last executing test programs: 550.571172ms ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402109001000020102030109022d0001010080320904000003ff000000070581030800010705020240000007058302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 549.527659ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) close(r0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000040020402560001010203010902190001010080320904000001ffffff0007058102000200"], 0x0) 426.702924ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_config/gpio-sim/dev0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_config/gpio-sim/dev0/bank0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_config/gpio-sim/dev0/bank0/num_lines\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_config/gpio-sim/dev0/bank0/label\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='my_gpio_chip\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_config/gpio-sim/dev0/live\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='1\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_config/gpio-aggregator/device0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_config/gpio-aggregator/device0/line0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_config/gpio-aggregator/device0/line0/key\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='my_gpio_chip\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_config/gpio-aggregator/device0/line0/offset\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_config/gpio-aggregator/device0/live\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='1\x00', 0x2) close(r5) 387.303557ms ago: executing program 2 (id=3): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) openat(r0, &(0x7f0000000200)='file0\x00', 0x0, 0x0) 370.299568ms ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004045058080010301020001090212000101008032090400000000000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) 304.557803ms ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000350)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000600)={0x11, 0x300, r5}, 0x14) write(r6, &(0x7f0000000700)="ffffffffffff0011223344554305030f00112233445500000001000001f4", 0x1e) write(r6, &(0x7f0000000800)="ffffffffffff0011223344554305040f320000000001001122334455000c000186a001010008000186a0000186a0", 0x2e) write(r6, &(0x7f0000000900)="ffffffffffff0011223344664305030f00112233446600000001000001f4", 0x1e) write(r6, &(0x7f0000000a00)="ffffffffffff0011223344664305040f320000000001001122334466000c00030d400101000800030d4000030d40", 0x2e) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 293.923146ms ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f00000000c0)={0x0, 0x2faf080}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000001c0)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, &(0x7f0000000440)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 162.555256ms ago: executing program 2 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x2) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 0s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='thunderbolt\x00', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 29.106541][ T4698] cgroup: Unknown subsys name 'net' [ 29.216494][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.218631][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.386718][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.159375][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.159646][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.161107][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.174350][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.174492][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.174695][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.174805][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.175640][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.175931][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.176167][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.176901][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.177052][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.177474][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.177768][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.182927][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.185516][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.185998][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.186203][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.194949][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.196666][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.199520][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.201237][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.202798][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.204335][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.206078][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.531593][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.531979][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.532087][ T4718] bridge_slave_0: entered allmulticast mode [ 30.532563][ T4718] bridge_slave_0: entered promiscuous mode [ 30.535500][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.535586][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.535643][ T4718] bridge_slave_1: entered allmulticast mode [ 30.536051][ T4718] bridge_slave_1: entered promiscuous mode [ 30.566826][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.569611][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.606262][ T4718] team0: Port device team_slave_0 added [ 30.617686][ T4718] team0: Port device team_slave_1 added [ 30.624283][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.624480][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.624548][ T4716] bridge_slave_0: entered allmulticast mode [ 30.625062][ T4716] bridge_slave_0: entered promiscuous mode [ 30.642986][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.644432][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.645157][ T4716] bridge_slave_1: entered allmulticast mode [ 30.645612][ T4716] bridge_slave_1: entered promiscuous mode [ 30.649320][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.650615][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.655139][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.655928][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.655936][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.655952][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.665471][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.665514][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.665615][ T4715] bridge_slave_0: entered allmulticast mode [ 30.666029][ T4715] bridge_slave_0: entered promiscuous mode [ 30.666953][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.666976][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.667028][ T4715] bridge_slave_1: entered allmulticast mode [ 30.667453][ T4715] bridge_slave_1: entered promiscuous mode [ 30.674205][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.675121][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.684571][ T4715] team0: Port device team_slave_0 added [ 30.696896][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.698378][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.699032][ T4715] team0: Port device team_slave_1 added [ 30.709710][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.709793][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.709855][ T4708] bridge_slave_0: entered allmulticast mode [ 30.710336][ T4708] bridge_slave_0: entered promiscuous mode [ 30.718677][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.718700][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.718715][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.719295][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.719303][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.719316][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.724563][ T4718] hsr_slave_0: entered promiscuous mode [ 30.724949][ T4718] hsr_slave_1: entered promiscuous mode [ 30.726903][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726964][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.727017][ T4708] bridge_slave_1: entered allmulticast mode [ 30.727452][ T4708] bridge_slave_1: entered promiscuous mode [ 30.731424][ T4716] team0: Port device team_slave_0 added [ 30.732408][ T4716] team0: Port device team_slave_1 added [ 30.761352][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.762735][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.764101][ T4709] bridge_slave_0: entered allmulticast mode [ 30.765733][ T4709] bridge_slave_0: entered promiscuous mode [ 30.770415][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.771488][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.777806][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.779241][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.780584][ T4709] bridge_slave_1: entered allmulticast mode [ 30.781046][ T4709] bridge_slave_1: entered promiscuous mode [ 30.791762][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.791783][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.791795][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.792438][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.792447][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.792458][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.797469][ T4715] hsr_slave_0: entered promiscuous mode [ 30.797821][ T4715] hsr_slave_1: entered promiscuous mode [ 30.798045][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.798078][ T4715] Cannot create hsr debugfs directory [ 30.805314][ T4708] team0: Port device team_slave_0 added [ 30.813769][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.814815][ T4708] team0: Port device team_slave_1 added [ 30.819716][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.840369][ T4709] team0: Port device team_slave_0 added [ 30.856755][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.856777][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.856792][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.857326][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.857334][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.857350][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.860001][ T4709] team0: Port device team_slave_1 added [ 30.867891][ T4716] hsr_slave_0: entered promiscuous mode [ 30.868568][ T4716] hsr_slave_1: entered promiscuous mode [ 30.868780][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.868790][ T4716] Cannot create hsr debugfs directory [ 30.878878][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.878888][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.878901][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.892386][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.892411][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.892426][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.906681][ T4708] hsr_slave_0: entered promiscuous mode [ 30.907020][ T4708] hsr_slave_1: entered promiscuous mode [ 30.907228][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.907237][ T4708] Cannot create hsr debugfs directory [ 30.938379][ T4709] hsr_slave_0: entered promiscuous mode [ 30.939970][ T4709] hsr_slave_1: entered promiscuous mode [ 30.941271][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.942374][ T4709] Cannot create hsr debugfs directory [ 30.963133][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.967457][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.969459][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.971964][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.987610][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.990064][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.993874][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.996153][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.034063][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.036761][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.037073][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.038886][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.040879][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.042989][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.052516][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.055776][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.060366][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.060417][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.060561][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.060596][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.086673][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.086722][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.086850][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.086888][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.093107][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.097075][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.103528][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.106028][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.107747][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.110104][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.111970][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.114122][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.127706][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.132473][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.134280][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.137783][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.139275][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