last executing test programs: 6.764804045s ago: executing program 2 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0xa1c7cba0154138}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) 5.951662458s ago: executing program 2 (id=212): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) 4.417754457s ago: executing program 0 (id=221): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}) 4.341555278s ago: executing program 1 (id=222): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x4, 0x8, 0x5}}}}, 0xd) 4.271972051s ago: executing program 0 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x32000, 0x0) 4.137393413s ago: executing program 1 (id=224): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 3.473402251s ago: executing program 2 (id=227): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0100014320"], 0x7) 3.472929091s ago: executing program 3 (id=228): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe66129d22d4b4f38}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0xc000}, {0x8, 0x15, 0x47}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0x80000000}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x4) prlimit64(0x0, 0x3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3.376089296s ago: executing program 2 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a00100000000e90008b176"]) 2.681356695s ago: executing program 0 (id=230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989a", 0x4d}], 0x1}, 0x20000044) 2.681019409s ago: executing program 1 (id=231): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.613295668s ago: executing program 3 (id=232): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.60251556s ago: executing program 2 (id=233): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x3d, &(0x7f0000001840)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705", @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES16=r2], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.545319034s ago: executing program 0 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dfe, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.465688254s ago: executing program 0 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@overlay={0x101, 0xb, 0x4, 0x8, 0xffffff73, {}, {0x2, 0x4, 0x0, 0x4, 0xca, 0x0, "8f2eb06e"}, 0x1000, 0x3, {}, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="dc030000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="c0031180bc0305802400008008000380040002000c000280050018010d0000000a00010008021100000000003c0200800401038004000200c00001802400018005000600190000000400090006000400060000000600040004000000040008000800018004000a00200001800400010004000800040009000500070010000000060004002b0700003000018006000400070000000500070006000000080002000300000005000300050000000800020004000000040001000c00018006000400ff03000034000180040008000500050001000000050005000200000004000c00050003000b00000005000300070000000400080004000b00380001802800018004000a00050003000200000004000b0004000c000500060006000000050005000c0000000c0001800500030009000000040002003401038070000180040001801800018004000a0006000400b368000004000a0004000b001400018004000a0004000b0005000600160000003c000180050007005000000004000900050007009c000000050005000f000000040009000500030008000000040009000500030006000000040008003400018030000180060004000100000004000800060004000700000004000b000500060000000000040009000400080004000a00040002000400020084000180240001800400010008000200040000000400080004000b0008000200695a279504000b001400018004000800060004000700000004000b00040001804400018004000800050006000300000004000b0005000500090000000800020003000000040001000500030008000000050007003600000004000c0004000a0004000b0058010080b4000380780001802c000180060004000400000005000300020000000500070005000000050005000b000000050005000f0000001c000180050007000400000004000900050003000b000000040001000c000180050007000600000020000180060004007f00000004000100050005000000000004000c00040001000400020004000200040002002c0001802800018004000c0004000c0004000c00040001000500070001000000050003000a000000040008004c000380480001800800018004000a000c00018005000700010000000c0001800400090004000800040001800c00018005000300080000000800018004000a000c00018008000200020000001c0002800800a10007000000080022014402000008002600e41600002c0002800800a0000300000005001901050000000800a100010000000800a1000400000008002201f40100000a0001000802110000010000c5ee040424daafd6790643b1db011fd4782a36bc9cb086ff690302831bb11f90b6c8ccb5885574b2437d5269f1c3aca65695ef8819ce185e07e6c7913a081d3cce6a63b6292c478fcd33d4616367012eb54aeb394f583512e43917cedfd75a6eb39fe58b8b473bb6ce18d622"], 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) 675.294866ms ago: executing program 0 (id=236): socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x63, 0x2800, 0x0, 0x0}, {0x63, 0x1011, 0x0, 0x0}], 0x2}) 413.3919ms ago: executing program 1 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000038000107dcffffff0000000002"], 0x14}}, 0x4008000) 344.012762ms ago: executing program 3 (id=238): r0 = creat(&(0x7f00000001c0)='./file1\x00', 0xd8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20b42, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x40049409, 0x3) pwrite64(r0, 0x0, 0x0, 0xfff) 343.217932ms ago: executing program 1 (id=239): mount$afs(&(0x7f0000000e00)=ANY=[@ANYBLOB='%s@z0:'], &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x3000000, 0x0) 263.722026ms ago: executing program 3 (id=240): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0) fallocate(r0, 0x3, 0x2000, 0x100000800000000) 79.311221ms ago: executing program 2 (id=241): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe66129d22d4b4f38}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0xc000}, {0x8, 0x15, 0x47}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0x80000000}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x4) prlimit64(0x0, 0x3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 79.083238ms ago: executing program 3 (id=242): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe) r1 = open(&(0x7f0000000100)='./bus\x00', 0x800, 0x7649da05a7bb2f8) splice(r1, 0x0, r0, 0x0, 0x6, 0xa) 78.487852ms ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 3 (id=243): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 80.032028][ T5840] cgroup: Unknown subsys name 'net' [ 80.170987][ T5840] cgroup: Unknown subsys name 'cpuset' [ 80.179928][ T5840] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.923381][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.390735][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.407766][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.415912][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.424182][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.432072][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.487860][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.497597][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.507782][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.516082][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.524294][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.588591][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.607788][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.618658][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.628046][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.637804][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.649655][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.658375][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.666099][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.675212][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.684355][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.061581][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.268806][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 85.319466][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.329295][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.336754][ T5849] bridge_slave_0: entered allmulticast mode [ 85.344827][ T5849] bridge_slave_0: entered promiscuous mode [ 85.412005][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.419564][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.426785][ T5849] bridge_slave_1: entered allmulticast mode [ 85.437184][ T5849] bridge_slave_1: entered promiscuous mode [ 85.457962][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 85.532722][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.542160][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 85.576649][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.667498][ T5849] team0: Port device team_slave_0 added [ 85.692503][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.700360][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.708095][ T5853] bridge_slave_0: entered allmulticast mode [ 85.715279][ T5853] bridge_slave_0: entered promiscuous mode [ 85.730878][ T5849] team0: Port device team_slave_1 added [ 85.762490][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.769930][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.777220][ T5853] bridge_slave_1: entered allmulticast mode [ 85.784285][ T5853] bridge_slave_1: entered promiscuous mode [ 85.871639][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.879482][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.905727][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.917693][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.924835][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.932359][ T5859] bridge_slave_0: entered allmulticast mode [ 85.939590][ T5859] bridge_slave_0: entered promiscuous mode [ 85.962391][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.975597][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.986023][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.993470][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.019681][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.031202][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.038717][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.045868][ T5859] bridge_slave_1: entered allmulticast mode [ 86.053133][ T5859] bridge_slave_1: entered promiscuous mode [ 86.063491][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.071032][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.078370][ T5855] bridge_slave_0: entered allmulticast mode [ 86.085460][ T5855] bridge_slave_0: entered promiscuous mode [ 86.131261][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.138670][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.145783][ T5855] bridge_slave_1: entered allmulticast mode [ 86.153336][ T5855] bridge_slave_1: entered promiscuous mode [ 86.209326][ T5853] team0: Port device team_slave_0 added [ 86.218304][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.231290][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.267981][ T5853] team0: Port device team_slave_1 added [ 86.301937][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.314233][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.349779][ T5859] team0: Port device team_slave_0 added [ 86.373813][ T5849] hsr_slave_0: entered promiscuous mode [ 86.381246][ T5849] hsr_slave_1: entered promiscuous mode [ 86.405458][ T5859] team0: Port device team_slave_1 added [ 86.463016][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.470038][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.496672][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.518161][ T51] Bluetooth: hci0: command tx timeout [ 86.526610][ T5855] team0: Port device team_slave_0 added [ 86.547466][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.554448][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.580585][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.592315][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.599402][ T51] Bluetooth: hci1: command tx timeout [ 86.600681][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.631444][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.644576][ T5855] team0: Port device team_slave_1 added [ 86.671140][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.678300][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.704306][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.757160][ T51] Bluetooth: hci2: command tx timeout [ 86.757196][ T5852] Bluetooth: hci3: command tx timeout [ 86.764097][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.775407][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.801358][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.836053][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.843224][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.869337][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.971770][ T5853] hsr_slave_0: entered promiscuous mode [ 86.978394][ T5853] hsr_slave_1: entered promiscuous mode [ 86.984508][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 86.990382][ T5853] Cannot create hsr debugfs directory [ 87.080348][ T5859] hsr_slave_0: entered promiscuous mode [ 87.088252][ T5859] hsr_slave_1: entered promiscuous mode [ 87.094666][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 87.100508][ T5859] Cannot create hsr debugfs directory [ 87.198726][ T5855] hsr_slave_0: entered promiscuous mode [ 87.205558][ T5855] hsr_slave_1: entered promiscuous mode [ 87.212248][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 87.218647][ T5855] Cannot create hsr debugfs directory [ 87.441227][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.506549][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.537808][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.549638][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.785534][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.809819][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.842316][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.853796][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.914186][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.945490][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.971747][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.986655][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.053185][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.063427][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.091315][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.106296][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.121432][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.179705][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.239601][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.246797][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.286827][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.294036][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.316579][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.368595][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.408496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.415704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.438300][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.465198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.472389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.512689][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.578976][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.604994][ T51] Bluetooth: hci0: command tx timeout [ 88.633740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.641382][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.684130][ T51] Bluetooth: hci1: command tx timeout [ 88.744118][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.839038][ T51] Bluetooth: hci2: command tx timeout [ 88.839048][ T5852] Bluetooth: hci3: command tx timeout [ 88.860671][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.895883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.903493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.916103][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.948935][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.956142][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.125683][ T5849] veth0_vlan: entered promiscuous mode [ 89.181178][ T5849] veth1_vlan: entered promiscuous mode [ 89.330713][ T5849] veth0_macvtap: entered promiscuous mode [ 89.356385][ T5849] veth1_macvtap: entered promiscuous mode [ 89.379931][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.435110][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.453390][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.502384][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.572641][ T3013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.604788][ T3013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616323][ T5853] veth0_vlan: entered promiscuous mode [ 89.627272][ T3013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655371][ T3013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.673793][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.700188][ T5853] veth1_vlan: entered promiscuous mode [ 89.712018][ T5855] veth0_vlan: entered promiscuous mode [ 89.752532][ T5855] veth1_vlan: entered promiscuous mode [ 89.823758][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.844696][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.894144][ T5855] veth0_macvtap: entered promiscuous mode [ 89.916191][ T5853] veth0_macvtap: entered promiscuous mode [ 89.926816][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.926847][ T5855] veth1_macvtap: entered promiscuous mode [ 89.941553][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.956803][ T5859] veth0_vlan: entered promiscuous mode [ 89.976563][ T5853] veth1_macvtap: entered promiscuous mode [ 90.001767][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.030457][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.054247][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.073544][ T5859] veth1_vlan: entered promiscuous mode [ 90.084972][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.086634][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.130727][ T3013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.168986][ T3013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.189892][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.238916][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.256084][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.326753][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.394421][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.406216][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.432568][ T5859] veth0_macvtap: entered promiscuous mode [ 90.464568][ T5859] veth1_macvtap: entered promiscuous mode [ 90.491041][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.502871][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.523688][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.565133][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.580021][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.582022][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.635342][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646355][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.647750][ T5933] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.677936][ T51] Bluetooth: hci0: command tx timeout [ 90.684108][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.693945][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.701810][ T3013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712295][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.733383][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.742377][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.757783][ T51] Bluetooth: hci1: command tx timeout [ 90.833540][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.862144][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.899136][ T5933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.917683][ T51] Bluetooth: hci2: command tx timeout [ 90.918592][ T5852] Bluetooth: hci3: command tx timeout [ 90.939249][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.951527][ T5933] usb 1-1: Product: syz [ 90.955726][ T5933] usb 1-1: Manufacturer: syz [ 90.960405][ T5933] usb 1-1: SerialNumber: syz [ 91.146994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.322254][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.397030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.453555][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.527003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.547018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.837005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.846672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.846724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.862908][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.887396][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.051406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.176752][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.189356][ T983] cfg80211: failed to load regulatory.db [ 92.249486][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.297263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.305658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.307068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.672392][ T5933] usb 1-1: 0:2 : does not exist [ 92.757682][ T5852] Bluetooth: hci0: command tx timeout [ 92.788232][ T5933] usb 1-1: USB disconnect, device number 2 [ 92.847359][ T5852] Bluetooth: hci1: command tx timeout [ 92.906328][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.970645][ T5960] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7'. [ 92.984486][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 93.007079][ T5852] Bluetooth: hci3: command tx timeout [ 93.007414][ T51] Bluetooth: hci2: command tx timeout [ 93.742721][ T5974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.986155][ T5981] @: renamed from vlan0 (while UP) [ 94.156494][ T5986] devtmpfs: Unknown parameter 'euid>00000000000000000000' [ 94.300738][ T5991] GUP no longer grows the stack in syz.1.20 (5991): 200000004000-20000000a000 (200000002000) [ 94.317477][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.1.20 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 94.317508][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.317519][ T5991] Call Trace: [ 94.317527][ T5991] [ 94.317532][ T5991] dump_stack_lvl+0x189/0x250 [ 94.317557][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.317573][ T5991] ? __pfx__printk+0x10/0x10 [ 94.317589][ T5991] ? find_vma+0xe7/0x160 [ 94.317615][ T5991] __get_user_pages+0x24d0/0x2ce0 [ 94.317644][ T5991] ? mtree_load+0x100/0x700 [ 94.317664][ T5991] get_user_pages_remote+0x2f1/0xad0 [ 94.317679][ T5991] ? __pfx_mtree_load+0x10/0x10 [ 94.317696][ T5991] ? __pfx_get_user_pages_remote+0x10/0x10 [ 94.317718][ T5991] __access_remote_vm+0x215/0x5f0 [ 94.317741][ T5991] ? __pfx___access_remote_vm+0x10/0x10 [ 94.317760][ T5991] ? alloc_pages_noprof+0xbe/0x190 [ 94.317780][ T5991] proc_pid_cmdline_read+0x440/0x840 [ 94.317801][ T5991] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 94.317817][ T5991] ? rw_verify_area+0x258/0x650 [ 94.317839][ T5991] vfs_readv+0x5a7/0x850 [ 94.317853][ T5991] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 94.317869][ T5991] ? __pfx_vfs_readv+0x10/0x10 [ 94.317892][ T5991] ? __fget_files+0x2a/0x420 [ 94.317907][ T5991] ? __fget_files+0x3a0/0x420 [ 94.317919][ T5991] ? __fget_files+0x2a/0x420 [ 94.317937][ T5991] __x64_sys_preadv+0x197/0x2a0 [ 94.317951][ T5991] ? __pfx___x64_sys_preadv+0x10/0x10 [ 94.317962][ T5991] ? rcu_is_watching+0x15/0xb0 [ 94.317981][ T5991] ? do_syscall_64+0xbe/0x3b0 [ 94.317997][ T5991] do_syscall_64+0xfa/0x3b0 [ 94.318011][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.318021][ T5991] ? asm_sysvec_call_function_single+0x1a/0x20 [ 94.318033][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 94.318047][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.318058][ T5991] RIP: 0033:0x7fc89518e929 [ 94.318070][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.318080][ T5991] RSP: 002b:00007fc895ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 94.318095][ T5991] RAX: ffffffffffffffda RBX: 00007fc8953b6080 RCX: 00007fc89518e929 [ 94.318104][ T5991] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 94.318111][ T5991] RBP: 00007fc895210b39 R08: 0000000021000008 R09: 0000000000000000 [ 94.318119][ T5991] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 94.318126][ T5991] R13: 0000000000000000 R14: 00007fc8953b6080 R15: 00007ffc26112818 [ 94.318144][ T5991] [ 95.380251][ T5996] Process accounting resumed [ 95.653996][ T6004] process 'syz.3.25' launched './file0' with NULL argv: empty string added [ 97.518872][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.607444][ T6019] netlink: 204 bytes leftover after parsing attributes in process `syz.0.30'. [ 97.636317][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.30'. [ 97.756834][ T6021] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 100.218377][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.307066][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 101.318528][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 