last executing test programs: 10.567494749s ago: executing program 4 (id=1219): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/fscaps', 0x0, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000080)) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x30000000}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 9.526720768s ago: executing program 4 (id=1224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x1b8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x180, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb351}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x741c56b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb221ea7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x470}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x811f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x912}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x228}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x4, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x5, 0x8}) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 7.358687748s ago: executing program 4 (id=1237): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 6.188614181s ago: executing program 4 (id=1249): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/fscaps', 0x0, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000080)) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x30000000}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 4.123185744s ago: executing program 0 (id=1256): msgget$private(0x0, 0x1f3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x1b8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x180, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb351}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x741c56b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb221ea7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x470}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x811f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x912}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x228}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x4, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x5, 0x8}) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 3.518753341s ago: executing program 4 (id=1262): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, 0x0]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) 3.180486858s ago: executing program 2 (id=1266): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x640800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080)=[0x6], 0x0, 0x7}) 2.958415005s ago: executing program 2 (id=1268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) io_uring_setup(0x4126, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) r3 = openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x48, 0x31, 0x109, 0x70bd26, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) 2.912067157s ago: executing program 1 (id=1270): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x5, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) 2.549960901s ago: executing program 2 (id=1271): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 2.545311642s ago: executing program 1 (id=1272): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/fscaps', 0x0, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000080)) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x30000000}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 2.528988616s ago: executing program 4 (id=1273): msgget$private(0x0, 0x1f3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x4, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x5, 0x8}) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 2.408311218s ago: executing program 2 (id=1276): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x9, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x10f252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0xa, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x7, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x5, 0x95a, 0xffffffff, 0x4, 0x2, 0x6, 0x100ffff, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x3ff, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 2.147861955s ago: executing program 0 (id=1277): r0 = syz_io_uring_setup(0x3274, &(0x7f0000000480)={0x0, 0x597f, 0x40000, 0xffffffff, 0x38c}, &(0x7f00000003c0), &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x20010, r0, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) 1.831714417s ago: executing program 3 (id=1281): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 1.789320827s ago: executing program 3 (id=1282): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.712656498s ago: executing program 3 (id=1283): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, 0x0]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x80002, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) 1.646204265s ago: executing program 1 (id=1284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c", 0xd}, {&(0x7f0000000280)}], 0x2}, 0x48050) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 1.384672302s ago: executing program 2 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x5, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) 1.125678019s ago: executing program 0 (id=1286): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 651.013602ms ago: executing program 3 (id=1287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368533d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x7f00) 429.901949ms ago: executing program 2 (id=1288): msgget$private(0x0, 0x1f3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x1b8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x180, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb351}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x741c56b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb221ea7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}, @NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x470}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x811f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x912}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x228}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x4, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x5, 0x8}) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 405.232005ms ago: executing program 1 (id=1289): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x640800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) 328.619575ms ago: executing program 0 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) capset(&(0x7f0000000880)={0x19980330}, &(0x7f00000008c0)={0x8, 0x9, 0x5, 0x9, 0x7fffffff, 0x3}) ioctl(r0, 0xc138fd0e, 0x0) 328.460095ms ago: executing program 3 (id=1291): r0 = syz_io_uring_setup(0x3274, &(0x7f0000000480)={0x0, 0x597f, 0x40000, 0xffffffff, 0x38c}, &(0x7f00000003c0), &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x20010, r0, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 232.88073ms ago: executing program 0 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', 0x0, 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 116.42053ms ago: executing program 1 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 62.159654ms ago: executing program 3 (id=1294): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/fscaps', 0x0, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000080)) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x30000000}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 1.37612ms ago: executing program 1 (id=1295): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x9, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x10f252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0xa, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x7, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x5, 0x95a, 0xffffffff, 0x4, 0x2, 0x6, 0x100ffff, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x3ff, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 0s ago: executing program 0 (id=1296): r0 = syz_io_uring_setup(0x3274, &(0x7f0000000480)={0x0, 0x597f, 0x40000, 0xffffffff, 0x38c}, &(0x7f00000003c0), &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x20010, r0, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 151.413553][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 151.421240][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 151.429586][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 151.438445][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 151.446648][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 151.455572][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 151.465961][ T4187] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 151.474727][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 151.483125][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 151.501236][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 151.509554][ T4187] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 151.518423][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 151.530367][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 151.541678][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 151.549943][ T4187] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 151.569582][ T4187] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 151.587287][ T4187] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 152.602433][ T6262] input: syz1 as /devices/virtual/input/input21 [ 152.633896][ T6262] netlink: 72 bytes leftover after parsing attributes in process `syz.4.664'. [ 152.643277][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 152.658346][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 153.207329][ T6279] futex_wake_op: syz.0.670 tries to shift op by 144; fix this program [ 153.218835][ T6279] futex_wake_op: syz.0.670 tries to shift op by 144; fix this program [ 153.347993][ T4260] usb 2-1: USB disconnect, device number 7 [ 153.356548][ T4260] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 153.377623][ T4260] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 153.401637][ T4260] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 153.429413][ T4260] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 153.450242][ T4260] keyspan 2-1:0.0: device disconnected [ 153.538145][ T1107] usb 4-1: USB disconnect, device number 5 [ 153.569878][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 153.628853][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 153.745817][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 153.912459][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806093c000: rx timeout, send abort [ 153.931696][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 154.035593][ T1107] keyspan 4-1:0.0: device disconnected [ 154.412540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806093c400: rx timeout, send abort [ 154.420825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806093c000: abort rx timeout. Force session deactivation [ 154.922007][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806093c400: abort rx timeout. Force session deactivation [ 155.257269][ T6297] input: syz1 as /devices/virtual/input/input22 [ 155.278381][ T6297] netlink: 72 bytes leftover after parsing attributes in process `syz.0.678'. [ 155.298848][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 155.393415][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 155.570682][ T6316] futex_wake_op: syz.3.683 tries to shift op by 144; fix this program [ 155.652806][ T6316] futex_wake_op: syz.3.683 tries to shift op by 144; fix this program [ 155.671531][ T4187] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 155.781598][ T1107] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 155.836380][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8d8c00: rx timeout, send abort [ 156.336458][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8da400: rx timeout, send abort [ 156.344845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8d8c00: abort rx timeout. Force session deactivation [ 156.844775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f8da400: abort rx timeout. Force session deactivation [ 157.121657][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.132211][ T4187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.341615][ T4187] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 157.350765][ T1107] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 157.369968][ T4187] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 157.378230][ T1107] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 157.389074][ T4187] usb 5-1: Product: syz [ 157.394919][ T1107] usb 1-1: Product: syz [ 157.404784][ T4187] usb 5-1: Manufacturer: syz [ 157.409512][ T1107] usb 1-1: Manufacturer: syz [ 157.420037][ T1107] usb 1-1: SerialNumber: syz [ 157.424719][ T4187] usb 5-1: SerialNumber: syz [ 157.440622][ T1107] usb 1-1: config 0 descriptor?? [ 157.446773][ T4187] usb 5-1: config 0 descriptor?? [ 157.495093][ T6342] input: syz1 as /devices/virtual/input/input23 [ 157.502665][ T1107] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 157.510232][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 157.521825][ T4187] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 157.529012][ T6342] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 157.529371][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 157.547160][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 157.550433][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 157.558330][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 157.572797][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 157.581834][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 157.603244][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 157.612431][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 157.621882][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 157.643111][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 157.651094][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 157.662781][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 157.675620][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 157.685905][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 157.727152][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 157.735289][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 157.757352][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 157.766246][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 157.802626][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 157.811852][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 157.843783][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 157.879576][ T6353] futex_wake_op: syz.3.697 tries to shift op by 144; fix this program [ 157.892205][ T4187] usb 5-1: USB disconnect, device number 7 [ 157.916353][ T6353] futex_wake_op: syz.3.697 tries to shift op by 144; fix this program [ 157.931722][ T4187] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 157.973147][ T4187] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 157.995806][ T4187] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 158.013877][ T4187] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 158.028619][ T4187] keyspan 5-1:0.0: device disconnected [ 158.169049][ T4231] usb 1-1: USB disconnect, device number 8 [ 158.303676][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060ba7c00: rx timeout, send abort [ 158.329529][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 158.584929][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 158.766741][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 158.803768][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060ba5400: rx timeout, send abort [ 158.812279][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060ba7c00: abort rx timeout. Force session deactivation [ 158.960030][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 159.114349][ T6364] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 159.139816][ T4231] keyspan 1-1:0.0: device disconnected [ 159.312075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060ba5400: abort rx timeout. Force session deactivation [ 159.356478][ T6382] input: syz1 as /devices/virtual/input/input24 [ 159.825736][ T4231] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 159.931770][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f9ae400: rx timeout, send abort [ 160.431723][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880211b7800: rx timeout, send abort [ 160.440069][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f9ae400: abort rx timeout. Force session deactivation [ 160.910626][ T6400] futex_wake_op: syz.1.714 tries to shift op by 144; fix this program [ 160.939986][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880211b7800: abort rx timeout. Force session deactivation [ 160.950339][ T6400] futex_wake_op: syz.1.714 tries to shift op by 144; fix this program [ 161.126933][ T6420] input: syz1 as /devices/virtual/input/input25 [ 161.241511][ T21] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 161.291631][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.612007][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.622349][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f530400: rx timeout, send abort [ 161.921890][ T21] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 161.962835][ T21] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 162.037658][ T21] usb 5-1: Product: syz [ 162.074997][ T21] usb 5-1: Manufacturer: syz [ 162.117448][ T21] usb 5-1: SerialNumber: syz [ 162.122350][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226e2000: rx timeout, send abort [ 162.130773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f530400: abort rx timeout. Force session deactivation [ 162.326244][ T21] usb 5-1: config 0 descriptor?? [ 162.430881][ T21] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 162.514528][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 162.586436][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 162.632891][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226e2000: abort rx timeout. Force session deactivation [ 162.721612][ T4231] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 162.722215][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 162.730778][ T4231] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 162.799698][ T4231] usb 1-1: config 0 descriptor?? [ 162.831612][ T4231] usb 1-1: can't set config #0, error -71 [ 162.848608][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 162.851294][ T4231] usb 1-1: USB disconnect, device number 9 [ 162.873600][ T6442] futex_wake_op: syz.0.730 tries to shift op by 144; fix this program [ 162.882532][ T6442] futex_wake_op: syz.0.730 tries to shift op by 144; fix this program [ 162.899800][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 162.931255][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 162.954707][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 162.998160][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 163.030032][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 163.055397][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 163.143433][ T21] usb 5-1: USB disconnect, device number 8 [ 163.177469][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 163.211042][ T6457] input: syz1 as /devices/virtual/input/input26 [ 163.239461][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 163.295898][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 163.339637][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 163.386518][ T21] keyspan 5-1:0.0: device disconnected [ 163.911671][ T4231] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 164.290720][ T6485] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(5) [ 164.393122][ T6487] futex_wake_op: syz.0.749 tries to shift op by 144; fix this program [ 164.427449][ T6487] futex_wake_op: syz.0.749 tries to shift op by 144; fix this program [ 164.540113][ T6500] input: syz1 as /devices/virtual/input/input27 [ 164.551764][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.731675][ T1107] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 164.739265][ T4231] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 164.750846][ T6509] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 164.754463][ T4231] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 164.767769][ T4231] usb 3-1: Product: syz [ 164.772753][ T4231] usb 3-1: Manufacturer: syz [ 164.777454][ T4231] usb 3-1: SerialNumber: syz [ 164.784990][ T4231] usb 3-1: config 0 descriptor?? [ 164.823832][ T4231] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 164.831802][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 164.839526][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 164.848168][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 164.856457][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 164.865912][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 164.874294][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 164.883686][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 164.892292][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 164.901291][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 164.909636][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 165.027311][ T4231] usb 3-1: USB disconnect, device number 6 [ 165.036143][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 165.050867][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 165.066386][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 165.080733][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 165.091120][ T4231] keyspan 3-1:0.0: device disconnected [ 165.142275][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.322272][ T1107] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 165.331534][ T1107] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 165.339713][ T1107] usb 4-1: Product: syz [ 165.344031][ T1107] usb 4-1: Manufacturer: syz [ 165.348650][ T1107] usb 4-1: SerialNumber: syz [ 165.355174][ T1107] usb 4-1: config 0 descriptor?? [ 165.392650][ T1107] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 165.400161][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 165.408012][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 165.416391][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 165.425466][ T1107] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 165.434563][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 165.443429][ T1107] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 165.453003][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 165.461214][ T1107] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 165.470379][ T1107] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 165.478810][ T1107] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 165.759823][ T1107] usb 4-1: USB disconnect, device number 6 [ 165.814094][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 165.890427][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 165.919850][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebae400: rx timeout, send abort [ 165.983983][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 166.063290][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 166.113217][ T1107] keyspan 4-1:0.0: device disconnected [ 166.419932][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebac400: rx timeout, send abort [ 166.428298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebae400: abort rx timeout. Force session deactivation [ 166.844802][ T6531] futex_wake_op: syz.2.764 tries to shift op by 144; fix this program [ 166.855271][ T6531] futex_wake_op: syz.2.764 tries to shift op by 144; fix this program [ 166.864951][ T6530] input: syz1 as /devices/virtual/input/input29 [ 166.928237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ebac400: abort rx timeout. Force session deactivation [ 167.080235][ T6471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.461958][ T4227] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 167.501503][ T4231] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 167.594221][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e40dc00: rx timeout, send abort [ 167.862099][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.094298][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e40c400: rx timeout, send abort [ 168.102981][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e40dc00: abort rx timeout. Force session deactivation [ 168.114076][ T4227] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 168.153285][ T4227] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 168.248083][ T4227] usb 2-1: Product: syz [ 168.299325][ T4227] usb 2-1: Manufacturer: syz [ 168.370451][ T4227] usb 2-1: SerialNumber: syz [ 168.469294][ T4227] usb 2-1: config 0 descriptor?? [ 168.570032][ T6557] input: syz1 as /devices/virtual/input/input30 [ 168.582798][ T4227] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 168.602612][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e40c400: abort rx timeout. Force session deactivation [ 168.615706][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 168.631478][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 168.651126][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 168.691640][ T4227] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 168.715422][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 168.755608][ T4227] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 168.765691][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 168.800017][ T4227] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 168.836614][ T4227] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 168.873685][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.876149][ T4227] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 168.914070][ T4227] usb 2-1: USB disconnect, device number 8 [ 168.973749][ T4227] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 168.992355][ T4227] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 169.034499][ T4227] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 169.051902][ T4231] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 169.063593][ T4227] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 169.064721][ T4231] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 169.080569][ T4227] keyspan 2-1:0.0: device disconnected [ 169.101856][ T4231] usb 5-1: Product: syz [ 169.106303][ T4231] usb 5-1: Manufacturer: syz [ 169.111115][ T4231] usb 5-1: SerialNumber: syz [ 169.117506][ T4231] usb 5-1: config 0 descriptor?? [ 169.165277][ T6582] futex_wake_op: syz.2.785 tries to shift op by 144; fix this program [ 169.217990][ T4231] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 169.257814][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 169.280478][ T6582] futex_wake_op: syz.2.785 tries to shift op by 144; fix this program [ 169.336373][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 169.440615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e804c00: rx timeout, send abort [ 169.562516][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 169.708638][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 169.846475][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 169.940706][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880602ec000: rx timeout, send abort [ 169.949229][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e804c00: abort rx timeout. Force session deactivation [ 169.993864][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 170.164782][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 170.334235][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 170.449589][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880602ec000: abort rx timeout. Force session deactivation [ 170.465334][ T4231] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 170.543370][ T4231] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 170.648769][ T4231] usb 5-1: USB disconnect, device number 9 [ 170.705194][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 170.717997][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 170.730695][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 170.742533][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 170.752502][ T4231] keyspan 5-1:0.0: device disconnected [ 171.271549][ T4231] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 171.311548][ T4229] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 171.751880][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.971777][ T4229] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 171.984028][ T4229] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 171.992482][ T4229] usb 2-1: Product: syz [ 171.996631][ T4229] usb 2-1: Manufacturer: syz [ 172.001307][ T4229] usb 2-1: SerialNumber: syz [ 172.010680][ T4229] usb 2-1: config 0 descriptor?? [ 172.020255][ T6633] futex_wake_op: syz.0.805 tries to shift op by 144; fix this program [ 172.029236][ T6633] futex_wake_op: syz.0.805 tries to shift op by 144; fix this program [ 172.062405][ T4229] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 172.069959][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 172.078018][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 172.086557][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 172.096608][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 172.106179][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 172.116308][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 172.125419][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 172.134558][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 172.143777][ T4229] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 172.152917][ T4229] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 172.161615][ T4187] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 172.191572][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.327498][ T6635] infiniband syz1: set active [ 172.335221][ T6635] infiniband syz1: added syz_tun [ 172.381735][ T4231] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 172.382254][ T6635] RDS/IB: syz1: added [ 172.393144][ T4231] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 172.403631][ T4231] usb 3-1: Product: syz [ 172.407848][ T4231] usb 3-1: Manufacturer: syz [ 172.412704][ T4231] usb 3-1: SerialNumber: syz [ 172.419424][ T4231] usb 3-1: config 0 descriptor?? [ 172.426265][ T6635] smc: adding ib device syz1 with port count 1 [ 172.441608][ T6635] smc: ib device syz1 port 1 has pnetid [ 172.463125][ T4231] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 172.470909][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 172.479134][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 172.488791][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 172.506110][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 172.515993][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 172.525327][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 172.533761][ T4187] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 172.536493][ T4260] usb 2-1: USB disconnect, device number 9 [ 172.545795][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 172.559308][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 172.568105][ T4260] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 172.573508][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 172.586353][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 172.591478][ T4229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.618930][ T4260] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 172.647709][ T4260] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 172.679896][ T2301] usb 3-1: USB disconnect, device number 7 [ 172.688827][ T4260] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 172.711661][ T4187] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 172.721910][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.730199][ T4187] usb 5-1: Product: syz [ 172.735065][ T4187] usb 5-1: Manufacturer: syz [ 172.739669][ T4187] usb 5-1: SerialNumber: syz [ 172.741053][ T2301] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 172.757302][ T4187] usb 5-1: config 0 descriptor?? [ 172.757308][ T4260] keyspan 2-1:0.0: device disconnected [ 172.764193][ T2301] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 172.790190][ T2301] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 172.800119][ T6627] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 172.819455][ T2301] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 172.830628][ T2301] keyspan 3-1:0.0: device disconnected [ 172.833102][ T4187] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 172.881653][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 173.021580][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.051558][ T4229] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 173.060318][ T4187] usb 5-1: USB disconnect, device number 10 [ 173.068895][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.112659][ T4229] usb 4-1: config 0 descriptor?? [ 173.164068][ T4229] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 173.432736][ T6636] lo speed is unknown, defaulting to 1000 [ 173.474391][ T6665] futex_wake_op: syz.1.817 tries to shift op by 144; fix this program [ 