[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. syzkaller login: [ 89.845929] IPVS: ftp: loaded support on port[0] = 21 [ 89.918094] chnl_net:caif_netlink_parms(): no params data found [ 90.005046] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012179] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.020427] device bridge_slave_0 entered promiscuous mode [ 90.028489] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.034877] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.042572] device bridge_slave_1 entered promiscuous mode [ 90.059967] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.068874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.087403] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 90.094722] team0: Port device team_slave_0 added [ 90.100888] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 90.108935] team0: Port device team_slave_1 added [ 90.124506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.130805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.156886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.168700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.174926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.200795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.214648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 90.222436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 90.242080] device hsr_slave_0 entered promiscuous mode [ 90.247843] device hsr_slave_1 entered promiscuous mode [ 90.253778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 90.261676] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 90.326261] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.332691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.339614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.345976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.376270] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 90.383264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.392720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.401309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.409333] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.416328] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.423613] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 90.433780] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 90.440274] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.449232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.457183] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.463522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.484328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.494243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.505770] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 90.513564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.521314] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.527717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.535255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.543403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.551202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.558934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.568494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.575271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.588855] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 90.596114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.603264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.613817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.646164] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 90.656394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.686291] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 90.693555] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 90.700781] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 90.709929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.718621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.725523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.734784] device veth0_vlan entered promiscuous mode [ 90.743190] device veth1_vlan entered promiscuous mode [ 90.750006] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 90.758958] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 90.770768] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 90.779886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.787979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.795248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.804841] device veth0_macvtap entered promiscuous mode [ 90.811562] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 90.820120] device veth1_macvtap entered promiscuous mode [ 90.829006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 90.838649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 