101.329749][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.348268][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.358491][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.370589][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.384082][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.401275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.427293][ T983] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.588479][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 101.602212][ T983] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.623912][ T983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.627921][ T9] usb 1-1: usb_control_msg returned -32 [ 101.643161][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 101.651146][ T9] usbtmc 1-1:16.0: can't read capabilities [ 101.668220][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.725628][ T983] usb 3-1: config 0 descriptor?? [ 102.007298][ T6066] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 102.027245][ T24] usb 1-1: USB disconnect, device number 3 [ 102.208186][ T983] logitech-djreceiver 0003:046D:C71B.0001: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input0 [ 102.398221][ T5892] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.566358][ T983] usb 3-1: USB disconnect, device number 2 [ 102.600407][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.621537][ T5892] usb 2-1: no configurations [ 102.639250][ T5892] usb 2-1: can't read configurations, error -22 [ 102.732679][ T6085] syz_tun: entered allmulticast mode [ 103.289811][ T6084] syz_tun: left allmulticast mode [ 104.377388][ T6101] No source specified [ 104.392922][ T6101] overlayfs: failed to resolve './bus': -2 [ 104.807595][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.978434][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 105.029562][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 105.039793][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.061852][ T9] usb 1-1: config 0 descriptor?? [ 105.077695][ T9] as10x_usb: device has been detected [ 105.107854][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 105.172768][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 105.255620][ T9] as10x_usb: error during firmware upload part1 [ 105.283563][ T9] Registered device nBox DVB-T Dongle [ 105.294490][ T5892] usb 1-1: USB disconnect, device number 4 [ 105.527207][ T983] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.547041][ T1229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.807731][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 105.862391][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.927284][ T5892] Unregistered device nBox DVB-T Dongle [ 105.938237][ T5892] as10x_usb: device has been disconnected [ 105.960044][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.000302][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 106.001224][ T983] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.026435][ T1229] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 106.056324][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.057008][ T1229] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 106.086416][ T1229] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 106.098400][ T1229] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 106.107959][ T983] usb 2-1: config 0 descriptor?? [ 106.123950][ T983] hub 2-1:0.0: USB hub found [ 106.143997][ T1229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.167775][ T1229] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 106.180471][ T1229] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 106.192776][ T1229] usb 3-1: Product: syz [ 106.213893][ T1229] usb 3-1: Manufacturer: syz [ 106.221924][ T1229] usb 3-1: SerialNumber: syz [ 106.235536][ T1229] usb 3-1: config 0 descriptor?? [ 106.262264][ T1229] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 106.275886][ T1229] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 106.417124][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.476174][ T983] hub 2-1:0.0: 1 port detected [ 106.479835][ T1229] usb 3-1: USB disconnect, device number 3 [ 106.481037][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 106.511386][ T1229] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 106.584596][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.647965][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.664923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.688058][ T9] usb 4-1: Product: syz [ 106.692467][ T9] usb 4-1: Manufacturer: syz [ 106.723158][ T9] usb 4-1: SerialNumber: syz [ 106.735033][ T6133] ldusb: No device or device unplugged -19 [ 107.394443][ T983] hub 2-1:0.0: activate --> -90 [ 107.404148][ T983] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 107.717519][ T983] usb 2-1: USB disconnect, device number 4 [ 107.970935][ T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 107.983534][ T9] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 107.991656][ T9] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 108.998694][ T9] cdc_ncm 4-1:1.0: setting tx_max = 56 [ 109.052531][ T9] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 109.084686][ T9] usb 4-1: USB disconnect, device number 2 [ 109.100224][ T9] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 109.732575][ T6205] random: crng reseeded on system resumption [ 109.838475][ T6208] binder: 6207:6208 ioctl c018620c 200000000100 returned -1 [ 111.574914][ T6239] netlink: 'syz.0.123': attribute type 4 has an invalid length. [ 111.586200][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 111.637983][ T1229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.670316][ T6241] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.787047][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.807050][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 111.813706][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.825787][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.836094][ T1229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.849055][ T1229] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 111.858425][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.869068][ T1229] usb 2-1: config 0 descriptor?? [ 111.947081][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 111.954023][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 111.963828][ T5933] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.971396][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 