last executing test programs:

26.810195032s ago: executing program 0 (id=1803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0)

26.59185001s ago: executing program 0 (id=1807):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffb, 0x0)

26.473747336s ago: executing program 2 (id=1808):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

26.468683226s ago: executing program 0 (id=1810):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}})

26.352159756s ago: executing program 2 (id=1811):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000f40)=ANY=[@ANYBLOB='adinicb,iocharset=maccenteuro,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303037332c756d61736b3d30303030303030303030003030303030301c30353236302c70615c746974696f6e3d30303030303030303030303030303036353533352c696f636861727365743d6d6163677265656b2c7569643d666f726765742c756e686964652c00"], 0x1, 0xc54, &(0x7f0000000280)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)

26.308971687s ago: executing program 0 (id=1812):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d312c636f6465706167653d313235352c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303036342c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d63703836312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c646973636172642c756e695f786c6174653d302c73686f72746e616d653d6d697865642c002dab0b191fb2ccceb71eb18196c71c4ecf838358be4b21c68a715a06e99db6572f49e2e559818c3ac27fa19cb8456d68b6c399d259b4f2cd832293ba03e6c9d8f6395e4d8e3a863acf841afc158f6f92786028b0bcd3f3b636a0bd8e42bdf24b014d3a37ee7dc0c50c38f9c612ff2d66a952cc2874418c14f502b47358823cc8adbc5c7ae9c61b7aee88dc31761b4f87dfd0c3ec85874ddd916bdab323b4c1e1abf6954b6bd3fccd8ab2b78d0fb371d7348e571cdd28eab749354bf150aa6590fadf7518cf96541bc0269967fe134674e27cde17e4dbf552e56f68123c01b5edf39649b1e4173595b61a95c4084fc443134f4d3e93808f7096cc23d74c11624c88f7e7368bd79d1d1a72fe347d5f124237c829b1aff2fdded98cc25392708012418a7d1edaaa55a1ba5d7b1121086d7d134dc1b44288a263dfa06dcda29e1aebdd7783d52181f13709faf80be3104cb770c4469f187f3fad6183f3b2034830f8e2672eda505120e39b10a866da37912d524e46e075f013532357b21bbd0d4f65b300638e26f1630ffe1a69a9c0010abc174976a4faf88cac1ed2f07f30ee403efd74a941b6d58d5ff1ffc7c0dbe22bbd3a1d5df5f29a3258f23ab5108cda88e4f1cb325741ad"], 0x25, 0x334, &(0x7f0000000c00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

26.029380348s ago: executing program 3 (id=1816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000059010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000d0058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800014000000000080002400000000505000300020000000900010073797a30"], 0xcc}}, 0x0)

25.997643603s ago: executing program 2 (id=1817):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040afe3f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

25.774124568s ago: executing program 3 (id=1819):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

25.742721036s ago: executing program 2 (id=1820):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})

25.556862554s ago: executing program 3 (id=1822):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@unspec=@statistic={{0x38}, {0x600}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)

25.556609353s ago: executing program 0 (id=1823):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xa000006, 0x0, 0x0, 0x0, 0x5})

25.330759484s ago: executing program 3 (id=1825):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt(r0, 0x118, 0x100, 0x0, 0x0)

25.21932818s ago: executing program 0 (id=1827):
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="76010000000000102505a8a44000010203010902240001010000000904000002070102000905010200000000000905820200"], 0x0)
socket$igmp6(0xa, 0x3, 0x2)

25.20320159s ago: executing program 2 (id=1828):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x102, 0xb)
write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x1f94, {0x2, 0x2, 0x2}, 0x60, 0x0, 0x0, 0x7, 0x489d, 0x5, 0x100000001, 0xffffffff, 0x401, 0xba3c, 0x7, 0x40, 0x0, 0x3, 0x0, 0x2, 0x6, 0x3ed7}}, 0xa0)

25.168899741s ago: executing program 3 (id=1829):
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

25.029980909s ago: executing program 2 (id=1831):
r0 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000040)='./file1\x00', 0x1010088, &(0x7f0000000540)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degradUZ,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRESDEC=0x0], 0x0, 0x590e, &(0x7f000000b200)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010bc06, 0x0)

24.951504491s ago: executing program 4 (id=1832):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

24.612341382s ago: executing program 1 (id=1835):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbc)

24.476235045s ago: executing program 4 (id=1836):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8aa000)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000100)={0x980900, 0x8})

24.35700961s ago: executing program 1 (id=1837):
r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x1)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0xa20000, 0xe, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xa10907, 0x574a, '\x00', @p_u32=0x0}})

24.310543573s ago: executing program 4 (id=1838):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a2000"], 0x118}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a"], 0x0, 0x5e, 0x0, 0x1}, 0x28)

24.149273636s ago: executing program 1 (id=1839):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d0000000605000000050474da3f"], &(0x7f0000000f40)=""/4096, 0x46, 0x1000, 0x1}, 0x28)

24.029130642s ago: executing program 4 (id=1840):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000006100)={'ip_vti0\x00', &(0x7f0000006080)={'erspan0\x00', 0x0, 0xa0, 0x63897bfdb8769957, 0xfffffffb, 0x8, {{0x5, 0x4, 0x1, 0x0, 0xffffff85, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @empty}}}})

23.953027674s ago: executing program 1 (id=1841):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getgroups(0x0, 0x0)

23.83778012s ago: executing program 4 (id=1842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000280), 0x0}, 0x20)

23.745760789s ago: executing program 1 (id=1843):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1e8, 0x2a8, 0x2a8, 0x1e8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x4, 0xe, 0x0, 0x3], 0x0, 0x6}, {0xffffffffffffffff, [0x11, 0x2, 0x0, 0x0, 0x2]}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'ip6gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x21, 0x3}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x3, 0x2, 0x0, 0x0, 0x1], 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

20.663454151s ago: executing program 1 (id=1844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

2.353023421s ago: executing program 3 (id=1845):
syz_mount_image$hfs(&(0x7f0000000680), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0x2b4, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x3c0)

0s ago: executing program 4 (id=1846):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0xfffff9, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

kernel console output (not intermixed with test programs):

