last executing test programs: 1m4.865839224s ago: executing program 2 (id=3): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x806c5864, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000008000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000080)={0x10, 0x126, 0x7ff, 0x401, 0x8}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000000000000000080895"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x43, 'lblcr\x00', 0x1, 0xdf, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 1m1.75298003s ago: executing program 2 (id=13): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x60}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) 1m1.50825639s ago: executing program 2 (id=17): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x5c3b37380d70341, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x2}}]}, 0x13c}}, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x9) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4002, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="d9ea690900ca0180c200000086dd61fbddf000083afffe800000000000000200000000000000ff0200000000000000000000000000018100907800020004ad78edb1cc948a37382f0067f438cc977aa477e342de661c09cdf242f5663f626759f4bdf47695d6392e7ba6ccb9dffc8c7fd121306bb4418ae87f0b2888162cb1fb140dcba04020882d96cc4aa89f524e71967509c6bda6b79f37b119c601ed88a0adc829cc4028ba712a515dd66752554ef9c1ae545a"], 0x0) 45.958778464s ago: executing program 32 (id=17): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x5c3b37380d70341, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x2}}]}, 0x13c}}, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x9) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4002, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="d9ea690900ca0180c200000086dd61fbddf000083afffe800000000000000200000000000000ff0200000000000000000000000000018100907800020004ad78edb1cc948a37382f0067f438cc977aa477e342de661c09cdf242f5663f626759f4bdf47695d6392e7ba6ccb9dffc8c7fd121306bb4418ae87f0b2888162cb1fb140dcba04020882d96cc4aa89f524e71967509c6bda6b79f37b119c601ed88a0adc829cc4028ba712a515dd66752554ef9c1ae545a"], 0x0) 4.750684273s ago: executing program 3 (id=193): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x9, 0x100000) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.687749838s ago: executing program 3 (id=195): mount(0x0, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x0, 0x2008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x24020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) 3.804735671s ago: executing program 3 (id=198): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) mq_notify(r0, &(0x7f0000000740)={0x0, 0x39, 0x1, @thr={&(0x7f0000000580)="73bdf56b2402b633badc7ea5608cfb4b39b06be12ae4415cbc683efebb1a8da0e51b570cdeea34281bf681e2fafa277237e649b8493b7a61d32d78cebf94a468916edcb03f3918bdbe1d14e4849714b51931a6a8c467a8c9afff7536b8e5998ddfcfe36ea3a31e789cf8074571d1f52fca534e06c41a496fdedd792e2d84aa82efed4543f8fec1bd87f387aa2c192c48d7824d69c301e741be66d1fdf32b26c4e530e25127705991cafa585d9f08902aafd3da5c9a276efd43a8d46b970d361541e1760520730a13f7646573e519e3e2e66fca3bab65ac72098155bb994b0bcd823f2b", &(0x7f0000000680)="e002f93523c6256f8532ea4864faf0998e22306f4d751675b6da552c303c1e2e7989832f3ab597028c12dfb633f6a14be43f536a1fb0c1e8dff31cde5132f95126aeffe1eef566f4e4a4b0518a949789f16d47086e277af72fb1c1a15c5f448e4d5dd6d39100b3577769a625a646ccb290e63ffa53db6d149ec0a5d5df47266457433ea59294a7bffcf345fbb473ac7a6ef7186b2a6a100d2be05d4b0bb5409944ef3996802970ff5f4b46e1c6292a699b7207032f6e4b22f733b00a92199d3b"}}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r3, 0x0, 0x0, 0x90, 0x0, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/15, 0xf}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, 0x0, 0x24004098) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r7, @ANYBLOB="0e4fd0ae3d4ba28a267d0981b28302000000dc8b5249e7098332f46f"], 0xd5}}, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r9, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r8, 0x6a, 0x1, 0x0, 0xc) socket(0x1d, 0x1, 0x6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) 3.640358738s ago: executing program 3 (id=202): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x388, 0x40000, 0x1f4, 0x0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xff000000], [0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {0xff}, {}, 0x21}, 0x0, 0xf8, 0x11c, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x2, 0x0, 0x7}, 0x800001}}}, {{@uncond, 0x0, 0xa4, 0xcc, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @loopback, [0xff, 0xffffffff, 0xff, 0xff], [0xffffff00, 0x0, 0xff000000], '\x00', 'sit0\x00', {0xff}, {0xff}, 0x88, 0x4, 0x2, 0x2}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x40}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) 3.639665043s ago: executing program 3 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_socket_connect_nvme_tcp() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_open_dev$media(0x0, 0x4, 0x10000) syz_open_dev$vbi(0x0, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f00000004c0)={0x0, 0x1dcd6500}, &(0x7f0000000500)) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x50, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x50, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) 2.720526266s ago: executing program 3 (id=208): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x806c5864, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000008000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000080)={0x10, 0x126, 0x7ff, 0x401, 0x8}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000000000000000080895"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x43, 'lblcr\x00', 0x1, 0xdf, 0x6f}, 0x2c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 2.485069223s ago: executing program 1 (id=212): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) (fail_nth: 8) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x4, 0x8, 0x1000004, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, 0x0, 0x0, 0xff00) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000010300800c0001"], 0x314}], 0x1}, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) 1.57121619s ago: executing program 1 (id=216): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x381482, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (fail_nth: 1) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) 1.554660146s ago: executing program 1 (id=217): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x381482, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80042, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', 'c', ':', '8', '.', '1'}}, 0x13) r3 = socket(0x10, 0x2, 0x4) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r5, r5) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000180)=""/252, &(0x7f0000000280)=0xfc) 1.346777772s ago: executing program 1 (id=218): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x122) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) 1.314456019s ago: executing program 1 (id=220): mount(0x0, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x0, 0x2008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x24020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) 1.156604001s ago: executing program 0 (id=221): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4008000) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000)=r7, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.090360223s ago: executing program 0 (id=223): socket(0x10, 0x3, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1.03183201s ago: executing program 0 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) (async) setns(0xc9, 0x0) (async) r1 = socket(0xb, 0x4, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x108, 0x42000004, 0x0, &(0x7f0000000100)) (async) write(r0, 0x0, 0x0) 897.809603ms ago: executing program 4 (id=225): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 897.539584ms ago: executing program 0 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (fail_nth: 9) 840.073899ms ago: executing program 4 (id=227): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x0, 0x1, 0x4}}, 0x2e) splice(r0, &(0x7f0000000000)=0x2800000000, r1, &(0x7f0000000080)=0xffffffffffff0eb1, 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) 837.109483ms ago: executing program 4 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x595e, 0x400, 0x3, 0x52}, &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x9e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 440.265326ms ago: executing program 4 (id=229): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="789c926c5560666060e0f99070678664eb0346060606c3c30a7763191818406c106002119c1c0c0c0ff223e4927bec77a665e6a4ea25e7e7a4fcffff5fb2f501483e2c3c2cb80caa969181a1f12d546f0a0326100289831466975c992e907cff5a314325431543364322430e430e432a435134d85c90fdbad7151b85a06e0161905b195859181842e32c4eea1f5a9e07728b01c21d2e4bde2bd941d531323038bec5623f567089ab7a2d163b4166b280ede46060687d7f6055c4d1e93f40761a22ecf473b13aad005587ec772e2cd670c1c41bef3c4a768af4b9515c59959d9893935a540c368f838181c160a779ff2e989f19d918d8ce5af17d6d39e494549158525264c800a120f673323030c86ceb3ff512613f03d3adb51c0fd0cc628299756b", 0x122) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) 413.903167ms ago: executing program 1 (id=230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x3) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) 412.783812ms ago: executing program 4 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') openat(r2, &(0x7f0000000240)='./config\x00', 0x40c081, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000500), 0x40800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000540)={0x19, 0x1b, 0x11, 0x3, 0xa, 0x5, 0x2, 0x12f, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)="b22cdf19f461787ff419aa7580504fb848ce71f82822bf5614ccac5a67caf7ec2546379e325d3ab3d7ae3901523d038d380d8eeeec1fe5c3426559099b781017ebcfd8c74723412a81574a5f66deed70d25f442b156291db946137c8959b2af69b5646a2a2fb7c7e213c90cbf9", 0x6d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)="320414a981f9a18a42133e628bbe71674dfec94ff6597973e8ec3ec9cb8261d626eca24aada7a3e126583e8edd0ab8d183458fff51931c8d2c24e8e734b3e6ff0dd961d98739e996636c7932ae2b7611b665129fdaa5a37f89cf8c69bb8463ee770f814aed830728d919", 0x6a) inotify_add_watch(0xffffffffffffffff, 0x0, 0xf986520fcaace820) write(0xffffffffffffffff, &(0x7f0000000780)='2', 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80200) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x6881, 0x116) write(r7, &(0x7f0000000940)='dummy_udc.0', 0xb) 300.530706ms ago: executing program 4 (id=232): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x10}, 0xc) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0]}) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f00000002c0)="1c0000001a007d8a140000003b9b301f00000000000000400312022e318f13e9bfdf9cdbc889137bb4e64d1998fc4efc871a5bb2d78a2074ca16b694171a92541749758382796edbdb6ee727770fa984e5f6aa0cae68d3828c1937d264232efc02eaa8e2707882ee45bcc7721ea4e388b698bd5aca1831f3c6e02a44ee3daae8d8422c61b41c86aff144c842a30f76a84a74d2c47975a3dd83a3477316ec133dbf8ae7d3942c772c3a280c2d26f1e8baf5edec3946c04716b049aef4e0001d", 0xbf) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 248.199963ms ago: executing program 0 (id=233): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x40780, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'dmm32at\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x4, 0x5, 0x6, 0xd287, 0xa, 0x101, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0xb, 0xf7fffffa, 0x1ff, 0x2, 0x0, 0x1000000a, 0x927, 0xeb96, 0x9, 0x40b, 0xe69, 0x4, 0x10008, 0x2, 0x1cdc, 0x29]}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000080)="e11b", 0x2, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300500000000b000100736f636b6574000008000240000098b2140000001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c0002800600050000000000a0540490149ce65fad94a440efda64d3287fd6dfbdc9ba9351890bfbd4204d768b350b1a9fd604f7f603147285b65ebf9b3bb6955ff2eaa89fe802031eed9ec707146afa6746330bd37fcaab32e4d0f3bba49c0f20c1188756f0bed8651bf9066dae32940fe96fa2f6fb8c5fc37c290fe8cb0846092ad9af984084462ef314051c0cde6f2bf69a9fe848397b04ce0d9578ecf67b7530231dbc710429065f38df5e37a3ceaadc210ab0a8229b77b098347907a3152893ae4c3a116fddf0284e68"], 0x3c}}, 0x404c840) 0s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xc2000) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) write(r1, &(0x7f00000001c0)='pch_udc\x00', 0x8) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/pch_udc/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) (fail_nth: 9) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x1c, 0x0, &(0x7f0000000180)) close(r3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16=r6, @ANYBLOB="ad43f8ffb808bc7d71b706"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000002c0)=""/197) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 846] usb 6-1: USB disconnect, device number 9 [ 75.374329][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.385809][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.390581][ T6151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.399156][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.501712][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.523818][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.540650][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.542959][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.570230][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.572481][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.587629][ T5797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.591008][ T5797] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.603801][ T5457] 8021q: adding VLAN 0 to HW filter on device eth4 [ 75.627147][ T12] IPVS: stop unused estimator thread 0... [ 75.657103][ T5824] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662585][ T5824] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.808045][ T5457] 8021q: adding VLAN 0 to HW filter on device eth5 [ 75.947935][ T61] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 75.963536][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 75.968563][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 75.972874][ T61] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 75.976040][ T61] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 76.026329][ T5750] Bluetooth: hci4: command tx timeout [ 76.126440][ T5531] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 76.222144][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.280178][ T5531] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 76.289911][ T5531] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.302034][ T5531] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 76.307115][ T5531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.316434][ T5531] usb 8-1: Product: syz [ 76.318279][ T5531] usb 8-1: Manufacturer: syz [ 76.321951][ T5531] usb 8-1: SerialNumber: syz [ 76.330792][ T5531] usb 8-1: config 0 descriptor?? [ 76.335100][ T5531] hub 8-1:0.0: bad descriptor, ignoring hub [ 76.338755][ T5531] hub 8-1:0.0: probe with driver hub failed with error -5 [ 76.343335][ T5531] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 76.486472][ T6105] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 76.506865][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 76.512373][ T61] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 76.515215][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 76.520297][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 76.523789][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 76.638103][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 