rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1018/1:b..l P8596/1:b..l P6217/1:b..l P11129/1:b..l P3431/1:b..l P145/1:b..l P11722/1:b..l P6370/1:b..l rcu: (detected by 0, t=10502 jiffies, g=58933, q=413 ncpus=2) task:kworker/u8:22 state:R running task stack:21728 pid:6370 tgid:6370 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x222/0x340 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 e0 d0 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ca 1f e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a 50 72 ff cc 48 8d 3d f7 78 e7 RSP: 0018:ffffc9000c976f58 EFLAGS: 00000282 RAX: 506dd64e2f1aa900 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 0000000048b932f7 RSI: ffffffff8d976a7d RDI: ffffffff8bc08660 RBP: ffffffff8173fd65 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 R10: dffffc0000000000 R11: ffffffff81acf460 R12: 0000000000000002 R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xc2/0x23d0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5657 [inline] __kmalloc_noprof+0x41d/0x800 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ieee802_11_parse_elems_full+0x152/0x2ab0 net/mac80211/parse.c:1031 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2469 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1571 [inline] ieee80211_ibss_rx_queued_mgmt+0x48e/0x2af0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:modprobe state:R running task stack:24312 pid:11722 tgid:11722 ppid:1933 task_flags:0x40000c flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_release+0x2d8/0x3b0 kernel/locking/lockdep.c:5893 Code: 33 e2 10 00 00 00 00 eb b5 e8 44 9f bb 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 34 ee e1 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 04 1f 72 ff cc 48 8d 3d d1 4a e7 RSP: 0018:ffffc9000480f3a0 EFLAGS: 00000286 RAX: ade451a356605900 RBX: 0000000000000202 RCX: 0000000000000046 RDX: 0000000000000001 RSI: ffffffff8d976a7d RDI: ffffffff8bc08660 RBP: ffff8880255029d8 R08: ffffc9000480f4f8 R09: ffffc9000480f558 R10: dffffc0000000000 R11: fffff52000901ead R12: 0000000000000001 R13: 0000000000000001 R14: ffffffff8df41aa0 R15: ffff888025501e80 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x1ab1/0x23d0 arch/x86/kernel/unwind_orc.c:695 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:773 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kmem_cache_free+0x197/0x620 mm/slub.c:6781 anon_vma_chain_free mm/rmap.c:146 [inline] unlink_anon_vmas+0x614/0x670 mm/rmap.c:446 free_pgtables+0x735/0x9d0 mm/memory.c:414 exit_mmap+0x431/0xb10 mm/mmap.c:1288 __mmput+0x118/0x430 kernel/fork.c:1173 exit_mm+0x169/0x230 kernel/exit.c:581 do_exit+0x627/0x22f0 kernel/exit.c:959 do_group_exit+0x21c/0x2d0 kernel/exit.c:1112 __do_sys_exit_group kernel/exit.c:1123 [inline] __se_sys_exit_group kernel/exit.c:1121 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121 x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f88550ba6c5 RSP: 002b:00007ffef81df8d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f88551bbfe8 RCX: 00007f88550ba6c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 RBP: 0000000000000001 R08: 00007ffef81df868 R09: 0000000000000000 R10: 00007ffef81df700 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000001 R14: 00007f88551ba680 R15: 00007f88551bc000 task:kworker/u8:5 state:R running task stack:22264 pid:145 tgid:145 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0x10e/0x23d0 include/linux/rcupdate.h:-1 Code: 1e f8 0d 00 75 1f c6 05 1f 1e f8 0d 01 48 c7 c7 00 91 68 8b be 65 03 00 00 48 c7 c2 40 91 68 8b e8 97 3a 2a 00 4c 89 6c 24 78 <48> 89 5c 24 70 4d 8d 6e 50 4c 89 e8 48 c1 e8 03 48 89 44 24 38 80 RSP: 0018:ffffc90002ee71d8 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff818c22a0 RCX: 0000000080000001 RDX: 0000000048b932f7 RSI: ffffffff8bc08640 RDI: ffffffff8bc08600 RBP: dffffc0000000000 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 R10: dffffc0000000000 R11: ffffffff81acf460 R12: 1ffff920005dce55 R13: ffffc90002ee72e0 R14: ffffc90002ee72a8 R15: ffffffff8173fd65 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kfree+0x1c0/0x660 mm/slub.c:6878 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1576 [inline] ieee80211_ibss_rx_queued_mgmt+0x1206/0x2af0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/u8:9 state:R running task stack:22104 