[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. syzkaller login: [ 87.271054] IPVS: ftp: loaded support on port[0] = 21 [ 87.341118] chnl_net:caif_netlink_parms(): no params data found [ 87.449733] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.456372] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.463785] device bridge_slave_0 entered promiscuous mode [ 87.470765] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.477308] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.484795] device bridge_slave_1 entered promiscuous mode [ 87.502196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.510949] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.529060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.536419] team0: Port device team_slave_0 added [ 87.541781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.549371] team0: Port device team_slave_1 added [ 87.564209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.570465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.595983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.607328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.613660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.638936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.652722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.660332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.679554] device hsr_slave_0 entered promiscuous mode [ 87.685298] device hsr_slave_1 entered promiscuous mode [ 87.691235] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 87.698487] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 87.760588] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.767034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.773796] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.780120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.810382] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 87.818119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.826858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.836997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.845001] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.851901] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.860007] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 87.870255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 87.876457] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.885336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.892910] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.899312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.908499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.916577] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.922895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.938055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.945740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.956378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.968603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.979081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.989704] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 87.996530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.005471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.012883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.026507] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 88.034626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.041252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.051289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.084384] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 88.094077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.127779] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 88.135137] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 88.141551] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 88.150711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.158475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.165885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.175379] device veth0_vlan entered promiscuous mode [ 88.184209] device veth1_vlan entered promiscuous mode [ 88.190038] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 88.198828] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 88.210626] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 88.220140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.227430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.234892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.244209] device veth0_macvtap entered promiscuous mode [ 88.250300] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 88.258750] device veth1_macvtap entered promiscuous mode [ 88.267271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 88.276278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 88.286307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.293767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.302042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.312064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.320013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.218764] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:2:3688] [ 115.226328] Modules linked in: [ 115.229510] irq event stamp: 60018987 [ 115.233298] hardirqs last enabled at (60018986): [] ktime_get+0x235/0x2f0 [ 115.241856] hardirqs last disabled at (60018987): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 115.251541] softirqs last enabled at (11730): [] icmp6_dst_alloc+0x3de/0x660 [ 115.260361] softirqs last disabled at (11732): [] ip6_finish_output2+0x1f2/0x2290 [ 115.270048] CPU: 0 PID: 3688 Comm: kworker/0:2 Not tainted 4.19.211-syzkaller #0 [ 115.277559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.286988] Workqueue: ipv6_addrconf addrconf_dad_work [ 115.292251] RIP: 0010:pvclock_clocksource_read+0x1c2/0x520 [ 115.297941] Code: 48 c6 4c 89 fe 48 c1 e9 03 48 f7 e2 48 0f ac d0 20 4c 89 fa 83 e6 07 0f b6 0c 29 48 c1 ea 03 0f b6 14 2a 40 38 f2 40 0f 9e c6 <84> d2 0f 95 c2 40 84 d6 0f 85 ac 01 00 00 4c 89 d2 83 e2 07 38 d1 [ 115.316821] RSP: 0018:ffff8880a841eb58 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 115.324508] RAX: 0000001b9c01c4c2 RBX: ffffffff8c665000 RCX: 0000000000000000 [ 115.331757] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 115.339007] RBP: dffffc0000000000 R08: ffffffff8c665018 R09: ffffffff8c66500f [ 115.346256] R10: ffffffff8c665017 R11: ffffffff8c66501b R12: ffffffff8c665003 [ 115.353508] R13: fffffbfff18cca01 R14: ffffffff8c66501d R15: ffffffff8c665010 [ 115.360758] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 115.368961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.374828] CR2: 00007fe06ca00390 CR3: 0000000009e6d000 CR4: 00000000003406f0 [ 115.382083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.389330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.396585] Call Trace: [ 115.399180] ? mark_held_locks+0xa6/0xf0 [ 115.403218] ? ktime_get+0x235/0x2f0 [ 115.406914] kvm_clock_get_cycles+0x14/0x30 [ 115.411227] ktime_get+0x188/0x2f0 [ 115.414749] tcf_police_act+0x3e8/0xe60 [ 115.418788] ? tcf_police_dump+0x960/0x960 [ 115.423003] ? tcf_action_exec+0x16f/0x400 [ 115.427219] tcf_action_exec+0x160/0x400 [ 115.431279] basic_classify+0x184/0x2b0 [ 115.435248] tcf_classify+0x120/0x3c0 [ 115.439031] prio_enqueue+0x3bb/0x7a0 [ 115.442809] ? prio_reset+0x160/0x160 [ 115.446589] ? __dev_queue_xmit+0x134e/0x2e00 [ 115.451065] __dev_queue_xmit+0x140a/0x2e00 [ 115.455371] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.459508] ? mark_held_locks+0xa6/0xf0 [ 115.463546] ? ip_finish_output2+0xfbc/0x15a0 [ 115.468021] ip_finish_output2+0xb6d/0x15a0 [ 115.472324] ? ip_send_check+0xb0/0xb0 [ 115.476190] ? ip_output+0x3a5/0x5f0 [ 115.479885] ip_finish_output+0xae9/0x10b0 [ 115.484101] ip_output+0x203/0x5f0 [ 115.487620] ? ip_mc_output+0xec0/0xec0 [ 115.491576] ? ip_fragment.constprop.0+0x240/0x240 [ 115.496486] ? prandom_u32+0x171/0x1f0 [ 115.500466] ip_local_out+0xaf/0x170 [ 115.504166] iptunnel_xmit+0x63b/0x9d0 [ 115.508031] ? erspan_changelink+0x150/0x220 [ 115.512422] geneve_xmit+0x120d/0x2e60 [ 115.516294] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 115.521983] ? __lock_acquire+0x6de/0x3ff0 [ 115.526196] ? netif_skb_features+0x5c1/0xb30 [ 115.530684] ? check_preemption_disabled+0x41/0x280 [ 115.535693] dev_hard_start_xmit+0x1a8/0x920 [ 115.540088] __dev_queue_xmit+0x269d/0x2e00 [ 115.544394] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.548530] ? ip6_finish_output2+0x113d/0x2290 [ 115.553186] ? memcpy+0x35/0x50 [ 115.556450] neigh_resolve_output+0x55a/0x910 [ 115.560938] ip6_finish_output2+0x113d/0x2290 [ 115.565418] ? ip6_forward_finish+0x4b0/0x4b0 [ 115.569893] ? lock_downgrade+0x720/0x720 [ 115.574021] ? lock_acquire+0x170/0x3c0 [ 115.577978] ? check_preemption_disabled+0x41/0x280 [ 115.582978] ip6_finish_output+0x89b/0x10f0 [ 115.587283] ip6_output+0x205/0x770 [ 115.590888] ? ip6_finish_output+0x10f0/0x10f0 [ 115.595458] ? ip6_fragment+0x34e0/0x34e0 [ 115.599674] ? check_preemption_disabled+0x41/0x280 [ 115.604680] ndisc_send_skb+0xa24/0x1720 [ 115.608728] ? ndisc_alloc_skb+0x320/0x320 [ 115.612945] ? ipv6_setsockopt+0x160/0x160 [ 115.617159] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 115.622417] ? __alloc_skb+0x34f/0x560 [ 115.626283] ? skb_set_owner_w+0x1f6/0x330 [ 115.630496] ndisc_send_ns+0x51d/0x840 [ 115.634363] ? addrconf_dad_work+0xa48/0x10a0 [ 115.638840] ? pndisc_redo+0x20/0x20 [ 115.642539] ? mark_held_locks+0xa6/0xf0 [ 115.646576] ? __local_bh_enable_ip+0x159/0x270 [ 115.651226] addrconf_dad_work+0xb0e/0x10a0 [ 115.655535] ? addrconf_dad_completed+0xb60/0xb60 [ 115.660372] process_one_work+0x864/0x1570 [ 115.664608] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 115.669262] worker_thread+0x64c/0x1130 [ 115.673225] ? __kthread_parkme+0x133/0x1e0 [ 115.677529] ? process_one_work+0x1570/0x1570 [ 115.682009] kthread+0x33f/0x460 [ 115.685358] ? kthread_park+0x180/0x180 [ 115.689317] ret_from_fork+0x24/0x30 [ 115.693016] Kernel panic - not syncing: softlockup: hung tasks [ 115.699055] CPU: 0 PID: 3688 Comm: kworker/0:2 Tainted: G L 4.19.211-syzkaller #0 [ 115.707952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.717341] Workqueue: ipv6_addrconf addrconf_dad_work [ 115.722594] Call Trace: [ 115.725156] [ 115.727290] dump_stack+0x1fc/0x2ef [ 115.730898] panic+0x26a/0x50e [ 115.734068] ? __warn_printk+0xf3/0xf3 [ 115.737951] ? watchdog_timer_fn.cold+0x5/0x25 [ 115.742516] ? watchdog_timer_fn+0x53e/0x580 [ 115.746907] watchdog_timer_fn.cold+0x16/0x25 [ 115.751391] __hrtimer_run_queues+0x3f6/0xe60 [ 115.755869] ? softlockup_fn+0xb0/0xb0 [ 115.759754] ? hrtimer_fixup_free+0xa0/0xa0 [ 115.764057] ? kvm_clock_get_cycles+0x14/0x30 [ 115.768531] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 115.773878] hrtimer_interrupt+0x326/0x9e0 [ 115.778103] smp_apic_timer_interrupt+0x10c/0x550 [ 115.782930] apic_timer_interrupt+0xf/0x20 [ 115.787142] [ 115.789361] RIP: 0010:pvclock_clocksource_read+0x1c2/0x520 [ 115.794967] Code: 48 c6 4c 89 fe 48 c1 e9 03 48 f7 e2 48 0f ac d0 20 4c 89 fa 83 e6 07 0f b6 0c 29 48 c1 ea 03 0f b6 14 2a 40 38 f2 40 