Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. syzkaller login: [ 43.644562][ T3967] chnl_net:caif_netlink_parms(): no params data found [ 43.682424][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.684127][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.686406][ T3967] device bridge_slave_0 entered promiscuous mode [ 43.690821][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.692610][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.695024][ T3967] device bridge_slave_1 entered promiscuous mode [ 43.710232][ T3967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.714345][ T3967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.728526][ T3967] team0: Port device team_slave_0 added [ 43.731504][ T3967] team0: Port device team_slave_1 added [ 43.745530][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.747193][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.753176][ T3967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.757526][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.759311][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.765384][ T3967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.824644][ T3967] device hsr_slave_0 entered promiscuous mode [ 43.862046][ T3967] device hsr_slave_1 entered promiscuous mode [ 43.994479][ T3967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.054916][ T3967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.093841][ T3967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.134061][ T3967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.189386][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.191015][ T3967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.193232][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.194845][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.236335][ T3967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.243680][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.247618][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.250446][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.254955][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 44.262286][ T3967] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.269200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.271414][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.273065][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.282337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.284885][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.286490][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.303798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.306446][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.308861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.314620][ T3967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.317549][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.325530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.327675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.336759][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.338502][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.346570][ T3967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.358531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.374086][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.376788][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.378985][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.383545][ T3967] device veth0_vlan entered promiscuous mode [ 44.390714][ T3967] device veth1_vlan entered promiscuous mode [ 44.408637][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.410852][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.414144][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.420164][ T3967] device veth0_macvtap entered promiscuous mode [ 44.426115][ T3967] device veth1_macvtap entered promiscuous mode [ 44.438061][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.439879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.443497][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.448238][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.452082][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.455218][ T3967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.457112][ T3967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.459123][ T3967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.460973][ T3967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 44.761828][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.001811][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 45.281840][ T21] usb 1-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=19.f0 [ 45.283956][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.285672][ T21] usb 1-1: Product: syz [ 45.286672][ T21] usb 1-1: Manufacturer: syz [ 45.287673][ T21] usb 1-1: SerialNumber: syz [ 45.294158][ T21] usb 1-1: config 0 descriptor?? [ 45.551845][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 45.571842][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 45.811832][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 45.951887][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 45.954281][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 45.971808][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 45.991915][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 46.011830][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.031941][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.051930][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.071907][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.091827][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 46.111902][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.131892][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 46.151865][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 46.171881][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.191898][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 46.211934][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 46.231867][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 46.251842][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.271866][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.291922][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.311910][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 46.331874][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.351839][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.371923][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.391940][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.411976][ T21] ax88179_178a 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.420021][ T21] ax88179_178a 1-1:0.0 eth0: register 'ax88179_178a' at usb-dummy_hcd.0-1, MCT USB 3.0 Gigabit Ethernet Adapter, 4e:49:26:88:5f:67 [ 46.426067][ T21] usb 1-1: USB disconnect, device number 2 [ 46.428410][ T21] Unable to handle kernel paging request at virtual address dfff800000000002 [ 46.430471][ T21] Mem abort info: [ 46.431312][ T21] ESR = 0x0000000096000006 [ 46.432462][ T21] EC = 0x25: DABT (current EL), IL = 32 bits [ 46.433805][ T21] SET = 0, FnV = 0 [ 46.434688][ T21] EA = 0, S1PTW = 0 [ 46.435599][ T21] FSC = 0x06: level 2 translation fault [ 46.436865][ T21] Data abort info: [ 46.437540][ T21] ISV = 0, ISS = 0x00000006 [ 46.438484][ T21] CM = 0, WnR = 0 [ 46.439321][ T21] [dfff800000000002] address between user and kernel address ranges [ 46.441063][ T21] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 46.442667][ T21] Modules linked in: [ 46.443505][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 5.15.146-syzkaller #0 [ 46.445228][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 46.447932][ T21] Workqueue: usb_hub_wq hub_event [ 46.449342][ T21] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.451209][ T21] pc : ax88179_disconnect+0x70/0xb8 [ 46.452397][ T21] lr : ax88179_disconnect+0x48/0xb8 [ 46.453553][ T21] sp : ffff8000189f73b0 [ 46.454438][ T21] x29: ffff8000189f73b0 x28: ffff800015ff12e0 x27: ffff0000ca7ab000 [ 46.456185][ T21] x26: 0000000000000001 x25: ffff0000ca7ab0a8 x24: ffff0000c2f32030 [ 46.458204][ T21] x23: ffff800015ff1248 x22: ffff800015ff11b0 x21: dfff800000000000 [ 46.459920][ T21] x20: 0000000000000010 x19: ffff0000c2f32000 x18: 0000000000000001 [ 46.461802][ T21] x17: 0000000000000000 x16: ffff8000088ca890 x15: 0000000000000003 [ 46.463577][ T21] x14: 1ffff0000292406a x13: dfff800000000000 x12: 0000000000000001 [ 46.465330][ T21] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 46.467064][ T21] x8 : 0000000000000002 x7 : ffff80000d6fc634 x6 : 0000000000000000 [ 46.468953][ T21] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011a46b7c [ 46.470843][ T21] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000c2f32000 [ 46.472517][ T21] Call trace: [ 46.473212][ T21] ax88179_disconnect+0x70/0xb8 [ 46.474345][ T21] usb_unbind_interface+0x1a4/0x758 [ 46.475630][ T21] device_release_driver_internal+0x464/0x6ac [ 46.477015][ T21] device_release_driver+0x28/0x38 [ 46.477974][ T21] bus_remove_device+0x298/0x38c [ 46.478899][ T21] device_del+0x57c/0x9b4 [ 46.479708][ T21] usb_disable_device+0x354/0x760 [ 46.480635][ T21] usb_disconnect+0x290/0x7e8 [ 46.481506][ T21] hub_event+0x1718/0x47d4 [ 46.482469][ T21] process_one_work+0x790/0x11b8 [ 46.483572][ T21] worker_thread+0xb88/0x1034 [ 46.484628][ T21] kthread+0x37c/0x45c [ 46.485492][ T21] ret_from_fork+0x10/0x20 [ 46.486571][ T21] Code: f9400288 91004114 d343fe88 12000a89 (38f56908) [ 46.488057][ T21] ---[ end trace 3c75c3d4bd6cee55 ]--- [ 46.622568][ T3642] Unable to handle kernel paging request at virtual address dfff800000000002 [ 46.624705][ T3642] Mem abort info: [ 46.625554][ T3642] ESR = 0x0000000096000006 [ 46.626760][ T3642] EC = 0x25: DABT (current EL), IL = 32 bits [ 46.628119][ T3642] SET = 0, FnV = 0 [ 46.628880][ T3642] EA = 0, S1PTW = 0 [ 46.629782][ T3642] FSC = 0x06: level 2 translation fault [ 46.631013][ T3642] Data abort info: [ 46.635335][ T3642] ISV = 0, ISS = 0x00000006 [ 46.636349][ T3642] CM = 0, WnR = 0 [ 46.637181][ T3642] [dfff800000000002] address between user and kernel address ranges [ 46.779927][ T21] Kernel panic - not syncing: Oops: Fatal exception [ 46.781362][ T21] SMP: stopping secondary CPUs [ 47.869630][ T21] SMP: failed to stop secondary CPUs 0-1 [ 47.871069][ T21] Kernel Offset: disabled [ 47.872065][ T21] CPU features: 0x0,000081c1,21302e40 [ 47.873370][ T21] Memory Limit: none [ 48.169004][ T21] Rebooting in 86400 seconds..