.146503][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.148804][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.156376][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.158634][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.163298][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.164859][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.167215][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.168977][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.171297][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.179529][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.179578][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.192217][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.196404][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.196448][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.201453][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.204096][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.208680][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.212538][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.214719][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.216198][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.217175][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.222544][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.222585][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.226460][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.228879][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.238728][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.238765][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.246063][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.246099][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.276431][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.280442][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.287563][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.287601][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.287960][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.287978][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.299157][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.301118][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.324210][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.332902][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.333179][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.356916][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.377653][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.381077][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.381129][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.394520][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394560][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.409205][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.437148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.437196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.437717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.437737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.461043][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.496765][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.507774][ T4718] veth0_vlan: entered promiscuous mode [ 31.530296][ T4718] veth1_vlan: entered promiscuous mode [ 31.539489][ T4718] veth0_macvtap: entered promiscuous mode [ 31.541697][ T4718] veth1_macvtap: entered promiscuous mode [ 31.560703][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.563434][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.569746][ T4709] veth0_vlan: entered promiscuous mode [ 31.572545][ T4709] veth1_vlan: entered promiscuous mode [ 31.580137][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.580242][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.580303][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.580379][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587717][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.613377][ T4709] veth0_macvtap: entered promiscuous mode [ 31.616922][ T4709] veth1_macvtap: entered promiscuous mode [ 31.622267][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.638588][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.641049][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.643445][ T94] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.644910][ T94] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660154][ T4715] veth0_vlan: entered promiscuous mode [ 31.663212][ T4715] veth1_vlan: entered promiscuous mode [ 31.678772][ T4716] veth0_vlan: entered promiscuous mode [ 31.689835][ T4715] veth0_macvtap: entered promiscuous mode [ 31.704907][ T4715] veth1_macvtap: entered promiscuous mode [ 31.710502][ T4716] veth1_vlan: entered promiscuous mode [ 31.721481][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.721517][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.733013][ T4716] veth0_macvtap: entered promiscuous mode [ 31.737138][ T4716] veth1_macvtap: entered promiscuous mode [ 31.742692][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.746486][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.746513][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.756428][ T94] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.756471][ T94] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.760885][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.763378][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.764870][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.771860][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.771891][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.778185][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.782496][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.800612][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.802080][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.816864][ T94] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816926][ T94] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816950][ T94] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816966][ T94] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.877371][ T4708] veth0_vlan: entered promiscuous mode [ 31.881459][ T4891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.883388][ T4891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.891553][ T4708] veth1_vlan: entered promiscuous mode [ 31.897011][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.897040][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.912648][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.912675][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.924595][ T4708] veth0_macvtap: entered promiscuous mode [ 