173.490929][ T6665] futex_wake_op: syz.1.817 tries to shift op by 144; fix this program [ 173.555221][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eaf0800: rx timeout, send abort [ 173.696543][ T2301] usb 4-1: USB disconnect, device number 7 [ 174.055273][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eaf3000: rx timeout, send abort [ 174.063658][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eaf0800: abort rx timeout. Force session deactivation [ 174.542662][ T6688] input: syz1 as /devices/virtual/input/input34 [ 174.563569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eaf3000: abort rx timeout. Force session deactivation [ 174.655647][ T4187] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 174.663258][ T2301] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 174.936456][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226e8000: rx timeout, send abort [ 175.021665][ T4187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.041616][ T2301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.191711][ T4187] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 175.205545][ T4187] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 175.215606][ T4187] usb 3-1: Product: syz [ 175.219888][ T4187] usb 3-1: Manufacturer: syz [ 175.227927][ T4187] usb 3-1: SerialNumber: syz [ 175.237448][ T4187] usb 3-1: config 0 descriptor?? [ 175.251967][ T2301] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 175.261160][ T2301] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 175.281481][ T2301] usb 1-1: Product: syz [ 175.283222][ T4187] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 175.285687][ T2301] usb 1-1: Manufacturer: syz [ 175.285703][ T2301] usb 1-1: SerialNumber: syz [ 175.309926][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 175.310555][ T2301] usb 1-1: config 0 descriptor?? [ 175.319296][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 175.338154][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 175.347492][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 175.363336][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 175.388023][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 175.392594][ T2301] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 175.403837][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 175.424740][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 175.426205][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 175.436502][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806193e000: rx timeout, send abort [ 175.446924][ T4187] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 175.448914][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880226e8000: abort rx timeout. Force session deactivation [ 175.458527][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 175.474290][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 175.487345][ T4187] usb 3-1: USB disconnect, device number 8 [ 175.517979][ T4187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 175.538323][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 175.539541][ T4187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 175.577168][ T4187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 175.581936][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 175.609184][ T4187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 175.619696][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 175.638900][ T4187] keyspan 3-1:0.0: device disconnected [ 175.645205][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 175.672378][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 175.698378][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 175.721685][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 175.731373][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 175.770200][ T2301] usb 1-1: USB disconnect, device number 10 [ 175.820651][ T2301] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 175.820947][ T6714] futex_wake_op: syz.4.835 tries to shift op by 144; fix this program [ 175.872344][ T2301] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 175.910950][ T6714] futex_wake_op: syz.4.835 tries to shift op by 144; fix this program [ 175.926141][ T2301] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 175.948759][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806193e000: abort rx timeout. Force session deactivation [ 175.987359][ T2301] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 176.022337][ T2301] keyspan 1-1:0.0: device disconnected [ 176.208088][ T4198] Bluetooth: Wrong link type (-22) [ 176.339973][ T6740] autofs4:pid:6740:autofs_fill_super: called with bogus options [ 176.527770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9f3000: rx timeout, send abort [ 176.861599][ T4187] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 176.961709][ T2301] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 177.027821][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880611c1c00: rx timeout, send abort [ 177.036290][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9f3000: abort rx timeout. Force session deactivation [ 177.231619][ T4187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.329506][ T6779] futex_wake_op: syz.2.862 tries to shift op by 144; fix this program [ 177.352206][ T2301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.363984][ T6779] futex_wake_op: syz.2.862 tries to shift op by 144; fix this program [ 177.411808][ T4187] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 177.426262][ T4187] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 177.429427][ T6781] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.434797][ T4187] usb 1-1: Product: syz [ 177.446683][ T4187] usb 1-1: Manufacturer: syz [ 177.451282][ T4187] usb 1-1: SerialNumber: syz [ 177.458574][ T4187] usb 1-1: config 0 descriptor?? [ 177.504686][ T4187] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 177.529138][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 177.537052][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880611c1c00: abort rx timeout. Force session deactivation [ 177.551802][ T2301] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 177.566768][ T2301] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 177.573692][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 177.584866][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 177.587462][ T2301] usb 5-1: Product: syz [ 177.594938][ T4187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 177.596913][ T2301] usb 5-1: Manufacturer: syz [ 177.609509][ T2301] usb 5-1: SerialNumber: syz [ 177.610242][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 177.623670][ T4187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 177.627331][ T2301] usb 5-1: config 0 descriptor?? [ 177.648200][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 177.657835][ T4187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 177.674794][ T4187] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 177.684047][ T4187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 177.702976][ T2301] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 177.710508][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 177.719298][ T4187] usb 1-1: USB disconnect, device number 11 [ 177.721745][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 177.736844][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 177.749666][ T2301] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 177.756215][ T4187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 177.764636][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 177.786270][ T2301] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 177.789490][ T4187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 177.806864][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 177.812559][ T4187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 177.828675][ T2301] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 177.833107][ T4187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 177.849966][ T2301] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 177.852527][ T4187] keyspan 1-1:0.0: device disconnected [ 177.870297][ T2301] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 177.950672][ T4229] usb 5-1: USB disconnect, device number 11 [ 177.959765][ T4229] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 177.972886][ T4229] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 177.987140][ T4229] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 178.000206][ T4229] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 178.011741][ T4229] keyspan 5-1:0.0: device disconnected [ 178.168705][ T6800] FAULT_INJECTION: forcing a failure. [ 178.168705][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 178.181929][ T6800] CPU: 0 PID: 6800 Comm: syz.2.872 Not tainted syzkaller #0 [ 178.189208][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.199258][ T6800] Call Trace: [ 178.202524][ T6800] [ 178.205444][ T6800] dump_stack_lvl+0x188/0x250 [ 178.210122][ T6800] ? show_regs_print_info+0x20/0x20 [ 178.215300][ T6800] ? load_image+0x410/0x410 [ 178.219789][ T6800] should_fail+0x383/0x4b0 [ 178.224201][ T6800] should_failslab+0x5/0x20 [ 178.228695][ T6800] slab_pre_alloc_hook+0x51/0xc0 [ 178.233624][ T6800] kmem_cache_alloc_trace+0x47/0x290 [ 178.238904][ T6800] ? sctp_add_bind_addr+0x89/0x350 [ 178.244014][ T6800] sctp_add_bind_addr+0x89/0x350 [ 178.247347][ T2301] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.248962][ T6800] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 178.262075][ T6800] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 178.268150][ T6800] ? sctp_v4_is_any+0x31/0x50 [ 178.272808][ T6800] ? sctp_copy_one_addr+0x93/0x660 [ 178.277901][ T6800] sctp_bind_addr_copy+0xaf/0x3c0 [ 178.282914][ T6800] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 178.289230][ T6800] sctp_connect_new_asoc+0x2f5/0x6a0 [ 178.294507][ T6800] ? __sctp_connect+0xd80/0xd80 [ 178.299353][ T6800] ? __local_bh_enable_ip+0x136/0x1c0 [ 178.304709][ T6800] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 178.310234][ T6800] ? security_sctp_bind_connect+0x85/0xb0 [ 178.315938][ T6800] sctp_sendmsg+0x15e1/0x2940 [ 178.320605][ T6800] ? sctp_getsockopt+0x8a0/0x8a0 [ 178.325522][ T6800] ? aa_af_perm+0x340/0x340 [ 178.330013][ T6800] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 178.336417][ T6800] ? aa_sock_msg_perm+0x94/0x150 [ 178.341340][ T6800] ? sock_rps_record_flow+0x17/0x3b0 [ 178.346617][ T6800] ? inet_sendmsg+0xca/0x2a0 [ 178.351204][ T6800] ? inet_send_prepare+0x250/0x250 [ 178.356298][ T6800] ____sys_sendmsg+0x5be/0x8f0 [ 178.361048][ T6800] ? __sys_sendmsg_sock+0x30/0x30 [ 178.366053][ T6800] ? import_iovec+0x6f/0xa0 [ 178.370537][ T6800] ___sys_sendmsg+0x236/0x2e0 [ 178.375201][ T6800] ? __sys_sendmsg+0x290/0x290 [ 178.379959][ T6800] __sys_sendmmsg+0x2ba/0x500 [ 178.384616][ T6800] ? __ia32_sys_sendmsg+0x80/0x80 [ 178.389646][ T6800] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.395620][ T6800] ? lock_chain_count+0x20/0x20 [ 178.400485][ T6800] __x64_sys_sendmmsg+0x9c/0xb0 [ 178.405331][ T6800] do_syscall_64+0x4c/0xa0 [ 178.409731][ T6800] ? clear_bhb_loop+0x30/0x80 [ 178.414386][ T6800] ? clear_bhb_loop+0x30/0x80 [ 178.419046][ T6800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.424922][ T6800] RIP: 0033:0x7f76127d4159 [ 178.429317][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.448919][ T6800] RSP: 002b:00007f7610a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.457325][ T6800] RAX: ffffffffffffffda RBX: 00007f7612a5bfa0 RCX: 00007f76127d4159 [ 178.465282][ T6800] RDX: 0000000000000001 RSI: 0000200000005f40 RDI: 0000000000000004 [ 178.473234][ T6800] RBP: 00007f761286b06b R08: 0000000000000000 R09: 0000000000000000 [ 178.481188][ T6800] R10: 0000000004050000 R11: 0000000000000246 R12: 0000000000000000 [ 178.489145][ T6800] R13: 00007f7612a5c038 R14: 00007f7612a5bfa0 R15: 00007ffd757560d8 [ 178.497113][ T6800] [ 178.632504][ T2301] usb 4-1: Using ep0 maxpacket: 8 [ 178.761821][ T2301] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 178.770055][ T2301] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.786192][ T2301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.816509][ T2301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.836531][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d44cc00: rx timeout, send abort [ 178.852225][ T2301] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.875732][ T2301] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.891461][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.986918][ T6825] futex_wake_op: syz.4.882 tries to shift op by 144; fix this program [ 178.996744][ T6825] futex_wake_op: syz.4.882 tries to shift op by 144; fix this program [ 179.181637][ T2301] usb 4-1: usb_control_msg returned -71 [ 179.187244][ T2301] usbtmc 4-1:16.0: can't read capabilities [ 179.199849][ T2301] usb 4-1: USB disconnect, device number 8 [ 179.336583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d44f800: rx timeout, send abort [ 179.344889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d44cc00: abort rx timeout. Force session deactivation [ 179.711622][ T1107] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 179.844853][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d44f800: abort rx timeout. Force session deactivation [ 180.056218][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 180.065351][ T4229] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 180.071666][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.182198][ T6859] futex_wake_op: syz.1.899 tries to shift op by 144; fix this program [ 180.190526][ T6859] futex_wake_op: syz.1.899 tries to shift op by 144; fix this program [ 180.209720][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce8cc00: rx timeout, send abort [ 180.241607][ T1107] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 180.251275][ T1107] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 180.263059][ T1107] usb 1-1: Product: syz [ 180.267214][ T1107] usb 1-1: Manufacturer: syz [ 180.273442][ T1107] usb 1-1: SerialNumber: syz [ 180.279421][ T1107] usb 1-1: config 0 descriptor?? [ 180.322452][ T1107] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 180.329956][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 180.337699][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 180.345921][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 180.354320][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 180.363249][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 180.371345][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 180.380529][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 180.388709][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 180.397599][ T1107] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 180.405774][ T1107] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 180.441732][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.527332][ T21] usb 1-1: USB disconnect, device number 12 [ 180.537356][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 180.553029][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 180.567072][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 180.586202][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 180.598770][ T21] keyspan 1-1:0.0: device disconnected [ 180.671613][ T4229] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 180.680829][ T4229] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 180.689294][ T4229] usb 4-1: Product: syz [ 180.693572][ T4229] usb 4-1: Manufacturer: syz [ 180.698176][ T4229] usb 4-1: SerialNumber: syz [ 180.704376][ T4229] usb 4-1: config 0 descriptor?? [ 180.709761][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061fb0400: rx timeout, send abort [ 180.718055][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce8cc00: abort rx timeout. Force session deactivation [ 180.731616][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 180.738315][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 180.744612][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 180.752996][ T4229] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 180.767483][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 180.776028][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 180.793831][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 180.804352][ T4229] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 180.820904][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 180.832123][ T4229] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 180.842168][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 