rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24214/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=107361, q=69 ncpus=2)
task:syz.8.4620 state:R running task stack:24792 pid:24214 tgid:24213 ppid:21867 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0x17fa/0x4bd0 kernel/sched/core.c:6693
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7015
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__rcu_read_lock+0x51/0xb0 kernel/rcu/tree_plugin.h:415
Code: 48 c1 eb 03 42 0f b6 04 33 84 c0 75 35 41 8b 2f ff c5 42 0f b6 04 33 84 c0 75 3e 41 89 2f 42 0f b6 04 33 84 c0 75 49 41 8b 07 <3d> 00 00 00 40 7d 0b 5b 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90
RSP: 0018:ffffc9000c07f368 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 1ffff110061f6448 RCX: 0000000000040000
RDX: ffffc9000bbe1000 RSI: 000000000001d987 RDI: 000000000001d988
RBP: 0000000000000001 R08: ffffffff82064895 R09: 000000000000000c
R10: dffffc0000000000 R11: fffffbfff2037c36 R12: 0000000000052dc0
R13: 0000000000000008 R14: dffffc0000000000 R15: ffff888030fb2244
rcu_read_lock include/linux/rcupdate.h:847 [inline]
page_ext_get+0x19/0x2a0 mm/page_ext.c:525
__set_page_owner+0x9e/0x800 mm/page_owner.c:322
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1556
prep_new_page mm/page_alloc.c:1564 [inline]
get_page_from_freelist+0x363e/0x3790 mm/page_alloc.c:3474
__alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4751
alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
get_free_pages_noprof+0xc/0x30 mm/page_alloc.c:4798
alloc_one_pg_vec_page net/packet/af_packet.c:4424 [inline]
alloc_pg_vec net/packet/af_packet.c:4454 [inline]
packet_set_ring+0x6a6/0x2450 net/packet/af_packet.c:4539
packet_setsockopt+0x1140/0x1970 net/packet/af_packet.c:3905
do_sock_setsockopt+0x3af/0x720 net/socket.c:2334
__sys_setsockopt+0x1a2/0x250 net/socket.c:2357
__do_sys_setsockopt net/socket.c:2366 [inline]
__se_sys_setsockopt net/socket.c:2363 [inline]
__x64_sys_setsockopt+0xb5/0xd0 net/socket.c:2363
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f62eb57e719
RSP: 002b:00007f62ec2de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f62eb735f80 RCX: 00007f62eb57e719
RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004
RBP: 00007f62eb5f175e R08: 0000000000000010 R09: 0000000000000000
R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f62eb735f80 R15: 00007fff7d3379f8
rcu: rcu_preempt kthread starved for 10492 jiffies! g107361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:24336 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5328 [inline]
__schedule+0x17fa/0x4bd0 kernel/sched/core.c:6693
__schedule_loop kernel/sched/core.c:6770 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6785
schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:unwind_next_frame+0x1821/0x22d0 arch/x86/kernel/unwind_orc.c:665
Code: 42 80 3c 20 00 74 05 e8 7d 26 ba 00 4c 8b 75 08 48 8d 5d 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 5f 26 ba 00 <4d> 39 fe 0f 87 b2 00 00 00 48 8b 03 4c 39 f8 0f 86 a6 00 00 00 49
RSP: 0018:ffffc90000a17990 EFLAGS: 00000246
RAX: 1ffff92000142f5a RBX: ffffc90000a17ad0 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: ffffc90000a17ac8
RBP: ffffc90000a17ac0 R08: ffffc90000a17b50 R09: 0000000000000000
R10: ffffc90000a17b10 R11: fffff52000142f64 R12: dffffc0000000000
R13: ffffc90000a17ac0 R14: ffffc90000a11000 R15: ffffc90000a17b60
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9c57a2bf70 CR3: 000000000e734000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 00000000e08e0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
__unwind_start+0x59a/0x740 arch/x86/kernel/unwind_orc.c:760
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0xe5/0x150 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
poison_slab_object mm/kasan/common.c:247 [inline]
__kasan_slab_free+0x59/0x70 mm/kasan/common.c:264
kasan_slab_free include/linux/kasan.h:230 [inline]
slab_free_hook mm/slub.c:2342 [inline]
slab_free mm/slub.c:4579 [inline]
kfree+0x1a0/0x440 mm/slub.c:4727
ieee80211_inform_bss+0xbb2/0x1080 net/mac80211/scan.c:160
rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
cfg80211_inform_single_bss_data+0xec1/0x2090 net/wireless/scan.c:2333
cfg80211_inform_bss_data+0x3ce/0x5e80 net/wireless/scan.c:3188
cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3283
ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
__ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline]
ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462
ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485
ieee80211_rx include/net/mac80211.h:5138 [inline]
ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:441
tasklet_action_common+0x321/0x4d0 kernel/softirq.c:784
handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 kernel/smp.c:884
Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 86 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 31 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 ef
RSP: 0018:ffffc900015f76e0 EFLAGS: 00000293
RAX: ffffffff8188fa9b RBX: 1ffff110170c8ca5 RCX: ffff88801c768000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900015f78e0 R08: ffffffff8188fa6a R09: 1ffffffff2853700
R10: dffffc0000000000 R11: fffffbfff2853701 R12: dffffc0000000000
R13: ffff8880b8646528 R14: ffff8880b873fc40 R15: 0000000000000000
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1051
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:2085 [inline]
text_poke_bp_batch+0x352/0xb30 arch/x86/kernel/alternative.c:2295
text_poke_flush arch/x86/kernel/alternative.c:2486 [inline]
text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate+0xbc/0x260 mm/kfence/core.c:849
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244