31.926902][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928783][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928837][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936757][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.936786][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.937711][ T4708] veth1_macvtap: entered promiscuous mode [ 31.943138][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.953288][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.956675][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.956709][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.992750][ T4895] gpio-aggregator: Deferred probe canceled for creation via configfs. [ 32.025445][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.025468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.036601][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.036779][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037066][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037227][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057638][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.057680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.059522][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.060258][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.066271][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.116009][ T4810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.140286][ T4905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.185523][ T4714] Bluetooth: hci0: command tx timeout [ 32.187836][ T4814] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 32.187872][ T4814] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 32.191362][ T12] wlan1: authenticated [ 32.192326][ T4905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.195427][ T12] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 32.241331][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.241518][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.243548][ T4905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.243831][ T12] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 32.243931][ T12] wlan1: associated [ 32.265773][ T4719] Bluetooth: hci3: command tx timeout [ 32.265948][ T4719] Bluetooth: hci1: command tx timeout [ 32.266038][ T4719] Bluetooth: hci2: command tx timeout [ 32.267440][ T4810] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice= 2.00 [ 32.270649][ T4714] Bluetooth: hci4: command tx timeout [ 32.271241][ T4810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.271268][ T4810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.271280][ T4810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 32.272720][ T4810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.272731][ T4810] usb 1-1: Product: syz [ 32.272740][ T4810] usb 1-1: Manufacturer: syz [ 32.272748][ T4810] usb 1-1: SerialNumber: syz [ 32.276134][ T4892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.276193][ T4892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.279867][ T4810] belkin_sa 1-1:1.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 32.280530][ T4810] usb 1-1: bcdDevice: 0200, bfc: 1 [ 32.283411][ T4810] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 32.506518][ T4910] EXT4-fs (nvme0n1p2): shut down requested (2) [ 32.508103][ T4910] Aborting journal on device nvme0n1p2-8. [ 32.677482][ T4911] Unable to handle kernel paging request at virtual address ffff80009823d640 [ 32.679455][ T4911] KASAN: probably user-memory-access in range [0x00000004c11eb200-0x00000004c11eb207] [ 32.679468][ T4911] Mem abort info: [ 32.679472][ T4911] ESR = 0x0000000096000007 [ 32.679478][ T4911] EC = 0x25: DABT (current EL), IL = 32 bits [ 32.679484][ T4911] SET = 0, FnV = 0 [ 32.679488][ T4911] EA = 0, S1PTW = 0 [ 32.679492][ T4911] FSC = 0x07: level 3 translation fault [ 32.679497][ T4911] Data abort info: [ 32.679500][ T4911] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 32.679505][ T4911] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 32.679511][ T4911] GCS = 0, Overlay = 0, DirtyBit = 0 [ 32.679516][ T4911] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 32.679522][ T4911] [ffff80009823d640] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=100000010cdc2403, pte=0000000000000000 [ 32.679595][ T4911] Internal error: Oops: 0000000096000007 [#1] SMP [ 32.694058][ T4911] Modules linked in: [ 32.694758][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT [ 32.696149][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 32.697751][ T4911] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.699016][ T4911] pc : nhi_probe+0xc0/0x730 [ 32.699784][ T4911] lr : nhi_probe+0x34/0x730 [ 32.700571][ T4911] sp : ffff8000979875b0 [ 32.701289][ T4911] x29: ffff8000979875c0 x28: 1fffe0001ae43d1a x27: ffff0000d721e8d0 [ 32.702694][ T4911] x26: 1fffe0001ae43d18 x25: ffff0000c2b100d0 x24: 1fffe0001ae43d19 [ 32.704015][ T4911] x23: dfff800000000000 x22: 1fffe0001ae43d27 x21: ffff0000d721e938 [ 32.705354][ T4911] x20: ffff0000d721e880 x19: ffff0000d721e8c8 x18: 1fffe00034bbbe28 [ 32.706660][ T4911] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 32.708033][ T4911] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 32.709374][ T4911] x11: ffff80008a5d5e28 x10: 0000000000080000 x9 : 000000000000429d [ 32.710735][ T4911] x8 : ffff80009823d640 x7 : 0000000000000000 x6 : 0000000000000000 [ 32.712105][ T4911] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080156118 [ 32.713524][ T4911] x2 : 0000000000000006 x1 : ffff0000cc048000 x0 : 0000000000000001 [ 32.714944][ T4911] Call trace: [ 32.715479][ T4911] nhi_probe+0xc0/0x730 (P) [ 32.716262][ T4911] nhi_pci_probe+0x418/0x4e4 [ 32.717066][ T4911] local_pci_probe+0xc8/0x158 [ 32.717877][ T4911] pci_device_probe+0x460/0x8d4 [ 32.718725][ T4911] really_probe+0x29c/0x800 [ 32.719462][ T4911] __driver_probe_device+0x1e0/0x350 [ 32.720349][ T4911] device_driver_attach+0x58/0xac [ 32.721232][ T4911] bind_store+0xf4/0x14c [ 32.721935][ T4911] drv_attr_store+0x80/0xa4 [ 32.722699][ T4911] sysfs_kf_write+0xe0/0x108 [ 32.723472][ T4911] kernfs_fop_write_iter+0x260/0x3b8 [ 32.724375][ T4911] vfs_write+0x51c/0xa0c [ 32.725088][ T4911] ksys_write+0x12c/0x228 [ 32.725824][ T4911] __arm64_sys_write+0x84/0x98 [ 32.726636][ T4911] invoke_syscall+0x98/0x244 [ 32.727429][ T4911] el0_svc_common+0xec/0x23c [ 32.728215][ T4911] do_el0_svc+0x4c/0x5c [ 32.728916][ T4911] el0_svc+0x64/0x260 [ 32.729571][ T4911] el0t_64_sync_handler+0x44/0x104 [ 32.730449][ T4911] el0t_64_sync+0x198/0x19c [ 32.731234][ T4911] Code: d343feb6 9140e508 91190108 d503201f (b9400109) [ 32.732440][ T4911] ---[ end trace 0000000000000000 ]--- [ 33.009776][ T4911] Kernel panic - not syncing: Oops: Fatal exception [ 33.010929][ T4911] SMP: stopping secondary CPUs [ 33.011748][ T4911] Kernel Offset: disabled [ 33.012444][ T4911] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 33.013545][ T4911] Memory Limit: none [ 33.265912][ T4911] Rebooting in 86400 seconds..