76.642005][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.647790][ T6105] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 76.649647][ T6151] veth0_vlan: entered promiscuous mode [ 76.650805][ T6105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.655369][ T6105] usb 6-1: Product: syz [ 76.659375][ T6105] usb 6-1: Manufacturer: syz [ 76.661177][ T6105] usb 6-1: SerialNumber: syz [ 76.664788][ T6105] usb 6-1: config 0 descriptor?? [ 76.669287][ T6105] hub 6-1:0.0: bad descriptor, ignoring hub [ 76.671665][ T6105] hub 6-1:0.0: probe with driver hub failed with error -5 [ 76.676146][ T6105] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 76.704034][ T6151] veth1_vlan: entered promiscuous mode [ 76.733427][ T6105] input: failed to attach handler mousedev to device input12, error: -5 [ 76.750306][ T5531] usb 8-1: USB disconnect, device number 6 [ 76.822356][ T6151] veth0_macvtap: entered promiscuous mode [ 76.827259][ T6151] veth1_macvtap: entered promiscuous mode [ 76.840944][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.850105][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.876771][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.879773][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.928370][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.933723][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.947833][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.951348][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.956464][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960257][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.986807][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 76.992975][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 76.996712][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 76.999728][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 77.002852][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 77.086476][ T6105] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.236337][ T6105] usb 5-1: Using ep0 maxpacket: 8 [ 77.379089][ T6105] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 77.381741][ T6105] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.384968][ T6105] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.388183][ T6105] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.391244][ T6105] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.395502][ T6105] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.406086][ T6105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.574158][ T6296] warning: `syz.3.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.620804][ T6105] usb 5-1: usb_control_msg returned -32 [ 77.622601][ T6105] usbtmc 5-1:16.0: can't read capabilities [ 77.934403][ T6282] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 77.938008][ T6066] usb 5-1: USB disconnect, device number 5 [ 77.940204][ T6300] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 78.036769][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 78.043061][ T61] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 78.046157][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 78.049077][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 78.051410][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 78.106609][ T5750] Bluetooth: hci4: command tx timeout [ 78.586900][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 78.594793][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 78.599115][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 78.602250][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 78.605461][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 78.634623][ T6308] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.655535][ T6310] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.707303][ T6308] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.763935][ T6310] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.803030][ T6308] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.861359][ T6310] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.904317][ T6308] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.916480][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 78.943370][ T6310] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.041139][ T5797] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.066884][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 79.066931][ T5797] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.068487][ T24] usb 5-1: config 0 has no interfaces? [ 79.070576][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.070601][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.070618][ T24] usb 5-1: Product: syz [ 79.070630][ T24] usb 5-1: Manufacturer: syz [ 79.070641][ T24] usb 5-1: SerialNumber: syz [ 79.075544][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 79.090434][ T24] usb 5-1: config 0 descriptor?? [ 79.097027][ T5797] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.101413][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 79.101432][ T5797] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.107779][ T5797] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111107][ T5797] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111486][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 79.118934][ T5797] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.125716][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 79.127297][ T5797] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.176772][ T5531] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 79.191241][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.88'. [ 79.281358][ T6318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.338114][ T5531] usb 8-1: config 0 has no interfaces? [ 79.341632][ T34] usb 5-1: USB disconnect, device number 6 [ 79.342602][ T5531] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.348475][ T5531] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.351826][ T5531] usb 8-1: Product: syz [ 79.353589][ T5531] usb 8-1: Manufacturer: syz [ 79.355481][ T5531] usb 8-1: SerialNumber: syz [ 79.359668][ T5531] usb 8-1: config 0 descriptor?? [ 79.582185][ T5531] usb 8-1: USB disconnect, device number 7 [ 79.620735][ T6323] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 79.629017][ T6323] team0: Port device dummy0 added [ 80.091634][ T6333] binder: 6331:6333 ioctl c0306201 80000080 returned -22 [ 80.186342][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 80.186519][ T5750] Bluetooth: hci4: command tx timeout [ 80.192536][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 80.198810][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 80.203047][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 80.209197][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 80.670580][ T1169] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 80.684073][ T61] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 80.688375][ T1169] (NULL device *): queue 0 connect admin queue failed (-6). [ 80.691213][ T1169] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 80.694322][ T1169] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 81.155863][ T1347] cfg80211: failed to load regulatory.db [ 81.251239][ T36] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 81.287739][ T6347] FAULT_INJECTION: forcing a failure. [ 81.287739][ T6347] name failslab, interval 1, probability 0, space 0, times 1 [ 81.292861][ T6347] CPU: 2 UID: 0 PID: 6347 Comm: syz.0.100 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.292880][ T6347] Tainted: [L]=SOFTLOCKUP [ 81.292884][ T6347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.292890][ T6347] Call Trace: [ 81.292901][ T6347] [ 81.292906][ T6347] dump_stack_lvl+0x100/0x190 [ 81.292924][ T6347] should_fail_ex.cold+0x5/0xa [ 81.292938][ T6347] should_failslab+0xc2/0x120 [ 81.292954][ T6347] kmem_cache_alloc_noprof+0x91/0x6a0 [ 81.292974][ T6347] ? ptlock_alloc+0x1f/0x70 [ 81.292988][ T6347] ptlock_alloc+0x1f/0x70 [ 81.292999][ T6347] pte_alloc_one+0x82/0x3d0 [ 81.293017][ T6347] __pte_alloc+0x6d/0x3e0 [ 81.293031][ T6347] ? __pfx___pte_alloc+0x10/0x10 [ 81.293045][ T6347] ? rcu_read_unlock+0x2d/0xb0 [ 81.293060][ T6347] do_anonymous_page+0x13ae/0x2080 [ 81.293073][ T6347] ? __pfx_pgd_none+0x10/0x10 [ 81.293087][ T6347] __handle_mm_fault+0x1d2c/0x2a00 [ 81.293100][ T6347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.293114][ T6347] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.293125][ T6347] ? folio_mark_accessed+0xf3/0x1040 [ 81.293138][ T6347] ? __pfx_folio_mark_accessed+0x10/0x10 [ 81.293150][ T6347] ? find_held_lock+0x2b/0x80 [ 81.293172][ T6347] handle_mm_fault+0x37b/0xa30 [ 81.293186][ T6347] __get_user_pages+0x1178/0x32a0 [ 81.293205][ T6347] ? down_read_killable+0x35e/0x520 [ 81.293224][ T6347] ? __pfx___get_user_pages+0x10/0x10 [ 81.293239][ T6347] ? __gup_longterm_locked+0x109c/0x16f0 [ 81.293259][ T6347] __gup_longterm_locked+0x87d/0x16f0 [ 81.293279][ T6347] ? __pfx___gup_longterm_locked+0x10/0x10 [ 81.293297][ T6347] ? find_held_lock+0x2b/0x80 [ 81.293311][ T6347] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 81.293328][ T6347] gup_fast_fallback+0x16dc/0x2790 [ 81.293354][ T6347] ? __pfx_gup_fast_fallback+0x10/0x10 [ 81.293369][ T6347] ? lockdep_hardirqs_on+0x78/0x100 [ 81.293390][ T6347] pin_user_pages_fast+0xa7/0xf0 [ 81.293406][ T6347] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 81.293423][ T6347] ? sha3_keccakf_one_round_generic+0x819/0xcb0 [ 81.293437][ T6347] ? iov_iter_advance+0xac/0x6d0 [ 81.293453][ T6347] ? sha3_keccakf_one_round_generic+0x20/0xcb0 [ 81.293472][ T6347] iov_iter_extract_pages+0xac8/0x2100 [ 81.293501][ T6347] ? __crypto_xor+0x4f0/0x600 [ 81.293523][ T6347] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 81.293550][ T6347] ? __sha3_update+0x117/0x5c0 [ 81.293571][ T6347] ? register_lock_class+0x40/0x560 [ 81.293590][ T6347] extract_iter_to_sg+0xaef/0x2250 [ 81.293614][ T6347] ? crypto_hash_walk_done+0x63/0x400 [ 81.293641][ T6347] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 81.293664][ T6347] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 81.293685][ T6347] ? gup_put_folio+0x1af/0x270 [ 81.293708][ T6347] ? unpin_user_page+0xae/0xf0 [ 81.293730][ T6347] ? __pfx_unpin_user_page+0x10/0x10 [ 81.293751][ T6347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.293781][ T6347] hash_sendmsg+0x43a/0x10a0 [ 81.293815][ T6347] ____sys_sendmsg+0xa4d/0xbe0 [ 81.293834][ T6347] ? __pfx_hash_sendmsg+0x10/0x10 [ 81.293858][ T6347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.293899][ T6347] ? _kstrtoull+0x13c/0x1f0 [ 81.293920][ T6347] ? __pfx__kstrtoull+0x10/0x10 [ 81.293943][ T6347] ___sys_sendmsg+0x190/0x1e0 [ 81.293965][ T6347] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.293987][ T6347] ? __lock_acquire+0x49f/0x1a40 [ 81.294044][ T6347] __sys_sendmmsg+0x309/0x440 [ 81.294072][ T6347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 81.294096][ T6347] ? find_held_lock+0x2b/0x80 [ 81.294123][ T6347] ? __mutex_unlock_slowpath+0x35d/0x930 [ 81.294159][ T6347] ? fput+0x79/0x100 [ 81.294180][ T6347] ? ksys_write+0x1ac/0x250 [ 81.294205][ T6347] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 81.294224][ T6347] ? lockdep_hardirqs_on+0x78/0x100 [ 81.294246][ T6347] __do_fast_syscall_32+0xe7/0x970 [ 81.294270][ T6347] ? lockdep_hardirqs_on+0x78/0x100 [ 81.294295][ T6347] do_fast_syscall_32+0x32/0x70 [ 81.294319][ T6347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.294341][ T6347] RIP: 0023:0xf7fe5fec [ 81.294364][ T6347] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 81.294371][ T6347] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 81.294389][ T6347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004140 [ 81.294400][ T6347] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.294409][ T6347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.294419][ T6347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.294428][ T6347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.294451][ T6347] [ 81.299804][ T1169] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 81.327151][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 81.396010][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 81.503607][ T6352] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3774873600.0), cmd(2) [ 81.537612][ T36] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 81.546342][ T36] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 81.571789][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 81.577631][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 81.594139][ T24] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 81.600516][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.604336][ T24] usb 8-1: Product: syz [ 81.606428][ T24] usb 8-1: Manufacturer: syz [ 81.608751][ T24] usb 8-1: SerialNumber: syz [ 81.850766][ T24] usb 8-1: config 0 descriptor?? [ 81.986750][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.004827][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.178750][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input13 [ 82.287858][ T24] usb 8-1: USB disconnect, device number 9 [ 82.337302][ T5826] usb 6-1: USB disconnect, device number 10 [ 82.550561][ T6373] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.574120][ T6375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.592699][ T6373] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.597951][ T36] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 82.604931][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 82.608129][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 82.610462][ T36] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 82.612817][ T36] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 82.682638][ T6373] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.749014][ T6373] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.759608][ T61] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 82.765605][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 82.769271][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 82.772754][ T61] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 82.775811][ T61] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 82.816634][ T6382] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 82.823584][ T6382] ehci-pci 0000:00:1d.7: remove, state 1 [ 82.829142][ T6382] usb usb2: USB disconnect, device number 1 [ 82.831674][ T6382] usb 2-1: USB disconnect, device number 2 [ 82.960749][ T5902] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 82.979407][ T6382] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 83.636347][ T61] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 83.646354][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 83.649506][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 83.653037][ T61] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 83.658688][ T61] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 83.748668][ T5902] usb 5-1: config 0 has no interfaces? [ 83.753154][ T5902] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.757405][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.760787][ T5902] usb 5-1: Product: syz [ 83.762708][ T5902] usb 5-1: Manufacturer: syz [ 83.764389][ T5902] usb 5-1: SerialNumber: syz [ 83.769293][ T5902] usb 5-1: config 0 descriptor?? [ 83.886438][ T5797] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.889775][ T5797] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892730][ T5797] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.895805][ T5797] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956337][ T5820] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 