DUID 00:04:ac:9c:ad:00:31:f9:28:39:b7:1b:44:5e:fd:4e:f2:12
forked to background, child pid 3915
[ 44.148039][ T3916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 44.162505][ T3916] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 86.915102][ T14] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts.
[ 92.257273][ T4242] cgroup: Unknown subsys name 'net'
[ 92.390578][ T4242] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 93.683530][ T4242] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 93.771514][ T4246] chnl_net:caif_netlink_parms(): no params data found
[ 93.818039][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.828081][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.837996][ T4246] device bridge_slave_0 entered promiscuous mode
[ 93.847129][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.854695][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.863438][ T4246] device bridge_slave_1 entered promiscuous mode
[ 93.888874][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.900090][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.922884][ T4246] team0: Port device team_slave_0 added
[ 93.935096][ T4246] team0: Port device team_slave_1 added
[ 93.956488][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.965065][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.004051][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.019212][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.028979][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.057138][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.087784][ T4246] device hsr_slave_0 entered promiscuous mode
[ 94.095235][ T4246] device hsr_slave_1 entered promiscuous mode
[ 94.190526][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.202128][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.212063][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.222376][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.247786][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.255305][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.263904][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.272271][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.322973][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.340094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 94.353252][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.362363][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.372188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 94.389010][ T4246] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.402516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 94.412807][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.422592][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.436178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 94.446624][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.454665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.478097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 94.490406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 94.503942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 94.516836][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 94.530983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 94.542948][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 94.560328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 94.570416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 94.585236][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.603071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 94.623812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 94.633149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 94.641455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 94.651874][ T4246] device veth0_vlan entered promiscuous mode
[ 94.663406][ T4246] device veth1_vlan entered promiscuous mode
[ 94.685256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 94.696525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 94.706104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 94.718020][ T4246] device veth0_macvtap entered promiscuous mode
[ 94.729496][ T4246] device veth1_macvtap entered promiscuous mode
