[ OK ] Started Getty on tty5. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.117' (ECDSA) to the list of known hosts. syzkaller login: [ 73.226423] IPVS: ftp: loaded support on port[0] = 21 [ 73.295564] chnl_net:caif_netlink_parms(): no params data found [ 73.367666] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.374264] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.382186] device bridge_slave_0 entered promiscuous mode [ 73.389088] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.395760] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.403600] device bridge_slave_1 entered promiscuous mode [ 73.420010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.429024] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.446700] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.454492] team0: Port device team_slave_0 added [ 73.459847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.467450] team0: Port device team_slave_1 added [ 73.482746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.488973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.514193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.525379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.531664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.556986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.570940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.578238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.596983] device hsr_slave_0 entered promiscuous mode [ 73.602693] device hsr_slave_1 entered promiscuous mode [ 73.608575] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 73.615776] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.678741] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.685163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.692052] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.698403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.729006] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 73.736561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.744912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.753931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.762556] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.769499] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.777107] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.787156] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 73.794104] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.803073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.810975] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.817314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.838796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.848686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.859982] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 73.868399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.875991] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.882363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.889882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.898045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.905661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.913402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.921073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.927813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.940742] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 73.948146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.955957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.965618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.999412] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 74.009316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.037505] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 74.045204] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 74.051865] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 74.060604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.067976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.075322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.084189] device veth0_vlan entered promiscuous mode [ 74.093404] device veth1_vlan entered promiscuous mode [ 74.099210] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 74.108060] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 74.119280] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 74.128656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.136200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.143713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.153377] device veth0_macvtap entered promiscuous mode [ 74.159452] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 74.167386] device veth1_macvtap entered promiscuous mode [ 74.176452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 74.186061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 