IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
NMI watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.3:6003]
Modules linked in:
irq event stamp: 0
hardirqs last  enabled at (0): [<          (null)>]           (null)
hardirqs last disabled at (0): [<ffffffff8116a52f>] copy_process.part.30+0x59f/0x1bc0 kernel/fork.c:1373
softirqs last  enabled at (0): [<ffffffff8116a52f>] copy_process.part.30+0x59f/0x1bc0 kernel/fork.c:1373
softirqs last disabled at (0): [<          (null)>]           (null)
CPU: 0 PID: 6003 Comm: syz-executor.3 Not tainted 4.1.0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88012a4ec290 ti: ffff8800bab0c000 task.ti: ffff8800bab0c000
RIP: 0010:[<ffffffff82158020>]  [<ffffffff82158020>] list_empty include/linux/list.h:189 [inline]
RIP: 0010:[<ffffffff82158020>]  [<ffffffff82158020>] hhf_dequeue+0x30/0x190 net/sched/sch_hhf.c:441
RSP: 0018:ffff8800bab0f9a8  EFLAGS: 00000292
RAX: ffff8800b1e3f250 RBX: ffff8800b1e3f1b8 RCX: dead000000200200
RDX: ffff8800b1e3f250 RSI: ffff8800b1e3f250 RDI: ffff8800b1e3f1b8
RBP: ffff8800bab0f9d8 R08: ffff8800b1e3f250 R09: 0000000000000024
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8800bab0f998
FS:  00007f6a66b36700(0000) GS:ffff88012c000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000600 CR3: 000000012adb4000 CR4: 00000000001407f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000002 ffff8800b73a5e00 0000000000000000 0000000000000000
 ffff8800b73a5e00 ffff8800b1e3f000 ffff8800bab0fa38 ffffffff8212c0a7
 ffff8800b1e3f0b0 ffff8800b1e3f0b0 ffff8800bab10000 00000040000003fd
Call Trace:
 [<ffffffff8212c0a7>] dequeue_skb net/sched/sch_generic.c:103 [inline]
 [<ffffffff8212c0a7>] qdisc_restart net/sched/sch_generic.c:220 [inline]
 [<ffffffff8212c0a7>] __qdisc_run+0x67/0x1c0 net/sched/sch_generic.c:236
 [<ffffffff820f9b76>] __dev_xmit_skb net/core/dev.c:2857 [inline]
 [<ffffffff820f9b76>] __dev_queue_xmit+0x406/0x950 net/core/dev.c:2965
 [<ffffffff820fa0ce>] dev_queue_xmit_sk+0xe/0x10 net/core/dev.c:3031
 [<ffffffff82169e54>] dev_queue_xmit include/linux/netdevice.h:2178 [inline]
 [<ffffffff82169e54>] __netlink_deliver_tap_skb net/netlink/af_netlink.c:214 [inline]
 [<ffffffff82169e54>] __netlink_deliver_tap+0x104/0x150 net/netlink/af_netlink.c:232
 [<ffffffff8216abd0>] netlink_deliver_tap net/netlink/af_netlink.c:243 [inline]
 [<ffffffff8216abd0>] __netlink_sendskb+0x130/0x140 net/netlink/af_netlink.c:1697
 [<ffffffff8216dfc6>] netlink_sendskb net/netlink/af_netlink.c:1713 [inline]
 [<ffffffff8216dfc6>] netlink_unicast+0x226/0x2e0 net/netlink/af_netlink.c:1804
 [<ffffffff8216e4e8>] netlink_ack+0x98/0x120 net/netlink/af_netlink.c:2816
 [<ffffffff8216e60e>] netlink_rcv_skb+0x9e/0xd0 net/netlink/af_netlink.c:2849
 [<ffffffff821097d9>] rtnetlink_rcv+0x29/0x40 net/core/rtnetlink.c:3256
 [<ffffffff8216df6a>] netlink_unicast_kernel net/netlink/af_netlink.c:1763 [inline]
 [<ffffffff8216df6a>] netlink_unicast+0x1ca/0x2e0 net/netlink/af_netlink.c:1789
 [<ffffffff8216e390>] netlink_sendmsg+0x310/0x3d0 net/netlink/af_netlink.c:2353
 [<ffffffff820d6365>] sock_sendmsg_nosec net/socket.c:613 [inline]
 [<ffffffff820d6365>] sock_sendmsg+0x35/0x40 net/socket.c:623
 [<ffffffff820d6d03>] ___sys_sendmsg+0x2c3/0x2d0 net/socket.c:1955
 [<ffffffff820d7d5d>] __sys_sendmsg+0x3d/0x80 net/socket.c:1989
 [<ffffffff820d7dad>] SYSC_sendmsg net/socket.c:2000 [inline]
