last executing test programs: 16.588170914s ago: executing program 1 (id=2): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./myconsole\x00', 0x8000, 0x501) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./myconsole\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16.403545955s ago: executing program 1 (id=5): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b322800010102030109021b0001010080fa0904000001ffffff00090581020002000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x40, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 12.024340703s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) 11.855724238s ago: executing program 2 (id=18): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x6b9, 0x4061, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x2, 0x1, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x0, 0x0, 0xff}}, {{0x9, 0x4, 0x1, 0x1, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 11.364608857s ago: executing program 1 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x40000080, 0x1}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x3, 0x0, [{0x40000000, 0x0, 0x0, 0x4000000a}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x8}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.181321297s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='on\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='on\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='on\x00', 0x3) syz_usb_connect(0x3, 0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000200000040c30b01000100000000010902200001010080320904000002ffffff000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ttyUSB0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000480)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ttyUSB0\x00', 0x2, 0x0) 8.668272018s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e80308000000010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1, 0x2faf0800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/kaweth!new_code.bin/loading\x00', 0x2, 0x0) 5.679970648s ago: executing program 2 (id=30): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x2) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000300)) 5.607220884s ago: executing program 2 (id=31): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0101010400000000") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000200)="01020109020200080003000400") syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000300)="0201010100") syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000400)="0301010100") syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000500)="0205000100") syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000600)={0x2}, 0x0) 3.923779211s ago: executing program 3 (id=36): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501dc6600001010203010902190001010080320904000001ff00000007058102400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xc0) syz_open_dev$char_usb(0xc, 0xb4, 0x60) 2.537729875s ago: executing program 2 (id=37): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:07.0/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000001000), 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:07.0/device\x00', 0x0, 0x0) read(r1, &(0x7f0000001007), 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00 ffffffff fffffff 0 0 3\n', 0x25) 1.633983814s ago: executing program 0 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) write(0x1, &(0x7f0000000000)='A', 0x1) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) write(0x1, &(0x7f0000000000)='B', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000000), 0x1000000) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f0000000400)=[{&(0x7f0000000000), 0x1000000}], 0x1, 0x15, 0x0) 910.289571ms ago: executing program 0 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@code={0xa, 0x12, {"f4"}}], 0x12}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4000ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4010ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4020ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4030ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4038ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4048ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4050ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4060ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 867.370803ms ago: executing program 3 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1000, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1010, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1020, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1030, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1040, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1050, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1060, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1070, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1080, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1090, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10a0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10b0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10c0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10d0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10e0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x10f0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1100, 0x8, r2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2000, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2010, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2020, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2030, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2040, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2050, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2060, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2070, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2080, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2090, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20a0, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20b0, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20c0, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20d0, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20e0, 