50837][ T2971] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  140.670711][ T2971] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  140.681009][ T2971] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  140.700103][ T2971] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  140.703354][ T5918] usb 1-1: USB disconnect, device number 7
[  140.844089][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  141.004705][ T5932] usb 3-1: Using ep0 maxpacket: 16
[  141.028685][ T5932] usb 3-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  141.055285][ T5932] usb 3-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  141.086085][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0
[  141.115320][ T5932] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  141.132996][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.158705][ T5932] usb 3-1: Product: syz
[  141.183246][ T5932] usb 3-1: Manufacturer: syz
[  141.187955][ T5932] usb 3-1: SerialNumber: syz
[  141.214066][ T5932] usb 3-1: config 0 descriptor??
[  141.253931][ T5932] usb 3-1: cannot find UAC_HEADER
[  141.326791][ T5932] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  141.426218][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.479395][ T5932] usb 3-1: USB disconnect, device number 3
[  141.506941][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  141.696415][ T5918] usb 4-1: Using ep0 maxpacket: 16
[  141.719171][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  141.742158][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.774661][ T5918] usb 4-1: Product: syz
[  141.792857][ T5918] usb 4-1: Manufacturer: syz
[  141.809447][ T5918] usb 4-1: SerialNumber: syz
[  141.827213][ T5918] usb 4-1: config 0 descriptor??
[  141.856470][ T5918] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  142.073424][ T5932] usb 4-1: USB disconnect, device number 3
[  142.447653][ T7634] infiniband syz0: set down
[  142.471551][ T7634] infiniband syz0: added ipvlan1
[  142.691927][ T7665] netlink: 'syz.1.742': attribute type 9 has an invalid length.
[  142.721105][ T7634] RDS/IB: syz0: added
[  142.728606][ T7665] netlink: 'syz.1.742': attribute type 7 has an invalid length.
[  142.737668][ T7634] smc: adding ib device syz0 with port count 1
[  142.743983][ T7634] smc:    ib device syz0 port 1 has pnetid 
[  142.763782][ T7665] netlink: 'syz.1.742': attribute type 8 has an invalid length.
[  142.837634][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.004038][ T7677] Cannot find del_set index 3 as target
[  143.049916][ T5918] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  143.061683][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.096561][ T5918] usb 3-1: Product: syz
[  143.104255][ T5918] usb 3-1: Manufacturer: syz
[  143.108924][ T5918] usb 3-1: SerialNumber: syz
[  143.166098][ T5918] usb 3-1: config 0 descriptor??
[  143.183533][ T5918] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  143.254671][ T7681] loop3: detected capacity change from 0 to 4096
[  143.313789][ T7681] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  143.380524][ T7681] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  143.408302][ T7681] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  143.487872][ T7681] ntfs3(loop3): ino=5, "/" indx_read
[  143.608990][ T5918] usb 3-1: USB disconnect, device number 4
[  143.615032][ T2971] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  143.622936][ T5860] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  143.633929][ T5860] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  143.647257][ T5860] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  143.696734][ T2971] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  144.064440][ T7701] loop1: detected capacity change from 0 to 256
[  144.517194][ T7714] comedi comedi3: no devices specified
[  144.577550][ T7717] capability: warning: `syz.1.766' uses 32-bit capabilities (legacy support in use)
[  144.609609][ T7718] loop3: detected capacity change from 0 to 512
[  144.645232][ T7718] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.698556][ T7718] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  144.771058][ T7718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  144.827760][ T7718] EXT4-fs (loop3): orphan cleanup on readonly fs
[  144.836571][ T7718] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  144.908549][ T7718] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  144.984540][ T7718] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  145.037800][ T7718] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.767: bg 0: block 40: padding at end of block bitmap is not set
[  145.083743][ T7718] EXT4-fs (loop3): Remounting filesystem read-only
[  145.125253][ T7718] EXT4-fs (loop3): 1 truncate cleaned up
[  145.142732][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.301279][ T7736] cgroup: Unknown subsys name 'cpuset'
[  145.315708][ T7738] loop1: detected capacity change from 0 to 8
[  145.356323][ T7738] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  145.369719][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop1
[  145.387571][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.406519][ T7738] cramfs: Error -5 while decompressing!
[  145.434491][ T7738] cramfs: ffffffff99c2fb28(26)->ffff88806a03c000(4096)
[  145.441403][ T7738] cramfs: Error -3 while decompressing!
[  145.473081][ T5862] udevd[5862]: incorrect cramfs checksum on /dev/loop1
[  145.508100][ T7738] cramfs: ffffffff99c2fb42(26)->ffff88806a03d000(4096)
[  145.577971][ T7738] cramfs: Error -3 while decompressing!
[  145.583575][ T7738] cramfs: ffffffff99c2fb5c(16)->ffff888074eeb000(4096)
[  145.641849][ T7738] cramfs: Error -5 while decompressing!
[  145.659093][ T7738] cramfs: ffffffff99c2fb28(26)->ffff88806a03c000(4096)
[  145.694468][   T30] audit: type=1800 audit(1751973867.667:24): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="file2" dev="loop1" ino=348 res=0 errno=0
[  145.922986][ T7750] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  145.934516][ T7751] kAFS: No cell specified
[  146.338766][ T7763] netlink: 100 bytes leftover after parsing attributes in process `syz.3.788'.
[  146.383841][ T7761] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  146.399194][ T7761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.784482][ T7771] netlink: 'syz.1.792': attribute type 1 has an invalid length.
[  146.795003][ T7771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.792'.
[  146.846190][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'.
[  146.854426][ T7730] loop4: detected capacity change from 0 to 40427
[  146.918611][ T7730] F2FS-fs (loop4): build fault injection rate: 690
[  146.980678][ T7730] F2FS-fs (loop4): Image doesn't support compression
[  147.048173][ T7730] F2FS-fs (loop4): Image doesn't support compression
[  147.080671][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.797'.
[  147.162062][ T7730] F2FS-fs (loop4): invalid crc value
[  147.632229][ T7730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  147.686851][ T5932] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  147.695881][ T7730] syz.4.770: attempt to access beyond end of device
[  147.695881][ T7730] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  147.780830][ T7805] loop0: detected capacity change from 0 to 256
[  147.913258][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short
[  147.936210][ T5932] usb 2-1: not running at top speed; connect to a high speed hub
[  147.974709][ T5932] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  148.013023][ T5932] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.028955][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.047567][ T5932] usb 2-1: Product: syz
[  148.063272][ T5932] usb 2-1: Manufacturer: syz
[  148.088324][ T5932] usb 2-1: SerialNumber: syz
[  148.154949][ T7814] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.215447][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  148.294358][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'.
[  148.325374][ T5932] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  148.365120][ T5918] usb 4-1: too many configurations: 96, using maximum allowed: 8
[  148.419504][ T5918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  148.442710][ T5932] usb 2-1: USB disconnect, device number 4
[  148.444252][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.524022][ T5918] usb 4-1: Product: syz
[  148.531682][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.545367][ T5918] usb 4-1: Manufacturer: syz
[  148.592654][ T5918] usb 4-1: SerialNumber: syz
[  148.639400][ T5918] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  148.710939][ T5949] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  148.779885][ T7825] Unsupported ieee802154 address type: 0
[  149.425376][   T10] usb 4-1: USB disconnect, device number 4
[  149.766895][ T5949] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  149.774006][ T5949] ath9k_htc: Failed to initialize the device
[  149.841919][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  149.907041][ T7851] loop3: detected capacity change from 0 to 1024
[  149.957837][ T7851] EXT4-fs: Ignoring removed bh option
[  150.050291][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.831'.
[  150.074164][ T7851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.097001][ T7851] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.098888][ T7860] loop2: detected capacity change from 0 to 128
