clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4657037377 wd_nsec: 4657037350
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (10499 ticks this GP) idle=d2c4/1/0x4000000000000000 softirq=22856/109142 fqs=4907
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:  1132644      45526            0
rcu: 	cputime:    23189      28734          594   ==> 52480(ms)
rcu: 	(t=10500 jiffies g=16877 q=1961 ncpus=2)
CPU: 0 UID: 0 PID: 7540 Comm: syz.3.493 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
RSP: 0018:ffffc90000007360 EFLAGS: 00000206
RAX: a631bad889b5d500 RBX: 1ffff92000000e74 RCX: a631bad889b5d500
RDX: 0000000000000002 RSI: ffffffff8d998836 RDI: ffffffff8be29f40
RBP: ffffc90000007458 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
FS:  00007fcb974746c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000262fe000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 __rcu_read_unlock+0x84/0xe0
 unwind_next_frame+0x19ae/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 kasan_save_track+0x3e/0x80
 kasan_save_free_info+0x46/0x50
 __kasan_slab_free+0x62/0x70
 kmem_cache_free+0x18f/0x400
 tcp_write_queue_purge+0x143/0x2f0
 tcp_done_with_error+0x43/0xd0
 tcp_retransmit_timer+0x1d16/0x3370
 tcp_write_timer+0x162/0x2e0
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x61a/0x860
 run_timer_softirq+0xb7/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:console_flush_all+0x7f7/0xc40
Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
RSP: 0018:ffffc9000257ece0 EFLAGS: 00000293
RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff888033b83980
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000257ee30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 __nla_validate_parse+0x1719/0x2d40
 __nla_validate+0x40/0x60
 rtm_to_fib_config+0x91/0x13c0
 inet_rtm_newroute+0xf3/0x210
 rtnetlink_rcv_msg+0x7cf/0xb70
 netlink_rcv_skb+0x208/0x470
 netlink_unicast+0x75c/0x8e0
 netlink_sendmsg+0x805/0xb30
 __sock_sendmsg+0x21c/0x270
 ____sys_sendmsg+0x505/0x830
 ___sys_sendmsg+0x21f/0x2a0
 __x64_sys_sendmsg+0x19b/0x260
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb9658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcb97474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcb967b5fa0 RCX: 00007fcb9658e9a9
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
RBP: 00007fcb96610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcb967b5fa0 R15: 00007ffea9913678
 </TASK>
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7540 Comm: syz.3.493 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:native_apic_msr_write+0x39/0x50
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e2 db 86 03 66
RSP: 0018:ffffc90000006718 EFLAGS: 00000046
RAX: 0000000000000320 RBX: ffff88804b023900 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 0000000000000320 RDI: 0000000000000838
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81aec9fe
R10: 0000000000000003 R11: ffffffff81702490 R12: 0000000010007a79
R13: dffffc0000000000 R14: 0000000000000320 R15: 0000000000000020
FS:  00007fcb974746c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000262fe000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 lapic_next_event+0x11/0x20
 clockevents_program_event+0x1cf/0x360
 hrtimer_interrupt+0x620/0xaa0
 __sysvec_apic_timer_interrupt+0x10b/0x410
 sysvec_apic_timer_interrupt+0x52/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:deref_stack_reg+0x9e/0x230
Code: 8b 04 24 48 be 00 00 00 00 00 fc ff df 4c 89 74 24 08 4d 8b 77 10 4c 89 fd 48 c1 ed 03 0f b6 44 35 00 84 c0 0f 85 3c 01 00 00 <41> 83 3f 00 0f 95 c0 4c 39 c3 0f 96 c1 20 c1 4d 39 c6 0f 97 c0 20
RSP: 0018:ffffc90000006980 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc90002578000 RCX: 0000000000000000
RDX: ffffc90000006ae8 RSI: dffffc0000000000 RDI: ffffc90000006aa8
RBP: 1ffff92000000d55 R08: ffffc9000257f8b0 R09: 0000000000000000
R10: ffffc90000006af8 R11: fffff52000000d61 R12: 1ffff92000000d56
R13: 1ffff92000000d57 R14: ffffc90002580000 R15: ffffc90000006aa8
