last executing test programs: 1.776490392s ago: executing program 0 (id=3631): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.563974292s ago: executing program 3 (id=3640): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r5, 0x723, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, 0x0, 0x24000) unshare(0x60040000) socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r3) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x180c003, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r9, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320086dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.562822782s ago: executing program 2 (id=3650): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_ttl={{0x14, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) 1.509014515s ago: executing program 2 (id=3642): syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0xd6, 0xd4, 0x74, 0x40, 0x1a72, 0x1009, 0x40c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x22, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0xd4, 0xd, 0x2, 0x89, 0xf8, 0x29, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x40, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) 1.422054589s ago: executing program 4 (id=3644): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 539.586523ms ago: executing program 4 (id=3646): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0xda855000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) 519.002934ms ago: executing program 1 (id=3647): r0 = socket$nl_audit(0x10, 0x3, 0x9) write(r0, &(0x7f00000001c0)="321409", 0x3) 464.103917ms ago: executing program 4 (id=3648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x2020850, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2014040, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', 0x1080, 0x1) 407.976779ms ago: executing program 0 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 407.84005ms ago: executing program 1 (id=3651): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000200)=0x8, 0x4) 355.089162ms ago: executing program 1 (id=3652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x70742a85, 0x110b, 0xffffffffffffffff}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x70742a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0xfffffffffffffe0a, 0x0, 0x0}) 331.989654ms ago: executing program 0 (id=3653): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_ttl={{0x14, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) 305.402055ms ago: executing program 4 (id=3654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1, 0x4008, 0x8) 276.620666ms ago: executing program 3 (id=3655): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) lsetxattr$security_capability(&(0x7f0000001800)='./file2\x00', 0x0, 0x0, 0x0, 0x2) 250.128928ms ago: executing program 0 (id=3656): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_adj\x00') fchown(r0, 0x0, 0xee01) 199.99511ms ago: executing program 2 (id=3657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101288, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) 199.8442ms ago: executing program 3 (id=3658): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 199.65057ms ago: executing program 0 (id=3659): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt(r0, 0xff, 0x58d, &(0x7f0000002d80)="f0c46000", 0x1a) 175.588781ms ago: executing program 3 (id=3660): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51a, &(0x7f0000000600)="$eJzs3c9vG1kdAPDv2EnJZrOku+yBXQkasYdFqhLn12oDt8ANsRKie1kkVEWtNyl14ihxpCan9F9AiAsSKhInLqnEiVuvwIVjkThw4FSpQqVIwKEYzXgmdRK7TUWa2XY+H2k67/lNPfP1y9d+M+PxBFBZU+k/ScRERPwxIiZ71aMLTPVmBwt319IpiW73yt+TbLk7C3fXikWL//dmXhmLiO/Uk/hecnK927t7N1dareZWXm901jcb27t70zfWV1abq82Nhfn5xaXFpY8/mjuzWP/1t71L7/5j+Zc///2vr/z4/qPfpZs1kbf1x3FWpmIqf01G4+2+x0ci4rtnvbKS1PN43up7LBkpcYN4IWn/fSUiPsjyfzLqofOgKrqZoc2PusBrq5aNgZPaTET0yrXazExvDP9ujNda7e3O5c/bOxvXe2PlizFa+/xGqzmb7ytcjNEkrc9l5af1+WP1hYhsDPyz+htZfeZau3X9XN/pgOPePJb//6z38h+oCLv8UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv9QXfIfqkv+QyX94JNP0ql7kF//vtFevXFzbfNb87Mz6zvXZq61tzZnVtvt1eyKnfXnP1+r3d6cW4idW41Oc7vT2N7du7re3tnoXM2u67/aHD2HmIDTefvSvT8nEbH/7TeyKXUhb5Or8HrrdpMo+xpkoBz1st+AgNI49AfVZR8fGPATvUeMDWtonf22AOejVvYGAKX58D3n/6CqHP+H6nL8H6rLGB9w/B+qx/F/qK6JIff/eqvv3l2zEfHliLhfH/1Sca8v4NV3eB9uBQUFhcNC2e9MwMv2NOnL3hKgLHcW7q4VU9nbcp4eLve+BJHGfZBPvZaR/NjoWHaOdPxxcuS7EskZfXdiKiLuLf/pYjpF3g9n8LSntn87Ir46qP+T/H7vvTM/44/rJ+J/J58nvafIXq+R7L7xpzd1rP4qxf9eX/xf74v//RdYf9nxA1BN99Lxz+ygz79a9pkeh59/R8c/E2f03bGyP/+K8d/BifFf7XD8Vx8y/rt0ynX8d/Lgs2Ftafz7X/vLZDGl60/n/1dQL+Dh7Yj3B8ZfxDuWxXo8/tqAvhvmwfIvfjqsrT/+dAx83vF3fxXxYQyOv5CWGp31zcb27t509jumq82Nhfn5xaXFpY8/mmtk50gbxZnSk374k99eGbb+L0L/jw+J/3l//9845TomfvTX3wxrK/Z/hvd/7cGF5NOsVFyXdmul09mai7iQfP/k4/PP3pZimeI50vi/+cHg/H8nj7/39z9yIv5uPk9fp8v5tTRp+Un+3pguP51u39pnz8z/Yv+viL/YFzwPafzXn9P/g/I/few/p1zHv+//oTmsrez4AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMq2vbt3c6XVam69xELZMQKDjT8ejU/76klEdPN5LSIuR0Q9Lz+JiNG8Ph0RY+ly+xGzx8oAAAAAAEC5/hcAAP//YMH52g==") 169.377721ms ago: executing program 0 (id=3661): syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff09058202000000010009050302"], 0x0) 163.788062ms ago: executing program 2 (id=3662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000200)=0x8, 0x4) 153.544292ms ago: executing program 1 (id=3663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 89.723655ms ago: executing program 2 (id=3664): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x2020850, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2014040, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', 0x1080, 0x1) 89.502646ms ago: executing program 3 (id=3665): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e1d, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffff53, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7ffffffffffffffe}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@private=0xa010100}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 88.824206ms ago: executing program 4 (id=3666): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_ttl={{0x14, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) 70.600726ms ago: executing program 1 (id=3667): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfd, 0x1b9, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000008008"]) 34.223088ms ago: executing program 1 (id=3668): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x3a, 0x4, 0x2d0, 0xffffffff, 0x110, 0x1a8, 0x0, 0x110, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private=0xa010101, @private, 0x0, 0x0, 'bond_slave_1\x00', 'vlan0\x00', {}, {}, 0x0, 0x7c6f976ca9d961e1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 33.036998ms ago: executing program 4 (id=3669): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x7, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r5, 0x4, 0x40800) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f00000002c0)='~x', 0x2) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff003) 25.144039ms ago: executing program 2 (id=3670): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c636f6465706167653d3933362c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737332c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00b49f790741aaef2e723df1eabb591531def65a65a08732bdecf2f74dc8936336274cc7924fda46436b3d3e73cd74737d016c40a45c2f85f96c1c1b687f55c93476598f50"], 0x63, 0x34c, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 0s ago: executing program 3 (id=3671): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r0, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r3, &(0x7f0000001f80)=""/4070, 0xfe6) kernel console output (not intermixed with test programs): .641328][T11204] team0: Failed to send options change via netlink (err -105) [ 138.644350][T11204] team0: Mode changed to "activebackup" [ 138.847273][T10933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.875042][T10933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.886285][T10933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.897498][T11244] overlayfs: failed to clone upperpath [ 138.944607][T10933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.011055][T11260] loop1: detected capacity change from 0 to 128 [ 139.035063][T10933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.038753][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.040241][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.043512][T10933] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.049993][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.051551][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.053103][ T1610] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.054256][ T1610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.057691][T11236] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.073429][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.079079][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.080753][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.084577][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.085849][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.105720][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.107517][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.109133][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.110955][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.116485][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.118472][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.120366][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.123163][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.125101][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.133123][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.134810][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.143473][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.199174][T11280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.228024][T11280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.285150][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.286405][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.291162][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.312617][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.314674][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.336080][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.337618][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.339473][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.340903][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.347919][T10933] device veth0_vlan entered promiscuous mode [ 139.351049][T10933] device veth1_vlan entered promiscuous mode [ 139.363959][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.366430][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.367912][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.371583][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.378437][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.381212][T10933] device veth0_macvtap entered promiscuous mode [ 139.383609][T10933] device veth1_macvtap entered promiscuous mode [ 139.391166][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.393277][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.403588][T10933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.415137][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.416683][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.418099][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.419642][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.430649][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.432385][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.436227][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.437922][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.439983][T10933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.441392][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.442953][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.447193][T10933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.448834][T10933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.450425][T10933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.451938][T10933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.524854][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.526181][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.527492][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.534632][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 139.577549][ T1610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.578773][ T1610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.580095][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.822612][T11308] __nla_validate_parse: 6 callbacks suppressed [ 139.822624][T11308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2764'. [ 140.020120][T11334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2776'. [ 140.133548][T11343] overlayfs: unrecognized mount option "=" or missing value [ 140.196085][T11347] Injecting memory failure for pfn 0x210ff2 at process virtual address 0x208c0000 [ 140.198169][T11347] Memory failure: 0x210ff2: recovery action for reserved kernel page: Ignored [ 140.267830][T11357] team0: No ports can be present during mode change [ 140.909769][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.911848][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.913856][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.915611][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.917311][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.918687][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.036324][T11400] chnl_net:caif_netlink_parms(): no params data found [ 141.080205][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.081471][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.083212][T11400] device bridge_slave_0 entered promiscuous mode [ 141.085302][T11421] syz.2.2810 (11421): attempted to duplicate a private mapping with mremap. This is not supported. [ 141.085972][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.088413][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.090177][T11400] device bridge_slave_1 entered promiscuous mode [ 141.325553][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.367160][ T1610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.372325][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.387554][T11400] team0: Port device team_slave_0 added [ 141.390296][T11400] team0: Port device team_slave_1 added [ 141.402522][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.403845][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.408259][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.435622][ T1610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.438709][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.439904][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.443754][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.495185][T11400] device hsr_slave_0 entered promiscuous mode [ 141.544514][T11400] device hsr_slave_1 entered promiscuous mode [ 141.593995][T11400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.595192][T11400] Cannot