83.992222][ T2324] usb 5-1: USB disconnect, device number 7 [ 84.106309][ T5820] usb 8-1: Using ep0 maxpacket: 32 [ 84.110250][ T5820] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 84.114486][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 84.119389][ T5820] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.124222][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.131897][ T5820] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 84.135837][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.139393][ T5820] usb 8-1: Product: syz [ 84.141050][ T5820] usb 8-1: Manufacturer: syz [ 84.142930][ T5820] usb 8-1: SerialNumber: syz [ 84.158312][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 84.174786][ T5820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input14 [ 84.376393][ T5820] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 84.379067][ T5820] (id 0x00) [ 84.436397][ T5820] rc_core: IR keymap rc-imon-pad not found [ 84.439535][ T5820] Registered IR keymap rc-empty [ 84.441569][ T5820] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 84.445279][ T5820] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 84.466323][ T6105] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 84.577276][ T5820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 84.581917][ T5820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input15 [ 84.590036][ T5820] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:10> initialized [ 84.639955][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 84.648533][ T6105] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 84.655172][ T6105] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 84.666430][ T61] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 84.666436][ T6105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.666460][ T6105] usb 6-1: Product: syz [ 84.673270][ T1169] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 84.677565][ T6105] usb 6-1: Manufacturer: syz [ 84.681098][ T6105] usb 6-1: SerialNumber: syz [ 84.683127][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 84.685711][ T61] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 84.688257][ T61] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 84.694061][ T6105] usb 6-1: config 0 descriptor?? [ 84.699415][ T6105] hub 6-1:0.0: bad descriptor, ignoring hub [ 84.701465][ T6105] hub 6-1:0.0: probe with driver hub failed with error -5 [ 84.707618][ T6105] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 84.786378][ T5826] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.826437][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 84.832869][ T61] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 84.835890][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 84.838669][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 84.841183][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 84.916383][ T5902] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.924543][ T6399] imon:send_packet: packet tx failed (-71) [ 84.924666][ T5840] usb 8-1: USB disconnect, device number 10 [ 84.936339][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 84.940424][ T5826] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 84.943903][ T5826] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.947360][ T5826] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.950530][ T5826] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.954441][ T5826] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.956522][ T6399] imon:vfd_write: send packet #0 failed [ 84.958731][ T5826] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.963590][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.066372][ T5902] usb 9-1: Using ep0 maxpacket: 8 [ 85.069828][ T5902] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 85.072527][ T5902] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.075636][ T5902] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.079196][ T5902] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.083043][ T5902] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.087833][ T5902] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.091004][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.178059][ T5826] usb 5-1: usb_control_msg returned -32 [ 85.180533][ T5826] usbtmc 5-1:16.0: can't read capabilities [ 85.301874][ T5902] usb 9-1: usb_control_msg returned -32 [ 85.303703][ T5902] usbtmc 9-1:16.0: can't read capabilities [ 85.482411][ T6405] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 85.484390][ T6411] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 85.487429][ T6105] usb 5-1: USB disconnect, device number 8 [ 85.565946][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 85.577333][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 85.581752][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 85.590132][ T6414] team0 (unregistering): Port device dummy0 removed [ 85.706539][ T1169] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 85.707708][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 85.712618][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 85.718724][ T1169] (NULL device *): queue 0 connect admin queue failed (-6). [ 85.721181][ T1169] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 85.723961][ T1169] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 86.607117][ T6429] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3774873600.0), cmd(2) [ 86.749679][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 86.772328][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 86.780289][ T6434] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3774873600.0), cmd(2) [ 86.790038][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 86.807612][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 86.818202][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 86.906602][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 86.917400][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 86.931853][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 86.952799][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 86.973861][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 87.672858][ T5902] usb 9-1: USB disconnect, device number 2 [ 87.808848][ T6448] netlink: 10 bytes leftover after parsing attributes in process `syz.3.117'. [ 87.876770][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 87.885218][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 87.889871][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 87.892452][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 87.895361][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 88.118044][ T5140] usb 6-1: reset full-speed USB device number 11 using dummy_hcd [ 88.124260][ T5140] usb 6-1: device reset changed ep0 maxpacket size! [ 88.128513][ T24] usb 6-1: USB disconnect, device number 11 [ 88.186525][ T5902] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 88.287166][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 88.309976][ T6456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.349255][ T5902] usb 9-1: config index 0 descriptor too short (expected 10276, got 36) [ 88.351771][ T5902] usb 9-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 88.354450][ T5902] usb 9-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 88.359081][ T5902] usb 9-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 88.362694][ T5902] usb 9-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 88.366992][ T5902] usb 9-1: config 109 interface 0 has no altsetting 0 [ 88.369158][ T5902] usb 9-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 88.372062][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.383746][ T6456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.458495][ T24] usb 6-1: config 0 has no interfaces? [ 88.464530][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.477217][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.485546][ T24] usb 6-1: Product: syz [ 88.487007][ T24] usb 6-1: Manufacturer: syz [ 88.495874][ T24] usb 6-1: SerialNumber: syz [ 88.513778][ T24] usb 6-1: config 0 descriptor?? [ 88.523639][ T6456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.662527][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 88.690940][ T5952] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 88.770572][ T6456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.917913][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 88.929919][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 88.936061][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 88.943860][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 88.952404][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 89.067420][ T161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 89.087030][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 89.101252][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 89.109106][ T161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 89.114263][ T161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 89.435180][ T5902] usb 9-1: string descriptor 0 read error: -71 [ 89.490405][ T5902] usbhid 9-1:109.0: can't add hid device: -71 [ 89.493030][ T5902] usbhid 9-1:109.0: probe with driver usbhid failed with error -71 [ 89.498618][ T5902] usb 9-1: USB disconnect, device number 3 [ 89.581964][ T5824] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657163][ T5797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660266][ T5797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721646][ T5797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.731084][ T5895] usb 6-1: USB disconnect, device number 12 [ 89.926664][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 90.026531][ T365] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 90.035998][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 90.046379][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 90.048874][ T365] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 90.051268][ T365] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 90.086578][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 90.095449][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 90.103021][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.116841][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.128698][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.135776][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.143623][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.150963][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.309558][ T6556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.310001][ T2324] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 90.361681][ T9] usb 8-1: usb_control_msg returned -32 [ 90.371372][ T9] usbtmc 8-1:16.0: can't read capabilities [ 90.672949][ T6538] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 90.675161][ T6569] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 90.684720][ T5531] usb 8-1: USB disconnect, device number 11 [ 90.745509][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 91.066516][ T365] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 91.072445][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 91.076683][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 91.079579][ T365] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 91.082567][ T365] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 91.146441][ T161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 91.153180][ T365] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 91.156903][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 91.159972][ T161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 91.163017][ T161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 92.106491][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 92.111974][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 92.114839][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 92.117792][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 92.120259][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 93.146613][ T41] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 93.153036][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 93.157137][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 93.159447][ T41] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 93.161852][ T41] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 93.226539][ T41] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 93.232697][ T365] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 93.235759][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 93.239035][ T41] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 93.242194][ T41] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 94.186485][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 94.192511][ T41] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 94.195602][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 94.198882][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 94.202041][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 95.226422][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 95.237060][ T41] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 95.240016][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 95.242367][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 95.244933][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 95.306355][ T41] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 95.311136][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 95.313933][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 95.316293][ T41] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 95.318691][ T41] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 96.266400][ T41] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 96.271060][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 96.274358][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 96.276807][ T41] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 96.279093][ T41] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 97.316367][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 97.321019][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 97.323777][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 97.326707][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 97.329969][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 97.386808][ T365] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 97.392148][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 97.396053][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 97.398635][ T365] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 97.401466][ T365] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 98.350253][ T365] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 98.357984][ T41] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 98.360180][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 98.368480][ T365] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 98.368503][ T365] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 98.394875][ T6607] ipt_rpfilter: unknown options [ 98.400181][ T6607] process 'syz.0.129' launched './file1' with NULL argv: empty string added [ 98.410717][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 98.429015][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 98.857551][ T6615] block2mtd: error: cannot open device /dev/loop0 [ 98.907663][ T6613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 98.910207][ T6613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.962734][ T6613] vhci_hcd vhci_hcd.0: Device attached [ 