rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3439/1:b..l P5811/1:b..l P13/1:b..l
rcu: (detected by 1, t=10503 jiffies, g=8993, q=1950 ncpus=2)
task:kworker/u8:1 state:R running task stack:24552 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190
irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x62/0x330 kernel/locking/lockdep.c:5872
Code: b3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 b1 ee 0e 0f 82 74 02 00 00 8b 35 ea e1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 b3 18 12 0f 85 ad 02 00 00 48 83 c4
RSP: 0000:ffffc90000126d10 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000a87c6b66
RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400
RBP: 0000000000000002 R08: 0000000047cad266 R09: 00000000647cad26
R10: 0000000000000002 R11: ffff88801d6f8b30 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
rcu_read_lock include/linux/rcupdate.h:867 [inline]
class_rcu_constructor include/linux/rcupdate.h:1195 [inline]
unwind_next_frame+0xd1/0x20b0 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
kasan_kmalloc include/linux/kasan.h:263 [inline]
__do_kmalloc_node mm/slub.c:5657 [inline]
__kmalloc_noprof+0x33d/0x910 mm/slub.c:5669
kmalloc_noprof include/linux/slab.h:961 [inline]
kzalloc_noprof include/linux/slab.h:1094 [inline]
cfg80211_inform_single_bss_data+0x542/0x1d30 net/wireless/scan.c:2345
cfg80211_inform_bss_data+0x22b/0x3be0 net/wireless/scan.c:3228
cfg80211_inform_bss_frame_data+0x26f/0x720 net/wireless/scan.c:3319
ieee80211_bss_info_update+0x310/0xab0 net/mac80211/scan.c:230
ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1575 [inline]
ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 net/mac80211/ibss.c:1602
ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline]
ieee80211_iface_work+0xe28/0x1350 net/mac80211/iface.c:1790
cfg80211_wiphy_work+0x3fb/0x560 net/wireless/core.c:438
process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
process_scheduled_works kernel/workqueue.c:3340 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
task:syz-executor state:R running task stack:22952 pid:5811 tgid:5811 ppid:5806 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190
irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lockref_put_return+0x0/0x20 lib/lockref.c:91
Code: 16 9c d1 06 44 89 e0 5b 5d 41 5c c3 cc cc cc cc e8 d5 39 7f fd eb bc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa e8 f7 61 15 fd b8 ff ff ff ff e9 bd e9 d1 06 66 66 2e
RSP: 0018:ffffc90002eb7db8 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff8880564908d0 RCX: ffffffff824367e9
RDX: ffff88807b66a4c0 RSI: ffffffff8243656a RDI: ffff888056490988
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: ffff88807b66aff0 R12: ffff888056490988
R13: 0000000000000003 R14: 000000000000c000 R15: ffff8880564de280
fast_dput fs/dcache.c:820 [inline]
dput.part.0+0x79/0x570 fs/dcache.c:924
dput+0x1f/0x30 fs/dcache.c:920
__fput+0x51c/0xb70 fs/file_table.c:476
fput_close_sync+0x118/0x260 fs/file_table.c:573
__do_sys_close fs/open.c:1573 [inline]
__se_sys_close fs/open.c:1558 [inline]
__x64_sys_close+0x8b/0x120 fs/open.c:1558
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6c3918e3aa
RSP: 002b:00007fff24831e80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6c3918e3aa
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fff24831edc R08: 00000000000003b8 R09: 0079746972756365
R10: 00007f6c393b7800 R11: 0000000000000293 R12: 0000000000000007
R13: 00000000000927c0 R14: 00000000000146a6 R15: 00007fff24831f30
task:kworker/u8:12 state:R running task stack:26216 pid:3439 tgid:3439 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: iou_exit io_ring_exit_work
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190
irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x62/0x330 kernel/locking/lockdep.c:5872
Code: b3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 b1 ee 0e 0f 82 74 02 00 00 8b 35 ea e1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 b3 18 12 0f 85 ad 02 00 00 48 83 c4
RSP: 0000:ffffc9000caf7868 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000e7de1246
RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400
RBP: 0000000000000002 R08: 000000009bec8dc8 R09: 0000000089bec8dc
R10: 0000000000000002 R11: ffff888032788b30 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
rcu_read_lock include/linux/rcupdate.h:867 [inline]
percpu_ref_put_many include/linux/percpu-refcount.h:330 [inline]
percpu_ref_put include/linux/percpu-refcount.h:351 [inline]
obj_cgroup_put include/linux/memcontrol.h:793 [inline]
obj_cgroup_put include/linux/memcontrol.h:790 [inline]
__memcg_slab_free_hook+0x2e5/0x590 mm/memcontrol.c:3241
memcg_slab_free_hook mm/slub.c:2364 [inline]
slab_free mm/slub.c:6667 [inline]
kmem_cache_free+0x52d/0x770 mm/slub.c:6781
__io_req_caches_free+0x19e/0x5c0 io_uring/io_uring.c:2827
io_req_caches_free io_uring/io_uring.c:2839 [inline]
io_ring_exit_work+0x33c/0x1170 io_uring/io_uring.c:3025
process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257
process_scheduled_works kernel/workqueue.c:3340 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
rcu: rcu_preempt kthread starved for 10607 jiffies! g8993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x1139/0x6150 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0xe7/0x3a0 kernel/sched/core.c:6960
schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1ea/0xaf0 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x26d/0x380 kernel/rcu/tree.c:2285
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
RAX: 0000000000c741a1 RBX: 0000000000000001 RCX: ffffffff8b7866d9
RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400
RBP: ffffed1003b59498 R08: 0000000000000001 R09: ffffed10170a673d
R10: ffff8880b85339eb R11: ffff88801dacaff0 R12: 0000000000000001
R13: ffff88801daca4c0 R14: ffffffff9088bdd0 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000004d000 CR3: 000000003415d000 CR4: 00000000003526f0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
default_idle+0x13/0x20 arch/x86/kernel/process.c:767
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:191 [inline]
do_idle+0x38d/0x510 kernel/sched/idle.c:332
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x148