last executing test programs: 6.268260471s ago: executing program 3 (id=13): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000045400e5012abd7000ffffffff0700"], 0x18}}, 0xc4c4) io_uring_setup(0x30ab, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x82202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)=0x80000000) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102) writev(r2, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000049b75714cdccb8aa3dec0f97f53f8c18704d2f6a70cd36", @ANYRES16=r5, @ANYBLOB="050300000080000300a128c15476e82a844cbfa065f07fb57cfd7da94c8385874d2509146540bd186c4385fcea84326756cbfa346666ea4b714ba1a27f7ac27c8c6c069c9b8a684a7a09bec91b65daea20b93f1f325f60344784775ca3aba8b5acbc40587321d5e80f199fcc9d01dcb0eb5154bc4032208aa71cef3aef0024886e9e18", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 5.948603741s ago: executing program 3 (id=16): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x1, 0x0) userfaultfd(0x801) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.769009217s ago: executing program 3 (id=19): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) wait4(0x0, 0x0, 0x8, 0x0) syz_pidfd_open(0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(0x0, 0xaf51, 0x28400) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) 5.565330384s ago: executing program 0 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 5.392102699s ago: executing program 0 (id=24): socket$kcm(0x11, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) 5.303453812s ago: executing program 2 (id=25): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) fdatasync(r0) 4.327581823s ago: executing program 0 (id=26): syz_mount_image$udf(&(0x7f00000003c0), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) 4.255516565s ago: executing program 3 (id=27): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3.999889333s ago: executing program 3 (id=30): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x400, 0x2, 0x183, 0x0, 0x1, 0xf1, 0xfd2c, 0x8000000000000, 0x2, 0x6, 0x57c673b4, 0x8000000000000001, 0x200000f43, 0x100000000, 0xbdb], 0xffff1001, 0x24000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x1000000, 0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c2", 0xf3, 0x4040004, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000003c0)={0xd, 0xfffffffb, 0x4, {0x1, @pix_mp={0x9, 0x7, 0x30314442, 0x9, 0xa, [{0x80, 0x7}, {0x5, 0x6}, {0x80000001, 0x9}, {0x7, 0x73f2340c}, {0x7, 0xb369}, {0xfffffffa, 0x8}, {0x1000, 0x5}, {0x6, 0x81}], 0x48, 0x3, 0x3, 0x1, 0x7}}, 0x1d0}) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) iopl(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x15) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0xffffffffffffffff, &(0x7f0000000080)=0x64) 3.318960315s ago: executing program 0 (id=31): syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x700, 0xa7, 0x6, 0x38, 0x10, 0x11ba, 0x1001, 0xf17f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xe4, 0x40, 0x0, 0x8f, 0xdc, 0x2b, 0x1}}, {{0x9, 0x4, 0xac, 0x10, 0x0, 0x3f, 0x93, 0xe6, 0x7}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.989329645s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 2.940003657s ago: executing program 2 (id=43): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x16}}}}}, 0x0) 2.893053169s ago: executing program 4 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.797357852s ago: executing program 4 (id=35): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xcc, 0xfa, 0x5, 0xff, 0x96, 0xc9, 0x6, 0x4, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0xb5, 0x1, 0x6, 0xbb, 0x2, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x28, 0x2, 0x1, 0x2a, 0x4, 0x8, 0xe, 0x40, 0xf4, 0x4, 0x200}], 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xa694, 0x3, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 2.567733799s ago: executing program 1 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xcf}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x1ff}]}}}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3db768f475e8e63413ba7b5d92a300"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.53485071s ago: executing program 2 (id=37): syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff05", 0x1c}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.433320213s ago: executing program 1 (id=38): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x2, 0xff, 0x4}, 0xfe}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f00000002c0)={0x0, 0x7, 0xb, '\x00', &(0x7f0000000280)=0x7}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'veth1_to_batadv\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x7bb4, {{0x2, 0x0, @multicast1}}}, 0x88) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_io_uring_setup(0x3f82, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) 2.375446345s ago: executing program 2 (id=39): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.337711416s ago: executing program 2 (id=40): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x90) r2 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r2, &(0x7f0000000b00), 0x0, 0x400122a0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 2.277634898s ago: executing program 1 (id=41): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) 2.188961811s ago: executing program 1 (id=42): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@_ha_fsid={[0x3ff, 0x5]}, {0x18, 0x3, 0x353c, 0x9}}, 0x10000, &(0x7f00000000c0), &(0x7f0000000100)=0x1bfd}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x40000002, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x801, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x400, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x3, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x62, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0x40, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 1.694686137s ago: executing program 4 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x210, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @NL80211_ATTR_PRIVACY={0x4}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x14f, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x21, 0x80, [@tim={0x5, 0x1b, {0x40, 0x92, 0x7, "f316b3c4fc1c81922fa816c26289c3bbac45b535e3dca015"}}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mic={0x8c, 0x18, {0xf31, "f01cce0f356d", @long="f76a00ad6ecb1af81374f97c8a4bf972"}}]}]]}, 0x210}}, 0x0) 1.178882683s ago: executing program 2 (id=45): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.174991213s ago: executing program 1 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 1.025213228s ago: executing program 4 (id=47): unshare(0x2c020680) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x30, 0x0, 0x0) 997.252999ms ago: executing program 4 (id=48): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 917.093721ms ago: executing program 4 (id=49): kexec_load(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x80000000, 0x41000000}], 0x3e0000) kexec_load(0x0, 0x0, 0x0, 0x150000) 212.232254ms ago: executing program 1 (id=50): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 118.896147ms ago: executing program 0 (id=51): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 0s ago: executing program 0 (id=52): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 54.557472][ T4175] cgroup: Unknown subsys name 'net' [ 54.697244][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.157698][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.569347][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 57.624366][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 57.696326][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.761781][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 57.798026][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.811603][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.818693][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.827224][ T4196] device bridge_slave_0 entered promiscuous mode [ 57.835528][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.842887][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.850588][ T4192] device bridge_slave_0 entered promiscuous mode [ 57.878974][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.886293][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.894239][ T4196] device bridge_slave_1 entered promiscuous mode [ 57.901993][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.909076][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.916979][ T4192] device bridge_slave_1 entered promiscuous mode [ 57.965431][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.972613][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.980476][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.002163][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.021483][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.028675][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.036925][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.049506][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.060786][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.078984][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.132399][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.151740][ T4196] team0: Port device team_slave_0 added [ 58.157828][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.165181][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.173494][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.187231][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.194512][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.202332][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.210522][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.226063][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.233481][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.241519][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.249911][ T4196] team0: Port device team_slave_1 added [ 58.265563][ T4192] team0: Port device team_slave_0 added [ 58.278673][ T4192] team0: Port device team_slave_1 added [ 58.290369][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.297845][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.305888][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.338894][ T4189] team0: Port device team_slave_0 added [ 58.345473][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.352768][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.378750][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.397087][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.404085][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.430325][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.444689][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.460472][ T4189] team0: Port device team_slave_1 added [ 58.475011][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.487410][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.502512][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.512434][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.519385][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.545523][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.588298][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.595466][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.621642][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.637815][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.645026][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.671823][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.684059][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.691013][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.717110][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.731684][ T4190] team0: Port device team_slave_0 added [ 58.749661][ T4188] team0: Port device team_slave_0 added [ 58.784926][ T4192] device hsr_slave_0 entered promiscuous mode [ 58.792226][ T4192] device hsr_slave_1 entered promiscuous mode [ 58.801347][ T4190] team0: Port device team_slave_1 added [ 58.808332][ T4188] team0: Port device team_slave_1 added [ 58.831130][ T4196] device hsr_slave_0 entered promiscuous mode [ 58.838167][ T4196] device hsr_slave_1 entered promiscuous mode [ 58.845086][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.852950][ T4196] Cannot create hsr debugfs directory [ 58.927195][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.934219][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.940756][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.948546][ T4189] Cannot create hsr debugfs directory [ 58.962472][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.969439][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.996652][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.008239][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.015320][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.042029][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.057359][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.064423][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.090600][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.113060][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.120028][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.146002][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.251678][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.258717][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.265384][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.273704][ T4190] Cannot create hsr debugfs directory [ 59.284796][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.292012][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.298849][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.301994][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 59.311278][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 59.313378][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 59.318823][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 59.325117][ T4188] Cannot create hsr debugfs directory [ 59.335479][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 59.563444][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.595902][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.606986][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.619528][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.635074][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.659933][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.670489][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.680723][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.734654][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.746327][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.774400][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.784514][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.844237][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.854128][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.872399][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.903430][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.958068][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.975910][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.999283][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.016834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.027332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.036682][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.046510][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.058837][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.072920][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.107888][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.122929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.132812