98.993074][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 99.092298][ T6621] batadv0: entered promiscuous mode [ 99.100599][ T6621] macsec1: entered promiscuous mode [ 99.108297][ T6621] macsec1: entered allmulticast mode [ 99.108314][ T6621] batadv0: entered allmulticast mode [ 99.112334][ T6621] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 99.139456][ T6621] batadv0: left allmulticast mode [ 99.141266][ T6621] batadv0: left promiscuous mode [ 99.266353][ T6105] usb 44-1: SetAddress Request (2) to port 0 [ 99.275370][ T6105] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 99.352145][ T6616] vhci_hcd: connection reset by peer [ 99.356073][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 99.359723][ T5824] vhci_hcd vhci_hcd.3: release socket [ 99.362910][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 99.386351][ T365] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 99.391991][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 99.397963][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 99.401654][ T365] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 99.408708][ T365] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 99.466559][ T102] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 99.472692][ T365] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 99.476318][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 99.479244][ T102] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 99.482168][ T102] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 99.566409][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 99.728107][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 99.731686][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 99.736535][ T24] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 99.739455][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.741979][ T24] usb 5-1: Product: syz [ 99.743391][ T24] usb 5-1: Manufacturer: syz [ 99.744864][ T24] usb 5-1: SerialNumber: syz [ 99.751680][ T24] usb 5-1: config 0 descriptor?? [ 99.759168][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 99.761261][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 99.777830][ T24] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input17 [ 99.786791][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.789427][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.792870][ T6638] netlink: 'syz.4.139': attribute type 18 has an invalid length. [ 99.822110][ T5824] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.825776][ T5824] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.832308][ T5824] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.846293][ T5824] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.919999][ T6638] ======================================================= [ 99.919999][ T6638] WARNING: The mand mount option has been deprecated and [ 99.919999][ T6638] and is ignored by this kernel. Remove the mand [ 99.919999][ T6638] option from the mount to silence this warning. [ 99.919999][ T6638] ======================================================= [ 100.169143][ T6645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.172371][ T6645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.273083][ T6645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.276758][ T6645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.353101][ T6645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.357742][ T6645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.411448][ T6645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.415262][ T6645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.416546][ T5952] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 100.427521][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 100.436487][ T365] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 100.441868][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 100.445365][ T365] (NULL device *): queue 0 connect admin queue failed (-6). [ 100.448297][ T365] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 100.450751][ T365] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 100.526689][ T5824] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.532615][ T5824] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.539919][ T5824] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.546964][ T5824] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.554079][ T5824] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.563106][ T5824] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.577504][ T5824] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.578228][ T24] usb 9-1: config 0 has no interfaces? [ 100.585048][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.588111][ T5824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.588920][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.594761][ T24] usb 9-1: Product: syz [ 100.595147][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 100.596585][ T24] usb 9-1: Manufacturer: syz [ 100.596602][ T24] usb 9-1: SerialNumber: syz [ 100.600409][ T24] usb 9-1: config 0 descriptor?? [ 100.606136][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.615457][ T5952] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 100.622748][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.628468][ T5952] usb 8-1: Product: syz [ 100.632607][ T5952] usb 8-1: Manufacturer: syz [ 100.638103][ T5952] usb 8-1: SerialNumber: syz [ 100.676758][ T5952] usb 8-1: config 0 descriptor?? [ 100.685205][ T5952] hub 8-1:0.0: bad descriptor, ignoring hub [ 100.690271][ T5952] hub 8-1:0.0: probe with driver hub failed with error -5 [ 100.713397][ T5952] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 100.819293][ T24] usb 9-1: USB disconnect, device number 4 [ 100.918565][ T5140] usb 5-1: reset full-speed USB device number 9 using dummy_hcd [ 101.246334][ T5895] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 101.267550][ T50] usb 8-1: USB disconnect, device number 12 [ 101.407657][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 101.411235][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.415949][ T5895] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 101.420112][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.423672][ T5895] usb 6-1: Product: syz [ 101.425541][ T5895] usb 6-1: Manufacturer: syz [ 101.427600][ T5895] usb 6-1: SerialNumber: syz [ 101.431983][ T5895] usb 6-1: config 0 descriptor?? [ 101.434910][ T5895] hub 6-1:0.0: bad descriptor, ignoring hub [ 101.437182][ T5895] hub 6-1:0.0: probe with driver hub failed with error -5 [ 101.441062][ T5895] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 101.471391][ T5895] input: failed to attach handler mousedev to device input19, error: -5 [ 101.476326][ T41] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 101.486409][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 101.490644][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 101.494213][ T41] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 101.497190][ T41] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 101.523988][ T6666] Cannot find add_set index 0 as target [ 101.546393][ T41] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 101.552527][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 101.555542][ T41] (NULL device *): queue 0 connect admin queue failed (-6). [ 101.558942][ T41] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 101.562295][ T41] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 101.795263][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 101.799273][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 102.506467][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 102.511635][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 102.514592][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 102.517633][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 102.519843][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 102.684973][ T5952] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 102.753078][ T6684] evm: overlay not supported [ 102.776347][ T42] kauditd_printk_skb: 137 callbacks suppressed [ 102.776361][ T42] audit: type=1804 audit(1785957063.439:150): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.149" name="/newroot/43/file0/file1" dev="overlay" ino=265 res=1 errno=0 [ 102.847990][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.852314][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.858473][ T5952] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 102.862469][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.865814][ T5952] usb 9-1: Product: syz [ 102.867834][ T5952] usb 9-1: Manufacturer: syz [ 102.869415][ T5952] usb 9-1: SerialNumber: syz [ 102.872391][ T5952] usb 9-1: config 0 descriptor?? [ 102.877557][ T5952] hub 9-1:0.0: bad descriptor, ignoring hub [ 102.879489][ T5952] hub 9-1:0.0: probe with driver hub failed with error -5 [ 102.885792][ T5952] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input20 [ 102.895897][ T5952] input: failed to attach handler mousedev to device input20, error: -5 [ 103.176140][ T5902] IPVS: starting estimator thread 0... [ 103.266372][ T6687] IPVS: using max 43 ests per chain, 103200 per kthread [ 103.546542][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 103.553420][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 103.557400][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 103.560254][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 103.563882][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 103.636449][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 103.641259][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 103.644103][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 103.646732][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 103.649519][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 103.904121][ T6697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.153'. [ 103.916656][ T24] usb 5-1: USB disconnect, device number 9 [ 104.196352][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 104.288110][ T5895] usb 6-1: reset full-speed USB device number 13 using dummy_hcd [ 104.358345][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 104.361624][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.365090][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.367915][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.370406][ T24] usb 5-1: Product: syz [ 104.371797][ T24] usb 5-1: Manufacturer: syz [ 104.373233][ T24] usb 5-1: SerialNumber: syz [ 104.377119][ T24] usb 5-1: config 0 descriptor?? [ 104.384650][ T24] usb 5-1: selecting invalid altsetting 0 [ 104.388144][ T6105] usb 44-1: device descriptor read/8, error -110 [ 104.586421][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 104.591830][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 104.594657][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 104.597105][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 104.599507][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 104.676478][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 104.790206][ T6105] usb usb44-port1: attempt power cycle [ 104.846343][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 104.852103][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 104.855034][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.858910][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.862035][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.865359][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.870346][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.873093][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.079363][ T9] usb 8-1: usb_control_msg returned -32 [ 105.081231][ T9] usbtmc 8-1:16.0: can't read capabilities [ 105.352660][ T6105] usb usb44-port1: unable to enumerate USB device [ 105.389969][ T6701] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 105.393794][ T6738] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 105.397670][ T9] usb 8-1: USB disconnect, device number 13 [ 105.619659][ T5952] usb 9-1: USB disconnect, device number 5 [ 105.626369][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 105.632108][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 105.635582][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 105.638627][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 105.641699][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 105.716337][ T102] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 105.720970][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 105.723668][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 105.725933][ T102] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 105.728330][ T102] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 105.926427][ T5952] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 106.027372][ T6750] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 106.086318][ T5952] usb 9-1: Using ep0 maxpacket: 8 [ 106.089582][ T5952] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 106.092709][ T5952] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.097396][ T5952] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.102239][ T5952] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.107185][ T5952] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.111927][ T5952] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.120850][ T5952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.339134][ T5952] usb 9-1: usb_control_msg returned -32 [ 106.341270][ T5952] usbtmc 9-1:16.0: can't read capabilities [ 106.583587][ T6753] UDC core: g1: couldn't find an available UDC or it's busy [ 106.592885][ T6741] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 106.595420][ T5826] usb 9-1: USB disconnect, device number 6 [ 106.676774][ T36] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 106.682962][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 106.686947][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 106.689860][ T36] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 106.692796][ T36] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 106.866437][ T5952] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 106.918869][ T5895] usb 5-1: USB disconnect, device number 10 [ 107.028217][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 107.032520][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.039144][ T5952] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 107.042861][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.046038][ T5952] usb 8-1: Product: syz [ 107.048367][ T5952] usb 8-1: Manufacturer: syz [ 107.050322][ T5952] usb 8-1: SerialNumber: syz [ 107.054499][ T5952] usb 8-1: config 0 descriptor?? [ 107.057935][ T6758] FAULT_INJECTION: forcing a failure. [ 107.057935][ T6758] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.058874][ T5952] hub 8-1:0.0: bad descriptor, ignoring hub [ 107.062606][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.0.