[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. syzkaller login: [ 80.807177] IPVS: ftp: loaded support on port[0] = 21 [ 80.878698] chnl_net:caif_netlink_parms(): no params data found [ 80.964264] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.971192] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.979220] device bridge_slave_0 entered promiscuous mode [ 80.986440] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.993623] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.001064] device bridge_slave_1 entered promiscuous mode [ 81.019218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.028763] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.047338] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.054790] team0: Port device team_slave_0 added [ 81.061025] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.069083] team0: Port device team_slave_1 added [ 81.084166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.090485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.116682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.129209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.135490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.161464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.172679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.180640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.199949] device hsr_slave_0 entered promiscuous mode [ 81.205679] device hsr_slave_1 entered promiscuous mode [ 81.212668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 81.220773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 81.285201] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.291656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.298658] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.305100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.339034] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 81.345292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.354556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.363499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.372107] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.379656] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.386604] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.397326] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 81.404334] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.413687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.422158] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.428585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.437672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.445396] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.466772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.474557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.489674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.499586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.510503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 81.517071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.525386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.533530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.541484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.554465] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 81.562296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.569091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.580289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.593002] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 81.602465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.635353] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 81.642985] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 81.650397] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 81.659718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.667218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.675756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.684625] device veth0_vlan entered promiscuous mode [ 81.693349] device veth1_vlan entered promiscuous mode [ 81.700118] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 81.708768] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 81.720350] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 81.729758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.737117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.745491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.754677] device veth0_macvtap entered promiscuous mode [ 81.761929] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 81.770770] device veth1_macvtap entered promiscuous mode [ 81.780223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 81.790266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 