create hsr debugfs directory [ 141.604030][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 141.635082][ T1610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.695470][ T1610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.923953][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 142.365502][T11475] netlink: 'syz.0.2826': attribute type 12 has an invalid length. [ 142.964004][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 143.126737][T11400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.175056][T11400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.205997][T11521] netlink: 'syz.1.2837': attribute type 12 has an invalid length. [ 143.306524][T11400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.326725][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.328240][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.345468][T11400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.440985][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.445587][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.447226][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.451002][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.453474][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.455522][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.457119][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.458316][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.460077][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.462994][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.465882][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.467549][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.468659][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.471607][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.475226][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.478572][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.480654][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.482230][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.684138][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 143.801336][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.803182][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.807050][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.808528][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.813199][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.815600][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.820455][T11400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.843976][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 144.170088][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.171436][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.174641][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.184303][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.186113][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.192867][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.198203][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.199924][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.201243][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.203538][T11400] device veth0_vlan entered promiscuous mode [ 144.207153][T11400] device veth1_vlan entered promiscuous mode [ 144.213642][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.219701][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.221287][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.222855][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.284478][ T1610] device hsr_slave_0 left promiscuous mode [ 144.334054][ T1610] device hsr_slave_1 left promiscuous mode [ 144.484498][ T1610] device veth0_macvtap left promiscuous mode [ 144.485576][ T1610] device veth1_vlan left promiscuous mode [ 144.486496][ T1610] device veth0_vlan left promiscuous mode [ 145.044011][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 145.245003][ T1610] bond1 (unregistering): Released all slaves [ 145.434030][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.633955][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 145.637445][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 145.640948][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 145.642368][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.643575][ T14] usb 1-1: Product: syz [ 145.644489][ T14] usb 1-1: Manufacturer: syz [ 145.645231][ T14] usb 1-1: SerialNumber: syz [ 145.648782][ T14] usb 1-1: config 0 descriptor?? [ 145.653356][ T14] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 146.660858][ T14] gspca_zc3xx: reg_w_i err -71 [ 147.002777][T11588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 147.003913][T11588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.013498][T11588] vhci_hcd vhci_hcd.0: Device attached [ 147.016357][T11589] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 147.019126][ T5004] vhci_hcd: stop threads [ 147.020083][ T5004] vhci_hcd: release socket [ 147.020824][ T5004] vhci_hcd: disconnect device [ 147.124108][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 147.273937][ T14] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 147.275069][ T14] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 147.278517][ T14] usb 1-1: USB disconnect, device number 2 [ 149.184806][ T1610] bond0 (unregistering): Released all slaves [ 149.203935][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 149.466907][T11400] device veth0_macvtap entered promiscuous mode [ 149.469265][T11400] device veth1_macvtap entered promiscuous mode [ 149.475907][T11574] device vlan2 entered promiscuous mode [ 149.476802][T11574] device gretap0 entered promiscuous mode [ 149.516975][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.518567][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.520011][T11596] netlink: 'syz.0.2863': attribute type 12 has an invalid length. [ 149.543170][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.544959][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.546473][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.547996][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.565085][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.566383][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.567950][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.573835][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.584426][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.586391][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.587960][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.589411][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.590846][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.596561][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.597830][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.599471][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.602049][T11400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.603506][T11400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.605563][T11400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.607023][T11400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.621927][T11613] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 149.644287][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.645654][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.646831][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.659902][ T5004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.661191][ T5004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.662477][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.694378][T11618] device syzkaller0 entered promiscuous mode [ 149.708903][T11620] overlayfs: overlapping lowerdir path [ 149.740886][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.743222][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.745606][T11624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.747874][T11624] device bridge_slave_0 left promiscuous mode [ 149.749007][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.761350][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.762794][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.795045][T11624] device bridge_slave_1 left promiscuous mode [ 149.796180][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.799086][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.800544][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.835360][T11624] bond0: (slave bond_slave_0): Releasing backup interface [ 149.882888][T11624] bond0: (slave bond_slave_1): Releasing backup interface [ 149.945456][T11624] team0: Port device team_slave_0 removed [ 149.952926][T11624] team0: Port device team_slave_1 removed [ 149.956537][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.957691][T11624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.959268][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.960435][T11624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.965555][T11627] team0: Mode changed to "activebackup" [ 150.027655][T11635] fuse: Bad value for 'fd' [ 150.156746][T11644] overlayfs: overlapping lowerdir path [ 150.164042][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.180172][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.182448][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.185478][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.186974][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.188326][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.290281][T11645] chnl_net:caif_netlink_parms(): no params data found [ 150.298318][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.300049][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.314645][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.315898][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.317523][T11645] device bridge_slave_0 entered promiscuous mode [ 150.366330][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.367543][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.369011][T11645] device bridge_slave_1 entered promiscuous mode [ 150.380477][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.382838][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.391797][T11645] team0: Port device team_slave_0 added [ 150.394643][T11645] team0: Port device team_slave_1 added [ 150.409128][T11658] block device autoloading is deprecated and will be removed. [ 150.411951][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.413075][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.431173][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.438557][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.439755][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.447624][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.464115][ T4370] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.548787][T11645] device hsr_slave_0 entered promiscuous mode [ 150.584226][T11645] device hsr_slave_1 entered promiscuous mode [ 150.613997][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.615352][T11645] Cannot create hsr debugfs directory [ 150.645992][ T4370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.647638][ T4370] usb 1-1: not running at top speed; connect to a high speed hub [ 150.651267][ T4370] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 150.652497][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.653635][ T4370] usb 1-1: Product: syz [ 150.654432][ T4370] usb 1-1: Manufacturer: syz [ 150.655224][ T4370] usb 1-1: SerialNumber: syz [ 151.088686][ T4370] usb 1-1: USB disconnect, device number 3 [ 151.296297][T11236] udevd[11236]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.651264][T11709] device erspan0 entered promiscuous mode [ 151.652487][T11709] device vlan2 entered promiscuous mode [ 151.934151][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.062118][T11645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.126578][ T4369] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.128169][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.129515][ T4369] usb 1-1: Product: syz [ 152.130253][ T4369] usb 1-1: Manufacturer: syz [ 152.131040][ T4369] usb 1-1: SerialNumber: syz [ 152.155816][T11645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.194957][T11645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.245040][T11645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.254015][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 152.401203][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.405383][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.407127][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.410458][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.413650][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.419120][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.420701][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.421909][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.423352][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.466980][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.468728][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.470297][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.471724][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.479065][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.482184][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.486108][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.489344][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.491024][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.494112][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.495813][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.499704][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.501430][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.541732][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 152.547966][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.549637][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.552781][T11645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.628986][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.630497][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.641819][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.661135][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.662779][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.673336][T11752] overlayfs: failed to resolve './bus': -2 [ 152.702440][T11756] netlink: 'syz.1.2917': attribute type 3 has an invalid length. [ 152.733195][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.734790][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.736360][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.737902][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.751642][T11645] device veth0_vlan entered promiscuous mode [ 152.756170][T11645] device veth1_vlan entered promiscuous mode [ 152.768396][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.770366][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.773010][T11645] device veth0_macvtap entered promiscuous