protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (10501 ticks this GP) idle=392/1/0x4000000000000004 softirq=222010/222010 fqs=0 rcu: (t=10502 jiffies g=306517 q=701) rcu: rcu_preempt kthread starved for 10503 jiffies! g306517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: RCU grace-period kthread stack dump: rcu_preempt I29104 10 2 0x90000000 Call Trace: context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3474 schedule+0x92/0x1c0 kernel/sched/core.c:3518 schedule_timeout+0x4db/0xfc0 kernel/time/timer.c:1804 rcu_gp_kthread+0xd5c/0x2190 kernel/rcu/tree.c:2202 kthread+0x354/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 NMI backtrace for cpu 0 CPU: 0 PID: 20305 Comm: syz-executor.4 Not tainted 4.19.72 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x189/0x1d5 kernel/rcu/tree.c:1340 print_cpu_stall kernel/rcu/tree.c:1478 [inline] check_cpu_stall kernel/rcu/tree.c:1550 [inline] __rcu_pending kernel/rcu/tree.c:3293 [inline] rcu_pending kernel/rcu/tree.c:3336 [inline] rcu_check_callbacks.cold+0x5e3/0xd90 kernel/rcu/tree.c:2682 update_process_times+0x32/0x80 kernel/time/timer.c:1636 tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:164 tick_sched_timer+0x47/0x130 kernel/time/tick-sched.c:1274 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x33b/0xdc0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline] smp_apic_timer_interrupt+0x111/0x550 arch/x86/kernel/apic/apic.c:1092 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893 RIP: 0010:__list_add_valid+0x2d/0xa0 lib/list_debug.c:23 Code: 00 00 00 00 fc ff df 55 48 89 e5 41 55 49 89 fd 48 8d 7a 08 41 54 49 89 d4 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 75 52 <49> 8b 54 24 08 48 39 f2 0f 85 5a 01 00 00 48 b8 00 00 00 00 00 fc RSP: 0000:ffff8880ae806ef0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: ffff8880635d22b8 RCX: ffffffff858e7de6 RDX: 1ffff1100c6ba46b RSI: ffff8880635d2350 RDI: ffff8880635d2358 RBP: ffff8880ae806f08 R08: ffff8880518c2640 R09: 0000000000000007 R10: ffff8880518c2fd8 R11: 00000000cad547da R12: ffff8880635d2350 R13: ffff8880635d22b8 R14: ffff8880635d2358 R15: ffff8880635d2350 __list_add include/linux/list.h:60 [inline] list_add_tail include/linux/list.h:93 [inline] list_move_tail include/linux/list.h:183 [inline] hhf_dequeue+0x652/0xa00 net/sched/sch_hhf.c:438 dequeue_skb net/sched/sch_generic.c:277 [inline] qdisc_restart net/sched/sch_generic.c:380 [inline] __qdisc_run+0x1e7/0x1960 net/sched/sch_generic.c:398 __dev_xmit_skb net/core/dev.c:3501 [inline] __dev_queue_xmit+0x165c/0x2fe0 net/core/dev.c:3811 dev_queue_xmit+0x18/0x20 net/core/dev.c:3876 br_dev_queue_push_xmit+0x405/0x5d0 net/bridge/br_forward.c:56 NF_HOOK include/linux/netfilter.h:289 [inline] NF_HOOK include/linux/netfilter.h:283 [inline] br_forward_finish+0xfa/0x400 net/bridge/br_forward.c:69 NF_HOOK include/linux/netfilter.h:289 [inline] NF_HOOK include/linux/netfilter.h:283 [inline] __br_forward+0x647/0xb30 net/bridge/br_forward.c:113 deliver_clone+0x61/0xc0 net/bridge/br_forward.c:129 maybe_deliver net/bridge/br_forward.c:184 [inline] maybe_deliver net/bridge/br_forward.c:172 [inline] br_flood+0x4da/0x710 net/bridge/br_forward.c:226 br_dev_xmit+0xeeb/0x1490 