rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3488/2:b..l P3537/1:b..l rcu: (detected by 0, t=10502 jiffies, g=13869, q=629 ncpus=2) task:kworker/u8:10 state:R running task stack:24408 pid:3537 tgid:3537 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7193 irqentry_exit+0x5d8/0x660 kernel/entry/common.c:216 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:rcu_is_watching+0x0/0xb0 kernel/rcu/tree.c:747 Code: c7 c7 20 42 14 8e e8 2f 65 21 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 90 18 f8 10 e8 7b 36 b6 09 89 RSP: 0018:ffffc9000c597170 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff90347401 RCX: ffff888031179e80 RDX: ffffc9000c597201 RSI: dffffc0000000000 RDI: ffffc9000c5972b0 RBP: dffffc0000000000 R08: ffffc9000c597330 R09: 0000000000000000 R10: ffffc9000c5972f8 R11: fffff520018b2e61 R12: ffffc9000c597340 R13: ffffc9000c590000 R14: ffffc9000c5972a8 R15: ffffffff81742f85 rcu_read_unlock include/linux/rcupdate.h:895 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x1a6d/0x23d0 arch/x86/kernel/unwind_orc.c:695 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:773 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6674 [inline] kfree+0x1c0/0x660 mm/slub.c:6882 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1576 [inline] ieee80211_ibss_rx_queued_mgmt+0x1206/0x2af0 net/mac80211/ibss.c:1602 ieee80211_iface_process_skb net/mac80211/iface.c:1736 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1790 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438 process_one_work+0x93a/0x15a0 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0x9b0/0xee0 kernel/workqueue.c:3443 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/u8:9 state:R running task stack:24920 pid:3488 tgid:3488 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound linkwatch_event Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7193 irqentry_exit+0x5d8/0x660 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:deref_stack_reg+0x1cd/0x230 arch/x86/kernel/unwind_orc.c:424 Code: 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e3 0a b4 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 17 45 ec 09 cc 44 89 f9 80 e1 07 80 c1 03 RSP: 0018:ffffc9000bf06c10 EFLAGS: 00000286 RAX: 1ffff920017e0d01 RBX: ffffffff9036eee6 RCX: 0000000000000001 RDX: ffffc9000bf06d48 RSI: dffffc0000000000 RDI: ffffc9000bf07e30 RBP: 1ffff920017e0da1 R08: ffffc9000bf07e30 R09: 0000000000000000 R10: ffffc9000bf06d58 R11: fffff520017e0dad R12: ffffc9000bf06d58 R13: 1ffff920017e0da3 R14: ffffc9000bf07f38 R15: dffffc0000000000 unwind_next_frame+0x18cc/0x23d0 arch/x86/kernel/unwind_orc.c:-1 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_netdev_trace_buffer+0xd7/0x5a0 net/core/dev.c:13435 __dev_hold include/linux/netdevice.h:4400 [inline] netdev_hold include/linux/netdevice.h:4443 [inline] dev_hold include/linux/netdevice.h:4466 [inline] dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:983 netdev_get_by_index+0x25/0xb0 net/core/dev.c:1006 fib6_nh_init+0x1cd/0x2020 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x16a/0xab0 net/ipv6/route.c:3890 ip6_route_add+0x6e/0x1b0 net/ipv6/route.c:3942 addrconf_add_mroute net/ipv6/addrconf.c:2552 [inline] addrconf_add_dev+0x23f/0x320 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3479 [inline] addrconf_init_auto_addrs+0x511/0xa00 net/ipv6/addrconf.c:3567 addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3740 notifier_call_chain+0x19d/0x3a0 kernel/notifier.c:85 netif_state_change+0x26f/0x380 net/core/dev.c:1584 linkwatch_do_dev+0x124/0x180 net/core/link_watch.c:186 __linkwatch_run_queue+0x56a/0x7e0 net/core/link_watch.c:244 linkwatch_event+0x4c/0x60 net/core/link_watch.c:304 process_one_work+0x93a/0x15a0 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0x9b0/0xee0 kernel/workqueue.c:3443 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 rcu: rcu_preempt kthread starved for 10597 jiffies! g13869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 __schedule_loop kernel/sched/core.c:6948 [inline] schedule+0x165/0x360 kernel/sched/core.c:6963 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 9e 2a 00 f3 0f 1e fa fb f4 48 ee 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 RAX: 524b4c9621c6ea00 RBX: ffffffff819786ba RCX: 524b4c9621c6ea00 RDX: 0000000000000001 RSI: ffffffff8d997e54 RDI: ffffffff8be07960 RBP: ffffffff8de07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fa22f70 R13: 1ffffffff1bd29b8 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31763fff CR3: 0000000075b42000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1ea/0x520 kernel/sched/idle.c:332 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:430 rest_init+0x2de/0x300 init/main.c:758 start_kernel+0x3ac/0x400 init/main.c:1208 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147