0x10}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x20f0, 0x10}) 635.569178ms ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mysys/bus/usb/devices/5-0:1.0/usb5-port1/disable\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/usb/devices/usb5/5-0:1.0/usb5-port1/disable\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1\x00', 0x2) close(r3) 415.1853ms ago: executing program 0 (id=42): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) close(r1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0) read(r2, &(0x7f0000001200)=""/100, 0x64) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='1', 0x1) close(r4) 362.572834ms ago: executing program 3 (id=43): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10, 0x0, 0x2000000, 0x1000, &(0x7f0000100000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x131, 0x28, {0x0, "f4"}}, @nested_vmlaunch={0x12e, 0x18}], 0x4}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10, 0x0, 0x2000000, 0x0, &(0x7f0000100000/0x1000)=nil}) 215.276835ms ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) 177.051557ms ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_dir\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='./proc_dir\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc_dir/config.gz\x00', 0x0, 0x0) read(r0, &(0x7f0000001140)=""/4096, 0x1000) 104.270309ms ago: executing program 3 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/wmi/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 40.925008ms ago: executing program 0 (id=47): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) mkdir(&(0x7f0000000140)='./mysys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000280)="ffffffffffffffffffffffffffffffffffffffffffffffff00", 0x18, 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0000:00:01.0\x00', 0xd) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1af4 1050\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='0000:00:01.0\x00', 0xd) close(r4) 0s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0000:00:01.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 73.797707][ T5603] cgroup: Unknown subsys name 'net' [ 73.913645][ T5603] cgroup: Unknown subsys name 'cpuset' [ 73.922529][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.613923][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.025205][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.034806][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.035492][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.036358][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.037682][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.039530][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.046772][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.048018][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.056478][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.056719][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.064654][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.065739][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.066152][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.073785][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.075645][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.076757][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.078208][ T4931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.083497][ T4931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.085890][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.112418][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.747776][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.748725][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.749138][ T5616] bridge_slave_0: entered allmulticast mode [ 80.751065][ T5616] bridge_slave_0: entered promiscuous mode [ 80.755008][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.755132][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.755541][ T5613] bridge_slave_0: entered allmulticast mode [ 80.758974][ T5613] bridge_slave_0: entered promiscuous mode [ 80.805051][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.805245][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.805379][ T5616] bridge_slave_1: entered allmulticast mode [ 80.807626][ T5616] bridge_slave_1: entered promiscuous mode [ 80.810231][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.810334][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.810756][ T5613] bridge_slave_1: entered allmulticast mode [ 80.812886][ T5613] bridge_slave_1: entered promiscuous mode [ 80.871092][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.871260][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.871386][ T5615] bridge_slave_0: entered allmulticast mode [ 80.873183][ T5615] bridge_slave_0: entered promiscuous mode [ 80.913123][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.914193][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.914316][ T5615] bridge_slave_1: entered allmulticast mode [ 80.916233][ T5615] bridge_slave_1: entered promiscuous mode [ 80.918434][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.918535][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.919250][ T5614] bridge_slave_0: entered allmulticast mode [ 80.921368][ T5614] bridge_slave_0: entered promiscuous mode [ 80.930249][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.933607][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.936904][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.941031][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.016912][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.017121][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.017247][ T5614] bridge_slave_1: entered allmulticast mode [ 81.019505][ T5614] bridge_slave_1: entered promiscuous mode [ 81.050638][ T5613] team0: Port device team_slave_0 added [ 81.065648][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.089106][ T5624] Bluetooth: hci0: command tx timeout [ 81.095372][ T5613] team0: Port device team_slave_1 added [ 81.110534][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.126651][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.130256][ T5616] team0: Port device team_slave_0 added [ 