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.062631][ T6758] Tainted: [L]=SOFTLOCKUP [ 107.062636][ T6758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.062647][ T6758] Call Trace: [ 107.062654][ T6758] [ 107.062662][ T6758] dump_stack_lvl+0x100/0x190 [ 107.062690][ T6758] should_fail_ex.cold+0x5/0xa [ 107.062709][ T6758] _copy_to_user+0x32/0xd0 [ 107.062739][ T6758] simple_read_from_buffer+0xcb/0x170 [ 107.062768][ T6758] proc_fail_nth_read+0x1af/0x230 [ 107.062794][ T6758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.062819][ T6758] ? rw_verify_area+0xce/0x6d0 [ 107.062842][ T6758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.062864][ T6758] vfs_read+0x1e4/0xb40 [ 107.062885][ T6758] ? __pfx_vfs_read+0x10/0x10 [ 107.062899][ T6758] ? find_held_lock+0x2b/0x80 [ 107.062922][ T6758] ? __fget_files+0x215/0x3d0 [ 107.062944][ T6758] ? __fget_files+0x21f/0x3d0 [ 107.062968][ T6758] ksys_read+0x12a/0x250 [ 107.062984][ T6758] ? __pfx_ksys_read+0x10/0x10 [ 107.063009][ T6758] do_int80_emulation+0x14b/0x720 [ 107.063037][ T6758] asm_int80_emulation+0x1a/0x20 [ 107.063055][ T6758] RIP: 0023:0xf71e74eb [ 107.063071][ T6758] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 107.063088][ T6758] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.063107][ T6758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54a65d0 [ 107.063118][ T6758] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 107.063128][ T6758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.063138][ T6758] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.063148][ T6758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.063173][ T6758] [ 107.141772][ T5952] hub 8-1:0.0: probe with driver hub failed with error -5 [ 107.152894][ T5952] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 107.246535][ T5840] usb 6-1: USB disconnect, device number 13 [ 107.416339][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 107.588042][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 107.597071][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 107.601433][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.606368][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.611888][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.617521][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.624661][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.629785][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.646749][ T2324] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.707079][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 107.712083][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 107.715665][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 107.718716][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 107.721567][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 107.796719][ T2324] usb 5-1: Using ep0 maxpacket: 8 [ 107.796938][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 107.805161][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 107.810009][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 107.813231][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 107.819335][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 107.825236][ T2324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.831707][ T2324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.835538][ T2324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.840568][ T2324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.843143][ T9] usb 9-1: usb_control_msg returned -32 [ 107.847805][ T9] usbtmc 9-1:16.0: can't read capabilities [ 107.848163][ T2324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.853233][ T2324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.112355][ T6762] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 108.206676][ T2324] usb 5-1: GET_CAPABILITIES returned 0 [ 108.208485][ T2324] usbtmc 5-1:16.0: can't read capabilities [ 108.238069][ T9] usb 9-1: USB disconnect, device number 7 [ 108.442494][ T5902] usb 5-1: USB disconnect, device number 11 [ 108.445246][ T6778] Config c/1 of g1 needs at least one function. [ 108.452230][ T6778] udc dummy_udc.0: failed to start g1: -22 [ 108.454160][ T6778] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 108.458712][ T6778] UDC core: g1: couldn't find an available UDC or it's busy [ 108.736365][ T5952] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 108.746444][ T102] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 108.752829][ T365] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 108.756688][ T102] (NULL device *): queue 0 connect admin queue failed (-6). [ 108.759778][ T102] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 108.763035][ T102] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 108.865249][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 108.887661][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.892617][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.899438][ T5952] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 108.902283][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.906088][ T5952] usb 6-1: Product: syz [ 108.907523][ T5952] usb 6-1: Manufacturer: syz [ 108.909002][ T5952] usb 6-1: SerialNumber: syz [ 108.914575][ T5952] usb 6-1: config 0 descriptor?? [ 108.920195][ T5952] hub 6-1:0.0: bad descriptor, ignoring hub [ 108.922043][ T5952] hub 6-1:0.0: probe with driver hub failed with error -5 [ 108.926027][ T5952] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input22 [ 108.933722][ T5952] input: failed to attach handler mousedev to device input22, error: -5 [ 109.011577][ T6785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.014942][ T6785] IPv6: NLM_F_CREATE should be set when creating new route [ 109.066647][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.070211][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.073144][ T6788] 9p: Bad value for 'wfdno' [ 109.111138][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.117962][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.146664][ T5902] usb 6-1: USB disconnect, device number 14 [ 109.176592][ T5824] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.180053][ T5824] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.183516][ T5824] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.187805][ T5824] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.192036][ T5824] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.195566][ T5824] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.199268][ T5824] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.202693][ T5824] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.336506][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.487984][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.490896][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.494339][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.498146][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.503927][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.506982][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.509553][ T9] usb 5-1: Product: syz [ 109.510894][ T9] usb 5-1: Manufacturer: syz [ 109.518723][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 109.521068][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 109.526456][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 109.528987][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 109.709889][ T6800] [U] ¥ [ 109.710997][ T6800] [U] [ 109.711894][ T6800] [U] [ 109.712862][ T6800] [U] [ 109.715322][ T6800] [U] [ 109.716383][ T6800] [U] [ 109.717470][ T6800] [U] [ 109.718506][ T6800] [U] [ 109.720075][ T6800] [U] [ 109.721134][ T6800] [U] [ 109.722157][ T6800] [U] [ 109.723152][ T6800] [U] [ 109.724242][ T6800] [U] [ 109.725366][ T6800] [U] [ 109.726441][ T6800] [U] [ 109.727495][ T6800] [U] [ 109.728085][ T9] usb 5-1: USB disconnect, device number 12 [ 109.730748][ T6800] [U] [ 109.731904][ T6800] [U] [ 109.732848][ T6800] [U] [ 109.733746][ T6800] [U] [ 109.734730][ T6800] [U] [ 109.735659][ T6800] [U] [ 109.736703][ T6800] [U] [ 109.737734][ T6800] [U] [ 109.738926][ T6800] [U] [ 109.740006][ T6800] [U] [ 109.740910][ T6800] [U] [ 109.741799][ T6800] [U] [ 109.743823][ T6800] [U] [ 109.744753][ T6800] [U] [ 109.745663][ T6800] [U] [ 109.746556][ T6800] [U] [ 109.747596][ T6800] [U] [ 109.748504][ T6800] [U] [ 109.749409][ T6800] [U] [ 109.750288][ T6800] [U] [ 109.751197][ T6800] [U] [ 109.752084][ T6800] [U] [ 109.752984][ T6800] [U] [ 109.753875][ T6800] [U] [ 109.754950][ T6800] [U] [ 109.755645][ T6801] netlink: 'syz.3.174': attribute type 2 has an invalid length. [ 109.755864][ T6800] [U] [ 109.755882][ T6800] [U] [ 109.760967][ T6800] [U] [ 109.762212][ T5902] usb 8-1: USB disconnect, device number 14 [ 109.764924][ T6800] [U] [ 109.765971][ T6800] [U] [ 109.766956][ T6800] [U] [ 109.767854][ T6800] [U] [ 109.769851][ T6800] [U] [ 109.770763][ T6800] [U] [ 109.771676][ T6800] [U] [ 109.772597][ T6800] [U] [ 109.779340][ T6800] [U] [ 109.780272][ T6800] [U] [ 109.781181][ T6800] [U] [ 109.782081][ T6800] [U] [ 109.787329][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 109.788552][ T6800] [U] [ 109.793037][ T6800] [U] [ 109.793932][ T6800] [U] [ 109.794813][ T6800] [U] [ 109.796106][ T6800] [U] [ 109.796738][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 109.797014][ T6800] [U] [ 109.799747][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 109.800660][ T6800] [U] [ 109.800686][ T6800] [U] [ 109.803225][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 109.805368][ T6800] [U] [ 109.808024][ T6800] [U] [ 109.809035][ T6800] [U] [ 109.810053][ T6800] [U] [ 109.811805][ T6800] [U] [ 109.812366][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 109.812656][ T6800] [U] [ 109.812674][ T6800] [U] [ 109.812690][ T6800] [U] [ 109.819273][ T6800] [U] [ 109.820332][ T6800] [U] [ 109.821387][ T6800] [U] [ 109.822431][ T6800] [U] [ 109.823820][ T6800] [U] [ 109.824938][ T6800] [U] [ 109.825987][ T6800] [U] [ 109.826866][ T6800] [U] [ 109.828481][ T6800] [U] [ 109.829506][ T6800] [U] [ 109.830551][ T6800] [U] [ 109.831559][ T6800] [U] [ 109.832640][ T6800] [U] [ 109.833670][ T6800] [U] [ 109.834747][ T6800] [U] [ 109.835753][ T6800] [U] [ 109.841861][ T6800] [U] [ 109.842799][ T6800] [U] [ 109.843687][ T6800] [U] [ 109.844608][ T6800] [U] [ 109.851412][ T6800] [U] [ 109.852342][ T6800] [U] [ 109.853240][ T6800] [U] [ 109.854134][ T6800] [U] [ 109.866366][ T6800] [U] [ 109.867024][ T161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 109.867425][ T6800] [U] [ 109.873834][ T6800] [U] [ 109.874834][ T6800] [U] [ 109.878986][ T6802] input: syz0 as /devices/virtual/input/input23 [ 109.883803][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 109.891040][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 109.896083][ T161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 109.903725][ T161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 109.905979][ T6800] [U] [ 109.907310][ T6800] [U] [ 109.908096][ T6800] [U] [ 109.909002][ T6800] [U] [ 109.925202][ T6800] [U] [ 109.926434][ T6800] [U] [ 109.927636][ T6800] [U] [ 109.928620][ T6800] [U] [ 109.950535][ T6801] : entered promiscuous mode [ 109.951209][ T6800] [U] [ 109.953577][ T6800] [U] [ 109.954462][ T6800] [U] [ 109.955319][ T6800] [U] [ 109.960848][ T6800] [U] [ 109.961799][ T6800] [U] [ 109.962661][ T6800] [U] [ 109.963531][ T6800] [U] [ 109.964820][ T6800] [U] [ 109.965710][ T6800] [U] [ 109.966587][ T6800] [U] [ 109.967442][ T6800] [U] [ 109.969073][ T6800] [U] [ 109.969956][ T6800] [U] [ 109.970834][ T6800] [U] [ 109.971754][ T6800] [U] [ 109.973031][ T6800] [U] [ 109.974070][ T6800] [U] [ 109.975115][ T6800] [U] [ 110.012891][ T6799] [U] [ 110.111051][ T6816] Config c/1 of g1 needs at least one function. [ 110.130997][ T6816] udc dummy_udc.0: failed to start g1: -22 [ 110.133343][ T6816] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 110.139884][ T6816] UDC core: g1: couldn't find an available UDC or it's busy [ 110.249422][ T6824] lo: entered allmulticast mode [ 110.258256][ T6824] FAULT_INJECTION: forcing a failure. [ 110.258256][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 110.269817][ T6824] CPU: 3 UID: 0 PID: 6824 Comm: syz.1.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.269837][ T6824] Tainted: [L]=SOFTLOCKUP [ 110.269841][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.269848][ T6824] Call Trace: [ 110.269852][ T6824] [ 110.269856][ T6824] dump_stack_lvl+0x100/0x190 [ 110.269874][ T6824] should_fail_ex.cold+0x5/0xa [ 110.269888][ T6824] should_failslab+0xc2/0x120 [ 110.269910][ T6824] __kmalloc_noprof+0xfc/0x820 [ 110.269936][ T6824] ? rcu_is_watching+0x12/0xc0 [ 110.269957][ T6824] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 110.269987][ T6824] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 110.270016][ T6824] genl_family_rcv_msg_doit+0xc7/0x300 [ 110.270042][ T6824] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.270065][ T6824] ? genl_get_cmd+0x3e7/0x760 [ 110.270094][ T6824] ? __dev_queue_xmit+0xa33/0x4970 [ 110.270110][ T6824] ? __radix_tree_lookup+0x217/0x2b0 [ 110.270127][ T6824] genl_rcv_msg+0x560/0x800 [ 110.270144][ T6824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.270159][ T6824] ? __pfx_ethnl_default_doit+0x10/0x10 [ 110.270176][ T6824] netlink_rcv_skb+0x159/0x420 [ 110.270190][ T6824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.270205][ T6824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.270223][ T6824] ? netlink_deliver_tap+0x1ae/0xcc0 [ 110.270237][ T6824] genl_rcv+0x28/0x40 [ 110.270250][ T6824] netlink_unicast+0x585/0x850 [ 110.270264][ T6824] ? __pfx_netlink_unicast+0x10/0x10 [ 110.270281][ T6824] netlink_sendmsg+0x8b0/0xda0 [ 110.270296][ T6824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.270311][ T6824] ? apparmor_socket_sendmsg+0x15b/0x270 [ 110.270326][ T6824] ____sys_sendmsg+0xa4d/0xbe0 [ 110.270337][ T6824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.270351][ T6824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.270369][ T6824] ___sys_sendmsg+0x190/0x1e0 [ 110.270382][ T6824] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.270401][ T6824] ? find_held_lock+0x2b/0x80 [ 110.270425][ T6824] __sys_sendmsg+0x160/0x210 [ 110.270442][ T6824] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.270462][ T6824] ? __pfx_ksys_write+0x10/0x10 [ 110.270477][ T6824] __do_fast_syscall_32+0xe7/0x970 [ 110.270492][ T6824] ? lockdep_hardirqs_on+0x78/0x100 [ 110.270508][ T6824] do_fast_syscall_32+0x32/0x70 [ 110.270523][ T6824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.270538][ T6824] RIP: 0023:0xf7f58fec [ 110.270554][ T6824] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 110.270559][ T6824] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 110.270571][ T6824] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000e00 [ 110.270578][ T6824] RDX: 0000000000041840 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.270584][ T6824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.270591][ T6824] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.270597][ T6824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.270610][ T6824] [ 110.270886][ T6824] lo: left allmulticast mode [ 110.393439][ T6824] bond0: entered promiscuous mode [ 110.399811][ T6824] bond_slave_0: entered promiscuous mode [ 110.402389][ T6824] bond_slave_1: entered promiscuous mode [ 110.412305][ T6824] batadv0: entered promiscuous mode [ 110.422665][ T6824] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 110.430462][ T6824] bond0: left promiscuous mode [ 110.432470][ T6824] bond_slave_0: left promiscuous mode [ 110.434896][ T6824] bond_slave_1: left promiscuous mode [ 110.443898][ T6824] batadv0: left promiscuous mode [ 110.465130][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.468881][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.640850][ T6845] block2mtd: error: cannot open device /dev/loop0 [ 110.641944][ T42] audit: type=1326 audit(1785957071.299:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.668311][ T42] audit: type=1326 audit(1785957071.339:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fdf017 code=0x7ffc0000 [ 110.686190][ T42] audit: type=1326 audit(1785957071.339:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.722680][ T42] audit: type=1326 