180.854054][ T4229] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 180.863626][ T4229] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 180.872389][ T4229] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 181.200737][ T6877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.904'. [ 181.217972][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061fb0400: abort rx timeout. Force session deactivation [ 181.253034][ T1107] usb 4-1: USB disconnect, device number 9 [ 181.261861][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 181.275023][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 181.293377][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 181.334920][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 181.346732][ T1107] keyspan 4-1:0.0: device disconnected [ 181.359959][ T6882] tipc: Started in network mode [ 181.378573][ T6882] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.387423][ T6882] tipc: New replicast peer: 172.20.20.187 [ 181.402430][ T6882] tipc: Enabled bearer , priority 10 [ 181.565439][ T6890] futex_wake_op: syz.4.912 tries to shift op by 144; fix this program [ 181.584456][ T6890] futex_wake_op: syz.4.912 tries to shift op by 144; fix this program [ 181.660610][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed34000: rx timeout, send abort [ 181.819227][ T6899] binder: 6897:6899 ioctl c0306201 200000000180 returned -14 [ 182.028268][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.160635][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed34800: rx timeout, send abort [ 182.169065][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed34000: abort rx timeout. Force session deactivation [ 182.231561][ T4229] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 182.513940][ T1107] tipc: Node number set to 2886997162 [ 182.631866][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.661584][ T2301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.668908][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed34800: abort rx timeout. Force session deactivation [ 182.705718][ T4187] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 182.805226][ T6932] overlayfs: failed to resolve 'work': -2 [ 182.813476][ T6932] overlayfs: failed to resolve 'work': -2 [ 182.829661][ T4229] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 182.839635][ T4229] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 182.853700][ T4229] usb 3-1: Product: syz [ 182.857874][ T4229] usb 3-1: Manufacturer: syz [ 182.866090][ T4229] usb 3-1: SerialNumber: syz [ 182.880018][ T4229] usb 3-1: config 0 descriptor?? [ 182.921689][ T2301] usb 2-1: Using ep0 maxpacket: 32 [ 182.931895][ T4229] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 182.941704][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 182.949379][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 182.984298][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 182.997454][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 183.016358][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 183.035632][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 183.054248][ T2301] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 183.071633][ T4187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.076669][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 183.096705][ T2301] usb 2-1: config 1 interface 0 has no altsetting 0 [ 183.106739][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 183.126641][ T4229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 183.153945][ T4229] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 183.184509][ T4229] usb 3-1: USB disconnect, device number 9 [ 183.250341][ T4229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 183.251648][ T4187] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 183.272174][ T6936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.279896][ T4229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 183.291770][ T2301] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40 [ 183.301214][ T2301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.335957][ T4229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 183.406273][ T2301] usb 2-1: Product: syz [ 183.439776][ T2301] usb 2-1: Manufacturer: syz [ 183.464408][ T4229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 183.483638][ T2301] usb 2-1: SerialNumber: syz [ 183.557301][ T4229] keyspan 3-1:0.0: device disconnected [ 183.614703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f563000: rx timeout, send abort [ 184.114788][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f562800: rx timeout, send abort [ 184.123274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f563000: abort rx timeout. Force session deactivation [ 184.561480][ T4187] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 184.571146][ T4187] usb 5-1: Product: syz [ 184.575651][ T4187] usb 5-1: Manufacturer: syz [ 184.580237][ T4187] usb 5-1: SerialNumber: syz [ 184.593690][ T4187] usb 5-1: config 0 descriptor?? [ 184.623086][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f562800: abort rx timeout. Force session deactivation [ 184.632633][ T4187] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 184.642841][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 184.650530][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 184.669616][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 184.685872][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 184.694875][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 184.704195][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 184.713476][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 184.723191][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 184.732552][ T4187] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 184.741190][ T4187] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 184.784527][ T6952] futex_wake_op: syz.3.936 tries to shift op by 144; fix this program [ 184.801612][ T6952] futex_wake_op: syz.3.936 tries to shift op by 144; fix this program [ 185.053568][ T4228] usb 5-1: USB disconnect, device number 12 [ 185.082128][ T4228] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 185.129920][ T4228] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 185.161676][ T4228] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 185.197788][ T4228] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 185.220738][ T4228] keyspan 5-1:0.0: device disconnected [ 185.343105][ T2301] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38 [ 185.365882][ T2301] usb 2-1: USB disconnect, device number 10 [ 185.665278][ T6967] overlayfs: failed to resolve 'work': -2 [ 185.678042][ T6967] overlayfs: failed to resolve 'work': -2 [ 185.984643][ T6983] input: syz1 as /devices/virtual/input/input39 [ 186.005953][ T6984] futex_wake_op: syz.2.950 tries to shift op by 144; fix this program [ 186.021225][ T6984] futex_wake_op: syz.2.950 tries to shift op by 144; fix this program [ 186.081157][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880179b8000: rx timeout, send abort [ 186.181547][ T1107] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.556256][ T6987] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 186.567451][ T6987] netlink: 'syz.4.952': attribute type 2 has an invalid length. [ 186.581210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f791400: rx timeout, send abort [ 186.589824][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880179b8000: abort rx timeout. Force session deactivation [ 186.601344][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.615873][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 186.639938][ T1107] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 186.668175][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.736675][ T1107] opticon 1-1:1.0: opticon converter detected [ 186.743993][ T1107] usb 1-1: opticon converter now attached to ttyUSB0 [ 186.867288][ T6997] overlayfs: failed to resolve 'work': -2 [ 186.885322][ T6997] overlayfs: failed to resolve 'work': -2 [ 186.953691][ T4228] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 186.989854][ T1107] usb 1-1: USB disconnect, device number 13 [ 187.015010][ T1107] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 187.029686][ T1107] opticon 1-1:1.0: device disconnected [ 187.089481][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f791400: abort rx timeout. Force session deactivation [ 187.321972][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.502107][ T4228] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 187.519936][ T4228] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 187.582586][ T4228] usb 5-1: Product: syz [ 187.612984][ T4228] usb 5-1: Manufacturer: syz [ 187.642113][ T4228] usb 5-1: SerialNumber: syz [ 187.757105][ T4228] usb 5-1: config 0 descriptor?? [ 187.845528][ T4228] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 187.937845][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 187.972637][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 187.981034][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 188.002547][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 188.029587][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 188.043668][ T7023] futex_wake_op: syz.3.966 tries to shift op by 144; fix this program [ 188.052118][ T7023] futex_wake_op: syz.3.966 tries to shift op by 144; fix this program [ 188.099659][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 188.118352][ T7027] input: syz1 as /devices/virtual/input/input40 [ 188.146159][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 188.182968][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 188.189731][ T7029] overlayfs: failed to resolve 'upper': -2 [ 188.199824][ T7029] overlayfs: failed to resolve 'upper': -2 [ 188.208382][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 188.216140][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880600d8000: rx timeout, send abort [ 188.278948][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 188.375609][ T1107] usb 5-1: USB disconnect, device number 13 [ 188.405110][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 188.431919][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 188.444396][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 188.457772][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 188.469243][ T1107] keyspan 5-1:0.0: device disconnected [ 188.709754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888017dbe800: rx timeout, send abort [ 188.718125][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880600d8000: abort rx timeout. Force session deactivation [ 189.133703][ T7057] overlayfs: failed to resolve 'upper': -2 [ 189.140094][ T7052] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 189.141296][ T7057] overlayfs: failed to resolve 'upper': -2 [ 189.218029][ C1] vcan0: j1939_tp_rxtimer: 0xffff888017dbe800: abort rx timeout. Force session deactivation [ 189.302675][ T1107] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 189.322680][ T1107] Bluetooth: hci3: Injecting HCI hardware error event [ 189.330750][ T4194] Bluetooth: hci3: hardware error 0x00 [ 189.641321][ T7066] futex_wake_op: syz.0.984 tries to shift op by 144; fix this program [ 189.649733][ T7066] futex_wake_op: syz.0.984 tries to shift op by 144; fix this program [ 189.745902][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd5b800: rx timeout, send abort [ 189.774810][ T7072] rdma_rxe: rxe_register_device failed with error -23 [ 189.782077][ T7072] rdma_rxe: failed to add ipvlan0 [ 189.860684][ T7078] input: syz1 as /devices/virtual/input/input41 [ 189.985626][ T7085] overlayfs: failed to resolve 'upper': -2 [ 189.995946][ T7085] overlayfs: failed to resolve 'upper': -2 [ 190.021592][ T1107] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 190.031005][ T7087] autofs4:pid:7087:autofs_fill_super: called with bogus options [ 190.107625][ T4228] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 190.245935][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed36000: rx timeout, send abort [ 190.254205][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd5b800: abort rx timeout. Force session deactivation [ 190.281797][ T7094] futex_wake_op: syz.2.997 tries to shift op by 144; fix this program [ 190.294614][ T7094] futex_wake_op: syz.2.997 tries to shift op by 144; fix this program [ 190.451716][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.501553][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.621807][ T1107] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 190.641478][ T1107] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 190.649668][ T1107] usb 5-1: Product: syz [ 190.669766][ T1107] usb 5-1: Manufacturer: syz [ 190.674678][ T4228] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 190.686113][ T4228] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 190.687214][ T1107] usb 5-1: SerialNumber: syz [ 190.697869][ T4228] usb 1-1: Product: syz [ 190.707473][ T4228] usb 1-1: Manufacturer: syz [ 190.716412][ T4228] usb 1-1: SerialNumber: syz [ 190.731021][ T1107] usb 5-1: config 0 descriptor?? [ 190.739662][ T4228] usb 1-1: config 0 descriptor?? [ 190.754177][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed36000: abort rx timeout. Force session deactivation [ 190.802566][ T4228] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 190.823702][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 190.832852][ T1107] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 190.842018][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 190.850564][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 190.860557][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 190.867629][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 190.876788][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 190.886095][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 190.894552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.904984][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 190.915908][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 190.923255][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 190.936527][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 190.969001][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 190.978223][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 190.996034][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 191.002137][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 191.014594][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 191.042315][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 191.056829][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 191.092734][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 191.114755][ T4228] usb 1-1: USB disconnect, device number 14 [ 191.145398][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 191.323196][ T7115] overlayfs: failed to resolve 'lower': -2 [ 191.361222][ T7115] overlayfs: failed to resolve 'lower': -2 [ 191.421363][ T1107] usb 5-1: USB disconnect, device number 14 [ 191.424790][ T4228] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 191.469252][ T1107] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 191.475503][ T4228] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 191.496910][ T1107] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 191.506169][ T4228] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 191.527623][ T1107] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 191.559830][ T4228] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 191.580247][ T1107] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 191.589971][ T4228] keyspan 1-1:0.0: device disconnected [ 191.613509][ T1107] keyspan 5-1:0.0: device disconnected [ 191.753324][ T7129] input: syz1 as /devices/virtual/input/input42 [ 191.918880][ T7122] futex_wake_op: syz.1.1008 tries to shift op by 144; fix this program [ 191.942839][ T7122] futex_wake_op: syz.1.1008 tries to shift op by 144; fix this program [ 192.752907][ T7159] overlayfs: failed to resolve 'lower': -2 [ 192.793204][ T7159] overlayfs: failed to resolve 'lower': -2 [ 192.891707][ T2301] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 193.091529][ T4260] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 193.201521][ T4228] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 193.261684][ T2301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.451528][ T4260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.496288][ T7171] futex_wake_op: syz.3.1027 tries to shift op by 144; fix this program [ 193.505364][ T2301] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 193.511657][ T7171] futex_wake_op: syz.3.1027 tries to shift op by 144; fix this program [ 193.515115][ T2301] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 193.533774][ T2301] usb 1-1: Product: syz [ 193.538022][ T2301] usb 1-1: Manufacturer: syz [ 193.543285][ T2301] usb 1-1: SerialNumber: syz [ 193.554884][ T2301] usb 1-1: config 0 descriptor?? [ 193.581648][ T4228] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.592984][ T2301] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 193.602683][ T4228] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.614957][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 193.629534][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 193.637655][ T4260] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 193.647044][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.656887][ T4260] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 193.666301][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 193.675027][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.686906][ T4260] usb 5-1: Product: syz [ 193.692522][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 193.700619][ T4260] usb 5-1: Manufacturer: syz [ 193.705423][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 193.712323][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ecce000: rx timeout, send abort [ 193.716653][ T4260] usb 5-1: SerialNumber: syz [ 193.730305][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 193.751821][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 193.764035][ T4260] usb 5-1: config 0 descriptor?? [ 193.772536][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 193.784086][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 193.802660][ T4260] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 193.811121][ T2301] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 193.819301][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 193.832512][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 193.840931][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 193.851753][ T4228] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.867353][ T2301] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 193.876648][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.890987][ T4228] usb 3-1: Product: syz [ 193.896775][ T4228] usb 3-1: Manufacturer: syz [ 193.931985][ T4260] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 193.962224][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 193.976496][ T4260] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 193.987476][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 194.001218][ T4228] cdc_wdm 3-1:1.0: skipping garbage [ 194.009159][ T4228] cdc_wdm 3-1:1.0: skipping garbage [ 194.023460][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.029855][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.041224][ T4187] usb 1-1: USB disconnect, device number 15 [ 194.057653][ T4260] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 194.069164][ T4228] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 194.085706][ T4228] cdc_wdm 3-1:1.0: Unknown control protocol [ 194.092928][ T4260] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 194.119118][ T4260] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 194.218366][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f78f800: rx timeout, send abort [ 194.237132][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ecce000: abort rx timeout. Force session deactivation [ 194.247482][ T7185] input: syz1 as /devices/virtual/input/input44 [ 194.261628][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 194.261820][ T1107] usb 3-1: USB disconnect, device number 10 [ 194.268785][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 194.280592][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 194.289757][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.357547][ T4260] usb 5-1: USB disconnect, device number 15 [ 194.359054][ T4187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 194.376689][ T4260] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 194.385613][ T4187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 194.417235][ T4260] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 194.418704][ T4187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 194.446711][ T4260] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 194.462311][ T4187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 194.477452][ T4187] keyspan 1-1:0.0: device disconnected [ 194.478233][ T4260] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 194.499890][ T4260] keyspan 5-1:0.0: device disconnected [ 194.570370][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 194.726617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f78f800: abort rx timeout. Force session deactivation [ 194.893586][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.901668][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.960410][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.968348][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.929909][ T7199] overlayfs: failed to resolve 'lower': -2 [ 196.032141][ T7202] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 197.788873][ T7209] futex_wake_op: syz.1.1039 tries to shift op by 144; fix this program [ 197.797761][ T7209] futex_wake_op: syz.1.1039 tries to shift op by 144; fix this program [ 198.077104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec1ec00: rx timeout, send abort [ 198.341477][ T1107] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 198.355255][ T4228] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 198.387895][ T7230] input: syz1 as /devices/virtual/input/input45 [ 198.577146][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023a9c800: rx timeout, send abort [ 198.605981][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec1ec00: abort rx timeout. Force session deactivation [ 198.701574][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.871666][ T1107] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 198.900448][ T1107] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 198.915997][ T1107] usb 5-1: Product: syz [ 198.917299][ T7238] overlayfs: failed to resolve 'lower': -2 [ 198.920383][ T1107] usb 5-1: Manufacturer: syz [ 198.930889][ T1107] usb 5-1: SerialNumber: syz [ 198.935486][ T7238] overlayfs: failed to resolve 'lower': -2 [ 198.952934][ T1107] usb 5-1: config 0 descriptor?? [ 199.022721][ T1107] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 199.039568][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 199.048529][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 199.051659][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.081926][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 199.085378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023a9c800: abort rx timeout. Force session deactivation [ 199.109909][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 199.137443][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 199.166550][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 199.189777][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 199.211559][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 199.253631][ T1107] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 199.301537][ T1107] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 199.305493][ T4228] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 199.341442][ T4228] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 199.405346][ T4228] usb 2-1: Product: syz [ 199.409540][ T4228] usb 2-1: Manufacturer: syz [ 199.422336][ T4228] usb 2-1: SerialNumber: syz [ 199.432589][ T4228] usb 2-1: config 0 descriptor?? [ 199.492746][ T4228] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 199.500730][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 199.541653][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 199.550048][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 199.591790][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 199.612341][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 199.641789][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 199.650713][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 199.687654][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 199.702098][ T7246] futex_wake_op: syz.3.1054 tries to shift op by 144; fix this program [ 199.710484][ T7246] futex_wake_op: syz.3.1054 tries to shift op by 144; fix this program [ 199.720267][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 199.729588][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 199.798194][ T21] usb 5-1: USB disconnect, device number 16 [ 199.821553][ T1107] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 200.026639][ T4609] usb 2-1: USB disconnect, device number 11 [ 200.028119][ T21] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 200.048520][ T21] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 200.049998][ T4609] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 200.063249][ T21] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 200.084858][ T21] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 200.089042][ T4609] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 200.099635][ T21] keyspan 5-1:0.0: device disconnected [ 200.124257][ T4609] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 200.141817][ T1107] usb 1-1: not running at top speed; connect to a high speed hub [ 200.170752][ T4609] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 200.203708][ T4609] keyspan 2-1:0.0: device disconnected [ 200.241605][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 200.273605][ T1107] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 200.302707][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.342122][ T7251] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 200.382572][ T1107] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 200.404213][ T7266] overlayfs: failed to resolve 'lower': -2 [ 200.412608][ T1107] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 200.606898][ T7269] overlayfs: failed to resolve 'lower': -2 [ 200.633533][ T1107] usb 1-1: USB disconnect, device number 16 [ 200.657500][ T1107] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 200.702154][ T1107] cyberjack 1-1:1.0: device disconnected [ 200.750160][ T7275] input: syz1 as /devices/virtual/input/input46 [ 201.781476][ T21] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 201.891129][ T7290] futex_wake_op: syz.3.1071 tries to shift op by 144; fix this program [ 201.900531][ T7290] futex_wake_op: syz.3.1071 tries to shift op by 144; fix this program [ 202.047518][ T7305] overlayfs: failed to resolve 'lower': -2 [ 202.058371][ T7305] overlayfs: failed to resolve 'lower': -2 [ 202.096913][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a2400: rx timeout, send abort [ 202.151691][ T4231] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 202.201543][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.511673][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.551830][ T21] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 202.566049][ T21] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 202.574724][ T21] usb 1-1: Product: syz [ 202.579068][ T21] usb 1-1: Manufacturer: syz [ 202.584178][ T21] usb 1-1: SerialNumber: syz [ 202.590660][ T21] usb 1-1: config 0 descriptor?? [ 202.596974][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e7f1800: rx timeout, send abort [ 202.605409][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f9a2400: abort rx timeout. Force session deactivation [ 202.617934][ T7321] input: syz1 as /devices/virtual/input/input47 [ 202.642721][ T21] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 202.650758][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 202.659049][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 202.668188][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 202.676783][ T21] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 202.687242][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 202.691678][ T4231] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 202.696249][ T21] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 202.708022][ T4231] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 202.715245][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 202.720414][ T4231] usb 3-1: Product: syz [ 202.720432][ T4231] usb 3-1: Manufacturer: syz [ 202.720446][ T4231] usb 3-1: SerialNumber: syz [ 202.723454][ T4231] usb 3-1: config 0 descriptor?? [ 202.762178][ T21] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 202.779985][ T21] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 202.790747][ T21] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 202.796386][ T4231] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 202.815924][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 202.823659][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 202.836212][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 202.875953][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 202.888166][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 202.906806][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 202.920060][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 202.930038][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 202.943785][ T4231] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 202.955351][ T4231] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 203.105217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e7f1800: abort rx timeout. Force session deactivation [ 203.123249][ T4231] usb 1-1: USB disconnect, device number 17 [ 203.275527][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 203.277337][ T21] usb 3-1: USB disconnect, device number 11 [ 203.300274][ T21] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 203.311602][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 203.324866][ T21] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 203.346915][ T21] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 203.353414][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 203.372096][ T21] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 203.380749][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 203.387831][ T21] keyspan 3-1:0.0: device disconnected [ 203.406352][ T4231] keyspan 1-1:0.0: device disconnected [ 203.714159][ T7332] overlayfs: failed to resolve 'upper': -2 [ 203.734879][ T7332] overlayfs: failed to resolve 'upper': -2 [ 203.807684][ T7327] futex_wake_op: syz.3.1086 tries to shift op by 144; fix this program [ 203.835146][ T7327] futex_wake_op: syz.3.1086 tries to shift op by 144; fix this program [ 204.101783][ T4231] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 204.172775][ T7353] input: syz1 as /devices/virtual/input/input48 [ 204.404400][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4df000: rx timeout, send abort [ 204.471549][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.482325][ T4231] usb 2-1: config 0 has no interfaces? [ 204.488034][ T4231] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 204.497704][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.516513][ T4231] usb 2-1: config 0 descriptor?? [ 204.651649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.701539][ T4609] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 204.772042][ T21] usb 2-1: USB disconnect, device number 12 [ 204.849496][ T7366] overlayfs: failed to resolve 'upper': -2 [ 204.863848][ T7366] overlayfs: failed to resolve 'upper': -2 [ 204.904444][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4de000: rx timeout, send abort [ 204.913049][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4df000: abort rx timeout. Force session deactivation [ 205.071615][ T4609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.113749][ T7372] device-mapper: dirty region log: invalid region size 1024 [ 205.121374][ T7372] device-mapper: table: 248:0: mirror: Error creating mirror dirty log [ 205.134821][ T7372] device-mapper: ioctl: error adding target to table [ 205.148210][ T7372] comedi comedi1: Minor 16 could not be opened [ 205.221606][ T4228] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 205.241845][ T4609] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 205.263362][ T4609] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 205.322713][ T4609] usb 1-1: Product: syz [ 205.345406][ T4609] usb 1-1: Manufacturer: syz [ 205.370065][ T4609] usb 1-1: SerialNumber: syz [ 205.412820][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4de000: abort rx timeout. Force session deactivation [ 205.425668][ T4609] usb 