hrtimer: interrupt took 14460863 ns
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 1, t=10502 jiffies, g=92257, q=957 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 10429 (4295016202-4295005773), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 10429 jiffies! g92257 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26448 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5408 [inline]
 __schedule+0x17e8/0x4a20 kernel/sched/core.c:6745
 __schedule_loop kernel/sched/core.c:6822 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6837
 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2000
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2202
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 15931 Comm: syz-executor.5 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 6e c3 6a f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> c3 77 d4 f5 65 8b 05 f4 c1 72 74 85 c0 74 43 48 c7 04 24 0e 36
RSP: 0018:ffffc90000a17d00 EFLAGS: 00000206
RAX: 09e2c5f19d01f800 RBX: 1ffff92000142fa4 RCX: ffffffff8172c78a
RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: 0000000000000001
RBP: ffffc90000a17d90 R08: ffffffff92fa863f R09: 1ffffffff25f50c7
R10: dffffc0000000000 R11: fffffbfff25f50c8 R12: dffffc0000000000
R13: 1ffff92000142fa0 R14: ffffc90000a17d20 R15: 0000000000000246
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc04bd19d58 CR3: 000000000e132000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline]
 debug_check_no_obj_freed+0x561/0x580 lib/debugobjects.c:1019
 slab_free_hook mm/slub.c:2162 [inline]
 slab_free mm/slub.c:4436 [inline]
 kfree+0x10f/0x360 mm/slub.c:4557
 ieee80211_inform_bss+0xbb2/0x1080 net/mac80211/scan.c:160
 rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
 cfg80211_inform_single_bss_data+0x104b/0x2330 net/wireless/scan.c:2277
 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3101
 cfg80211_inform_bss_frame_data+0x3bc/0x720 net/wireless/scan.c:3191
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5222 [inline]
 ieee80211_rx_list+0x2b00/0x3780 net/mac80211/rx.c:5459
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5482
 ieee80211_rx include/net/mac80211.h:5093 [inline]
 ieee80211_tasklet_handler+0xeb/0x1f0 net/mac80211/main.c:438
 tasklet_action_common+0x323/0x4d0 kernel/softirq.c:785
 handle_softirqs+0x2c6/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 kernel/kcov.c:310
Code: 10 48 89 74 0a 18 4c 89 44 0a 20 e9 c5 25 1a 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 00 d5 03 00 65 8b 05 90 b9
RSP: 0018:ffffc90004d9f4b8 EFLAGS: 00000293
RAX: ffffffff81423a81 RBX: 0000000000000000 RCX: ffff888064141e00
RDX: 0000000000000000 RSI: ffff888060299000 RDI: ffffffff7fffffff
RBP: ffff888060299000 R08: 0000000000000001 R09: ffffffff81fbe553
R10: dffffc0000000000 R11: fffffbfff25f50b6 R12: ffff888060299000
R13: ffffea0000000000 R14: ffff888060299000 R15: 0000000000000000
 __phys_addr+0x23/0x170 arch/x86/mm/physaddr.c:20
 virt_to_folio include/linux/mm.h:1313 [inline]
 virt_to_slab mm/kasan/../slab.h:204 [inline]
 qlink_to_cache mm/kasan/quarantine.c:131 [inline]
 qlist_free_all+0x3e/0x140 mm/kasan/quarantine.c:176
 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:378
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 __do_kmalloc_node mm/slub.c:4121 [inline]
 __kmalloc_noprof+0x1f9/0x400 mm/slub.c:4134
 kmalloc_noprof include/linux/slab.h:664 [inline]
 kzalloc_noprof include/linux/slab.h:778 [inline]
 kobject_get_path+0xb8/0x230 lib/kobject.c:161
 kobject_uevent_env+0x2a5/0x8e0 lib/kobject_uevent.c:530
 device_del+0x7db/0x9b0 drivers/base/core.c:3928
 device_unregister+0x20/0xc0 drivers/base/core.c:3951
 hci_conn_cleanup net/bluetooth/hci_conn.c:176 [inline]
 hci_conn_del+0x8c4/0xc40 net/bluetooth/hci_conn.c:1154
 hci_conn_hash_flush+0x18e/0x240 net/bluetooth/hci_conn.c:2585
 hci_dev_close_sync+0x911/0xf60 net/bluetooth/hci_sync.c:5062
 hci_dev_do_close net/bluetooth/hci_core.c:556 [inline]
 hci_unregister_dev+0x1db/0x4e0 net/bluetooth/hci_core.c:2760
 vhci_release+0x83/0xd0 drivers/bluetooth/hci_vhci.c:666
 __fput+0x408/0x8b0 fs/file_table.c:422
 task_work_run+0x251/0x310 kernel/task_work.c:180
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa27/0x27e0 kernel/exit.c:874
 do_group_exit+0x207/0x2c0 kernel/exit.c:1023
 get_signal+0x16a1/0x1740 kernel/signal.c:2909
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc04b0a8cd9
Code: Unable to access opcode bytes at 0x7fc04b0a8caf.
RSP: 002b:00007ffc188af978 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
RAX: fffffffffffffffc RBX: 00007fc04b0513a0 RCX: 00007fc04b0a8cd9
RDX: 00007fc04b0513a0 RSI: 0000000000000058 RDI: 00007ffc188af9c0
RBP: 00007fc04bd196c0 R08: 00007fc04bd196c0 R09: 00007ffc188afaa7
R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffb0
R13: 000000000000006e R14: 00007ffc188af9c0 R15: 00007ffc188afaa8
 </TASK>