last executing test programs: 3.399094717s ago: executing program 3 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x9, 0x4, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) 3.153264292s ago: executing program 3 (id=142): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.033207645s ago: executing program 3 (id=145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000244)=0x1c) 1.999469891s ago: executing program 3 (id=153): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 1.6175162s ago: executing program 3 (id=159): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.557419262s ago: executing program 3 (id=160): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 1.345449407s ago: executing program 0 (id=163): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x1b9, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 1.285879008s ago: executing program 0 (id=164): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000b06010200000000e0ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.258321729s ago: executing program 2 (id=166): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x13}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40), 0x0, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.159082471s ago: executing program 2 (id=167): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 843.062679ms ago: executing program 0 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='3', 0x1) 792.8539ms ago: executing program 1 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) 672.988013ms ago: executing program 1 (id=172): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x1b9, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 597.427885ms ago: executing program 0 (id=173): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket(0x18, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 494.992048ms ago: executing program 0 (id=174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 424.284089ms ago: executing program 1 (id=175): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x13}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40), 0x0, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 421.320339ms ago: executing program 2 (id=176): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) kexec_load(0x800, 0x9, &(0x7f00000019c0)=[{0x0, 0x0, 0x7737, 0xffffffc0}, {&(0x7f0000000480)="4238f895f0a02fe6ff3954d039d549253835ad13a71241099de081abfe88f0b48d55a30c839ea31e722b1f2c9a0c528bd61e23490c3d68a2a053439b", 0x3c, 0x7fffffff, 0xffffffff}, {&(0x7f0000000540)="b854d3de260b10e04312279a8b8a8a692871fc94519b7a2e7efe0b41952a962fd8e86ec5dcba41b93493287da05ccedc2e59627d68925dbce4d9bfe8a0f7d7afccc4ce822c5c79bcaf31fb93f4089abe394cdc25ad9320057acd7cb0121d82d4a9332bd2d9b55377706b134ab375c759a09d6cef429ccbba4fbe71ade7531c21c17c11f53df17cff77dfdce318e605b14844aacb8fa3048669afc0e4dfe02a32b63e32bc4a295c04b6241fbe50bad41dd6de529dd166a4bb", 0xb8, 0x4, 0xa8b}, {&(0x7f0000000600), 0x0, 0x1, 0x40}, {&(0x7f0000000700)="285b8dc238f5fe406c766157fab0aa8b092a7bc2f179c73d8d1990f0b0bf758ca0a94834", 0x24, 0x8, 0xafc8}, {&(0x7f0000000740)="82e01f5710289ccbc4216e82163abd9e823a40af1257fc08a89225b5d7572092794c19e208302ee4325705a7edd12f003e63d31239a021db42039a4ad25db96b8df16ece4c149d73fee8c35fc950b0fe141ebe32e29848a2a974fcf8dd3bd7a158c69050629b32367a56e6e40d35d562522aee7ac9bc568d46b932c095d96e0cd90407c39eb05b650ea7", 0x8a, 0x7fffffff, 0xd}, {&(0x7f0000000800)="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", 0x1000, 0x7, 0xffff}, {&(0x7f0000001800)="fc4218387f050932c40bcc0b480509aef6792b42c4474432085d12ca64c10156cb0459274dbf73efb82e98b7012e12e3344c07444db874cff9f4f7acf2fc", 0x3e, 0x1, 0x10001}, {&(0x7f0000001900)="a473ce463598eb862cc7f14e1c88d49d7da9b6b1c6e17753838699d41f19082f1a5a09388cd91a488fe5dc5a130decd9b51d822ab919a1059abf4d7c1753118624945688b82eab53f48670aa97dd19a2908c2fc112034499f6e7f4b89d0acc34fb4d331fe9a0894cabb52211dc63a3f6605965157984f3db8e826730a11bc0f573119572de6350e9040c912308e7500752d480c19dcc6aae5fffaf4d90b34b3ff2d16f351961", 0xa6, 0x8, 0x9}], 0x3e0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cfg/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='dummy_udc', 0x9) 302.510762ms ago: executing program 0 (id=177): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 296.367192ms ago: executing program 2 (id=178): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 236.992144ms ago: executing program 1 (id=179): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2", 0x187}, {&(0x7f0000000700)="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", 0x1aa}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fd", 0x2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(0xffffffffffffffff, &(0x7f0000001e00)="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", 0x339) 101.326037ms ago: executing program 2 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 101.210287ms ago: executing program 1 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 17.994339ms ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) 0s ago: executing program 1 (id=183): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x1b9, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 73.123359][ T5762] cgroup: Unknown subsys name 'net' [ 