rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2221/3:b..l P28/3:b..l rcu: (detected by 1, t=10502 jiffies, g=14433, q=473 ncpus=2) task:ktimers/1 state:D stack:22232 pid:28 tgid:28 ppid:2 task_flags:0x4208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule_rtlock+0x30/0x70 kernel/sched/core.c:7440 rtlock_slowlock_locked+0x35c9/0x3c20 kernel/locking/rtmutex.c:1895 rtlock_slowlock kernel/locking/rtmutex.c:1922 [inline] rtlock_lock kernel/locking/spinlock_rt.c:43 [inline] __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline] rt_spin_lock+0x165/0x400 kernel/locking/spinlock_rt.c:57 spin_lock_bh include/linux/spinlock_rt.h:90 [inline] cfg80211_inform_single_bss_data+0xc22/0x1bf0 net/wireless/scan.c:2441 cfg80211_inform_bss_data+0x263/0x3cc0 net/wireless/scan.c:3302 cfg80211_inform_bss_frame_data+0x3c7/0x840 net/wireless/scan.c:3394 ieee80211_bss_info_update+0x791/0xa50 net/mac80211/scan.c:230 ieee80211_scan_rx+0x552/0xa40 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5433 [inline] ieee80211_rx_list+0x2d23/0x3b40 net/mac80211/rx.c:5726 ieee80211_rx_napi+0x1ad/0x3d0 net/mac80211/rx.c:5749 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xe4/0x1d0 net/mac80211/main.c:452 tasklet_action_common+0x31c/0x600 kernel/softirq.c:961 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kworker/u8:10 state:R running task stack:21152 pid:2221 tgid:2221 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7606 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x920 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947 Code: ff ff ff e8 40 78 b8 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 42 04 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8f 4c bc 09 cc 48 8d 3d 27 36 13 RSP: 0018:ffffc90007086880 EFLAGS: 00000292 RAX: 5bcf7cde26455800 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 00000000bbcdc745 RSI: ffffffff8db330af RDI: ffffffff8bcc6a80 RBP: ffff88802dd08000 R08: ffffffff817801bf R09: 0000000000000000 R10: ffffc900070869b8 R11: ffffffff81b182a0 R12: ffffffff8f1c3d00 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556 kvfree_call_rcu+0x90/0x3c0 mm/slab_common.c:2048 cfg80211_update_known_bss+0x83a/0x1350 net/wireless/scan.c:2009 __cfg80211_bss_update+0x147/0x2060 net/wireless/scan.c:2055 cfg80211_inform_single_bss_data+0xc3b/0x1bf0 net/wireless/scan.c:2442 cfg80211_inform_bss_data+0x263/0x3cc0 net/wireless/scan.c:3302 cfg80211_inform_bss_frame_data+0x3c7/0x840 net/wireless/scan.c:3394 ieee80211_bss_info_update+0x791/0xa50 net/mac80211/scan.c:230 ieee80211_rx_bss_info net/mac80211/ibss.c:1065 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1546 [inline] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 net/mac80211/ibss.c:1573 ieee80211_iface_process_skb net/mac80211/iface.c:1809 [inline] ieee80211_iface_work+0x78a/0x1010 net/mac80211/iface.c:1863 cfg80211_wiphy_work+0x29e/0x420 net/wireless/core.c:564 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g14433 f0x0 RCU_GP_WAIT_FQS(5) ->state=I rcu: Possible timer handling issue on cpu=1 timer-softirq=9042 rcu: rcu_preempt kthread starved for 10502 jiffies! g14433 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27256 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x16d9/0x5700 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 3b 5d 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 10 0f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffc900001c7e40 EFLAGS: 00000246 RAX: 00000000002b877b RBX: ffffffff819abdec RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8d8c070e RDI: ffffffff8bcc6a80 RBP: ffffc900001c7f10 R08: ffff8880b8533e9b R09: 1ffff110170a67d3 R10: dffffc0000000000 R11: ffffed10170a67d4 R12: 0000000000000000 R13: 1ffff11003bdc3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9fa66ec080 CR3: 00000000340b2000 CR4: 00000000003526f0 Call Trace: arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x1cc/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x157