rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1171/2:b..l P16/3:b..l rcu: (detected by 1, t=10502 jiffies, g=15957, q=955 ncpus=2) task:ktimers/0 state:D stack:22920 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule_rtlock+0x30/0x70 kernel/sched/core.c:7090 rtlock_slowlock_locked+0x3819/0x4010 kernel/locking/rtmutex.c:1868 rtlock_slowlock kernel/locking/rtmutex.c:1895 [inline] rtlock_lock kernel/locking/spinlock_rt.c:43 [inline] __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline] rt_spin_lock+0x158/0x3e0 kernel/locking/spinlock_rt.c:57 spin_lock_bh include/linux/spinlock_rt.h:88 [inline] cfg80211_inform_single_bss_data+0xba8/0x1ab0 net/wireless/scan.c:2380 cfg80211_inform_bss_data+0x203/0x3b40 net/wireless/scan.c:3240 cfg80211_inform_bss_frame_data+0x3d7/0x730 net/wireless/scan.c:3331 ieee80211_bss_info_update+0x749/0x9e0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x593/0xa20 net/mac80211/scan.c:355 __ieee80211_rx_handle_packet net/mac80211/rx.c:5194 [inline] ieee80211_rx_list+0x21b1/0x2c50 net/mac80211/rx.c:5451 ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5474 ieee80211_rx include/net/mac80211.h:5214 [inline] ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453 tasklet_action_common+0x39c/0x6a0 kernel/softirq.c:925 handle_softirqs+0x22f/0x710 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1138 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kworker/u8:7 state:R running task stack:24712 pid:1171 tgid:1171 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:141 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x79/0x2c0 mm/kasan/generic.c:200 Code: 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df <4d> 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 RSP: 0000:ffffc900048d6cb0 EFLAGS: 00000a07 RAX: 0000000000000001 RBX: dffffc0000000001 RCX: ffffffff8a13f45d RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880350b30c3 RBP: 0000000000000002 R08: ffff8880350b30c6 R09: 1ffff11006a16618 R10: dffffc0000000000 R11: ffffed1006a16618 R12: ffffffff8a13f45d R13: ffffc900048d6f60 R14: ffffc900048d7023 R15: 1ffff11006a16618 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 cfg80211_update_known_bss+0x9bd/0x1590 net/wireless/scan.c:1957 __cfg80211_bss_update+0x147/0x2120 net/wireless/scan.c:1989 cfg80211_inform_single_bss_data+0xbc1/0x1ab0 net/wireless/scan.c:2381 cfg80211_inform_bss_data+0x203/0x3b40 net/wireless/scan.c:3240 cfg80211_inform_bss_frame_data+0x3d7/0x730 net/wireless/scan.c:3331 ieee80211_bss_info_update+0x749/0x9e0 net/mac80211/scan.c:226 ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline] ieee80211_ibss_rx_queued_mgmt+0xa4e/0x2af0 net/mac80211/ibss.c:1600 ieee80211_iface_process_skb net/mac80211/iface.c:1702 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1756 cfg80211_wiphy_work+0x2bb/0x470 net/wireless/core.c:435 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g15957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=12267 rcu: rcu_preempt kthread starved for 10502 jiffies! g15957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:26024 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 97 27 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 RAX: 47823e34831b0b00 RBX: ffffffff81953c47 RCX: 47823e34831b0b00 RDX: 0000000000000001 RSI: ffffffff8cd8e758 RDI: ffffffff8b3ddfe0 RBP: ffffffff8d207ea8 R08: ffff8880b88334db R09: 1ffff1101710669b R10: dffffc0000000000 R11: ffffed101710669c R12: ffffffff8ed64270 R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1a60640 FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000004000 CR3: 00000000281d0000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x73/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e7/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 rest_init+0x2de/0x300 init/main.c:757 start_kernel+0x3ae/0x410 init/main.c:1111 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147