[ 94.747948][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.757915][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.768711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 94.781623][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.790052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.799281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.812725][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.822680][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.833012][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.843525][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.903333][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.921563][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.933431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.934202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
executing program
[ 94.944082][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.959301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 121.513793][ T4251] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2635 jiffies s: 701 root: 0x2/.
[ 121.527063][ T4251] rcu: blocking rcu_node structures (internal RCU debug):
[ 121.534391][ T4251] Sending NMI from CPU 0 to CPUs 1:
[ 121.539886][ C1] NMI backtrace for cpu 1
[ 121.539906][ C1] CPU: 1 PID: 4255 Comm: syz-executor207 Not tainted 6.1.119-syzkaller #0
[ 121.539921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 121.539930][ C1] RIP: 0010:lock_acquire+0xf3/0x5a0
[ 121.539971][ C1] Code: 0d 0f 86 e4 02 00 00 89 db 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 f7 9a 8e be 08 00 00 00 e8 a5 84 77 00 48 0f a3 1d a5 55 30 0d <73> 0d e8 96 e5 08 00 84 c0 0f 84 b9 02 00 00 48 c7 c0 74 2c 9b 8e
[ 121.539985][ C1] RSP: 0018:ffffc900001e0b60 EFLAGS: 00000057
[ 121.539998][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816aa1fb
[ 121.540007][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e9af7a8
[ 121.540016][ C1] RBP: ffffc900001e0ca8 R08: dffffc0000000000 R09: fffffbfff1d35ef6
[ 121.540026][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200003c174
[ 121.540035][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000
[ 121.540044][ C1] FS: 00007fc2353586c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 121.540057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 121.540067][ C1] CR2: 0000000020001600 CR3: 000000001dbdf000 CR4: 00000000003506e0
[ 121.540079][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 121.540087][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 121.540095][ C1] Call Trace:
[ 121.540101][ C1]
[ 121.540108][ C1] ? nmi_cpu_backtrace+0x3de/0x560
[ 121.540131][ C1] ? read_lock_is_recursive+0x10/0x10
[ 121.540150][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[ 121.540168][ C1] ? nmi_handle+0x25/0x440
[ 121.540193][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10
[ 121.540205][ C1] ? nmi_handle+0x12e/0x440
[ 121.540222][ C1] ? nmi_handle+0x25/0x440
[ 121.540240][ C1] ? lock_acquire+0xf3/0x5a0
[ 121.540261][ C1] ? default_do_nmi+0x62/0x150
[ 121.540279][ C1] ? exc_nmi+0xa8/0x100
[ 121.540296][ C1] ? end_repeat_nmi+0x16/0x31
[ 121.540317][ C1] ? lock_acquire+0xeb/0x5a0
[ 121.540333][ C1] ? lock_acquire+0xf3/0x5a0
[ 121.540350][ C1] ? lock_acquire+0xf3/0x5a0
[ 121.540367][ C1] ? lock_acquire+0xf3/0x5a0
[ 121.540383][ C1]
[ 121.540387][ C1]
[ 121.540394][ C1] ? read_lock_is_recursive+0x10/0x10
[ 121.540411][ C1] ? advance_sched+0x6d0/0x970
[ 121.540428][ C1] ? __lock_acquire+0x1f80/0x1f80
[ 121.540447][ C1] ? do_raw_spin_unlock+0x137/0x8a0
[ 121.540461][ C1] ? advance_sched+0x6d0/0x970
[ 121.540477][ C1] _raw_spin_lock_irq+0xcf/0x110
[ 121.540492][ C1] ? __hrtimer_run_queues+0x6d3/0xe50
[ 121.540507][ C1] ? _raw_spin_lock_irqsave+0x120/0x120
[ 121.540527][ C1] __hrtimer_run_queues+0x6d3/0xe50
[ 121.540550][ C1] ? hrtimer_interrupt+0x980/0x980
[ 121.540564][ C1] ? ktime_get_update_offsets_now+0x407/0x420
[ 121.540585][ C1] hrtimer_interrupt+0x392/0x980
[ 121.540609][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0
[ 121.540628][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0
[ 121.540643][ C1]
[ 121.540647][ C1]