81.157127][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.159980][ T5616] team0: Port device team_slave_1 added [ 81.160869][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.160883][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.160905][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.164275][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.164288][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.164311][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.167212][ T5615] team0: Port device team_slave_0 added [ 81.174251][ T52] Bluetooth: hci2: command tx timeout [ 81.174422][ T5624] Bluetooth: hci3: command tx timeout [ 81.178697][ T5624] Bluetooth: hci1: command tx timeout [ 81.213988][ T5615] team0: Port device team_slave_1 added [ 81.292775][ T5614] team0: Port device team_slave_0 added [ 81.305706][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.305740][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.305766][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.342118][ T5614] team0: Port device team_slave_1 added [ 81.357982][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.358084][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.358111][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.377014][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.377033][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.377055][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.451283][ T5613] hsr_slave_0: entered promiscuous mode [ 81.452420][ T5613] hsr_slave_1: entered promiscuous mode [ 81.454944][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.454957][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.454980][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.457151][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.457163][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.457185][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.462345][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.462361][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.462384][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.507993][ T5616] hsr_slave_0: entered promiscuous mode [ 81.510386][ T5616] hsr_slave_1: entered promiscuous mode [ 81.511219][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 81.511295][ T5616] Cannot create hsr debugfs directory [ 81.612983][ T5615] hsr_slave_0: entered promiscuous mode [ 81.614060][ T5615] hsr_slave_1: entered promiscuous mode [ 81.614795][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 81.614814][ T5615] Cannot create hsr debugfs directory [ 81.670077][ T5614] hsr_slave_0: entered promiscuous mode [ 81.671874][ T5614] hsr_slave_1: entered promiscuous mode [ 81.672569][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.672588][ T5614] Cannot create hsr debugfs directory [ 82.242544][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.254755][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.256988][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.267119][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.272027][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.282829][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.283811][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.294667][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.381233][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.391646][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.406628][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.416502][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.434844][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.445473][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.446483][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.460054][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.521777][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.535070][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.539731][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.553629][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.564020][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.575687][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.576724][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.591189][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.680370][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.692155][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.693067][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.708734][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.721780][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.732319][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.737016][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.743607][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.752567][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.836310][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.870699][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.870833][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.894399][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.894529][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.935095][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.970115][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.002989][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.032602][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.044990][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.045098][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.051757][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.051870][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.054700][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.054800][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.090175][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.090281][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.169304][ T5624] Bluetooth: hci0: command tx timeout [ 83.224556][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.248472][ T52] Bluetooth: hci3: command tx timeout [ 83.248522][ T52] Bluetooth: hci2: command tx timeout [ 83.248674][ T5624] Bluetooth: hci1: command tx timeout [ 