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.140712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.149767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.159396][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.166862][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.189493][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.206710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.214827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.224619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.234701][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.241828][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.250809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.259973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.272365][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.279441][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.288196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.297908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.306904][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.314073][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.322658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.346946][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.355172][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.364311][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.375796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.390137][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.408884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.418299][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.427265][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.435872][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.442972][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.451189][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.475046][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.487494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.496981][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.507325][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.517448][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.524565][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.536345][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.545545][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.554515][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.563405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.572060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.584044][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.594185][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.603238][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.614211][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.623382][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.654192][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.675107][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.686763][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.697120][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.706037][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.714940][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.724885][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.734207][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.743218][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.750877][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.759339][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.769863][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.778984][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.787734][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.796197][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.814561][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.826794][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.842450][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.854311][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.865322][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.876246][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.885413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.894355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.903414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.913038][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.920195][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.930814][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.939455][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.956239][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.980313][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.994133][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.004561][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.014766][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.023294][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.032396][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.042844][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.052406][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.059499][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.067654][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.078813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.087655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.096110][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.110732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.119985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.130419][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.137582][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.191431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.199454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.230797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.248584][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.255730][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.288484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.298646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.308726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.317595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.326570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.336159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.344930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.353696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.362459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.370615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.380226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.389276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.391605][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 61.404713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.413056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.417085][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 61.426867][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 61.436290][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.449472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.459098][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 61.472037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.480853][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 