73.252735][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.620884][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.153478][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.163736][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.177975][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.179411][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.194492][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.195212][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.202588][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.210649][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.219059][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.223477][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.231213][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.237992][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.246141][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.257088][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.267321][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.275349][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.283630][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.284095][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.299105][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.306519][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.311011][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.314217][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.328304][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.335827][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.666678][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.802081][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.871626][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.920487][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.927768][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.935617][ T5775] bridge_slave_0: entered allmulticast mode [ 76.943892][ T5775] bridge_slave_0: entered promiscuous mode [ 76.955674][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.981565][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.989064][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.996638][ T5775] bridge_slave_1: entered allmulticast mode [ 77.003322][ T5775] bridge_slave_1: entered promiscuous mode [ 77.066933][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.077334][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.084479][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.094016][ T5773] bridge_slave_0: entered allmulticast mode [ 77.101069][ T5773] bridge_slave_0: entered promiscuous mode [ 77.129697][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.151720][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.159176][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.167067][ T5773] bridge_slave_1: entered allmulticast mode [ 77.173796][ T5773] bridge_slave_1: entered promiscuous mode [ 77.198543][ T5775] team0: Port device team_slave_0 added [ 77.214526][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.221778][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.229205][ T5774] bridge_slave_0: entered allmulticast mode [ 77.236055][ T5774] bridge_slave_0: entered promiscuous mode [ 77.249839][ T5775] team0: Port device team_slave_1 added [ 77.269978][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.279640][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.286828][ T5774] bridge_slave_1: entered allmulticast mode [ 77.293446][ T5774] bridge_slave_1: entered promiscuous mode [ 77.340741][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.359545][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.366699][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.392763][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.417851][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.424815][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.453217][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.466041][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.477527][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.490073][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.499629][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.507575][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.514757][ T5776] bridge_slave_0: entered allmulticast mode [ 77.521925][ T5776] bridge_slave_0: entered promiscuous mode [ 77.560400][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.568174][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.575499][ T5776] bridge_slave_1: entered allmulticast mode [ 77.582507][ T5776] bridge_slave_1: entered promiscuous mode [ 77.625594][ T5774] team0: Port device team_slave_0 added [ 77.644067][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.657640][ T5773] team0: Port device team_slave_0 added [ 77.665508][ T5774] team0: Port device team_slave_1 added [ 77.681425][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.694784][ T5773] team0: Port device team_slave_1 added [ 77.715150][ T5775] hsr_slave_0: entered promiscuous mode [ 77.721578][ T5775] hsr_slave_1: entered promiscuous mode [ 77.757833][ T5776] team0: Port device team_slave_0 added [ 77.798879][ T5776] team0: Port device team_slave_1 added [ 77.815739][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.822751][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.849281][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.863218][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.874102][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.900263][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.911890][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.921244][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.947484][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.983478][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.990687][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.016912][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.036843][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.043939][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.070179][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.090213][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.097329][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.123571][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.219390][ T5774] hsr_slave_0: entered promiscuous mode [ 78.225600][ T5774] hsr_slave_1: entered promiscuous mode [ 78.232481][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.240388][ T5774] Cannot create hsr debugfs directory [ 78.274281][ T5773] hsr_slave_0: entered promiscuous mode [ 78.280731][ T5773] hsr_slave_1: entered promiscuous mode [ 78.287344][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.294914][ T5773] Cannot create hsr debugfs directory [ 78.327365][ T5782] Bluetooth: hci1: command tx timeout [ 78.339790][ T5776] hsr_slave_0: entered promiscuous mode [ 78.346796][ T5776] hsr_slave_1: entered promiscuous mode [ 78.352960][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.361519][ T5776] Cannot create hsr debugfs directory [ 78.406828][ T5777] Bluetooth: hci3: command tx timeout [ 78.412455][ T5777] Bluetooth: hci2: command tx timeout [ 78.418500][ T5782] Bluetooth: hci0: command tx timeout [ 78.639369][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.664655][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.692851][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.702842][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.776976][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.790891][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.812267][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.841515][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.879727][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.909905][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.921289][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.968342][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.004718][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.015595][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.025419][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.039857][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.102572][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.181281][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.202186][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.209580][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.226115][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.233297][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.245761][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.327871][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.358692][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.365814][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.374526][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.381686][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.416148][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.473006][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.521367][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.565546][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572763][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.589040][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.596544][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.625224][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.673251][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.680624][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.697280][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.704488][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.765588][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.919206][ T5775] veth0_vlan: entered promiscuous mode [ 79.942518][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.961300][ T5775] veth1_vlan: entered promiscuous mode [ 80.040739][ T5775] veth0_macvtap: entered promiscuous mode [ 80.054171][ T5774] veth0_vlan: entered promiscuous mode [ 80.073948][ T5775] veth1_macvtap: entered promiscuous mode [ 80.091144][ T5774] veth1_vlan: entered promiscuous mode [ 80.151476][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.200686][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.240049][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.263749][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.272928][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.284122][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.301641][ T5774] veth0_macvtap: entered promiscuous mode [ 80.325858][ T5774] veth1_macvtap: entered promiscuous mode [ 80.380409][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.392321][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.403993][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.412735][ T5782] Bluetooth: hci1: command tx timeout [ 80.421452][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.432331][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.444102][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.473039][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.486787][ T5782] Bluetooth: hci3: command tx timeout [ 80.488424][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.492241][ T5782] Bluetooth: hci0: command tx timeout [ 80.502250][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507240][ T5777] Bluetooth: hci2: command tx timeout [ 80.515794][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.530352][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.556893][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.602283][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.617664][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.651640][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.665462][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.798875][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.814644][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.834689][ T5773] veth0_vlan: entered promiscuous mode [ 80.894141][ T5773] veth1_vlan: entered promiscuous mode [ 80.919509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.939608][ T5776] veth0_vlan: entered promiscuous mode [ 80.945188][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.007886][ T5776] veth1_vlan: entered promiscuous mode [ 81.014794][ T5838] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.064426][ T5773] veth0_macvtap: entered promiscuous mode [ 81.112481][ T5773] veth1_macvtap: entered promiscuous mode [ 81.154366][ T5776] veth0_macvtap: entered promiscuous mode [ 81.191040][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.230688][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.246533][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257340][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.268678][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.294869][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.303965][ T5776] veth1_macvtap: entered promiscuous