[  150.147054][ T7862] netlink: 'syz.4.833': attribute type 1 has an invalid length.
[  150.154862][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.833'.
[  150.233157][ T7860] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  150.270928][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.291314][ T7860] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  150.394327][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  150.505282][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.565830][   T10] usb 2-1: Using ep0 maxpacket: 16
[  150.583852][   T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  150.614323][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.676155][   T10] usb 2-1: config 0 has no interface number 0
[  150.693474][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  150.729124][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.749698][   T10] usb 2-1: Product: syz
[  150.753900][   T10] usb 2-1: Manufacturer: syz
[  150.781545][   T10] usb 2-1: SerialNumber: syz
[  150.807262][   T10] usb 2-1: config 0 descriptor??
[  150.872671][   T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  150.882985][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'.
[  150.900753][   T10] usb 2-1: No valid video chain found.
[  151.064816][   T10] usb 2-1: USB disconnect, device number 5
[  151.368183][ T7903] loop3: detected capacity change from 0 to 512
[  151.428451][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.481434][ T7903] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  151.535041][ T7903] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.853: corrupted xattr block 33: invalid ea_ino
[  151.556302][ T7903] EXT4-fs (loop3): Remounting filesystem read-only
[  151.641746][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.658597][   T36] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.714277][   T36] Quota error (device loop3): write_blk: dquota write failed
[  151.734273][   T36] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  151.765895][   T36] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.797589][   T36] Quota error (device loop3): write_blk: dquota write failed
[  151.818158][   T36] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  151.854372][   T36] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  151.896479][   T36] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  151.956726][ T7913] loop2: detected capacity change from 0 to 4096
[  152.166314][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'.
[  152.543314][ T7941] netlink: 'syz.0.870': attribute type 12 has an invalid length.
[  152.769551][ T7947] loop0: detected capacity change from 0 to 16
[  152.814670][ T7947] erofs (device loop0): mounted with root inode @ nid 36.
[  152.862609][ T7947] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  152.917797][ T7947] erofs (device loop0): failed to decompress -23 in[64, 4032] out[1851]
[  152.966334][ T7947] erofs (device loop0): read error -117 @ 43 of nid 36
[  153.243160][ T7965] netlink: 'syz.3.884': attribute type 3 has an invalid length.
[  153.268384][ T7965] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.884'.
[  153.319153][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'.
[  153.339955][ T7961] loop2: detected capacity change from 0 to 4096
[  153.358044][ T7961] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  153.514295][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  153.523331][ T7961] ntfs3(loop2): ino=19, mi_enum_attr
[  153.544403][ T7961] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  153.632318][ T7961] ntfs3(loop2): failed to convert "c46c" to koi8-r
[  153.675841][ T7961] ntfs3(loop2): ino=20, mi_enum_attr
[  153.712881][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  153.737763][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.811682][ T5916] pwc: Logitech ViewPort AV 100 webcam detected.
[  153.937522][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  154.052917][ T7985] netlink: 'syz.4.893': attribute type 9 has an invalid length.
[  154.076325][ T7989] loop1: detected capacity change from 0 to 8
[  154.189801][ T5916] pwc: send_video_command error -71
[  154.216474][ T5916] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  154.235212][ T5916] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71
[  154.251105][ T5916] usb 1-1: USB disconnect, device number 8
[  154.318318][ T7992] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.365243][ T7992] bond0: (slave lo): Error: Device can not be enslaved while up
[  154.449597][ T7997] loop2: detected capacity change from 0 to 512
[  154.530634][ T7997] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  154.631214][ T7997] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.899: iget: bad i_size value: -6917529027641081756
[  154.731108][ T8006] Illegal XDP return value 1644170385 on prog  (id 40) dev N/A, expect packet loss!
[  154.755996][ T7997] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.899: couldn't read orphan inode 17 (err -117)
[  154.782870][ T7997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.105817][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.237398][ T8008] loop3: detected capacity change from 0 to 32768
[  155.245837][ T8008] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.903 (8008)
[  155.280534][ T8008] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  155.313564][ T8008] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  155.354465][ T8008] BTRFS info (device loop3): disk space caching is enabled
[  155.361738][ T8008] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  155.649530][ T8008] BTRFS info (device loop3): rebuilding free space tree
[  155.735701][ T8008] BTRFS info (device loop3): disabling free space tree
[  155.771079][ T8045] loop1: detected capacity change from 0 to 256
[  155.784413][ T8008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  155.794107][ T8008] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  155.905538][ T8047] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.104022][ T8008] BTRFS info (device loop3): balance: start -susage=0..511,limit=2,limit=2..0
[  156.182922][ T8008] BTRFS info (device loop3): relocating block group 1048576 flags system
[  156.242420][ T8058] xt_connbytes: Forcing CT accounting to be enabled
[  156.278084][ T8058] xt_bpf: check failed: parse error
[  156.344130][ T8008] BTRFS info (device loop3): balance: ended with status: 0
[  156.545788][ T5860] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  156.636736][ T8061] loop1: detected capacity change from 0 to 4096
[  156.876350][ T8072] loop4: detected capacity change from 0 to 16
[  156.929024][ T8072] erofs (device loop4): mounted with root inode @ nid 36.
[  157.047452][ T8074] netlink: 116 bytes leftover after parsing attributes in process `syz.0.928'.
[  157.085916][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'.
[  157.655856][ T8093] netlink: 'syz.4.936': attribute type 2 has an invalid length.
[  157.830036][ T8096] loop0: detected capacity change from 0 to 1024
[  157.907779][ T8099] loop4: detected capacity change from 0 to 1024
[  157.928543][ T8096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.966135][ T8070] loop2: detected capacity change from 0 to 32768
[  157.969663][ T8096] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #11: comm syz.0.938: directory missing '..'
[  158.081047][ T8070] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  158.081047][ T8070] 
[  158.109869][ T8070] ERROR: (device loop2): remounting filesystem as read-only
[  158.178738][ T8070] xtLookup: xtSearch returned -5
[  158.228688][ T3030] hfsplus: b-tree write err: -5, ino 4
[  158.246066][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.441879][ T8114] netlink: 'syz.4.946': attribute type 10 has an invalid length.
[  158.515564][ T8114] macvlan0: entered promiscuous mode
[  158.520915][ T8114] macvlan0: entered allmulticast mode
[  158.571892][ T8114] veth1_vlan: entered allmulticast mode
[  158.621589][ T8114] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  159.317643][ T8145] netlink: 30 bytes leftover after parsing attributes in process `syz.0.961'.
[  159.696708][ T8166] loop2: detected capacity change from 0 to 64
[  160.019874][   T30] audit: type=1326 audit(1751973882.007:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  160.124565][ T8180] loop0: detected capacity change from 0 to 1024
[  160.127985][   T30] audit: type=1326 audit(1751973882.007:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  160.227977][ T8174] loop4: detected capacity change from 0 to 4096
[  160.279260][   T30] audit: type=1326 audit(1751973882.037:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  160.284403][ T8174] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  160.301385][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.395955][ T8188] loop1: detected capacity change from 0 to 16
[  160.419346][   T36] hfsplus: b-tree write err: -5, ino 4
[  160.425390][   T30] audit: type=1326 audit(1751973882.037:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  160.435805][ T8188] erofs (device loop1): mounted with root inode @ nid 36.
[  160.447462][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.535343][   T30] audit: type=1326 audit(1751973882.037:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  160.538360][ T8188] erofs (device loop1): invalid logical cluster 0 at nid 89