mode [ 152.776628][T11645] device veth1_macvtap entered promiscuous mode [ 152.785608][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.787245][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.789242][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.792429][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.796731][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.798662][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.800170][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.801699][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.803290][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.809063][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.810790][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.812531][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.819075][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.820700][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.822416][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.825654][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.875798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.877543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.880903][T11645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.882366][T11645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.883823][T11645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.886442][T11645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.919944][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.921304][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.923114][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.958116][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.959590][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.962718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.004737][T11777] overlayfs: failed to clone upperpath [ 153.156294][T11791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.158700][T11791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.189642][T11793] binder: 11792:11793 tried to acquire reference to desc 0, got 1 instead [ 153.191993][T11793] binder: 11792:11793 got transaction with invalid parent offset or type [ 153.193583][T11793] binder: 11793:11792 failed to fixup parent [ 153.198574][T11793] binder: 11792:11793 transaction async to 11792:0 failed 5/29201/-22, size 72-24 line 3540 [ 153.200260][T11793] binder: 11792:11793 ioctl c0306201 200001c0 returned -14 [ 153.202552][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.542371][ T1610] device hsr_slave_0 left promiscuous mode [ 153.584259][ T1610] device hsr_slave_1 left promiscuous mode [ 153.604069][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 153.604186][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 153.654181][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.655948][ T1610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.657517][ T1610] device bridge_slave_1 left promiscuous mode [ 153.659161][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.696080][ T1610] device bridge_slave_0 left promiscuous mode [ 153.697412][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.750243][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 153.881285][T11814] binder: 11813:11814 tried to acquire reference to desc 0, got 1 instead [ 153.882971][T11814] binder: 11813:11814 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.885390][T11814] binder: 11814 RLIMIT_NICE not set [ 153.886243][T11814] binder: 11814 RLIMIT_NICE not set [ 153.887264][T11814] binder: 11814 RLIMIT_NICE not set [ 153.888181][T11814] binder_alloc: 11813: binder_alloc_buf, no vma [ 153.889171][T11814] binder: cannot allocate buffer: vma cleared, target dead or dying [ 153.889214][T11814] binder: 11813:11814 transaction reply to 11813:11814 failed 11/29189/-3, size 0-0 line 3230 [ 153.892119][T11814] binder: send failed reply for transaction 10 to 11813:11814 [ 153.893554][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 153.894748][ T4370] binder: undelivered TRANSACTION_ERROR: 29189 [ 153.902531][ T4370] binder: undelivered TRANSACTION_ERROR: 29190 [ 153.953813][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 153.959669][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 153.961982][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 153.970915][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 153.973708][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 153.976319][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 153.978437][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.979914][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 153.980473][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.982803][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 153.986045][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.987875][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.990562][ T4369] lan78xx: probe of 1-1:1.0 failed with error -71 [ 154.001081][ T4369] usb 1-1: USB disconnect, device number 4 [ 154.334147][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 154.853997][ T4369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.033936][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 155.036246][ T4369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 155.039175][ T4369] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 155.040714][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.041984][ T4369] usb 1-1: Product: syz [ 155.042666][ T4369] usb 1-1: Manufacturer: syz [ 155.043401][ T4369] usb 1-1: SerialNumber: syz [ 155.045956][ T4369] usb 1-1: config 0 descriptor?? [ 155.048418][ T4369] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 155.851223][ T4369] gspca_zc3xx: reg_w_i err -71 [ 155.985957][ T1610] team0 (unregistering): Port device team_slave_1 removed [ 156.145244][ T1610] team0 (unregistering): Port device team_slave_0 removed [ 156.304354][ T1610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.404293][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 156.473930][ T4369] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 156.474996][ T4369] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 156.477447][ T4369] usb 1-1: USB disconnect, device number 5 [ 156.515364][ T1610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.025248][ T1610] bond0 (unregistering): Released all slaves [ 158.326412][T11832] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2945'. [ 158.331771][T11841] device gretap0 entered promiscuous mode [ 158.332762][T11841] device vlan2 entered promiscuous mode [ 158.411521][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.411636][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.484080][ T4324] Bluetooth: hci2: command 0x0419 tx timeout [ 158.534805][T11876] fuse: Invalid rootmode [ 158.843960][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 159.035026][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 159.036943][ T14] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 159.038288][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.040863][ T14] usb 1-1: config 0 descriptor?? [ 159.042937][T11878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.157707][T11884] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2968'. [ 159.221258][T11888] device erspan0 entered promiscuous mode [ 159.222309][T11888] device vlan2 entered promiscuous mode [ 159.377923][T11900] fuse: Invalid rootmode [ 159.457224][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.458378][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.459411][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.461055][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.462277][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.463449][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.465430][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.466612][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.467758][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.468756][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.469749][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.470784][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.471975][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.472960][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.474634][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.475933][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.477036][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.478275][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.479313][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.480353][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.481369][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.482625][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.483671][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.484896][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.485977][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.487107][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.488195][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.489501][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.490583][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.491612][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.492798][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.493814][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.495034][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.496069][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.497135][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.498286][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.500155][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.501720][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.502957][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.504170][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.505340][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.506442][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.507521][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.508759][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.509872][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.511179][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.512234][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.513419][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.514523][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.515609][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.516743][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.517857][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.518952][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.520158][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.521390][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.522513][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.523713][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.524986][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.526188][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.527313][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.528432][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.529542][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.530690][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.531968][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.533126][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.534421][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.535460][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.536552][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.537702][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.538879][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.540071][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.541164][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.542360][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.543461][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.544643][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.545741][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.546816][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.547893][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.549022][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.550182][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.551308][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.552665][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.554068][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.555231][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.556288][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.557433][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.558588][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.559694][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.560788][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.561876][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.563199][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.564396][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.565658][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.566724][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.567793][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.568981][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.570087][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.571211][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.572314][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.573511][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.574722][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.575960][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.577204][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.578371][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.579553][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.580702][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.581756][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.582860][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.584167][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.585290][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.586501][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.587615][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.588733][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.589825][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.590942][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.592065][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.593125][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.594381][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.595560][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.596781][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.597926][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.599050][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.600214][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.601337][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.602411][