mode [ 81.366052][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.380114][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.395844][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.411726][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.431326][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.451060][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.469110][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.482772][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.516346][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532983][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.545526][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.568044][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.588360][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.605702][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.624727][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.634097][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.673116][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.684831][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.701112][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.712724][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.738587][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.756996][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.771425][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.798949][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.820689][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.844216][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.875818][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.061774][ T5854] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.099896][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.126275][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.259715][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.280697][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.304400][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.315999][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.388472][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.404137][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.487877][ T5782] Bluetooth: hci1: command tx timeout [ 82.568869][ T5777] Bluetooth: hci0: command tx timeout [ 82.569364][ T5783] Bluetooth: hci2: command tx timeout [ 82.581448][ T5782] Bluetooth: hci3: command tx timeout [ 82.715619][ T5782] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 82.881132][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.096911][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 83.112101][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.120083][ T5814] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.145776][ T5814] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.160692][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 83.173802][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.200929][ T5814] usb 2-1: config 168 interface 0 has no altsetting 0 [ 83.231527][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.257686][ T5814] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.269381][ T5814] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.281356][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 83.301913][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.324453][ T5814] usb 2-1: config 168 interface 0 has no altsetting 0 [ 83.335127][ T5814] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.356420][ T5814] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 83.402205][ T5814] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 83.425923][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 83.442018][ T5814] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 83.467841][ T5814] usb 2-1: config 168 interface 0 has no altsetting 0 [ 83.479121][ T5814] usb 2-1: string descriptor 0 read error: -22 [ 83.490658][ T5814] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.504680][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.543562][ T5814] adutux 2-1:168.0: interrupt endpoints not found [ 83.640152][ T5884] Attempt to restore checkpoint with obsolete wellknown handles [ 83.908865][ T791] usb 2-1: USB disconnect, device number 2 [ 84.282862][ T5907] overlayfs: missing 'lowerdir' [ 84.566548][ T5782] Bluetooth: hci1: command tx timeout [ 84.647160][ T5782] Bluetooth: hci3: command tx timeout [ 84.652629][ T5782] Bluetooth: hci2: command tx timeout [ 84.658721][ T5777] Bluetooth: hci0: command tx timeout [ 84.847506][ T5931] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 85.002397][ T5937] fuse: Unknown parameter 'fd0x0000000000000003' [ 85.436373][ T177] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.656278][ T177] usb 1-1: Using ep0 maxpacket: 8 [ 85.670040][ T177] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 85.683120][ T177] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.705167][ T177] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.717862][ T177] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.726504][ T5781] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.736385][ T177] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.758435][ T177] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.771376][ T177] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 85.786319][ T177] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.793660][ T5964] syz.1.50 (5964) used greatest stack depth: 20824 bytes left [ 85.801201][ T177] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.825224][ T177] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.836636][ T177] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.851423][ T177] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.863373][ T177] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 85.874595][ T177] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.889642][ T177] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.911882][ T177] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.924930][ T177] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.946801][ T5781] usb 4-1: Using ep0 maxpacket: 8 [ 85.955783][ T177] usb 1-1: config 168 interface 0 has no altsetting 0 [ 85.970726][ T177] usb 1-1: string descriptor 0 read error: -22 [ 85.977216][ T177] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.986551][ T177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.986642][ T5781] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.013392][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.014328][ T177] adutux 1-1:168.0: interrupt endpoints not found [ 86.043543][ T5781] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.067912][ T5781] pvrusb2: ********** [ 86.072088][ T5781] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.088836][ T5781] pvrusb2: Important functionality might not be entirely working. [ 86.110117][ T5781] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.133003][ T5781] pvrusb2: ********** [ 86.251876][ T5833] usb 1-1: USB disconnect, device number 2 [ 86.259921][ T2323] pvrusb2: Invalid write control endpoint [ 86.421702][ T2323] pvrusb2: Invalid write control endpoint [ 86.429797][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.456413][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.481047][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.496069][ T2323] pvrusb2: Device being rendered inoperable [ 86.505178][ T5956] pvrusb2: Attempted to execute control transfer when device not ok [ 86.515435][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 86.525309][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 86.552219][ T5956] ======================================================= [ 86.552219][ T5956] WARNING: The mand mount option has been deprecated and [ 86.552219][ T5956] and is ignored by this kernel. Remove the mand [ 86.552219][ T5956] option from the mount to silence this warning. [ 86.552219][ T5956] ======================================================= [ 86.590333][ T2323] pvrusb2: Attached sub-driver cx25840 [ 86.596042][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 86.608844][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 86.631029][ T791] usb 4-1: USB disconnect, device number 2 [ 86.657851][ T5781] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.840348][ T5781] usb 3-1: device descriptor read/64, error -71 [ 86.886777][ T5783] Bluetooth: hci0: command tx timeout [ 86.971538][ T9] cfg80211: failed to load regulatory.db [ 87.137016][ T5781] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.316634][ T5781] usb 3-1: device descriptor read/64, error -71 [ 87.456842][ T5781] usb usb3-port1: attempt power cycle [ 87.916566][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.971730][ T5781] usb 3-1: device descriptor read/8, error -71 [ 88.256724][ T5781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.285036][ T6016] overlayfs: missing 'lowerdir' [ 88.313813][ T5781] usb 3-1: device descriptor read/8, error -71 [ 88.453250][ T5781] usb usb3-port1: unable to enumerate USB device [ 88.924261][ T6041] overlayfs: missing 'lowerdir' [ 89.674020][ T6063] overlayfs: missing 'lowerdir' [ 89.956448][ T5835] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.081272][ T791] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.146294][ T177] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.146303][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 90.162138][ T5835] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 90.179739][ T5835] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 90.190179][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.198605][ T5835] usb 3-1: Product: syz [ 90.203056][ T5835] usb 3-1: Manufacturer: syz [ 90.208312][ T5835] usb 3-1: SerialNumber: syz [ 90.224693][ T5835] usb 3-1: config 0 descriptor?? [ 90.240123][ T5835] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 90.286518][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 90.294157][ T791] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 90.303586][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.323770][ T791] usb 1-1: config 0 descriptor?? [ 90.328930][ T177] usb 4-1: device descriptor read/64, error -71 [ 90.348061][ T791] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 90.596321][ T177] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.746491][ T177] usb 4-1: device descriptor read/64, error -71 [ 90.866769][ T177] usb usb4-port1: attempt power cycle [ 91.210257][ T5783] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 91.276423][ T177] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.307125][ T177] usb 4-1: device descriptor read/8, error -71 [ 91.576404][ T177] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.611851][ T177] usb 4-1: device descriptor read/8, error -71 [ 91.737498][ T177] usb usb4-port1: unable to enumerate USB device [ 91.810016][ T6088] overlayfs: missing 'lowerdir' [ 92.326525][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.518204][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.528522][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.537597][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 92.546752][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.556859][ T9] usb 2-1: config 0 descriptor?? [ 93.003510][ T791] gspca_sonixj: reg_w1 err -71 [ 93.016787][ T791] sonixj: probe of 1-1:0.0 failed with error -71 [ 93.039174][ T791] usb 1-1: USB disconnect, device number 3 [ 93.471654][ T5835] gspca_zc3xx: reg_w_i err -71 [ 93.516492][ T5835] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 93.525160][ T5835] usb 3-1: USB disconnect, device number 6 [ 95.103901][ T6158] Zero length message leads to an empty skb [ 95.124634][ T5835] usb 2-1: USB disconnect, device number 3 [ 95.626385][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.746445][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.816394][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 95.823554][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.834828][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.845047][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 