[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. syzkaller login: [ 78.663712] IPVS: ftp: loaded support on port[0] = 21 [ 78.733661] chnl_net:caif_netlink_parms(): no params data found [ 78.796396] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.802979] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.811161] device bridge_slave_0 entered promiscuous mode [ 78.818823] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.825496] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.832443] device bridge_slave_1 entered promiscuous mode [ 78.850924] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.859754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.877968] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.885351] team0: Port device team_slave_0 added [ 78.890698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.898396] team0: Port device team_slave_1 added [ 78.912904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.919239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.944457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.956221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.962448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.987765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.001281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.008845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.028224] device hsr_slave_0 entered promiscuous mode [ 79.033883] device hsr_slave_1 entered promiscuous mode [ 79.040357] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 79.047827] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 79.110013] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.116428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.123134] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.129530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.158894] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 79.166804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.174738] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.182967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.191772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.198895] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.206157] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.217237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 79.223289] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.233001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.240972] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.247379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.264874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.272404] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.278769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.287086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.295491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.303483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.312969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.323660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.335694] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 79.341685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.349000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.361792] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 79.369417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.376149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.387610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.420212] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 79.429506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.462073] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 79.469637] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 79.477006] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 79.486441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.493938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.501298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.510386] device veth0_vlan entered promiscuous mode [ 79.519820] device veth1_vlan entered promiscuous mode [ 79.525902] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 79.533866] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 79.545334] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 79.554050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.562571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.570081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.579509] device veth0_macvtap entered promiscuous mode [ 79.585840] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 79.593623] device veth1_macvtap entered promiscuous mode [ 79.602141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 79.611292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 