syzbot

rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (1 GPs behind) idle=02b/1/0x4000000000000000 softirq=5796/5797 fqs=5241 
	(t=10500 jiffies g=5493 q=1526)
NMI backtrace for cpu 0
CPU: 0 PID: 3805 Comm: syz-executor.4 Not tainted 5.15.155-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x46a/0x4a0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x181/0x2a0 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
 rcu_dump_cpu_stacks+0x223/0x390 kernel/rcu/tree_stall.h:349
 print_cpu_stall+0x320/0x600 kernel/rcu/tree_stall.h:633
 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline]
 rcu_pending kernel/rcu/tree.c:3932 [inline]
 rcu_sched_clock_irq+0x8d9/0x1150 kernel/rcu/tree.c:2619
 update_process_times+0x196/0x200 kernel/time/timer.c:1818
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x386/0x550 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1686 [inline]
 __hrtimer_run_queues+0x55b/0xcf0 kernel/time/hrtimer.c:1750
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline]
 __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:ieee80211_rx_h_check_dup net/mac80211/rx.c:1437 [inline]
RIP: 0010:ieee80211_invoke_rx_handlers net/mac80211/rx.c:3984 [inline]
RIP: 0010:ieee80211_prepare_and_rx_handle+0x1fe9/0x51e0 net/mac80211/rx.c:4699
Code: df e8 5b 44 17 f8 48 89 9c 24 90 00 00 00 4c 89 bc 24 18 01 00 00 48 8b 44 24 40 42 80 3c 20 00 74 08 4c 89 ef e8 b7 43 17 f8 <4d> 8b 7d 00 49 8d bf d0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20
RSP: 0018:ffffc900000077e0 EFLAGS: 00000246
RAX: 1ffff92000000f55 RBX: ffffc900000078f8 RCX: 0000000000000000
RDX: 0000000000000048 RSI: 0000000000000000 RDI: ffffc90000007948
RBP: ffffc900000079d0 R08: dffffc0000000000 R09: ffffc90000007900
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: ffffc90000007aa8 R14: 0000000000110308 R15: ffffc900000078f0
 __ieee80211_rx_handle_packet net/mac80211/rx.c:4859 [inline]
 ieee80211_rx_list+0x1dac/0x2a60 net/mac80211/rx.c:4982
 ieee80211_rx_napi+0x15f/0x380 net/mac80211/rx.c:5005
 ieee80211_rx include/net/mac80211.h:4571 [inline]
 ieee80211_tasklet_handler+0x109/0x1b0 net/mac80211/main.c:235
 tasklet_action_common+0x3cb/0x4a0
 __do_softirq+0x3b3/0x93a kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:finish_lock_switch+0x91/0x100 kernel/sched/core.c:4785
Code: 45 31 c9 68 b7 90 59 81 e8 ec 1a 09 00 48 83 c4 08 4c 89 ff e8 60 da fe ff 66 90 4c 89 ff e8 b6 8a cd 08 e8 31 4a 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87
RSP: 0018:ffffc90004a3f398 EFLAGS: 00000286
RAX: b5e298d925733a00 RBX: ffff88801d979df4 RCX: ffffffff81631958
RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: ffffffff8ad8f400
RBP: ffffc90004a3f410 R08: dffffc0000000000 R09: fffffbfff1f7ec1a
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff11017347613 R14: ffff8880b9a3b098 R15: ffff8880b9a3a340
 finish_task_switch+0x134/0x630 kernel/sched/core.c:4902
 context_switch kernel/sched/core.c:5033 [inline]
 __schedule+0x12cc/0x45b0 kernel/sched/core.c:6376
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6780
 irqentry_exit+0x53/0x80 kernel/entry/common.c:432
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:dsa_slave_netdevice_event+0x61e/0x1590 net/dsa/slave.c:2287
Code: 3c 38 00 74 08 48 89 df e8 1f d1 9c f8 48 c7 c0 c0 ed 89 8b 48 39 03 0f 84 33 01 00 00 e8 0a 0e 53 f8 45 31 e4 e9 63 0c 00 00 <e8> fd 0d 53 f8 45 31 e4 e9 56 0c 00 00 4c 89 74 24 28 49 8d 9c 24
RSP: 0018:ffffc90004a3f780 EFLAGS: 00000286
RAX: 0000000000000002 RBX: fffffffffffffff8 RCX: 000000000000008b
RDX: 0000000000000004 RSI: ffffffff8db1ae70 RDI: 0000000000000002
RBP: ffffc90004a3f8a8 R08: 0000000000000007 R09: ffffffff892d497b
R10: 0000000000000004 R11: ffff88802518d940 R12: ffff88801a2a6000
R13: ffffc90004a3f940 R14: 1ffffffff1bcc63b R15: dffffc0000000000
 notifier_call_chain kernel/notifier.c:83 [inline]
 raw_notifier_call_chain+0xd0/0x170 kernel/notifier.c:391
 __dev_notify_flags+0x304/0x610
 dev_change_flags+0xe7/0x190 net/core/dev.c:8889
 devinet_ioctl+0x92e/0x1b20 net/ipv4/devinet.c:1142
 inet_ioctl+0x32d/0x400 net/ipv4/af_inet.c:978
 sock_do_ioctl+0x11d/0x5a0 net/socket.c:1140
 sock_ioctl+0x47f/0x770 net/socket.c:1257
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl+0xf1/0x160 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f183815be69
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f18366ce0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1838289f80 RCX: 00007f183815be69
RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000005
RBP: 00007f18381a847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f1838289f80 R15: 00007ffc01ef78d8
 </TASK>