95.854211][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.862402][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.873040][ T8] usb 4-1: config 0 descriptor?? [ 95.961133][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 95.970642][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.982812][ T9] usb 3-1: config 0 descriptor?? [ 95.994510][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 96.076402][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 96.085381][ T5833] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 96.095413][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.111812][ T5833] pvrusb2: Hardware description: Terratec Grabster AV400 [ 96.119189][ T5833] pvrusb2: ********** [ 96.123232][ T5833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 96.133437][ T5833] pvrusb2: Important functionality might not be entirely working. [ 96.141459][ T5833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 96.153009][ T5833] pvrusb2: ********** [ 96.297947][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 96.304090][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 96.316506][ T2323] pvrusb2: Invalid write control endpoint [ 96.328043][ T8] usb 4-1: USB disconnect, device number 7 [ 96.389984][ T2323] pvrusb2: Invalid write control endpoint [ 96.405696][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.415646][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.426506][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.438162][ T2323] pvrusb2: Device being rendered inoperable [ 96.444169][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.451656][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.460356][ T2323] pvrusb2: Attached sub-driver cx25840 [ 96.465953][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.481982][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.549405][ T5833] usb 2-1: USB disconnect, device number 4 [ 97.097621][ T6196] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.141'. [ 97.658009][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 97.679303][ T9] usb 3-1: USB disconnect, device number 7 [ 98.410546][ T6224] UDC core: g1: couldn't find an available UDC or it's busy [ 98.604646][ T6235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.016388][ T5835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.088892][ T6256] UDC core: g1: couldn't find an available UDC or it's busy [ 99.216690][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 99.229108][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.259951][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 99.292015][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.333332][ T5835] usb 4-1: config 0 descriptor?? [ 99.360104][ T5835] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 99.875604][ T6277] UDC core: g1: couldn't find an available UDC or it's busy [ 100.052685][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 100.236004][ T5775] ================================================================== [ 100.244112][ T5775] BUG: KASAN: slab-use-after-free in nfsd_shutdown_threads+0x8d/0x1a0 [ 100.252291][ T5775] Write of size 4 at addr ffff88802fdc6c50 by task syz-executor/5775 [ 100.260361][ T5775] [ 100.262719][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 100.270289][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.280377][ T5775] Call Trace: [ 100.283660][ T5775] [ 100.286600][ T5775] dump_stack_lvl+0x18c/0x250 [ 100.291306][ T5775] ? __lock_acquire+0x7d80/0x7d80 [ 100.296386][ T5775] ? show_regs_print_info+0x20/0x20 [ 100.301959][ T5775] ? load_image+0x420/0x420 [ 100.306343][ T791] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.306480][ T5775] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 100.306511][ T5775] ? __virt_addr_valid+0x10c/0x380 [ 100.324553][ T5775] ? __virt_addr_valid+0x10c/0x380 [ 100.329685][ T5775] ? __virt_addr_valid+0x10c/0x380 [ 100.334825][ T5775] ? __virt_addr_valid+0x10c/0x380 [ 100.339967][ T5775] print_report+0xa8/0x210 [ 100.344415][ T5775] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 100.349816][ T5775] kasan_report+0x117/0x150 [ 100.354358][ T5775] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 100.359765][ T5775] kasan_check_range+0x241/0x290 [ 100.364739][ T5775] nfsd_shutdown_threads+0x8d/0x1a0 [ 100.369957][ T5775] nfsd_umount+0x42/0xc0 [ 100.374225][ T5775] deactivate_locked_super+0x97/0x100 [ 100.379611][ T5775] cleanup_mnt+0x3d7/0x460 [ 100.384051][ T5775] task_work_run+0x1d4/0x260 [ 100.387485][ T5835] gspca_vc032x: reg_r err -71 [ 100.388632][ T5775] ? task_work_cancel+0x220/0x220 [ 100.388663][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 100.388688][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 100.388710][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 100.388731][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 100.388753][ T5775] do_syscall_64+0x61/0xb0 [ 100.388770][ T5775] ? clear_bhb_loop+0x40/0x90 [ 100.388789][ T5775] ? clear_bhb_loop+0x40/0x90 [ 100.388807][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.388824][ T5775] RIP: 0033:0x7f496259f317 [ 100.388857][ T5775] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.388871][ T5775] RSP: 002b:00007fff13642bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.388889][ T5775] RAX: 0000000000000000 RBX: 00007f4962634474 RCX: 00007f496259f317 [ 100.388902][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff13642c90 [ 100.388913][ T5775] RBP: 00007fff13642c90 R08: 00007fff13643c90 R09: 00000000ffffffff [ 100.388925][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff13643d20 [ 100.388936][ T5775] R13: 00007f4962634474 R14: 0000000000018752 R15: 00007fff13643d60 [ 100.388954][ T5775] [ 100.388960][ T5775] [ 100.388964][ T5775] Allocated by task 6287: [ 100.388972][ T5775] kasan_set_track+0x4e/0x70 [ 100.388990][ T5775] __kasan_kmalloc+0x8f/0xa0 [ 100.389007][ T5775] __svc_create+0x60/0xa20 [ 100.389021][ T5775] svc_create_pooled+0x66a/0x7e0 [ 100.389035][ T5775] nfsd_create_serv+0x29f/0x5c0 [ 100.389052][ T5775] write_ports+0x698/0xfa0 [ 100.389068][ T5775] nfsctl_transaction_write+0x10c/0x150 [ 100.389085][ T5775] vfs_write+0x299/0x9a0 [ 100.389103][ T5775] ksys_write+0x151/0x260 [ 100.389122][ T5775] do_syscall_64+0x55/0xb0 [ 100.389137][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.389153][ T5775] [ 100.389156][ T5775] Freed by task 6287: [ 100.389163][ T5775] kasan_set_track+0x4e/0x70 [ 100.389179][ T5775] kasan_save_free_info+0x28/0x40 [ 100.389224][ T5775] ____kasan_slab_free+0x126/0x1f0 [ 100.389241][ T5775] slab_free_freelist_hook+0x130/0x1a0 [ 100.389257][ T5775] __kmem_cache_free+0xba/0x1f0 [ 100.389278][ T5775] write_ports+0xb1a/0xfa0 [ 100.389294][ T5775] nfsctl_transaction_write+0x10c/0x150 [ 100.389310][ T5775] vfs_write+0x299/0x9a0 [ 100.389329][ T5775] ksys_write+0x151/0x260 [ 100.389348][ T5775] do_syscall_64+0x55/0xb0 [ 100.389363][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.389378][ T5775] [ 100.389382][ T5775] The buggy address belongs to the object at ffff88802fdc6c00 [ 100.389382][ T5775] which belongs to the cache kmalloc-512 of size 512 [ 100.389396][ T5775] The buggy address is located 80 bytes inside of [ 100.389396][ T5775] freed 512-byte region [ffff88802fdc6c00, ffff88802fdc6e00) [ 100.389414][ T5775] [ 100.389417][ T5775] The buggy address belongs to the physical page: [ 100.389435][ T5775] page:ffffea0000bf7100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fdc4 [ 100.389454][ T5775] head:ffffea0000bf7100 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.389469][ T5775] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 100.389484][ T5775] page_type: 0xffffffff() [ 100.389504][ T5775] raw: 00fff00000000840 ffff888017c41c80 dead000000000100 dead000000000122 [ 100.389516][ T5775] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 100.389523][ T5775] page dumped because: kasan: bad access detected [ 100.389533][ T5775] page_owner tracks the page as allocated [ 100.389538][ T5775] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4317, tgid 4317 (kworker/u4:2), ts 23222838635, free_ts 0 [ 100.389564][ T5775] post_alloc_hook+0x1c1/0x200 [ 100.389585][ T5775] get_page_from_freelist+0x2181/0x22a0 [ 100.389599][ T5775] __alloc_pages+0x1f0/0x460 [ 100.389613][ T5775] alloc_slab_page+0x5d/0x180 [ 100.389627][ T5775] new_slab+0x87/0x2d0 [ 100.389639][ T5775] ___slab_alloc+0xc5c/0x12f0 [ 100.389652][ T5775] __kmem_cache_alloc_node+0x11f/0x250 [ 100.389671][ T5775] kmalloc_trace+0x2a/0xe0 [ 100.394408][ T5835] vc032x: probe of 4-1:0.0 failed with error -71 [ 100.399354][ T5775] alloc_bprm+0x56/0x9a0 [ 100.399381][ T5775] kernel_execve+0x98/0x980 [ 100.399396][ T5775] call_usermodehelper_exec_async+0x20b/0x350 [ 100.399410][ T5775] ret_from_fork+0x48/0x80 [ 100.399426][ T5775] ret_from_fork_asm+0x11/0x20 [ 100.399443][ T5775] page_owner free stack trace missing [ 100.399462][ T5775] [ 100.399465][ T5775] Memory state around the buggy address: [ 100.399473][ T5775] ffff88802fdc6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.399483][ T5775] ffff88802fdc6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.399493][ T5775] >ffff88802fdc6c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.399499][ T5775] ^ [ 100.399507][ T5775] ffff88802fdc6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.399516][ T5775] ffff88802fdc6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.423383][ T5835] usb 4-1: USB disconnect, device number 8 [ 100.425642][ T5775] ================================================================== [ 100.425710][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.506464][ T791] usb 1-1: Using ep0 maxpacket: 32 [ 100.513286][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.515029][ T5775] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.515039][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 100.515057][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.515066][ T5775] Call Trace: [ 100.515073][ T5775] [ 100.515079][ T5775] dump_stack_lvl+0x18c/0x250 [ 100.515103][ T5775] ? show_regs_print_info+0x20/0x20 [ 100.515120][ T5775] ? load_image+0x420/0x420 [ 100.515146][ T5775] panic+0x2ca/0x720 [ 100.515168][ T5775] ? bpf_jit_dump+0xd0/0xd0 [ 100.515198][ T5775] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 100.515221][ T5775] ? _raw_spin_unlock+0x40/0x40 [ 100.515241][ T5775] ? print_memory_metadata+0x314/0x400 [ 100.515258][ T5775] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 100.515276][ T5775] check_panic_on_warn+0x84/0xa0 [ 100.515296][ T5775] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 100.515313][ T5775] end_report+0x6f/0x130 [ 100.515332][ T5775] kasan_report+0x128/0x150 [ 100.515350][ T5775] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 100.515370][ T5775] kasan_check_range+0x241/0x290 [ 100.515390][ T5775] nfsd_shutdown_threads+0x8d/0x1a0 [ 100.515408][ T5775] nfsd_umount+0x42/0xc0 [ 100.515426][ T5775] deactivate_locked_super+0x97/0x100 [ 100.515442][ T5775] cleanup_mnt+0x3d7/0x460 [ 100.515461][ T5775] task_work_run+0x1d4/0x260 [ 100.515483][ T5775] ? task_work_cancel+0x220/0x220 [ 100.515505][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 100.515528][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 100.515548][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 100.515569][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 100.515589][ T5775] do_syscall_64+0x61/0xb0 [ 100.515605][ T5775] ? clear_bhb_loop+0x40/0x90 [ 100.515622][ T5775] ? clear_bhb_loop+0x40/0x90 [ 100.515639][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.515656][ T5775] RIP: 0033:0x7f496259f317 [ 100.515671][ T5775] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.515683][ T5775] RSP: 002b:00007fff13642bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.515700][ T5775] RAX: 0000000000000000 RBX: 00007f4962634474 RCX: 00007f496259f317 [ 100.515711][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff13642c90 [ 100.515721][ T5775] RBP: 00007fff13642c90 R08: 00007fff13643c90 R09: 00000000ffffffff [ 100.515732][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff13643d20 [ 100.515742][ T5775] R13: 00007f4962634474 R14: 0000000000018752 R15: 00007fff13643d60 [ 100.515759][ T5775] [ 100.516569][ T5775] Kernel Offset: disabled