Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [*] Starting netdevsim port add reproducer... [+] stat /sys successful. [+] sysfs is already mounted. [*] netdevsim0 exists from previous run, cleaning up... [+] open /sys/bus/netdevsim/del_device successful. [+] write to /sys/bus/netdevsim/del_device successful. [+] close /sys/bus/netdevsim/del_device successful. [+] open /sys/bus/netdevsim/new_device successful. [+] write to /sys/bus/netdevsim/new_device successful. [+] close /sys/bus/netdevsim/new_device successful. [+] open /sys/bus/netdevsim/devices/netdevsim0/new_port successful. [+] open /sys/bus/netdevsim/drivers/netdevsim/unbind successful. [+] write to /sys/bus/netdevsim/drivers/netdevsim/unbind successful (netdevsim0 unbound). [+] close /sys/bus/netdevsim/drivers/netdevsim/unbind successful. [*] Writing to new_port on unbound netdevsim0 to trigger kernel crash... [ 127.090045][ T6031] BUG: unable to handle page fault for address: fffffffffffffeb0 [ 127.097813][ T6031] #PF: supervisor read access in kernel mode [ 127.103790][ T6031] #PF: error_code(0x0000) - not-present page [ 127.109940][ T6031] PGD f1b3067 P4D f1b3067 PUD f1b5067 PMD 0 [ 127.115951][ T6031] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 127.121466][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz-executor405 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.131726][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 127.141840][ T6031] RIP: 0010:__lock_acquire+0x41/0x2de0 [ 127.147496][ T6031] Code: 2d 12 48 89 84 24 e0 00 00 00 65 48 8b 05 0f e3 2d 12 48 89 44 24 08 45 31 f6 83 3d 28 dc 32 0f 00 0f 84 90 14 00 00 48 89 fb <48> 8b 07 48 3d a0 69 92 94 0f 84 7e 14 00 00 45 89 cd 89 cd 41 89 [ 127.167107][ T6031] RSP: 0018:ffffc900046978d8 EFLAGS: 00010002 [ 127.173181][ T6031] RAX: ffff88801ff11f40 RBX: fffffffffffffeb0 RCX: 0000000000000000 [ 127.181148][ T6031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffeb0 [ 127.189110][ T6031] RBP: ffff88801ff11f40 R08: 0000000000000001 R09: 0000000000000000 [ 127.197098][ T6031] R10: 0000000000000100 R11: 0000000000000007 R12: fffffffffffffeb0 [ 127.205167][ T6031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 127.213167][ T6031] FS: 000055558a5ef400(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 127.222123][ T6031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.228709][ T6031] CR2: fffffffffffffeb0 CR3: 00000000452a0000 CR4: 00000000003526f0 [ 127.236699][ T6031] Call Trace: [ 127.239970][ T6031] [ 127.243165][ T6031] ? vsscanf+0x26c6/0x27d0 [ 127.247690][ T6031] ? stack_depot_save_flags+0x33/0x810 [ 127.253320][ T6031] ? __pfx_vsscanf+0x10/0x10 [ 127.257922][ T6031] ? register_lock_class+0x31/0x2e0 [ 127.263392][ T6031] lock_acquire+0x115/0x350 [ 127.268078][ T6031] ? nsim_drv_port_add+0x5a/0x140 [ 127.273310][ T6031] ? nsim_drv_port_add+0x5a/0x140 [ 127.278389][ T6031] ? nsim_drv_port_add+0x5a/0x140 [ 127.283576][ T6031] mutex_lock_nested+0x55/0x1d0 [ 127.288716][ T6031] ? nsim_drv_port_add+0x5a/0x140 [ 127.293857][ T6031] nsim_drv_port_add+0x5a/0x140 [ 127.298729][ T6031] new_port_store+0x1a5/0x280 [ 127.303414][ T6031] ? __pfx_new_port_store+0x10/0x10 [ 127.308614][ T6031] ? sysfs_file_kobj+0x1a/0x230 [ 127.313474][ T6031] ? sysfs_file_kobj+0x1a/0x230 [ 127.318346][ T6031] ? sysfs_file_kobj+0x1e4/0x230 [ 127.323311][ T6031] ? sysfs_kf_write+0x166/0x260 [ 127.328275][ T6031] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.333478][ T6031] kernfs_fop_write_iter+0x3a5/0x540 [ 127.338877][ T6031] vfs_write+0x61e/0xbb0 [ 127.343232][ T6031] ? __pfx_vfs_write+0x10/0x10 [ 127.348106][ T6031] ? fdget+0x171/0x250 [ 127.352222][ T6031] ksys_write+0x156/0x270 [ 127.356672][ T6031] ? __pfx_ksys_write+0x10/0x10 [ 127.361708][ T6031] do_syscall_64+0x166/0x520 [ 127.366300][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.372361][ T6031] ? clear_bhb_loop+0x70/0xc0 [ 127.377037][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.383024][ T6031] RIP: 0033:0x7efc00506777 [ 127.387459][ T6031] Code: 48 89 fa 4c 89 df e8 58 1c 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.407148][ T6031] RSP: 002b:00007fff1f51a010 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 127.415824][ T6031] RAX: ffffffffffffffda RBX: 000055558a5ef400 RCX: 00007efc00506777 [ 127.423809][ T6031] RDX: 0000000000000002 RSI: 00007efc005586de RDI: 0000000000000003 [ 127.431774][ T6031] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 127.439765][ T6031] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff1f51a228 [ 127.447823][ T6031] R13: 0000000000000002 R14: 00007efc005825a0 R15: 0000000000000002 [ 127.455797][ T6031] [ 127.458837][ T6031] Modules linked in: [ 127.462912][ T6031] CR2: fffffffffffffeb0 [ 127.467075][ T6031] ---[ end trace 0000000000000000 ]--- [ 127.472546][ T6031] RIP: 0010:__lock_acquire+0x41/0x2de0 [ 127.472579][ T6031] Code: 2d 12 48 89 84 24 e0 00 00 00 65 48 8b 05 0f e3 2d 12 48 89 44 24 08 45 31 f6 83 3d 28 dc 32 0f 00 0f 84 90 14 00 00 48 89 fb <48> 8b 07 48 3d a0 69 92 94 0f 84 7e 14 00 00 45 89 cd 89 cd 41 89 [ 127.472591][ T6031] RSP: 0018:ffffc900046978d8 EFLAGS: 00010002 [ 127.472604][ T6031] RAX: ffff88801ff11f40 RBX: fffffffffffffeb0 RCX: 0000000000000000 [ 127.472614][ T6031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffeb0 [ 127.472623][ T6031] RBP: ffff88801ff11f40 R08: 0000000000000001 R09: 0000000000000000 [ 127.472632][ T6031] R10: 0000000000000100 R11: 0000000000000007 R12: fffffffffffffeb0 [ 127.472641][ T6031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 127.472650][ T6031] FS: 000055558a5ef400(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 127.472662][ T6031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.472671][ T6031] CR2: fffffffffffffeb0 CR3: 00000000452a0000 CR4: 00000000003526f0 [ 127.472686][ T6031] Kernel panic - not syncing: Fatal exception [ 127.575358][ T6031] Kernel Offset: disabled [ 127.579796][ T6031] Rebooting in 86400 seconds..