[  160.567666][ T8188] erofs (device loop1): readahead error at folio 0 @ nid 89
[  160.575436][ T8188] syz.1.982: attempt to access beyond end of device
[  160.575436][ T8188] loop1: rw=524288, sector=7864328, nr_sectors = 8 limit=16
[  160.596981][ T8191] .: renamed from bond0 (while UP)
[  160.623715][ T8174] ntfs3(loop4): ino=19, mi_enum_attr
[  160.633400][ T8188] erofs (device loop1): invalid logical cluster 0 at nid 89
[  160.653239][ T8188] syz.1.982: attempt to access beyond end of device
[  160.653239][ T8188] loop1: rw=0, sector=7864328, nr_sectors = 8 limit=16
[  160.702658][ T8174] ntfs3(loop4): failed to convert "c46c" to euc-jp
[  160.713935][ T8188] erofs (device loop1): read error -5 @ 0 of nid 89
[  160.723105][ T8174] ntfs3(loop4): ino=20, mi_enum_attr
[  161.034518][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.215478][ T5916] usb 3-1: Using ep0 maxpacket: 8
[  161.258057][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  161.294318][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.304003][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.326328][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  161.354591][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  161.380482][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  161.410108][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.445684][ T5916] usb 3-1: config 0 descriptor??
[  161.455020][ T8197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  161.773575][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.792007][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.816978][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.839880][ T8235] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  161.875301][ T8235] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  161.933477][ T5916] usb 3-1: USB disconnect, device number 5
[  161.945834][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.952116][ T5855] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  161.962054][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.972054][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.980678][ T8235] wlan0 speed is unknown, defaulting to 1000
[  161.990432][ T8235] wlan0 speed is unknown, defaulting to 1000
[  162.567834][ T8261] loop3: detected capacity change from 0 to 8
[  162.659722][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  162.838552][ T8248] loop4: detected capacity change from 0 to 32768
[  162.922676][ T8275] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  163.055990][   T30] audit: type=1400 audit(1751973885.047:30): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=8281 comm="syz.3.1020"
[  163.265702][ T8248] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  163.265729][ T8248]   allowing incompatible features above 0.0: (unknown version)
[  163.265742][ T8248]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  163.414305][ T8248] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  163.429966][ T8299] comedi comedi3: pcl726: I/O port conflict (0xffffffffffffffff,16)
[  163.451565][ T8248] bcachefs (loop4): initializing new filesystem
[  163.515532][ T8248] bcachefs (loop4): going read-write
[  163.542109][ T8248] bcachefs (loop4): marking superblocks
[  163.637736][ T8248] bcachefs (loop4): initializing freespace
[  163.688958][ T8248] bcachefs (loop4): done initializing freespace
[  163.699367][ T8248] bcachefs (loop4): reading snapshots table
[  163.707433][ T8248] bcachefs (loop4): reading snapshots done
[  163.768823][ T8248] bcachefs (loop4): done starting filesystem
[  163.904474][ T8318] netlink: 'syz.0.1033': attribute type 9 has an invalid length.
[  164.107707][ T5867] bcachefs (loop4): shutting down
[  164.115049][ T5867] bcachefs (loop4): going read-only
[  164.135488][ T5867] bcachefs (loop4): finished waiting for writes to stop
[  164.173113][ T5867] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  164.217270][ T8324] loop2: detected capacity change from 0 to 64
[  164.229598][ T8301] loop1: detected capacity change from 0 to 32768
[  164.285554][ T5867] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  164.303102][ T5867] bcachefs (loop4): clean shutdown complete, journal seq 4
[  164.311797][ T5867] bcachefs (loop4): marking filesystem clean
[  164.384386][ T8324] hfs: unable to locate alternate MDB
[  164.405167][ T8324] hfs: continuing without an alternate MDB
[  164.461085][ T5867] bcachefs (loop4): shutdown complete
[  164.681719][ T8336] loop0: detected capacity change from 0 to 8
[  165.352414][ T8359] loop3: detected capacity change from 0 to 512
[  165.440660][ T8359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.487810][ T8359] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.596433][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.011557][ T8387] loop0: detected capacity change from 0 to 64
[  166.092810][ T8388] loop3: detected capacity change from 0 to 1764
[  166.109450][ T8387] syz.0.1063: attempt to access beyond end of device
[  166.109450][ T8387] loop0: rw=0, sector=128, nr_sectors = 2 limit=64
[  166.150996][ T8387] Trying to free block not in datazone
[  166.184488][ T8387] Trying to free block not in datazone
[  166.223480][ T8387] Trying to free block not in datazone
[  166.229364][ T8387] Trying to free block not in datazone
[  166.235406][ T8387] Trying to free block not in datazone
[  166.240963][ T8387] Trying to free block not in datazone
[  166.246689][ T8387] minix_free_block (loop0:6): bit already cleared
[  166.392950][ T8383] wlan0 speed is unknown, defaulting to 1000
[  166.814043][ T8402] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  166.846639][ T8402] /dev/nullb0: Can't open blockdev
[  167.191571][   T30] audit: type=1400 audit(1751973889.167:31): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8411 comm="syz.2.1077"
[  167.408753][ T8419] netlink: 'syz.3.1078': attribute type 10 has an invalid length.
[  167.445904][ T8422] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  167.480495][ T8419] macvlan0: entered promiscuous mode
[  167.506805][ T8422] CIFS mount error: No usable UNC path provided in device string!
[  167.506805][ T8422] 
[  167.536405][ T8422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  167.635541][ T8419] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  167.935444][ T8432] comedi comedi3: comedi_parport: I/O port conflict (0xf0,3)
[  168.068817][ T8408] loop0: detected capacity change from 0 to 32768
[  168.090147][ T8408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1073 (8408)
[  168.131797][ T8408] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.165392][ T8440] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  168.178386][ T8408] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  168.209071][ T8408] BTRFS info (device loop0): using free-space-tree
[  168.391559][ T8462] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  168.511620][ T8408] afs: Bad value for 'source'
[  168.653095][ T5851] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.956163][ T8480] netlink: 'syz.2.1102': attribute type 3 has an invalid length.
[  169.016679][ T8480] netlink: 'syz.2.1102': attribute type 3 has an invalid length.
[  169.399366][ T8495] geneve2: entered promiscuous mode
[  169.422692][ T8495] geneve2: entered allmulticast mode
[  170.209991][ T8521] CIFS mount error: No usable UNC path provided in device string!
[  170.209991][ T8521] 
[  170.217333][ T8523] netlink: 'syz.3.1122': attribute type 5 has an invalid length.
[  170.233129][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'.
[  170.243216][ T8521] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  170.525101][ T8531] loop3: detected capacity change from 0 to 16
[  170.532589][ T8531] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  170.588330][ T8531] overlay: filesystem on ./file1 is read-only
[  170.819089][ T8491] wlan0 speed is unknown, defaulting to 1000
[  170.870831][ T8545] xt_TCPMSS: Only works on TCP SYN packets
[  170.984070][ T8549] netlink: 'syz.1.1136': attribute type 32 has an invalid length.
[  172.104465][ T8598] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1155'.
[  172.474965][ T8608] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  172.483001][ T8614] loop1: detected capacity change from 0 to 128
[  172.510606][ T8611] loop3: detected capacity change from 0 to 1024
[  172.529156][ T8608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  172.758054][ T2997] hfsplus: b-tree write err: -5, ino 4
[  172.971830][ T8631] random: crng reseeded on system resumption
[  173.436645][ T8650] unsupported nlmsg_type 40
[  173.731127][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'.
[  173.760783][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1185'.
[  173.932318][ T8671] netlink: 'syz.3.1189': attribute type 1 has an invalid length.
[  173.952004][ T8671] netlink: 'syz.3.1189': attribute type 1 has an invalid length.
[  174.127980][ T8677] netlink: 'syz.1.1192': attribute type 1 has an invalid length.
[  174.156191][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.524435][ T8696] netlink: 'syz.1.1201': attribute type 10 has an invalid length.
[  174.547295][ T8696] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  174.595450][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.880408][ T8703] loop1: detected capacity change from 0 to 512
