syzbot

rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10502 jiffies, g=40133, q=50562 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 9844 (4294977209-4294967365), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 9844 jiffies! g40133 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26688 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x1b33/0x51f0 kernel/sched/core.c:6767
 __schedule_loop kernel/sched/core.c:6845 [inline]
 schedule+0x163/0x360 kernel/sched/core.c:6860
 schedule_timeout+0x15b/0x2b0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x2e1/0x1340 kernel/rcu/tree.c:2046
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2248
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 9180 Comm: kworker/R-bond2 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue:  0x0 (bond2)
RIP: 0010:lockdep_hardirqs_on+0x8/0x150 kernel/locking/lockdep.c:4417
Code: c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 48 83 ec 10 49 c7 c6 20 70 65 93 65 49 8b 06 48 89 44 24 08 65
RSP: 0018:ffffc90000a07748 EFLAGS: 00000086
RAX: 59a8f8104575ee00 RBX: ffffc90000a077a0 RCX: 0000000000000002
RDX: 0000000000000002 RSI: ffffffff8e4ea0cf RDI: ffffffff821dcc4d
RBP: ffffc90000a07828 R08: ffffffff905eb677 R09: 1ffffffff20bd6ce
R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: 1ffff92000140ef0
R13: dffffc0000000000 R14: ffff88823fff8b58 R15: ffffffff821dc32f
FS:  0000000000000000(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000001c0 CR3: 000000007e638000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 seqcount_lockdep_reader_access+0x13d/0x1e0 include/linux/seqlock.h:74
 read_seqbegin include/linux/seqlock.h:836 [inline]
 zone_span_seqbegin include/linux/memory_hotplug.h:103 [inline]
 page_outside_zone_boundaries mm/page_alloc.c:441 [inline]
 bad_range+0x5f/0x280 mm/page_alloc.c:460
 rmqueue mm/page_alloc.c:3128 [inline]
 get_page_from_freelist+0x3501/0x36b0 mm/page_alloc.c:3649
 __alloc_frozen_pages_noprof+0x211/0x5b0 mm/page_alloc.c:4934
 alloc_pages_mpol+0x339/0x690 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2459 [inline]
 allocate_slab+0x8f/0x3a0 mm/slub.c:2623
 new_slab mm/slub.c:2676 [inline]
 ___slab_alloc+0xc3b/0x1500 mm/slub.c:3862
 __slab_alloc+0x58/0xa0 mm/slub.c:3952
 __slab_alloc_node mm/slub.c:4027 [inline]
 slab_alloc_node mm/slub.c:4188 [inline]
 kmem_cache_alloc_node_noprof+0x288/0x3b0 mm/slub.c:4252
 kmalloc_reserve+0xa8/0x2a0 net/core/skbuff.c:577
 __alloc_skb+0x1f2/0x480 net/core/skbuff.c:668
 alloc_skb include/linux/skbuff.h:1340 [inline]
 synproxy_send_client_synack_ipv6+0x1c8/0xe00 net/netfilter/nf_synproxy_core.c:873
 nft_synproxy_eval_v6 net/netfilter/nft_synproxy.c:90 [inline]
 nft_synproxy_do_eval+0x746/0xa90 net/netfilter/nft_synproxy.c:145
 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline]
 nft_do_chain+0x4b2/0x1db0 net/netfilter/nf_tables_core.c:285
 nft_do_chain_inet+0x41f/0x6b0 net/netfilter/nft_chain_filter.c:161
 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
 nf_hook_slow+0xc8/0x220 net/netfilter/core.c:626
 nf_hook include/linux/netfilter.h:269 [inline]
 NF_HOOK+0x29b/0x450 include/linux/netfilter.h:312
 ip6_input+0x169/0x270 net/ipv6/ip6_input.c:491
 NF_HOOK+0x3a0/0x450 include/linux/netfilter.h:314
 __netif_receive_skb_one_core net/core/dev.c:5894 [inline]
 __netif_receive_skb+0x1ef/0x670 net/core/dev.c:6007
 process_backlog+0x664/0x15c0 net/core/dev.c:6359
 __napi_poll+0xcb/0x480 net/core/dev.c:7331
 napi_poll net/core/dev.c:7395 [inline]
 net_rx_action+0x89d/0x1240 net/core/dev.c:7517
 handle_softirqs+0x2d6/0x9b0 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0xfb/0x220 kernel/softirq.c:680
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd9/0x140 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 2b 00 74 08 4c 89 f7 e8 1d 8a ff f5 f6 44 24 21 02 75 55 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 42 28 65 f5 65 8b 05 1b 0e 3a 07 85 c0 74 46 48 c7 04 24 0e 36
RSP: 0018:ffffc90002faf8a0 EFLAGS: 00000206
RAX: 59a8f8104575ee00 RBX: 1ffff920005f5f18 RCX: 0000000000000006
RDX: 0000000000000006 RSI: ffffffff8e687a59 RDI: 0000000000000001
RBP: ffffc90002faf930 R08: ffffffff905eb677 R09: 1ffffffff20bd6ce
R10: dffffc0000000000 R11: fffffbfff20bd6cf R12: 1ffff920005f5f14
R13: dffffc0000000000 R14: ffffc90002faf8c0 R15: 0000000000000246
 task_rq_unlock kernel/sched/sched.h:1812 [inline]
 __set_cpus_allowed_ptr_locked+0x634/0x1870 kernel/sched/core.c:3142
 __set_cpus_allowed_ptr kernel/sched/core.c:3171 [inline]
 set_cpus_allowed_ptr+0x23e/0x2b0 kernel/sched/core.c:3181
 worker_attach_to_pool+0x1d8/0x390 kernel/workqueue.c:2693
 rescuer_thread+0x40f/0x1020 kernel/workqueue.c:3480
 kthread+0x7b7/0x940 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>