last executing test programs: 6.537696656s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0\x00', 0x0, 0x0) 6.454427949s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\n', 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x8180, 0x900) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000240)="000000000000000000000000000000000000000000000000000000000100000000000000010000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r1, 0x40140921, &(0x7f00000002c0)="0000000001000000010000000000000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000300)="000000000010000000000000") 6.139049026s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd) 6.035688367s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freez', 0x5) 5.908433828s ago: executing program 0 (id=18): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='172.20.20.24\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 4.052941206s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040addeefbe0001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303100008"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dead beef\x00', 0xa) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.878171853s ago: executing program 1 (id=25): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000400)="736c69703000000000000000000000000100"/40) write(r0, &(0x7f0000000200)="700000c0", 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 558.50674ms ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/my_nullb\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/size\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='256\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/my_nullb/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='64\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/my_nullb/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_nullb/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") ioctl(r4, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006f01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6d795f6e756c6c6200") 338.723453ms ago: executing program 1 (id=27): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='172.20.20.24\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 150.544498ms ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:04.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)='8086 100e\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='0000:00:04.0\x00', 0xa) 56.778491ms ago: executing program 1 (id=29): write(0xffffffffffffffff, &(0x7f0000000080)="0101", 0x2) 0s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='disk\n', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19542' (ED25519) to the list of known hosts. syzkaller login: [ 75.223430][ T3368] cgroup: Unknown subsys name 'net' [ 75.456428][ T3368] cgroup: Unknown subsys name 'cpuset' [ 75.482456][ T3368] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.901845][ T3368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.433862][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.487470][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.536740][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.583645][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.420525][ T3375] hsr_slave_0: entered promiscuous mode [ 85.426467][ T3375] hsr_slave_1: entered promiscuous mode [ 85.571289][ T3373] hsr_slave_0: entered promiscuous mode [ 85.575928][ T3373] hsr_slave_1: entered promiscuous mode [ 85.581125][ T3373] debugfs: 'hsr0' already exists in 'hsr' [ 85.582816][ T3373] Cannot create hsr debugfs directory [ 86.441799][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.474351][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.489062][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.505687][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.515069][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.526245][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.543954][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.558257][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.654937][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.665562][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.669415][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.677488][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.692849][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.703537][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.709400][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.725280][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.260606][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.578421][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.962188][ T3375] veth0_vlan: entered promiscuous mode [ 90.036293][ T3375] veth1_vlan: entered promiscuous mode [ 90.219652][ T3375] veth0_macvtap: entered promiscuous mode [ 90.289948][ T3375] veth1_macvtap: entered promiscuous mode [ 90.320324][ T3373] veth0_vlan: entered promiscuous mode [ 90.380923][ T3373] veth1_vlan: entered promiscuous mode [ 90.508456][ T110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509088][ T110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509244][ T110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509395][ T110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.685791][ T3373] veth0_macvtap: entered promiscuous mode [ 90.735444][ T3373] veth1_macvtap: entered promiscuous mode [ 90.928528][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.929578][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.937996][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.939491][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940775][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.903969][ T3530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.906336][ T3530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.985760][ T3532] loop0: detected capacity change from 0 to 8 [ 92.868657][ T38] atkbd serio0: keyboard reset failed on [ 94.047593][ T38] atkbd serio1: Failed to enable keyboard on [ 94.054837][ T38] input: AT Raw Set 2 keyboard as /devices/serio1/input/input3 [ 94.725952][ T3551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.833766][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.843261][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.659128][ T3564] nvmet: adding nsid 1 to subsystem testnqn [ 95.692048][ T3564] nvmet_rdma: malformed ip/port passed: 172.20.20.24: [ 95.708591][ T3562] infiniband syz2: set active [ 95.709911][ T3562] infiniband syz2: added veth0 [ 95.838108][ T3562] RDS/IB: syz2: added [ 95.839087][ T3562] smc: adding ib device syz2 with port count 1 [ 95.839620][ T3562] smc: ib device syz2 port 1 has no pnetid [ 96.113372][ T3569] thunderbolt 0000:00:00.0: error -EINVAL: cannot obtain PCI resources, aborting [ 96.114207][ T3569] thunderbolt 0000:00:00.0: probe with driver thunderbolt failed with error -22 [ 96.382612][ T3573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.384487][ T3573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.147759][ T38] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.306488][ T38] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.331861][ T38] usb 1-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 97.332092][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.334341][ T38] usb 1-1: Product: syz [ 97.336005][ T38] usb 1-1: Manufacturer: syz [ 97.337626][ T38] usb 1-1: SerialNumber: syz [ 97.592990][ T3580] usb 1-1: Unknown version 0x0000 [ 100.478538][ T3589] null_blk: my_nullb: using native zone append [ 100.539047][ T3589] null_blk: disk my_nullb created [ 100.566262][ T3589] device-mapper: table: 248:0: too large device [ 100.567316][ T3589] device-mapper: ioctl: error adding target to table [ 100.720104][ T3594] rdma_rxe: rxe_newlink: failed to add veth0 [ 100.753015][ T3594] nvmet_rdma: malformed ip/port passed: 172.20.20.24: [ 100.960898][ T3600] PM: hibernation: hibernation entry [ 101.046010][ T50] Filesystems sync: 0.047 seconds [ 101.050211][ T3600] Freezing user space processes [ 101.064329][ T3600] Freezing user space processes completed (elapsed 0.012 seconds) [ 101.066177][ T3600] OOM killer disabled. [ 101.070660][ T3600] Freezing remaining freezable tasks [ 101.077455][ T3600] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 101.090842][ T3600] PM: hibernation: Preallocating image memory [ 102.307543][ T924] ------------[ cut here ]------------ [ 102.307830][ T924] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 102.309142][ T924] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#0: kworker/0:2/924 [ 102.318862][ T924] Modules linked in: [ 102.320594][ T924] CPU: 0 UID: 0 PID: 924 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT [ 102.321230][ T924] Hardware name: linux,dummy-virt (DT) [ 102.321837][ T924] Workqueue: events drm_fb_helper_damage_work [ 102.322520][ T924] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 102.322965][ T924] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 102.323251][ T924] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 102.323549][ T924] sp : ffff800083f23c40 [ 102.323786][ T924] x29: ffff800083f23c70 x28: 0000000000000000 x27: 0000000000000000 [ 102.324508][ T924] x26: f1f0000004b0f800 x25: ffff800083f23c40 x24: fcf0000005048488 [ 102.324954][ T924] x23: 0000000000000000 x22: 0000000000001651 x21: 0000000000000000 [ 102.325328][ T924] x20: 0000000000000000 x19: f1f0000004b0f800 x18: 00000000ffffffff [ 102.325694][ T924] x17: 0000000000000000 x16: faf0000003475100 x15: ffff800082df1de6 [ 102.326051][ T924] x14: 00000000ffffffea x13: ffff800083f23898 x12: 00000000000affa8 [ 102.326422][ T924] x11: ffff800082b8ed68 x10: 000000000002ffe8 x9 : ffff800082c3ed68 [ 102.326882][ T924] x8 : ffff800082c6ed50 x7 : 0000000000000001 x6 : ffffffffffffffff [ 102.327266][ T924] x5 : 0000000000000565 x4 : 0000000000000040 x3 : 0000000000000001 [ 102.327654][ T924] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f1f00000049ce600 [ 102.328215][ T924] Call trace: [ 102.328688][ T924] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 102.329456][ T924] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 102.329894][ T924] drm_fb_helper_damage_work+0x178/0x39c [ 102.330178][ T924] process_one_work+0x180/0x2d0 [ 102.330420][ T924] worker_thread+0x18c/0x300 [ 102.330661][ T924] kthread+0x118/0x124 [ 102.330941][ T924] ret_from_fork+0x10/0x20 [ 102.331435][ T924] ---[ end trace 0000000000000000 ]--- [ 103.347699][ T924] ------------[ cut here ]------------ [ 103.347928][ T924] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 103.349614][ T924] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#0: kworker/0:2/924 [ 103.350183][ T924] Modules linked in: [ 103.350785][ T924] CPU: 0 UID: 0 PID: 924 Comm: kworker/0:2 Tainted: G W syzkaller #0 PREEMPT [ 103.351271][ T924] Tainted: [W]=WARN [ 103.351468][ T924] Hardware name: linux,dummy-virt (DT) [ 103.351700][ T924] Workqueue: events drm_fb_helper_damage_work [ 103.351957][ T924] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 103.352233][ T924] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 103.352490][ T924] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 103.352718][ T924] sp : ffff800083f23c40 [ 103.352894][ T924] x29: ffff800083f23c70 x28: 0000000000000000 x27: 0000000000000000 [ 103.353254][ T924] x26: f1f0000004b0f800 x25: ffff800083f23c40 x24: fcf0000005048488 [ 103.353622][ T924] x23: 0000000000000000 x22: 0000000000001651 x21: 0000000000000000 [ 103.353987][ T924] x20: 0000000000000000 x19: f1f0000004b0f800 x18: 00000000ffffffff [ 103.354328][ T924] x17: ffff800083ab3bb0 x16: 0000000000001000 x15: ffff80008326bb4d [ 103.354697][ T924] x14: 00000000000001c2 x13: 00000000fa83b2da x12: 0000019def9c8636 [ 103.355091][ T924] x11: 00000000000000c0 x10: a874599175dca928 x9 : 8ff465a1bb6791d4 [ 103.355466][ T924] x8 : f1f00000049cf678 x7 : 0000000000000004 x6 : 0000000000000000 [ 103.355783][ T924] x5 : f1f00000049ce600 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 103.356127][ T924] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f1f00000049ce600 [ 103.356495][ T924] Call trace: [ 103.356653][ T924] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 103.356979][ T924] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 103.357254][ T924] drm_fb_helper_damage_work+0x178/0x39c [ 103.357526][ T924] process_one_work+0x180/0x2d0 [ 103.357766][ T924] worker_thread+0x18c/0x300 [ 103.357987][ T924] kthread+0x118/0x124 [ 103.358193][ T924] ret_from_fork+0x10/0x20 [ 103.358461][ T924] ---[ end trace 0000000000000000 ]--- [ 106.989165][ T3600] PM: hibernation: Allocated 66030 pages for snapshot [ 106.989394][ T3600] PM: hibernation: Allocated 264120 kbytes in 5.89 seconds (44.84 MB/s) [ 106.989533][ T3600] printk: Suspending console(s) (use no_console_suspend to debug) [ 107.227553][ T3600] Disabling non-boot CPUs ... [ 107.261958][ T3600] psci: CPU1 killed (polled 0 ms) [ 107.288067][ T3600] hibernate: Saved 0 MTE pages [ 107.288067][ T3600] ================================================================== [ 107.288067][ T3600] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 107.288067][ T3600] Read at addr f3f000000341f100 by task syz.1.30/3600 [ 107.288067][ T3600] Pointer tag: [f3], memory tag: [fe] [ 107.288067][ T3600] [ 107.288067][ T3600] CPU: 0 UID: 0 PID: 3600 Comm: syz.1.30 Tainted: G W syzkaller #0 PREEMPT [ 107.288067][ T3600] Tainted: [W]=WARN [ 107.288067][ T3600] Hardware name: linux,dummy-virt (DT) [ 107.288067][ T3600] Call trace: [ 107.288067][ T3600] show_stack+0x18/0x24 (C) [ 107.288067][ T3600] dump_stack_lvl+0x60/0x80 [ 107.288067][ T3600] print_report+0x1c4/0x4b0 [ 107.288067][ T3600] kasan_report+0x84/0xac [ 107.288067][ T3600] __do_kernel_fault+0x1b4/0x220 [ 107.288067][ T3600] do_bad_area+0x68/0x80 [ 107.288067][ T3600] do_tag_check_fault+0x34/0x44 [ 107.288067][ T3600] do_mem_abort+0x40/0x90 [ 107.288067][ T3600] el1_abort+0x44/0x64 [ 107.288067][ T3600] el1h_64_sync_handler+0x50/0xac [ 107.288067][ T3600] el1h_64_sync+0x6c/0x70 [ 107.288067][ T3600] swsusp_save+0x2cc/0x590 (P) [ 107.288067][ T3600] swsusp_arch_suspend+0x74/0x618 [ 107.288067][ T3600] hibernation_snapshot+0x208/0x438 [ 107.288067][ T3600] hibernate+0x1cc/0x3c0 [ 107.288067][ T3600] state_store+0xe8/0xf4 [ 107.288067][ T3600] kobj_attr_store+0x18/0x34 [ 107.288067][ T3600] sysfs_kf_write+0x7c/0x98 [ 107.288067][ T3600] kernfs_fop_write_iter+0x138/0x200 [ 107.288067][ T3600] vfs_write+0x244/0x36c [ 107.288067][ T3600] ksys_write+0x70/0x108 [ 107.288067][ T3600] __arm64_sys_write+0x1c/0x30 [ 107.288067][ T3600] invoke_syscall+0x54/0x10c [ 107.288067][ T3600] el0_svc_common.constprop.0+0x40/0xe0 [ 107.288067][ T3600] do_el0_svc+0x1c/0x34 [ 107.288067][ T3600] el0_svc+0x38/0x1fc [ 107.288067][ T3600] el0t_64_sync_handler+0xa0/0xf0 [ 107.288067][ T3600] el0t_64_sync+0x1a4/0x1a8 [ 107.288067][ T3600] [ 107.288067][ T3600] The buggy address belongs to the physical page: [ 107.288067][ T3600] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 107.288067][ T3600] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 