111.982495][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 111.992957][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.002106][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 112.011268][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.020339][ T9] usb 3-1: Product: syz [ 112.024536][ T9] usb 3-1: Manufacturer: syz [ 112.029225][ T9] usb 3-1: SerialNumber: syz [ 112.036513][ T9] usb 3-1: config 0 descriptor?? [ 112.137137][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 112.149502][ T5933] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.159020][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.175687][ T5933] usb 1-1: Product: syz [ 112.183470][ T5933] usb 1-1: Manufacturer: syz [ 112.188505][ T5933] usb 1-1: SerialNumber: syz [ 112.209962][ T5933] r8152-cfgselector 1-1: Unknown version 0x0000 [ 112.220076][ T5933] r8152-cfgselector 1-1: config 0 descriptor?? [ 112.234017][ T5933] hub 1-1:0.0: bad descriptor, ignoring hub [ 112.250584][ T5933] hub 1-1:0.0: probe with driver hub failed with error -5 [ 112.283279][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 112.299563][ T1229] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 112.310172][ T1229] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 112.320606][ T1229] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 112.321528][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.330039][ T1229] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 112.347182][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.363352][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.377185][ T1229] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 112.385458][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.398497][ T1229] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 112.462327][ T6237] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.727967][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.755241][ T6052] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.777966][ T983] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 112.785360][ T5205] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 112.903468][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.914071][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.649901][ T983] usb 2-1: USB disconnect, device number 5 [ 114.008895][ T5933] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.805409][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 114.902450][ T30] audit: type=1800 audit(1751852102.548:2): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="bus" dev="ramfs" ino=8482 res=0 errno=0 [ 114.912420][ T10] usb 3-1: USB disconnect, device number 4 [ 114.934046][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.947651][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 114.961667][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.999173][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.010921][ T5933] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 115.020515][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.047394][ T5933] usb 4-1: Product: syz [ 115.088215][ T5933] usb 4-1: Manufacturer: syz [ 115.116228][ T5933] usb 4-1: SerialNumber: syz [ 115.132181][ T5933] usb 4-1: config 0 descriptor?? [ 115.416609][ T5933] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 115.467657][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.647312][ T6262] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.664601][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.438244][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.621822][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.784542][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.795366][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.595284][ T5858] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.622814][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.666607][ T6291] loop2: detected capacity change from 0 to 7 [ 117.683408][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.704421][ T5205] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 117.734119][ T6291] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 117.752729][ T6291] loop2: partition table partially beyond EOD, truncated [ 117.790643][ T6291] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 117.885346][ T5220] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 117.902084][ T5220] loop2: partition table partially beyond EOD, truncated [ 117.928891][ T5220] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 118.043386][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 118.084803][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.178080][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.193161][ T30] audit: type=1400 audit(1751852105.848:3): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6298 comm="syz.2.141" [ 118.560524][ T5892] usb 4-1: USB disconnect, device number 3 [ 120.196163][ T6331] loop8: detected capacity change from 0 to 7 [ 120.247766][ T6331] Dev loop8: unable to read RDB block 7 [ 120.269694][ T6331] loop8: AHDI p1 p2 p3 [ 120.290069][ T6331] loop8: partition table partially beyond EOD, truncated [ 120.300229][ T6331] loop8: p1 start 1601398130 is beyond EOD, truncated [ 120.315536][ T6331] loop8: p2 start 1702059890 is beyond EOD, truncated [ 120.332776][ T5858] Dev loop8: unable to read RDB block 7 [ 120.358483][ T5858] loop8: AHDI p1 p2 p3 [ 120.363000][ T5858] loop8: partition table partially beyond EOD, truncated [ 120.374738][ T5858] loop8: p1 start 1601398130 is beyond EOD, truncated [ 120.381824][ T5858] loop8: p2 start 1702059890 is beyond EOD, truncated [ 120.415560][ T6336] Dev loop8: unable to read RDB block 7 [ 120.422759][ T6336] loop8: AHDI p1 p2 p3 [ 120.429571][ T6336] loop8: partition table partially beyond EOD, truncated [ 120.440132][ T6336] loop8: p1 start 1601398130 is beyond EOD, truncated [ 120.449693][ T6336] loop8: p2 start 1702059890 is beyond EOD, truncated [ 121.087212][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.379440][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 121.414844][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.460125][ T10] usb 1-1: Product: syz [ 121.514274][ T10] usb 1-1: Manufacturer: syz [ 121.523125][ T10] usb 1-1: SerialNumber: syz [ 121.563282][ T10] usb 1-1: config 0 descriptor?? [ 121.797553][ T10] usb 1-1: ignoring: probably an ADSL modem [ 122.001353][ T10] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 122.029567][ T10] usb 1-1: USB disconnect, device number 6 [ 122.109010][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.267145][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 122.278427][ T5911] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 122.286663][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.298289][ T5911] usb 2-1: config 0 has no interface number 0 [ 122.311486][ T5911] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 122.320841][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.329393][ T5911] usb 2-1: Product: syz [ 122.333666][ T5911] usb 2-1: Manufacturer: syz [ 122.338692][ T5911] usb 2-1: SerialNumber: syz [ 122.351643][ T5911] usb 2-1: config 0 descriptor?? [ 122.590867][ T5911] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 122.600395][ T5911] usb 2-1: No valid video chain found. [ 122.792918][ T5911] usb 2-1: USB disconnect, device number 6 [ 122.957217][ T983] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.007148][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.937783][ T983] usb 1-1: Using ep0 maxpacket: 16 [ 123.959013][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 123.965192][ T983] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 123.987589][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.996237][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.015479][ T983] usb 1-1: Product: syz [ 124.020785][ T983] usb 1-1: Manufacturer: syz [ 124.025884][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.038699][ T983] usb 1-1: SerialNumber: syz [ 124.045264][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.279215][ T983] usb 1-1: config 0 descriptor?? [ 124.284449][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 124.299207][ T983] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 124.306024][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.331377][ T5892] usb 4-1: config 0 descriptor?? [ 125.041214][ T983] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 125.051358][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x2 [ 125.059025][ T983] visor 1-1:0.0: probe with driver visor failed with error -71 [ 125.071904][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.090641][ T983] usb 1-1: USB disconnect, device number 7 [ 125.097254][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.104683][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.135220][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.149888][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.168431][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.187488][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.194944][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.216260][ T5892] hid-generic 0003:045E:9994.0003: unknown main item tag 0x0 [ 125.252388][ T5892] hid-generic 0003:045E:9994.0003: unbalanced collection at end of report description [ 125.286381][ T5892] hid-generic 0003:045E:9994.0003: probe with driver hid-generic failed with error -22 [ 125.324744][ T5892] usb 4-1: USB disconnect, device number 4 [ 126.510492][ T6410] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 129.856891][ T6457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.926573][ T983] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 131.331839][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 131.345846][ T983] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 131.358179][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 131.371270][ T983] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 131.387054][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.395085][ T983] usb 1-1: Product: syz [ 131.399608][ T983] usb 1-1: Manufacturer: syz [ 131.404243][ T983] usb 1-1: SerialNumber: syz [ 131.428292][ T983] usb 1-1: config 0 descriptor?? [ 131.457884][ T6465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.485911][ T6465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.497461][ T983] usb 1-1: ucan: probing device on interface #0 [ 131.941677][ T983] usb 1-1: ucan: device reported invalid device info [ 132.004386][ T983] usb 1-1: ucan: probe failed; try to update the device firmware [ 132.350794][ T983] usb 1-1: USB disconnect, device number 8 [ 132.618052][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.777594][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 132.789653][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 132.809046][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.868210][ T10] usb 3-1: config 0 descriptor?? [ 132.881713][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 133.081991][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092767][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.302952][ T10] gspca_sonixj: reg_r err -71 [ 133.315454][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 133.347394][ T10] usb 3-1: USB disconnect, device number 5 [ 134.706432][ T6530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.124949][ T1229] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 135.308880][ T1229] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.422883][ T1229] usb 3-1: config 0 has no interface number 0 [ 135.525387][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.686577][ T1229] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 135.757245][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.820160][ T1229] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 135.871497][ T1229] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.962454][ T1229] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.991779][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.014161][ T1229] usb 3-1: config 0 descriptor?? [ 136.028045][ T6536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.058971][ T6536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.425479][ T1229] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 136.699665][ T48] usb 3-1: USB disconnect, device number 6 [ 136.745787][ T48] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 137.078139][ T983] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.098893][ T6553] kAFS: unable to lookup cell 's@z0' [ 137.238388][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 