audit(1785957071.339:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.732956][ T42] audit: type=1326 audit(1785957071.339:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fdf017 code=0x7ffc0000 [ 110.742063][ T42] audit: type=1326 audit(1785957071.339:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.750416][ T42] audit: type=1326 audit(1785957071.339:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fdf017 code=0x7ffc0000 [ 110.759524][ T42] audit: type=1326 audit(1785957071.339:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.765202][ T42] audit: type=1326 audit(1785957071.339:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fdf017 code=0x7ffc0000 [ 110.771115][ T42] audit: type=1326 audit(1785957071.339:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.4.178" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 110.826425][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 110.832631][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 110.837888][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 110.840108][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 110.842437][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 110.928308][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 111.097636][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 111.100865][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 111.105637][ T9] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 111.108633][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.111275][ T9] usb 6-1: Product: syz [ 111.112717][ T9] usb 6-1: Manufacturer: syz [ 111.114408][ T9] usb 6-1: SerialNumber: syz [ 111.119567][ T9] usb 6-1: config 0 descriptor?? [ 111.123446][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 111.125750][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 111.132079][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 111.174644][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.183834][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.187615][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.191855][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.194952][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.198305][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.201431][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.204504][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.208156][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.211339][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 111.219700][ T5902] hid-generic 0004:FFFFFFFF:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.426343][ T2324] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 111.533487][ T6862] Config c/1 of g1 needs at least one function. [ 111.536113][ T6862] udc dummy_udc.0: failed to start g1: -22 [ 111.539185][ T6862] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 111.544828][ T6862] UDC core: g1: couldn't find an available UDC or it's busy [ 111.598275][ T2324] usb 9-1: config 0 has no interfaces? [ 111.600792][ T2324] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 111.604481][ T2324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.610848][ T2324] usb 9-1: config 0 descriptor?? [ 111.641401][ T6865] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 111.643514][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.646119][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 111.658349][ T6865] FAULT_INJECTION: forcing a failure. [ 111.658349][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 111.662623][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.3.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.662653][ T6865] Tainted: [L]=SOFTLOCKUP [ 111.662657][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.662663][ T6865] Call Trace: [ 111.662670][ T6865] [ 111.662674][ T6865] dump_stack_lvl+0x100/0x190 [ 111.662692][ T6865] should_fail_ex.cold+0x5/0xa [ 111.662709][ T6865] should_failslab+0xc2/0x120 [ 111.662726][ T6865] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 111.662741][ T6865] ? __alloc_skb+0x5b7/0x710 [ 111.662756][ T6865] ? __alloc_skb+0x140/0x710 [ 111.662773][ T6865] __alloc_skb+0x140/0x710 [ 111.662788][ T6865] ? __alloc_skb+0x5b7/0x710 [ 111.662802][ T6865] ? __pfx___alloc_skb+0x10/0x10 [ 111.662821][ T6865] netlink_alloc_large_skb+0x69/0x150 [ 111.662836][ T6865] netlink_sendmsg+0x680/0xda0 [ 111.662852][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.662867][ T6865] ? apparmor_socket_sendmsg+0x15b/0x270 [ 111.662882][ T6865] ____sys_sendmsg+0xa4d/0xbe0 [ 111.662894][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.662908][ T6865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.662926][ T6865] ___sys_sendmsg+0x190/0x1e0 [ 111.662940][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.662960][ T6865] ? find_held_lock+0x2b/0x80 [ 111.662983][ T6865] __sys_sendmsg+0x160/0x210 [ 111.663000][ T6865] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.663020][ T6865] ? __pfx_ksys_write+0x10/0x10 [ 111.663033][ T6865] __do_fast_syscall_32+0xe7/0x970 [ 111.663050][ T6865] ? lockdep_hardirqs_on+0x78/0x100 [ 111.663065][ T6865] do_fast_syscall_32+0x32/0x70 [ 111.663081][ T6865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.663097][ T6865] RIP: 0023:0xf6fcefec [ 111.663111][ T6865] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 111.663116][ T6865] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 111.663128][ T6865] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000180 [ 111.663135][ T6865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.663141][ T6865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.663147][ T6865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.663154][ T6865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.663167][ T6865] [ 111.877070][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 111.882589][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 111.885725][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 111.889096][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 111.891806][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 111.913040][ T6866] vhci_hcd: connection closed [ 111.915779][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 111.920439][ T5824] vhci_hcd vhci_hcd.3: release socket [ 111.922812][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 111.943523][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 111.947260][ T161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 111.947353][ T6858] bridge_slave_1: left allmulticast mode [ 111.952827][ T102] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 111.954894][ T6858] bridge_slave_1: left promiscuous mode [ 111.957154][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.964565][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 111.967390][ T161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 111.967985][ T6858] bridge_slave_0: left allmulticast mode [ 111.972116][ T6858] bridge_slave_0: left promiscuous mode [ 111.973915][ T161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 111.974623][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.224267][ T6874] block2mtd: error: cannot open device /dev/loop0 [ 112.255335][ T5840] usb 9-1: USB disconnect, device number 8 [ 112.325742][ T6877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 112.327817][ T6877] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.330294][ T6877] vhci_hcd vhci_hcd.0: Device attached [ 112.336923][ T6877] tipc: Started in network mode [ 112.338691][ T6877] tipc: Node identity 4, cluster identity 4711 [ 112.341614][ T6877] tipc: Node number set to 4 [ 112.596378][ T6105] usb 37-1: SetAddress Request (2) to port 0 [ 112.598406][ T6105] usb 37-1: new SuperSpeed USB device number 2 using vhci_hcd [ 112.675589][ T6881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 112.705370][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.906696][ T48] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 112.912218][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 112.915349][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 112.918565][ T48] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 112.920918][ T48] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 113.147948][ T6878] vhci_hcd: connection reset by peer [ 113.153025][ T5824] vhci_hcd vhci_hcd.0: stop threads [ 113.155170][ T5824] vhci_hcd vhci_hcd.0: release socket [ 113.157234][ T5824] vhci_hcd vhci_hcd.0: disconnect device [ 113.735341][ T6898] Config c/1 of g1 needs at least one function. [ 113.738304][ T6898] udc dummy_udc.0: failed to start g1: -22 [ 113.739401][ T6897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.741315][ T6898] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 113.749332][ T6898] UDC core: g1: couldn't find an available UDC or it's busy [ 113.756672][ T6900] block2mtd: error: cannot open device /dev/loop0 [ 113.826436][ T1347] usb 6-1: USB disconnect, device number 15 [ 113.931593][ T6914] 9p: Bad value for 'rfdno' [ 113.946309][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 113.956568][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 113.961956][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 113.967303][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 113.971199][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 114.036414][ T161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 114.045079][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 114.048630][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 114.050190][ T6919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.206'. [ 114.051576][ T161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 114.057681][ T161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 114.226357][ T6066] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 114.378725][ T6066] usb 5-1: not running at top speed; connect to a high speed hub [ 114.385709][ T6066] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 114.394808][ T6066] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 114.399232][ T6066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.402744][ T6066] usb 5-1: Product: syz [ 114.404786][ T6066] usb 5-1: Manufacturer: syz [ 114.407119][ T6066] usb 5-1: SerialNumber: syz [ 114.412073][ T6066] oti6858 5-1:1.0: oti6858 converter detected [ 114.429960][ T6066] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 114.857382][ T6929] block2mtd: error: cannot open device /dev/loop0 [ 114.902028][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 114.926393][ T5824] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.928999][ T5824] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.931583][ T5824] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.934206][ T5824] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.987143][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 114.991855][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 114.996463][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 114.999017][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 115.001955][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 115.056313][ T6066] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 115.135254][ T6936] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.139540][ T6936] block device autoloading is deprecated and will be removed. [ 115.144707][ T6916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.157114][ T6916] block device autoloading is deprecated and will be removed. [ 115.174885][ T6937] FAULT_INJECTION: forcing a failure. [ 115.174885][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 115.180203][ T6937] CPU: 3 UID: 0 PID: 6937 Comm: syz.1.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.180233][ T6937] Tainted: [L]=SOFTLOCKUP [ 115.180239][ T6937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.180249][ T6937] Call Trace: [ 115.180257][ T6937] [ 115.180265][ T6937] dump_stack_lvl+0x100/0x190 [ 115.180290][ T6937] should_fail_ex.cold+0x5/0xa [ 115.180310][ T6937] should_failslab+0xc2/0x120 [ 115.180337][ T6937] __kmalloc_noprof+0xfc/0x820 [ 115.180359][ T6937] ? rcu_is_watching+0x12/0xc0 [ 115.180383][ T6937] ? tomoyo_realpath_from_path+0xb6/0x690 [ 115.180414][ T6937] tomoyo_realpath_from_path+0xb6/0x690 [ 115.180445][ T6937] tomoyo_mount_acl+0x1b6/0x8b0 [ 115.180478][ T6937] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 115.180526][ T6937] ? __pfx___schedule+0x10/0x10 [ 115.180545][ T6937] ? kernel_text_address+0x8d/0x100 [ 115.180597][ T6937] ? tomoyo_domain+0xb2/0x150 [ 115.180615][ T6937] ? tomoyo_profile+0x47/0x60 [ 115.180634][ T6937] tomoyo_mount_permission+0x214/0x460 [ 115.180658][ T6937] ? tomoyo_mount_permission+0x1f6/0x460 [ 115.180691][ T6937] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 115.180731][ T6937] security_sb_mount+0xdd/0x270 [ 115.180754][ T6937] path_mount+0x158/0x23d0 [ 115.180780][ T6937] ? __pfx_path_mount+0x10/0x10 [ 115.180800][ T6937] ? lockdep_hardirqs_on+0x78/0x100 [ 115.180826][ T6937] ? putname+0xb1/0x110 [ 115.180844][ T6937] ? kmem_cache_free+0x127/0x6b0 [ 115.180870][ T6937] ? __ia32_sys_mount+0x292/0x310 [ 115.180890][ T6937] __ia32_sys_mount+0x292/0x310 [ 115.180913][ T6937] ? __pfx___ia32_sys_mount+0x10/0x10 [ 115.180942][ T6937] __do_fast_syscall_32+0xe7/0x970 [ 115.180966][ T6937] ? lockdep_hardirqs_on+0x78/0x100 [ 115.180990][ T6937] do_fast_syscall_32+0x32/0x70 [ 115.181015][ T6937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.181037][ T6937] RIP: 0023:0xf7f58fec [ 115.181060][ T6937] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 115.181068][ T6937] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 115.181087][ T6937] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 115.181098][ T6937] RDX: 0000000080000000 RSI: 0000000001000080 RDI: 0000000000000000 [ 115.181108][ T6937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.181118][ T6937] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.181128][ T6937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.181152][ T6937] [ 115.181297][ T6937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.193467][ T6939] JFS: discard option not supported on device [ 115.269863][ T6939] Mount JFS Failure: -22 [ 115.269876][ T6939] jfs_mount failed w/return code = -22 [ 115.273149][ T6066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 115.273170][ T6066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.274899][ T6066] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 115.274963][ T6066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.274975][ T6066] usb 8-1: Product: syz [ 115.274983][ T6066] usb 8-1: Manufacturer: syz [ 115.274991][ T6066] usb 8-1: SerialNumber: syz [ 115.277080][ T6066] usb 8-1: config 0 descriptor?? [ 115.279106][ T6066] hub 8-1:0.0: bad descriptor, ignoring hub [ 115.279120][ T6066] hub 8-1:0.0: probe with driver hub failed with error -5 [ 115.281897][ T6066] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input26 [ 115.515509][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'. [ 115.526761][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 115.660224][ T9] usb 5-1: USB disconnect, device number 13 [ 115.686557][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 115.694478][ T9] oti6858 5-1:1.0: device disconnected [ 115.859281][ T6951] FAULT_INJECTION: forcing a failure. [ 115.859281][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 115.863858][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.1.