107.288067][ T3600] flags: 0x1fff00000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0xc) [ 107.288067][ T3600] page_type: f8(unknown) [ 107.288067][ T3600] raw: 01fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 107.288067][ T3600] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 107.288067][ T3600] head: 01fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 107.288067][ T3600] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 107.288067][ T3600] head: 01fff00000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 107.288067][ T3600] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 107.288067][ T3600] page dumped because: kasan: bad access detected [ 107.288067][ T3600] [ 107.288067][ T3600] Memory state around the buggy address: [ 107.288067][ T3600] fff000000341ef00: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 [ 107.288067][ T3600] fff000000341f000: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 [ 107.288067][ T3600] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 107.288067][ T3600] ^ [ 107.288067][ T3600] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 107.288067][ T3600] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 107.288067][ T3600] ================================================================== [ 107.288067][ T3600] Disabling lock debugging due to kernel taint [ 107.291622][ T3600] Enabling non-boot CPUs ... [ 107.337946][ T0] Detected PIPT I-cache on CPU1 [ 107.343487][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 107.367701][ T3600] CPU1 is up [ 107.409250][ T220] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 107.745788][ T110] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 112.915779][ T110] usb 1-1: device descriptor read/64, error -110 [ 113.155585][ T110] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 113.285182][ T110] usb 1-1: device descriptor read/64, error -32 [ 113.525432][ T110] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 113.545935][ T110] usb 1-1: device descriptor read/8, error -32 [ 113.725588][ T110] raw-gadget.1 gadget.0: failed to queue resume event [ 113.785501][ T110] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 113.805712][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 113.806122][ T110] usb 1-1: device descriptor read/8, error -32 [ 113.915370][ T110] raw-gadget.1 gadget.0: failed to queue suspend event [ 113.974082][ T3600] PM: Cannot find swap device, try swapon -a [ 113.974288][ T3600] PM: Cannot get swap writer [ 114.697140][ T3600] OOM killer enabled. [ 114.697456][ T3600] Restarting tasks: Starting [ 114.702411][ T9] usb 1-1: USB disconnect, device number 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.817317][ T3600] Restarting tasks: Done [ 114.819129][ T3600] PM: hibernation: hibernation exit [ 114.865219][ T3580] raw-gadget.1 gadget.0: failed to queue disconnect event [ 115.336312][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.461798][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.548263][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.633404][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.205455][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.240107][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.293952][ T29] bond0 (unregistering): Released all slaves [ 116.585008][ T29] hsr_slave_0: left promiscuous mode [ 116.588067][ T29] hsr_slave_1: left promiscuous mode [ 116.599022][ T29] veth1_macvtap: left promiscuous mode [ 116.600045][ T29] veth0_macvtap: left promiscuous mode [ 116.600806][ T29] veth1_vlan: left promiscuous mode [ 116.601600][ T29] veth0_vlan: left promiscuous mode [ 117.246477][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.562073][ T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.673988][ T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.757471][ T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.876598][ T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.979081][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 118.421149][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.471600][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.508727][ T29] bond0 (unregistering): Released all slaves [ 118.742751][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.036108][ T29] hsr_slave_0: left promiscuous mode [ 119.040539][ T29] hsr_slave_1: left promiscuous mode [ 119.058609][ T29] veth1_macvtap: left promiscuous mode [ 119.059109][ T29] veth0_macvtap: left promiscuous mode [ 119.059524][ T29] veth1_vlan: left promiscuous mode [ 119.059939][ T29] veth0_vlan: left promiscuous mode [ 119.532456][ T110] smc: removing ib device syz2 [ 119.633413][ T9] syz2: Port: 1 Link DOWN [ 119.638457][ T3220] 8021q: adding VLAN 0 to HW filter on device eth4 [ 120.276523][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 120.997192][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 121.585517][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.229666][ T3220] 8021q: adding VLAN 0 to HW filter on device eth8