81.801368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.808278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.816604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.826463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.833787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 107.274317] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:1:14] [ 107.281706] Modules linked in: [ 107.284886] irq event stamp: 56527303 [ 107.288688] hardirqs last enabled at (56527302): [] ktime_get+0x235/0x2f0 [ 107.297253] hardirqs last disabled at (56527303): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 107.307048] softirqs last enabled at (93612): [] icmp6_dst_alloc+0x3de/0x660 [ 107.315874] softirqs last disabled at (93614): [] ip6_finish_output2+0x1f2/0x2290 [ 107.325740] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 107.333082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.342433] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.347702] RIP: 0010:lock_acquire+0x1ec/0x3c0 [ 107.352265] Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 b7 01 00 00 48 83 3d 09 2e a6 08 00 0f 84 2a 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b [ 107.371270] RSP: 0018:ffff8880b5a96bd8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 107.378964] RAX: 1ffffffff13e3051 RBX: ffff8880b5a82380 RCX: 000000000000268c [ 107.386216] RDX: dffffc0000000000 RSI: 000000006d3ad09e RDI: 0000000000000286 [ 107.393589] RBP: ffff8880a33c80c8 R08: ffffffff8cd2a9a0 R09: 000000000000000a [ 107.400851] R10: ffff8880b5a82d98 R11: ffffffff8c66501b R12: 0000000000000000 [ 107.408108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 107.415360] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 107.423564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.429423] CR2: 00007ffcbce73128 CR3: 0000000009e6d000 CR4: 00000000003406f0 [ 107.436674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.443925] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.451172] Call Trace: [ 107.453747] ? ktime_get+0x200/0x2f0 [ 107.457459] _raw_spin_lock+0x2a/0x40 [ 107.461243] ? tcf_police_act+0x7a/0xe60 [ 107.465286] tcf_police_act+0x7a/0xe60 [ 107.469156] ? tcf_police_dump+0x960/0x960 [ 107.473374] ? tcf_action_exec+0x16f/0x400 [ 107.477588] ? tcf_action_exec+0x12e/0x400 [ 107.481805] tcf_action_exec+0x160/0x400 [ 107.485851] basic_classify+0x184/0x2b0 [ 107.489810] tcf_classify+0x120/0x3c0 [ 107.493595] prio_enqueue+0x3bb/0x7a0 [ 107.497376] ? prio_reset+0x160/0x160 [ 107.501162] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.505640] __dev_queue_xmit+0x140a/0x2e00 [ 107.509952] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.514088] ? mark_held_locks+0xa6/0xf0 [ 107.518130] ? ip_finish_output2+0xfbc/0x15a0 [ 107.522607] ip_finish_output2+0xb6d/0x15a0 [ 107.526909] ? ip_send_check+0xb0/0xb0 [ 107.530775] ? ip_output+0x3a5/0x5f0 [ 107.534471] ip_finish_output+0xae9/0x10b0 [ 107.538687] ip_output+0x203/0x5f0 [ 107.542207] ? ip_mc_output+0xec0/0xec0 [ 107.546164] ? ip_fragment.constprop.0+0x240/0x240 [ 107.551075] ? prandom_u32+0x171/0x1f0 [ 107.554946] ip_local_out+0xaf/0x170 [ 107.558647] iptunnel_xmit+0x63b/0x9d0 [ 107.562529] ? erspan_changelink+0x150/0x220 [ 107.566921] geneve_xmit+0x120d/0x2e60 [ 107.570796] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 107.575969] ? __lock_acquire+0x6de/0x3ff0 [ 107.580185] ? netif_skb_features+0x5c1/0xb30 [ 107.584672] ? check_preemption_disabled+0x41/0x280 [ 107.589682] dev_hard_start_xmit+0x1a8/0x920 [ 107.594073] __dev_queue_xmit+0x269d/0x2e00 [ 107.598379] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.602509] ? ip6_finish_output2+0x113d/0x2290 [ 107.607162] ? memcpy+0x35/0x50 [ 107.610424] neigh_resolve_output+0x55a/0x910 [ 107.614901] ip6_finish_output2+0x113d/0x2290 [ 107.619379] ? ip6_forward_finish+0x4b0/0x4b0 [ 107.623858] ? lock_downgrade+0x720/0x720 [ 107.627988] ? lock_acquire+0x170/0x3c0 [ 107.631950] ? check_preemption_disabled+0x41/0x280 [ 107.636969] ip6_finish_output+0x89b/0x10f0 [ 107.641283] ip6_output+0x205/0x770 [ 107.644902] ? ip6_finish_output+0x10f0/0x10f0 [ 107.649475] ? ip6_fragment+0x34e0/0x34e0 [ 107.653606] ? check_preemption_disabled+0x41/0x280 [ 107.658616] ndisc_send_skb+0xa24/0x1720 [ 107.662664] ? ndisc_alloc_skb+0x320/0x320 [ 107.666883] ? ipv6_setsockopt+0x160/0x160 [ 107.671101] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 107.676364] ? __alloc_skb+0x34f/0x560 [ 107.680229] ? skb_set_owner_w+0x1f6/0x330 [ 107.684456] ndisc_send_ns+0x51d/0x840 [ 107.688331] ? addrconf_dad_work+0xa48/0x10a0 [ 107.692808] ? pndisc_redo+0x20/0x20 [ 107.696504] ? mark_held_locks+0xa6/0xf0 [ 107.700548] ? __local_bh_enable_ip+0x159/0x270 [ 107.705201] addrconf_dad_work+0xb0e/0x10a0 [ 107.709507] ? addrconf_dad_completed+0xb60/0xb60 [ 107.714335] process_one_work+0x864/0x1570 [ 107.718554] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 107.723207] worker_thread+0x64c/0x1130 [ 107.727167] ? __kthread_parkme+0x133/0x1e0 [ 107.731490] ? process_one_work+0x1570/0x1570 [ 