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.863878][ T6951] Tainted: [L]=SOFTLOCKUP [ 115.863882][ T6951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.863889][ T6951] Call Trace: [ 115.863894][ T6951] [ 115.863899][ T6951] dump_stack_lvl+0x100/0x190 [ 115.863918][ T6951] should_fail_ex.cold+0x5/0xa [ 115.863932][ T6951] should_failslab+0xc2/0x120 [ 115.863948][ T6951] __kmalloc_noprof+0xfc/0x820 [ 115.863962][ T6951] ? rcu_is_watching+0x12/0xc0 [ 115.863975][ T6951] ? tomoyo_realpath_from_path+0xb6/0x690 [ 115.863996][ T6951] tomoyo_realpath_from_path+0xb6/0x690 [ 115.864017][ T6951] tomoyo_path_number_perm+0x23c/0x580 [ 115.864032][ T6951] ? tomoyo_path_number_perm+0x22e/0x580 [ 115.864048][ T6951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.864063][ T6951] ? get_pid_task+0x106/0x250 [ 115.864090][ T6951] ? find_held_lock+0x2b/0x80 [ 115.864104][ T6951] ? __fget_files+0x215/0x3d0 [ 115.864114][ T6951] ? hook_file_ioctl_common+0x140/0x440 [ 115.864128][ T6951] ? __fget_files+0x215/0x3d0 [ 115.864141][ T6951] ? __fget_files+0x21f/0x3d0 [ 115.864154][ T6951] security_file_ioctl_compat+0xd3/0x230 [ 115.864170][ T6951] __ia32_compat_sys_ioctl+0xc2/0x360 [ 115.864188][ T6951] __do_fast_syscall_32+0xe7/0x970 [ 115.864205][ T6951] ? lockdep_hardirqs_on+0x78/0x100 [ 115.864221][ T6951] do_fast_syscall_32+0x32/0x70 [ 115.864237][ T6951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.864252][ T6951] RIP: 0023:0xf7f58fec [ 115.864267][ T6951] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 115.864272][ T6951] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 115.864294][ T6951] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040505412 [ 115.864303][ T6951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.864309][ T6951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.864315][ T6951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.864321][ T6951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.864336][ T6951] [ 115.864385][ T6951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.026620][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.033032][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.036090][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.038636][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 116.041547][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 116.116395][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.121435][ T161] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.125111][ T48] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.128063][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 116.130909][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 116.176919][ T6958] block2mtd: error: cannot open device /dev/loop0 [ 116.646789][ T6984] FAULT_INJECTION: forcing a failure. [ 116.646789][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 116.652251][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.0.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.652279][ T6984] Tainted: [L]=SOFTLOCKUP [ 116.652285][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.652295][ T6984] Call Trace: [ 116.652302][ T6984] [ 116.652308][ T6984] dump_stack_lvl+0x100/0x190 [ 116.652333][ T6984] should_fail_ex.cold+0x5/0xa [ 116.652353][ T6984] should_failslab+0xc2/0x120 [ 116.652376][ T6984] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 116.652399][ T6984] ? __get_vm_area_node+0x101/0x330 [ 116.652426][ T6984] __get_vm_area_node+0x101/0x330 [ 116.652452][ T6984] __vmalloc_node_range_noprof+0x228/0x1630 [ 116.652477][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.652542][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.652567][ T6984] ? rcu_read_unlock+0x17/0x60 [ 116.652594][ T6984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.652618][ T6984] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 116.652648][ T6984] ? rcu_is_watching+0x12/0xc0 [ 116.652669][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.652698][ T6984] __vmalloc_node_noprof+0xad/0xf0 [ 116.652721][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.652747][ T6984] fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.652771][ T6984] kvm_arch_vcpu_create+0x529/0xab0 [ 116.652797][ T6984] kvm_vm_ioctl+0x752/0x4180 [ 116.652824][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.652847][ T6984] ? stack_trace_save+0x8e/0xc0 [ 116.652868][ T6984] ? __pfx_stack_trace_save+0x10/0x10 [ 116.652890][ T6984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 116.652911][ T6984] ? __lock_acquire+0x49f/0x1a40 [ 116.652935][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.652956][ T6984] ? kasan_save_stack+0x3f/0x50 [ 116.652975][ T6984] ? kasan_save_stack+0x30/0x50 [ 116.652993][ T6984] ? kasan_save_track+0x14/0x30 [ 116.653011][ T6984] ? kasan_save_free_info+0x3b/0x70 [ 116.653026][ T6984] ? __kasan_slab_free+0x5f/0x80 [ 116.653045][ T6984] ? kfree+0x22b/0x6c0 [ 116.653058][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.653077][ T6984] ? security_file_ioctl_compat+0xd3/0x230 [ 116.653097][ T6984] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 116.653142][ T6984] ? __do_fast_syscall_32+0xe7/0x970 [ 116.653165][ T6984] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 116.653191][ T6984] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 116.653239][ T6984] ? kasan_quarantine_put+0x104/0x240 [ 116.653257][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 116.653278][ T6984] ? find_held_lock+0x2b/0x80 [ 116.653297][ T6984] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.653317][ T6984] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.653342][ T6984] ? tomoyo_path_number_perm+0x188/0x580 [ 116.653365][ T6984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.653386][ T6984] ? get_pid_task+0x106/0x250 [ 116.653413][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.653436][ T6984] ? do_vfs_ioctl+0x226/0x13e0 [ 116.653458][ T6984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.653481][ T6984] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 116.653506][ T6984] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 116.653533][ T6984] ? find_held_lock+0x2b/0x80 [ 116.653553][ T6984] ? __fget_files+0x215/0x3d0 [ 116.653569][ T6984] ? hook_file_ioctl_common+0x140/0x440 [ 116.653597][ T6984] ? __fget_files+0x21f/0x3d0 [ 116.653617][ T6984] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 116.653641][ T6984] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 116.653668][ T6984] __do_fast_syscall_32+0xe7/0x970 [ 116.653700][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 116.653723][ T6984] do_fast_syscall_32+0x32/0x70 [ 116.653747][ T6984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.653768][ T6984] RIP: 0023:0xf7fe5fec [ 116.653791][ T6984] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 116.653798][ T6984] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 116.653814][ T6984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 116.653825][ T6984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.653835][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.653846][ T6984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.653856][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.653878][ T6984] [ 116.654183][ T6984] syz.0.226: vmalloc error: size 2496, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 116.693796][ T6988] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 116.696126][ T6984] ,cpuset= [ 116.713810][ T6988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.717035][ T6984] /,mems_allowed=0-1 [ 116.839457][ T6984] CPU: 2 UID: 0 PID: 6984 Comm: syz.0.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.839485][ T6984] Tainted: [L]=SOFTLOCKUP [ 116.839490][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.839500][ T6984] Call Trace: [ 116.839506][ T6984] [ 116.839512][ T6984] dump_stack_lvl+0x100/0x190 [ 116.839537][ T6984] warn_alloc.cold+0x94/0xa8 [ 116.839554][ T6984] ? __pfx_warn_alloc+0x10/0x10 [ 116.839572][ T6984] ? __kasan_kmalloc+0x8a/0xb0 [ 116.839605][ T6984] ? __get_vm_area_node+0x208/0x330 [ 116.839649][ T6984] __vmalloc_node_range_noprof+0xccd/0x1630 [ 116.839681][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.839706][ T6984] ? rcu_read_unlock+0x17/0x60 [ 116.839735][ T6984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.839763][ T6984] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 116.839796][ T6984] ? rcu_is_watching+0x12/0xc0 [ 116.839817][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.839839][ T6984] __vmalloc_node_noprof+0xad/0xf0 [ 116.839862][ T6984] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.839887][ T6984] fpu_alloc_guest_fpstate+0x20/0x4a0 [ 116.839917][ T6984] kvm_arch_vcpu_create+0x529/0xab0 [ 116.839945][ T6984] kvm_vm_ioctl+0x752/0x4180 [ 116.839971][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.839993][ T6984] ? stack_trace_save+0x8e/0xc0 [ 116.840014][ T6984] ? __pfx_stack_trace_save+0x10/0x10 [ 116.840036][ T6984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 116.840059][ T6984] ? __lock_acquire+0x49f/0x1a40 [ 116.840089][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.840111][ T6984] ? kasan_save_stack+0x3f/0x50 [ 116.840129][ T6984] ? kasan_save_stack+0x30/0x50 [ 116.840146][ T6984] ? kasan_save_track+0x14/0x30 [ 116.840172][ T6984] ? kasan_save_free_info+0x3b/0x70 [ 116.840186][ T6984] ? __kasan_slab_free+0x5f/0x80 [ 116.840206][ T6984] ? kfree+0x22b/0x6c0 [ 116.840222][ T6984] ? tomoyo_path_number_perm+0x46d/0x580 [ 116.840244][ T6984] ? security_file_ioctl_compat+0xd3/0x230 [ 116.840267][ T6984] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 116.840289][ T6984] ? __do_fast_syscall_32+0xe7/0x970 [ 116.840311][ T6984] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 116.840336][ T6984] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 116.840383][ T6984] ? kasan_quarantine_put+0x104/0x240 [ 116.840406][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 116.840428][ T6984] ? find_held_lock+0x2b/0x80 [ 116.840447][ T6984] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.840466][ T6984] ? tomoyo_path_number_perm+0x28f/0x580 [ 116.840511][ T6984] ? tomoyo_path_number_perm+0x188/0x580 [ 116.840537][ T6984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.840563][ T6984] ? get_pid_task+0x106/0x250 [ 116.840591][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.840615][ T6984] ? do_vfs_ioctl+0x226/0x13e0 [ 116.840637][ T6984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.840661][ T6984] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 116.840683][ T6984] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 116.840712][ T6984] ? find_held_lock+0x2b/0x80 [ 116.840733][ T6984] ? __fget_files+0x215/0x3d0 [ 116.840747][ T6984] ? hook_file_ioctl_common+0x140/0x440 [ 116.840773][ T6984] ? __fget_files+0x21f/0x3d0 [ 116.840792][ T6984] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 116.840814][ T6984] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 116.840840][ T6984] __do_fast_syscall_32+0xe7/0x970 [ 116.840864][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 116.840891][ T6984] do_fast_syscall_32+0x32/0x70 [ 116.840914][ T6984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.840933][ T6984] RIP: 0023:0xf7fe5fec [ 116.840954][ T6984] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 116.840961][ T6984] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 116.840978][ T6984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 116.840988][ T6984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.840997][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.841008][ T6984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.841018][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.841040][ T6984] [ 116.841143][ T6984] Mem-Info: [ 116.991888][ T6984] active_anon:5586 inactive_anon:251 isolated_anon:0 [ 116.991888][ T6984] active_file:249 inactive_file:56650 isolated_file:0 [ 116.991888][ T6984] unevictable:768 dirty:466 writeback:0 [ 116.991888][ T6984] slab_reclaimable:9290 slab_unreclaimable:54005 [ 116.991888][ T6984] mapped:24257 shmem:1208 pagetables:1277 [ 116.991888][ T6984] sec_pagetables:294 bounce:0 [ 116.991888][ T6984] kernel_misc_reclaimable:0 [ 116.991888][ T6984] free:32253 free_pcp:16410 free_cma:0 [ 117.005822][ T6984] Node 0 active_anon:636kB inactive_anon:80kB active_file:36kB inactive_file:1232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:44kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1496kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.011150][ T6988] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 117.015887][ T6984] Node 1 active_anon:21708kB inactive_anon:924kB active_file:960kB inactive_file:225368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96912kB dirty:1820kB writeback:0kB shmem:3296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5568kB pagetables:3612kB sec_pagetables:40kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.029958][ T6984] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:348kB local_pcp:24kB free_cma:0kB [ 117.039107][ T6984] lowmem_reserve[]: 0 280 280 280 280 [ 117.041236][ T6984] Node 0 DMA32 free:14764kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:636kB inactive_anon:76kB active_file:36kB inactive_file:1108kB unevictable:1536kB writepending:44kB zspages:0kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:3868kB free_cma:0kB [ 117.051442][ T6984] lowmem_reserve[]: 0 0 0 0 0 [ 117.052956][ T6984] Node 1 DMA32 free:112180kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21608kB inactive_anon:924kB active_file:960kB inactive_file:225368kB unevictable:1536kB writepending:1820kB zspages:2284kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50532kB local_pcp:13556kB free_cma:0kB [ 117.062932][ T6984] lowmem_reserve[]: 0 0 0 0 0 [ 117.064420][ T6984] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 0*16kB 14*32kB (UM) 3*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2068kB [ 117.066527][ T161] nvme nvme1: NVME-FC{1}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 117.068728][ T6984] Node 0 DMA32: 3*4kB (UME) 52*8kB (UE) 38*16kB (UME) 111*32kB (UME) 37*64kB (UME) 17*128kB (UM) 10*256kB (UM) 4*512kB (ME) 1*1024kB (M) 0*2048kB 0*4096kB = 14764kB [ 117.073407][ T41] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 117.078282][ T6984] Node 1 DMA32: 552*4kB (UME) [ 117.080339][ T6991] block2mtd: error: cannot open device /dev/loop0 [ 117.084812][ T6984] 148*8kB (ME) 47*16kB (ME) 52*32kB (UME) 29*64kB (UM) 60*128kB (UME) 20*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 4*2048kB (UE) 19*4096kB (UM) = 112112kB [ 117.088082][ T161] (NULL device *): queue 0 connect admin queue failed (-6). [ 117.092571][ T6984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.096970][ T6984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.107557][ T6984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.110624][ T6984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.115924][ T6984] 58695 total pagecache pages [ 117.116677][ T161] nvme nvme1: NVME-FC{1}: reset: Reconnect attempt failed (-6) [ 117.117422][ T6984] 590 pages in swap cache [ 117.120448][ T161] nvme nvme1: NVME-FC{1}: Reconnect attempt in 1 seconds [ 117.121734][ T6984] Free swap = 117824kB [ 117.121741][ T6984] Total swap = 124996kB [ 117.128472][ T6984] 524155 pages RAM [ 117.129755][ T6984] 0 pages HighMem/MovableOnly [ 117.131288][ T6984] 211533 pages reserved [ 117.132633][ T6984] 0 pages cma reserved [ 117.133926][ T6984] kvm: failed to allocate vcpu's fpu [ 117.143941][ T6993] file system registered [ 117.144710][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 117.148380][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 117.161867][ T6993] read descriptors [ 117.180519][ T6151] ffs_data_put(): freeing [ 117.306173][ T6998] comedi comedi3: pcl818: I/O base address or length out of range [ 117.312780][ T7002] comedi