74.195702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.202501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.212032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.221914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.229571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.136759] watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [kworker/1:0:19] [ 99.144164] Modules linked in: [ 99.147334] irq event stamp: 54750131 [ 99.151123] hardirqs last enabled at (54750130): [] ktime_get+0x235/0x2f0 [ 99.159683] hardirqs last disabled at (54750131): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 99.169374] softirqs last enabled at (44754): [] icmp6_dst_alloc+0x3de/0x660 [ 99.178189] softirqs last disabled at (44756): [] ip6_finish_output2+0x1f2/0x2290 [ 99.187959] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 4.19.211-syzkaller #0 [ 99.195293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.204634] Workqueue: ipv6_addrconf addrconf_dad_work [ 99.209894] RIP: 0010:lock_release+0x429/0x8b0 [ 99.214455] Code: 84 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 95 03 00 00 48 83 3d 7b 34 a6 08 00 0f 84 cc 01 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 00 00 00 [ 99.233337] RSP: 0018:ffff8880b5ad6b80 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 99.241030] RAX: 1ffffffff13e3051 RBX: ffff8880b5abc500 RCX: 1ffff11016b579e3 [ 99.248298] RDX: dffffc0000000000 RSI: 000000000000000b RDI: 0000000000000286 [ 99.255556] RBP: 000000000000000a R08: ffffffff8c665058 R09: 000000000000000a [ 99.262809] R10: 0000000000000000 R11: ffffffff8c66505b R12: 1ffff11016b5ad73 [ 99.270058] R13: b62b8b47a3d453ac R14: ffff8880b5abc500 R15: 000000000000000b [ 99.277316] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 99.285532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.291392] CR2: 00007fff51ac2278 CR3: 0000000009e6d000 CR4: 00000000003406e0 [ 99.298643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.305896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.313143] Call Trace: [ 99.315721] ? mark_held_locks+0xa6/0xf0 [ 99.319764] ? lock_downgrade+0x720/0x720 [ 99.323894] ? kvm_clock_get_cycles+0x14/0x30 [ 99.328374] ? ktime_get+0x200/0x2f0 [ 99.332070] _raw_spin_unlock+0x17/0x40 [ 99.336026] tcf_police_act+0x786/0xe60 [ 99.339988] ? tcf_police_dump+0x960/0x960 [ 99.344215] ? tcf_action_exec+0x16f/0x400 [ 99.348434] tcf_action_exec+0x160/0x400 [ 99.352501] basic_classify+0x184/0x2b0 [ 99.356460] tcf_classify+0x120/0x3c0 [ 99.360243] prio_enqueue+0x3bb/0x7a0 [ 99.364027] ? prio_reset+0x160/0x160 [ 99.367810] ? __dev_queue_xmit+0x134e/0x2e00 [ 99.372288] __dev_queue_xmit+0x140a/0x2e00 [ 99.376594] ? netdev_pick_tx+0x2f0/0x2f0 [ 99.380733] ? mark_held_locks+0xa6/0xf0 [ 99.384788] ? ip_finish_output2+0xfbc/0x15a0 [ 99.389264] ip_finish_output2+0xb6d/0x15a0 [ 99.393570] ? ip_send_check+0xb0/0xb0 [ 99.397444] ? ip_output+0x3a5/0x5f0 [ 99.401146] ip_finish_output+0xae9/0x10b0 [ 99.405365] ip_output+0x203/0x5f0 [ 99.408884] ? ip_mc_output+0xec0/0xec0 [ 99.412860] ? ip_fragment.constprop.0+0x240/0x240 [ 99.417771] ? __call_rcu.constprop.0+0x245/0x7f0 [ 99.422596] ip_local_out+0xaf/0x170 [ 99.426292] iptunnel_xmit+0x63b/0x9d0 [ 99.430163] ? erspan_changelink+0x150/0x220 [ 99.434558] geneve_xmit+0x120d/0x2e60 [ 99.438432] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 99.443617] ? __lock_acquire+0x6de/0x3ff0 [ 99.447837] ? netif_skb_features+0x5c1/0xb30 [ 99.452318] ? check_preemption_disabled+0x41/0x280 [ 99.457345] dev_hard_start_xmit+0x1a8/0x920 [ 99.461749] __dev_queue_xmit+0x269d/0x2e00 [ 99.466054] ? netdev_pick_tx+0x2f0/0x2f0 [ 99.470188] ? ip6_finish_output2+0x113d/0x2290 [ 99.474853] ? memcpy+0x35/0x50 [ 99.478121] neigh_resolve_output+0x55a/0x910 [ 99.482604] ip6_finish_output2+0x113d/0x2290 [ 99.487084] ? ip6_forward_finish+0x4b0/0x4b0 [ 99.491579] ? lock_downgrade+0x720/0x720 [ 99.495716] ? lock_acquire+0x170/0x3c0 [ 99.499700] ? check_preemption_disabled+0x41/0x280 [ 99.504702] ip6_finish_output+0x89b/0x10f0 [ 99.509011] ip6_output+0x205/0x770 [ 99.512622] ? ip6_finish_output+0x10f0/0x10f0 [ 99.517204] ? ip6_fragment+0x34e0/0x34e0 [ 99.521353] ? check_preemption_disabled+0x41/0x280 [ 99.526357] ndisc_send_skb+0xa24/0x1720 [ 99.530401] ? ndisc_alloc_skb+0x320/0x320 [ 99.534619] ? ipv6_setsockopt+0x160/0x160 [ 99.538836] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 99.544101] ? __alloc_skb+0x34f/0x560 [ 99.547971] ? skb_set_owner_w+0x1f6/0x330 [ 99.552190] ndisc_send_ns+0x51d/0x840 [ 99.556061] ? addrconf_dad_work+0xa48/0x10a0 [ 99.560539] ? pndisc_redo+0x20/0x20 [ 99.564236] ? mark_held_locks+0xa6/0xf0 [ 99.568278] ? __local_bh_enable_ip+0x159/0x270 [ 99.572930] addrconf_dad_work+0xb0e/0x10a0 [ 99.577243] ? addrconf_dad_completed+0xb60/0xb60 [ 99.582080] process_one_work+0x864/0x1570 [ 99.586300] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 99.590959] worker_thread+0x64c/0x1130 [ 