[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.47' (ECDSA) to the list of known hosts. syzkaller login: [ 78.782458] IPVS: ftp: loaded support on port[0] = 21 [ 78.852261] chnl_net:caif_netlink_parms(): no params data found [ 78.927389] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.934102] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.942324] device bridge_slave_0 entered promiscuous mode [ 78.949851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.956647] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.963550] device bridge_slave_1 entered promiscuous mode [ 78.982290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.991011] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.008867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.016306] team0: Port device team_slave_0 added [ 79.021678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.029759] team0: Port device team_slave_1 added [ 79.044625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.050908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.076923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.088690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.095393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.121103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.135338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.142671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.162430] device hsr_slave_0 entered promiscuous mode [ 79.168176] device hsr_slave_1 entered promiscuous mode [ 79.174075] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 79.182470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 79.244698] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.251117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.257866] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.264195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.294601] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 79.301845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.310484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.320051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.328269] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.335658] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.342573] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.353338] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 79.359520] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.368305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.376628] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.382966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.396404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.404137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.410525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.425543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.435958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.446899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 79.453654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.463383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.471184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.479751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.487397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.494167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.506196] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 79.517081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.523736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.532815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.567058] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 79.577508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.609968] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 79.617060] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 79.623488] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 79.632966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.641241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.648230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.657514] device veth0_vlan entered promiscuous mode [ 79.666773] device veth1_vlan entered promiscuous mode [ 79.672596] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 79.681698] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 79.693596] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 79.703571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.711238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.719131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.728636] device veth0_macvtap entered promiscuous mode [ 79.734666] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 79.742799] device veth1_macvtap entered promiscuous mode [ 79.751790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 79.761019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 