 [<ffffffff820d7dad>] SyS_sendmsg+0xd/0x20 net/socket.c:1996
 [<ffffffff8264c772>] system_call_fastpath+0x16/0x7a
Code: 57 41 56 4c 8d bf 40 02 00 00 41 55 4c 8d b7 80 01 00 00 41 54 4c 8d af 50 02 00 00 49 89 fc 53 48 83 ec 08 0f 1f 80 00 00 00 00 <49> 8b 9c 24 40 02 00 00 4c 89 fa 49 39 df 0f 84 a8 00 00 00 8b 
sending NMI to other CPUs:
NMI backtrace for cpu 1
CPU: 1 PID: 5784 Comm: syz-executor.1 Not tainted 4.1.0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800b7324490 ti: ffff88012a69c000 task.ti: ffff88012a69c000
RIP: 0010:[<ffffffff818e8389>]  [<ffffffff818e8389>] paravirt_read_tsc arch/x86/include/asm/paravirt.h:179 [inline]
RIP: 0010:[<ffffffff818e8389>]  [<ffffffff818e8389>] delay_tsc+0x39/0xe0 arch/x86/lib/delay.c:61
RSP: 0018:ffff88012a69fbb8  EFLAGS: 00000202
RAX: 0000005c5d85018f RBX: 0000000000000001 RCX: ffff8800ba680402
RDX: 0000005c00000000 RSI: ffffffff82ede2e7 RDI: ffffffff82e9a095
RBP: ffff88012a69fbd8 R08: 0000000000000001 R09: 0000000000000000
R10: ffff8800b7324490 R11: 0000000000000000 R12: 000000005d85018f
R13: 0000000000000001 R14: 000000007e1107c1 R15: ffff8800b7149e00
FS:  0000000001032940(0063) GS:ffff88012c100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdf2be8fe8 CR3: 000000012a8e6000 CR4: 00000000001407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8800b1e3f0b0 ffff8800ba680402 0000000089173700 000000007e1107c1
 ffff88012a69fbe8 ffffffff818e82ba ffff88012a69fc18 ffffffff811ca74a
 ffff8800b1e3f0b0 ffff8800ba686000 0000000000000001 ffff8800b73a5e00
Call Trace:
 [<ffffffff818e82ba>] __delay+0xa/0x10 arch/x86/lib/delay.c:111
 [<ffffffff811ca74a>] __spin_lock_debug kernel/locking/spinlock_debug.c:114 [inline]
 [<ffffffff811ca74a>] do_raw_spin_lock+0xaa/0x200 kernel/locking/spinlock_debug.c:137
 [<ffffffff8264b7ee>] __raw_spin_lock include/linux/spinlock_api_smp.h:145 [inline]
 [<ffffffff8264b7ee>] _raw_spin_lock+0x3e/0x50 kernel/locking/spinlock.c:151
 [<ffffffff820f99d1>] spin_lock include/linux/spinlock.h:312 [inline]
 [<ffffffff820f99d1>] __dev_xmit_skb net/core/dev.c:2826 [inline]
 [<ffffffff820f99d1>] __dev_queue_xmit+0x261/0x950 net/core/dev.c:2965
 [<ffffffff820fa0ce>] dev_queue_xmit_sk+0xe/0x10 net/core/dev.c:3031
 [<ffffffff82169e54>] dev_queue_xmit include/linux/netdevice.h:2178 [inline]
 [<ffffffff82169e54>] __netlink_deliver_tap_skb net/netlink/af_netlink.c:214 [inline]
 [<ffffffff82169e54>] __netlink_deliver_tap+0x104/0x150 net/netlink/af_netlink.c:232
 [<ffffffff8216e05f>] netlink_deliver_tap net/netlink/af_netlink.c:243 [inline]
 [<ffffffff8216e05f>] netlink_deliver_tap_kernel net/netlink/af_netlink.c:252 [inline]
 [<ffffffff8216e05f>] netlink_unicast_kernel net/netlink/af_netlink.c:1762 [inline]
 [<ffffffff8216e05f>] netlink_unicast+0x2bf/0x2e0 net/netlink/af_netlink.c:1789
 [<ffffffff8216e390>] netlink_sendmsg+0x310/0x3d0 net/netlink/af_netlink.c:2353
 [<ffffffff820d6365>] sock_sendmsg_nosec net/socket.c:613 [inline]
 [<ffffffff820d6365>] sock_sendmsg+0x35/0x40 net/socket.c:623
 [<ffffffff820d67e2>] SYSC_sendto+0xf2/0x170 net/socket.c:1660
 [<ffffffff820d7aa9>] SyS_sendto+0x9/0x10 net/socket.c:1628
 [<ffffffff8264c772>] system_call_fastpath+0x16/0x7a
Code: 01 00 00 00 e8 59 38 8b ff e8 34 12 01 00 0f ae e8 48 83 3d 39 d5 94 01 00 74 77 41 89 c5 e8 2f fa 79 ff 66 90 41 89 c4 0f ae e8 <48> 83 3d 1f d5 94 01 00 74 5d e8 18 fa 79 ff 66 90 41 89 c6 44