[  175.067238][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.084484][ T8703] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.144857][ T8713] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  175.176294][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #4: comm syz.1.1204: corrupted inode contents
[  175.284374][ T8703] EXT4-fs error (device loop1): ext4_dirty_inode:6458: inode #4: comm syz.1.1204: mark_inode_dirty error
[  175.372156][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5567: inode #4: comm syz.1.1204: corrupted inode contents
[  175.419346][ T8703] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1204: mark_inode_dirty error
[  175.492213][ T8703] Quota error (device loop1): write_blk: dquota write failed
[  175.529405][ T8703] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  175.584487][ T8703] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1204: Failed to acquire dquot type 1
[  175.609294][ T8728] bridge0: port 3(hsr_slave_0) entered blocking state
[  175.644543][ T8728] bridge0: port 3(hsr_slave_0) entered disabled state
[  175.651566][ T8728] hsr_slave_0: entered allmulticast mode
[  175.688477][ T8728] hsr_slave_0: left allmulticast mode
[  175.707693][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.005624][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'.
[  176.149725][ T8744] loop0: detected capacity change from 0 to 8192
[  176.527917][ T5185] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  176.729142][ T5185] usb 2-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e
[  176.766475][ T5185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.784810][ T5185] usb 2-1: Product: syz
[  176.789024][ T5185] usb 2-1: Manufacturer: syz
[  176.831714][ T5185] usb 2-1: SerialNumber: syz
[  176.859218][ T5185] usb 2-1: config 0 descriptor??
[  176.882472][ T5185] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  177.103468][ T5185] pwc: Failed to set LED on/off time (-71)
[  177.114546][ T5185] pwc: send_video_command error -71
[  177.119787][ T5185] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  177.170719][ T5185] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  177.260287][ T5185] usb 2-1: USB disconnect, device number 6
[  177.516390][ T8777] loop2: detected capacity change from 0 to 32768
[  177.644818][ T5949] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  177.737238][ T8777] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  177.737266][ T8777]   allowing incompatible features above 0.0: (unknown version)
[  177.737302][ T8777]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  177.813831][ T8777] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  177.822900][ T8777] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  177.834424][ T5949] usb 4-1: Using ep0 maxpacket: 8
[  177.847398][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.848186][ T8777] bcachefs (loop2): Version upgrade required:
[  177.848186][ T8777] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  177.848186][ T8777] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  177.848186][ T8777]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  177.887758][ T5949] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  177.964691][ T8777] bcachefs (loop2): dropping and reconstructing all alloc info
[  178.068696][ T8777] bcachefs (loop2): accounting_read...
[  178.089332][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.089990][ T8777]  done
[  178.116156][ T5949] usb 4-1: config 0 descriptor??
[  178.121220][ T8777] bcachefs (loop2): alloc_read... done
[  178.161600][ T8826] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1260'.
[  178.168637][ T5949] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  178.194293][ T8777] bcachefs (loop2): snapshots_read... done
[  178.201142][ T8777] bcachefs (loop2): done starting filesystem
[  178.426029][ T5850] bcachefs (loop2): shutting down
[  178.442693][ T5932] usb 4-1: USB disconnect, device number 5
[  178.559326][ T5850] bcachefs (loop2): shutdown complete
[  178.919622][ T8850] loop0: detected capacity change from 0 to 1024
[  178.976930][ T8854] loop1: detected capacity change from 0 to 256
[  179.037221][ T8850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.123394][ T8850] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1273: missing EA_INODE flag
[  179.208313][ T8854] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d)
[  179.220608][ T8850] EXT4-fs (loop0): Remounting filesystem read-only
[  179.278904][ T8854] exFAT-fs (loop1): valid_size(10) is greater than size(0)
[  179.342455][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.435258][ T8872] loop4: detected capacity change from 0 to 8
[  180.361338][ T8911] loop0: detected capacity change from 0 to 512
[  180.439227][ T8911] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1301: inode #15: comm syz.0.1301: iget: illegal inode #
[  180.484575][ T5970] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  180.537727][ T8911] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1301: couldn't read orphan inode 15 (err -117)
[  180.620577][ T8911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.642295][ T5970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  180.664854][ T8911] EXT4-fs error (device loop0): ext4_lookup:1787: comm syz.0.1301: inode #15: comm syz.0.1301: iget: illegal inode #
[  180.674344][ T5970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  180.717300][ T5970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  180.761143][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.786843][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.803511][ T8905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.833074][ T5970] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  181.209134][ T5970] usb 4-1: USB disconnect, device number 6
[  181.215876][ T8932] xt_hashlimit: size too large, truncated to 1048576
[  181.325136][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1310'.
[  181.348705][ T8916] loop4: detected capacity change from 0 to 32768
[  181.375631][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1310'.
[  181.581475][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1313'.
[  181.603856][ T8916] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  181.603886][ T8916]   allowing incompatible features above 0.0: (unknown version)
[  181.603899][ T8916]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  181.769288][ T8916] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  181.793938][ T8916] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  181.808018][ T8946] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1315'.
[  181.872545][ T8916] bcachefs (loop4): dropping and reconstructing all alloc info
[  181.950424][ T8949] loop2: detected capacity change from 0 to 512
[  182.028777][ T8916] bcachefs (loop4): accounting_read...
[  182.031689][ T8949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.064892][ T8916]  done
[  182.067706][ T8916] bcachefs (loop4): alloc_read... done
[  182.097233][ T8949] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.121223][ T8956] netlink: 'syz.3.1318': attribute type 1 has an invalid length.
[  182.164834][ T8916] bcachefs (loop4): done starting filesystem
[  182.219489][ T8960] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1320'.
[  182.245417][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.275069][ T8959] ieee802154 phy0 wpan0: encryption failed: -22
[  182.399731][ T5867] bcachefs (loop4): shutting down
[  182.478845][ T8969] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1327'.
[  182.558066][ T5867] bcachefs (loop4): shutdown complete
[  182.756861][ T8970] loop2: detected capacity change from 0 to 4096
[  182.799786][ T8970] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  182.880070][ T8970] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  182.988483][ T8984] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1333'.
[  183.163860][ T8988] loop3: detected capacity change from 0 to 512
[  183.255980][ T8993] loop1: detected capacity change from 0 to 2048
[  183.299213][ T8993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.321857][ T8988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  183.440694][ T8988] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.620551][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  184.446628][ T9029] xt_CT: No such helper "pptp"
[  184.530936][ T9006] loop1: detected capacity change from 0 to 32768
[  184.992482][ T9006] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc64,journal_flush_disabled,norecovery,reconstruct_alloc,version_upgrade=incompatible,no_data_io
[  184.992515][ T9006]   allowing incompatible features above 0.0: (unknown version)
[  184.992530][ T9006]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  185.214882][ T9006] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  185.223195][ T9006] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  185.273710][ T9006] bcachefs (loop1): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version)
[  185.273710][ T9006] 
[  185.318806][ T9006] bcachefs (loop1): dropping and reconstructing all alloc info
[  185.399606][ T9006] bcachefs (loop1): accounting_read...
[  185.399984][ T9076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.429367][ T9006]  done