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.603823][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.605094][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.606103][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.607273][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.608482][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.609643][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.610826][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.611960][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.613051][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.614279][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.615625][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.616898][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.618171][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.619362][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.620504][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.621752][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.623061][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.624210][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.625378][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.626747][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.627756][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.628929][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.630105][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.631263][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.632390][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.633540][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.634730][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.635910][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.637186][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.638320][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.639503][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.640772][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.641919][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.643059][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.644218][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.645382][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.646590][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.647877][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.649016][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.650184][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.651368][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.652534][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.653639][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.654852][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.656189][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.657297][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.658626][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.659828][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.661078][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.662299][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.663426][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.664646][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.665764][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.666945][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.668081][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.669393][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.670552][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.671813][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.672919][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.674090][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.675228][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.676443][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.677589][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.678726][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.680146][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.681275][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.682485][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.683683][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.684891][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.686035][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.687237][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.688426][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.689601][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.690916][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.692120][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.693268][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.694521][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.695632][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.696784][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.697982][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.699004][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.700162][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.701408][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.702531][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.703660][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.704889][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.705900][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.707016][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.708136][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.709254][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.710414][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.711679][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.712845][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.714087][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.715239][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.716331][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.717418][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.718540][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.719526][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.720683][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.721870][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.722989][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.724224][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.725254][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.726403][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.727540][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.728663][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.729768][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.730778][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.731972][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.733231][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.734461][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.735593][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.736687][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.737844][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.738959][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.740048][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.741162][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.742448][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.743566][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.744826][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.745933][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.747094][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.748273][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.749306][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.750497][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.751689][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.752998][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.754167][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.755395][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.756607][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.757785][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.759148][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.760286][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.761448][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.762569][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.763802][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.765000][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.766175][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.767281][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.768353][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.769412][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.770445][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.771505][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.772511][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.773644][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.774970][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.776157][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.777398][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.778539][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.779625][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.780783][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.781976][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.782995][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.784129][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.785449][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.786518][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.787678][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.788791][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.789865][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.790922][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.791940][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.793044][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.794230][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.795320][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.796571][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.797658][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.798870][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.799900][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.800926][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.802065][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.803157][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.804325][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.805404][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.806517][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.807751][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.808994][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.810141][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.811247][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.812380][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.813597][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.814892][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.816051][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.817187][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.818458][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.819701][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.820845][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.821879][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.823016][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.824070][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.825161][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.826254][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.827305][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.828277][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.829485][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.830751][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.831886][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.833008][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.834173][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.835322][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.836349][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.837511][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.838569][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.839888][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.841097][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.842192][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.843367][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.844568][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.845768][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.846928][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.848012][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.849126][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.850363][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.851588][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.852743][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.853862][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.854998][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.856097][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.857208][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.858355][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.859464][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.860904][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.862065][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.863186][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.864248][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.865305][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.866395][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.867516][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.868600][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.869684][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.871043][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.872251][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.873303][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.874478][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.875643][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.876819][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.877910][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.878969][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.880175][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.881404][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.882647][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.883752][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.884987][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.886102][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.887279][