83.337944][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.376648][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.376787][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.421683][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.421829][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.154782][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.229290][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.355147][ T5613] veth0_vlan: entered promiscuous mode [ 84.389345][ T5616] veth0_vlan: entered promiscuous mode [ 84.415956][ T5613] veth1_vlan: entered promiscuous mode [ 84.455932][ T5616] veth1_vlan: entered promiscuous mode [ 84.515042][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545260][ T5616] veth0_macvtap: entered promiscuous mode [ 84.563097][ T5616] veth1_macvtap: entered promiscuous mode [ 84.617283][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.626633][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.639119][ T5613] veth0_macvtap: entered promiscuous mode [ 84.645348][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.666712][ T5613] veth1_macvtap: entered promiscuous mode [ 84.713730][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.750311][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.790178][ T5615] veth0_vlan: entered promiscuous mode [ 84.833918][ T5615] veth1_vlan: entered promiscuous mode [ 84.895289][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.897179][ T5614] veth0_vlan: entered promiscuous mode [ 84.907109][ T5614] veth1_vlan: entered promiscuous mode [ 84.914143][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.007593][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.008942][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.010606][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.040760][ T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041140][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041339][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041500][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042773][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042825][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.042858][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.044809][ T5615] veth0_macvtap: entered promiscuous mode [ 85.086737][ T5615] veth1_macvtap: entered promiscuous mode [ 85.139276][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.139319][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.185160][ T5614] veth0_macvtap: entered promiscuous mode [ 85.202719][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.221757][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.221781][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.244186][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.251680][ T4931] Bluetooth: hci0: command tx timeout [ 85.265854][ T5614] veth1_macvtap: entered promiscuous mode [ 85.309024][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.330665][ T4931] Bluetooth: hci1: command tx timeout [ 85.330690][ T5624] Bluetooth: hci2: command tx timeout [ 85.331390][ T4931] Bluetooth: hci3: command tx timeout [ 85.370509][ T156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401100][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.424767][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.518927][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549752][ T156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549827][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549861][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549894][ T156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549927][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549960][ T156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.610046][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.667214][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.667282][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.735637][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.735678][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.771696][ T192] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.784866][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.784911][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.802627][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.821967][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.838542][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.838590][ T9] usb 1-1: SerialNumber: syz [ 85.843476][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.843496][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.950339][ T192] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00 [ 85.962218][ T192] usb 4-1: config index 0 descriptor too short (expected 52, got 30) [ 85.962275][ T192] usb 4-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 85.962370][ T192] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.998220][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.998393][ T192] usb 4-1: Product: syz [ 85.998427][ T192] usb 4-1: Manufacturer: syz [ 86.040861][ T192] r8152-cfgselector 4-1: Unknown version 0x0000 [ 86.200407][ T5774] UDC core: g1: couldn't find an available UDC or it's busy [ 86.498905][ T5617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.561742][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 86.649426][ T5617] usb 2-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 86.665770][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.674702][ T5617] usb 2-1: Product: syz [ 86.674758][ T5617] usb 2-1: Manufacturer: syz [ 86.674778][ T5617] usb 2-1: SerialNumber: syz [ 86.907863][ T5617] usb 2-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 86.931748][ T1219] cfg80211: failed to load regulatory.db [ 86.963086][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.976414][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.144028][ T5795] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.277035][ T192] r8152-cfgselector 4-1: Unknown version 0x0000 [ 87.287031][ T192] r8153_ecm 4-1:1.0: missing cdc ether descriptor [ 87.314215][ T192] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 87.328688][ T5624] Bluetooth: hci0: command tx timeout [ 87.409327][ T5624] Bluetooth: hci2: command tx timeout [ 87.409382][ T5624] Bluetooth: hci3: command tx timeout [ 87.409453][ T5624] Bluetooth: hci1: command tx timeout [ 87.491985][ T5770] usb 1-1: USB disconnect, device number 2 [ 87.523197][ T5770] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 87.788639][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.949939][ T31] usb 3-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice= 1.00 [ 87.965721][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.965804][ T31] usb 3-1: Product: syz [ 87.965837][ T31] usb 3-1: Manufacturer: syz [ 87.965856][ T31] usb 3-1: SerialNumber: syz [ 88.122058][ T5815] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 88.122086][ T5815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.129383][ T5815] vhci_hcd vhci_hcd.0: Device attached [ 88.142470][ T5817] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 88.147559][ T50] vhci_hcd vhci_hcd.0: stop threads [ 88.147581][ T50] vhci_hcd vhci_hcd.0: release socket [ 88.147609][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 88.270865][ T5815] vhci_hcd: not connected 4 [ 88.691062][ T5762] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 88.860363][ T5762] usb 4-1: not running at top speed; connect to a high speed hub [ 88.860422][ T5762] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 88.882771][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.910348][ T5762] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 88.955628][ T5762] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 90.111825][ T5762] usb 4-1: USB disconnect, device number 3 [ 90.141325][ T5762] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 90.152328][ T5762] garmin_gps 4-1:1.0: device disconnected [ 90.479200][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.608161][ T5762] usb 3-1: USB disconnect, device number 2 [ 90.632204][ T31] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 90.658675][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.658720][ T31] usb 1-1: Product: syz [ 90.658791][ T31] usb 1-1: Manufacturer: syz [ 90.658811][ T31] usb 1-1: SerialNumber: syz [ 90.717266][ T31] gspca_main: spca501-2.14.0 probing 0000:0000 [ 90.882886][ T5617] dvb_usb_rtl28xxu 2-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 90.913688][ T5617] usb 2-1: USB disconnect, device number 2 [ 91.034277][ T5861] UDC core: g1: couldn't find an available UDC or it's busy [ 91.078437][ T1219] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.229053][ T1219] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 91.230285][ T1219] usb 3-1: config index 0 descriptor too short (expected 54, got 36) [ 91.230345][ T1219] usb 3-1: config 2 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.230412][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.428826][ T31] gspca_spca501: reg write: error -110 [ 91.428873][ T31] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 91.429010][ T31] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 91.601009][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 91.601131][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 91.808364][ T192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.918377][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.961545][ T192] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01 [ 91.973351][ T192] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.983457][ T192] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 91.983536][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.994772][ T5870] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 91.994927][ T5870] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 91.999937][ T192] ipw 2-1:1.0: IPWireless converter converter detected [ 92.017712][ T192] usb 2-1: IPWireless converter converter now attached to ttyUSB0 [ 92.118889][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 92.120444][ T31] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.120473][ T31] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.123748][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.123770][ T31] usb 4-1: Product: syz [ 92.123783][ T31] usb 4-1: Manufacturer: syz [ 92.123796][ T31] usb 4-1: SerialNumber: syz [ 92.151833][ T5770] usb 1-1: USB disconnect, device number 3 [ 93.446364][ T1219] usb 3-1: string descriptor 0 read error: -71 [ 93.459947][ T1219] speedtch 3-1:2.0: speedtch_bind: setting interface to 1 failed (-71)! [ 93.460058][ T1219] speedtch 3-1:2.0: usbatm_usb_probe: bind failed: -71! [ 93.462438][ T1219] speedtch 3-1:2.0: probe with driver speedtch failed with error -71 [ 93.474945][ T1219] speedtch 3-1:2.1: speedtch_bind: setting interface to 1 failed (-71)! [ 93.476704][ T1219] speedtch 3-1:2.1: usbatm_usb_probe: bind failed: -71! [ 93.476764][ T1219] speedtch 3-1:2.1: probe with driver speedtch failed with error -71 [ 93.481476][ T1219] usb 3-1: USB disconnect, device number 3 [ 94.258354][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.343420][ T31] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 94.357025][ T31] usb 4-1: USB disconnect, device number 4 [ 94.430118][ T9] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 94.433101][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.433127][ T9] usb 3-1: Product: syz [ 94.433140][ T9] usb 3-1: Manufacturer: syz [ 94.433153][ T9] usb 3-1: SerialNumber: syz [ 95.158424][ T5762] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.319105][ T5762] usb 4-1: New USB device found, idVendor=0404, idProduct=0202, bcdDevice= 0.00 [ 95.320333][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.320362][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 95.322284][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.322305][ T5762] usb 4-1: Product: syz [ 95.322318][ T5762] usb 4-1: Manufacturer: syz [ 95.327970][ T5894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.328123][ T5894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.340490][ T5762] io_edgeport 4-1:1.0: EPiC device converter detected [ 96.278344][ T192] misc userio: Buffer overflowed, userio client isn't keeping up [ 96.453889][ T9] kaweth 3-1:1.0: Downloading firmware... [ 96.464514][ T9] usb 3-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 96.464595][ T9] usb 3-1: Falling back to sysfs fallback for: kaweth/new_code.bin [ 97.558638][ T192] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 97.778327][ T192] psmouse serio2: Failed to enable mouse on [ 97.970645][ T5762] usb 4-1: detected [ 97.979727][ T5762] usb 4-1: error in getting manufacturer descriptor: -71 [ 97.989095][ T5762] usb 4-1: error in getting boot descriptor: -71 [ 97.989141][ T5762] usb 4-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 97.990523][ T5762] usb 4-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 97.990553][ T5762] usb 4-1: Falling back to sysfs fallback for: edgeport/down.fw [ 98.190265][ T32] audit: type=1800 audit(1787030801.366:2): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="idVendor" dev="configfs" ino=8646 res=0 errno=0 [ 98.192419][ T32] audit: type=1800 audit(1787030801.366:3): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="idProduct" dev="configfs" ino=8005 res=0 errno=0 [ 98.195648][ T32] audit: type=1800 audit(1787030801.366:4): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="UDC" dev="configfs" ino=8008 res=0 errno=0 [ 98.196963][ T5911] UDC core: g1: couldn't find an available UDC or it's busy [ 98.262193][ T1219] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.429114][ T1219] usb 1-1: New USB device found, idVendor=0eb1, idProduct=2820, bcdDevice= 0.01 [ 98.430489][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.969403][ T5035] usb 1-1: USB disconnect, device number 4 [ 102.027900][ T5927] dummy_hcd dummy_hcd.0: remove, state 1 [ 102.028063][ T5927] usb usb1: USB disconnect, device number 1 [ 102.066975][ T5927] dummy_hcd dummy_hcd.0: stopped [ 102.072547][ T5927] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 102.097572][ T5929] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 102.097731][ T5929] dummy_hcd dummy_hcd.0: Dummy host controller [ 102.121386][ T5929] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 102.133585][ T5929] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 102.136841][ T5929] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 102.136893][ T5929] usb usb1: Product: Dummy host controller [ 102.136908][ T5929] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 102.136922][ T5929] usb usb1: SerialNumber: dummy_hcd.0 [ 102.164811][ T5929] hub 1-0:1.0: USB hub found [ 102.165528][ T5929] hub 1-0:1.0: 1 port detected [ 102.294714][ T5931] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 102.314448][ T32] audit: type=1800 audit(1787030805.486:5): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.42" name="members" dev="configfs" ino=8876 res=0 errno=0 [ 102.344706][ T5931] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 102.635961][ T5942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.693831][ T5707] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 102.705777][ T5707] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 102.714295][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 102.723692][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.733964][ T5707] Workqueue: sync_wq local_pci_probe_callback [ 102.740322][ T5707] RIP: 0010:i915_pci_probe+0x58/0x470 [ 102.745934][ T5707] Code: 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 fa 94 86 fc 4d 8b 3f 49 8d 5f 1c 4d 8d 6f 23 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 be 02 00 00 4c 89 e8 48 c1 e8 03 42 0f [ 102.765562][ T5707] RSP: 0018:ffffc90004467a50 EFLAGS: 00010207 [ 102.771665][ T5707] RAX: 1ffffffff18e147b RBX: 000000000000001c RCX: ffff88807e90ddc0 [ 102.779737][ T5707] RDX: 0000000000000000 RSI: ffffffff8c70a3c0 RDI: ffff888022e86000 [ 102.787808][ T5707] RBP: ffff888022e86000 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 102.795790][ T5707] R10: dffffc0000000000 R11: ffffffff85afc240 R12: 0000000000000003 [ 102.804043][ T5707] R13: 0000000000000023 R14: dffffc0000000000 R15: 0000000000000000 [ 102.812048][ T5707] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 102.821616][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.828389][ T5707] CR2: 000000110c36bede CR3: 0000000079204000 CR4: 00000000003526f0 [ 102.836474][ T5707] Call Trace: [ 102.839789][ T5707] [ 102.842746][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.848575][ T5707] ? __pfx_i915_pci_probe+0x10/0x10 [ 102.853786][ T5707] local_pci_probe_callback+0x120/0x1e0 [ 102.859695][ T5707] ? process_scheduled_works+0x97a/0x1630 [ 102.865527][ T5707] process_scheduled_works+0xc3d/0x1630 [ 102.871130][ T5707] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.877240][ T5707] ? assign_work+0x3cf/0x5d0 [ 102.881854][ T5707] worker_thread+0xa47/0xfb0 [ 102.886469][ T5707] kthread+0x38b/0x480 [ 102.890591][ T5707] ? __pfx_worker_thread+0x10/0x10 [ 102.895734][ T5707] ? __pfx_kthread+0x10/0x10 [ 102.900347][ T5707] ret_from_fork+0x514/0xb70 [ 102.904968][ T5707] ? __pfx_ret_from_fork+0x10/0x10 [ 102.910479][ T5707] ? __switch_to+0xc89/0x1420 [ 102.915257][ T5707] ? __pfx_kthread+0x10/0x10 [ 102.919863][ T5707] ret_from_fork_asm+0x1a/0x30 [ 102.924650][ T5707] [ 102.927774][ T5707] Modules linked in: [ 102.932329][ T5707] ---[ end trace 0000000000000000 ]--- [ 102.940728][ T5707] RIP: 0010:i915_pci_probe+0x58/0x470 [ 102.946248][ T5707] Code: 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 fa 94 86 fc 4d 8b 3f 49 8d 5f 1c 4d 8d 6f 23 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 be 02 00 00 4c 89 e8 48 c1 e8 03 42 0f [ 102.966239][ T5707] RSP: 0018:ffffc90004467a50 EFLAGS: 00010207 [ 102.972740][ T5707] RAX: 1ffffffff18e147b RBX: 000000000000001c RCX: ffff88807e90ddc0 [ 102.980962][ T5707] RDX: 0000000000000000 RSI: ffffffff8c70a3c0 RDI: ffff888022e86000 [ 102.989113][ T5707] RBP: ffff888022e86000 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 102.997219][ T5707] R10: dffffc0000000000 R11: ffffffff85afc240 R12: 0000000000000003 [ 103.005320][ T5707] R13: 0000000000000023 R14: dffffc0000000000 R15: 0000000000000000 [ 103.013675][ T5707] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 103.022809][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.029846][ T5707] CR2: 000000110c36bede CR3: 000000006ed7a000 CR4: 00000000003526f0 [ 103.029889][ T5707] Kernel panic - not syncing: Fatal exception [ 103.044171][ T5707] Kernel Offset: disabled [ 103.048508][ T5707] Rebooting in 86400 seconds..