1-1: config 0 descriptor?? [ 205.522180][ T4609] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 205.599374][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 205.712924][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 205.816178][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 205.926445][ T4609] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 205.963392][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 205.982844][ T4609] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 205.997138][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 206.035903][ T4609] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 206.046912][ T4609] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 206.060008][ T4609] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 206.126871][ T4609] usb 1-1: USB disconnect, device number 18 [ 206.138006][ T7384] futex_wake_op: syz.2.1108 tries to shift op by 144; fix this program [ 206.141996][ T4609] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 206.156772][ T7384] futex_wake_op: syz.2.1108 tries to shift op by 144; fix this program [ 206.162982][ T4609] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 206.204720][ T4609] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 206.220335][ T4609] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 206.235091][ T4609] keyspan 1-1:0.0: device disconnected [ 206.289128][ T7392] input: syz1 as /devices/virtual/input/input49 [ 206.344133][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.368563][ T7394] overlayfs: failed to resolve 'upper': -2 [ 206.421166][ T7394] overlayfs: failed to resolve 'upper': -2 [ 206.555693][ T4228] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 206.591877][ T4228] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 206.649744][ T4228] usb 5-1: Product: syz [ 206.666068][ T4228] usb 5-1: Manufacturer: syz [ 206.686988][ T4228] usb 5-1: SerialNumber: syz [ 206.735869][ T4228] usb 5-1: config 0 descriptor?? [ 206.797450][ T4228] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 206.816668][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079002400: rx timeout, send abort [ 206.835273][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 206.876967][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 206.905637][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 206.968572][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 207.008585][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 207.059302][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 207.096292][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 207.148736][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 207.184632][ T4228] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 207.219517][ T4228] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 207.318117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079001400: rx timeout, send abort [ 207.358812][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079002400: abort rx timeout. Force session deactivation [ 207.528405][ T4228] usb 5-1: USB disconnect, device number 17 [ 207.577742][ T4228] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 207.600264][ T7413] device syzkaller0 entered promiscuous mode [ 207.647830][ T4228] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 207.712481][ T4228] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 207.725604][ T4228] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 207.737746][ T4228] keyspan 5-1:0.0: device disconnected [ 207.826381][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079001400: abort rx timeout. Force session deactivation [ 207.839147][ T7424] overlayfs: failed to resolve 'work': -2 [ 207.841991][ T7425] futex_wake_op: syz.1.1122 tries to shift op by 144; fix this program [ 207.855348][ T7424] overlayfs: failed to resolve 'work': -2 [ 207.859625][ T7425] futex_wake_op: syz.1.1122 tries to shift op by 144; fix this program [ 207.958263][ T4609] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 207.965880][ T7427] FAULT_INJECTION: forcing a failure. [ 207.965880][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 207.982010][ T7427] CPU: 0 PID: 7427 Comm: syz.2.1125 Not tainted syzkaller #0 [ 207.989367][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.999401][ T7427] Call Trace: [ 208.002668][ T7427] [ 208.005581][ T7427] dump_stack_lvl+0x188/0x250 [ 208.010240][ T7427] ? show_regs_print_info+0x20/0x20 [ 208.015417][ T7427] ? load_image+0x410/0x410 [ 208.019900][ T7427] ? __might_sleep+0xf0/0xf0 [ 208.024489][ T7427] ? __lock_acquire+0x7b50/0x7b50 [ 208.029499][ T7427] should_fail+0x383/0x4b0 [ 208.033901][ T7427] should_failslab+0x5/0x20 [ 208.038384][ T7427] slab_pre_alloc_hook+0x51/0xc0 [ 208.043313][ T7427] ? __kernfs_new_node+0xe3/0x6b0 [ 208.048351][ T7427] kmem_cache_alloc+0x3d/0x280 [ 208.053120][ T7427] __kernfs_new_node+0xe3/0x6b0 [ 208.057957][ T7427] ? kernfs_new_node+0x250/0x250 [ 208.062879][ T7427] ? sysfs_do_create_link_sd+0x75/0x110 [ 208.068405][ T7427] kernfs_new_node+0x148/0x250 [ 208.073152][ T7427] kernfs_create_link+0xa3/0x200 [ 208.078086][ T7427] sysfs_do_create_link_sd+0x83/0x110 [ 208.083441][ T7427] device_add+0x641/0x1050 [ 208.087840][ T7427] cdev_device_add+0x19d/0x340 [ 208.092598][ T7427] nvme_init_ctrl+0x9b8/0xc50 [ 208.097287][ T7427] nvme_loop_create_ctrl+0x1c6/0xf90 [ 208.102571][ T7427] ? nvmf_check_allowed_opts+0x186/0x1c0 [ 208.108202][ T7427] nvmf_dev_write+0x1d6c/0x25a0 [ 208.113041][ T7427] ? verify_lock_unused+0x140/0x140 [ 208.118230][ T7427] ? nvmf_host_put+0x190/0x190 [ 208.122995][ T7427] ? end_current_label_crit_section+0x14b/0x170 [ 208.129222][ T7427] ? fsnotify_perm+0x5d/0x560 [ 208.133883][ T7427] ? security_file_permission+0x75/0xa0 [ 208.139411][ T7427] ? nvmf_host_put+0x190/0x190 [ 208.144156][ T7427] vfs_write+0x304/0xd70 [ 208.148385][ T7427] ? file_end_write+0x250/0x250 [ 208.153217][ T7427] ? __fget_files+0x402/0x470 [ 208.157879][ T7427] ? __fdget_pos+0x1e2/0x370 [ 208.162449][ T7427] ? ksys_write+0x70/0x260 [ 208.166850][ T7427] ksys_write+0x153/0x260 [ 208.171159][ T7427] ? __ia32_sys_read+0x80/0x80 [ 208.175904][ T7427] ? lockdep_hardirqs_on+0x94/0x140 [ 208.181095][ T7427] do_syscall_64+0x4c/0xa0 [ 208.185511][ T7427] ? clear_bhb_loop+0x30/0x80 [ 208.190171][ T7427] ? clear_bhb_loop+0x30/0x80 [ 208.194847][ T7427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.200724][ T7427] RIP: 0033:0x7f76127d4159 [ 208.205125][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.224708][ T7427] RSP: 002b:00007f7610a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.233101][ T7427] RAX: ffffffffffffffda RBX: 00007f7612a5bfa0 RCX: 00007f76127d4159 [ 208.241063][ T7427] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000004 [ 208.249015][ T7427] RBP: 00007f761286b06b R08: 0000000000000000 R09: 0000000000000000 [ 208.256970][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.264919][ T7427] R13: 00007f7612a5c038 R14: 00007f7612a5bfa0 R15: 00007ffd757560d8 [ 208.272876][ T7427] [ 208.285878][ T4231] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 208.303870][ T4609] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 208.409308][ T7442] input: syz1 as /devices/virtual/input/input50 [ 208.665602][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.851571][ T4231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 208.971576][ T7431] ceph: No mds server is up or the cluster is laggy [ 209.033967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024c94000: rx timeout, send abort [ 209.534051][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805facb000: rx timeout, send abort [ 209.548580][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024c94000: abort rx timeout. Force session deactivation [ 209.714422][ T4231] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 209.722687][ T4231] usb 4-1: Product: syz [ 209.726852][ T4231] usb 4-1: Manufacturer: syz [ 209.731495][ T4231] usb 4-1: SerialNumber: syz [ 209.737470][ T1107] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 209.745185][ T4231] usb 4-1: config 0 descriptor?? [ 209.792563][ T4231] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 209.800148][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 209.807943][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 209.816597][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 209.825068][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 209.834044][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 209.845843][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 209.854997][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 209.864336][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 209.873968][ T4231] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 209.884337][ T7460] overlayfs: failed to resolve 'work': -2 [ 209.891703][ T4231] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 209.901241][ T7460] overlayfs: failed to resolve 'work': -2 [ 210.042333][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805facb000: abort rx timeout. Force session deactivation [ 210.159074][ T1107] usb 4-1: USB disconnect, device number 10 [ 210.172120][ T1107] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 210.187926][ T1107] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 210.205957][ T1107] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 210.220951][ T1107] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 210.231319][ T1107] keyspan 4-1:0.0: device disconnected [ 210.265702][ T4231] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.389285][ T7478] input: syz1 as /devices/virtual/input/input51 [ 210.401607][ T4228] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 210.436902][ T7480] futex_wake_op: syz.4.1143 tries to shift op by 144; fix this program [ 210.445471][ T7480] futex_wake_op: syz.4.1143 tries to shift op by 144; fix this program [ 210.631586][ T4231] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.642702][ T4231] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 210.731613][ T4231] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.747033][ T4231] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 210.782741][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.911674][ T4231] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 210.920949][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.929341][ T4231] usb 3-1: Product: syz [ 210.935930][ T4231] usb 3-1: Manufacturer: syz [ 210.940710][ T4231] usb 3-1: SerialNumber: syz [ 210.975650][ T4228] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 210.984990][ T4228] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 210.993232][ T4231] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 211.007612][ T4228] usb 2-1: Product: syz [ 211.007652][ T4231] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 211.012181][ T4228] usb 2-1: Manufacturer: syz [ 211.029218][ T4228] usb 2-1: SerialNumber: syz [ 211.034926][ T4231] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 211.042355][ T4228] usb 2-1: config 0 descriptor?? [ 211.102794][ T4228] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 211.115995][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 211.124347][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 211.139858][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 211.149387][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 211.163627][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 211.175877][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 211.186625][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 211.199254][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 211.200371][ T7463] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 211.216830][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 211.235074][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 211.251946][ T4231] usb 3-1: USB disconnect, device number 12 [ 211.269008][ T4231] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 211.330092][ T4231] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 211.360415][ T4228] usb 2-1: USB disconnect, device number 13 [ 211.366843][ T4231] ti_usb_3410_5052 3-1:2.0: device disconnected [ 211.379368][ T4228] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 211.430710][ T4228] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 211.477759][ T7489] overlayfs: failed to resolve 'work': -2 [ 211.501143][ T7489] overlayfs: failed to resolve 'work': -2 [ 212.205520][ T7508] input: syz1 as /devices/virtual/input/input52 [ 212.268071][ T4228] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 212.280692][ T4228] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 212.293165][ T4228] keyspan 2-1:0.0: device disconnected [ 212.299775][ T7514] futex_wake_op: syz.2.1157 tries to shift op by 144; fix this program [ 212.313494][ T7514] futex_wake_op: syz.2.1157 tries to shift op by 144; fix this program [ 212.711468][ T4228] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 213.105907][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.207425][ T7531] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 213.236237][ T7531] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.245874][ T7531] device team_slave_0 entered promiscuous mode [ 213.252522][ T7531] device team_slave_1 entered promiscuous mode [ 213.264271][ T7531] bond0: (slave team0): Enslaving as an active interface with an up link [ 213.301737][ T4228] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 213.314740][ T4228] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 213.325758][ T4228] usb 2-1: Product: syz [ 213.329992][ T4228] usb 2-1: Manufacturer: syz [ 213.337157][ T4228] usb 2-1: SerialNumber: syz [ 213.346077][ T4228] usb 2-1: config 0 descriptor?? [ 213.413167][ T4228] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 213.436677][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 213.452071][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 213.461731][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 213.473648][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 213.493377][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 213.507691][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 213.515938][ T2301] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 213.525234][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 213.534376][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 213.544460][ T4228] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 213.553949][ T4228] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 213.904957][ T4231] usb 2-1: USB disconnect, device number 14 [ 213.927225][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 213.931635][ T2301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.955960][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 213.999047][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 214.037473][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 214.063061][ T4231] keyspan 2-1:0.0: device disconnected [ 214.122088][ T2301] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 214.181242][ T2301] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 214.273416][ T2301] usb 4-1: Product: syz [ 214.307981][ T2301] usb 4-1: Manufacturer: syz [ 214.343904][ T2301] usb 4-1: SerialNumber: syz [ 214.390555][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e4e4000: rx timeout, send abort [ 214.471898][ T2301] usb 4-1: config 0 descriptor?? [ 214.578592][ T2301] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 214.665696][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 214.725103][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 214.832738][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 214.890639][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e4e7800: rx timeout, send abort [ 214.899131][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e4e4000: abort rx timeout. Force session deactivation [ 214.936986][ T2301] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 215.039002][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 215.139291][ T2301] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 215.224098][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 215.233581][ T2301] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 215.283134][ T2301] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 215.361381][ T2301] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 215.379192][ T7545] input: syz1 as /devices/virtual/input/input53 [ 215.398947][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e4e7800: abort rx timeout. Force session deactivation [ 215.421729][ T2301] usb 4-1: USB