61.495024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.513601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.549819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.562230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.575312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.589540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.600104][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.614306][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.630293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.641638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.666940][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.705196][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.724680][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.739889][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.748112][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.776445][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.819135][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.829490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.846488][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.857513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.868221][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.876983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.910377][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.919059][ T4196] device veth0_vlan entered promiscuous mode [ 61.927074][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.936602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.946103][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.954915][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.968531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.976765][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.984811][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.993909][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.002834][ T4189] device veth0_vlan entered promiscuous mode [ 62.043063][ T4196] device veth1_vlan entered promiscuous mode [ 62.065045][ T4192] device veth0_vlan entered promiscuous mode [ 62.076414][ T4189] device veth1_vlan entered promiscuous mode [ 62.086880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.095412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.103717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.112208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.120364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.129001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.138731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.147498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.155172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.162856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.170765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.186851][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.206232][ T4192] device veth1_vlan entered promiscuous mode [ 62.242061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.252883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.261127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.271281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.297810][ T4190] device veth0_vlan entered promiscuous mode [ 62.313929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.323454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.332213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.340089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.350187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.363928][ T4189] device veth0_macvtap entered promiscuous mode [ 62.378217][ T4196] device veth0_macvtap entered promiscuous mode [ 62.390290][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.398859][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.407746][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.419524][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.435755][ T4190] device veth1_vlan entered promiscuous mode [ 62.451554][ T4196] device veth1_macvtap entered promiscuous mode [ 62.471663][ T4189] device veth1_macvtap entered promiscuous mode [ 62.500087][ T4192] device veth0_macvtap entered promiscuous mode [ 62.528617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.537640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.546194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.554437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.564008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.572651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.581146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.609700][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.625388][ T4190] device veth0_macvtap entered promiscuous mode [ 62.636220][ T4190] device veth1_macvtap entered promiscuous mode [ 62.644834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.653948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.663688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.672470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.680857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.689848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.701086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.710669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.727476][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.738772][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.752383][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.761090][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.769520][ T4192] device veth1_macvtap entered promiscuous mode [ 62.782095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.790293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.799396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.808847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.817489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.831464][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.842926][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.855221][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.888384][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.897725][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.907403][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.917587][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.928562][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.937984][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.950647][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.959550][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.983447][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.992464][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.009412][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.020732][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.030862][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.041694][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.053257][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.072284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.080652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.089715][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.104453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.114063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.122284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.130565][ T4188] device veth0_vlan entered promiscuous mode [ 63.137913][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.148970][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.158913][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.169625][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.179704][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.190543][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.202497][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.211788][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.222840][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.233954][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.244990][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.255928][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.284229][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.295495][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.305737][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.314789][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.327426][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.338333][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.348430][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.359129][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.369527][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.380220][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.392024][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.402564][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.413004][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.422026][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.430867][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.460373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.469543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.478429][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 