rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 1-...!: (3 ticks this GP) idle=e3bc/1/0x4000000000000000 softirq=19374/19374 fqs=0
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P37/1:b..l
rcu: (detected by 0, t=10504 jiffies, g=13697, q=1348 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 kernel/kcov.c:300
Code: 20 c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 c0 a0 92 65 8b 0d c8 0e e1 10 81 e1 00 01 ff 00
RSP: 0018:ffffc90000a08d38 EFLAGS: 00000046
RAX: ffffffff81adb4ca RBX: ffff8880b8727c48 RCX: dffffc0000000000
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000a08e90 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffff888028c63340
R13: 0000000000000000 R14: ffffffff899b2b30 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffcc6488f19 CR3: 0000000031d3c000 CR4: 00000000003526f0
Call Trace:
__run_hrtimer kernel/time/hrtimer.c:1759 [inline]
__hrtimer_run_queues+0x4ca/0xc60 kernel/time/hrtimer.c:1825
hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
__sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194
Code: 74 05 e8 8b 29 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 ce 12 f6 65 8b 05 6c 91 23 07 85 c0 74 40 48 c7 04 24 0e 36
RSP: 0018:ffffc90000116c60 EFLAGS: 00000206
RAX: a0ce4467be404500 RBX: 0000000000000a02 RCX: a0ce4467be404500
RDX: 0000000000000002 RSI: ffffffff8d9b9a1a RDI: 0000000000000001
RBP: ffffc90000116ce0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: dffffc0000000000
R13: ffff888026e8ac00 R14: ffffffff99d365b8 R15: 1ffff92000022d8c
__debug_check_no_obj_freed lib/debugobjects.c:1108 [inline]
debug_check_no_obj_freed+0x451/0x470 lib/debugobjects.c:1129
slab_free_hook mm/slub.c:2353 [inline]
slab_free mm/slub.c:4695 [inline]
kfree+0x112/0x440 mm/slub.c:4894
ieee80211_inform_bss+0xbd9/0x10a0 net/mac80211/scan.c:160
rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
cfg80211_inform_single_bss_data+0xd02/0x1ac0 net/wireless/scan.c:2380
cfg80211_inform_bss_data+0x1fb/0x3b30 net/wireless/scan.c:3235
cfg80211_inform_bss_frame_data+0x3d7/0x730 net/wireless/scan.c:3326
ieee80211_bss_info_update+0x746/0x9e0 net/mac80211/scan.c:226
ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline]
ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 net/mac80211/ibss.c:1600
ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline]
ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1753
cfg80211_wiphy_work+0x2b8/0x470 net/wireless/core.c:435
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:kworker/u8:3 state:R running task stack:20968 pid:37 tgid:37 ppid:2 task_flags:0x4208160 flags:0x00004000
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288
irqentry_exit+0x6f/0x90 kernel/entry/common.c:197
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:__read_once_word_nocheck+0x0/0x10 include/asm-generic/rwonce.h:67
Code: e8 05 32 b0 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90
RSP: 0018:ffffc90000ad6f78 EFLAGS: 00000202
RAX: ffffc90000ad7901 RBX: ffffc90000ad0000 RCX: 0000000000000001
RDX: ffffc90000ad70e8 RSI: dffffc0000000000 RDI: ffffc90000ad79a0
RBP: 1ffff9200015ae15 R08: ffffc90000ad79a0 R09: 0000000000000000
R10: ffffc90000ad70f8 R11: fffff5200015ae21 R12: 1ffff9200015ae16
R13: 1ffff9200015ae17 R14: ffffc90000ad8000 R15: dffffc0000000000
deref_stack_reg+0x19f/0x230 arch/x86/kernel/unwind_orc.c:406
unwind_next_frame+0x17c4/0x2390 arch/x86/kernel/unwind_orc.c:-1
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3e/0x80 mm/kasan/common.c:68
poison_kmalloc_redzone mm/kasan/common.c:388 [inline]
__kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:405
kasan_kmalloc include/linux/kasan.h:260 [inline]
__do_kmalloc_node mm/slub.c:4376 [inline]
__kmalloc_noprof+0x27a/0x4f0 mm/slub.c:4388
kmalloc_noprof include/linux/slab.h:909 [inline]
kzalloc_noprof include/linux/slab.h:1039 [inline]
ieee802_11_parse_elems_full+0x152/0x2ab0 net/mac80211/parse.c:1011
ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2462 [inline]
ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2469 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1569 [inline]
ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 net/mac80211/ibss.c:1600
ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline]
ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1753
cfg80211_wiphy_work+0x2b8/0x470 net/wireless/core.c:435
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: rcu_preempt kthread timer wakeup didn't happen for 10503 jiffies! g13697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
rcu: Possible timer handling issue on cpu=1 timer-softirq=4628
rcu: rcu_preempt kthread starved for 10504 jiffies! g13697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:I stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245