last executing test programs: 151.31044ms ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0xc0000}, 0x48) nanosleep(&(0x7f0000000100)={0x0, 0x3b9ac9ff}, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='thunderbolt\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12139' (ED25519) to the list of known hosts. syzkaller login: [ 128.141877][ T3369] cgroup: Unknown subsys name 'net' [ 128.327796][ T3369] cgroup: Unknown subsys name 'cpuset' [ 128.345143][ T3369] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 128.728168][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 136.672391][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.682826][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.895454][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.910445][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.590472][ T3375] hsr_slave_0: entered promiscuous mode [ 137.599470][ T3375] hsr_slave_1: entered promiscuous mode [ 137.822224][ T3374] hsr_slave_0: entered promiscuous mode [ 137.828527][ T3374] hsr_slave_1: entered promiscuous mode [ 137.832021][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 137.835450][ T3374] Cannot create hsr debugfs directory [ 138.652379][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.700014][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.717606][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.738309][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.763722][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.790806][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.819469][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.836470][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.980060][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.998777][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.009640][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.026787][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.052926][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.071433][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.079680][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.097800][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.644319][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.832648][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.660123][ T3375] veth0_vlan: entered promiscuous mode [ 142.710594][ T3375] veth1_vlan: entered promiscuous mode [ 142.823395][ T3375] veth0_macvtap: entered promiscuous mode [ 142.856816][ T3375] veth1_macvtap: entered promiscuous mode [ 143.059225][ T3374] veth0_vlan: entered promiscuous mode [ 143.165938][ T2402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.166494][ T2402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.166617][ T2402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.166753][ T2402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.192308][ T3374] veth1_vlan: entered promiscuous mode [ 143.320952][ T3374] veth0_macvtap: entered promiscuous mode [ 143.352761][ T3374] veth1_macvtap: entered promiscuous mode [ 143.545605][ T1292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.549967][ T1292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.560186][ T1292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.560707][ T1292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.574126][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 144.480112][ T3526] EXT4-fs (vda): shut down requested (2) [ 144.480587][ T3526] Aborting journal on device vda-8. [ 144.739745][ T3526] Unable to handle kernel paging request at virtual address ffffffffc083a640 [ 144.739963][ T3526] Mem abort info: [ 144.740136][ T3526] ESR = 0x0000000096000007 [ 144.740245][ T3526] EC = 0x25: DABT (current EL), IL = 32 bits [ 144.740309][ T3526] SET = 0, FnV = 0 [ 144.740361][ T3526] EA = 0, S1PTW = 0 [ 144.740429][ T3526] FSC = 0x07: level 3 translation fault [ 144.740506][ T3526] Data abort info: [ 144.740596][ T3526] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 144.740667][ T3526] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 144.740727][ T3526] GCS = 0, Overlay = 0, DirtyBit = 0 [ 144.740855][ T3526] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042bba000 [ 144.740962][ T3526] [ffffffffc083a640] pgd=10000000430da003, p4d=00000000430d5403, pud=00000000430d6403, pmd=10000000447ec403, pte=0000000000000000 [ 144.742347][ T3526] Internal error: Oops: 0000000096000007 [#1] SMP [ 144.752044][ T3526] Modules linked in: [ 144.753231][ T3526] CPU: 1 UID: 0 PID: 3526 