63.485104][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 63.489162][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.491205][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 63.506106][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.515411][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524417][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542303][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 63.550132][ T4188] device veth1_vlan entered promiscuous mode [ 63.556637][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 63.653946][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.665320][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.695601][ T4188] device veth0_macvtap entered promiscuous mode [ 63.708765][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.717364][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.725744][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.733958][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.743470][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.753086][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.773454][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.786512][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.790318][ T4188] device veth1_macvtap entered promiscuous mode [ 63.825579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.834860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.870151][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.878819][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.886879][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.901164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.911550][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.922468][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.932575][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.944511][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.954888][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.965642][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.977537][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.994525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.003581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.013198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.032682][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.041819][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.044645][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.050960][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.067106][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.079609][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.089843][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.100930][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.111804][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.122988][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.134765][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.144518][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.152893][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.186875][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.202771][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.221395][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.230126][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.240449][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.249679][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.258715][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.268079][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.292166][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.300050][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.344166][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.449533][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.465604][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.487623][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.487730][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.524960][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.540785][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.560231][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.564235][ T4274] fuse: root generation should be zero [ 64.575949][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.605725][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.618375][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.652042][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.680947][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.715611][ T4277] loop1: detected capacity change from 0 to 64 [ 64.715899][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.102905][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 65.113904][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 65.121495][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.131580][ T4205] Workqueue: hci1 hci_rx_work [ 65.136301][ T4205] Call Trace: [ 65.139615][ T4205] [ 65.142572][ T4205] dump_stack_lvl+0x188/0x250 [ 65.147284][ T4205] ? show_regs_print_info+0x20/0x20 [ 65.152516][ T4205] ? load_image+0x400/0x400 [ 65.157058][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 65.162196][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 65.166897][ T4205] ? process_one_work+0x85f/0x1010 [ 65.172034][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 65.177258][ T4205] kobject_add_internal+0x6e0/0xd90 [ 65.182487][ T4205] kobject_add+0x160/0x230 [ 65.183111][ T4294] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 65.186934][ T4205] ? kobject_init+0x1d0/0x1d0 [ 65.186989][ T4205] ? klist_children_get+0x50/0x50 [ 65.204237][ T4205] ? get_device_parent+0x121/0x3f0 [ 65.209386][ T4205] device_add+0x48c/0x1000 [ 65.213852][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 65.218829][ T4205] le_conn_complete_evt+0xc4b/0x15c0 [ 65.224158][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 65.229497][ T4205] ? __mutex_trylock_common+0x155/0x260 [ 65.235192][ T4205] hci_le_meta_evt+0x285/0x3cb0 [ 65.240348][ T4205] ? hci_event_packet+0x37e/0x1370 [ 65.245502][ T4205] ? __lock_acquire+0x7d10/0x7d10 [ 65.250573][ T4205] ? hci_remote_host_features_evt+0x290/0x290 [ 65.256677][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 65.262353][ T4205] ? mark_lock+0x94/0x320 [ 65.266720][ T4205] ? mutex_unlock+0x10/0x10 [ 65.271265][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 65.277285][ T4205] ? lock_chain_count+0x20/0x20 [ 65.278117][ T4294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 65.282168][ T4205] ? __rwlock_init+0x140/0x140 [ 65.282207][ T4205] hci_event_packet+0xe4b/0x1370 [ 65.282229][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 65.282259][ T4205] ? rcu_lock_release+0x20/0x20 [ 65.282283][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 65.282307][ T4205] hci_rx_work+0x255/0xa10 [ 65.282341][ T4205] process_one_work+0x85f/0x1010 [ 65.282376][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 65.331216][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 65.334218][ T4297] loop3: detected capacity change from 0 to 64 [ 65.336534][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 65.336563][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 65.353545][ T4205] ? wq_worker_running+0x97/0x170 [ 65.358626][ T4205] worker_thread+0xaa6/0x1290 [ 65.363368][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 65.368604][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 65.374540][ T4205] kthread+0x436/0x520 [ 65.378643][ T4205] ? rcu_lock_release+0x20/0x20 [ 65.383521][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 65.388257][ T4205] ret_from_fork+0x1f/0x30 [ 65.392724][ T4205] [ 65.402445][ T4205] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.427030][ T4205] Bluetooth: hci1: failed to register connection device [ 65.516381][ T4294] team0: Port device geneve0 added [ 65.554529][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 65.560832][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 65.609072][ T4306] loop4: detected capacity change from 0 to 128 [ 65.610553][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 65.624538][ T4306] ======================================================= [ 65.624538][ T4306] WARNING: The mand mount option has been deprecated and [ 65.624538][ T4306] and is ignored by this kernel. Remove the mand [ 65.624538][ T4306] option from the mount to silence this warning. [ 65.624538][ T4306] ======================================================= [ 65.646610][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 65.721467][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 65.839940][ T4306] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 65.933617][ T4306] hpfs: filesystem error: improperly stopped [ 65.940891][ T4306] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 65.951515][ T4306] hpfs: You really don't want any checks? You are crazy... [ 65.959131][ T4306] hpfs: hpfs_map_sector(): read error [ 65.978290][ T4306] hpfs: code page support is disabled [ 65.994230][ T4306] hpfs: hpfs_map_4sectors(): unaligned read [ 66.028580][ T4306] hpfs: hpfs_map_4sectors(): unaligned read [ 66.072187][ T4306] hpfs: filesystem error: unable to find root dir [ 66.094557][ T4318] loop2: detected capacity change from 0 to 64 [ 66.268944][ T4323] Zero length message leads to an empty skb [ 66.455102][ T4334] loop2: detected capacity change from 0 to 128 [ 67.646892][ T4349] loop2: detected capacity change from 0 to 128 [ 67.730350][ T4348] loop0: detected capacity change from 0 to 2048 [ 67.854751][ T4353] loop4: detected capacity change from 0 to 4096 [ 67.885397][ T4348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.902475][ T26] audit: type=1800 audit(1781034946.859:2): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="bus" dev="loop2" ino=1048591 res=0 errno=0 [ 67.923048][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.940814][ T4353] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 67.963968][ T4356] Trying to write to read-only block-device loop2 [ 67.990457][ T4353] ntfs3: loop4: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 68.016376][ T4356] Trying to write to read-only block-device loop2 [ 68.104337][ T4356] attempt to access beyond end of device [ 68.104337][ T4356] loop2: rw=2049, want=577, limit=128 [ 68.256956][ T4353] ntfs3: loop4: failed to read volume at offset 0x201800 [ 68.394852][ T4353] ntfs3: loop4: failed to read volume at offset 0x201800 [ 68.522096][ T4353] ntfs3: loop4: failed to read volume at offset 0x201800 [ 68.628677][ T4353] ntfs3: loop4: failed to read volume at offset 0x201800 [ 68.718555][ T4353] ntfs3: loop4: failed to read volume at offset 0x202800 [ 68.807142][ T4353] ntfs3: loop4: failed to read volume at offset 0x203800 [ 68.868866][ T4353] ntfs3: loop4: failed to read volume at offset 0x205800 [ 68.881935][ T4353] ntfs3: loop4: failed to read volume at offset 0x209800 [ 69.103520][ T4196] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 69.119316][ T26] audit: type=1326 audit(1781034948.069:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.4.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d161e9e59 code=0x0 [ 69.141700][ T4196] FAT-fs (loop2): Filesystem has been set read-only [ 69.142560][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.162168][ T4196] Trying to write to read-only block-device loop2 [ 69.170182][ T4196] Trying to write to read-only block-device loop2 [ 69.182934][ T4196] Trying to write to read-only block-device loop2 [ 69.215942][ T4196] Trying to write to read-only block-device loop2 [ 69.371637][ T1111] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 69.432970][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.681733][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 69.921675][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.935340][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 69.947326][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.972437][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.142274][ T4231] usb 1-1: config 0 has an invalid interface number: 228 but max is 1 [ 70.188490][ T4231] usb 1-1: config 0 has an invalid interface number: 172 but max is 1 [ 70.212134][ T1111] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 70.256119][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 70.315945][ T4231] usb 1-1: config 0 has no interface number 0 [ 70.425809][ T1111] usb 4-1: Product: syz [ 70.449782][ T4231] usb 1-1: config 0 has no interface number 1 [ 70.541183][ T1111] usb 4-1: Manufacturer: syz [ 70.661764][ T4231] usb 1-1: config 0 interface 228 has no altsetting 0 [ 70.675438][ T1111] usb 4-1: SerialNumber: syz [ 70.717769][ T4231] usb 1-1: config 0 interface 172 has no altsetting 0 [ 70.727210][ T1111] usb 4-1: config 0 descriptor?? [ 70.830819][ T1111] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 70.842469][ T1111] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 70.858926][ T1111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 70.961656][ T4231] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 70.971152][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.980795][ T4231] usb 1-1: Product: syz [ 70.985363][ T4231] usb 1-1: Manufacturer: syz [ 70.990176][ T4231] usb 1-1: SerialNumber: syz [ 71.007425][ T4231] usb 1-1: config 0 descriptor?? [ 71.111371][ T4237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.306454][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313134][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.337646][ T4231] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 71.348891][ T4231] usb 1-1: selecting invalid altsetting 0 [ 71.351364][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 71.360119][ T2421] pvrusb2: Invalid write control endpoint [ 71.423472][ T4231] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 71.443137][ T4231] usb 1-1: selecting invalid altsetting 0 [ 71.479660][ T2421] pvrusb2: Invalid write control endpoint [ 71.481507][ T4237] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 71.503894][ T4231] usb 1-1: USB disconnect, device number 2 [ 71.510373][ T2421] pvrusb2: Invalid write control endpoint [ 71.517418][ T4237] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 71.535395][ T2421] pvrusb2: Invalid write control endpoint [ 71.541326][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 71.550564][ T4237] usb 3-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 71.562917][ T2421] pvrusb2: Invalid write control endpoint [ 71.568694][ T2421] pvrusb2: Invalid write control endpoint [ 71.581552][ T4237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 71.591601][ T2421] pvrusb2: Invalid write control endpoint [ 71.597721][ T2421] pvrusb2: Invalid write control endpoint [ 71.611549][ T4237] usb 3-1: config 1 has no interface number 0 [ 71.628060][ T2421] pvrusb2: Invalid write control endpoint [ 71.635189][ T4237] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 