pid:3431 tgid:3431 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x222/0x340 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 e0 d0 bb 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ca 1f e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a 50 72 ff cc 48 8d 3d f7 78 e7 RSP: 0018:ffffc9000b997338 EFLAGS: 00000282 RAX: 3c61d231f3db0c00 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 00000000e6b338fc RSI: ffffffff8d976a7d RDI: ffffffff8bc08660 RBP: ffffffff8173fd65 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 R10: dffffc0000000000 R11: ffffffff81acf460 R12: 0000000000000002 R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xc2/0x23d0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free_freelist_hook mm/slub.c:2569 [inline] slab_free_bulk mm/slub.c:6703 [inline] kmem_cache_free_bulk+0x3fb/0xdb0 mm/slub.c:7390 kfree_bulk include/linux/slab.h:830 [inline] kvfree_rcu_bulk+0xe5/0x1f0 mm/slab_common.c:1523 kvfree_rcu_drain_ready mm/slab_common.c:1728 [inline] kfree_rcu_monitor+0x211/0x2a0 mm/slab_common.c:1801 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz-executor state:R running task stack:24312 pid:11129 tgid:11129 ppid:5809 task_flags:0x40010c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_release+0x80/0x3b0 kernel/locking/lockdep.c:5881 Code: 35 e4 0d 00 0f 84 1d 02 00 00 65 8b 05 29 36 e2 10 85 c0 0f 85 0e 02 00 00 65 4c 8b 3c 25 08 10 80 92 41 83 bf 2c 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e c0 c3 43 93 0f 84 ea 01 00 00 9c 5b fa RSP: 0018:ffffc90003b6f6d0 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff9014d601 RCX: 0000000080000001 RDX: ffffc90003b6f801 RSI: ffffffff8bc08640 RDI: ffffffff8bc08600 RBP: dffffc0000000000 R08: ffffc90003b6f8f0 R09: ffffc90003b6f8b8 R10: dffffc0000000000 R11: fffff5200076df19 R12: ffffc90003b6f900 R13: ffffffff8173fd65 R14: ffffffff8df41aa0 R15: ffff88803121db80 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x1ab1/0x23d0 arch/x86/kernel/unwind_orc.c:695 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:773 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0xbc8/0xd30 mm/page_alloc.c:2943 vfree+0x25a/0x400 mm/vmalloc.c:3466 kcov_put kernel/kcov.c:439 [inline] kcov_close+0x28/0x50 kernel/kcov.c:535 __fput+0x44c/0xa70 fs/file_table.c:468 task_work_run+0x1d4/0x260 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x694/0x22f0 kernel/exit.c:971 do_group_exit+0x21c/0x2d0 kernel/exit.c:1112 __do_sys_exit_group kernel/exit.c:1123 [inline] __se_sys_exit_group kernel/exit.c:1121 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1121 x64_sys_call+0x2210/0x2210 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xec/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f02a498f749 RSP: 002b:00007ffce4504f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f02a498f749 RDX: 00007f02a498e1c0 RSI: 0000000000000004 RDI: 0000000000000001 RBP: 00007f02a4be67b8 R08: 00007ffce4502d17 R09: 0000000000000008 R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffce4505268 R15: 0000000000000000 task:kworker/u8:20 state:R running task stack:23224 pid:6217 tgid:6217 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:-1 [inline] RIP: 0010:stack_access_ok arch/x86/kernel/unwind_orc.c:409 [inline] RIP: 0010:deref_stack_reg+0x4f/0x230 arch/x86/kernel/unwind_orc.c:419 Code: 5f 08 49 89 dc 49 c1 ec 03 41 80 3c 34 00 4c 89 04 24 74 16 48 89 df e8 6f f7 b2 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df <48> 89 5c 24 10 49 8b 5f 08 4d 8d 77 10 4d 89 f5 49 c1 ed 03 41 80 RSP: 0018:ffffc9000b66f420 EFLAGS: 00000246 RAX: fffffffffffffff0 RBX: ffffc9000b66f5b0 RCX: 0000000000000000 RDX: ffffc9000b66f5e8 RSI: dffffc0000000000 RDI: ffffc9000b66f5a8 RBP: dffffc0000000000 R08: ffffc9000b66f598 R09: ffffc9000b66f5f8 R10: dffffc0000000000 R11: fffff520016cdec1 R12: 1ffff920016cdeb6 R13: 1ffff920016cdeb7 R14: ffffc9000b66f5a8 R15: ffffc9000b66f5a8 unwind_next_frame+0x18cc/0x23d0 arch/x86/kernel/unwind_orc.c:-1 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:773 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kmem_cache_free+0x197/0x620 mm/slub.c:6781 kfree_skb_reason include/linux/skbuff.h:1322 [inline] kfree_skb include/linux/skbuff.h:1331 [inline] ieee80211_iface_work+0xb2a/0x12d0 net/mac80211/iface.c:1792 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/u8:25 