79.621254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.628319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.636414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.646891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.653946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.140750] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:1:14] [ 107.148144] Modules linked in: [ 107.151314] irq event stamp: 61849267 [ 107.155097] hardirqs last enabled at (61849266): [] ktime_get+0x235/0x2f0 [ 107.163651] hardirqs last disabled at (61849267): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 107.173333] softirqs last enabled at (97138): [] icmp6_dst_alloc+0x3de/0x660 [ 107.182147] softirqs last disabled at (97140): [] ip6_finish_output2+0x1f2/0x2290 [ 107.191746] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 107.199079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.208418] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.213676] RIP: 0010:ktime_get+0x25f/0x2f0 [ 107.217976] Code: 48 c7 c0 88 82 f1 89 48 c1 e8 03 42 80 3c 20 00 0f 85 86 00 00 00 48 83 3d 25 ee 9c 08 00 74 35 e8 06 f1 0d 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 ce fe ff ff e8 f2 f0 0d 00 0f 0b e8 eb f0 0d 00 [ 107.236860] RSP: 0018:ffff8880b5a96bf0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 107.244549] RAX: ffff8880b5a82380 RBX: 0000000000000293 RCX: 1ffff11016b505b7 [ 107.251796] RDX: 0000000000000000 RSI: ffffffff8154946a RDI: 0000000000000293 [ 107.259054] RBP: fffffbfff13e3050 R08: ffffffff8cd45f68 R09: 0000000000000000 [ 107.266307] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 107.273560] R13: 1ffffffff13e3052 R14: 0000000000000200 R15: 0000000000000001 [ 107.280815] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 107.289019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.294878] CR2: 00007ffd5e402bd8 CR3: 0000000009e6d000 CR4: 00000000003406f0 [ 107.302129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.309382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.316629] Call Trace: [ 107.319202] tcf_police_act+0x3e8/0xe60 [ 107.323173] ? tcf_police_dump+0x960/0x960 [ 107.327393] ? tcf_action_exec+0x16f/0x400 [ 107.331613] tcf_action_exec+0x160/0x400 [ 107.335661] basic_classify+0x184/0x2b0 [ 107.339628] tcf_classify+0x120/0x3c0 [ 107.343413] prio_enqueue+0x3bb/0x7a0 [ 107.347195] ? prio_reset+0x160/0x160 [ 107.350974] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.355450] __dev_queue_xmit+0x140a/0x2e00 [ 107.359765] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.363901] ? mark_held_locks+0xa6/0xf0 [ 107.367940] ? ip_finish_output2+0xfbc/0x15a0 [ 107.372418] ip_finish_output2+0xb6d/0x15a0 [ 107.376722] ? ip_send_check+0xb0/0xb0 [ 107.380586] ? ip_output+0x3a5/0x5f0 [ 107.384279] ip_finish_output+0xae9/0x10b0 [ 107.388493] ip_output+0x203/0x5f0 [ 107.392013] ? ip_mc_output+0xec0/0xec0 [ 107.395966] ? ip_fragment.constprop.0+0x240/0x240 [ 107.400875] ? prandom_u32+0x171/0x1f0 [ 107.404743] ip_local_out+0xaf/0x170 [ 107.408437] iptunnel_xmit+0x63b/0x9d0 [ 107.412300] ? erspan_changelink+0x150/0x220 [ 107.416692] geneve_xmit+0x120d/0x2e60 [ 107.420565] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 107.425742] ? __lock_acquire+0x6de/0x3ff0 [ 107.429955] ? netif_skb_features+0x5c1/0xb30 [ 107.434431] ? check_preemption_disabled+0x41/0x280 [ 107.439428] dev_hard_start_xmit+0x1a8/0x920 [ 107.443816] __dev_queue_xmit+0x269d/0x2e00 [ 107.448117] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.452246] ? ip6_finish_output2+0x113d/0x2290 [ 107.456897] ? memcpy+0x35/0x50 [ 107.460154] neigh_resolve_output+0x55a/0x910 [ 107.464631] ip6_finish_output2+0x113d/0x2290 [ 107.469109] ? ip6_forward_finish+0x4b0/0x4b0 [ 107.473588] ? lock_downgrade+0x720/0x720 [ 107.477714] ? lock_acquire+0x170/0x3c0 [ 107.481668] ? check_preemption_disabled+0x41/0x280 [ 107.486663] ip6_finish_output+0x89b/0x10f0 [ 107.490964] ip6_output+0x205/0x770 [ 107.494569] ? ip6_finish_output+0x10f0/0x10f0 [ 107.499129] ? ip6_fragment+0x34e0/0x34e0 [ 107.503257] ? check_preemption_disabled+0x41/0x280 [ 107.508252] ndisc_send_skb+0xa24/0x1720 [ 107.512294] ? ndisc_alloc_skb+0x320/0x320 [ 107.516548] ? ipv6_setsockopt+0x160/0x160 [ 107.520762] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 107.526020] ? __alloc_skb+0x34f/0x560 [ 107.529886] ? skb_set_owner_w+0x1f6/0x330 [ 107.534101] ndisc_send_ns+0x51d/0x840 [ 107.537968] ? addrconf_dad_work+0xa48/0x10a0 [ 107.542444] ? pndisc_redo+0x20/0x20 [ 107.546139] ? mark_held_locks+0xa6/0xf0 [ 107.550177] ? __local_bh_enable_ip+0x159/0x270 [ 107.554831] addrconf_dad_work+0xb0e/0x10a0 [ 107.559130] ? addrconf_dad_completed+0xb60/0xb60 [ 107.563980] process_one_work+0x864/0x1570 [ 107.568195] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 107.572858] worker_thread+0x64c/0x1130 [ 107.576816] ? __kthread_parkme+0x133/0x1e0 [ 107.581115] ? process_one_work+0x1570/0x1570 [ 107.585589] kthread+0x33f/0x460 [ 107.588933] ? kthread_park+0x180/0x180 [ 107.592886] ret_from_fork+0x24/0x30 [ 107.596582] Kernel panic - not syncing: softlockup: hung tasks [ 107.602556] CPU: 0 PID: 14 Comm: kworker/0:1 Tainted: G L 4.19.211-syzkaller #0 [ 107.611284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.620624] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.625875] Call Trace: [ 107.628433] [ 107.630658] dump_stack+0x1fc/0x2ef [ 107.634279] panic+0x26a/0x50e [ 107.637449] ? __warn_printk+0xf3/0xf3 [ 107.641320] ? watchdog_timer_fn.cold+0x5/0x25 [ 107.645879] ? watchdog_timer_fn+0x53e/0x580 [ 107.650267] watchdog_timer_fn.cold+0x16/0x25 [ 107.654875] __hrtimer_run_queues+0x3f6/0xe60 [ 107.659357] ? softlockup_fn+0xb0/0xb0 [ 107.663230] ? hrtimer_fixup_free+0xa0/0xa0 [ 107.667538] ? kvm_clock_get_cycles+0x14/0x30 [ 107.672016] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 107.677363] hrtimer_interrupt+0x326/0x9e0 [ 107.681587] smp_apic_timer_interrupt+0x10c/0x550 [ 107.686413] apic_timer_interrupt+0xf/0x20 [ 107.690625] [ 107.692840] RIP: 0010:ktime_get+0x25f/0x2f0 [ 107.697142] Code: 48 c7 c0 88 82 f1 89 48 c1 e8 03 42 80 3c 20 00 0f 85 86 00 00 00 48 83 3d 25 ee 9c 08 00 74 35 e8 06 f1 0d 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 ce fe ff ff e8 f2 f0 0d 00 0f 0b e8 eb f0 0d 00 [ 107.716018] RSP: 0018:ffff8880b5a96bf0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 107.723701] RAX: ffff8880b5a82380 RBX: 0000000000000293 RCX: 1ffff11016b505b7 [ 107.730948] RDX: 0000000000000000 RSI: ffffffff8154946a RDI: 0000000000000293 [ 107.738209] RBP: fffffbfff13e3050 R08: ffffffff8cd45f68 R09: 0000000000000000 [ 107.745463] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 107.752718] R13: 1ffffffff13e3052 R14: 0000000000000200 R15: 0000000000000001 [ 107.759988] ? ktime_get+0x25a/0x2f0 [ 107.763692] tcf_police_act+0x3e8/0xe60 [ 107.767650] ? tcf_police_dump+0x960/0x960 [ 107.771863] ? tcf_action_exec+0x16f/0x400 [ 107.776080] tcf_action_exec+0x160/0x400 [ 107.780123] basic_classify+0x184/0x2b0 [ 107.784152] tcf_classify+0x120/0x3c0 [ 107.787934] prio_enqueue+0x3bb/0x7a0 [ 107.791715] ? prio_reset+0x160/0x160 [ 107.795524] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.800004] __dev_queue_xmit+0x140a/0x2e00 [ 107.804318] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.808467] ? mark_held_locks+0xa6/0xf0 [ 107.812510] ? ip_finish_output2+0xfbc/0x15a0 [ 107.817002] ip_finish_output2+0xb6d/0x15a0 [ 107.821311] ? ip_send_check+0xb0/0xb0 [ 107.825181] ? ip_output+0x3a5/0x5f0 [ 107.828880] ip_finish_output+0xae9/0x10b0 [ 107.833099] ip_output+0x203/0x5f0 [ 107.836622] ? ip_mc_output+0xec0/0xec0 [ 107.840604] ? ip_fragment.constprop.0+0x240/0x240 [ 107.845522] ? prandom_u32+0x171/0x1f0 [ 107.849390] ip_local_out+0xaf/0x170 [ 107.853086] iptunnel_xmit+0x63b/0x9d0 [ 107.856953] ? erspan_changelink+0x150/0x220 [ 107.861342] geneve_xmit+0x120d/0x2e60 [ 107.865216] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 107.870389] ? __lock_acquire+0x6de/0x3ff0 [ 107.874605] ? netif_skb_features+0x5c1/0xb30 [ 107.879081] ? check_preemption_disabled+0x41/0x280 [ 107.884081] dev_hard_start_xmit+0x1a8/0x920 [ 107.888496] __dev_queue_xmit+0x269d/0x2e00 [ 107.892806] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.896936] ? ip6_finish_output2+0x113d/0x2290 [ 107.901589] ? memcpy+0x35/0x50 [ 107.904851] neigh_resolve_output+0x55a/0x910 [ 107.909327] ip6_finish_output2+0x113d/0x2290 [ 107.913810] ? ip6_forward_finish+0x4b0/0x4b0 [ 107.918283] ? lock_downgrade+0x720/0x720 [ 107.922407] ? lock_acquire+0x170/0x3c0 [ 107.926366] ? check_preemption_disabled+0x41/0x280 [ 107.931364] ip6_finish_output+0x89b/0x10f0 [ 107.935665] ip6_output+0x205/0x770 [ 107.939271] ? ip6_finish_output+0x10f0/0x10f0 [ 107.943832] ? ip6_fragment+0x34e0/0x34e0 [ 107.947957] ? check_preemption_disabled+0x41/0x280 [ 107.952952] ndisc_send_skb+0xa24/0x1720 [ 107.956994] ? ndisc_alloc_skb+0x320/0x320 [ 107.961209] ? ipv6_setsockopt+0x160/0x160 [ 107.965422] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 107.970686] ? __alloc_skb+0x34f/0x560 [ 107.974554] ? skb_set_owner_w+0x1f6/0x330 [ 107.978769] ndisc_send_ns+0x51d/0x840 [ 107.982636] ? addrconf_dad_work+0xa48/0x10a0 [ 107.987112] ? pndisc_redo+0x20/0x20 [ 107.990811] ? mark_held_locks+0xa6/0xf0 [ 107.994850] ? __local_bh_enable_ip+0x159/0x270 [ 107.999515] addrconf_dad_work+0xb0e/0x10a0 [ 108.003813] ? addrconf_dad_completed+0xb60/0xb60 [ 108.008638] process_one_work+0x864/0x1570 [ 108.012854] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 108.017522] worker_thread+0x64c/0x1130 [ 108.021482] ? __kthread_parkme+0x133/0x1e0 [ 108.025796] ? process_one_work+0x1570/0x1570 [ 108.030275] kthread+0x33f/0x460 [ 108.033619] ? kthread_park+0x180/0x180 [ 108.037572] ret_from_fork+0x24/0x30 [ 108.041560] Kernel Offset: disabled [ 108.045209] Rebooting in 86400 seconds..