[  185.432585][ T9006] bcachefs (loop1): alloc_read... done
[  185.479163][ T9006] bcachefs (loop1): snapshots_read... done
[  185.505061][ T9006] bcachefs (loop1): done starting filesystem
[  185.770554][ T9087] loop4: detected capacity change from 0 to 256
[  185.784900][ T5849] bcachefs (loop1): shutting down
[  185.983549][ T9055] loop2: detected capacity change from 0 to 32768
[  185.984919][ T5849] bcachefs (loop1): shutdown complete
[  186.106385][ T9055] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none
[  186.106414][ T9055]   allowing incompatible features above 0.0: (unknown version)
[  186.106430][ T9055]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  186.125660][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.129951][ T9099] netlink: 'syz.0.1382': attribute type 3 has an invalid length.
[  186.129992][ T9099] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1382'.
[  186.179056][ T9055] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  186.187400][ T9055] bcachefs (loop2): recovering from clean shutdown, journal seq 13
[  186.242120][ T9055] bcachefs (loop2): accounting_read... done
[  186.284551][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  186.289509][ T9055] bcachefs (loop2): alloc_read... done
[  186.306241][ T9055] bcachefs (loop2): snapshots_read... done
[  186.345279][ T9055] bcachefs (loop2): journal_replay... done
[  186.371674][ T9055] bcachefs (loop2): resume_logged_ops... done
[  186.401035][ T9055] bcachefs (loop2): delete_dead_inodes... done
[  186.428653][ T9055] bcachefs (loop2): done starting filesystem
[  186.474454][   T10] usb 4-1: Using ep0 maxpacket: 32
[  186.481680][   T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  186.496935][ T9055] overlay: Unknown parameter 'rsion_upgrade'
[  186.505622][   T10] usb 4-1: config 0 has no interface number 0
[  186.574392][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  186.583484][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.608948][ T5850] bcachefs (loop2): shutting down
[  186.624240][   T10] usb 4-1: Product: syz
[  186.630221][   T10] usb 4-1: Manufacturer: syz
[  186.646683][   T10] usb 4-1: SerialNumber: syz
[  186.671262][   T10] usb 4-1: config 0 descriptor??
[  186.697605][   T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  186.710737][ T5850] bcachefs (loop2): shutdown complete
[  186.914685][   T10] usb 4-1: qt2_setup_urbs - submit read urb failed -8
[  186.921771][   T10] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8
[  187.011383][ T9115] loop0: detected capacity change from 0 to 128
[  187.118805][ T5949] usb 4-1: USB disconnect, device number 7
[  188.165807][ T9121] loop1: detected capacity change from 0 to 40427
[  188.195820][ T9121] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (32769, 24)
[  188.224740][ T9121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  188.246346][ T9121] F2FS-fs (loop1): Image doesn't support compression
[  188.275556][ T9121] F2FS-fs (loop1): build fault injection rate: 690
[  188.331400][ T9121] F2FS-fs (loop1): heap/no_heap options were deprecated
[  188.394321][ T9121] F2FS-fs (loop1): build fault injection type: 0x7
[  188.415496][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'.
[  188.450745][ T9121] F2FS-fs (loop1): invalid crc value
[  188.833850][ T9121] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  188.875269][ T9121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  189.290192][ T9195] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1429'.
[  189.404988][ T9200] netlink: 'syz.4.1431': attribute type 13 has an invalid length.
[  189.544519][ T9205] loop0: detected capacity change from 0 to 164
[  189.599804][ T9205] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  189.609089][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1435'.
[  189.634532][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'.
[  189.635024][ T9205] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  189.705532][ T9205] iso9660: Corrupted directory entry in block 4 of inode 1792
[  190.596784][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1453'.
[  191.074838][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  191.247765][   T10] usb 1-1: Using ep0 maxpacket: 32
[  191.260311][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.296473][   T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  191.312731][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.327564][   T10] usb 1-1: Product: syz
[  191.348992][   T10] usb 1-1: Manufacturer: syz
[  191.359097][   T10] usb 1-1: SerialNumber: syz
[  191.374540][   T10] usb 1-1: config 0 descriptor??
[  191.495134][ T9281] cgroup: release_agent respecified
[  191.599530][   T10] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  191.764105][ T9260] loop2: detected capacity change from 0 to 32768
[  191.826626][ T5970] usb 1-1: USB disconnect, device number 9
[  191.876288][ T9291] loop4: detected capacity change from 0 to 8
[  191.904955][ T9291] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  191.949643][ T9291] cramfs: Error -3 while decompressing!
[  191.984792][ T9291] cramfs: ffffffff99c33b08(18)->ffff888077907000(4096)
[  192.001278][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'.
[  192.010557][ T9291] cramfs: Error -3 while decompressing!
[  192.016356][ T9291] cramfs: ffffffff99c33b08(18)->ffff888077907000(4096)
[  192.023517][   T30] audit: type=1800 audit(1751973914.007:32): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1474" name="file1" dev="loop4" ino=324 res=0 errno=0
[  192.023639][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'.
[  192.865482][ T9317] loop1: detected capacity change from 0 to 128
[  193.480141][ T9333] loop2: detected capacity change from 0 to 2048
[  193.570735][ T9337] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.656492][ T9337] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  193.717860][ T9337] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  193.754451][ T9337] Remounting filesystem read-only
[  193.874539][ T5850] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  193.927465][ T9321] loop0: detected capacity change from 0 to 32768
[  194.002773][ T9321] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.164650][ T9321] XFS (loop0): Ending clean mount
[  194.193338][ T9321] XFS (loop0): Quotacheck needed: Please wait.
[  194.288395][ T9321] XFS (loop0): Quotacheck: Done.
[  194.415314][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.424320][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.454644][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.627127][ T9339] loop1: detected capacity change from 0 to 32768
[  194.744475][ T9342] loop4: detected capacity change from 0 to 32768
[  194.813864][ T9342] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.822915][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  194.975916][ T9342] XFS (loop4): Ending clean mount
[  195.020063][ T9342] XFS (loop4): Quotacheck needed: Please wait.
[  195.129081][ T9342] XFS (loop4): Quotacheck: Done.
[  195.275339][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'.
[  195.328882][ T5867] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.811283][ T9393] loop3: detected capacity change from 0 to 64
[  195.945449][ T9393] Trying to free block not in datazone
[  195.950997][ T9393] Trying to free block not in datazone
[  196.012172][ T9393] Trying to free block not in datazone
[  196.028992][ T9393] Trying to free block not in datazone
[  196.044829][ T9393] minix_free_block (loop3:6): bit already cleared
[  196.098092][ T9393] Trying to free block not in datazone
[  196.124020][ T9393] Trying to free block not in datazone
[  196.604074][ T9382] loop2: detected capacity change from 0 to 32768
[  196.826997][ T9420] netlink: 'syz.1.1530': attribute type 87 has an invalid length.
[  196.893205][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1531'.
[  197.075949][ T9390] loop0: detected capacity change from 0 to 40427
[  197.140195][ T9390] F2FS-fs (loop0): invalid crc value
[  197.547195][ T9390] F2FS-fs (loop0): Start checkpoint disabled!
[  197.573971][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'.
[  197.599685][ T9390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  197.759879][   T30] audit: type=1326 audit(1751973919.747:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  197.817066][ T2946] kworker/u8:7: attempt to access beyond end of device
[  197.817066][ T2946] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.845104][   T30] audit: type=1326 audit(1751973919.747:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  197.867302][    C1] vkms_vblank_simulate: vblank timer overrun
[  197.868721][ T2946] CPU: 0 UID: 0 PID: 2946 Comm: kworker/u8:7 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) 
[  197.868753][ T2946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  197.868768][ T2946] Workqueue: writeback wb_workfn (flush-7:0)
[  197.868812][ T2946] Call Trace:
[  197.868821][ T2946]  <TASK>
[  197.868832][ T2946]  dump_stack_lvl+0x189/0x250
[  197.868865][ T2946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.868899][ T2946]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  197.868929][ T2946]  ? __pfx_queue_work_on+0x10/0x10
[  197.868956][ T2946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.868986][ T2946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.869017][ T2946]  ? f2fs_hw_is_readonly+0x39b/0x470
