rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6527/1:b..l P5219/2:b..l P5849/1:b..l P1166/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=11493, q=1016 ncpus=2)
task:kworker/u8:8 state:R running task stack:25656 pid:1166 tgid:1166 ppid:2 task_flags:0x4208060 flags:0x00004000
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1190/0x5de0 kernel/sched/core.c:6961
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
irqentry_exit+0x36/0x90 kernel/entry/common.c:197
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x1617/0x20a0 arch/x86/kernel/unwind_orc.c:665
Code: 80 3c 02 00 0f 84 cb f9 ff ff e8 c4 f1 b6 00 e9 c1 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 56 05 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc
RSP: 0018:ffffc900045dee38 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc900045e0000
RDX: 1ffff920008bbddc RSI: ffffc900045dfe50 RDI: ffffc900045deee8
RBP: ffff888142b0ac00 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000003 R11: 00000000000082fe R12: ffffc900045deef8
R13: ffffc900045deea8 R14: ffffc900045dfe80 R15: ffffc900045deedc
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_save_track+0x14/0x30 mm/kasan/common.c:68
poison_kmalloc_redzone mm/kasan/common.c:388 [inline]
__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:405
kasan_kmalloc include/linux/kasan.h:260 [inline]
__do_kmalloc_node mm/slub.c:4365 [inline]
__kmalloc_noprof+0x223/0x510 mm/slub.c:4377
kmalloc_noprof include/linux/slab.h:909 [inline]
kzalloc_noprof include/linux/slab.h:1039 [inline]
cfg80211_inform_single_bss_data+0x53e/0x1df0 net/wireless/scan.c:2351
cfg80211_inform_bss_data+0x224/0x3bd0 net/wireless/scan.c:3234
cfg80211_inform_bss_frame_data+0x26f/0x750 net/wireless/scan.c:3325
ieee80211_bss_info_update+0x310/0xab0 net/mac80211/scan.c:226
ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline]
ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 net/mac80211/ibss.c:1600
ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline]
ieee80211_iface_work+0xe2e/0x1360 net/mac80211/iface.c:1753
cfg80211_wiphy_work+0x2c7/0x580 net/wireless/core.c:435
process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236
process_scheduled_works kernel/workqueue.c:3319 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:udevd state:R running task stack:24728 pid:5849 tgid:5849 ppid:5219 task_flags:0x40014c flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1190/0x5de0 kernel/sched/core.c:6961
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
irqentry_exit+0x36/0x90 kernel/entry/common.c:197
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:__orc_find+0x97/0xf0 arch/x86/kernel/unwind_orc.c:109
Code: b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 <4d> 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b 5d 41
RSP: 0018:ffffc90002ec7678 EFLAGS: 00000297
RAX: ffffffff914f33ac RBX: ffffffff90c5e394 RCX: dffffc0000000000
RDX: ffffffff8221b4e2 RSI: 0000000000000000 RDI: ffffffff90c5e358
RBP: ffffffff90c5e398 R08: ffffffff914f340c R09: 0000000000000000
R10: 0000000000000000 R11: 00000000000121b4 R12: ffffffff90c5e394
R13: ffffffff8221b4f2 R14: ffffffff90c5e358 R15: ffffffff90c5e394
orc_find arch/x86/kernel/unwind_orc.c:227 [inline]
unwind_next_frame+0x2ec/0x20a0 arch/x86/kernel/unwind_orc.c:494
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
__call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3123
destroy_inode+0x12c/0x1b0 fs/inode.c:401
evict+0x5b4/0x920 fs/inode.c:834
iput_final fs/inode.c:1897 [inline]
iput fs/inode.c:1923 [inline]
iput+0x521/0x880 fs/inode.c:1909
dentry_unlink_inode+0x29c/0x480 fs/dcache.c:466
__dentry_kill+0x1d0/0x600 fs/dcache.c:669
dput.part.0+0x4b1/0x9b0 fs/dcache.c:911
dput+0x1f/0x30 fs/dcache.c:901
__fput+0x51c/0xb70 fs/file_table.c:476
task_work_run+0x150/0x240 kernel/task_work.c:227
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x86f/0x2bf0 kernel/exit.c:961
do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
__do_sys_exit_group kernel/exit.c:1113 [inline]
__se_sys_exit_group kernel/exit.c:1111 [inline]
__x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1111
x64_sys_call+0x14fa/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff27a0f16c5
RSP: 002b:00007fff8ee80e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000055d97d844d20 RCX: 00007ff27a0f16c5
RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000
RBP: 000055d97d5f42c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff8ee80ee0 R14: 0000000000000000 R15: 0000000000000000
task:udevd state:R running task stack:26336 pid:5219 tgid:5219 ppid:1 task_flags:0x400140 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1190/0x5de0 kernel/sched/core.c:6961