[ 121.540651][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 121.540669][ C1] RIP: 0010:lockdep_unregister_key+0x562/0x600
[ 121.540687][ C1] Code: 1f 91 48 c7 c6 c0 f2 6a 81 e8 0a b4 08 00 e8 45 c8 08 00 e9 ea fb ff ff e8 3b e1 46 09 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 0f 0b 45 31 f6 e9 64 ff ff ff 0f 0b e9 a5 fe ff ff 0f
[ 121.540697][ C1] RSP: 0018:ffffc90003d56f80 EFLAGS: 00000246
[ 121.540709][ C1] RAX: dffffc0000000000 RBX: 1ffff920007aadf8 RCX: ffffffff97353103
[ 121.540718][ C1] RDX: 0000000000000001 RSI: ffffffff8b0c0ea0 RDI: ffffffff8b5e6200
[ 121.540727][ C1] RBP: ffffc90003d57048 R08: dffffc0000000000 R09: fffffbfff223f93e
[ 121.540737][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003d56fc0
[ 121.540746][ C1] R13: 1ffff920007aadf4 R14: 0000000000000000 R15: 0000000000000203
[ 121.540764][ C1] ? lockdep_reset_lock+0x3f0/0x3f0
[ 121.540782][ C1] ? rcu_is_watching+0x11/0xb0
[ 121.540795][ C1] ? qdisc_reset+0x3bc/0x5f0
[ 121.540812][ C1] __qdisc_destroy+0x127/0x450
[ 121.540827][ C1] taprio_attach+0x260/0x420
[ 121.540843][ C1] ? taprio_change+0x5600/0x5600
[ 121.540858][ C1] qdisc_graft+0x12e5/0x1610
[ 121.540875][ C1] ? qdisc_graft+0x2c1/0x1610
[ 121.540893][ C1] ? qdisc_create+0xcfd/0x1220
[ 121.540910][ C1] ? qdisc_create+0x1220/0x1220
[ 121.540927][ C1] ? qdisc_notify+0x390/0x390
[ 121.540946][ C1] tc_modify_qdisc+0xf29/0x1d70
[ 121.540969][ C1] ? qdisc_offload_query_caps+0x170/0x170
[ 121.540997][ C1] ? qdisc_offload_query_caps+0x170/0x170
[ 121.541013][ C1] rtnetlink_rcv_msg+0x818/0xff0
[ 121.541036][ C1] ? rtnetlink_bind+0x80/0x80
[ 121.541052][ C1] ? __local_bh_enable_ip+0x164/0x1f0
[ 121.541071][ C1] ? __dev_queue_xmit+0x2d6/0x3d50
[ 121.541084][ C1] ? _local_bh_enable+0xa0/0xa0
[ 121.541104][ C1] ? __dev_queue_xmit+0x2d6/0x3d50
[ 121.541118][ C1] ? __dev_queue_xmit+0x173c/0x3d50
[ 121.541136][ C1] ? __dev_queue_xmit+0x2d6/0x3d50
[ 121.541151][ C1] ? netdev_core_pick_tx+0x320/0x320
[ 121.541166][ C1] ? ref_tracker_free+0x638/0x7d0
[ 121.541181][ C1] ? memcpy+0x3c/0x60
[ 121.541195][ C1] ? refcount_inc+0x80/0x80
[ 121.541207][ C1] ? __copy_skb_header+0x47b/0x600
[ 121.541229][ C1] netlink_rcv_skb+0x1cd/0x410
[ 121.541247][ C1] ? rtnetlink_bind+0x80/0x80
[ 121.541268][ C1] ? netlink_ack+0x1290/0x1290
[ 121.541283][ C1] ? __netlink_deliver_tap+0x73e/0x770
[ 121.541304][ C1] ? netlink_deliver_tap+0x2e/0x1b0
[ 121.541321][ C1] netlink_unicast+0x7d8/0x970
[ 121.541340][ C1] ? netlink_detachskb+0x90/0x90
[ 121.541354][ C1] ? __virt_addr_valid+0x45b/0x530
[ 121.541371][ C1] ? __phys_addr_symbol+0x2b/0x70
[ 121.541386][ C1] ? __check_object_size+0x4dd/0xa30
[ 121.541402][ C1] ? bpf_lsm_netlink_send+0x5/0x10
[ 121.541420][ C1] netlink_sendmsg+0xa26/0xd60
[ 121.541441][ C1] ? netlink_getsockopt+0x580/0x580
[ 121.541459][ C1] ? aa_sock_msg_perm+0x91/0x150
[ 121.541476][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 121.541491][ C1] ? security_socket_sendmsg+0x7d/0xa0
[ 121.541506][ C1] ? netlink_getsockopt+0x580/0x580
[ 121.541523][ C1] ____sys_sendmsg+0x5a5/0x8f0
[ 121.541544][ C1] ? __sys_sendmsg_sock+0x30/0x30
[ 121.541567][ C1] __sys_sendmsg+0x2a9/0x390
[ 121.541585][ C1] ? ____sys_sendmsg+0x8f0/0x8f0
[ 121.541614][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 121.541637][ C1] ? syscall_enter_from_user_mode+0x2e/0x230
[ 121.541651][ C1] ? lockdep_hardirqs_on+0x94/0x130
[ 121.541664][ C1] ? syscall_enter_from_user_mode+0x2e/0x230
[ 121.541679][ C1] do_syscall_64+0x3b/0xb0
[ 121.541695][ C1] ? clear_bhb_loop+0x45/0xa0
[ 121.541712][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 121.541729][ C1] RIP: 0033:0x7fc2353a8a89
[ 121.541747][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 121.541757][ C1] RSP: 002b:00007fc235358168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 121.541771][ C1] RAX: ffffffffffffffda RBX: 00007fc2354331c8 RCX: 00007fc2353a8a89
[ 121.541780][ C1] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 121.541788][ C1] RBP: 00007fc2354331c0 R08: 0000000000000000 R09: 0000000000000000
[ 121.541797][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2354331cc
[ 121.541805][ C1] R13: 000000000000000b R14: 00007fff857dfaa0 R15: 00007fff857dfb88
[ 121.541821][ C1]