Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. syzkaller login: [ 64.686639][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 64.734208][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.741695][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.750016][ T3545] device bridge_slave_0 entered promiscuous mode [ 64.759271][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.766780][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.774929][ T3545] device bridge_slave_1 entered promiscuous mode [ 64.799347][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.810681][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.835859][ T3545] team0: Port device team_slave_0 added [ 64.844016][ T3545] team0: Port device team_slave_1 added [ 64.864514][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.871464][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.897846][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.910707][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.917789][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.943758][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.977550][ T3545] device hsr_slave_0 entered promiscuous mode [ 64.984644][ T3545] device hsr_slave_1 entered promiscuous mode [ 65.088966][ T3545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.100032][ T3545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.109484][ T3545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.119566][ T3545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.144598][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.151850][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.159825][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.166953][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.218472][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.231058][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.241508][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.250187][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.258819][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.271391][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.283033][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.291737][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.298872][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.310540][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.320323][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.327479][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.348196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.357285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.368477][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.385194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.393527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.405962][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.425534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.433408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.447296][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.466262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.487695][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.496513][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.504682][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.514411][ T3545] device veth0_vlan entered promiscuous mode [ 65.527155][ T3545] device veth1_vlan entered promiscuous mode [ 65.546848][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.555037][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.563474][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.575996][ T3545] device veth0_macvtap entered promiscuous mode [ 65.586795][ T3545] device veth1_macvtap entered promiscuous mode [ 65.604550][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.611917][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.621727][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.635738][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.643323][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program executing program [ 65.654750][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.664998][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.674768][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.684062][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.424800][ T14] cfg80211: failed to load regulatory.db [ 125.583096][ T14] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2688 jiffies s: 589 root: 0x2/. [ 125.595304][ T14] rcu: blocking rcu_node structures (internal RCU debug): [ 125.602440][ T14] Sending NMI from CPU 0 to CPUs 1: [ 125.607699][ C1] NMI backtrace for cpu 1 [ 125.607709][ C1] CPU: 1 PID: 3556 Comm: syz-executor219 Not tainted 6.1.83-syzkaller #0 [ 125.607727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 125.607736][ C1] RIP: 0010:__hrtimer_run_queues+0x573/0xe50 [ 125.607780][ C1] Code: df 4d 89 e5 0f 84 ba 02 00 00 e8 88 d2 10 00 eb 12 e8 81 d2 10 00 49 bf 00 00 00 00 00 fc ff df 4d 89 e5 4d 89 f4 48 8b 04 24 <48> 8d 58 3b 