net/bridge/br_device.c:103 __netdev_start_xmit include/linux/netdevice.h:4303 [inline] netdev_start_xmit include/linux/netdevice.h:4312 [inline] xmit_one net/core/dev.c:3257 [inline] dev_hard_start_xmit+0x1a5/0x980 net/core/dev.c:3273 __dev_queue_xmit+0x2704/0x2fe0 net/core/dev.c:3843 dev_queue_xmit+0x18/0x20 net/core/dev.c:3876 neigh_hh_output include/net/neighbour.h:491 [inline] neigh_output include/net/neighbour.h:499 [inline] ip6_finish_output2+0x12fd/0x2550 net/ipv6/ip6_output.c:120 ip6_finish_output+0x574/0xbe0 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:278 [inline] ip6_output+0x235/0x7c0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:447 [inline] NF_HOOK include/linux/netfilter.h:289 [inline] ndisc_send_skb+0xf3b/0x1460 net/ipv6/ndisc.c:491 ndisc_send_rs+0x134/0x6d0 net/ipv6/ndisc.c:685 addrconf_rs_timer+0x30f/0x680 net/ipv6/addrconf.c:3821 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1682 [inline] __run_timers kernel/time/timer.c:1650 [inline] run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1695 __do_softirq+0x25c/0x921 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x13b/0x550 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893 RIP: 0033:0x40e88f Code: 48 89 df 48 89 f0 0f 1f 44 00 00 48 8d 6f f8 4c 39 c1 49 89 ee 77 2c 48 83 e8 08 48 39 ca 76 0f 0f 1f 00 48 83 e8 08 48 8b 10 <48> 39 ca 77 f4 48 39 e8 76 18 48 89 57 f8 4c 89 00 48 8b 50 f8 49 RSP: 002b:00007ffccb4c3ba0 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: 00007f230e6c4030 RBX: 00007f230e67d348 RCX: ffffffff8182799a RDX: ffffffff8325c1cc RSI: 00007f230e707250 RDI: 00007f230e6a1498 RBP: 00007f230e6a1490 R08: ffffffff8325c1cc R09: 000000005027f4c0 R10: 00007ffccb4c3da0 R11: 0000000000000246 R12: 00007f230e67d338 R13: 000000000000001e R14: 00007f230e6a1490 R15: 0000000000013649 rcu: INFO: rcu_sched detected stalls on CPUs/tasks: rcu: 0-....: (10503 ticks this GP) idle=392/1/0x4000000000000002 softirq=222006/222010 fqs=5235 rcu: (detected by 1, t=10535 jiffies, g=19001, q=3) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 20305 Comm: syz-executor.4 Not tainted 4.19.72 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry include/linux/list.h:117 [inline] RIP: 0010:list_move_tail include/linux/list.h:182 [inline] RIP: 0010:hhf_dequeue+0x5a5/0xa00 net/sched/sch_hhf.c:438 Code: b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 32 04 00 00 45 0f af b5 d4 02 00 00 48 89 df 45 01 fe 44 89 73 10 56 47 97 fd 31 ff 41 89 c6 89 c6 e8 ea d9 dc fb 45 84 f6 74 63 RSP: 0000:ffff8880ae806f18 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffff8880635d22b8 RCX: ffffffff858e78e9 RDX: 0000000000000000 RSI: ffffffff858e7d9b RDI: ffff8880635d22b8 RBP: ffff8880ae806f68 R08: ffff8880518c2640 R09: 0000000000000007 R10: ffff8880518c2fd8 R11: 00000000cad547da R12: dffffc0000000000 R13: ffff8880635d2000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000001b58940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33424000 CR3: 0000000060428000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dequeue_skb net/sched/sch_generic.c:277 [inline] qdisc_restart net/sched/sch_generic.c:380 [inline] __qdisc_run+0x1e7/0x1960 net/sched/sch_generic.c:398 __dev_xmit_skb net/core/dev.c:3501 [inline] __dev_queue_xmit+0x165c/0x2fe0 net/core/dev.c:3811 dev_queue_xmit+0x18/0x20 net/core/dev.c:3876 br_dev_queue_push_xmit+0x405/0x5d0 net/bridge/br_forward.c:56 NF_HOOK include/linux/netfilter.h:289 [inline] NF_HOOK include/linux/netfilter.h:283 [inline] br_forward_finish+0xfa/0x400 net/bridge/br_forward.c:69 NF_HOOK include/linux/netfilter.h:289 [inline] NF_HOOK include/linux/netfilter.h:283 [inline] __br_forward+0x647/0xb30 net/bridge/br_forward.c:113 deliver_clone+0x61/0xc0 net/bridge/br_forward.c:129 maybe_deliver net/bridge/br_forward.c:184 [inline] maybe_deliver net/bridge/br_forward.c:172 [inline] br_flood+0x4da/0x710 net/bridge/br_forward.c:226 br_dev_xmit+0xeeb/0x1490 net/bridge/br_device.c:103 __netdev_start_xmit include/linux/netdevice.h:4303 [inline] netdev_start_xmit include/linux/netdevice.h:4312 [inline] xmit_one net/core/dev.c:3257 [inline] dev_hard_start_xmit+0x1a5/0x980 net/core/dev.c:3273 __dev_queue_xmit+0x2704/0x2fe0 net/core/dev.c:3843 dev_queue_xmit+0x18/0x20 net/core/dev.c:3876 neigh_hh_output include/net/neighbour.h:491 [inline] neigh_output include/net/neighbour.h:499 [inline] ip6_finish_output2+0x12fd/0x2550 net/ipv6/ip6_output.c:120 ip6_finish_output+0x574/0xbe0 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:278 [inline] ip6_output+0x235/0x7c0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:447 [inline] NF_HOOK include/linux/netfilter.h:289 [inline] ndisc_send_skb+0xf3b/0x1460 net/ipv6/ndisc.c:491 ndisc_send_rs+0x134/0x6d0 net/ipv6/ndisc.c:685 addrconf_rs_timer+0x30f/0x680 net/ipv6/addrconf.c:3821 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1682 [inline] __run_timers kernel/time/timer.c:1650 [inline] run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1695 __do_softirq+0x25c/0x921 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x13b/0x550 arch/x86/kernel/apic/apic.c:1094 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893 RIP: 0033:0x40e88f Code: 48 89 df 48 89 f0 0f 1f 44 00 00 48 8d 6f f8 4c 39 c1 49 89 ee 77 2c 48 83 e8 08 48 39 ca 76 0f 0f 1f 00 48 83 e8 08 48 8b 10 <48> 39 ca 77 f4 48 39 e8 76 18 48 89 57 f8 4c 89 00 48 8b 50 f8 49 RSP: 002b:00007ffccb4c3ba0 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: 00007f230e6c4030 RBX: 00007f230e67d348 RCX: ffffffff8182799a RDX: ffffffff8325c1cc RSI: 00007f230e707250 RDI: 00007f230e6a1498 RBP: 00007f230e6a1490 R08: ffffffff8325c1cc R09: 000000005027f4c0 R10: 00007ffccb4c3da0 R11: 0000000000000246 R12: 00007f230e67d338 R13: 000000000000001e R14: 00007f230e6a1490 R15: 0000000000013649 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 net_ratelimit: 4 callbacks suppressed protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10846 jiffies s: 19957 root: 0x1/. rcu: blocking rcu_node structures: Task dump for CPU 0: syz-executor.4 R running task 28216 20305 14457 0x9000000c Call Trace: context_switch kernel/sched/core.c:2829 [inline] __schedule+0x86e/0x1dc0 kernel/sched/core.c:3474 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 net_ratelimit: 8 callbacks suppressed protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1 protocol 88fb is buggy, dev hsr_slave_0 protocol 88fb is buggy, dev hsr_slave_1