[  197.869060][ T2946]  f2fs_handle_critical_error+0x37c/0x540
[  197.869103][ T2946]  f2fs_write_end_io+0x495/0x810
[  197.869128][ T2946]  ? blkg_put+0x22/0x240
[  197.869167][ T2946]  __submit_merged_bio+0x27a/0x6a0
[  197.869209][ T2946]  __submit_merged_write_cond+0x255/0x530
[  197.869251][ T2946]  f2fs_write_data_pages+0x261d/0x3000
[  197.869312][ T2946]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.869352][ T2946]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  197.869418][ T2946]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  197.869453][ T2946]  ? trace_f2fs_writepages+0x7f/0x200
[  197.869490][ T2946]  ? f2fs_write_node_pages+0x478/0x6e0
[  197.869530][ T2946]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  197.869580][ T2946]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.869605][ T2946]  do_writepages+0x32e/0x550
[  197.869637][ T2946]  ? reacquire_held_locks+0x127/0x1d0
[  197.869661][ T2946]  ? writeback_sb_inodes+0x384/0x1010
[  197.869695][ T2946]  __writeback_single_inode+0x145/0xff0
[  197.869721][ T2946]  ? do_raw_spin_unlock+0x122/0x240
[  197.869755][ T2946]  writeback_sb_inodes+0x6c7/0x1010
[  197.869810][ T2946]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  197.869887][ T2946]  ? rcu_is_watching+0x15/0xb0
[  197.869923][ T2946]  wb_writeback+0x43b/0xaf0
[  197.869957][ T2946]  ? queue_io+0x351/0x590
[  197.869984][ T2946]  ? __pfx_wb_writeback+0x10/0x10
[  197.870017][ T2946]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.870051][ T2946]  wb_workfn+0x409/0xef0
[  197.870102][ T2946]  ? __pfx_wb_workfn+0x10/0x10
[  197.870141][ T2946]  ? __lock_acquire+0xab9/0xd20
[  197.870187][ T2946]  ? process_scheduled_works+0x9ef/0x17b0
[  197.870216][ T2946]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.870242][ T2946]  ? process_scheduled_works+0x9ef/0x17b0
[  197.870263][ T2946]  ? process_scheduled_works+0x9ef/0x17b0
[  197.870287][ T2946]  process_scheduled_works+0xade/0x17b0
[  197.870342][ T2946]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.870387][ T2946]  worker_thread+0x8a0/0xda0
[  197.870442][ T2946]  kthread+0x711/0x8a0
[  197.870475][ T2946]  ? __pfx_worker_thread+0x10/0x10
[  197.870496][ T2946]  ? __pfx_kthread+0x10/0x10
[  197.870534][ T2946]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.870561][ T2946]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.870590][ T2946]  ? __pfx_kthread+0x10/0x10
[  197.870619][ T2946]  ret_from_fork+0x3fc/0x770
[  197.870644][ T2946]  ? __pfx_ret_from_fork+0x10/0x10
[  197.870673][ T2946]  ? __switch_to_asm+0x39/0x70
[  197.870701][ T2946]  ? __switch_to_asm+0x33/0x70
[  197.870727][ T2946]  ? __pfx_kthread+0x10/0x10
[  197.870757][ T2946]  ret_from_fork_asm+0x1a/0x30
[  197.870803][ T2946]  </TASK>
[  197.870813][ T2946] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  197.912757][   T30] audit: type=1326 audit(1751973919.787:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  198.041225][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'.
[  198.085270][ T9418] loop3: detected capacity change from 0 to 32768
[  198.204413][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'.
[  198.254308][   T30] audit: type=1326 audit(1751973919.787:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  198.286647][ T9456] loop1: detected capacity change from 0 to 1024
[  198.314139][   T30] audit: type=1326 audit(1751973919.787:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854118e929 code=0x7ffc0000
[  198.356086][ T9456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.418371][ T9456] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1548: reserved inode found cleared - inode=18
[  198.513779][ T9461] netlink: 'syz.2.1549': attribute type 4 has an invalid length.
[  198.609084][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.742170][ T9468] No source specified
[  199.012173][ T9477] xt_connbytes: Forcing CT accounting to be enabled
[  199.844597][ T9508] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1571'.
[  199.905031][ T9508] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1571'.
[  199.949640][ T9471] loop1: detected capacity change from 0 to 32768
[  199.962597][ T9471] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1552 (9471)
[  199.964312][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1571'.
[  200.016295][ T9471] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  200.078265][ T9471] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  200.169972][ T9471] BTRFS info (device loop1): using free-space-tree
[  200.184592][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  200.357400][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  200.374974][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  200.404663][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  200.424459][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.454536][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  200.480709][ T5916] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  200.514594][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.544334][ T5916] usb 3-1: Product: syz
[  200.548531][ T5916] usb 3-1: Manufacturer: syz
[  200.573556][ T5916] usb 3-1: SerialNumber: syz
[  200.605222][ T5916] usb 3-1: config 0 descriptor??
[  200.653487][ T5916] mcba_usb 3-1:0.0 can0: couldn't setup read URBs
[  200.670252][ T5916] mcba_usb 3-1:0.0 can0: couldn't start device: -90
[  200.813113][ T5916] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90
[  200.848778][ T9538] loop3: detected capacity change from 0 to 64
[  200.897344][ T5916] usb 3-1: USB disconnect, device number 6
[  200.984705][ T5849] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  201.142391][ T9541] geneve2: entered promiscuous mode
[  201.171271][ T9541] geneve2: entered allmulticast mode
[  202.239010][ T9571] loop3: detected capacity change from 0 to 2048
[  202.253291][ T9571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.471676][ T9579] loop1: detected capacity change from 0 to 128
[  202.614036][ T9585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1599'.
[  203.622176][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'.
[  203.927716][ T9629] netlink: 'syz.3.1615': attribute type 3 has an invalid length.
[  203.971632][ T9629] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1615'.
[  204.043929][ T9591] loop4: detected capacity change from 0 to 32768
[  204.097149][ T9591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1600 (9591)
[  204.238263][ T9591] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.272418][ T9605] loop2: detected capacity change from 0 to 32768
[  204.281957][ T9591] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  204.354690][ T9591] BTRFS info (device loop4): using free-space-tree
[  204.363147][ T9605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1607 (9605)
[  204.473719][ T9605] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.541093][ T9605] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  204.592566][ T9605] BTRFS info (device loop2): using free-space-tree
[  204.718345][ T9672] loop1: detected capacity change from 0 to 16
[  204.744448][ T9591] BTRFS info (device loop4): rebuilding free space tree
[  204.834831][ T9672] erofs (device loop1): mounted with root inode @ nid 36.
[  204.938882][ T9605] BTRFS info (device loop2): rebuilding free space tree
[  205.197864][ T5867] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.351005][ T5850] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.483579][   T30] audit: type=1326 audit(1751973927.467:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9643b8e929 code=0x7ffc0000
[  205.576844][   T30] audit: type=1326 audit(1751973927.467:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9643b8e929 code=0x7ffc0000
[  205.699795][   T30] audit: type=1326 audit(1751973927.537:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9738e929 code=0x7ffc0000
[  205.822341][   T30] audit: type=1326 audit(1751973927.537:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9738e929 code=0x7ffc0000
[  205.957474][   T30] audit: type=1326 audit(1751973927.567:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fbb9738e929 code=0x7ffc0000
[  206.062265][   T30] audit: type=1326 audit(1751973927.567:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9738e929 code=0x7ffc0000
[  206.119944][ T9724] loop3: detected capacity change from 0 to 64
[  206.203864][   T30] audit: type=1326 audit(1751973927.567:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9738e929 code=0x7ffc0000
[  206.226105][    C0] vkms_vblank_simulate: vblank timer overrun
[  206.562702][ T9740] loop2: detected capacity change from 0 to 1024
[  206.613623][ T9740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  206.672435][ T9740] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  206.727435][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  206.727469][ T5865] Bluetooth: hci2: command 0x0406 tx timeout
[  206.739621][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  206.748494][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  206.757935][ T9740] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  206.766413][ T9740] EXT4-fs (loop2): orphan cleanup on readonly fs
[  206.797502][ T9740] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 3: comm syz.2.1646: lblock 3 mapped to illegal pblock 3 (length 1)
