IPVS: ovf: FWM 3 0x00000003 - no destination available
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (1 ticks this GP) idle=1f3/1/0x4000000000000000 softirq=21181/21181 fqs=0 
	(detected by 0, t=10502 jiffies, g=31713, q=172)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 1281 Comm: kworker/u4:6 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:match_held_lock+0x74/0xb0 kernel/locking/lockdep.c:-1
Code: ff 1f 00 00 48 c7 c1 80 1f 93 8f 48 29 c8 48 c1 f8 06 48 be ab aa aa aa aa aa aa aa 48 0f af f0 b9 01 00 00 00 48 39 d6 74 02 <31> c9 5b 89 c8 c3 e8 71 c7 35 fa 85 c0 74 f1 83 3d 6e 7c c7 03 00
RSP: 0018:ffffc90000dd0c28 EFLAGS: 00000083
RAX: 0000000000000004 RBX: ffff888022a5d940 RCX: 0000000000000001
RDX: 0000000000010000 RSI: ffff88802c18fb00 RDI: ffff888022a5e480
RBP: 00000000ffffffff R08: 0000000000000004 R09: 0000000000000003
R10: fffff520001ba180 R11: 1ffff920001ba180 R12: 0000000000000002
R13: 0000000000000046 R14: ffff88802c18fb00 R15: ffff888022a5e480
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000180 CR3: 00000000682f1000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __lock_is_held kernel/locking/lockdep.c:5366 [inline]
 lock_is_held_type+0xa6/0x190 kernel/locking/lockdep.c:5666
 lock_is_held include/linux/lockdep.h:287 [inline]
 advance_sched+0xd6/0x940 net/sched/sch_taprio.c:719
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x53d/0xc40 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:lock_acquire+0x1f2/0x3f0 kernel/locking/lockdep.c:5627
Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
RSP: 0018:ffffc90005187aa0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 95c11521a3280800
RDX: 0000000000000000 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800
RBP: ffffc90005187bc0 R08: dffffc0000000000 R09: fffffbfff1ff5419
R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffffffff8c11c720
R13: 1ffff92000a30f60 R14: 0000000000000246 R15: dffffc0000000000
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:313
 rcu_read_lock include/linux/rcupdate.h:740 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
 batadv_nc_worker+0xc9/0x5c0 net/batman-adv/network-coding.c:723
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g31713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=19191
rcu: rcu_preempt kthread starved for 10502 jiffies! g31713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27008 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1914
 rcu_gp_fqs_loop+0x29e/0x11b0 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0x98/0x350 kernel/rcu/tree.c:2145
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 1281 Comm: kworker/u4:6 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__lock_release kernel/locking/lockdep.c:5309 [inline]
RIP: 0010:lock_release+0x221/0x870 kernel/locking/lockdep.c:5643
Code: 44 89 7c 24 3c 44 89 fa 85 c0 0f 84 d2 01 00 00 4d 85 e4 0f 84 0b 03 00 00 4d 8d 74 24 24 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 94 04 00 00 41 83 3e 00 0f 85 ca 03 00 00 4d 8d 74 24
RSP: 0018:ffffc90000dd0b40 EFLAGS: 00000807
RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000001
RDX: 0000000000000003 RSI: ffff88802c18fb00 RDI: ffff888022a5e4a8
RBP: ffffc90000dd0c60 R08: dffffc0000000000 R09: fffffbfff1ad26b6
R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff888022a5e4a8
R13: dffffc0000000000 R14: ffff888022a5e4cc R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000180 CR3: 00000000682f1000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_unlock include/linux/spinlock_api_smp.h:150 [inline]
 _raw_spin_unlock+0x12/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:404 [inline]
 advance_sched+0x687/0x940 net/sched/sch_taprio.c:765
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x53d/0xc40 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:lock_acquire+0x1f2/0x3f0 kernel/locking/lockdep.c:5627
Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
RSP: 0018:ffffc90005187aa0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 95c11521a3280800
RDX: 0000000000000000 RSI: ffffffff8a0b2e80 RDI: ffffffff8a59e800
RBP: ffffc90005187bc0 R08: dffffc0000000000 R09: fffffbfff1ff5419
R10: fffffbfff1ff5419 R11: 1ffffffff1ff5418 R12: ffffffff8c11c720
R13: 1ffff92000a30f60 R14: 0000000000000246 R15: dffffc0000000000
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:313
 rcu_read_lock include/linux/rcupdate.h:740 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
 batadv_nc_worker+0xc9/0x5c0 net/batman-adv/network-coding.c:723
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
vkms_vblank_simulate: vblank timer overrun