rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 1, t=10502 jiffies, g=35805, q=5919 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 8697 (4294981140-4294972443), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 8697 jiffies! g35805 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5357 [inline]
 __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
 __schedule_loop kernel/sched/core.c:7043 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7058
 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 9965 Comm: syz.2.911 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82
Code: 3e 0d 97 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 0e 00 f3 0f 1e fa fb f4 <e9> 13 0d 97 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000a07f18 EFLAGS: 00000246
RAX: ffffffff8172213d RBX: 0000000000000003 RCX: ffff888024725a00
RDX: 0000000000000100 RSI: ffffffff8d9b6d3c RDI: ffffffff8be33300
RBP: ffffc90000a07ff0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000
R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000140fe8
FS:  00007f519a6d86c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff3e782f88 CR3: 00000000459a8000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 kvm_wait+0x232/0x290 arch/x86/kernel/kvm.c:1064
 pv_wait arch/x86/include/asm/paravirt.h:569 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:466 [inline]
 __pv_queued_spin_lock_slowpath+0x7bf/0xb60 kernel/locking/qspinlock.c:325
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:557 [inline]
 queued_spin_lock_slowpath+0x43/0x50 arch/x86/include/asm/qspinlock.h:51
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock+0x21f/0x290 kernel/locking/spinlock_debug.c:116
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 cfg80211_inform_single_bss_data+0xb90/0x1ac0 net/wireless/scan.c:2374
 cfg80211_inform_bss_data+0x1fb/0x3b30 net/wireless/scan.c:3234
 cfg80211_inform_bss_frame_data+0x3d7/0x730 net/wireless/scan.c:3325
 ieee80211_bss_info_update+0x746/0x9e0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x593/0xa20 net/mac80211/scan.c:355
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5186 [inline]
 ieee80211_rx_list+0x201c/0x2a90 net/mac80211/rx.c:5423
 ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5446
 ieee80211_rx include/net/mac80211.h:5210 [inline]
 ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453
 tasklet_action_common+0x36c/0x580 kernel/softirq.c:829
 handle_softirqs+0x286/0x870 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872
Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc9000ad07540 EFLAGS: 00000206
RAX: d0abaf5e57e3f600 RBX: 0000000000000000 RCX: d0abaf5e57e3f600
RDX: 0000000000000000 RSI: ffffffff8dba5f85 RDI: ffffffff8be33300
RBP: ffffffff82183f71 R08: 0000000000000000 R09: ffffffff82183f71
R10: 0000000000000010 R11: ffffffff81ac3890 R12: 0000000000000000
R13: ffffffff8e23f720 R14: 0000000000000001 R15: 0000000000000246
 __fs_reclaim_acquire mm/page_alloc.c:4234 [inline]
 fs_reclaim_acquire+0x72/0x100 mm/page_alloc.c:4248
 might_alloc include/linux/sched/mm.h:318 [inline]
 slab_pre_alloc_hook mm/slub.c:4131 [inline]
 slab_alloc_node mm/slub.c:4209 [inline]
 __kmalloc_cache_noprof+0x41/0x3d0 mm/slub.c:4391
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 alloc_workqueue_attrs_noprof kernel/workqueue.c:4634 [inline]
 apply_wqattrs_prepare+0x12d/0xe00 kernel/workqueue.c:5276
 apply_workqueue_attrs_locked+0x65/0x240 kernel/workqueue.c:5364
 alloc_and_link_pwqs kernel/workqueue.c:5521 [inline]
 __alloc_workqueue+0xf90/0x1b70 kernel/workqueue.c:5736
 alloc_workqueue_noprof+0xd4/0x210 kernel/workqueue.c:5786
 btrfs_alloc_workqueue+0x1c1/0x2a0 fs/btrfs/async-thread.c:112
 btrfs_init_workqueues+0x62/0x6c0 fs/btrfs/disk-io.c:1964
 open_ctree+0x11ef/0x3a10 fs/btrfs/disk-io.c:3424
 btrfs_fill_super fs/btrfs/super.c:977 [inline]
 btrfs_get_tree_super fs/btrfs/super.c:1937 [inline]
 btrfs_get_tree_subvol fs/btrfs/super.c:2074 [inline]
 btrfs_get_tree+0xf55/0x1820 fs/btrfs/super.c:2108
 vfs_get_tree+0x92/0x2b0 fs/super.c:1815
 do_new_mount+0x2a2/0x9e0 fs/namespace.c:3805
 do_mount fs/namespace.c:4133 [inline]
 __do_sys_mount fs/namespace.c:4344 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4321
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f519979038a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f519a6d7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f519a6d7ef0 RCX: 00007f519979038a
RDX: 00002000000055c0 RSI: 0000200000000180 RDI: 00007f519a6d7eb0
RBP: 00002000000055c0 R08: 00007f519a6d7ef0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000180
R13: 00007f519a6d7eb0 R14: 000000000000559d R15: 0000200000000440
 </TASK>
sched: DL replenish lagged too much