79.770800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.777869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.786209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.796655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.803341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.114389] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:1:14] [ 107.121811] Modules linked in: [ 107.124983] irq event stamp: 62062939 [ 107.128765] hardirqs last enabled at (62062938): [] ktime_get+0x235/0x2f0 [ 107.137317] hardirqs last disabled at (62062939): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 107.147002] softirqs last enabled at (52774): [] icmp6_dst_alloc+0x3de/0x660 [ 107.155814] softirqs last disabled at (52776): [] ip6_finish_output2+0x1f2/0x2290 [ 107.165497] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 107.172833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.182170] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.187426] RIP: 0010:lock_acquire+0x1ec/0x3c0 [ 107.191983] Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 b7 01 00 00 48 83 3d 09 2e a6 08 00 0f 84 2a 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b [ 107.210860] RSP: 0018:ffff8880b5a96bd8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 107.218545] RAX: 1ffffffff13e3051 RBX: ffff8880b5a82380 RCX: 00000000000047d0 [ 107.225791] RDX: dffffc0000000000 RSI: 00000000ea245cbe RDI: 0000000000000286 [ 107.233040] RBP: ffff8880aee89888 R08: ffffffff8cd3b3c0 R09: 000000000000000a [ 107.240288] R10: ffff8880b5a82d98 R11: ffffffff8c66501b R12: 0000000000000000 [ 107.247533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 107.254807] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 107.263992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.269849] CR2: 00007ffc11420db8 CR3: 0000000009e6d000 CR4: 00000000003406f0 [ 107.277097] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.284347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.291599] Call Trace: [ 107.294177] ? ktime_get+0x200/0x2f0 [ 107.297876] _raw_spin_lock+0x2a/0x40 [ 107.301653] ? tcf_police_act+0x7a/0xe60 [ 107.305693] tcf_police_act+0x7a/0xe60 [ 107.309559] ? tcf_police_dump+0x960/0x960 [ 107.313770] ? tcf_action_exec+0x16f/0x400 [ 107.317995] tcf_action_exec+0x160/0x400 [ 107.322041] basic_classify+0x184/0x2b0 [ 107.325993] tcf_classify+0x120/0x3c0 [ 107.329778] prio_enqueue+0x3bb/0x7a0 [ 107.333556] ? prio_reset+0x160/0x160 [ 107.337333] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.341808] __dev_queue_xmit+0x140a/0x2e00 [ 107.346110] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.350243] ? mark_held_locks+0xa6/0xf0 [ 107.354283] ? ip_finish_output2+0xfbc/0x15a0 [ 107.358755] ip_finish_output2+0xb6d/0x15a0 [ 107.363059] ? ip_send_check+0xb0/0xb0 [ 107.366923] ? ip_output+0x3a5/0x5f0 [ 107.370618] ip_finish_output+0xae9/0x10b0 [ 107.374834] ip_output+0x203/0x5f0 [ 107.378381] ? ip_mc_output+0xec0/0xec0 [ 107.382335] ? ip_fragment.constprop.0+0x240/0x240 [ 107.387240] ? prandom_u32+0x171/0x1f0 [ 107.391105] ip_local_out+0xaf/0x170 [ 107.394799] iptunnel_xmit+0x63b/0x9d0 [ 107.398668] ? erspan_changelink+0x150/0x220 [ 107.403066] geneve_xmit+0x120d/0x2e60 [ 107.406937] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 107.412107] ? __lock_acquire+0x6de/0x3ff0 [ 107.416327] ? netif_skb_features+0x5c1/0xb30 [ 107.420801] ? check_preemption_disabled+0x41/0x280 [ 107.425799] dev_hard_start_xmit+0x1a8/0x920 [ 107.430189] __dev_queue_xmit+0x269d/0x2e00 [ 107.434491] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.438617] ? ip6_finish_output2+0x113d/0x2290 [ 107.443267] ? memcpy+0x35/0x50 [ 107.446527] neigh_resolve_output+0x55a/0x910 [ 107.451004] ip6_finish_output2+0x113d/0x2290 [ 107.455481] ? ip6_forward_finish+0x4b0/0x4b0 [ 107.459955] ? lock_downgrade+0x720/0x720 [ 107.464079] ? lock_acquire+0x170/0x3c0 [ 107.468031] ? check_preemption_disabled+0x41/0x280 [ 107.473031] ip6_finish_output+0x89b/0x10f0 [ 107.477331] ip6_output+0x205/0x770 [ 107.480936] ? ip6_finish_output+0x10f0/0x10f0 [ 107.485497] ? ip6_fragment+0x34e0/0x34e0 [ 107.489625] ? check_preemption_disabled+0x41/0x280 [ 107.494621] ndisc_send_skb+0xa24/0x1720 [ 107.498674] ? ndisc_alloc_skb+0x320/0x320 [ 107.502892] ? ipv6_setsockopt+0x160/0x160 [ 107.507111] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 107.512458] ? __alloc_skb+0x34f/0x560 [ 107.516334] ? skb_set_owner_w+0x1f6/0x330 [ 107.520556] ndisc_send_ns+0x51d/0x840 [ 107.524424] ? addrconf_dad_work+0xa48/0x10a0 [ 107.528897] ? pndisc_redo+0x20/0x20 [ 107.532590] ? mark_held_locks+0xa6/0xf0 [ 107.536630] ? __local_bh_enable_ip+0x159/0x270 [ 107.541278] addrconf_dad_work+0xb0e/0x10a0 [ 107.545582] ? addrconf_dad_completed+0xb60/0xb60 [ 107.550408] process_one_work+0x864/0x1570 [ 107.554625] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 107.559278] worker_thread+0x64c/0x1130 [ 107.563236] ? __kthread_parkme+0x133/0x1e0 [ 107.567537] ? process_one_work+0x1570/0x1570 [ 107.572009] kthread+0x33f/0x460 [ 107.575353] ? kthread_park+0x180/0x180 [ 107.579309] ret_from_fork+0x24/0x30 [ 107.583005] Kernel panic - not syncing: softlockup: hung tasks [ 107.588959] CPU: 0 PID: 14 Comm: kworker/0:1 Tainted: G L 4.19.211-syzkaller #0 [ 107.597683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.607021] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.612270] Call Trace: [ 107.614830] [ 107.616961] dump_stack+0x1fc/0x2ef [ 107.620571] panic+0x26a/0x50e [ 107.623743] ? __warn_printk+0xf3/0xf3 [ 107.627616] ? watchdog_timer_fn.cold+0x5/0x25 [ 107.632176] ? watchdog_timer_fn+0x53e/0x580 [ 107.636566] watchdog_timer_fn.cold+0x16/0x25 [ 107.641043] __hrtimer_run_queues+0x3f6/0xe60 [ 107.645517] ? softlockup_fn+0xb0/0xb0 [ 107.649384] ? hrtimer_fixup_free+0xa0/0xa0 [ 107.653686] ? kvm_clock_get_cycles+0x14/0x30 [ 107.658159] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 107.663503] hrtimer_interrupt+0x326/0x9e0 [ 107.667719] smp_apic_timer_interrupt+0x10c/0x550 [ 107.672545] apic_timer_interrupt+0xf/0x20 [ 107.676840] [ 107.679055] RIP: 0010:lock_acquire+0x1ec/0x3c0 [ 107.683617] Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 b7 01 00 00 48 83 3d 09 2e a6 08 00 0f 84 2a 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b [ 107.702497] RSP: 0018:ffff8880b5a96bd8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 107.710183] RAX: 1ffffffff13e3051 RBX: ffff8880b5a82380 RCX: 00000000000047d0 [ 107.717427] RDX: dffffc0000000000 RSI: 00000000ea245cbe RDI: 0000000000000286 [ 107.724673] RBP: ffff8880aee89888 R08: ffffffff8cd3b3c0 R09: 000000000000000a [ 107.731917] R10: ffff8880b5a82d98 R11: ffffffff8c66501b R12: 0000000000000000 [ 107.739162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 107.746421] ? ktime_get+0x200/0x2f0 [ 107.750117] _raw_spin_lock+0x2a/0x40 [ 107.753894] ? tcf_police_act+0x7a/0xe60 [ 107.757932] tcf_police_act+0x7a/0xe60 [ 107.761803] ? tcf_police_dump+0x960/0x960 [ 107.766017] ? tcf_action_exec+0x16f/0x400 [ 107.770233] tcf_action_exec+0x160/0x400 [ 107.774275] basic_classify+0x184/0x2b0 [ 107.778231] tcf_classify+0x120/0x3c0 [ 107.782014] prio_enqueue+0x3bb/0x7a0 [ 107.785790] ? prio_reset+0x160/0x160 [ 107.789567] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.794041] __dev_queue_xmit+0x140a/0x2e00 [ 107.798345] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.802477] ? mark_held_locks+0xa6/0xf0 [ 107.806541] ? ip_finish_output2+0xfbc/0x15a0 [ 107.811013] ip_finish_output2+0xb6d/0x15a0 [ 107.815315] ? ip_send_check+0xb0/0xb0 [ 107.819176] ? ip_output+0x3a5/0x5f0 [ 107.822871] ip_finish_output+0xae9/0x10b0 [ 107.827092] ip_output+0x203/0x5f0 [ 107.830609] ? ip_mc_output+0xec0/0xec0 [ 107.834561] ? ip_fragment.constprop.0+0x240/0x240 [ 107.839471] ? prandom_u32+0x171/0x1f0 [ 107.843336] ip_local_out+0xaf/0x170 [ 107.847029] iptunnel_xmit+0x63b/0x9d0 [ 107.850891] ? erspan_changelink+0x150/0x220 [ 107.855296] geneve_xmit+0x120d/0x2e60 [ 107.859169] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 107.864341] ? __lock_acquire+0x6de/0x3ff0 [ 107.868561] ? netif_skb_features+0x5c1/0xb30 [ 107.873038] ? check_preemption_disabled+0x41/0x280 [ 107.878036] dev_hard_start_xmit+0x1a8/0x920 [ 107.882426] __dev_queue_xmit+0x269d/0x2e00 [ 107.886728] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.890857] ? ip6_finish_output2+0x113d/0x2290 [ 107.895519] ? memcpy+0x35/0x50 [ 107.898779] neigh_resolve_output+0x55a/0x910 [ 107.903255] ip6_finish_output2+0x113d/0x2290 [ 107.907729] ? ip6_forward_finish+0x4b0/0x4b0 [ 107.912205] ? lock_downgrade+0x720/0x720 [ 107.916332] ? lock_acquire+0x170/0x3c0 [ 107.920284] ? check_preemption_disabled+0x41/0x280 [ 107.925280] ip6_finish_output+0x89b/0x10f0 [ 107.929580] ip6_output+0x205/0x770 [ 107.933187] ? ip6_finish_output+0x10f0/0x10f0 [ 107.937748] ? ip6_fragment+0x34e0/0x34e0 [ 107.941873] ? check_preemption_disabled+0x41/0x280 [ 107.946872] ndisc_send_skb+0xa24/0x1720 [ 107.950933] ? ndisc_alloc_skb+0x320/0x320 [ 107.955157] ? ipv6_setsockopt+0x160/0x160 [ 107.959374] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 107.964655] ? __alloc_skb+0x34f/0x560 [ 107.968529] ? skb_set_owner_w+0x1f6/0x330 [ 107.972747] ndisc_send_ns+0x51d/0x840 [ 107.976613] ? addrconf_dad_work+0xa48/0x10a0 [ 107.981095] ? pndisc_redo+0x20/0x20 [ 107.984789] ? mark_held_locks+0xa6/0xf0 [ 107.989001] ? __local_bh_enable_ip+0x159/0x270 [ 107.993652] addrconf_dad_work+0xb0e/0x10a0 [ 107.997968] ? addrconf_dad_completed+0xb60/0xb60 [ 108.002795] process_one_work+0x864/0x1570 [ 108.007013] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 108.011667] worker_thread+0x64c/0x1130 [ 108.015636] ? __kthread_parkme+0x133/0x1e0 [ 108.019933] ? process_one_work+0x1570/0x1570 [ 108.024404] kthread+0x33f/0x460 [ 108.027745] ? kthread_park+0x180/0x180 [ 108.031710] ret_from_fork+0x24/0x30 [ 108.035693] Kernel Offset: disabled [ 108.039345] Rebooting in 86400 seconds..