disconnect, device number 11 [ 215.466532][ T2301] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 215.499824][ T2301] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 215.541962][ T2301] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 215.560052][ T7558] futex_wake_op: syz.2.1174 tries to shift op by 144; fix this program [ 215.583499][ T2301] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 215.590046][ T7558] futex_wake_op: syz.2.1174 tries to shift op by 144; fix this program [ 215.594405][ T2301] keyspan 4-1:0.0: device disconnected [ 216.780061][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061e18c00: rx timeout, send abort [ 216.788698][ T4609] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 217.152043][ T4609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.280140][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061e1ac00: rx timeout, send abort [ 217.288677][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061e18c00: abort rx timeout. Force session deactivation [ 217.362999][ T4609] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 217.405155][ T4609] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 217.529025][ T4609] usb 5-1: Product: syz [ 217.578071][ T4609] usb 5-1: Manufacturer: syz [ 217.617904][ T4609] usb 5-1: SerialNumber: syz [ 217.692599][ T4609] usb 5-1: config 0 descriptor?? [ 217.769114][ T4609] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 217.788454][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061e1ac00: abort rx timeout. Force session deactivation [ 217.816405][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 217.856274][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 217.886098][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 217.935342][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 217.975639][ T7587] input: syz1 as /devices/virtual/input/input54 [ 217.986544][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 218.021508][ T2301] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 218.040422][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 218.069419][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 218.110726][ T7594] futex_wake_op: syz.2.1189 tries to shift op by 144; fix this program [ 218.119806][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 218.133916][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 218.144964][ T7594] futex_wake_op: syz.2.1189 tries to shift op by 144; fix this program [ 218.155122][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 218.226520][ T4609] usb 5-1: USB disconnect, device number 18 [ 218.247017][ T4609] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 218.265859][ T4609] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 218.278169][ T4609] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 218.296142][ T4609] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 218.306608][ T4609] keyspan 5-1:0.0: device disconnected [ 218.451571][ T2301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.621664][ T2301] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 218.630899][ T2301] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 218.639146][ T2301] usb 2-1: Product: syz [ 218.643502][ T2301] usb 2-1: Manufacturer: syz [ 218.648158][ T2301] usb 2-1: SerialNumber: syz [ 218.655316][ T2301] usb 2-1: config 0 descriptor?? [ 218.693445][ T2301] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 218.732829][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 218.740536][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 218.762074][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 218.783310][ T2301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 218.807179][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 218.826220][ T2301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 218.836441][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 218.845768][ T2301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 218.859013][ T2301] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 218.868365][ T2301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 219.043064][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 219.258105][ T4260] usb 2-1: USB disconnect, device number 15 [ 219.324486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb8b400: rx timeout, send abort [ 219.384608][ T4260] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 219.401087][ T7609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1194'. [ 219.526224][ T4260] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 219.719469][ T4260] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 219.824577][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb88c00: rx timeout, send abort [ 219.833060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb8b400: abort rx timeout. Force session deactivation [ 219.942870][ T4260] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 220.081123][ T4260] keyspan 2-1:0.0: device disconnected [ 220.334894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb88c00: abort rx timeout. Force session deactivation [ 220.861986][ T7629] futex_wake_op: syz.1.1202 tries to shift op by 144; fix this program [ 220.870386][ T7629] futex_wake_op: syz.1.1202 tries to shift op by 144; fix this program [ 220.931488][ T4609] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 221.038408][ T7638] input: syz1 as /devices/virtual/input/input55 [ 221.321583][ T4609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.521580][ T4609] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 221.530660][ T4609] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 221.551442][ T4609] usb 4-1: Product: syz [ 221.558084][ T4609] usb 4-1: Manufacturer: syz [ 221.571430][ T4609] usb 4-1: SerialNumber: syz [ 221.577911][ T4609] usb 4-1: config 0 descriptor?? [ 221.655375][ T4609] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 221.663199][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 221.670886][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 221.714323][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 221.723351][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 221.732548][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 221.751980][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 221.760840][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 221.769764][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 221.779413][ T4609] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 221.789737][ T4609] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 221.961495][ T4260] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 222.068500][ T4609] usb 4-1: USB disconnect, device number 12 [ 222.149302][ T4609] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 222.280823][ T4609] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 222.399541][ T4609] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 222.520339][ T4609] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 222.610853][ T4609] keyspan 4-1:0.0: device disconnected [ 223.101742][ T4260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.146044][ T7679] futex_wake_op: syz.4.1219 tries to shift op by 144; fix this program [ 223.161938][ T7679] futex_wake_op: syz.4.1219 tries to shift op by 144; fix this program [ 223.281933][ T4260] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 223.299575][ T4260] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 223.321503][ T4260] usb 2-1: Product: syz [ 223.330151][ T4260] usb 2-1: Manufacturer: syz [ 223.341641][ T4260] usb 2-1: SerialNumber: syz [ 223.348044][ T4260] usb 2-1: config 0 descriptor?? [ 223.393332][ T4260] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 223.405283][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 223.426778][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 223.446503][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 223.455859][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802602ec00: rx timeout, send abort [ 223.469269][ T4260] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 223.489324][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 223.513882][ T4260] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 223.535644][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 223.553039][ T4260] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 223.572551][ T4260] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 223.592073][ T4260] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 223.808778][ T4260] usb 2-1: USB disconnect, device number 16 [ 223.829243][ T4260] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 223.870185][ T4260] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 223.895319][ T7684] bonding: no command found in bonding_masters - use +ifname or -ifname [ 223.909801][ T4260] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 223.927725][ T4260] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 223.950858][ T4260] keyspan 2-1:0.0: device disconnected [ 223.956402][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802602f400: rx timeout, send abort [ 223.965339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802602ec00: abort rx timeout. Force session deactivation [ 224.346255][ T7699] overlayfs: failed to clone upperpath [ 224.363042][ T7699] overlayfs: failed to clone upperpath [ 224.451615][ T4609] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 224.456446][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802602f400: abort rx timeout. Force session deactivation [ 224.781585][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 224.796420][ T7714] futex_wake_op: syz.3.1234 tries to shift op by 144; fix this program [ 224.827688][ T7714] futex_wake_op: syz.3.1234 tries to shift op by 144; fix this program [ 224.863192][ T4609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.071653][ T4609] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 225.080754][ T4609] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 225.103218][ T4609] usb 5-1: Product: syz [ 225.115415][ T4609] usb 5-1: Manufacturer: syz [ 225.128843][ T4609] usb 5-1: SerialNumber: syz [ 225.172413][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 225.217486][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.251958][ T4609] usb 5-1: config 0 descriptor?? [ 225.362795][ T4609] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 225.426682][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 225.437216][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f99a400: rx timeout, send abort [ 225.493776][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 225.568233][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 225.667460][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 225.743140][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 225.757912][ T13] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 4a:92:b1:ab:b5:d1 [ 225.790397][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 225.883510][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 225.937315][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f999400: rx timeout, send abort [ 225.945923][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f99a400: abort rx timeout. Force session deactivation [ 225.988936][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 226.092370][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 226.178741][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 226.335594][ T4609] usb 5-1: USB disconnect, device number 19 [ 226.393474][ T1107] usb 2-1: USB disconnect, device number 17 [ 226.400725][ T1107] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 226.429597][ T4609] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 226.445596][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f999400: abort rx timeout. Force session deactivation [ 226.526939][ T4609] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 226.530256][ T7739] input: syz1 as /devices/virtual/input/input56 [ 226.593042][ T4609] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 226.650082][ T4609] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 226.671291][ T4609] keyspan 5-1:0.0: device disconnected [ 227.711106][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4ad000: rx timeout, send abort [ 228.211210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4ad400: rx timeout, send abort [ 228.219539][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4ad000: abort rx timeout. Force session deactivation [ 228.743517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e4ad400: abort rx timeout. Force session deactivation [ 229.334342][ T7796] futex_wake_op: syz.4.1249 tries to shift op by 144; fix this program [ 229.462606][ T7796] futex_wake_op: syz.4.1249 tries to shift op by 144; fix this program [ 229.628282][ T7812] input: syz1 as /devices/virtual/input/input57 [ 229.831478][ T4228] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 230.191554][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.361595][ T4228] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 230.370940][ T4228] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 230.379272][ T4228] usb 1-1: Product: syz [ 230.383552][ T4228] usb 1-1: Manufacturer: syz [ 230.388134][ T4228] usb 1-1: SerialNumber: syz [ 230.399626][ T4228] usb 1-1: config 0 descriptor?? [ 230.442871][ T4228] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 230.460253][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 230.468795][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 230.478005][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 230.487516][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 230.497497][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 230.505795][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9ac400: rx timeout, send abort [ 230.517800][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 230.527391][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 230.536263][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 230.545720][ T4228] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 230.560451][ T4228] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 230.951707][ T4260] usb 1-1: USB disconnect, device number 19 [ 230.959370][ T4260] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 230.971699][ T4260] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 230.988417][ T4260] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 231.000014][ T4260] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 231.009442][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9ae000: rx timeout, send abort [ 231.018019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9ac400: abort rx timeout. Force session deactivation [ 231.059604][ T4260] keyspan 1-1:0.0: device disconnected [ 231.184312][ T7855] futex_wake_op: syz.1.1272 tries to shift op by 144; fix this program [ 231.193379][ T7855] futex_wake_op: syz.1.1272 tries to shift op by 144; fix this program [ 231.226826][ T7857] input: syz1 as /devices/virtual/input/input58 [ 231.411492][ T4609] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 231.509512][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e9ae000: abort rx timeout. Force session deactivation [ 231.801627][ T4609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.816017][ T7870] overlayfs: failed to clone upperpath [ 231.842943][ T7873] 9pnet: Insufficient options for proto=fd [ 232.011724][ T4609] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 232.020862][ T4609] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 232.302623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec1e000: rx timeout, send abort [ 232.802712][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b841000: rx timeout, send abort [ 232.811294][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ec1e000: abort rx timeout. Force session deactivation [ 233.205858][ T4609] usb 5-1: Product: syz [ 233.210084][ T4609] usb 5-1: Manufacturer: syz [ 233.215166][ T4609] usb 5-1: SerialNumber: syz [ 233.223677][ T4609] usb 5-1: config 0 descriptor?? [ 233.239271][ T7887] 9pnet_virtio: no channels available for device syz [ 233.282623][ T4609] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 233.292538][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 233.300336][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 233.309206][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 233.311020][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b841000: abort rx timeout. Force session deactivation [ 233.328689][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 233.338559][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 