rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	0-...!: (1 GPs behind) idle=3574/1/0x4000000000000000 softirq=14848/14850 fqs=2
rcu: 	(detected by 1, t=10502 jiffies, g=14881, q=432 ncpus=2)
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
RIP: 0010:_raw_spin_lock_irqsave+0x28/0x60 kernel/locking/spinlock.c:166
Code: 90 90 f3 0f 1e fa 41 56 53 49 89 fe 9c 5b fa f7 c3 00 02 00 00 74 05 e8 46 73 22 f6 bf 01 00 00 00 e8 fc 59 e8 f5 49 8d 7e 18 <31> f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 10 e8 b0 36
RSP: 0018:ffffc90000007d68 EFLAGS: 00000002
RAX: 0000000000010003 RBX: 0000000000000082 RCX: ffffffff9a44c303
RDX: 0000000000010000 RSI: ffffffff8bcf52a0 RDI: ffffffff9a7139e0
RBP: ffff8880539f3300 R08: ffff8880539f3317 R09: ffff8880539f3308
R10: dffffc0000000000 R11: ffffed100a73e663 R12: ffff8880b8628280
R13: ffffffff9a7139c0 R14: ffffffff9a7139c8 R15: ffff8880539f3300
FS:  000055557dafc500(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fca7657f000 CR3: 000000005bb93000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 debug_object_deactivate+0x6c/0x3a0 lib/debugobjects.c:890
 debug_hrtimer_deactivate kernel/time/hrtimer.c:490 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1898 [inline]
 __hrtimer_run_queues+0x23a/0xa20 kernel/time/hrtimer.c:1994
 hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1061
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:198
Code: f7 e8 2d db f6 f5 f7 c3 00 02 00 00 74 05 e8 c0 6f 22 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e4 59 e8 f5 65 8b 05 0d e0 8d 07 85 c0 74 18 5b 41 5e e9 dc c0
RSP: 0018:ffffc9000302eae0 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000292 RCX: 0000000080000001
RDX: 0000000000000007 RSI: ffffffff8dfaa874 RDI: 0000000000000001
RBP: 0000000000000000 R08: ffffffff9030c1f7 R09: 1ffffffff206183e
R10: dffffc0000000000 R11: fffffbfff206183f R12: ffff888056a38be0
R13: ffff888056a38bd0 R14: ffffffff9a654e80 R15: 1ffff1100ad4717c
 debug_object_activate+0x320/0x580 lib/debugobjects.c:853
 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
 __call_rcu_common kernel/rcu/tree.c:3116 [inline]
 call_rcu+0x43/0x890 kernel/rcu/tree.c:3251
 __slab_free+0x274/0x2c0 mm/slub.c:5612
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4569 [inline]
 slab_alloc_node mm/slub.c:4898 [inline]
 __kmalloc_cache_noprof+0x2ba/0x660 mm/slub.c:5414
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 kset_create lib/kobject.c:965 [inline]
 kset_create_and_add+0x5a/0x170 lib/kobject.c:1008
 register_queue_kobjects net/core/net-sysfs.c:2091 [inline]
 netdev_register_kobject+0x1a2/0x310 net/core/net-sysfs.c:2347
 register_netdevice+0x1456/0x1ec0 net/core/dev.c:11423
 cfg80211_register_netdevice+0x138/0x2d0 net/wireless/core.c:1635
 ieee80211_if_add+0xeac/0x13d0 net/mac80211/iface.c:2417
 ieee80211_register_hw+0x3ebc/0x4a70 net/mac80211/main.c:1641
 mac80211_hwsim_new_radio+0x3335/0x5aa0 drivers/net/wireless/virtual/mac80211_hwsim.c:6019
 hwsim_new_radio_nl+0xf6a/0x1c00 drivers/net/wireless/virtual/mac80211_hwsim.c:6726
 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114
 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
 genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209
 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x75c/0x8e0 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:787 [inline]
 __sock_sendmsg net/socket.c:802 [inline]
 __sys_sendto+0x672/0x710 net/socket.c:2265
 __do_sys_sendto net/socket.c:2272 [inline]
 __se_sys_sendto net/socket.c:2268 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2268
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa498b5d68e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffc1073f6f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000055557dafc500 RCX: 00007fa498b5d68e
RDX: 0000000000000024 RSI: 00007fa499944670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007ffc1073f774 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 00007fa499944670 R15: 0000000000000000
 </TASK>
rcu: rcu_preempt kthread starved for 10498 jiffies! g14881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27544 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1821/0x5740 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7283
 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 3306 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:srso_alias_safe_ret+0x0/0x7 arch/x86/lib/retpoline.S:210
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc
RSP: 0018:ffffc9000ef876f0 EFLAGS: 00000293
RAX: ffffffff81b9c256 RBX: ffff8880b873c148 RCX: ffff8880331a0000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc9000ef87840 R08: ffffffff9030c1f7 R09: 1ffffffff206183e
R10: dffffc0000000000 R11: fffffbfff206183f R12: 1ffff110170c8589
R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c442e9d CR3: 000000000e74a000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 srso_alias_return_thunk+0x5/0xfbef5 arch/x86/lib/retpoline.S:220
 csd_lock_wait kernel/smp.c:342 [inline]
 smp_call_function_many_cond+0xfe6/0x13d0 kernel/smp.c:892
 on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1057
 on_each_cpu include/linux/smp.h:72 [inline]
 smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2773 [inline]
 smp_text_poke_batch_finish+0x5f5/0x1160 arch/x86/kernel/alternative.c:2983
 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
 static_key_enable_cpuslocked+0x128/0x240 kernel/jump_label.c:210
 static_key_enable+0x1a/0x20 kernel/jump_label.c:223
 toggle_allocation_gate+0xab/0x290 mm/kfence/core.c:906
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>