state:R running task stack:21144 pid:8596 tgid:8596 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_release+0x2d8/0x3b0 kernel/locking/lockdep.c:5893 Code: 33 e2 10 00 00 00 00 eb b5 e8 44 9f bb 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 34 ee e1 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 04 1f 72 ff cc 48 8d 3d d1 4a e7 RSP: 0018:ffffc9000c8bef60 EFLAGS: 00000286 RAX: 38b505ecc2ce8a00 RBX: 0000000000000202 RCX: 0000000000000046 RDX: 0000000000000003 RSI: ffffffff8d976a7d RDI: ffffffff8bc08660 RBP: ffff888026848ba8 R08: ffffc9000c8bf470 R09: ffffc9000c8bf0b8 R10: dffffc0000000000 R11: fffff52001917e19 R12: 0000000000000003 R13: 0000000000000003 R14: ffffffff8df41aa0 R15: ffff888026848000 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x1ab1/0x23d0 arch/x86/kernel/unwind_orc.c:695 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5657 [inline] __kmalloc_noprof+0x41d/0x800 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] ieee802_11_parse_elems_full+0x152/0x2ab0 net/mac80211/parse.c:1031 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2469 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1571 [inline] ieee80211_ibss_rx_queued_mgmt+0x48e/0x2af0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/u8:6 state:R running task stack:21144 pid:1018 tgid:1018 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0x18cc/0x23d0 arch/x86/kernel/unwind_orc.c:-1 Code: 30 0a 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 43 0a 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 84 0d 00 00 <84> c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 RSP: 0018:ffffc9000379f4d8 EFLAGS: 00000286 RAX: 1ffff920006f3e01 RBX: ffffffff90176520 RCX: 0000000000000001 RDX: ffffc9000379f5e8 RSI: dffffc0000000000 RDI: ffffc9000379fe70 RBP: dffffc0000000000 R08: ffffc9000379fe70 R09: ffffc9000379f5f8 R10: dffffc0000000000 R11: fffff520006f3ec1 R12: ffffc9000379f5f8 R13: 1ffff920006f3eb7 R14: ffffc9000379f5a8 R15: 1ffffffff202eca4 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6670 [inline] kmem_cache_free+0x197/0x620 mm/slub.c:6781 kfree_skb_reason include/linux/skbuff.h:1322 [inline] kfree_skb include/linux/skbuff.h:1331 [inline] ieee80211_iface_work+0xb2a/0x12d0 net/mac80211/iface.c:1792 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/0:16 state:R running task stack:24504 pid:7349 tgid:7349 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient gc_worker Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7190 irqentry_exit+0x5e3/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 include/linux/seqlock.h:75 Code: 00 75 11 e8 45 89 3e f8 4d 85 f6 75 16 e8 3b 89 3e f8 eb 15 e8 34 89 3e f8 e8 0f 52 d7 01 4d 85 f6 74 ea e8 25 89 3e f8 fb 5b <41> 5e e9 e7 d1 8d f7 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 RSP: 0018:ffffc90004acf910 EFLAGS: 00000293 RAX: ffffffff89826f1b RBX: 0000000000000001 RCX: ffff888076c41e80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90004acfa70 R08: ffffffff8f822477 R09: 1ffffffff1f0448e R10: dffffc0000000000 R11: fffffbfff1f0448f R12: 1ffff110060ac159 R13: 0000000000000bb3 R14: 0000000000000200 R15: 0000000000040000 nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:342 [inline] gc_worker+0x308/0x1380 net/netfilter/nf_conntrack_core.c:1548 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 rcu: rcu_preempt kthread starved for 10882 jiffies! g58933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27576 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x149b/0x4fd0 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0x165/0x360 kernel/sched/core.c:6960 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: 1e 84 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 91 0e 00 f3 0f 1e fa fb f4 f3 83 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6 RAX: 0000000002bbc779 RBX: ffffffff8197142e RCX: 0000000080000001 RDX: 0000000000000001 RSI: ffffffff8d792d26 RDI: ffffffff8bc08660 RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822470 R13: 1ffff110038d2b70 R14: 0000000000000001 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f88550ba6b0 CR3: 00000000800e8000 CR4: 0000000000350ef0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1be/0x4d0 kernel/sched/idle.c:332 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x147