rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 1, t=10502 jiffies, g=29537, q=1987 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 9676 (4294972665-4294962989), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 9676 jiffies! g29537 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27968 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1821/0x5740 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7283
 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:63
Code: a5 28 8c e8 42 5a 7d f5 e8 fd 84 88 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 60 a5 28 8c e9 fd fe ff ff cc cc cc
RSP: 0018:ffffc900000077b0 EFLAGS: 00000086
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 71113af02341a880
RDX: 000000003937af00 RSI: 000000009e88a7e5 RDI: ffffffff8e224255
RBP: ffffffff89b71224 R08: ffffffff89b71224 R09: ffff88807a29d2c0
R10: dffffc0000000000 R11: ffffffff89b71170 R12: 0000000000000000
R13: ffff88807a29d2c0 R14: 0000000000000001 R15: 0000000000000046
FS:  0000000000000000(0000) GS:ffff888125286000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff3fd9b1ff8 CR3: 0000000061586000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline]
 lock_acquire+0x116/0x350 kernel/locking/lockdep.c:5870
 __raw_spin_lock include/linux/spinlock_api_smp.h:158 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:158
 spin_lock include/linux/spinlock.h:342 [inline]
 advance_sched+0xb4/0xc20 net/sched/sch_taprio.c:930
 __run_hrtimer kernel/time/hrtimer.c:1930 [inline]
 __hrtimer_run_queues+0x3c0/0xa20 kernel/time/hrtimer.c:1994
 hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1061
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:local_lock_acquire include/linux/local_lock_internal.h:47 [inline]
RIP: 0010:process_backlog+0x9d6/0x1950 net/core/dev.c:6675
Code: e8 3f 7e 46 f8 4c 8b 24 24 eb 2e 4d 8d 65 28 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 df d6 b1 f8 49 83 3c 24 00 <4c> 8b 24 24 0f 85 0e 01 00 00 e8 0b 7e 46 f8 49 83 c5 28 4c 89 e8
RSP: 0018:ffffc90000007c10 EFLAGS: 00000246
RAX: 1ffff110170c798a RBX: 000000000000003b RCX: 0000000000000100
RDX: ffff88801d3c3e00 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff897f32ab R09: ffff8880b863cc28
R10: 0000000000000003 R11: 0000000000000100 R12: ffff8880b863cc50
R13: ffff8880b863cc28 R14: ffffffff897f32ab R15: dffffc0000000000
 __napi_poll+0xae/0x340 net/core/dev.c:7727
 napi_poll net/core/dev.c:7790 [inline]
 net_rx_action+0x627/0xf70 net/core/dev.c:7947
 handle_softirqs+0x22a/0x840 kernel/softirq.c:622
 do_softirq+0x76/0xd0 kernel/softirq.c:523
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 cfg80211_inform_single_bss_data+0x13b9/0x1af0 net/wireless/scan.c:2395
 cfg80211_inform_bss_data+0x25d/0x3c40 net/wireless/scan.c:3238
 cfg80211_inform_bss_frame_data+0x3c7/0x730 net/wireless/scan.c:3329
 ieee80211_bss_info_update+0x794/0xa40 net/mac80211/scan.c:230
 ieee80211_rx_bss_info net/mac80211/ibss.c:1064 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1545 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1d2b/0x2c90 net/mac80211/ibss.c:1572
 ieee80211_iface_process_skb net/mac80211/iface.c:1763 [inline]
 ieee80211_iface_work+0x78b/0x1020 net/mac80211/iface.c:1817
 cfg80211_wiphy_work+0x2cf/0x460 net/wireless/core.c:538
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>