233.347980][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 233.356945][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 233.375913][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 233.397590][ T4609] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 233.416721][ T4609] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 233.572502][ T4228] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 233.628962][ T7908] input: syz1 as /devices/virtual/input/input59 [ 233.646861][ T7909] futex_wake_op: syz.3.1294 tries to shift op by 144; fix this program [ 233.673014][ T7909] futex_wake_op: syz.3.1294 tries to shift op by 144; fix this program [ 233.735410][ T2301] usb 5-1: USB disconnect, device number 20 [ 233.744342][ T2301] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 233.755844][ T2301] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 233.761818][ C0] ================================================================== [ 233.769162][ T2301] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 233.773721][ C0] BUG: KASAN: use-after-free in usa49_glocont_callback+0x19f/0x270 [ 233.773753][ C0] Read of size 4 at addr ffff88805a2a50b0 by task swapper/0/0 [ 233.773769][ C0] [ 233.773776][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 233.773794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.773806][ C0] Call Trace: [ 233.773813][ C0] [ 233.773821][ C0] dump_stack_lvl+0x188/0x250 [ 233.789848][ T2301] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 233.791059][ C0] ? show_regs_print_info+0x20/0x20 [ 233.843079][ C0] ? _printk+0xda/0x130 [ 233.847246][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 233.852789][ C0] ? load_image+0x410/0x410 [ 233.857284][ C0] print_address_description+0x60/0x2d0 [ 233.862855][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 233.868493][ C0] kasan_report+0xdf/0x130 [ 233.872901][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 233.878430][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 233.883621][ C0] usa49_glocont_callback+0x19f/0x270 [ 233.889003][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 233.894382][ C0] dummy_timer+0xa47/0x34a0 [ 233.898882][ C0] ? verify_lock_unused+0x140/0x140 [ 233.904094][ C0] ? dummy_free_streams+0x520/0x520 [ 233.909302][ C0] ? dummy_free_streams+0x520/0x520 [ 233.914497][ C0] call_timer_fn+0x17b/0x540 [ 233.919073][ C0] ? dummy_free_streams+0x520/0x520 [ 233.924261][ C0] ? __run_timers+0x810/0x810 [ 233.928957][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 233.934143][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 233.939362][ C0] ? dummy_free_streams+0x520/0x520 [ 233.944553][ C0] __run_timers+0x56c/0x810 [ 233.949075][ C0] ? detach_timer+0x2b0/0x2b0 [ 233.951648][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.953732][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.953768][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 233.974597][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 233.980823][ C0] run_timer_softirq+0x63/0xf0 [ 233.985577][ C0] handle_softirqs+0x336/0x830 [ 233.990350][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 233.995186][ C0] ? do_softirq+0x210/0x210 [ 233.999668][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 234.004776][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 234.009984][ C0] __irq_exit_rcu+0x13b/0x230 [ 234.014640][ C0] ? irq_exit_rcu+0x20/0x20 [ 234.019126][ C0] irq_exit_rcu+0x5/0x20 [ 234.023355][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 234.029013][ C0] [ 234.031928][ C0] [ 234.034850][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 234.040816][ C0] RIP: 0010:default_idle+0xb/0x10 [ 234.045825][ C0] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 234.065429][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 234.071506][ C0] RAX: c0890cb0a6b74100 RBX: ffffffff8c0bc480 RCX: c0890cb0a6b74100 [ 234.079481][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 234.087444][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 234.095404][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 234.103384][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 234.111363][ C0] default_idle_call+0x81/0xc0 [ 234.116121][ C0] do_idle+0x3a1/0x650 [ 234.120175][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 234.121697][ T4228] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 234.125354][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 234.125391][ C0] ? schedule_idle+0x57/0x90 [ 234.138745][ T4228] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 234.140000][ C0] cpu_startup_entry+0x14/0x20 [ 234.146784][ T4228] usb 3-1: Product: syz [ 234.152711][ C0] ? time_init+0x40/0x40 [ 234.152736][ C0] start_kernel+0x489/0x540 [ 234.152762][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 234.152798][ C0] [ 234.152806][ C0] [ 234.152812][ C0] Allocated by task 4609: [ 234.152821][ C0] __kasan_kmalloc+0xaf/0xe0 [ 234.152844][ C0] keyspan_port_probe+0xa7/0xd10 [ 234.152868][ C0] usb_serial_device_probe+0xd6/0x2d0 [ 234.162202][ T4228] usb 3-1: Manufacturer: syz [ 234.165969][ C0] really_probe+0x276/0xc70 [ 234.165995][ C0] __driver_probe_device+0x1f5/0x390 [ 234.170531][ T4228] usb 3-1: SerialNumber: syz [ 234.176349][ C0] driver_probe_device+0x4f/0x420 [ 234.176374][ C0] __device_attach_driver+0x2b0/0x500 [ 234.176393][ C0] bus_for_each_drv+0x184/0x210 [ 234.176410][ C0] __device_attach+0x2a7/0x480 [ 234.176426][ C0] bus_probe_device+0xba/0x1d0 [ 234.176444][ C0] device_add+0xbcf/0x1050 [ 234.176462][ C0] usb_serial_probe+0x265c/0x2c90 [ 234.176482][ C0] usb_probe_interface+0x5be/0xae0 [ 234.176501][ C0] really_probe+0x276/0xc70 [ 234.176521][ C0] __driver_probe_device+0x1f5/0x390 [ 234.176542][ C0] driver_probe_device+0x4f/0x420 [ 234.176561][ C0] __device_attach_driver+0x2b0/0x500 [ 234.195477][ T4228] usb 3-1: config 0 descriptor?? [ 234.195679][ C0] bus_for_each_drv+0x184/0x210 [ 234.249188][ T4228] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 234.253921][ C0] __device_attach+0x2a7/0x480 [ 234.253950][ C0] bus_probe_device+0xba/0x1d0 [ 234.253968][ C0] device_add+0xbcf/0x1050 [ 234.253983][ C0] usb_set_configuration+0x19d5/0x2030 [ 234.254007][ C0] usb_generic_driver_probe+0x89/0x150 [ 234.254030][ C0] usb_probe_device+0x126/0x250 [ 234.254047][ C0] really_probe+0x276/0xc70 [ 234.254067][ C0] __driver_probe_device+0x1f5/0x390 [ 234.254088][ C0] driver_probe_device+0x4f/0x420 [ 234.254108][ C0] __device_attach_driver+0x2b0/0x500 [ 234.254127][ C0] bus_for_each_drv+0x184/0x210 [ 234.254146][ C0] __device_attach+0x2a7/0x480 [ 234.254166][ C0] bus_probe_device+0xba/0x1d0 [ 234.254185][ C0] device_add+0xbcf/0x1050 [ 234.254200][ C0] usb_new_device+0x9f6/0x15d0 [ 234.254218][ C0] hub_event+0x2b8d/0x5260 [ 234.266405][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 234.269046][ C0] process_one_work+0x867/0xff0 [ 234.269071][ C0] worker_thread+0xad7/0x12a0 [ 234.275711][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 234.279418][ C0] kthread+0x42e/0x520 [ 234.279439][ C0] ret_from_fork+0x1f/0x30 [ 234.291788][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 234.296527][ C0] [ 234.296535][ C0] Freed by task 2301: [ 234.296544][ C0] kasan_set_track+0x4b/0x70 [ 234.310321][ T4228] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 234.310427][ C0] kasan_set_free_info+0x1f/0x40 [ 234.319664][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 234.321300][ C0] ____kasan_slab_free+0xd5/0x110 [ 234.321327][ C0] slab_free_freelist_hook+0xec/0x170 [ 234.337108][ T4228] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 234.340902][ C0] kfree+0xef/0x2a0 [ 234.340925][ C0] usb_serial_device_remove+0x11c/0x1e0 [ 234.340946][ C0] device_release_driver_internal+0x44c/0x710 [ 234.340969][ C0] bus_remove_device+0x2dd/0x400 [ 234.340988][ C0] device_del+0x63f/0xa80 [ 234.341005][ C0] usb_serial_disconnect+0x294/0x480 [ 234.341024][ C0] usb_unbind_interface+0x203/0x870 [ 234.341042][ C0] device_release_driver_internal+0x487/0x710 [ 234.341064][ C0] bus_remove_device+0x2dd/0x400 [ 234.341084][ C0] device_del+0x63f/0xa80 [ 234.341100][ C0] usb_disable_device+0x3e7/0x8a0 [ 234.341122][ C0] usb_disconnect+0x33c/0x8a0 [ 234.341141][ C0] hub_event+0x1d64/0x5260 [ 234.341158][ C0] process_one_work+0x867/0xff0 [ 234.341178][ C0] worker_thread+0xad7/0x12a0 [ 234.353855][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 234.356096][ C0] kthread+0x42e/0x520 [ 234.356118][ C0] ret_from_fork+0x1f/0x30 [ 234.366096][ T4228] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 234.369993][ C0] [ 234.370000][ C0] Last potentially related work creation: [ 234.370006][ C0] kasan_save_stack+0x35/0x60 [ 234.376430][ T4228] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 234.382012][ C0] kasan_record_aux_stack+0xb8/0x100 [ 234.382038][ C0] kvfree_call_rcu+0x105/0x7f0 [ 234.382057][ C0] hash_netiface4_add+0x2582/0x3370 [ 234.382080][ C0] hash_netiface4_uadt+0x868/0xa70 [ 234.382101][ C0] call_ad+0x387/0x9a0 [ 234.382119][ C0] ip_set_ad+0x816/0x9c0 [ 234.382136][ C0] nfnetlink_rcv_msg+0xbf7/0x1180 [ 234.382155][ C0] netlink_rcv_skb+0x1e9/0x430 [ 234.392844][ T4228] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 234.399251][ C0] nfnetlink_rcv+0x2b4/0x2450 [ 234.471779][ T4228] usb 3-1: USB disconnect, device number 13 [ 234.474094][ C0] netlink_unicast+0x78f/0x940 [ 234.486751][ T4228] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 234.489396][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 234.500169][ T4228] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 234.505887][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 234.505915][ C0] ___sys_sendmsg+0x236/0x2e0 [ 234.505934][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 234.505951][ C0] do_syscall_64+0x4c/0xa0 [ 234.505971][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.505995][ C0] [ 234.506001][ C0] The buggy address belongs to the object at ffff88805a2a5000 [ 234.506001][ C0] which belongs to the cache kmalloc-192 of size 192 [ 234.506017][ C0] The buggy address is located 176 bytes inside of [ 234.506017][ C0] 192-byte region [ffff88805a2a5000, ffff88805a2a50c0) [ 234.518786][ T4228] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 234.520253][ C0] The buggy address belongs to the page: [ 234.520265][ C0] page:ffffea000168a940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a2a5 [ 234.528145][ T4228] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 234.529332][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 234.539256][ T4228] keyspan 3-1:0.0: device disconnected [ 234.546365][ C0] raw: 00fff00000000200 0000000000000000 0000000300000001 ffff888016c41a00 [ 234.546386][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 234.546397][ C0] page dumped because: kasan: bad access detected [ 234.546416][ C0] page_owner tracks the page as allocated [ 234.546422][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5687, ts 124276726224, free_ts 122316772082 [ 234.546454][ C0] get_page_from_freelist+0x24f6/0x2670 [ 234.546480][ C0] __alloc_pages+0x1ee/0x480 [ 234.546499][ C0] new_slab+0xc0/0x4b0 [ 234.546516][ C0] ___slab_alloc+0x807/0xdd0 [ 234.546532][ C0] __kmalloc+0x11d/0x340 [ 234.546548][ C0] hash_netiface4_resize+0xa5f/0x1900 [ 234.546571][ C0] call_ad+0x437/0x9a0 [ 234.546588][ C0] ip_set_ad+0x816/0x9c0 [ 234.546605][ C0] nfnetlink_rcv_msg+0xbf7/0x1180 [ 234.546626][ C0] netlink_rcv_skb+0x1e9/0x430 [ 234.546655][ C0] nfnetlink_rcv+0x2b4/0x2450 [ 234.867138][ C0] netlink_unicast+0x78f/0x940 [ 234.871891][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 234.876650][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 234.881398][ C0] ___sys_sendmsg+0x236/0x2e0 [ 234.886088][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 234.890924][ C0] page last free stack trace: [ 234.895586][ C0] free_unref_page_prepare+0x637/0x6c0 [ 234.901031][ C0] free_unref_page+0x8f/0x2a0 [ 234.905689][ C0] __vunmap+0x8e0/0xa80 [ 234.909824][ C0] kcov_mmap+0x89/0x120 [ 234.913960][ C0] mmap_file+0x5d/0xb0 [ 234.918052][ C0] mmap_region+0x1048/0x1730 [ 234.922625][ C0] do_mmap+0x801/0xe30 [ 234.926673][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 234.931254][ C0] ksys_mmap_pgoff+0x4e2/0x790 [ 234.935998][ C0] do_syscall_64+0x4c/0xa0 [ 234.940393][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.946280][ C0] [ 234.948582][ C0] Memory state around the buggy address: [ 234.954196][ C0] ffff88805a2a4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.962260][ C0] ffff88805a2a5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.970317][ C0] >ffff88805a2a5080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 234.978371][ C0] ^ [ 234.983991][ C0] ffff88805a2a5100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.992040][ C0] ffff88805a2a5180: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.000090][ C0] ================================================================== [ 235.008133][ C0] Disabling lock debugging due to kernel taint [ 235.014299][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.021491][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 235.029904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.039935][ C0] Call Trace: [ 235.043192][ C0] [ 235.046013][ C0] dump_stack_lvl+0x188/0x250 [ 235.050669][ C0] ? show_regs_print_info+0x20/0x20 [ 235.055843][ C0] ? load_image+0x410/0x410 [ 235.060325][ C0] panic+0x2f8/0x850 [ 235.064200][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 235.068683][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.074552][ C0] ? _raw_spin_unlock+0x40/0x40 [ 235.079382][ C0] ? print_memory_metadata+0x314/0x400 [ 235.084821][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 235.090341][ C0] check_panic_on_warn+0x80/0xa0 [ 235.095258][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 235.100778][ C0] end_report+0x6d/0xf0 [ 235.104913][ C0] kasan_report+0x102/0x130 [ 235.109395][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 235.114916][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 235.120092][ C0] usa49_glocont_callback+0x19f/0x270 [ 235.125442][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 235.130793][ C0] dummy_timer+0xa47/0x34a0 [ 235.135281][ C0] ? verify_lock_unused+0x140/0x140 [ 235.140465][ C0] ? dummy_free_streams+0x520/0x520 [ 235.145641][ C0] ? dummy_free_streams+0x520/0x520 [ 235.150819][ C0] call_timer_fn+0x17b/0x540 [ 235.155404][ C0] ? dummy_free_streams+0x520/0x520 [ 235.160581][ C0] ? __run_timers+0x810/0x810 [ 235.165241][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 235.170419][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 235.175597][ C0] ? dummy_free_streams+0x520/0x520 [ 235.180775][ C0] __run_timers+0x56c/0x810 [ 235.185260][ C0] ? detach_timer+0x2b0/0x2b0 [ 235.189914][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 235.195877][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 235.200715][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 235.206931][ C0] run_timer_softirq+0x63/0xf0 [ 235.211682][ C0] handle_softirqs+0x336/0x830 [ 235.216447][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 235.221293][ C0] ? do_softirq+0x210/0x210 [ 235.225773][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 235.230868][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 235.236064][ C0] __irq_exit_rcu+0x13b/0x230 [ 235.240723][ C0] ? irq_exit_rcu+0x20/0x20 [ 235.245224][ C0] irq_exit_rcu+0x5/0x20 [ 235.249442][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 235.255052][ C0] [ 235.257961][ C0] [ 235.260875][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 235.266835][ C0] RIP: 0010:default_idle+0xb/0x10 [ 235.271855][ C0] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 235.291467][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 235.297532][ C0] RAX: c0890cb0a6b74100 RBX: ffffffff8c0bc480 RCX: c0890cb0a6b74100 [ 235.305481][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 235.313434][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 235.321385][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 235.329351][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 235.337306][ C0] default_idle_call+0x81/0xc0 [ 235.342055][ C0] do_idle+0x3a1/0x650 [ 235.346114][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 235.351289][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 235.356899][ C0] ? schedule_idle+0x57/0x90 [ 235.361477][ C0] cpu_startup_entry+0x14/0x20 [ 235.366246][ C0] ? time_init+0x40/0x40 [ 235.370467][ C0] start_kernel+0x489/0x540 [ 235.374951][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 235.380829][ C0] [ 235.384045][ C0] Kernel Offset: disabled [ 235.388380][ C0] Rebooting in 86400 seconds..