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:7145
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
_raw_spin_unlock_irqrestore+0x61/0x80 kernel/locking/spinlock.c:194
spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
unlock_task_sighand include/linux/sched/signal.h:752 [inline]
do_send_sig_info kernel/signal.c:1270 [inline]
group_send_sig_info+0x2d5/0x300 kernel/signal.c:1419
kill_pid_info_type+0x92/0x2a0 kernel/signal.c:1459
kill_pid_info kernel/signal.c:1473 [inline]
kill_proc_info+0x6f/0x1b0 kernel/signal.c:1480
kill_something_info+0x2a2/0x310 kernel/signal.c:1577
__do_sys_kill kernel/signal.c:3955 [inline]
__se_sys_kill kernel/signal.c:3949 [inline]
__x64_sys_kill+0xd7/0x140 kernel/signal.c:3949
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff27a05f357
RSP: 002b:00007fff8ee81028 EFLAGS: 00000297 ORIG_RAX: 000000000000003e
RAX: ffffffffffffffda RBX: 00007fff8ee81030 RCX: 00007ff27a05f357
RDX: 000055d97d83aae0 RSI: 000000000000000f RDI: 00000000000016d9
RBP: 0000000000000000 R08: 0000000000000010 R09: 000055d97d82a020
R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000
R13: 000055d97cbd2100 R14: 0000000000000000 R15: 0000000000000000
task:syz.3.153 state:R running task stack:25848 pid:6527 tgid:6523 ppid:5859 task_flags:0x40054c flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1190/0x5de0 kernel/sched/core.c:6961
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7288
irqentry_exit+0x36/0x90 kernel/entry/common.c:197
asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5872
Code: 67 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 6c 13 0f 0f 82 74 02 00 00 8b 35 2a 9e 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 66 3e 12 0f 85 c7 02 00 00 48 83 c4
RSP: 0018:ffffc90005c771a0 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e5c11e0 RCX: 00000000f9d20bc7
RDX: 0000000000000000 RSI: ffffffff8de29c00 RDI: ffffffff8c162400
RBP: 0000000000000002 R08: 3785cb76049c6930 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
rcu_read_lock include/linux/rcupdate.h:841 [inline]
class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x160/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x84/0x1a0 mm/page_owner.c:308
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1395 [inline]
free_unref_folios+0xa61/0x16b0 mm/page_alloc.c:2952
folios_put_refs+0x56f/0x740 mm/swap.c:997
free_pages_and_swap_cache+0x245/0x4a0 mm/swap_state.c:264
__tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136
tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
tlb_flush_mmu_free mm/mmu_gather.c:397 [inline]
tlb_flush_mmu mm/mmu_gather.c:404 [inline]
tlb_finish_mmu+0x168/0x7c0 mm/mmu_gather.c:497
exit_mmap+0x403/0xb90 mm/mmap.c:1293
__mmput+0x12a/0x410 kernel/fork.c:1130
mmput+0x62/0x70 kernel/fork.c:1152
exit_mm kernel/exit.c:582 [inline]
do_exit+0x7c7/0x2bf0 kernel/exit.c:949
do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
get_signal+0x2673/0x26d0 kernel/signal.c:3034
arch_do_signal_or_restart+0x8f/0x7d0 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop+0x84/0x110 kernel/entry/common.c:40
exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
do_syscall_64+0x3f6/0x4c0 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7ce5d8ebe9
RSP: 002b:00007f7ce6c4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f7ce5fb6098 RCX: 00007f7ce5d8ebe9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ce5fb6098
RBP: 00007f7ce5fb6090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7ce5fb6128 R14: 00007ffd87c9d510 R15: 00007ffd87c9d5f8
rcu: rcu_preempt kthread starved for 10335 jiffies! g11493 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1190/0x5de0 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0xe7/0x3a0 kernel/sched/core.c:7058
schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2285
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:82
Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
RAX: 0000000000383b93 RBX: 0000000000000001 RCX: ffffffff8b934c29
RDX: 0000000000000000 RSI: ffffffff8de4f0f5 RDI: ffffffff8c162400
RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655
R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001
R13: ffff88801e2ea440 R14: ffffffff90ab3590 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d97d822ff0 CR3: 0000000063627000 CR4: 00000000003526f0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
default_idle+0x13/0x20 arch/x86/kernel/process.c:757
default_idle_call+0x6d/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:190 [inline]
do_idle+0x391/0x510 kernel/sched/idle.c:330
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:428
start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:315
common_startup_64+0x13e/0x148