comedi3: pcl818: I/O base address or length out of range [ 117.423472][ T7001] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 117.458223][ T7001] geneve2: entered promiscuous mode [ 117.466701][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 58098 - 0 [ 117.470266][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 58098 - 0 [ 117.473869][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 58098 - 0 [ 117.477869][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 58098 - 0 [ 117.481371][ T12] netdevsim netdevsim10 eth4: set [1, 1] type 2 family 0 port 58098 - 0 [ 117.568310][ T7008] FAULT_INJECTION: forcing a failure. [ 117.568310][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 117.572747][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.572767][ T7008] Tainted: [L]=SOFTLOCKUP [ 117.572771][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.572778][ T7008] Call Trace: [ 117.572782][ T7008] [ 117.572787][ T7008] dump_stack_lvl+0x100/0x190 [ 117.572804][ T7008] should_fail_ex.cold+0x5/0xa [ 117.572818][ T7008] should_failslab+0xc2/0x120 [ 117.572834][ T7008] __kmalloc_noprof+0xfc/0x820 [ 117.572848][ T7008] ? stack_depot_save_flags+0x479/0x9d0 [ 117.572869][ T7008] ? acpi_ns_internalize_name+0x161/0x2e0 [ 117.572890][ T7008] acpi_ns_internalize_name+0x161/0x2e0 [ 117.572908][ T7008] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 117.572926][ T7008] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 117.572941][ T7008] ? local_pci_probe+0xdd/0x1b0 [ 117.572954][ T7008] ? pci_call_probe+0x176/0x800 [ 117.572966][ T7008] ? pci_device_probe+0x1cd/0x370 [ 117.572979][ T7008] ? really_probe+0x241/0xa60 [ 117.572995][ T7008] ? device_driver_attach+0xd1/0x220 [ 117.573010][ T7008] ? bind_store+0xf4/0x190 [ 117.573024][ T7008] acpi_ns_get_node_unlocked+0x18c/0x500 [ 117.573044][ T7008] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 117.573064][ T7008] ? mark_held_locks+0x40/0x70 [ 117.573085][ T7008] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 117.573102][ T7008] ? acpi_ns_get_node+0x6c/0xf0 [ 117.573118][ T7008] acpi_ns_get_node+0x6c/0xf0 [ 117.573136][ T7008] acpi_ns_evaluate+0xb01/0x1670 [ 117.573151][ T7008] ? acpi_ut_evaluate_object+0x9d/0x610 [ 117.573168][ T7008] acpi_ut_evaluate_object+0xf7/0x610 [ 117.573186][ T7008] acpi_rs_get_prt_method_data+0xa0/0x150 [ 117.573202][ T7008] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 117.573217][ T7008] ? acpi_ut_status_exit+0x111/0x1c0 [ 117.573231][ T7008] ? acpi_rs_validate_parameters+0x104/0x210 [ 117.573248][ T7008] acpi_get_irq_routing_table+0xb8/0x140 [ 117.573264][ T7008] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 117.573282][ T7008] ? do_raw_spin_lock+0x128/0x260 [ 117.573294][ T7008] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 117.573312][ T7008] ? mark_held_locks+0x40/0x70 [ 117.573330][ T7008] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 117.573345][ T7008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.573364][ T7008] ? pci_conf1_read+0x138/0x240 [ 117.573381][ T7008] acpi_pci_irq_lookup+0x8e/0x6b0 [ 117.573397][ T7008] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 117.573412][ T7008] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 117.573427][ T7008] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 117.573440][ T7008] ? ksys_write+0x12a/0x250 [ 117.573450][ T7008] ? __do_fast_syscall_32+0xe7/0x970 [ 117.573466][ T7008] ? do_fast_syscall_32+0x32/0x70 [ 117.573483][ T7008] acpi_pci_irq_enable+0x1f5/0x6f0 [ 117.573499][ T7008] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 117.573517][ T7008] ? __pfx_pci_enable_resources+0x10/0x10 [ 117.573539][ T7008] pcibios_enable_device+0xb6/0xe0 [ 117.573553][ T7008] do_pci_enable_device+0x21f/0x4a0 [ 117.573572][ T7008] ? __pfx_do_pci_enable_device+0x10/0x10 [ 117.573592][ T7008] ? pci_update_current_state+0x102/0x240 [ 117.573612][ T7008] ? __pfx_pci_update_current_state+0x10/0x10 [ 117.573633][ T7008] ? mark_held_locks+0x40/0x70 [ 117.573659][ T7008] pci_enable_device_flags+0x27c/0x370 [ 117.573689][ T7008] pcim_enable_device+0x5d/0x120 [ 117.573712][ T7008] pch_udc_probe+0x73/0x1130 [ 117.573728][ T7008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.573751][ T7008] ? __pfx_pch_udc_probe+0x10/0x10 [ 117.573768][ T7008] local_pci_probe+0xdd/0x1b0 [ 117.573808][ T7008] pci_call_probe+0x176/0x800 [ 117.573831][ T7008] ? __pfx_pci_call_probe+0x10/0x10 [ 117.573852][ T7008] ? find_held_lock+0x2b/0x80 [ 117.573872][ T7008] ? pci_match_device+0x450/0x5f0 [ 117.573893][ T7008] ? pci_match_device+0x450/0x5f0 [ 117.573914][ T7008] ? pci_match_id+0x34d/0x3f0 [ 117.573938][ T7008] ? pci_match_device+0xb4/0x5f0 [ 117.573965][ T7008] pci_device_probe+0x1cd/0x370 [ 117.573986][ T7008] ? __pfx_pci_device_probe+0x10/0x10 [ 117.574008][ T7008] really_probe+0x241/0xa60 [ 117.574036][ T7008] __driver_probe_device+0x20e/0x450 [ 117.574064][ T7008] device_driver_attach+0xd1/0x220 [ 117.574091][ T7008] bind_store+0xf4/0x190 [ 117.574109][ T7008] ? __pfx_bind_store+0x10/0x10 [ 117.574129][ T7008] drv_attr_store+0x74/0xb0 [ 117.574148][ T7008] ? __pfx_drv_attr_store+0x10/0x10 [ 117.574165][ T7008] sysfs_kf_write+0xf2/0x150 [ 117.574191][ T7008] kernfs_fop_write_iter+0x3e0/0x5f0 [ 117.574210][ T7008] ? __pfx_sysfs_kf_write+0x10/0x10 [ 117.574236][ T7008] vfs_write+0x6ac/0x1050 [ 117.574255][ T7008] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 117.574276][ T7008] ? __pfx_vfs_write+0x10/0x10 [ 117.574290][ T7008] ? find_held_lock+0x2b/0x80 [ 117.574328][ T7008] ksys_write+0x12a/0x250 [ 117.574344][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 117.574366][ T7008] ? ksys_write+0x1ac/0x250 [ 117.574382][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 117.574418][ T7008] __do_fast_syscall_32+0xe7/0x970 [ 117.574442][ T7008] ? lockdep_hardirqs_on+0x78/0x100 [ 117.574468][ T7008] do_fast_syscall_32+0x32/0x70 [ 117.574494][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.574517][ T7008] RIP: 0023:0xf7fe5fec [ 117.574540][ T7008] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 117.574547][ T7008] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 117.574566][ T7008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 117.574576][ T7008] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 117.574586][ T7008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.574595][ T7008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.574605][ T7008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.574628][ T7008] [ 117.574751][ T7008] ACPI Error: [ 117.774039][ T6105] usb 37-1: device descriptor read/8, error -110 [ 117.778163][ T7008] Method execution failed \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/uteval-68) [ 117.782303][ T7008] pch_udc 0000:00:03.0: can't derive routing for PCI INT A [ 117.785115][ T7008] pch_udc 0000:00:03.0: PCI INT A: no GSI [ 117.792547][ T7008] pch_udc 0000:00:03.0: error -EINVAL: request_irq(23) pch_udc_isr 0x0 pch_udc [ 117.795599][ T7008] pch_udc 0000:00:03.0: pch_udc_probe: request_irq(23) fail [ 117.798034][ T7008] ------------[ cut here ]------------ [ 117.799690][ T7008] kobject: '(null)' (ffff8880130b8110): is not initialized, yet kobject_put() is being called. [ 117.802674][ T7008] WARNING: lib/kobject.c:734 at kobject_put+0x252/0x640, CPU#1: syz.0.234/7008 [ 117.805262][ T7008] Modules linked in: [ 117.808441][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.811628][ T7008] Tainted: [L]=SOFTLOCKUP [ 117.812913][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.816118][ T7008] RIP: 0010:kobject_put+0x258/0x640 [ 117.818226][ T7008] Code: 5b f6 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 5e 03 00 00 48 8d 3d 9e c2 86 05 48 8b 33 48 89 da <67> 48 0f b9 3a e9 0b fe ff ff e8 39 26 5b f6 be 03 00 00 00 4c 89 [ 117.825471][ T7008] RSP: 0000:ffffc9000e437900 EFLAGS: 00010246 [ 117.827799][ T7008] RAX: dffffc0000000000 RBX: ffff8880130b8110 RCX: ffffffff8bae88c4 [ 117.830812][ T7008] RDX: ffff8880130b8110 RSI: 0000000000000000 RDI: ffffffff91354d50 [ 117.833250][ T7008] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 117.836110][ T7008] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880130b814c [ 117.839272][ T7008] R13: dffffc0000000000 R14: ffff8880130b9978 R15: ffff8880130b8608 [ 117.842310][ T7008] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f5485b40 [ 117.845676][ T7008] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 117.848264][ T7008] CR2: 00000000f7fe6000 CR3: 000000006d6f8000 CR4: 0000000000352ef0 [ 117.851016][ T7008] Call Trace: [ 117.852317][ T7008] [ 117.853531][ T7008] put_device+0x1f/0x30 [ 117.855163][ T7008] pch_udc_remove+0x47/0x510 [ 117.857251][ T7008] pch_udc_probe+0xcc6/0x1130 [ 117.859081][ T7008] ? __pfx_pch_udc_probe+0x10/0x10 [ 117.860611][ T7008] local_pci_probe+0xdd/0x1b0 [ 117.862007][ T7008] pci_call_probe+0x176/0x800 [ 117.863437][ T7008] ? __pfx_pci_call_probe+0x10/0x10 [ 117.865022][ T7008] ? find_held_lock+0x2b/0x80 [ 117.866594][ T7008] ? pci_match_device+0x450/0x5f0 [ 117.868101][ T7008] ? pci_match_device+0x450/0x5f0 [ 117.869660][ T7008] ? pci_match_id+0x34d/0x3f0 [ 117.871066][ T7008] ? pci_match_device+0xb4/0x5f0 [ 117.872567][ T7008] pci_device_probe+0x1cd/0x370 [ 117.874015][ T7008] ? __pfx_pci_device_probe+0x10/0x10 [ 117.875707][ T7008] really_probe+0x241/0xa60 [ 117.877131][ T7008] __driver_probe_device+0x20e/0x450 [ 117.878738][ T7008] device_driver_attach+0xd1/0x220 [ 117.880255][ T7008] bind_store+0xf4/0x190 [ 117.881548][ T7008] ? __pfx_bind_store+0x10/0x10 [ 117.883020][ T7008] drv_attr_store+0x74/0xb0 [ 117.884470][ T7008] ? __pfx_drv_attr_store+0x10/0x10 [ 117.886650][ T7008] sysfs_kf_write+0xf2/0x150 [ 117.888473][ T7008] kernfs_fop_write_iter+0x3e0/0x5f0 [ 117.890415][ T7008] ? __pfx_sysfs_kf_write+0x10/0x10 [ 117.892420][ T7008] vfs_write+0x6ac/0x1050 [ 117.894132][ T7008] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 117.896573][ T7008] ? __pfx_vfs_write+0x10/0x10 [ 117.898436][ T7008] ? find_held_lock+0x2b/0x80 [ 117.900237][ T7008] ksys_write+0x12a/0x250 [ 117.901988][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 117.903890][ T7008] ? ksys_write+0x1ac/0x250 [ 117.905707][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 117.907732][ T7008] __do_fast_syscall_32+0xe7/0x970 [ 117.909368][ T7008] ? lockdep_hardirqs_on+0x78/0x100 [ 117.910898][ T7008] do_fast_syscall_32+0x32/0x70 [ 117.912323][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.914253][ T7008] RIP: 0023:0xf7fe5fec [ 117.915859][ T7008] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 117.918265][ T7008] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 117.920768][ T7008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 117.923046][ T7008] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 117.925595][ T7008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.928078][ T7008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.930435][ T7008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.932745][ T7008] [ 117.933691][ T7008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.936158][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.0.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.939273][ T7008] Tainted: [L]=SOFTLOCKUP [ 117.940568][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.943661][ T7008] Call Trace: [ 117.944848][ T7008] [ 117.946032][ T7008] dump_stack_lvl+0x100/0x190 [ 117.947880][ T7008] vpanic+0x552/0x970 [ 117.949426][ T7008] ? __pfx_vpanic+0x10/0x10 [ 117.951167][ T7008] panic+0xd1/0xe0 [ 117.952632][ T7008] ? __pfx_panic+0x10/0x10 [ 117.954336][ T7008] ? check_panic_on_warn+0x1f/0x90 [ 117.956335][ T7008] check_panic_on_warn.cold+0x19/0x34 [ 117.958448][ T7008] ? kobject_put+0x252/0x640 [ 117.960249][ T7008] __warn.cold+0x191/0x318 [ 117.962000][ T7008] __report_bug+0x30f/0x440 [ 117.963717][ T7008] ? kobject_put+0x252/0x640 [ 117.965269][ T7008] ? __pfx___report_bug+0x10/0x10 [ 117.966749][ T7008] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.969130][ T7008] ? kobject_put+0x64/0x640 [ 117.970895][ T7008] ? __pfx_dev_printk_emit+0x10/0x10 [ 117.972972][ T7008] ? __pfx___dev_probe_failed+0x10/0x10 [ 117.975113][ T7008] report_bug_entry+0xe1/0x290 [ 117.976941][ T7008] ? kobject_put+0x258/0x640 [ 117.978329][ T7008] handle_bug+0x1cd/0x2a0 [ 117.979603][ T7008] exc_invalid_op+0x17/0x50 [ 117.981166][ T7008] asm_exc_invalid_op+0x1a/0x20 [ 117.982604][ T7008] RIP: 0010:kobject_put+0x258/0x640 [ 117.984165][ T7008] Code: 5b f6 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 5e 03 00 00 48 8d 3d 9e c2 86 05 48 8b 33 48 89 da <67> 48 0f b9 3a e9 0b fe ff ff e8 39 26 5b f6 be 03 00 00 00 4c 89 [ 117.990301][ T7008] RSP: 0000:ffffc9000e437900 EFLAGS: 00010246 [ 117.992220][ T7008] RAX: dffffc0000000000 RBX: ffff8880130b8110 RCX: ffffffff8bae88c4 [ 117.994860][ T7008] RDX: ffff8880130b8110 RSI: 0000000000000000 RDI: ffffffff91354d50 [ 117.997589][ T7008] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 118.000080][ T7008] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880130b814c [ 118.002573][ T7008] R13: dffffc0000000000 R14: ffff8880130b9978 R15: ffff8880130b8608 [ 118.005041][ T7008] ? kobject_put+0x64/0x640 [ 118.006423][ T7008] put_device+0x1f/0x30 [ 118.007692][ T7008] pch_udc_remove+0x47/0x510 [ 118.009083][ T7008] pch_udc_probe+0xcc6/0x1130 [ 118.010531][ T7008] ? __pfx_pch_udc_probe+0x10/0x10 [ 118.012061][ T7008] local_pci_probe+0xdd/0x1b0 [ 118.013518][ T7008] pci_call_probe+0x176/0x800 [ 118.015200][ T7008] ? __pfx_pci_call_probe+0x10/0x10 [ 118.017059][ T7008] ? find_held_lock+0x2b/0x80 [ 118.018440][ T7008] ? pci_match_device+0x450/0x5f0 [ 118.019891][ T7008] ? pci_match_device+0x450/0x5f0 [ 118.021451][ T7008] ? pci_match_id+0x34d/0x3f0 [ 118.022821][ T7008] ? pci_match_device+0xb4/0x5f0 [ 118.024281][ T7008] pci_device_probe+0x1cd/0x370 [ 118.025785][ T7008] ? __pfx_pci_device_probe+0x10/0x10 [ 118.027523][ T7008] really_probe+0x241/0xa60 [ 118.028902][ T7008] __driver_probe_device+0x20e/0x450 [ 118.030477][ T7008] device_driver_attach+0xd1/0x220 [ 118.032208][ T7008] bind_store+0xf4/0x190 [ 118.033507][ T7008] ? __pfx_bind_store+0x10/0x10 [ 118.034956][ T7008] drv_attr_store+0x74/0xb0 [ 118.036556][ T7008] ? __pfx_drv_attr_store+0x10/0x10 [ 118.038538][ T7008] sysfs_kf_write+0xf2/0x150 [ 118.040191][ T7008] kernfs_fop_write_iter+0x3e0/0x5f0 [ 118.042211][ T7008] ? __pfx_sysfs_kf_write+0x10/0x10 [ 118.044239][ T7008] vfs_write+0x6ac/0x1050 [ 118.046001][ T7008] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 118.048313][ T7008] ? __pfx_vfs_write+0x10/0x10 [ 118.050231][ T7008] ? find_held_lock+0x2b/0x80 [ 118.052106][ T7008] ksys_write+0x12a/0x250 [ 118.053793][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 118.055733][ T7008] ? ksys_write+0x1ac/0x250 [ 118.057510][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 118.059369][ T7008] __do_fast_syscall_32+0xe7/0x970 [ 118.060889][ T7008] ? lockdep_hardirqs_on+0x78/0x100 [ 118.062753][ T7008] do_fast_syscall_32+0x32/0x70 [ 118.064687][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.067197][ T7008] RIP: 0023:0xf7fe5fec [ 118.068654][ T7008] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 118.070639][ T7008] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 118.073239][ T7008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 118.076134][ T7008] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 118.078561][ T7008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.080928][ T7008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.083450][ T7008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.085891][ T7008] [ 118.087804][ T7008] Kernel Offset: disabled [ 118.089506][ T7008] Rebooting in 86400 seconds..