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.888318][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.889398][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.890462][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.891668][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.892825][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.894068][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.895150][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.896242][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.897329][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.898457][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.899529][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.900630][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.901942][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.903212][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.904374][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.905447][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.906531][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.907602][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.908713][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.909821][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.910920][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.912119][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.913353][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.914561][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.915628][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.916693][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.917858][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.918927][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.920036][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.921130][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.922357][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.923540][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.924665][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.925841][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.926921][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.928045][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.929134][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.930375][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.931543][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.932768][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.933987][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.935086][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.936276][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.937394][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.938520][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.939797][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.940978][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.942065][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.943336][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.944544][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.945722][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.946786][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.947903][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.949061][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.950172][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.951379][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.952426][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.953631][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.954868][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.955986][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.957091][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.958157][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.959286][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.960410][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.961436][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.962635][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.964173][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.965287][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.966356][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.967401][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.968563][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.969576][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.970663][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.971724][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.972838][ T14] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 159.973979][ T14] wacom 0003:056A:5000.0001: collection stack underflow [ 159.975207][ T14] wacom 0003:056A:5000.0001: item 0 0 0 12 parsing failed [ 159.976650][ T14] wacom 0003:056A:5000.0001: parse failed [ 159.977613][ T14] wacom: probe of 0003:056A:5000.0001 failed with error -22 [ 159.980079][ T14] usb 1-1: USB disconnect, device number 6 [ 160.295275][T11912] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2980'. [ 160.401795][T11916] loop3: detected capacity change from 0 to 128 [ 160.543947][ T14] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 160.746593][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.748118][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.749443][ T14] usb 1-1: Product: syz [ 160.750189][ T14] usb 1-1: Manufacturer: syz [ 160.750944][ T14] usb 1-1: SerialNumber: syz [ 160.752683][ T14] usb 1-1: config 0 descriptor?? [ 160.960309][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 161.371006][T11868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.425344][T11926] fuse: Bad value for 'rootmode' [ 161.450969][T11931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.452727][T11931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.461918][T11929] binder: 11928:11929 tried to acquire reference to desc 0, got 1 instead [ 161.463719][T11929] binder_alloc: 11928: binder_alloc_buf, no vma [ 161.465525][T11929] binder: cannot allocate buffer: vma cleared, target dead or dying [ 161.465560][T11929] binder: 11928:11929 transaction async to 11928:0 failed 16/29189/-3, size 72-24 line 3230 [ 161.468601][T11929] binder: 11928:11929 ioctl c0306201 200001c0 returned -14 [ 161.473836][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.514927][T11938] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2991'. [ 161.571070][T11942] loop2: detected capacity change from 0 to 128 [ 161.738976][T11954] fuse: Bad value for 'rootmode' [ 161.810745][T11960] binder: 11959:11960 tried to acquire reference to desc 0, got 1 instead [ 161.812614][T11960] binder_alloc: 11959: binder_alloc_buf, no vma [ 161.813717][T11960] binder: cannot allocate buffer: vma cleared, target dead or dying [ 161.813755][T11960] binder: 11959:11960 transaction async to 11959:0 failed 21/29189/-3, size 72-24 line 3230 [ 161.817246][T11960] binder: 11959:11960 ioctl c0306201 200001c0 returned -14 [ 161.818970][ T4370] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.862042][T11964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3003'. [ 161.908924][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 162.032566][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 162.053569][ T4324] Bluetooth: Frame is too long (len 204, expected len 4) [ 162.127308][T11982] overlayfs: conflicting lowerdir path [ 162.131179][T11982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.150082][T11984] binder: tried to use weak ref as strong ref [ 162.151663][T11984] binder: 11983:11984 Acquire 1 refcount change on invalid ref 0 ret -22 [ 162.153427][T11984] binder: 11983:11984 got transaction to invalid handle, 1 [ 162.158046][T11984] binder: 11984:11983 cannot find target node [ 162.159208][T11984] binder: 11983:11984 transaction async to 0:0 failed 24/29201/-22, size 72-24 line 3045 [ 162.160868][T11984] binder: 11983:11984 ioctl c0306201 200001c0 returned -14 [ 162.162486][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.187757][T11986] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3015'. [ 162.342471][ T4324] Bluetooth: Frame is too long (len 204, expected len 4) [ 162.381741][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 162.387413][ T14] usb 1-1: USB disconnect, device number 7 [ 162.409826][T12001] binder: 11987:12001 tried to acquire reference to desc 0, got 1 instead [ 162.441774][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 162.486799][T12009] overlayfs: conflicting lowerdir path [ 162.491958][T12009] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.531267][T12011] binder: tried to use weak ref as strong ref [ 162.532378][T12011] binder: 12010:12011 Acquire 1 refcount change on invalid ref 0 ret -22 [ 162.542096][T12011] binder: 12010:12011 got transaction to invalid handle, 1 [ 162.546912][T12011] binder: 12011:12010 cannot find target node [ 162.548623][T12011] binder: 12010:12011 ioctl c0306201 200001c0 returned -14 [ 162.577986][T12015] device gretap0 entered promiscuous mode [ 162.582167][T12015] device vlan2 entered promiscuous mode [ 162.949633][T12024] fuse: Bad value for 'fd' [ 163.160310][T12035] overlayfs: failed to clone lowerpath [ 163.162620][T12035] overlayfs: failed to clone upperpath [ 163.245571][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.247555][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.252519][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.259206][T12040] binder: tried to use weak ref as strong ref [ 163.260759][T12040] binder: 12039:12040 ioctl c0306201 200001c0 returned -14 [ 163.291460][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.293170][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.296869][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.384440][ T4369] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 163.448764][T12051] fuse: Bad value for 'fd' [ 163.573214][ T4369] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.574805][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.576087][ T4369] usb 1-1: Product: syz [ 163.576759][ T4369] usb 1-1: Manufacturer: syz [ 163.577489][ T4369] usb 1-1: SerialNumber: syz [ 163.581356][T12037] chnl_net:caif_netlink_parms(): no params data found [ 163.590600][ T4369] usb 1-1: config 0 descriptor?? [ 163.685617][T12069] binder: BINDER_SET_CONTEXT_MGR already set [ 163.686716][T12069] binder: 12068:12069 ioctl 4018620d 20004a80 returned -16 [ 163.720981][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.722134][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.723800][T12037] device bridge_slave_0 entered promiscuous mode [ 163.730290][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.731438][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.735631][T12037] device bridge_slave_1 entered promiscuous mode [ 163.768273][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.770712][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.793478][T12037] team0: Port device team_slave_0 added [ 163.804510][ T4369] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.810403][T12037] team0: Port device team_slave_1 added [ 163.826909][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.828247][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.832221][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.839570][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.840684][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.845127][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.905369][T12037] device hsr_slave_0 entered promiscuous mode [ 163.934296][T12037] device hsr_slave_1 entered promiscuous mode [ 163.973979][T12037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.975302][T12037] Cannot create hsr debugfs directory [ 163.979185][T12081] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3052'. [ 164.116007][T12037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.129813][T12097] binder: BINDER_SET_CONTEXT_MGR already set [ 164.131387][T12097] binder: 12096:12097 ioctl 4018620d 20004a80 returned -16 [ 164.195589][T12037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.370557][T12037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.551334][T12111] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3064'. [ 164.626150][T12037] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.739380][T12123] binder: BINDER_SET_CONTEXT_MGR already set [ 164.740493][T12123] binder: 12122:12123 ioctl 4018620d 20004a80 returned -16 [ 164.822482][T12133] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3074'. [ 164.829230][T12037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.858897][T12037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.877051][T12037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.935602][T12037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.122437][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.136657][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.138131][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.153184][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.168255][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.179133][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.181356][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.182546][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.184073][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.186089][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.187681][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.188835][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.190225][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.191996][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.195774][ T277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.210909][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.212777][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.214897][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.218725][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.222453][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.226883][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.229664][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.235526][T12037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.237532][T12037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.250233][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.251801][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.400041][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 165.585649][ T4369] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 165.589458][ T4369] usb 1-1: USB disconnect, device number 8 [ 165.608694][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.614060][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.615278][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.752799][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.754563][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.778843][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.781157][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.786187][T12037] device