 unwind_next_frame+0x17c4/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 kasan_save_track+0x3e/0x80
 __kasan_kmalloc+0x93/0xb0
 __kmalloc_noprof+0x27a/0x4f0
 ieee802_11_parse_elems_full+0x152/0x2aa0
 ieee80211_inform_bss+0x10c/0x10a0
 cfg80211_inform_single_bss_data+0xd05/0x1ac0
 cfg80211_inform_bss_data+0x1fb/0x3b20
 cfg80211_inform_bss_frame_data+0x3d7/0x730
 ieee80211_bss_info_update+0x746/0x9e0
 ieee80211_scan_rx+0x593/0xa20
 ieee80211_rx_list+0x22fc/0x2d80
 ieee80211_rx_napi+0x1a8/0x3d0
 ieee80211_handle_queued_frames+0xe8/0x1f0
 tasklet_action_common+0x36c/0x580
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:console_flush_all+0x7f7/0xc40
Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
RSP: 0018:ffffc9000257ece0 EFLAGS: 00000293
RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff888033b83980
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000257ee30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 __nla_validate_parse+0x1719/0x2d40
 __nla_validate+0x40/0x60
 rtm_to_fib_config+0x91/0x13c0
 inet_rtm_newroute+0xf3/0x210
 rtnetlink_rcv_msg+0x7cf/0xb70
 netlink_rcv_skb+0x208/0x470
 netlink_unicast+0x75c/0x8e0
 netlink_sendmsg+0x805/0xb30
 __sock_sendmsg+0x21c/0x270
 ____sys_sendmsg+0x505/0x830
 ___sys_sendmsg+0x21f/0x2a0
 __x64_sys_sendmsg+0x19b/0x260
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb9658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcb97474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcb967b5fa0 RCX: 00007fcb9658e9a9
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
RBP: 00007fcb96610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcb967b5fa0 R15: 00007ffea9913678
 </TASK>
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 7540 Comm: syz.3.493 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20
Code: 56 6d 6e 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 1f 00 fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 66 6c 6e 0a e9 41 06 00 00 90 <f3> 0f 1e fa 0f 1f 00 fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8
RSP: 0018:ffffc90000007c38 EFLAGS: 00000006
RAX: a631bad889b5d500 RBX: 1ffff92000000f94 RCX: a631bad889b5d500
RDX: 0000000000000002 RSI: ffffffff8d998836 RDI: ffffffff8be29f40
RBP: ffffc90000007d48 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
FS:  00007fcb974746c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000262fe000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
RSP: 0018:ffffc90000007c60 EFLAGS: 00000206
 __rcu_read_unlock+0x84/0xe0
 sched_balance_domains+0x8be/0x9e0
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_irq_work+0xa3/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_irq_work+0x1a/0x20
RIP: 0010:console_flush_all+0x7f7/0xc40
Code: 48 21 c3 0f 85 e9 01 00 00 e8 75 e7 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 66 e7 1e 00 eb 06 e8 5f e7 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a 0a 82 00 48 8b 1b 48 8b 44 24
RSP: 0018:ffffc9000257ece0 EFLAGS: 00000293
RAX: 1ffffffff1d36927 RBX: ffffffff8e9b4938 RCX: ffff888033b83980
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000257ee30 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b48e0
 console_unlock+0xc4/0x270
 vprintk_emit+0x5b7/0x7a0
 _printk+0xcf/0x120
 __nla_validate_parse+0x1719/0x2d40
 __nla_validate+0x40/0x60
 rtm_to_fib_config+0x91/0x13c0
 inet_rtm_newroute+0xf3/0x210
 rtnetlink_rcv_msg+0x7cf/0xb70
 netlink_rcv_skb+0x208/0x470
 netlink_unicast+0x75c/0x8e0
 netlink_sendmsg+0x805/0xb30
 __sock_sendmsg+0x21c/0x270
 ____sys_sendmsg+0x505/0x830
 ___sys_sendmsg+0x21f/0x2a0
 __x64_sys_sendmsg+0x19b/0x260
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb9658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcb97474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcb967b5fa0 RCX: 00007fcb9658e9a9
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
RBP: 00007fcb96610d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcb967b5fa0 R15: 00007ffea9913678
 </TASK>
