alloc+0x2f/0xc0 mm/kasan/common.c:444
 kasan_slab_alloc include/linux/kasan.h:254 [inline]
 slab_post_alloc_hook+0x53/0x380 mm/slab.h:519
 slab_alloc_node mm/slub.c:3220 [inline]
 slab_alloc mm/slub.c:3228 [inline]
 kmem_cache_alloc+0xf3/0x280 mm/slub.c:3233
 sock_alloc_inode+0x17/0xb0 net/socket.c:303
 alloc_inode fs/inode.c:236 [inline]
 new_inode_pseudo+0x60/0x210 fs/inode.c:972
 sock_alloc net/socket.c:626 [inline]
 __sock_create+0x11f/0x8d0 net/socket.c:1450
 sock_create net/socket.c:1537 [inline]
 __sys_socket+0x132/0x370 net/socket.c:1579
 __do_sys_socket net/socket.c:1588 [inline]
 __se_sys_socket net/socket.c:1586 [inline]
 __x64_sys_socket+0x76/0x80 net/socket.c:1586
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f02ee83cff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f02eccb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00007f02ee9f4f80 RCX: 00007f02ee83cff9
RDX: 0000000000000300 RSI: 0200000000000002 RDI: 0000000000000011
RBP: 00007f02ee8af296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f02ee9f4f80 R15: 00007fff76a789d8
 </TASK>
NMI backtrace for cpu 0
CPU: 0 PID: 9710 Comm: syz.0.1915 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
 rcu_dump_cpu_stacks+0x223/0x390 kernel/rcu/tree_stall.h:349
 print_cpu_stall+0x320/0x600 kernel/rcu/tree_stall.h:633
 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline]
 rcu_pending kernel/rcu/tree.c:3932 [inline]
 rcu_sched_clock_irq+0x8d9/0x1150 kernel/rcu/tree.c:2619
 update_process_times+0x196/0x200 kernel/time/timer.c:1818
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1688 [inline]
 __hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1752
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
 __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:sk_fullsock include/net/sock.h:2754 [inline]
RIP: 0010:sk_validate_xmit_skb include/net/sock.h:2796 [inline]
RIP: 0010:validate_xmit_skb+0x129/0x1010 net/core/dev.c:3691
Code: 80 3c 38 00 74 08 48 89 df e8 13 f9 7e f9 4c 8b 33 4d 85 f6 0f 84 2a 01 00 00 49 8d 5e 12 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 44 0c 00 00 44 0f b6 3b bf 20 00 00 00 44 89 fe e8 1e
RSP: 0018:ffffc90000007480 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: ffff88806340c152 RCX: ffff888029c8d940
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000007570 R08: ffffffff884b2b46 R09: ffffffff884b1b8e
R10: 0000000000000002 R11: ffff888029c8d940 R12: ffff888045d3a3c0
R13: ffff888045d3a442 R14: ffff88806340c140 R15: dffffc0000000000
 __dev_queue_xmit+0x14de/0x3230 net/core/dev.c:4239
 neigh_output include/net/neighbour.h:509 [inline]
 ip6_finish_output2+0xee8/0x15a0 net/ipv6/ip6_output.c:130
 dst_output include/net/dst.h:443 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:511
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959
 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451
 expire_timers kernel/time/timer.c:1496 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1767
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780
 handle_softirqs+0x3a7/0x930 kernel/softirq.c:558
 __do_softirq kernel/softirq.c:592 [inline]
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:653
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:finish_lock_switch+0x91/0x100 kernel/sched/core.c:4782
Code: 45 31 c9 68 97 9b 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 d6 48 e4 08 e8 51 3f 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87
RSP: 0018:ffffc90003806ff8 EFLAGS: 00000286
RAX: 6105ee4bc5e91f00 RBX: ffff888074523bb4 RCX: ffffffff81631ae8
RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: ffffffff8ad904c0
RBP: ffffc90003807070 R08: dffffc0000000000 R09: fffffbfff20e241a
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300
 finish_task_switch+0x134/0x630 kernel/sched/core.c:4899
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x12cc/0x45b0 kernel/sched/core.c:6373
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6777
 irqentry_exit+0x53/0x80 kernel/entry/common.c:432
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:__thunk_restore+0x2/0x10 arch/x86/entry/thunk_64.S:41
Code: 50 41 50 41 51 41 52 41 53 e8 7a 1d 3c 09 eb 18 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 12 1f 3c 09 eb 00 41 5b <41> 5a 41 59 41 58 58 59 5a 5e 5f 5d c3 cc 81 fe c0 01 00 00 77 09
RSP: 0018:ffffc900038073d0 EFLAGS: 00000246
RAX: 6105ee4bc5e91f00 RBX: 1ffff92000700e88 RCX: ffffffff8a3cabb6
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888029c8d940
RBP: ffffc90003807410 R08: dffffc0000000000 R09: ffffed1005391b29
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff92000700e84 R14: ffffc90003807440 R15: 0000000000000246
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline]
 _raw_spin_unlock_irqrestore+0x128/0x130 kernel/locking/spinlock.c:194
 rcu_preempt_deferred_qs_irqrestore+0x879/0xc50
 rcu_read_unlock_special+0x43f/0x520 kernel/rcu/tree_plugin.h:670
 __rcu_read_unlock+0x92/0x100 kernel/rcu/tree_plugin.h:422
 rcu_read_unlock include/linux/rcupdate.h:771 [inline]
 inet_twsk_purge+0x92f/0x9d0 net/ipv4/inet_timewait_sock.c:309
 ops_exit_list net/core/net_namespace.c:177 [inline]
 setup_net+0x81c/0x9e0 net/core/net_namespace.c:355
 copy_net_ns+0x392/0x5d0 net/core/net_namespace.c:476
 create_new_namespaces+0x425/0x7a0 kernel/nsproxy.c:110
 copy_namespaces+0x365/0x3b0 kernel/nsproxy.c:178
 copy_process+0x1841/0x3ef0 kernel/fork.c:2209
 kernel_clone+0x210/0x960 kernel/fork.c:2604
 __do_sys_clone kernel/fork.c:2721 [inline]
 __se_sys_clone kernel/fork.c:2705 [inline]
 __x64_sys_clone+0x23f/0x290 kernel/fork.c:2705
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f5be377fff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5be1bf7fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f5be3937f80 RCX: 00007f5be377fff9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004d100000
RBP: 00007f5be37f2296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f5be3937f80 R15: 00007ffd93e28c78
 </TASK>