veth0_vlan entered promiscuous mode [ 165.790134][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.791996][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.806102][T12037] device veth1_vlan entered promiscuous mode [ 165.818802][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.820371][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.822445][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.824558][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.827842][T12037] device veth0_macvtap entered promiscuous mode [ 165.830869][T12037] device veth1_macvtap entered promiscuous mode [ 165.836975][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.838837][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.840515][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.842366][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.844417][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.846197][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.848646][T12037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.850062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.851746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.853465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.855807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.859601][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.861447][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.863276][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.865571][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.867273][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.869208][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.871023][T12037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.873026][T12037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.876103][T12037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.877478][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.879269][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.882117][T12037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.883771][T12037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.886184][T12037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.887646][T12037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.925344][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.926647][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.928086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.938219][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.939631][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.941052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.002175][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 166.314928][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 166.735918][T12236] netlink: 'syz.0.3115': attribute type 21 has an invalid length. [ 166.737285][T12236] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3115'. [ 166.865638][T12248] team0: No ports can be present during mode change [ 167.057282][T12261] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 167.059033][T12261] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 167.065851][T12261] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 167.108946][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'. [ 167.110715][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'. [ 167.113126][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'. [ 167.119761][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'. [ 167.145273][T12270] team0: Unable to change to the same mode the team is in [ 167.284932][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.289991][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.331199][T12296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.333419][T12296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.336846][T12296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.339146][T12296] device bridge_slave_0 left promiscuous mode [ 167.340396][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.378538][T12296] device bridge_slave_1 left promiscuous mode [ 167.379706][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.409372][T12296] bond0: (slave bond_slave_0): Releasing backup interface [ 167.443003][T12296] bond0: (slave bond_slave_1): Releasing backup interface [ 167.497333][T12296] team0: Failed to send options change via netlink (err -105) [ 167.499940][T12296] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 167.507635][T12296] team0: Port device team_slave_0 removed [ 167.519731][T12296] team0: Failed to send options change via netlink (err -105) [ 167.523434][T12296] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 167.526438][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 167.532492][T12296] team0: Port device team_slave_1 removed [ 167.534585][T12296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.536230][T12296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.538141][T12296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.547876][T12296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.564858][T12302] team0: Failed to send options change via netlink (err -105) [ 167.569163][T12302] team0: Mode changed to "activebackup" [ 167.588280][ T4404] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 167.589804][ T4404] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.740312][T12330] fuse: Unknown parameter 'group_i00000000000000000000' [ 168.288817][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.290312][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.315260][T12372] fuse: Bad value for 'fd' [ 168.324146][ T4404] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 168.404195][ T4372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.579881][T12401] fuse: Bad value for 'fd' [ 168.711370][T12416] Injecting memory failure for pfn 0x146659 at process virtual address 0x20000000 [ 168.715174][T12416] Memory failure: 0x146659: keeping poisoned page in swap cache [ 168.716519][T12416] Memory failure: 0x146659: recovery action for clean swapcache page: Recovered [ 168.717958][T12416] Injecting memory failure for pfn 0x13d2e7 at process virtual address 0x20001000 [ 168.724515][T12416] Memory failure: 0x13d2e7: keeping poisoned page in swap cache [ 168.725870][T12416] Memory failure: 0x13d2e7: recovery action for clean swapcache page: Recovered [ 168.727269][T12416] Injecting memory failure for pfn 0x13d2da at process virtual address 0x20002000 [ 168.728584][T12416] Memory failure: 0x13d2da: keeping poisoned page in swap cache [ 168.729803][T12416] Memory failure: 0x13d2da: recovery action for clean swapcache page: Recovered [ 168.876195][T12424] device pim6reg1 entered promiscuous mode [ 168.921640][T12430] fuse: Bad value for 'group_id' [ 169.038611][T12436] fuse: Bad value for 'fd' [ 169.057321][T12440] __nla_validate_parse: 8 callbacks suppressed [ 169.057331][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 169.083550][T12445] binder: BINDER_SET_CONTEXT_MGR already set [ 169.085610][T12445] binder: 12444:12445 ioctl 4018620d 20004a80 returned -16 [ 169.343649][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.348380][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.381759][T12468] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3221'. [ 169.409479][T12472] netlink: 'syz.3.3222': attribute type 3 has an invalid length. [ 169.420620][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 169.604022][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 169.618345][T12488] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.638567][T12495] fuse: Bad value for 'user_id' [ 169.778640][T12514] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3239'. [ 169.821204][T12518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3243'. [ 169.911326][T12532] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 169.916903][T12532] team0: Device ipvlan1 failed to register rx_handler [ 170.167515][T12549] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3255'. [ 170.179082][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 170.194836][T12554] binder_user_error: 2 callbacks suppressed [ 170.194843][T12554] binder: 12552:12554 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 170.207486][T12554] binder: 12552:12554 got transaction to invalid handle, 1 [ 170.208672][T12554] binder_debug: 11 callbacks suppressed [ 170.210063][T12554] binder: 12554:12552 cannot find target node [ 170.219056][T12554] binder: 12552:12554 transaction async to 0:0 failed 52/29201/-22, size 72-24 line 3045 [ 170.220820][T12554] binder: 12552:12554 ioctl c0306201 200001c0 returned -14 [ 170.230966][ T4404] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.254892][T12557] fuse: Bad value for 'user_id' [ 170.379867][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.382090][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.561395][T12570] tap0: tun_chr_ioctl cmd 2148553947 [ 170.601005][T12572] net_ratelimit: 1 callbacks suppressed [ 170.601014][T12572] Dead loop on virtual device ip6_vti0, fix it urgently! [ 170.839577][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'. [ 170.842472][T12580] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3270'. [ 170.844628][T12580] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3270'. [ 170.996450][T12596] fuse: Bad value for 'fd' [ 171.000056][T12597] block device autoloading is deprecated and will be removed. [ 171.063857][T12603] device pim6reg1 entered promiscuous mode [ 171.314232][T12636] block device autoloading is deprecated and will be removed. [ 171.341992][T12640] device pim6reg1 entered promiscuous mode [ 171.373118][T12645] binder: 12644:12645 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 171.472246][T12658] overlayfs: failed to resolve './file2': -2 [ 171.482331][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.484807][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.574808][T12668] fuse: Unknown parameter '0x0000000000000004' [ 171.603405][T12673] binder: 12671:12673 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 171.673572][T12678] device pim6reg1 entered promiscuous mode [ 171.675537][T12680] netlink: 'syz.3.3313': attribute type 3 has an invalid length. [ 171.685941][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 171.911455][T12705] netlink: 'syz.3.3324': attribute type 3 has an invalid length. [ 171.939457][T12709] netlink: 'syz.3.3326': attribute type 32 has an invalid length. [ 171.955934][T12711] device pim6reg1 entered promiscuous mode [ 172.004896][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.090982][T12729] team0: No ports can be present during mode change [ 172.098887][T12731] fuse: Unknown parameter '0x0000000000000004' [ 172.149875][T12737] fuse: Unknown parameter 'group_i00000000000000000000' [ 172.310705][T12761] fuse: Unknown parameter '0x0000000000000004' [ 172.343319][T12766] team0: No ports can be present during mode change [ 172.375249][T12771] netlink: 'syz.0.3353': attribute type 29 has an invalid length. [ 172.376602][T12771] netlink: 'syz.0.3353': attribute type 29 has an invalid length. [ 172.383563][T12771] netlink: 'syz.0.3353': attribute type 29 has an invalid length. [ 172.389203][T12771] netlink: 'syz.0.3353': attribute type 29 has an invalid length. [ 172.399915][T12771] netlink: 'syz.0.3353': attribute type 29 has an invalid length. [ 172.418101][T12777] fuse: Invalid rootmode [ 172.506024][T12791] fuse: Unknown parameter '0x0000000000000004' [ 172.527357][T12792] block device autoloading is deprecated and will be removed. [ 172.589853][T12801] fuse: Invalid rootmode [ 172.697485][T12817] fuse: Unknown parameter '0x0000000000000004' [ 172.789882][T12830] fuse: Bad value for 'rootmode' [ 172.818229][T12835] team0: No ports can be present during mode change [ 172.846110][T12837] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 172.847518][T12837] netlink: 'syz.3.3384': attribute type 2 has an invalid length. [ 173.082104][T12852] openvswitch: netlink: Flow key attr not present in new flow. [ 173.103845][T12858] binder: 12857:12858 ioctl 4018620d 0 returned -22 [ 173.108875][T12858] binder: 12857:12858 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 173.111804][T12858] binder: 12857:12858 got transaction to invalid handle, 1 [ 173.112911][T12858] binder: 12858:12857 cannot find target node [ 173.113778][T12858] binder: 12857:12858 transaction async to 0:0 failed 57/29201/-22, size 72-24 line 3045 [ 173.142807][T12858] binder: 12857:12858 ioctl c0306201 200001c0 returned -14 [ 173.146012][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.148855][T12863] team0: No ports can be present during mode change [ 173.158364][T12865] fuse: Unknown parameter 'fd0x0000000000000004' [ 173.250699][T12878] loop4: detected capacity change from 0 to 512 [ 173.691664][T12891] loop2: detected capacity change from 0 to 256 [ 173.699304][T12891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 173.721043][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.729190][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.734742][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.736286][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.748964][T12893] xt_hashlimit: size too large, truncated to 1048576 [ 174.103914][T12897] team0: No ports can be present during mode change [ 174.341561][T12911] binder: 12898:12911 tried to acquire reference to desc 0, got 1 instead [ 174.364739][T12911] binder: 12898:12911 got transaction to invalid handle, 3 [ 174.366069][T12911] binder: 12911:12898 cannot find target node [ 174.367077][T12911] binder: 12898:12911 transaction call to 0:0 failed 62/29201/-22, size 0-0 line 3045 [ 174.664543][T12921] fuse: Bad value for 'group_id' [ 174.893603][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.899901][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.106614][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.109050][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.114364][ T4404] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.968673][T12935] __nla_validate_parse: 9 callbacks suppressed [ 175.968685][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 175.983857][T12935] team0: No ports can be present during mode change [ 176.127940][T12942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3426'. [ 176.180125][T12945] loop4: detected capacity change from 0 to 2048 [ 176.266576][T12945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.321490][T12037] EXT4-fs (loop4): unmounting filesystem. [ 176.496055][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.499901][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.533269][T12968] binder: 12957:12968 tried to acquire reference to desc 0, got 1 instead [ 176.543032][T12968] binder: 12957:12968 got transaction to invalid handle, 3 [ 176.546740][T12968] binder: 12968:12957 cannot find target node [ 176.549606][T12968] binder: 12957:12968 transaction call to 0:0 failed 67/29201/-22, size 0-0 line 3045 [ 