99.594922] ? process_one_work+0x1570/0x1570 [ 99.599399] kthread+0x33f/0x460 [ 99.602745] ? kthread_park+0x180/0x180 [ 99.606711] ret_from_fork+0x24/0x30 [ 99.610438] Kernel panic - not syncing: softlockup: hung tasks [ 99.616399] CPU: 1 PID: 19 Comm: kworker/1:0 Tainted: G L 4.19.211-syzkaller #0 [ 99.625130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.634480] Workqueue: ipv6_addrconf addrconf_dad_work [ 99.639737] Call Trace: [ 99.642303] [ 99.644438] dump_stack+0x1fc/0x2ef [ 99.648050] panic+0x26a/0x50e [ 99.651225] ? __warn_printk+0xf3/0xf3 [ 99.655188] ? watchdog_timer_fn.cold+0x5/0x25 [ 99.659754] ? watchdog_timer_fn+0x53e/0x580 [ 99.664149] watchdog_timer_fn.cold+0x16/0x25 [ 99.668630] __hrtimer_run_queues+0x3f6/0xe60 [ 99.673107] ? softlockup_fn+0xb0/0xb0 [ 99.676988] ? hrtimer_fixup_free+0xa0/0xa0 [ 99.681297] ? kvm_clock_get_cycles+0x14/0x30 [ 99.685770] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 99.691118] hrtimer_interrupt+0x326/0x9e0 [ 99.695342] smp_apic_timer_interrupt+0x10c/0x550 [ 99.700167] apic_timer_interrupt+0xf/0x20 [ 99.704384] [ 99.706614] RIP: 0010:lock_release+0x429/0x8b0 [ 99.711179] Code: 84 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 95 03 00 00 48 83 3d 7b 34 a6 08 00 0f 84 cc 01 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 00 00 00 [ 99.730058] RSP: 0018:ffff8880b5ad6b80 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 99.737746] RAX: 1ffffffff13e3051 RBX: ffff8880b5abc500 RCX: 1ffff11016b579e3 [ 99.745017] RDX: dffffc0000000000 RSI: 000000000000000b RDI: 0000000000000286 [ 99.752265] RBP: 000000000000000a R08: ffffffff8c665058 R09: 000000000000000a [ 99.759513] R10: 0000000000000000 R11: ffffffff8c66505b R12: 1ffff11016b5ad73 [ 99.766783] R13: b62b8b47a3d453ac R14: ffff8880b5abc500 R15: 000000000000000b [ 99.774049] ? mark_held_locks+0xa6/0xf0 [ 99.778090] ? lock_downgrade+0x720/0x720 [ 99.782221] ? kvm_clock_get_cycles+0x14/0x30 [ 99.786699] ? ktime_get+0x200/0x2f0 [ 99.790394] _raw_spin_unlock+0x17/0x40 [ 99.794347] tcf_police_act+0x786/0xe60 [ 99.798303] ? tcf_police_dump+0x960/0x960 [ 99.802533] ? tcf_action_exec+0x16f/0x400 [ 99.806747] tcf_action_exec+0x160/0x400 [ 99.810791] basic_classify+0x184/0x2b0 [ 99.814766] tcf_classify+0x120/0x3c0 [ 99.818550] prio_enqueue+0x3bb/0x7a0 [ 99.822333] ? prio_reset+0x160/0x160 [ 99.826116] ? __dev_queue_xmit+0x134e/0x2e00 [ 99.830592] __dev_queue_xmit+0x140a/0x2e00 [ 99.834898] ? netdev_pick_tx+0x2f0/0x2f0 [ 99.839034] ? mark_held_locks+0xa6/0xf0 [ 99.843076] ? ip_finish_output2+0xfbc/0x15a0 [ 99.847551] ip_finish_output2+0xb6d/0x15a0 [ 99.851852] ? ip_send_check+0xb0/0xb0 [ 99.855718] ? ip_output+0x3a5/0x5f0 [ 99.859415] ip_finish_output+0xae9/0x10b0 [ 99.863631] ip_output+0x203/0x5f0 [ 99.867149] ? ip_mc_output+0xec0/0xec0 [ 99.871104] ? ip_fragment.constprop.0+0x240/0x240 [ 99.876013] ? __call_rcu.constprop.0+0x245/0x7f0 [ 99.880835] ip_local_out+0xaf/0x170 [ 99.884530] iptunnel_xmit+0x63b/0x9d0 [ 99.888397] ? erspan_changelink+0x150/0x220 [ 99.892786] geneve_xmit+0x120d/0x2e60 [ 99.896671] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 99.901859] ? __lock_acquire+0x6de/0x3ff0 [ 99.906079] ? netif_skb_features+0x5c1/0xb30 [ 99.910558] ? check_preemption_disabled+0x41/0x280 [ 99.915560] dev_hard_start_xmit+0x1a8/0x920 [ 99.919951] __dev_queue_xmit+0x269d/0x2e00 [ 99.924259] ? netdev_pick_tx+0x2f0/0x2f0 [ 99.928397] ? ip6_finish_output2+0x113d/0x2290 [ 99.933053] ? memcpy+0x35/0x50 [ 99.936375] neigh_resolve_output+0x55a/0x910 [ 99.940866] ip6_finish_output2+0x113d/0x2290 [ 99.945369] ? ip6_forward_finish+0x4b0/0x4b0 [ 99.949849] ? lock_downgrade+0x720/0x720 [ 99.953979] ? lock_acquire+0x170/0x3c0 [ 99.957935] ? check_preemption_disabled+0x41/0x280 [ 99.962936] ip6_finish_output+0x89b/0x10f0 [ 99.967257] ip6_output+0x205/0x770 [ 99.970874] ? ip6_finish_output+0x10f0/0x10f0 [ 99.975441] ? ip6_fragment+0x34e0/0x34e0 [ 99.979573] ? check_preemption_disabled+0x41/0x280 [ 99.984575] ndisc_send_skb+0xa24/0x1720 [ 99.988629] ? ndisc_alloc_skb+0x320/0x320 [ 99.992847] ? ipv6_setsockopt+0x160/0x160 [ 99.997073] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 100.002344] ? __alloc_skb+0x34f/0x560 [ 100.006213] ? skb_set_owner_w+0x1f6/0x330 [ 100.010433] ndisc_send_ns+0x51d/0x840 [ 100.014306] ? addrconf_dad_work+0xa48/0x10a0 [ 100.018782] ? pndisc_redo+0x20/0x20 [ 100.022480] ? mark_held_locks+0xa6/0xf0 [ 100.026526] ? __local_bh_enable_ip+0x159/0x270 [ 100.031179] addrconf_dad_work+0xb0e/0x10a0 [ 100.035486] ? addrconf_dad_completed+0xb60/0xb60 [ 100.040315] process_one_work+0x864/0x1570 [ 100.044541] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 100.049287] worker_thread+0x64c/0x1130 [ 100.053246] ? process_one_work+0x1570/0x1570 [ 100.057721] kthread+0x33f/0x460 [ 100.061066] ? kthread_park+0x180/0x180 [ 100.065022] ret_from_fork+0x24/0x30 [ 100.069000] Kernel Offset: disabled [ 100.072652] Rebooting in 86400 seconds..