71.652116][ T2421] pvrusb2: Invalid write control endpoint [ 71.661648][ T2421] pvrusb2: Invalid write control endpoint [ 71.667408][ T2421] pvrusb2: Invalid write control endpoint [ 71.674031][ T4237] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 71.690551][ T2421] pvrusb2: Invalid write control endpoint [ 71.705171][ T4237] usb 3-1: config 1 interface 1 has no altsetting 0 [ 71.712580][ T2421] pvrusb2: Invalid write control endpoint [ 71.718345][ T2421] pvrusb2: Invalid write control endpoint [ 71.725554][ T4237] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 71.735169][ T2421] pvrusb2: Invalid write control endpoint [ 71.741019][ T2421] pvrusb2: Invalid write control endpoint [ 71.747306][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.770043][ T2421] pvrusb2: Invalid write control endpoint [ 71.776242][ T2421] pvrusb2: Invalid write control endpoint [ 71.793313][ T2421] pvrusb2: Invalid write control endpoint [ 71.811322][ T2421] pvrusb2: Invalid write control endpoint [ 71.821398][ T2421] pvrusb2: Invalid write control endpoint [ 71.827175][ T2421] pvrusb2: Invalid write control endpoint [ 71.855998][ T2421] pvrusb2: Invalid write control endpoint [ 71.866664][ T2421] pvrusb2: Invalid write control endpoint [ 71.879599][ T2421] pvrusb2: Invalid write control endpoint [ 71.897970][ T2421] pvrusb2: Invalid write control endpoint [ 71.903166][ T4414] [ 71.906070][ T4414] ====================================================== [ 71.913105][ T4414] WARNING: possible circular locking dependency detected [ 71.915924][ T2421] pvrusb2: Invalid write control endpoint [ 71.920135][ T4414] syzkaller #0 Not tainted [ 71.920147][ T4414] ------------------------------------------------------ [ 71.920152][ T4414] syz.1.50/4414 is trying to acquire lock: [ 71.920163][ T4414] ffff88801ef64f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 71.953573][ T4414] [ 71.953573][ T4414] but task is already holding lock: [ 71.953859][ T2421] pvrusb2: Invalid write control endpoint [ 71.960948][ T4414] ffff88801ef653f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 71.961002][ T4414] [ 71.961002][ T4414] which lock already depends on the new lock. [ 71.961002][ T4414] [ 71.961008][ T4414] [ 71.961008][ T4414] the existing dependency chain (in reverse order) is: [ 71.961013][ T4414] [ 71.961013][ T4414] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 71.961041][ T4414] __mutex_lock_common+0x1e3/0x2400 [ 71.961062][ T4414] mutex_lock_nested+0x17/0x20 [ 71.961080][ T4414] hci_dev_do_close+0x5f/0x1030 [ 71.961098][ T4414] hci_rfkill_set_block+0x10a/0x190 [ 71.982027][ T2421] pvrusb2: Invalid write control endpoint [ 71.986585][ T4414] rfkill_set_block+0x1c9/0x3d0 [ 71.996033][ T2421] pvrusb2: Invalid write control endpoint [ 72.003237][ T4414] rfkill_fop_write+0x452/0x560 [ 72.003259][ T4414] vfs_write+0x30b/0xd60 [ 72.003276][ T4414] ksys_write+0x152/0x260 [ 72.003290][ T4414] do_syscall_64+0x4c/0xa0 [ 72.003307][ T4414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.003326][ T4414] [ 72.003326][ T4414] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 72.003358][ T4414] __mutex_lock_common+0x1e3/0x2400 [ 72.003377][ T4414] mutex_lock_nested+0x17/0x20 [ 72.003402][ T4414] rfkill_register+0x33/0x980 [ 72.003420][ T4414] hci_register_dev+0x452/0x970 [ 72.003439][ T4414] vhci_create_device+0x32c/0x5c0 [ 72.003458][ T4414] vhci_write+0x391/0x450 [ 72.003475][ T4414] vfs_write+0x745/0xd60 [ 72.003490][ T4414] ksys_write+0x152/0x260 [ 72.003505][ T4414] do_syscall_64+0x4c/0xa0 [ 72.003522][ T4414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.003540][ T4414] [ 72.003540][ T4414] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 72.003569][ T4414] __mutex_lock_common+0x1e3/0x2400 [ 72.003589][ T4414] mutex_lock_nested+0x17/0x20 [ 72.003608][ T4414] vhci_send_frame+0x88/0x100 [ 72.003626][ T4414] hci_send_frame+0x1a9/0x2e0 [ 72.025198][ T2421] pvrusb2: Invalid write control endpoint [ 72.025716][ T4414] hci_tx_work+0x9f9/0x1710 [ 72.035256][ T2421] pvrusb2: Invalid write control endpoint [ 72.036796][ T4414] process_one_work+0x85f/0x1010 [ 72.048490][ T2421] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 72.052750][ T4414] worker_thread+0xaa6/0x1290 [ 72.052776][ T4414] kthread+0x436/0x520 [ 72.052791][ T4414] ret_from_fork+0x1f/0x30 [ 72.052809][ T4414] [ 72.052809][ T4414] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 72.052841][ T4414] __lock_acquire+0x2c42/0x7d10 [ 72.058070][ T4237] usb 3-1: string descriptor 0 read error: -71 [ 72.062615][ T4414] lock_acquire+0x19e/0x400 [ 72.062638][ T4414] __flush_work+0x116/0x210 [ 72.062654][ T4414] hci_dev_do_close+0x1e7/0x1030 [ 72.062671][ T4414] hci_rfkill_set_block+0x10a/0x190 [ 72.062689][ T4414] rfkill_set_block+0x1c9/0x3d0 [ 72.062708][ T4414] rfkill_fop_write+0x452/0x560 [ 72.071109][ T4237] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 72.077440][ T4414] vfs_write+0x30b/0xd60 [ 72.077463][ T4414] ksys_write+0x152/0x260 [ 72.077477][ T4414] do_syscall_64+0x4c/0xa0 [ 72.077493][ T4414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.077512][ T4414] [ 72.077512][ T4414] other info that might help us debug this: [ 72.077512][ T4414] [ 72.077518][ T4414] Chain exists of: [ 72.077518][ T4414] (work_completion)(&hdev->tx_work) [ 72.094677][ T4237] usb 3-1: selecting invalid altsetting 0 [ 72.099072][ T4414] --> rfkill_global_mutex --> &hdev->req_lock [ 72.099072][ T4414] [ 72.123925][ T4237] snd_usb_pod 3-1:1.1: set_interface failed [ 72.124026][ T4414] Possible unsafe locking scenario: [ 72.124026][ T4414] [ 72.124034][ T4414] CPU0 CPU1 [ 72.134777][ T2421] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 72.138236][ T4414] ---- ---- [ 72.138244][ T4414] lock(&hdev->req_lock); [ 72.138261][ T4414] lock( [ 72.147399][ T2421] pvrusb2: Invalid write control endpoint [ 72.149242][ T4414] rfkill_global_mutex); [ 72.149257][ T4414] lock(&hdev->req_lock [ 72.155060][ T4237] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 72.159651][ T4414] ); [ 72.159658][ T4414] lock((work_completion)(&hdev->tx_work)); [ 72.159675][ T4414] [ 72.159675][ T4414] *** DEADLOCK *** [ 72.159675][ T4414] [ 72.159679][ T4414] 2 locks held by syz.1.50/4414: [ 72.173260][ T2421] pvrusb2: Invalid write control endpoint [ 72.176127][ T4414] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3} [ 72.186282][ T4237] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 72.198703][ T4414] , at: rfkill_fop_write+0x18b/0x560 [ 72.198732][ T4414] #1: ffff88801ef653f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 72.198782][ T4414] [ 72.198782][ T4414] stack backtrace: [ 72.198788][ T4414] CPU: 0 PID: 4414 Comm: syz.1.50 Not tainted syzkaller #0 [ 72.198806][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.198815][ T4414] Call Trace: [ 72.198825][ T4414] [ 72.198832][ T4414] dump_stack_lvl+0x188/0x250 [ 72.225727][ T2421] pvrusb2: Invalid write control endpoint [ 72.228259][ T4414] ? load_image+0x400/0x400 [ 72.244575][ T2421] pvrusb2: Invalid write control endpoint [ 72.249918][ T4414] ? show_regs_print_info+0x20/0x20 [ 72.249949][ T4414] ? print_circular_bug+0x12b/0x1a0 [ 72.266119][ T4237] usb 3-1: USB disconnect, device number 2 [ 72.266439][ T4414] check_noncircular+0x296/0x330 [ 72.277230][ T2421] pvrusb2: Invalid write control endpoint [ 72.277545][ T4414] ? look_up_lock_class+0x71/0x110 [ 72.291332][ T2421] pvrusb2: Invalid write control endpoint [ 72.293745][ T4414] ? add_chain_block+0x940/0x940 [ 72.293772][ T4414] ? lockdep_lock+0xf1/0x1f0 [ 72.318712][ T2421] pvrusb2: Invalid write control endpoint [ 72.326985][ T4414] ? mark_lock+0x94/0x320 [ 72.327010][ T4414] __lock_acquire+0x2c42/0x7d10 [ 72.327048][ T4414] ? lockdep_unlock+0x143/0x2e0 [ 72.327068][ T4414] ? mark_lock+0x94/0x320 [ 72.327082][ T4414] ? verify_lock_unused+0x140/0x140 [ 72.327103][ T4414] ? __lock_acquire+0x12e8/0x7d10 [ 72.362832][ T2421] pvrusb2: Invalid write control endpoint [ 72.367401][ T4414] lock_acquire+0x19e/0x400 [ 72.384102][ T2421] pvrusb2: Invalid write control endpoint [ 72.391149][ T4414] ? __flush_work+0xfa/0x210 [ 72.417735][ T2421] pvrusb2: Invalid write control endpoint [ 72.418521][ T4414] ? verify_lock_unused+0x140/0x140 [ 72.435847][ T2421] pvrusb2: Invalid write control endpoint [ 72.437769][ T4414] ? __mutex_trylock_common+0x155/0x260 [ 72.437800][ T4414] ? read_lock_is_recursive+0x10/0x10 [ 72.460879][ T2421] pvrusb2: Invalid write control endpoint [ 72.470920][ T4414] __flush_work+0x116/0x210 [ 72.470949][ T4414] ? __flush_work+0xfa/0x210 [ 72.470974][ T4414] ? flush_work+0x20/0x20 [ 72.470992][ T4414] ? hci_leds_update_powered+0x148/0x160 [ 72.471010][ T4414] ? rcu_lock_release+0x5/0x20 [ 72.471030][ T4414] ? __lock_acquire+0x7d10/0x7d10 [ 72.471055][ T4414] hci_dev_do_close+0x1e7/0x1030 [ 72.489881][ T2421] pvrusb2: Invalid write control endpoint [ 72.492184][ T4414] ? _raw_spin_unlock+0x40/0x40 [ 72.492211][ T4414] hci_rfkill_set_block+0x10a/0x190 [ 72.492233][ T4414] ? rcu_lock_release+0x20/0x20 [ 72.492251][ T4414] rfkill_set_block+0x1c9/0x3d0 [ 72.492274][ T4414] rfkill_fop_write+0x452/0x560 [ 72.492291][ T4414] ? rfkill_fop_read+0x520/0x520 [ 72.492308][ T4414] ? common_file_perm+0xb0/0x1c0 [ 72.507313][ T2421] pvrusb2: Invalid write control endpoint [ 72.508598][ T4414] ? fsnotify_perm+0x5d/0x560 [ 72.525818][ T2421] pvrusb2: Invalid write control endpoint [ 72.530678][ T4414] ? security_file_permission+0x75/0xa0 [ 72.548055][ T2421] pvrusb2: Invalid write control endpoint [ 72.551696][ T4414] ? rfkill_fop_read+0x520/0x520 [ 72.551722][ T4414] vfs_write+0x30b/0xd60 [ 72.551743][ T4414] ? file_end_write+0x250/0x250 [ 72.551761][ T4414] ? __fget_files+0x40f/0x480 [ 72.551781][ T4414] ? __fdget_pos+0x1e2/0x370 [ 72.551797][ T4414] ? ksys_write+0x71/0x260 [ 72.551813][ T4414] ksys_write+0x152/0x260 [ 72.592778][ T2421] pvrusb2: Invalid write control endpoint [ 72.596309][ T4414] ? __ia32_sys_read+0x80/0x80 [ 72.614952][ T2421] pvrusb2: Invalid write control endpoint [ 72.617530][ T4414] ? lockdep_hardirqs_on+0x94/0x140 [ 72.617562][ T4414] do_syscall_64+0x4c/0xa0 [ 72.617581][ T4414] ? clear_bhb_loop+0x30/0x80 [ 72.617600][ T4414] ? clear_bhb_loop+0x30/0x80 [ 72.617619][ T4414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.617638][ T4414] RIP: 0033:0x7f0fb6258e59 [ 72.617657][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.617673][ T4414] RSP: 002b:00007f0fb44b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.617697][ T4414] RAX: ffffffffffffffda RBX: 00007f0fb64d1fa0 RCX: 00007f0fb6258e59 [ 72.617711][ T4414] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 72.617724][ T4414] RBP: 00007f0fb62eed6f R08: 0000000000000000 R09: 0000000000000000 [ 72.617737][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.617749][ T4414] R13: 00007f0fb64d2038 R14: 00007f0fb64d1fa0 R15: 00007ffd712ed1c8 [ 72.617769][ T4414] [ 72.627113][ T2421] pvrusb2: Invalid write control endpoint [ 72.628697][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.643719][ T2421] pvrusb2: Invalid write control endpoint [ 72.682870][ T13] usb 4-1: USB disconnect, device number 2 [ 72.716924][ T2421] pvrusb2: Invalid write control endpoint [ 72.956539][ T2421] pvrusb2: Attached sub-driver cs53l32a [ 73.017790][ T2421] pvrusb2: Invalid write control endpoint [ 73.025373][ T2421] pvrusb2: Invalid write control endpoint [ 73.038636][ T2421] pvrusb2: Invalid write control endpoint [ 73.054302][ T2421] pvrusb2: Invalid write control endpoint [ 73.060185][ T2421] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 73.078813][ T2421] pvrusb2: Device being rendered inoperable [ 73.084830][ T2421] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 73.099484][ T2421] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 73.124046][ T2421] pvrusb2: Invalid write control endpoint [ 73.167813][ T2421] pvrusb2: Invalid write control endpoint [ 73.173887][ T2421] pvrusb2: Invalid write control endpoint [ 73.179645][ T2421] pvrusb2: Invalid write control endpoint [ 73.187327][ T2421] pvrusb2: Invalid write control endpoint [ 73.193411][ T2421] pvrusb2: Invalid write control endpoint [ 73.199154][ T2421] pvrusb2: Invalid write control endpoint [ 73.207341][ T2421] pvrusb2: Invalid write control endpoint [ 73.213220][ T2421] pvrusb2: Invalid write control endpoint [ 73.218980][ T2421] pvrusb2: Invalid write control endpoint [ 73.226773][ T2421] pvrusb2: Invalid write control endpoint [ 73.232624][ T2421] pvrusb2: Invalid write control endpoint [ 73.238398][ T2421] pvrusb2: Invalid write control endpoint [ 73.244994][ T2421] pvrusb2: Invalid write control endpoint [ 73.250740][ T2421] pvrusb2: Invalid write control endpoint [ 73.256567][ T2421] pvrusb2: Invalid write control endpoint [ 73.263897][ T2421] pvrusb2: Invalid write control endpoint [ 73.269716][ T2421] pvrusb2: Invalid write control endpoint [ 73.275576][ T2421] pvrusb2: Invalid write control endpoint [ 73.282629][ T2421] pvrusb2: Invalid write control endpoint [ 73.288395][ T2421] pvrusb2: Invalid write control endpoint [ 73.296704][ T2421] pvrusb2: Invalid write control endpoint [ 73.302671][ T2421] pvrusb2: Invalid write control endpoint [ 73.308434][ T2421] pvrusb2: Invalid write control endpoint [ 73.316932][ T2421] pvrusb2: Invalid write control endpoint [ 73.323435][ T2421] pvrusb2: Invalid write control endpoint [ 73.329180][ T2421] pvrusb2: Invalid write control endpoint [ 73.336925][ T2421] pvrusb2: Invalid write control endpoint [ 73.342916][ T2421] pvrusb2: Invalid write control endpoint [ 73.348657][ T2421] pvrusb2: Invalid write control endpoint [ 73.356407][ T2421] pvrusb2: Invalid write control endpoint [ 73.362480][ T2421] pvrusb2: Invalid write control endpoint [ 73.368328][ T2421] pvrusb2: Invalid write control endpoint [ 73.376698][ T2421] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 73.413788][ T2421] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 73.420367][ T2421] pvrusb2: Invalid write control endpoint [ 73.428583][ T2421] pvrusb2: Invalid write control endpoint [ 73.434722][ T2421] pvrusb2: Invalid write control endpoint [ 73.440494][ T2421] pvrusb2: Invalid write control endpoint [ 73.448202][ T2421] pvrusb2: Invalid write control endpoint [ 73.454415][ T2421] pvrusb2: Invalid write control endpoint [ 73.460185][ T2421] pvrusb2: Invalid write control endpoint [ 73.468089][ T2421] pvrusb2: Invalid write control endpoint [ 73.474109][ T2421] pvrusb2: Invalid write control endpoint [ 73.480121][ T2421] pvrusb2: Invalid write control endpoint [ 73.488493][ T2421] pvrusb2: Invalid write control endpoint [ 73.494479][ T2421] pvrusb2: Invalid write control endpoint [ 73.500225][ T2421] pvrusb2: Invalid write control endpoint [ 73.510245][ T2421] pvrusb2: Invalid write control endpoint [ 73.516194][ T2421] pvrusb2: Invalid write control endpoint [ 73.523908][ T2421] pvrusb2: Invalid write control endpoint [ 73.529655][ T2421] pvrusb2: Invalid write control endpoint [ 73.535705][ T2421] pvrusb2: Invalid write control endpoint [ 73.543639][ T2421] pvrusb2: Invalid write control endpoint [ 73.549393][ T2421] pvrusb2: Invalid write control endpoint [ 73.555486][ T2421] pvrusb2: Invalid write control endpoint [ 73.563509][ T2421] pvrusb2: Attached sub-driver cs53l32a [ 73.586411][ T2421] pvrusb2: Invalid write control endpoint [ 73.592357][ T2421] pvrusb2: Invalid write control endpoint [ 73.598376][ T2421] pvrusb2: Invalid write control endpoint [ 73.606166][ T2421] pvrusb2: Invalid write control endpoint [ 73.614112][ T2421] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 73.633288][ T2421] pvrusb2: Device being rendered inoperable [ 73.639240][ T2421] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 73.653900][ T2421] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 81.546325][ T1108] cfg80211: failed to load regulatory.db