176.852615][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.860362][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.066789][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.068455][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.242192][T12976] loop3: detected capacity change from 0 to 40427 [ 177.247887][T12976] F2FS-fs (loop3): invalid crc value [ 177.265287][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 177.286218][T12976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.309640][T12976] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 177.313308][T12976] F2FS-fs (loop3): Start checkpoint disabled! [ 177.334224][T12976] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 177.397243][T12984] device pim6reg1 entered promiscuous mode [ 177.402438][ T277] kworker/u4:4: attempt to access beyond end of device [ 177.402438][ T277] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 177.532306][T12990] loop1: detected capacity change from 0 to 256 [ 177.533749][T12990] exfat: Deprecated parameter 'utf8' [ 177.550195][T12990] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 177.593182][T12990] cgroup: Unknown subsys name 'rootcontext' [ 177.635796][T12996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3448'. [ 177.655575][T12996] team0: No ports can be present during mode change [ 177.670205][T13001] device gretap0 entered promiscuous mode [ 177.671205][T13001] device vlan2 entered promiscuous mode [ 177.708215][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.709791][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.871563][T13016] binder: 12997:13016 got transaction to invalid handle, 1 [ 177.872763][T13016] binder: 13016:12997 cannot find target node [ 177.873679][T13016] binder: 12997:13016 transaction call to 0:0 failed 71/29201/-22, size 72-24 line 3045 [ 177.887521][T13013] binder: 12997:13013 got transaction to invalid handle, 3 [ 177.889365][T13013] binder: 13013:12997 cannot find target node [ 177.890449][T13013] binder: 12997:13013 transaction call to 0:0 failed 72/29201/-22, size 0-0 line 3045 [ 179.041866][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 179.044268][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.088727][T13035] loop2: detected capacity change from 0 to 512 [ 179.090105][T13035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.093615][T13031] team0: Unable to change to the same mode the team is in [ 179.099325][T13035] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.130307][T13035] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.3461: Allocating blocks 41-42 which overlap fs metadata [ 179.160246][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 179.160254][ T27] audit: type=1326 audit(8372.130:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.1.3466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa777128 code=0x7ffc0000 [ 179.178053][ T27] audit: type=1326 audit(8372.150:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.1.3466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffaa777128 code=0x7ffc0000 [ 179.183408][ T27] audit: type=1326 audit(8372.150:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.1.3466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa777128 code=0x7ffc0000 [ 179.197784][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.199075][T13035] Quota error (device loop2): write_blk: dquota write failed [ 179.200293][T13035] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 179.202237][T13035] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.3461: Allocating blocks 41-42 which overlap fs metadata [ 179.219066][ T27] audit: type=1326 audit(8372.150:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.1.3466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa777128 code=0x7ffc0000 [ 179.328891][ T4404] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.329959][ T4404] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.339322][T13049] loop1: detected capacity change from 0 to 128 [ 179.346289][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.347387][T13035] Quota error (device loop2): write_blk: dquota write failed [ 179.348555][T13035] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 179.350015][T13035] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3461: Failed to acquire dquot type 1 [ 179.365363][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.377289][T13035] EXT4-fs error (device loop2): mb_free_blocks:1824: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 179.382482][T13049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.401320][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.402580][T13035] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3461: corrupted inode contents [ 179.423718][T13049] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.3468: No space for directory leaf checksum. Please run e2fsck -D. [ 179.429416][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.430476][T13035] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #12: comm syz.2.3461: mark_inode_dirty error [ 179.448272][T13049] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.3468: checksumming directory block 0 [ 179.457489][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.458865][T13035] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3461: corrupted inode contents [ 179.479179][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.480298][T13035] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.3461: mark_inode_dirty error [ 179.489206][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.490508][T13035] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3461: corrupted inode contents [ 179.519402][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.522004][T13035] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 179.532781][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.557716][T13035] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #12: comm syz.2.3461: corrupted inode contents [ 179.563349][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 179.565424][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.566452][T13035] EXT4-fs error (device loop2): ext4_truncate:4318: inode #12: comm syz.2.3461: mark_inode_dirty error [ 179.593227][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.621638][T13035] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 179.627203][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.636334][T13035] EXT4-fs (loop2): 1 truncate cleaned up [ 179.637283][T13035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.701915][T13054] loop1: detected capacity change from 0 to 1024 [ 179.708190][T13035] Quota error (device loop2): write_blk: dquota write failed [ 179.709531][T13035] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 179.710989][T13035] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3461: Failed to acquire dquot type 1 [ 179.752331][T13035] EXT4-fs (loop2): Remounting filesystem read-only [ 179.875206][T11645] EXT4-fs (loop2): unmounting filesystem. [ 179.879383][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.880999][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.408617][T13051] loop3: detected capacity change from 0 to 40427 [ 180.427356][T13051] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.431360][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3476'. [ 180.439040][T13072] team0: Unable to change to the same mode the team is in [ 180.440488][T13051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.450187][T13051] syz.3.3469: attempt to access beyond end of device [ 180.450187][T13051] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 180.467030][T11400] syz-executor: attempt to access beyond end of device [ 180.467030][T11400] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.608213][T13084] device gretap0 entered promiscuous mode [ 180.610446][T13084] device vlan2 entered promiscuous mode [ 181.082076][T13092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.083769][T13092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.125887][T13096] fuse: Bad value for 'fd' [ 181.180416][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3488'. [ 181.188110][T13100] team0: No ports can be present during mode change [ 181.278381][T13110] loop4: detected capacity change from 0 to 128 [ 181.289143][T13112] fuse: Bad value for 'fd' [ 181.298075][T13110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.347488][T12037] EXT4-fs (loop4): unmounting filesystem. [ 181.378732][T13120] binder: 13119:13120 got transaction to invalid handle, 1 [ 181.380130][T13120] binder: 13120:13119 cannot find target node [ 181.381292][T13120] binder: 13119:13120 ioctl c0306201 200001c0 returned -14 [ 181.463373][T13126] fuse: Bad value for 'fd' [ 181.476834][T13128] netlink: 'syz.0.3499': attribute type 3 has an invalid length. [ 181.478116][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3499'. [ 181.509835][T13131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3500'. [ 181.511793][T13133] fuse: Unknown parameter 'grou00000000000000000000' [ 181.528996][T13131] team0: Unable to change to the same mode the team is in [ 181.547776][T13135] loop4: detected capacity change from 0 to 1024 [ 181.640544][T13135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.677754][T13143] fuse: Bad value for 'fd' [ 181.692497][T12037] EXT4-fs (loop4): unmounting filesystem. [ 182.002794][T13153] loop3: detected capacity change from 0 to 16 [ 182.047452][T13153] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.311261][T13149] bridge0: port 3(vlan2) entered blocking state [ 182.312596][T13149] bridge0: port 3(vlan2) entered disabled state [ 182.469701][T13160] fuse: Bad value for 'fd' [ 182.815607][T13164] fuse: Unknown parameter 'group_i00000000000000000000' [ 182.819665][T13166] device erspan0 entered promiscuous mode [ 182.820782][T13166] device vlan2 entered promiscuous mode [ 182.906364][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3514'. [ 182.913309][T13169] team0: No ports can be present during mode change [ 182.977841][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 183.001126][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 183.585470][T13196] fuse: Unknown parameter 'group_i00000000000000000000' [ 183.668907][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3527'. [ 183.672678][T13205] team0: No ports can be present during mode change [ 183.796672][T13215] overlayfs: failed to resolve './file0': -2 [ 183.851242][T13202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.852695][T13202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.859041][T13225] fuse: Unknown parameter 'group_i00000000000000000000' [ 183.881139][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3539'. [ 183.888546][T13227] team0: No ports can be present during mode change [ 184.103181][T13240] netlink: 'syz.3.3543': attribute type 3 has an invalid length. [ 184.104832][T13240] netlink: 'syz.3.3543': attribute type 3 has an invalid length. [ 184.128206][T13242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.130438][T13242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.437242][T13248] loop4: detected capacity change from 0 to 2048 [ 184.535209][T13250] fuse: Unknown parameter 'group_id00000000000000000000' [ 184.616017][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3551'. [ 184.654596][T13256] team0: Unable to change to the same mode the team is in [ 184.668845][T13258] netlink: 'syz.2.3552': attribute type 3 has an invalid length. [ 184.670064][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3552'. [ 184.715254][T13264] device erspan0 entered promiscuous mode [ 184.716281][T13264] device vlan2 entered promiscuous mode [ 184.742255][T13268] loop4: detected capacity change from 0 to 512 [ 184.799497][T13268] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3557: bg 0: block 248: padding at end of block bitmap is not set [ 184.803455][T13268] Quota error (device loop4): write_blk: dquota write failed [ 184.805466][T13268] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 184.807094][T13268] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3557: Failed to acquire dquot type 1 [ 184.813771][T13268] EXT4-fs (loop4): 1 truncate cleaned up [ 184.815306][T13268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.911011][T13278] fuse: Unknown parameter 'group_id00000000000000000000' [ 185.228404][T13281] device ip6gre1 entered promiscuous mode [ 185.236269][ T4370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.237545][ T4370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.243814][T13286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.246564][T13286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.264110][ T4370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.283374][T13246] loop1: detected capacity change from 0 to 131072 [ 185.293713][T13246] F2FS-fs (loop1): invalid crc value [ 185.297523][T13290] team0: No ports can be present during mode change [ 185.310235][T13246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.321613][T13295] netlink: 'syz.2.3566': attribute type 3 has an invalid length. [ 185.329244][T13246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.584419][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.640895][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.642361][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.868101][T12037] EXT4-fs (loop4): unmounting filesystem. [ 185.879689][ T5004] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 185.881760][ T5004] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 1 [ 186.040338][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.044218][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.044820][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 186.048213][ T22] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 186.049675][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.051300][ T22] usb 1-1: config 0 has no interface number 0 [ 186.054767][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.056255][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.057616][ T22] usb 1-1: Product: syz [ 186.058288][ T22] usb 1-1: Manufacturer: syz [ 186.060271][ T22] usb 1-1: SerialNumber: syz [ 186.065756][ T22] usb 1-1: config 0 descriptor?? [ 186.081171][ T22] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 186.082254][ T22] usb 1-1: No valid video chain found. [ 186.084368][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.085690][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.088609][T13315] fuse: Unknown parameter 'group_id00000000000000000000' [ 186.115235][T13318] device ip6gre2 entered promiscuous mode [ 186.120435][ T22] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.121782][ T22] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.128493][T13320] team0: No ports can be present during mode change [ 186.144086][ T22] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.157286][T13322] netlink: 'syz.3.3577': attribute type 3 has an invalid length. [ 186.188396][T13326] loop3: detected capacity change from 0 to 512 [ 186.200590][T13326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.211775][T13326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.236682][T11400] EXT4-fs (loop3): unmounting filesystem. [ 186.274792][ T4404] usb 1-1: USB disconnect, device number 9 [ 186.445255][ T4369] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.484051][ T4404] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.637875][T13344] fuse: Bad value for 'user_id' [ 186.740103][T13349] __nla_validate_parse: 6 callbacks suppressed [ 186.740113][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 186.745432][T13349] team0: No ports can be present during mode change [ 186.779781][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 186.808460][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 186.811343][T13352] device ip6gre1 entered promiscuous mode [ 186.830334][T13354] netlink: 'syz.0.3589': attribute type 3 has an invalid length. [ 186.831651][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3589'. [ 186.909920][T13358] loop4: detected capacity change from 0 to 1024 [ 186.919203][T13358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.937628][T13358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.954992][T13358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 186.956446][T13358] System zones: 0-1, 3-36 [ 186.958385][T13358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.101634][T12037] EXT4-fs (loop4): unmounting filesystem. [ 187.192021][T13371] fuse: Bad value for 'user_id' [ 187.238726][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 187.249299][T13376] team0: No ports can be present during mode change [ 187.253074][T13378] netlink: 'syz.0.3600': attribute type 3 has an invalid length. [ 187.254556][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'. [ 187.262020][T13380] loop4: detected capacity change from 0 to 1024 [ 187.301315][T13380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.308918][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'. [ 187.315031][T13380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.316507][T13380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.319897][T13384] device ip6gre3 entered promiscuous mode [ 187.364941][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.438419][T13392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3605'. [ 187.570274][T13398] loop3: detected capacity change from 0 to 128 [ 187.572610][T13390] overlayfs: failed to clone upperpath [ 187.621802][T13402] fuse: Bad value for 'user_id' [ 188.000434][T12037] EXT4-fs (loop4): unmounting filesystem. [ 188.027331][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 188.030689][T13407] team0: No ports can be present during mode change [ 188.052272][T13410] netlink: 'syz.4.3612': attribute type 3 has an invalid length. [ 188.053725][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 188.098974][T13415] device ip6gre1 entered promiscuous mode [ 188.354186][T13433] loop3: detected capacity change from 0 to 512 [ 188.367191][T13427] loop4: detected capacity change from 0 to 40427 [ 188.369041][T13433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.369513][T13427] F2FS-fs (loop4): invalid crc value [ 188.384745][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.3623: iget: bad extra_isize 58 (inode size 256) [ 188.388794][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3623: error while reading EA inode 11 err=-117 [ 188.391001][T13433] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.393374][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.3623: iget: bad extra_isize 58 (inode size 256) [ 188.393534][T13427] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.398995][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3623: error while reading EA inode 11 err=-117 [ 188.404882][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.3623: iget: bad extra_isize 58 (inode size 256) [ 189.264808][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3623: error while reading EA inode 18 err=-117 [ 189.269415][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.3623: iget: bad extra_isize 58 (inode size 256) [ 189.281735][T13433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3623: error while reading EA inode 18 err=-117 [ 189.289201][T13427] F2FS-fs (loop4): Start checkpoint disabled! [ 189.294861][T13433] EXT4-fs (loop3): 1 orphan inode deleted [ 189.300453][T13433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.307767][T13427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 189.544274][T11400] EXT4-fs (loop3): unmounting filesystem. [ 189.550928][ T1610] kworker/u4:5: attempt to access beyond end of device [ 189.550928][ T1610] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 189.592261][T13444] device ip6gre4 entered promiscuous mode [ 189.674933][T13456] loop1: detected capacity change from 0 to 256 [ 189.678503][T13456] exfat: Deprecated parameter 'utf8' [ 189.679431][T13456] exfat: Deprecated parameter 'utf8' [ 189.683572][T13456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 189.698026][T13458] overlayfs: failed to clone lowerpath [ 189.710691][T13459] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 189.766647][T13466] loop3: detected capacity change from 0 to 256 [ 189.776777][T13464] team0: No ports can be present during mode change [ 189.781081][T13466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 189.831356][T13473] binder: 13472:13473 ioctl c0306201 0 returned -14 [ 189.832914][T13473] binder: 13472:13473 got transaction to invalid handle, 1 [ 189.834327][T13473] binder_debug: 2 callbacks suppressed [ 189.834340][T13473] binder: 13473:13472 cannot find target node [ 189.836162][T13473] binder: 13472:13473 transaction async to 0:0 failed 80/29201/-22, size 72-24 line 3045 [ 189.837601][T13473] binder: 13472:13473 ioctl c0306201 200001c0 returned -14 [ 189.846433][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.283348][T13491] loop3: detected capacity change from 0 to 128 [ 191.030177][T13502] team0: Unable to change to the same mode the team is in [ 191.044123][ C1] ip6_tnl_xmit_ctl: 22 callbacks suppressed [ 191.044133][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.175359][T13509] binder: 13505:13509 ioctl c0306201 0 returned -14 [ 191.176727][T13509] binder: 13505:13509 got transaction to invalid handle, 1 [ 191.177858][T13509] binder: 13509:13505 cannot find target node [ 191.178868][T13509] binder: 13505:13509 transaction async to 0:0 failed 84/29201/-22, size 72-24 line 3045 [ 191.180471][T13509] binder: 13505:13509 ioctl c0306201 200001c0 returned -14 [ 191.220568][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.251272][T13526] loop3: detected capacity change from 0 to 512 [ 191.299716][T13526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.309075][T13531] team0: Unable to change to the same mode the team is in [ 191.323777][T11400] EXT4-fs (loop3): unmounting filesystem. [ 191.337494][T13535] overlayfs: failed to clone lowerpath [ 191.347197][T13539] loop1: detected capacity change from 0 to 16 [ 191.349898][T13539] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.355038][T13535] overlayfs: missing 'lowerdir' [ 191.406209][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.407846][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.459703][T13549] loop3: detected capacity change from 0 to 2048 [ 191.493935][T13549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.503433][T13549] [ 191.503866][T13549] ====================================================== [ 191.505002][T13549] WARNING: possible circular locking dependency detected [ 191.506144][T13549] syzkaller #0 Not tainted [ 191.506908][T13549] ------------------------------------------------------ [ 191.508114][T13549] syz.3.3671/13549 is trying to acquire lock: [ 191.509094][T13549] ffff0000f6375108 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x30/0x114 [ 191.510611][T13549] [ 191.510611][T13549] but task is already holding lock: [ 191.511695][T13549] ffff0000dbb7cb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 191.513474][T13549] [ 191.513474][T13549] which lock already depends on the new lock. [ 191.513474][T13549] [ 191.515168][T13549] [ 191.515168][T13549] the existing dependency chain (in reverse order) is: [ 191.516642][T13549] [ 191.516642][T13549] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 191.518078][T13549] percpu_down_read+0x70/0x2a8 [ 191.518981][T13549] ext4_writepages+0x1b8/0x28b4 [ 191.519865][T13549] do_writepages+0x2b0/0x504 [ 191.520703][T13549] __writeback_single_inode+0x164/0x1554 [ 191.521727][T13549] writeback_single_inode+0x1cc/0x740 [ 191.522717][T13549] write_inode_now+0x150/0x1cc [ 191.523641][T13549] iput+0x5bc/0x7e4 [ 191.523922][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.524389][T13549] ext4_xattr_block_set+0x1e9c/0x2880 [ 191.526683][T13549] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 191.527703][T13549] __ext4_expand_extra_isize+0x298/0x358 [ 191.528814][T13549] __ext4_mark_inode_dirty+0x3e4/0x784 [ 191.529832][T13549] ext4_evict_inode+0xb64/0x1278 [ 191.530765][T13549] evict+0x3e0/0x828 [ 191.531518][T13549] iput+0x754/0x7e4 [ 191.532214][T13549] ext4_process_orphan+0x240/0x2b4 [ 191.533161][T13549] ext4_orphan_cleanup+0x920/0x1060 [ 191.534093][T13549] ext4_fill_super+0x6188/0x660c [ 191.534978][T13549] get_tree_bdev+0x358/0x544 [ 191.535873][T13549] ext4_get_tree+0x28/0x38 [ 191.536747][T13549] vfs_get_tree+0x90/0x274 [ 191.537577][T13549] do_new_mount+0x228/0x810 [ 191.538403][T13549] path_mount+0x5bc/0xe80 [ 191.539256][T13549] __arm64_sys_mount+0x49c/0x59c [ 191.540130][T13549] invoke_syscall+0x98/0x2b4 [ 191.540974][T13549] el0_svc_common+0x138/0x258 [ 191.541854][T13549] do_el0_svc+0x58/0x130 [ 191.542656][T13549] el0_svc+0x58/0x128 [ 191.543366][T13549] el0t_64_sync_handler+0x84/0xf0 [ 191.544332][T13549] el0t_64_sync+0x18c/0x190 [ 191.545109][T13549] [ 191.545109][T13549] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 191.546360][T13549] __lock_acquire+0x2880/0x6800 [ 191.547254][T13549] lock_acquire+0x20c/0x63c [ 191.548004][T13549] down_write+0x5c/0x88 [ 191.548785][T13549] ext4_destroy_inline_data+0x30/0x114 [ 191.549752][T13549] ext4_writepages+0x430/0x28b4 [ 191.550697][T13549] do_writepages+0x2b0/0x504 [ 191.551547][T13549] filemap_fdatawrite_wbc+0x124/0x174 [ 191.552524][T13549] file_write_and_wait_range+0x11c/0x1f4 [ 191.553530][T13549] ext4_sync_file+0x210/0xc70 [ 191.554420][T13549] vfs_fsync_range+0x168/0x188 [ 191.555303][T13549] ext4_buffered_write_iter+0x47c/0x528 [ 191.556299][T13549] ext4_file_write_iter+0x18c/0x1574 [ 191.557300][T13549] vfs_write+0x3ec/0x7f0 [ 191.558083][T13549] __arm64_sys_pwrite64+0x174/0x20c [ 191.559029][T13549] invoke_syscall+0x98/0x2b4 [ 191.559968][T13549] el0_svc_common+0x138/0x258 [ 191.560861][T13549] do_el0_svc+0x58/0x130 [ 191.561702][T13549] el0_svc+0x58/0x128 [ 191.562491][T13549] el0t_64_sync_handler+0x84/0xf0 [ 191.563437][T13549] el0t_64_sync+0x18c/0x190 [ 191.564287][T13549] [ 191.564287][T13549] other info that might help us debug this: [ 191.564287][T13549] [ 191.565885][T13549] Possible unsafe locking scenario: [ 191.565885][T13549] [ 191.567100][T13549] CPU0 CPU1 [ 191.567988][T13549] ---- ---- [ 191.568958][T13549] lock(&sbi->s_writepages_rwsem); [ 191.569945][T13549] lock(&ei->xattr_sem); [ 191.571045][T13549] lock(&sbi->s_writepages_rwsem); [ 191.572272][T13549] lock(&ei->xattr_sem); [ 191.573038][T13549] [ 191.573038][T13549] *** DEADLOCK *** [ 191.573038][T13549] [ 191.574409][T13549] 2 locks held by syz.3.3671/13549: [ 191.575245][T13549] #0: ffff0000ce64e460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x244/0x7f0 [ 191.576744][T13549] #1: ffff0000dbb7cb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 191.578523][T13549] [ 191.578523][T13549] stack backtrace: [ 191.579445][T13549] CPU: 1 PID: 13549 Comm: syz.3.3671 Not tainted syzkaller #0 [ 191.580738][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 191.582413][T13549] Call trace: [ 191.582993][T13549] dump_backtrace+0x1c0/0x1ec [ 191.583769][T13549] show_stack+0x2c/0x3c [ 191.584490][T13549] __dump_stack+0x30/0x40 [ 191.585240][T13549] dump_stack_lvl+0xf4/0x15c [ 191.585978][T13549] dump_stack+0x1c/0x5c [ 191.586721][T13549] print_circular_bug+0x148/0x1b0 [ 191.587611][T13549] check_noncircular+0x264/0x2f8 [ 191.588436][T13549] __lock_acquire+0x2880/0x6800 [ 191.589280][T13549] lock_acquire+0x20c/0x63c [ 191.590055][T13549] down_write+0x5c/0x88 [ 191.590763][T13549] ext4_destroy_inline_data+0x30/0x114 [ 191.591731][T13549] ext4_writepages+0x430/0x28b4 [ 191.592570][T13549] do_writepages+0x2b0/0x504 [ 191.593420][T13549] filemap_fdatawrite_wbc+0x124/0x174 [ 191.594288][T13549] file_write_and_wait_range+0x11c/0x1f4 [ 191.595197][T13549] ext4_sync_file+0x210/0xc70 [ 191.595964][T13549] vfs_fsync_range+0x168/0x188 [ 191.596752][T13549] ext4_buffered_write_iter+0x47c/0x528 [ 191.597637][T13549] ext4_file_write_iter+0x18c/0x1574 [ 191.598492][T13549] vfs_write+0x3ec/0x7f0 [ 191.599193][T13549] __arm64_sys_pwrite64+0x174/0x20c [ 191.600084][T13549] invoke_syscall+0x98/0x2b4 [ 191.600877][T13549] el0_svc_common+0x138/0x258 [ 191.601641][T13549] do_el0_svc+0x58/0x130 [ 191.602317][T13549] el0_svc+0x58/0x128 [ 191.602972][T13549] el0t_64_sync_handler+0x84/0xf0 [ 191.603832][T13549] el0t_64_sync+0x18c/0x190 [ 191.604755][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 191.722530][T13549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 191.726147][T13549] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 191.728092][T13549] EXT4-fs (loop3): This should not happen!! Data will be lost [ 191.728092][T13549] [ 191.729634][T13549] EXT4-fs (loop3): Total free blocks count 0 [ 191.730543][T13549] EXT4-fs (loop3): Free/Dirty block details [ 191.731613][T13549] EXT4-fs (loop3): free_blocks=2415919504 [ 191.732503][T13549] EXT4-fs (loop3): dirty_blocks=64 [ 191.733316][T13549] EXT4-fs (loop3): Block reservation details [ 191.734289][T13549] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 191.739702][T13548] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.813938][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 191.816459][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.818006][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.819663][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.821205][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.833929][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.835381][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 191.836604][ T7] usb 1-1: SerialNumber: syz [ 191.842007][ T7] cdc_acm 1-1:1.0: skipping garbage [ 191.842931][ T7] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 192.043568][ T4369] usb 1-1: USB disconnect, device number 10 [ 192.243923][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.363922][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 196.963938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.603910][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 200.163907][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 200.165298][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.813907][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 200.815222][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!