107.735966] kthread+0x33f/0x460 [ 107.739312] ? kthread_park+0x180/0x180 [ 107.743267] ret_from_fork+0x24/0x30 [ 107.746970] Kernel panic - not syncing: softlockup: hung tasks [ 107.752924] CPU: 0 PID: 14 Comm: kworker/0:1 Tainted: G L 4.19.211-syzkaller #0 [ 107.761650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.770994] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.776248] Call Trace: [ 107.778813] [ 107.780946] dump_stack+0x1fc/0x2ef [ 107.784564] panic+0x26a/0x50e [ 107.787748] ? __warn_printk+0xf3/0xf3 [ 107.791621] ? watchdog_timer_fn.cold+0x5/0x25 [ 107.796184] ? watchdog_timer_fn+0x53e/0x580 [ 107.800576] watchdog_timer_fn.cold+0x16/0x25 [ 107.805059] __hrtimer_run_queues+0x3f6/0xe60 [ 107.809535] ? softlockup_fn+0xb0/0xb0 [ 107.813405] ? hrtimer_fixup_free+0xa0/0xa0 [ 107.817711] ? kvm_clock_get_cycles+0x14/0x30 [ 107.822188] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 107.827536] hrtimer_interrupt+0x326/0x9e0 [ 107.831763] smp_apic_timer_interrupt+0x10c/0x550 [ 107.836585] apic_timer_interrupt+0xf/0x20 [ 107.840796] [ 107.843017] RIP: 0010:lock_acquire+0x1ec/0x3c0 [ 107.847606] Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 b7 01 00 00 48 83 3d 09 2e a6 08 00 0f 84 2a 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b [ 107.866576] RSP: 0018:ffff8880b5a96bd8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 107.874267] RAX: 1ffffffff13e3051 RBX: ffff8880b5a82380 RCX: 000000000000268c [ 107.881516] RDX: dffffc0000000000 RSI: 000000006d3ad09e RDI: 0000000000000286 [ 107.888769] RBP: ffff8880a33c80c8 R08: ffffffff8cd2a9a0 R09: 000000000000000a [ 107.896020] R10: ffff8880b5a82d98 R11: ffffffff8c66501b R12: 0000000000000000 [ 107.903269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 107.910624] ? ktime_get+0x200/0x2f0 [ 107.914329] _raw_spin_lock+0x2a/0x40 [ 107.918124] ? tcf_police_act+0x7a/0xe60 [ 107.922163] tcf_police_act+0x7a/0xe60 [ 107.926034] ? tcf_police_dump+0x960/0x960 [ 107.930248] ? tcf_action_exec+0x16f/0x400 [ 107.934466] ? tcf_action_exec+0x12e/0x400 [ 107.938682] tcf_action_exec+0x160/0x400 [ 107.942730] basic_classify+0x184/0x2b0 [ 107.946691] tcf_classify+0x120/0x3c0 [ 107.950475] prio_enqueue+0x3bb/0x7a0 [ 107.954261] ? prio_reset+0x160/0x160 [ 107.958041] ? __dev_queue_xmit+0x134e/0x2e00 [ 107.962521] __dev_queue_xmit+0x140a/0x2e00 [ 107.966827] ? netdev_pick_tx+0x2f0/0x2f0 [ 107.970963] ? mark_held_locks+0xa6/0xf0 [ 107.975005] ? ip_finish_output2+0xfbc/0x15a0 [ 107.979485] ip_finish_output2+0xb6d/0x15a0 [ 107.983788] ? ip_send_check+0xb0/0xb0 [ 107.987653] ? ip_output+0x3a5/0x5f0 [ 107.991349] ip_finish_output+0xae9/0x10b0 [ 107.995567] ip_output+0x203/0x5f0 [ 107.999088] ? ip_mc_output+0xec0/0xec0 [ 108.003043] ? ip_fragment.constprop.0+0x240/0x240 [ 108.007952] ? prandom_u32+0x171/0x1f0 [ 108.011823] ip_local_out+0xaf/0x170 [ 108.015528] iptunnel_xmit+0x63b/0x9d0 [ 108.019398] ? erspan_changelink+0x150/0x220 [ 108.023793] geneve_xmit+0x120d/0x2e60 [ 108.027667] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 108.032847] ? __lock_acquire+0x6de/0x3ff0 [ 108.037068] ? netif_skb_features+0x5c1/0xb30 [ 108.041548] ? check_preemption_disabled+0x41/0x280 [ 108.046551] dev_hard_start_xmit+0x1a8/0x920 [ 108.050946] __dev_queue_xmit+0x269d/0x2e00 [ 108.055255] ? netdev_pick_tx+0x2f0/0x2f0 [ 108.059388] ? ip6_finish_output2+0x113d/0x2290 [ 108.064046] ? memcpy+0x35/0x50 [ 108.067313] neigh_resolve_output+0x55a/0x910 [ 108.071794] ip6_finish_output2+0x113d/0x2290 [ 108.076276] ? ip6_forward_finish+0x4b0/0x4b0 [ 108.080754] ? lock_downgrade+0x720/0x720 [ 108.084917] ? lock_acquire+0x170/0x3c0 [ 108.088881] ? check_preemption_disabled+0x41/0x280 [ 108.093879] ip6_finish_output+0x89b/0x10f0 [ 108.098187] ip6_output+0x205/0x770 [ 108.101796] ? ip6_finish_output+0x10f0/0x10f0 [ 108.106361] ? ip6_fragment+0x34e0/0x34e0 [ 108.110491] ? check_preemption_disabled+0x41/0x280 [ 108.115491] ndisc_send_skb+0xa24/0x1720 [ 108.119539] ? ndisc_alloc_skb+0x320/0x320 [ 108.123757] ? ipv6_setsockopt+0x160/0x160 [ 108.127973] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 108.133236] ? __alloc_skb+0x34f/0x560 [ 108.137117] ? skb_set_owner_w+0x1f6/0x330 [ 108.141340] ndisc_send_ns+0x51d/0x840 [ 108.145213] ? addrconf_dad_work+0xa48/0x10a0 [ 108.149692] ? pndisc_redo+0x20/0x20 [ 108.153389] ? mark_held_locks+0xa6/0xf0 [ 108.157430] ? __local_bh_enable_ip+0x159/0x270 [ 108.162081] addrconf_dad_work+0xb0e/0x10a0 [ 108.166384] ? addrconf_dad_completed+0xb60/0xb60 [ 108.171350] process_one_work+0x864/0x1570 [ 108.175567] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 108.180220] worker_thread+0x64c/0x1130 [ 108.184179] ? __kthread_parkme+0x133/0x1e0 [ 108.188488] ? process_one_work+0x1570/0x1570 [ 108.192963] kthread+0x33f/0x460 [ 108.196309] ? kthread_park+0x180/0x180 [ 108.200265] ret_from_fork+0x24/0x30 [ 108.204286] Kernel Offset: disabled [ 108.208034] Rebooting in 86400 seconds..