last executing test programs: 2.995466273s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rt1711h 0x4e\n\x00', 0xed) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mnt/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='rt1711h 0x4e\n\x00', 0xed) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.973113076s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, 0x10, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x3}, @typed={0xa, 0x6, 0x0, 0x0, @binary="001122334455"}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x1}]}, 0x30}}, 0x0) 2.862384719s ago: executing program 2 (id=7): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f00000000e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='sys/devices/platform/vhci_hcd.0/attach\x00', 0x2, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4', 0x1}, {&(0x7f00000009c0)=' 0 2\n', 0x5}], 0x3) 2.862223008s ago: executing program 4 (id=5): syz_usb_connect(0x3, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000408f05876300010102030109022e00010100803209040000040806620007050102000200070582020002000705830200020007050402000200"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x5}, 0x0) 2.861984299s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000003000)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040300880000001010203010902200001010080fa0904000002ff0000000705810240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000010000)={0x84, &(0x7f0000011000)={0x40, 0x2, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000012000)={0x84, &(0x7f0000013000)={0x40, 0x2, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000014000)={0x84, &(0x7f0000015000)={0x40, 0x2, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000016000)={0x84, &(0x7f0000017000)={0x40, 0x2, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000018000)={0x84, &(0x7f0000019000)={0x40, 0x2, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000004000)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000005000)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.293084619s ago: executing program 2 (id=10): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x1234, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) 2.198336538s ago: executing program 2 (id=11): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f20c50620001000000010902200001010080320904000002080650000705010200020007058202000200"], &(0x7f0000000000)) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 2.034826481s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='proc\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='proc\x00', &(0x7f0000000500)='proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) 1.958440062s ago: executing program 3 (id=14): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f30c70910001010200010902300001010080fa0904000004ff0000000905810200020000090502020002000009058303400001000905040200020000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x83, 0xc, &(0x7f0000000100)="cc0008001122334455667788") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.259824331s ago: executing program 0 (id=15): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 1.103514578s ago: executing program 1 (id=16): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x0) 1.046401993s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/kernel/core_pattern\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='core\x00', 0x5) setresuid(0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_DUMPABLE(0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./core\x00', 0x42, 0x1b0) close(r1) r2 = getpid() tgkill(r2, r2, 0xb) 1.046219282s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/pcspkr/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='pcspkr\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='xhci-hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='pcspkr\x00', 0x7) 1.046120926s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:08.0/class\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x64) write(0x2, &(0x7f0000000180)='00:08.0: \x00', 0x9) write(0x2, &(0x7f0000000000), 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/class\x00', 0x0, 0x0) read(r1, &(0x7f0000000000), 0x64) write(0x2, &(0x7f0000000200)='00:1d.0: \x00', 0x9) write(0x2, &(0x7f0000000000), 0x64) 1.032110709s ago: executing program 1 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) 1.010550964s ago: executing program 1 (id=21): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b11342000001010200010902200001010080fa0904000002ff0000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 383.255758ms ago: executing program 3 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='devices', 0x7) 383.05191ms ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000050)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='4\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_nr_conv\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='2\x00', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000c50)=@filename='none\x00', &(0x7f0000000d00)='./dev_mnt\x00', &(0x7f0000000e00)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev_mnt/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000140)="040000000000000000000000800100003400000001000000000000000000000000000000000000000000000000000000646d300000000000000000000000000000000000008000000000000000000000340000007a6f6e6564000000000000000000002f6465762f6e756c6c623100") 338.430371ms ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='raid5\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='65536\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='3\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1:0\n\x00', 0x4) write(r4, &(0x7f00000003c0)='1:1\n\x00', 0x4) write(r4, &(0x7f0000000400)='1:2\n\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\n\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='active\n\x00', 0x7) write(r4, &(0x7f0000000640)='1:3\n\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='3\n\x00', 0x2) write(r3, &(0x7f0000000700)='4\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000780)='reshape\n\x00', 0x8) 140.011801ms ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/drivers_probe\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='LNXSYSTM:00\x00', 0xc) write(r3, &(0x7f0000000300)='PNP0A08:00\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/acpi/drivers/pci_root/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='PNP0A08:00\x00', 0xb) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/acpi/drivers/pci_root/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='PNP0A08:00\x00', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pnp/drivers_probe\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='00:00\x00', 0x6) close(r6) 107.577717ms ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='net2280\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/net2280/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0000:00:02.0\x00', 