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 56 03 [ 125.607793][ C1] RSP: 0018:ffffc900001e0d60 EFLAGS: 00000046 [ 125.607808][ C1] RAX: ffff88806fcdd340 RBX: 0000000000000001 RCX: ffff88807958d940 [ 125.607820][ C1] RDX: 0000000080010001 RSI: ffffffff8b3d2b20 RDI: ffffffff8b3d2ae0 [ 125.607832][ C1] RBP: ffffc900001e0eb0 R08: ffffffff8179b244 R09: fffffbfff1ce6c9e [ 125.607844][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b992a4c0 [ 125.607856][ C1] R13: ffffffff88b42120 R14: ffff8880b992a4c0 R15: dffffc0000000000 [ 125.607868][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 125.607882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.607893][ C1] CR2: 00007f95c22fe2f0 CR3: 000000007593d000 CR4: 00000000003506e0 [ 125.607907][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.607917][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.607927][ C1] Call Trace: [ 125.607932][ C1] [ 125.607938][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 125.607968][ C1] ? read_lock_is_recursive+0x10/0x10 [ 125.607994][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 125.608019][ C1] ? nmi_handle+0x25/0x440 [ 125.608051][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 125.608077][ C1] ? nmi_handle+0x12e/0x440 [ 125.608102][ C1] ? nmi_handle+0x25/0x440 [ 125.608127][ C1] ? __hrtimer_run_queues+0x573/0xe50 [ 125.608147][ C1] ? default_do_nmi+0x62/0x150 [ 125.608172][ C1] ? exc_nmi+0xa8/0x100 [ 125.608197][ C1] ? end_repeat_nmi+0x16/0x31 [ 125.608219][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 125.608243][ C1] ? __hrtimer_run_queues+0x534/0xe50 [ 125.608265][ C1] ? __hrtimer_run_queues+0x573/0xe50 [ 125.608285][ C1] ? __hrtimer_run_queues+0x573/0xe50 [ 125.608307][ C1] ? __hrtimer_run_queues+0x573/0xe50 [ 125.608327][ C1] [ 125.608332][ C1] [ 125.608347][ C1] ? hrtimer_interrupt+0x980/0x980 [ 125.608366][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 125.608394][ C1] hrtimer_interrupt+0x392/0x980 [ 125.608426][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 125.608450][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 125.608467][ C1] [ 125.608471][ C1] [ 125.608476][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.608499][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 125.608521][ C1] Code: 44 ea 77 7e 65 8b 15 45 ea 77 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 125.608534][ C1] RSP: 0018:ffffc90003bdf6d0 EFLAGS: 00000246 [ 125.608547][ C1] RAX: ffffffff81cdc8fc RBX: 0000000000000000 RCX: ffff88807958d940 [ 125.608559][ C1] RDX: 0000000000000000 RSI: ffffc90003bdf880 RDI: ffff888029274380 [ 125.608570][ C1] RBP: ffffc90003bdf8f0 R08: ffffffff81d13612 R09: fffff94000380c87 [ 125.608582][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 125.608593][ C1] R13: ffff88807a887818 R14: ffff888029274380 R15: ffffc90003bdf880 [ 125.608609][ C1] ? __tlb_remove_page_size+0x192/0x3e0 [ 125.608627][ C1] ? add_mm_rss_vec+0x1c/0x260 [ 125.608650][ C1] add_mm_rss_vec+0x1c/0x260 [ 125.608672][ C1] unmap_page_range+0x2144/0x2740 [ 125.608710][ C1] ? copy_page_range+0x4660/0x4660 [ 125.608732][ C1] ? unmap_single_vma+0x1af/0x290 [ 125.608753][ C1] unmap_vmas+0x48b/0x640 [ 125.608771][ C1] ? unmap_vmas+0x3d0/0x640 [ 125.608788][ C1] ? unmap_page_range+0x2740/0x2740 [ 125.608808][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 125.608840][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 125.608860][ C1] exit_mmap+0x252/0x9f0 [ 125.608876][ C1] ? vm_brk+0x20/0x20 [ 125.608889][ C1] ? memset+0x1f/0x40 [ 125.608919][ C1] ? uprobe_clear_state+0x271/0x280 [ 125.608937][ C1] ? mm_update_next_owner+0x4fa/0x5e0 [ 125.608963][ C1] __mmput+0x115/0x3c0 [ 125.608978][ C1] exit_mm+0x226/0x300 [ 125.609002][ C1] ? do_exit+0x26a0/0x26a0 [ 125.609024][ C1] ? taskstats_exit+0x399/0x920 [ 125.609051][ C1] ? tty_audit_exit+0x150/0x1f0 [ 125.609076][ C1] do_exit+0x9f6/0x26a0 [ 125.609104][ C1] ? put_task_struct+0x80/0x80 [ 125.609127][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 125.609153][ C1] ? print_irqtrace_events+0x210/0x210 [ 125.609180][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.609198][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 125.609216][ C1] do_group_exit+0x202/0x2b0 [ 125.609242][ C1] __x64_sys_exit_group+0x3b/0x40 [ 125.609265][ C1] do_syscall_64+0x3d/0xb0 [ 125.609288][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.609309][ C1] RIP: 0033:0x7f95c227b029 [ 125.609322][ C1] Code: Unable to access opcode bytes at 0x7f95c227afff. [ 125.609329][ C1] RSP: 002b:00007ffe2e9266c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 125.609345][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95c227b029 [ 125.609356][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 125.609366][ C1] RBP: 00007f95c22fb3b0 R08: ffffffffffffffb8 R09: 0000000100000000 [ 125.609378][ C1] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f95c22fb3b0 [ 125.609388][ C1] R13: 0000000000000000 R14: 00007f95c22fdee0 R15: 00007f95c224b4e0 [ 125.609408][ C1] [ 125.609414][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.715 msecs