137.247358][ T983] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.256455][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.266139][ T983] usb 1-1: Product: syz [ 137.270685][ T983] usb 1-1: Manufacturer: syz [ 137.275390][ T983] usb 1-1: SerialNumber: syz [ 137.288141][ T983] usb 1-1: config 0 descriptor?? [ 137.315019][ T983] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 137.331052][ T983] usb 1-1: setting power ON [ 137.336007][ T983] dvb-usb: bulk message failed: -22 (2/0) [ 137.350492][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.397497][ T983] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 137.406023][ T983] usb 1-1: media controller created [ 137.416253][ T6559] overlay: filesystem on ./bus not supported as upperdir [ 137.448724][ T6561] ------------[ cut here ]------------ [ 137.454446][ T6561] kernel BUG at fs/buffer.c:1582! [ 137.479326][ T6561] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 137.485640][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.3.243 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 137.497027][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.507078][ T6561] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 137.512364][ T6561] Code: 4c 89 e2 e8 76 ff bc 02 e9 42 ff ff ff e8 8c 1c 78 ff 48 89 df 48 c7 c6 60 24 ba 8b e8 dd d8 c0 ff 90 0f 0b e8 75 1c 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 137.531980][ T6561] RSP: 0018:ffffc90018017790 EFLAGS: 00010287 [ 137.538062][ T6561] RAX: ffffffff8247e40b RBX: ffffea0001de9b00 RCX: 0000000000080000 [ 137.546397][ T6561] RDX: ffffc9000c2b4000 RSI: 000000000000137d RDI: 000000000000137e [ 137.554456][ T6561] RBP: dffffc0000000000 R08: ffffea0001de9b07 R09: 1ffffd40003bd360 [ 137.562428][ T6561] R10: dffffc0000000000 R11: fffff940003bd361 R12: 0000000000000002 [ 137.570399][ T6561] R13: 0000000000004000 R14: ffff88807ef65d98 R15: 0000000000004000 [ 137.578367][ T6561] FS: 00007f7900c166c0(0000) GS:ffff8881258af000(0000) knlGS:0000000000000000 [ 137.587296][ T6561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.593885][ T6561] CR2: 0000200000000140 CR3: 00000000311e6000 CR4: 00000000003526f0 [ 137.601863][ T6561] Call Trace: [ 137.605140][ T6561] [ 137.608076][ T6561] folio_alloc_buffers+0x3a0/0x640 [ 137.613205][ T6561] bdev_getblk+0x286/0x660 [ 137.617629][ T6561] __bread_gfp+0x89/0x3c0 [ 137.621965][ T6561] ntfs_bread+0xc2/0x1e0 [ 137.626214][ T6561] ntfs_fill_super+0x63d/0x40b0 [ 137.631081][ T6561] ? format_decode+0x5ee/0xe30 [ 137.635877][ T6561] ? vsnprintf+0xe11/0xf00 [ 137.640323][ T6561] ? __pfx_ntfs_fill_super+0x10/0x10 [ 137.645634][ T6561] ? sb_set_blocksize+0x85/0x180 [ 137.650584][ T6561] ? setup_bdev_super+0x4c1/0x5b0 [ 137.655620][ T6561] get_tree_bdev_flags+0x40b/0x4d0 [ 137.660732][ T6561] ? __pfx_ntfs_fill_super+0x10/0x10 [ 137.666021][ T6561] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 137.671654][ T6561] vfs_get_tree+0x8f/0x2b0 [ 137.676072][ T6561] do_new_mount+0x2a2/0x9e0 [ 137.680583][ T6561] ? ns_capable+0x8a/0xf0 [ 137.684912][ T6561] ? __pfx_do_new_mount+0x10/0x10 [ 137.689934][ T6561] ? path_mount+0x61c/0xfe0 [ 137.694434][ T6561] ? user_path_at+0x44/0x60 [ 137.698945][ T6561] __se_sys_mount+0x317/0x410 [ 137.703623][ T6561] ? __pfx___se_sys_mount+0x10/0x10 [ 137.708816][ T6561] ? rcu_is_watching+0x15/0xb0 [ 137.713600][ T6561] ? do_syscall_64+0xbe/0x3b0 [ 137.718276][ T6561] ? __x64_sys_mount+0x20/0xc0 [ 137.723042][ T6561] do_syscall_64+0xfa/0x3b0 [ 137.727545][ T6561] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.732748][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.738814][ T6561] ? clear_bhb_loop+0x60/0xb0 [ 137.743496][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.749394][ T6561] RIP: 0033:0x7f78ffd8e929 [ 137.753955][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.773575][ T6561] RSP: 002b:00007f7900c16038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.782004][ T6561] RAX: ffffffffffffffda RBX: 00007f78fffb5fa0 RCX: 00007f78ffd8e929 [ 137.789975][ T6561] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 137.797945][ T6561] RBP: 00007f78ffe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.805924][ T6561] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000000 [ 137.813891][ T6561] R13: 0000000000000000 R14: 00007f78fffb5fa0 R15: 00007ffe3f3fb9a8 [ 137.821866][ T6561] [ 137.824891][ T6561] Modules linked in: [ 137.829968][ T6561] ---[ end trace 0000000000000000 ]--- [ 137.852125][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.853553][ T6547] dvb-usb: bulk message failed: -22 (4/0) [ 137.928501][ T6561] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 137.955042][ T6561] Code: 4c 89 e2 e8 76 ff bc 02 e9 42 ff ff ff e8 8c 1c 78 ff 48 89 df 48 c7 c6 60 24 ba 8b e8 dd d8 c0 ff 90 0f 0b e8 75 1c 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 138.040273][ T983] usb 1-1: selecting invalid altsetting 6 [ 138.050239][ T983] usb 1-1: digital interface selection failed (-22) [ 138.056914][ T983] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 138.068437][ T983] usb 1-1: setting power OFF [ 138.073108][ T983] dvb-usb: bulk message failed: -22 (2/0) [ 138.105259][ T983] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.115180][ T983] (NULL device *): no alternate interface [ 138.145974][ T6561] RSP: 0018:ffffc90018017790 EFLAGS: 00010287 [ 138.376555][ T6561] RAX: ffffffff8247e40b RBX: ffffea0001de9b00 RCX: 0000000000080000 [ 138.385484][ T983] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 138.401646][ T6561] RDX: ffffc9000c2b4000 RSI: 000000000000137d RDI: 000000000000137e [ 138.417179][ T983] usb 1-1: USB disconnect, device number 9 [ 138.446405][ T6561] RBP: dffffc0000000000 R08: ffffea0001de9b07 R09: 1ffffd40003bd360 [ 138.457363][ T6561] R10: dffffc0000000000 R11: fffff940003bd361 R12: 0000000000000002 [ 138.488552][ T6561] R13: 0000000000004000 R14: ffff88807ef65d98 R15: 0000000000004000 [ 138.496587][ T6561] FS: 00007f7900c166c0(0000) GS:ffff8881257af000(0000) knlGS:0000000000000000 [ 138.505844][ T6561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.513221][ T6561] CR2: 000000110c42fac6 CR3: 00000000311e6000 CR4: 00000000003526f0 [ 138.521606][ T6561] Kernel panic - not syncing: Fatal exception [ 138.527921][ T6561] Kernel Offset: disabled [ 138.532238][ T6561] Rebooting in 86400 seconds..