0f 9e c6 <84> d2 0f 95 c2 40 84 d6 0f 85 ac 01 00 00 4c 89 d2 83 e2 07 38 d1 [ 115.813850] RSP: 0018:ffff8880a841eb58 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 115.821539] RAX: 0000001b9c01c4c2 RBX: ffffffff8c665000 RCX: 0000000000000000 [ 115.828789] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 115.836035] RBP: dffffc0000000000 R08: ffffffff8c665018 R09: ffffffff8c66500f [ 115.843283] R10: ffffffff8c665017 R11: ffffffff8c66501b R12: ffffffff8c665003 [ 115.850531] R13: fffffbfff18cca01 R14: ffffffff8c66501d R15: ffffffff8c665010 [ 115.857798] ? mark_held_locks+0xa6/0xf0 [ 115.861837] ? ktime_get+0x235/0x2f0 [ 115.865531] kvm_clock_get_cycles+0x14/0x30 [ 115.869841] ktime_get+0x188/0x2f0 [ 115.873366] tcf_police_act+0x3e8/0xe60 [ 115.877322] ? tcf_police_dump+0x960/0x960 [ 115.881534] ? tcf_action_exec+0x16f/0x400 [ 115.885772] tcf_action_exec+0x160/0x400 [ 115.889817] basic_classify+0x184/0x2b0 [ 115.893771] tcf_classify+0x120/0x3c0 [ 115.897550] prio_enqueue+0x3bb/0x7a0 [ 115.901328] ? prio_reset+0x160/0x160 [ 115.905118] ? __dev_queue_xmit+0x134e/0x2e00 [ 115.909594] __dev_queue_xmit+0x140a/0x2e00 [ 115.913898] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.918037] ? mark_held_locks+0xa6/0xf0 [ 115.922079] ? ip_finish_output2+0xfbc/0x15a0 [ 115.926554] ip_finish_output2+0xb6d/0x15a0 [ 115.930856] ? ip_send_check+0xb0/0xb0 [ 115.934722] ? ip_output+0x3a5/0x5f0 [ 115.938422] ip_finish_output+0xae9/0x10b0 [ 115.942639] ip_output+0x203/0x5f0 [ 115.946183] ? ip_mc_output+0xec0/0xec0 [ 115.950166] ? ip_fragment.constprop.0+0x240/0x240 [ 115.955076] ? prandom_u32+0x171/0x1f0 [ 115.958946] ip_local_out+0xaf/0x170 [ 115.962643] iptunnel_xmit+0x63b/0x9d0 [ 115.966511] ? erspan_changelink+0x150/0x220 [ 115.970906] geneve_xmit+0x120d/0x2e60 [ 115.974785] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 115.980056] ? __lock_acquire+0x6de/0x3ff0 [ 115.984360] ? netif_skb_features+0x5c1/0xb30 [ 115.988841] ? check_preemption_disabled+0x41/0x280 [ 115.993842] dev_hard_start_xmit+0x1a8/0x920 [ 115.998243] __dev_queue_xmit+0x269d/0x2e00 [ 116.002548] ? netdev_pick_tx+0x2f0/0x2f0 [ 116.006684] ? ip6_finish_output2+0x113d/0x2290 [ 116.011336] ? memcpy+0x35/0x50 [ 116.014596] neigh_resolve_output+0x55a/0x910 [ 116.019075] ip6_finish_output2+0x113d/0x2290 [ 116.023554] ? ip6_forward_finish+0x4b0/0x4b0 [ 116.028028] ? lock_downgrade+0x720/0x720 [ 116.032158] ? lock_acquire+0x170/0x3c0 [ 116.036136] ? check_preemption_disabled+0x41/0x280 [ 116.041148] ip6_finish_output+0x89b/0x10f0 [ 116.045449] ip6_output+0x205/0x770 [ 116.049056] ? ip6_finish_output+0x10f0/0x10f0 [ 116.053619] ? ip6_fragment+0x34e0/0x34e0 [ 116.057747] ? check_preemption_disabled+0x41/0x280 [ 116.062744] ndisc_send_skb+0xa24/0x1720 [ 116.066789] ? ndisc_alloc_skb+0x320/0x320 [ 116.071003] ? ipv6_setsockopt+0x160/0x160 [ 116.075216] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 116.080477] ? __alloc_skb+0x34f/0x560 [ 116.084344] ? skb_set_owner_w+0x1f6/0x330 [ 116.088569] ndisc_send_ns+0x51d/0x840 [ 116.092459] ? addrconf_dad_work+0xa48/0x10a0 [ 116.097109] ? pndisc_redo+0x20/0x20 [ 116.100806] ? mark_held_locks+0xa6/0xf0 [ 116.104854] ? __local_bh_enable_ip+0x159/0x270 [ 116.109520] addrconf_dad_work+0xb0e/0x10a0 [ 116.113824] ? addrconf_dad_completed+0xb60/0xb60 [ 116.118661] process_one_work+0x864/0x1570 [ 116.122878] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 116.127534] worker_thread+0x64c/0x1130 [ 116.131492] ? __kthread_parkme+0x133/0x1e0 [ 116.135791] ? process_one_work+0x1570/0x1570 [ 116.140265] kthread+0x33f/0x460 [ 116.143609] ? kthread_park+0x180/0x180 [ 116.147572] ret_from_fork+0x24/0x30 [ 116.151738] Kernel Offset: disabled [ 116.155414] Rebooting in 86400 seconds..