0xd) close(r2) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 3 (id=27): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040530502000000010200010902190001010080320904000001ff00000007058102400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0xc0, 0x1, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000400)={0xc0, 0x5, 0x8, "0100000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x0, &(0x7f0000000600)={0xc0, 0x8, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x0, &(0x7f0000000800)={0xc0, 0x2, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x0, &(0x7f0000000a00)={0xc0, 0x3, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000e00)={0xc0, 0x1, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$video(&(0x7f0000000c00), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 28.934685][ T4701] cgroup: Unknown subsys name 'net' [ 29.064350][ T4701] cgroup: Unknown subsys name 'cpuset' [ 29.066593][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.235725][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.251035][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.251411][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.251573][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.251893][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.252107][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.258044][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.258405][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.258575][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.258890][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.259116][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.269054][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.269357][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.269520][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.269819][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.270029][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.273980][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.274310][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.274468][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.274785][ T4713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.274988][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.280779][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.281030][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.281181][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.281492][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.281725][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.652039][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.653868][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.655326][ T4725] bridge_slave_0: entered allmulticast mode [ 30.656951][ T4725] bridge_slave_0: entered promiscuous mode [ 30.658978][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.659021][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.659119][ T4725] bridge_slave_1: entered allmulticast mode [ 30.659588][ T4725] bridge_slave_1: entered promiscuous mode [ 30.686874][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.688106][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.697953][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.698024][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.698307][ T4718] bridge_slave_0: entered allmulticast mode [ 30.698747][ T4718] bridge_slave_0: entered promiscuous mode [ 30.713773][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.715173][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.715253][ T4718] bridge_slave_1: entered allmulticast mode [ 30.715704][ T4718] bridge_slave_1: entered promiscuous mode [ 30.722178][ T4725] team0: Port device team_slave_0 added [ 30.724953][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725003][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.725106][ T4715] bridge_slave_0: entered allmulticast mode [ 30.725547][ T4715] bridge_slave_0: entered promiscuous mode [ 30.726295][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726316][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.726399][ T4715] bridge_slave_1: entered allmulticast mode [ 30.726856][ T4715] bridge_slave_1: entered promiscuous mode [ 30.734171][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.735159][ T4725] team0: Port device team_slave_1 added [ 30.745049][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.764839][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.764860][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.764873][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.765651][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.765658][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.765669][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.774943][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.775884][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.781771][ T4715] team0: Port device team_slave_0 added [ 30.782524][ T4715] team0: Port device team_slave_1 added [ 30.794006][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.794091][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.794448][ T4723] bridge_slave_0: entered allmulticast mode [ 30.794882][ T4723] bridge_slave_0: entered promiscuous mode [ 30.798008][ T4725] hsr_slave_0: entered promiscuous mode [ 30.798351][ T4725] hsr_slave_1: entered promiscuous mode [ 30.807652][ T4718] team0: Port device team_slave_0 added [ 30.808402][ T4718] team0: Port device team_slave_1 added [ 30.811191][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.812592][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.813296][ T4723] bridge_slave_1: entered allmulticast mode [ 30.813762][ T4723] bridge_slave_1: entered promiscuous mode [ 30.817025][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.818236][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.819449][ T4712] bridge_slave_0: entered allmulticast mode [ 30.820939][ T4712] bridge_slave_0: entered promiscuous mode [ 30.825931][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.827141][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.831551][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.836989][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.837012][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.837023][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.847107][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.848493][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.849843][ T4712] bridge_slave_1: entered allmulticast mode [ 30.851347][ T4712] bridge_slave_1: entered promiscuous mode [ 30.860418][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.860443][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.860456][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.861299][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.861310][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.861321][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.877530][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.878616][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.884565][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.887316][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.897631][ T4723] team0: Port device team_slave_0 added [ 30.905689][ T4723] team0: Port device team_slave_1 added [ 30.925665][ T4715] hsr_slave_0: entered promiscuous mode [ 30.925982][ T4715] hsr_slave_1: entered promiscuous mode [ 30.926172][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.926202][ T4715] Cannot create hsr debugfs directory [ 30.927120][ T4712] team0: Port device team_slave_0 added [ 30.927966][ T4712] team0: Port device team_slave_1 added [ 30.934333][ T4718] hsr_slave_0: entered promiscuous mode [ 30.934665][ T4718] hsr_slave_1: entered promiscuous mode [ 30.934874][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.934883][ T4718] Cannot create hsr debugfs directory [ 30.939596][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.939615][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.939640][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.940179][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.940187][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.940202][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.977843][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.979109][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.983180][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.985223][ T4723] hsr_slave_0: entered promiscuous mode [ 30.985646][ T4723] hsr_slave_1: entered promiscuous mode [ 30.986162][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 30.986171][ T4723] Cannot create hsr debugfs directory [ 30.994493][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.994515][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.994528][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.004024][ T4712] hsr_slave_0: entered promiscuous mode [ 31.004333][ T4712] hsr_slave_1: entered promiscuous mode [ 31.004528][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.004537][ T4712] Cannot create hsr debugfs directory [ 31.065905][ T4725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.068930][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.083761][ T4725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.085747][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.086078][ T4725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.088001][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.096145][ T4725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.098594][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.125707][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.125753][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.125902][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.125944][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.127386][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.129294][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.129592][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.131568][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.132770][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.135203][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.141344][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.143887][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.161105][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.161146][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.161230][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.161262][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.167931][ T4718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.170209][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.170652][ T4718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.172327][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.175110][ T4718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.177056][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.179747][ T4718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.181877][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.204818][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.204865][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.204955][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.204983][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.212620][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.219395][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.225096][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.226786][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.228756][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.231401][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.234038][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.246352][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.246397][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.261889][ T4725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.263834][ T4725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.264747][ T4712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.266849][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.267142][ T4712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.268927][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.282908][ T4712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.286317][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.289872][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.294180][ T4712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.296318][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.309871][ T4723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.312044][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.315702][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.318256][ T4723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.325318][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.327185][ T4723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.329469][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.331477][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.335959][ T4723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.338075][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.340620][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.340658][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.345855][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.345901][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.359073][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.367270][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.367309][ T762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.381221][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.381263][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.406805][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.439636][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.448015][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.450958][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.461626][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.464681][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.471361][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.478329][ T1371] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478369][ T1371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.478754][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.478772][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.515918][ T4725] veth0_vlan: entered promiscuous mode [ 31.518129][ T4725] veth1_vlan: entered promiscuous mode [ 31.526972][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.537045][ T4725] veth0_macvtap: entered promiscuous mode [ 31.540536][ T4725] veth1_macvtap: entered promiscuous mode [ 31.547561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.547598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.566744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.566786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.582240][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.587857][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.623826][ T1371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624183][ T1371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624201][ T1371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624217][ T1371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.650180][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.650203][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.665702][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.665730][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.670907][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.688879][ T4718] veth0_vlan: entered promiscuous mode [ 31.704832][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.711328][ T4718] veth1_vlan: entered promiscuous mode [ 31.727743][ T4718] veth0_macvtap: entered promiscuous mode [ 31.735605][ T4718] veth1_macvtap: entered promiscuous mode [ 31.741982][ T4725] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.742903][ T4715] veth0_vlan: entered promiscuous mode [ 31.756518][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.760051][ T4715] veth1_vlan: entered promiscuous mode [ 31.767693][ T4715] veth0_macvtap: entered promiscuous mode [ 31.775632][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.782338][ T4715] veth1_macvtap: entered promiscuous mode [ 31.790922][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.795695][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.798772][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.806069][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806159][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806179][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.806193][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.808049][ T4884] loop0: detected capacity change from 0 to 32768 [ 31.813813][ T4884] loop1: detected capacity change from 0 to 32768 [ 31.815754][ T4884] loop2: detected capacity change from 0 to 32768 [ 31.815982][ T1371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816477][ T1371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816705][ T1371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816800][ T1371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.852745][ T762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.852767][ T762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.865092][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.880198][ T4723] veth0_vlan: entered promiscuous mode [ 31.885956][ T1371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.885985][ T1371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.891218][ T4723] veth1_vlan: entered promiscuous mode [ 31.914040][ T4723] veth0_macvtap: entered promiscuous mode [ 31.916897][ T4723] veth1_macvtap: entered promiscuous mode [ 31.925873][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.928180][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.929539][ T4892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.929751][ T4892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.953865][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954016][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954078][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.958754][ T762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.958791][ T762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.995979][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.998833][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.031695][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.031724][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.033868][ T1371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.036241][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.036250][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.038278][ T4712] veth0_vlan: entered promiscuous mode [ 32.043802][ T4712] veth1_vlan: entered promiscuous mode [ 32.057779][ T4712] veth0_macvtap: entered promiscuous mode [ 32.059965][ T4712] veth1_macvtap: entered promiscuous mode [ 32.065253][ T762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.065282][ T762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.070119][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.073956][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.113969][ T1371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.114128][ T1371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.114262][ T1371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.114380][ T1371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121633][ T762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.121664][ T762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.136265][ T1371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.136291][ T1371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.197985][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.199917][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.219576][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.220039][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.323418][ T4713] Bluetooth: hci0: command tx timeout [ 32.323537][ T4713] Bluetooth: hci4: command tx timeout [ 32.323617][ T4713] Bluetooth: hci3: command tx timeout [ 32.323680][ T4713] Bluetooth: hci1: command tx timeout [ 32.323742][ T4713] Bluetooth: hci2: command tx timeout [ 32.343136][ T1032] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.467689][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.468961][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.513972][ T1032] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 32.515654][ T1032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.520149][ T1032] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 002 [ 32.780751][ T4913] rt1711h 0-004e: probe with driver rt1711h failed with error -5 [ 32.784450][ T4913] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 32.805984][ T4915] lo speed is unknown, defaulting to 1000 [ 32.807549][ T4915] lo speed is unknown, defaulting to 1000 [ 32.810154][ T4915] lo speed is unknown, defaulting to 1000 [ 32.811844][ T4915] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.815457][ T4915] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.824396][ T4915] lo speed is unknown, defaulting to 1000 [ 32.827350][ T4915] lo speed is unknown, defaulting to 1000 [ 32.827754][ T4915] lo speed is unknown, defaulting to 1000 [ 32.828133][ T4915] lo speed is unknown, defaulting to 1000 [ 32.828511][ T4915] lo speed is unknown, defaulting to 1000 [ 32.851009][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.853660][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.023764][ T4919] loop0: detected capacity change from 0 to 32768 [ 33.026064][ T4919] loop1: detected capacity change from 0 to 32768 [ 33.026523][ T4919] loop2: detected capacity change from 0 to 32768 [ 33.060554][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.060832][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.104655][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.104923][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.291489][ T1032] (null): error -EIO: failure setting delay to 10us [ 33.291548][ T1032] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 33.299137][ T1032] usb 1-1: USB disconnect, device number 2 [ 34.063028][ T4844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.080923][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.082727][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.223043][ T4844] usb 1-1: Using ep0 maxpacket: 8 [ 34.223711][ T4844] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 34.224429][ T4844] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 34.224441][ T4844] usb 1-1: config 0 has no interface number 0 [ 34.224460][ T4844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.225802][ T4844] usb 1-1: config 0 descriptor?? [ 34.334277][ T4844] viperboard 1-1:0.143: version 0.00 found at bus 001 address 003 [ 34.340386][ T4844] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 34.340447][ T4844] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 34.413047][ T4713] Bluetooth: hci1: command tx timeout [ 34.413079][ T4713] Bluetooth: hci3: command tx timeout [ 34.413107][ T4713] Bluetooth: hci4: command tx timeout [ 34.413121][ T4713] Bluetooth: hci0: command tx timeout [ 34.413221][ T50] Bluetooth: hci2: command tx timeout [ 34.431573][ T24] usb 1-1: USB disconnect, device number 3 [ 34.719032][ T4945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.963352][ T4945] md/raid:md0: not clean -- starting background reconstruction [ 34.963579][ T4945] md/raid:md0: device ram1 operational as raid disk 1 [ 34.963605][ T4945] md/raid:md0: device ram0 operational as raid disk 0 [ 34.975359][ T4945] md/raid:md0: cannot start dirty degraded array. [ 35.035310][ T4945] md/raid:md0: failed to run raid set. [ 35.035343][ T4945] md: pers->run() failed ... [ 35.071422][ T4952] EXT4-fs (nvme0n1p2): shut down requested (2) [ 35.071498][ T4952] Aborting journal on device nvme0n1p2-8. [ 35.246945][ T4953] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 [ 35.248853][ T4953] Mem abort info: [ 35.250314][ T4953] ESR = 0x0000000096000006 [ 35.251376][ T4953] EC = 0x25: DABT (current EL), IL = 32 bits [ 35 ** replaying previous printk message ** [ 35.252537][ T4953] SET = 0, FnV = 0 [ 35.252548][ T4953] EA = 0, S1PTW = 0 [ 35.252555][ T4953] FSC = 0x06: level 2 translation fault [ 35.252563][ T4953] Data abort info: [ 35.252567][ T4953] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 35.252574][ T4953] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 35.252580][ T4953] GCS = 0, Overlay = 0, DirtyBit = 0 [ 35.252586][ T4953] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011d50f000 [ 35.252593][ T4953] [0000000000000048] pgd=080000011199e403, p4d=080000011199e403, pud=080000011d44d403, pmd=0000000000000000 [ 35.252657][ T4953] Internal error: Oops: 0000000096000006 [#1] SMP [ 35.263307][ T4953] Modules linked in: [ 35.263944][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT [ 35.265345][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.266992][ T4953] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.268322][ T4953] pc : usb_reinit+0xbf4/0xfa0 [ 35.269242][ T4953] lr : usb_reinit+0xb6c/0xfa0 [ 35.270163][ T4953] sp : ffff800095a175a0 [ 35.270937][ T4953] x29: ffff800095a175e0 x28: dfff800000000000 x27: ffff800087354e38 [ 35.272415][ T4953] x26: ffff800087354e80 x25: 0000000000000060 x24: 1fffe0001e49f183 [ 35.273869][ T4953] x23: ffff0000f24f8c18 x22: 1fffe0001e49f00b x21: 0000000000000011 [ 35.275303][ T4953] x20: ffff0000f24f8058 x19: ffff0000f24f8000 x18: 00000000ffffffff [ 35.276768][ T4953] x17: ffff80008a7d6000 x16: 0000000000000005 x15: ffff80008a35fda0 [ 35.278183][ T4953] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 35.279485][ T4953] x11: 1fffe0001e49f178 x10: 0000000000080000 x9 : 0000000000003706 [ 35.280790][ T4953] x8 : 0000000000000048 x7 : ffff800080aa1cb8 x6 : 0000000000000000 [ 35.282126][ T4953] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000835bf6bc [ 35.283485][ T4953] x2 : 0000000000000000 x1 : ffff0000cd54d7c0 x0 : 0000000000000001 [ 35.284814][ T4953] Call trace: [ 35.285343][ T4953] usb_reinit+0xbf4/0xfa0 (P) [ 35.286122][ T4953] net2280_probe+0x5f4/0xef0 [ 35.286880][ T4953] local_pci_probe+0xc8/0x158 [ 35.287697][ T4953] pci_device_probe+0x460/0x8d4 [ 35.288521][ T4953] really_probe+0x29c/0x800 [ 35.289265][ T4953] __driver_probe_device+0x1e0/0x350 [ 35.290157][ T4953] device_driver_attach+0x58/0xac [ 35.290980][ T4953] bind_store+0xf4/0x14c [ 35.291678][ T4953] drv_attr_store+0x80/0xa4 [ 35.292470][ T4953] sysfs_kf_write+0xe0/0x108 [ 35.293229][ T4953] kernfs_fop_write_iter+0x260/0x3b8 [ 35.294112][ T4953] vfs_write+0x51c/0xa0c [ 35.294801][ T4953] ksys_write+0x12c/0x228 [ 35.295581][ T4953] __arm64_sys_write+0x84/0x98 [ 35.296344][ T4953] invoke_syscall+0x98/0x244 [ 35.297074][ T4953] el0_svc_common+0xec/0x23c [ 35.297841][ T4953] do_el0_svc+0x4c/0x5c [ 35.298546][ T4953] el0_svc+0x64/0x260 [ 35.299215][ T4953] el0t_64_sync_handler+0x44/0x104 [ 35.300082][ T4953] el0t_64_sync+0x198/0x19c [ 35.300851][ T4953] Code: 9757676c f94002e8 91012108 d503201f (b9400115) [ 35.302032][ T4953] ---[ end trace 0000000000000000 ]--- [ 35.569161][ T4953] Kernel panic - not syncing: Oops: Fatal exception [ 35.570264][ T4953] SMP: stopping secondary CPUs [ 35.571130][ T4953] Kernel Offset: disabled [ 35.571875][ T4953] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 35.573035][ T4953] Memory Limit: none [ 35.824836][ T4953] Rebooting in 86400 seconds..