rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6036/1:b..l P7603/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=30089, q=469 ncpus=2)
task:syz.2.558       state:R  running task     stack:23096 pid:7603  tgid:7601  ppid:6580   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_release+0x5/0xa30 kernel/locking/lockdep.c:5767
Code: 8f e8 2f b5 87 00 e9 f1 f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 00
RSP: 0018:ffffc9000cd2eea8 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffff88807d8ec010 RCX: ffff888066ab3c00
RDX: dffffc0000000000 RSI: ffffffff820071f9 RDI: ffffffff8e738320
RBP: ffffc9000cd2ef98 R08: ffffffff934f4847 R09: 1ffffffff269e908
R10: dffffc0000000000 R11: fffffbfff269e909 R12: dffffc0000000000
R13: ffffea000172fb40 R14: 0000000000000001 R15: ffffffff820071f9
 rcu_lock_release include/linux/rcupdate.h:336 [inline]
 rcu_read_unlock include/linux/rcupdate.h:869 [inline]
 percpu_ref_get_many+0xfa/0x140 include/linux/percpu-refcount.h:209
 percpu_ref_get include/linux/percpu-refcount.h:222 [inline]
 css_get include/linux/cgroup_refcnt.h:11 [inline]
 mem_cgroup_commit_charge+0xa0/0x380 mm/memcontrol.c:2389
 charge_memcg+0xb1/0x160 mm/memcontrol.c:4443
 __mem_cgroup_charge+0x27/0x80 mm/memcontrol.c:4454
 mem_cgroup_charge include/linux/memcontrol.h:672 [inline]
 folio_prealloc+0x52/0x170 mm/memory.c:1068
 wp_page_copy mm/memory.c:3335 [inline]
 do_wp_page+0x11cc/0x52f0 mm/memory.c:3727
 handle_pte_fault+0x115a/0x6fc0 mm/memory.c:5537
 __handle_mm_fault mm/memory.c:5664 [inline]
 handle_mm_fault+0xf70/0x1880 mm/memory.c:5832
 do_user_addr_fault arch/x86/mm/fault.c:1389 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x2b9/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:__put_user_nocheck_4+0x7/0x20 arch/x86/lib/putuser.S:97
Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc9000cd2f8f8 EFLAGS: 00050202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000002003b030
RDX: ffff888066ab3c00 RSI: 0000000000000002 RDI: 00000000ffffffff
RBP: ffffc9000cd2fa70 R08: ffffffff8971c563 R09: 1ffff920019a5ed0
R10: dffffc0000000000 R11: fffff520019a5ed1 R12: dffffc0000000000
R13: 0000000000000002 R14: 0000000000000000 R15: 000000002003b000
 ____sys_recvmsg+0x2b9/0x470 net/socket.c:2829
 ___sys_recvmsg net/socket.c:2858 [inline]
 do_recvmmsg+0x474/0xae0 net/socket.c:2952
 __sys_recvmmsg net/socket.c:3031 [inline]
 __do_sys_recvmmsg net/socket.c:3054 [inline]
 __se_sys_recvmmsg net/socket.c:3047 [inline]
 __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3047
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9c7a579e79
RSP: 002b:00007f9c7b2d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f9c7a716058 RCX: 00007f9c7a579e79
RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
RBP: 00007f9c7a5e793e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f9c7a716058 R15: 00007ffead541408
 </TASK>
task:kworker/u8:14   state:R  running task     stack:21008 pid:6036  tgid:6036  ppid:2      flags:0x00004000
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x17ae/0x4a10 kernel/sched/core.c:6529
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:ieee80211_sta_get_rates+0x385/0x660 net/mac80211/util.c:1559
Code: 00 fc ff df 42 0f b6 04 20 84 c0 0f 85 d9 00 00 00 0f b7 1b 8b 6c 24 48 89 ef 89 de e8 84 ed 68 f6 39 dd 4c 8b 74 24 28 75 5e <bf> 40 00 00 00 44 89 fe e8 ee ef 68 f6 41 83 ff 3f 0f 87 e2 00 00
RSP: 0018:ffffc90017117798 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 000000000000021c RCX: dffffc0000000000
RDX: ffff888029649e00 RSI: 000000000000021c RDI: 000000000000021c
RBP: 000000000000021c R08: ffffffff8b2aa1bc R09: 1ffffffff1fed90d
R10: dffffc0000000000 R11: fffffbfff1fed90e R12: dffffc0000000000
R13: 0000000000000021 R14: ffff88801e9730d0 R15: 000000000000000b
 ieee80211_update_sta_info net/mac80211/ibss.c:989 [inline]
 ieee80211_rx_bss_info net/mac80211/ibss.c:1098 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1579 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 net/mac80211/ibss.c:1606
 ieee80211_iface_process_skb net/mac80211/iface.c:1588 [inline]
 ieee80211_iface_work+0x8a5/0xf20 net/mac80211/iface.c:1642
 cfg80211_wiphy_work+0x2db/0x490 net/wireless/core.c:440
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd10 kernel/workqueue.c:3389
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>