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 144.754252][ T3526] Hardware name: linux,dummy-virt (DT) [ 144.755017][ T3526] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 144.755481][ T3526] pc : nhi_probe+0x38/0x3c0 [ 144.756458][ T3526] lr : nhi_pci_probe+0x134/0x1c0 [ 144.756821][ T3526] sp : ffff8000862fba90 [ 144.757159][ T3526] x29: ffff8000862fba90 x28: faf0000006384400 x27: 0000000000000000 [ 144.758331][ T3526] x26: 0000000000000000 x25: 0000000000000000 x24: f1f0000006872320 [ 144.759047][ T3526] x23: fdf00000037cbf00 x22: f2f0000003c0a0d0 x21: f2f0000003c0a0d0 [ 144.759676][ T3526] x20: 0000000000039640 x19: f9f0000005a91a80 x18: 0000000000000000 [ 144.760666][ T3526] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000240 [ 144.761357][ T3526] x14: 0000000000000000 x13: 0000000000000004 x12: 0000000000000000 [ 144.762015][ T3526] x11: 0000000000000004 x10: 080f8000793a70d8 x9 : 0000000000000000 [ 144.762729][ T3526] x8 : 00000000800115a8 x7 : ffff800082e8d520 x6 : 00000000000000ff [ 144.763473][ T3526] x5 : 0000000000000000 x4 : 0000000000000040 x3 : ffff800090000000 [ 144.764021][ T3526] x2 : 0000000000000000 x1 : ffffffffc083a640 x0 : ffff8000815dfac0 [ 144.765002][ T3526] Call trace: [ 144.765575][ T3526] nhi_probe+0x38/0x3c0 (P) [ 144.766188][ T3526] nhi_pci_probe+0x134/0x1c0 [ 144.766566][ T3526] local_pci_probe+0x40/0xa8 [ 144.767009][ T3526] pci_device_probe+0xd8/0x288 [ 144.767410][ T3526] really_probe+0xbc/0x2bc [ 144.767811][ T3526] __driver_probe_device+0x118/0x16c [ 144.768257][ T3526] device_driver_attach+0x48/0xb4 [ 144.769610][ T3526] bind_store+0x7c/0xd8 [ 144.770716][ T3526] drv_attr_store+0x24/0x40 [ 144.771981][ T3526] sysfs_kf_write+0x7c/0x98 [ 144.773115][ T3526] kernfs_fop_write_iter+0x138/0x200 [ 144.774508][ T3526] vfs_write+0x244/0x36c [ 144.775672][ T3526] ksys_write+0x70/0x108 [ 144.776696][ T3526] __arm64_sys_write+0x1c/0x30 [ 144.777094][ T3526] invoke_syscall+0x54/0x10c [ 144.777429][ T3526] el0_svc_common.constprop.0+0x40/0xe0 [ 144.777796][ T3526] do_el0_svc+0x1c/0x34 [ 144.778131][ T3526] el0_svc+0x38/0x1fc [ 144.778477][ T3526] el0t_64_sync_handler+0xa0/0xf0 [ 144.778834][ T3526] el0t_64_sync+0x1a4/0x1a8 [ 144.779634][ T3526] Code: f9400e61 d292c814 f2a00074 8b140021 (b9400021) [ 144.780715][ T3526] ---[ end trace 0000000000000000 ]--- [ 144.781780][ T3526] Kernel panic - not syncing: Oops: Fatal exception [ 144.782557][ T3526] SMP: stopping secondary CPUs [ 144.783769][ T3526] Kernel Offset: disabled [ 144.784082][ T3526] CPU features: 0x00000000,0034660b,f7c64780,957fff3f [ 144.785127][ T3526] Memory Limit: none [ 144.786582][ T3526] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:26:47 Registers: info registers vcpu 0 CPU#0 PC=ffff800081970cd8 X00=0000000000000001 X01=ffff800082efbaf0 X02=ffff800082efba58 X03=ffff800082efba58 X04=0000000000000016 X05=0000000000000007 X06=faf00000036cd900 X07=000000007891e83c X08=0000000099f5c0ac X09=000000002e3e2a09 X10=f0f0000006add962 X11=0000000000155cc0 X12=000000000000005a X13=00000000b504f333 X14=00000000000001f3 X15=0000ffffd35031a0 X16=ffff800082ef8000 X17=fff07ffffcd88000 X18=0000000000000000 X19=0000000000000006 X20=f2f0000006aac300 X21=000000000000004e X22=ffff800082eb9f40 X23=0000000000000000 X24=ffff800082eb9f40 X25=f2f0000006aac300 X26=faf00000036cd900 X27=0000000020040000 X28=ffff800082b76ef0 X29=ffff800082efb8f0 X30=e1ff800081970f78 SP=ffff800082efb870 PSTATE=80402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000004801000000:0000004801000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000048 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:0000000000000048 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffd35031a0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809aeaf4 X00=ffff800082f21000 X01=0000000000000002 X02=0000000000000000 X03=ffff800082cbc6b8 X04=fdf00000037c1080 X05=0000000000000033 X06=ffff800082cbc788 X07=0000000000000001 X08=faf0000006384400 X09=0000000000000325 X10=0000000000004b90 X11=ffff800082b8ed68 X12=0000000000011510 X13=ffff8000862fb318 X14=ffff8000862fb160 X15=ffff8000862fb30d X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=f7f0000003cf3012 X20=ffff8000809aeaac X21=fdf00000037c1080 X22=f7f0000003cf3044 X23=0000000000000000 X24=0000000000000000 X25=ffff800082b5ed08 X26=0800000000000000 X27=ffff8000828a9000 X28=faf0000006384400 X29=ffff8000862fb490 X30=ffff8000809aead4 SP=ffff8000862fb490 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffeeeb9890 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000