90.848802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.855461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.864679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.874560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.882058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.164175] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:1:14] [ 115.171598] Modules linked in: [ 115.174783] irq event stamp: 53803233 [ 115.178582] hardirqs last enabled at (53803232): [] ktime_get+0x235/0x2f0 [ 115.187145] hardirqs last disabled at (53803233): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 115.196973] softirqs last enabled at (84172): [] icmp6_dst_alloc+0x3de/0x660 [ 115.205807] softirqs last disabled at (84174): [] ip6_finish_output2+0x1f2/0x2290 [ 115.215588] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 115.222934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.232784] Workqueue: ipv6_addrconf addrconf_dad_work [ 115.238062] RIP: 0010:ktime_get+0x25f/0x2f0 [ 115.242565] Code: 48 c7 c0 88 82 f1 89 48 c1 e8 03 42 80 3c 20 00 0f 85 86 00 00 00 48 83 3d 25 ee 9c 08 00 74 35 e8 06 f1 0d 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 ce fe ff ff e8 f2 f0 0d 00 0f 0b e8 eb f0 0d 00 [ 115.261886] RSP: 0018:ffff8880b5a96bf0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 115.269583] RAX: ffff8880b5a82380 RBX: 0000000000000293 RCX: 1ffff11016b505b7 [ 115.276849] RDX: 0000000000000000 RSI: ffffffff8154946a RDI: 0000000000000293 [ 115.284153] RBP: fffffbfff13e3050 R08: ffffffff8cd379e8 R09: 0000000000000000 [ 115.291430] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 115.298874] R13: 1ffffffff13e3052 R14: 0000000000000200 R15: 0000000000000001 [ 115.306139] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 115.314547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.320432] CR2: 00007fff578b66e8 CR3: 0000000009e6d000 CR4: 00000000003406f0 [ 115.327694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.334957] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.342217] Call Trace: [ 115.344897] tcf_police_act+0x3e8/0xe60 [ 115.348859] ? tcf_police_dump+0x960/0x960 [ 115.353096] ? tcf_action_exec+0x16f/0x400 [ 115.357323] tcf_action_exec+0x160/0x400 [ 115.361372] basic_classify+0x184/0x2b0 [ 115.365335] tcf_classify+0x120/0x3c0 [ 115.369126] prio_enqueue+0x3bb/0x7a0 [ 115.372912] ? prio_reset+0x160/0x160 [ 115.376702] ? __dev_queue_xmit+0x134e/0x2e00 [ 115.381192] __dev_queue_xmit+0x140a/0x2e00 [ 115.385499] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.389638] ? mark_held_locks+0xa6/0xf0 [ 115.393770] ? ip_finish_output2+0xfbc/0x15a0 [ 115.398252] ip_finish_output2+0xb6d/0x15a0 [ 115.402560] ? ip_send_check+0xb0/0xb0 [ 115.406517] ? ip_output+0x3a5/0x5f0 [ 115.410218] ip_finish_output+0xae9/0x10b0 [ 115.414443] ip_output+0x203/0x5f0 [ 115.417974] ? ip_mc_output+0xec0/0xec0 [ 115.421940] ? ip_fragment.constprop.0+0x240/0x240 [ 115.426850] ? prandom_u32+0x171/0x1f0 [ 115.430896] ip_local_out+0xaf/0x170 [ 115.434603] iptunnel_xmit+0x63b/0x9d0 [ 115.438495] ? erspan_changelink+0x150/0x220 [ 115.442899] geneve_xmit+0x120d/0x2e60 [ 115.446778] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 115.452140] ? __lock_acquire+0x6de/0x3ff0 [ 115.456367] ? netif_skb_features+0x5c1/0xb30 [ 115.460849] ? check_preemption_disabled+0x41/0x280 [ 115.465878] dev_hard_start_xmit+0x1a8/0x920 [ 115.470276] __dev_queue_xmit+0x269d/0x2e00 [ 115.474598] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.478735] ? ip6_finish_output2+0x113d/0x2290 [ 115.483393] ? memcpy+0x35/0x50 [ 115.486658] neigh_resolve_output+0x55a/0x910 [ 115.491140] ip6_finish_output2+0x113d/0x2290 [ 115.495633] ? ip6_forward_finish+0x4b0/0x4b0 [ 115.500125] ? lock_downgrade+0x720/0x720 [ 115.504273] ? lock_acquire+0x170/0x3c0 [ 115.508237] ? check_preemption_disabled+0x41/0x280 [ 115.513243] ip6_finish_output+0x89b/0x10f0 [ 115.517555] ip6_output+0x205/0x770 [ 115.521166] ? ip6_finish_output+0x10f0/0x10f0 [ 115.525734] ? ip6_fragment+0x34e0/0x34e0 [ 115.529868] ? check_preemption_disabled+0x41/0x280 [ 115.534880] ndisc_send_skb+0xa24/0x1720 [ 115.538935] ? ndisc_alloc_skb+0x320/0x320 [ 115.543152] ? ipv6_setsockopt+0x160/0x160 [ 115.547505] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 115.552790] ? __alloc_skb+0x34f/0x560 [ 115.556669] ? skb_set_owner_w+0x1f6/0x330 [ 115.560900] ndisc_send_ns+0x51d/0x840 [ 115.564786] ? addrconf_dad_work+0xa48/0x10a0 [ 115.569275] ? pndisc_redo+0x20/0x20 [ 115.572984] ? mark_held_locks+0xa6/0xf0 [ 115.577051] ? __local_bh_enable_ip+0x159/0x270 [ 115.581715] addrconf_dad_work+0xb0e/0x10a0 [ 115.586028] ? addrconf_dad_completed+0xb60/0xb60 [ 115.590861] process_one_work+0x864/0x1570 [ 115.595082] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 115.599741] worker_thread+0x64c/0x1130 [ 115.603749] ? __kthread_parkme+0x133/0x1e0 [ 115.608065] ? process_one_work+0x1570/0x1570 [ 115.612555] kthread+0x33f/0x460 [ 115.615917] ? kthread_park+0x180/0x180 [ 115.619994] ret_from_fork+0x24/0x30 [ 115.623700] Kernel panic - not syncing: softlockup: hung tasks [ 115.629672] CPU: 0 PID: 14 Comm: kworker/0:1 Tainted: G L 4.19.211-syzkaller #0 [ 115.638582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.647937] Workqueue: ipv6_addrconf addrconf_dad_work [ 115.653194] Call Trace: [ 115.655762] [ 115.657902] dump_stack+0x1fc/0x2ef [ 115.661517] panic+0x26a/0x50e [ 115.664694] ? __warn_printk+0xf3/0xf3 [ 115.668569] ? watchdog_timer_fn.cold+0x5/0x25 [ 115.673136] ? watchdog_timer_fn+0x53e/0x580 [ 115.677532] watchdog_timer_fn.cold+0x16/0x25 [ 115.682187] __hrtimer_run_queues+0x3f6/0xe60 [ 115.687116] ? softlockup_fn+0xb0/0xb0 [ 115.691108] ? hrtimer_fixup_free+0xa0/0xa0 [ 115.695429] ? kvm_clock_get_cycles+0x14/0x30 [ 115.699921] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 115.705372] hrtimer_interrupt+0x326/0x9e0 [ 115.709600] smp_apic_timer_interrupt+0x10c/0x550 [ 115.714527] apic_timer_interrupt+0xf/0x20 [ 115.718761] [ 115.720989] RIP: 0010:ktime_get+0x25f/0x2f0 [ 115.725300] Code: 48 c7 c0 88 82 f1 89 48 c1 e8 03 42 80 3c 20 00 0f 85 86 00 00 00 48 83 3d 25 ee 9c 08 00 74 35 e8 06 f1 0d 00 48 89 df 57 9d <0f> 1f 44 00 00 e9 ce fe ff ff e8 f2 f0 0d 00 0f 0b e8 eb f0 0d 00 [ 115.744326] RSP: 0018:ffff8880b5a96bf0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 115.752110] RAX: ffff8880b5a82380 RBX: 0000000000000293 RCX: 1ffff11016b505b7 [ 115.759568] RDX: 0000000000000000 RSI: ffffffff8154946a RDI: 0000000000000293 [ 115.766826] RBP: fffffbfff13e3050 R08: ffffffff8cd379e8 R09: 0000000000000000 [ 115.774618] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 115.781881] R13: 1ffffffff13e3052 R14: 0000000000000200 R15: 0000000000000001 [ 115.789155] ? ktime_get+0x25a/0x2f0 [ 115.792861] tcf_police_act+0x3e8/0xe60 [ 115.796823] ? tcf_police_dump+0x960/0x960 [ 115.801044] ? tcf_action_exec+0x16f/0x400 [ 115.805385] tcf_action_exec+0x160/0x400 [ 115.809462] basic_classify+0x184/0x2b0 [ 115.813424] tcf_classify+0x120/0x3c0 [ 115.817212] prio_enqueue+0x3bb/0x7a0 [ 115.820996] ? prio_reset+0x160/0x160 [ 115.824781] ? __dev_queue_xmit+0x134e/0x2e00 [ 115.829264] __dev_queue_xmit+0x140a/0x2e00 [ 115.833571] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.837711] ? mark_held_locks+0xa6/0xf0 [ 115.841756] ? ip_finish_output2+0xfbc/0x15a0 [ 115.846236] ip_finish_output2+0xb6d/0x15a0 [ 115.850633] ? ip_send_check+0xb0/0xb0 [ 115.854515] ? ip_output+0x3a5/0x5f0 [ 115.858224] ip_finish_output+0xae9/0x10b0 [ 115.862533] ip_output+0x203/0x5f0 [ 115.866080] ? ip_mc_output+0xec0/0xec0 [ 115.870040] ? ip_fragment.constprop.0+0x240/0x240 [ 115.874959] ? prandom_u32+0x171/0x1f0 [ 115.878838] ip_local_out+0xaf/0x170 [ 115.882539] iptunnel_xmit+0x63b/0x9d0 [ 115.886438] ? erspan_changelink+0x150/0x220 [ 115.890864] geneve_xmit+0x120d/0x2e60 [ 115.894852] ? geneve_fill_metadata_dst+0x1580/0x1580 [ 115.900065] ? __lock_acquire+0x6de/0x3ff0 [ 115.904287] ? netif_skb_features+0x5c1/0xb30 [ 115.908767] ? check_preemption_disabled+0x41/0x280 [ 115.913770] dev_hard_start_xmit+0x1a8/0x920 [ 115.918168] __dev_queue_xmit+0x269d/0x2e00 [ 115.922476] ? netdev_pick_tx+0x2f0/0x2f0 [ 115.926608] ? ip6_finish_output2+0x113d/0x2290 [ 115.931265] ? memcpy+0x35/0x50 [ 115.934540] neigh_resolve_output+0x55a/0x910 [ 115.939028] ip6_finish_output2+0x113d/0x2290 [ 115.943508] ? ip6_forward_finish+0x4b0/0x4b0 [ 115.947988] ? lock_downgrade+0x720/0x720 [ 115.952121] ? lock_acquire+0x170/0x3c0 [ 115.956085] ? check_preemption_disabled+0x41/0x280 [ 115.961611] ip6_finish_output+0x89b/0x10f0 [ 115.965918] ip6_output+0x205/0x770 [ 115.969533] ? ip6_finish_output+0x10f0/0x10f0 [ 115.975117] ? ip6_fragment+0x34e0/0x34e0 [ 115.979261] ? check_preemption_disabled+0x41/0x280 [ 115.984263] ndisc_send_skb+0xa24/0x1720 [ 115.988330] ? ndisc_alloc_skb+0x320/0x320 [ 115.993361] ? ipv6_setsockopt+0x160/0x160 [ 115.997615] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 116.002882] ? __alloc_skb+0x34f/0x560 [ 116.006776] ? skb_set_owner_w+0x1f6/0x330 [ 116.011002] ndisc_send_ns+0x51d/0x840 [ 116.014892] ? addrconf_dad_work+0xa48/0x10a0 [ 116.019378] ? pndisc_redo+0x20/0x20 [ 116.023115] ? mark_held_locks+0xa6/0xf0 [ 116.027160] ? __local_bh_enable_ip+0x159/0x270 [ 116.031814] addrconf_dad_work+0xb0e/0x10a0 [ 116.036210] ? addrconf_dad_completed+0xb60/0xb60 [ 116.041056] process_one_work+0x864/0x1570 [ 116.045368] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 116.050029] worker_thread+0x64c/0x1130 [ 116.054004] ? __kthread_parkme+0x133/0x1e0 [ 116.058310] ? process_one_work+0x1570/0x1570 [ 116.062787] kthread+0x33f/0x460 [ 116.066223] ? kthread_park+0x180/0x180 [ 116.070196] ret_from_fork+0x24/0x30 [ 116.074209] Kernel Offset: disabled [ 116.077875] Rebooting in 86400 seconds..