[  206.906771][ T9740] Quota error (device loop2): write_blk: dquota write failed
[  206.974447][ T9740] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3
[  206.983646][ T9740] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  207.046438][ T9740] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1646: Failed to acquire dquot type 0
[  207.120202][ T9758] loop1: detected capacity change from 0 to 256
[  207.149871][ T9740] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 3: comm syz.2.1646: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.155224][ T9758] exfat: Deprecated parameter 'utf8'
[  207.191282][ T9758] exfat: Deprecated parameter 'utf8'
[  207.211275][ T9758] exfat: Deprecated parameter 'utf8'
[  207.253822][ T9740] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1646: Failed to acquire dquot type 0
[  207.286995][ T9758] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  207.340611][ T9740] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1646: Freeing blocks not in datazone - block = 0, count = 4096
[  207.419792][ T9740] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 3: comm syz.2.1646: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.503874][ T9740] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1646: Failed to acquire dquot type 0
[  207.540707][ T9740] EXT4-fs (loop2): 1 orphan inode deleted
[  207.596189][ T9740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.624083][ T9774] loop4: detected capacity change from 0 to 512
[  207.725187][ T9740] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1646: iget: bad extended attribute block 6
[  207.743400][ T9781] netlink: 'syz.3.1664': attribute type 21 has an invalid length.
[  207.810899][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.817368][ T9774] EXT4-fs (loop4): 1 orphan inode deleted
[  207.827442][ T9774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.840426][   T49] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  207.857411][ T9774] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.972543][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.658863][ T9815] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  208.705443][ T9815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  208.825556][ T9824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1682'.
[  209.043305][ T9832] loop4: detected capacity change from 0 to 256
[  209.511001][ T9852] loop3: detected capacity change from 0 to 512
[  209.574937][ T9852] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  209.632848][ T9852] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #17: comm syz.3.1698: iget: bad i_size value: -6917529027641081756
[  209.697441][ T9852] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1698: couldn't read orphan inode 17 (err -117)
[  209.725270][ T9852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.887730][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.338547][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'.
[  210.824817][ T9890] loop3: detected capacity change from 0 to 1024
[  210.896447][ T9890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.009253][ T9890] EXT4-fs error (device loop3): ext4_get_first_dir_block:3536: inode #11: comm syz.3.1716: directory missing '.'
[  211.064349][ T9890] EXT4-fs (loop3): Remounting filesystem read-only
[  211.165981][ T9903] netlink: 'syz.2.1721': attribute type 2 has an invalid length.
[  211.185177][ T9903] netlink: 'syz.2.1721': attribute type 8 has an invalid length.
[  211.192937][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'.
[  211.216416][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.433047][ T9882] loop4: detected capacity change from 0 to 32768
[  211.474103][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1725'.
[  211.521930][ T9915] random: crng reseeded on system resumption
[  211.584371][ T9882] overlay: Bad value for 'workdir'
[  211.846980][ T9924] tmpfs: Bad value for 'mpol'
[  212.062669][ T9931] program syz.1.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.124297][ T9931] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  212.130713][ T9936] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  212.180784][ T9936] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  212.217452][ T9936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  212.339635][ T9941] loop3: detected capacity change from 0 to 164
[  212.564582][ T9948] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  212.572713][ T9948] netlink: 'syz.0.1742': attribute type 2 has an invalid length.
[  212.671280][ T9954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  212.901594][ T9962] netlink: 'syz.4.1749': attribute type 15 has an invalid length.
[  212.927257][ T9962] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1749'.
[  213.002111][ T9966] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  213.447108][ T9984] loop4: detected capacity change from 0 to 128
[  213.731337][ T9995] loop3: detected capacity change from 0 to 512
[  213.761602][ T9995] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  213.779096][ T9995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  213.797920][ T9995] System zones: 0-1, 15-15, 18-18, 34-34
[  213.826288][ T9995] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.841464][ T9995] __quota_error: 3 callbacks suppressed
[  213.841482][ T9995] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  213.874085][ T9995] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  213.902691][ T9995] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  213.960552][ T9995] EXT4-fs (loop3): 1 truncate cleaned up
[  213.977649][ T9995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  214.041120][ T9995] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  214.180308][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.319454][T10014] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1774'.
[  214.349464][T10014] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1774'.
[  215.068777][T10002] loop4: detected capacity change from 0 to 32768
[  215.076795][T10030] bond1: entered promiscuous mode
[  215.082252][T10030] 8021q: adding VLAN 0 to HW filter on device bond1
[  215.139054][T10035] loop3: detected capacity change from 0 to 256
[  215.230309][T10035] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001023f, chksum : 0x5c87467f, utbl_chksum : 0xe619d30d)
[  215.253551][T10008] loop1: detected capacity change from 0 to 32768
[  215.319081][T10035] exFAT-fs (loop3): failed to load alloc-bitmap
[  215.368691][T10035] exFAT-fs (loop3): failed to recognize exfat type
[  215.406390][T10008] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.471170][T10056] loop2: detected capacity change from 0 to 8
[  215.506833][T10002] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,fix_errors=yes,norecovery,version_upgrade=incompatible
[  215.506865][T10002]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  215.536775][T10056] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  215.549721][T10002] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  215.570171][T10060] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1789'.
[  215.593938][T10002] bcachefs (loop4): invalid bkey in superblock btree=deleted_inodes level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 0 (invalid extent entry 0000000000008000)
[  215.594016][T10002]   invalid extent entry type (got 15, max 7), deleting
[  215.666811][T10056] cramfs: Error -3 while decompressing!
[  215.666834][T10056] cramfs: ffffffff99c2fb28(26)->ffff88806cedd000(4096)
[  215.666872][T10056] cramfs: bad data blocksize 3489655184
[  215.666946][T10056] cramfs: Error -3 while decompressing!
[  215.666957][T10056] cramfs: ffffffff99c2fb28(26)->ffff88806cedd000(4096)
[  215.714051][ T7477] udevd[7477]: incorrect cramfs checksum on /dev/loop2
[  215.809436][T10008] XFS (loop1): Ending clean mount
[  215.813505][T10008] XFS (loop1): Quotacheck needed: Please wait.
[  215.831572][ T7477] udevd[7477]: incorrect cramfs checksum on /dev/loop2
[  215.943118][T10008] XFS (loop1): Quotacheck: Done.
[  216.070790][T10002] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  216.102225][T10002] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  216.102225][T10002]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  216.129319][ T5849] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.129443][T10002] bcachefs (loop4): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap
[  216.129443][T10002] 
[  216.172987][T10002] bcachefs (loop4): invalid bkey in btree_node btree=extents level=0: u64s 7 type inline_data 536870912:8:4294967040 len 0 ver 0: datalen 16: 73797a6b616c6c657273000000000000
[  216.173041][T10002]   size == 0, deleting
[  216.199189][ T5932] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  216.246068][T10002] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  216.355218][ T5932] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  216.366298][T10002] bcachefs (loop4): check_topology...
[  216.366623][T10002] bcachefs (loop4): btree root extents unreadable, must recover from scan
[  216.392324][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.428400][ T5932] usb 4-1: Product: syz
[  216.432639][ T5932] usb 4-1: Manufacturer: syz
[  216.443867][T10002] bcachefs (loop4): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding
[  216.457933][ T5932] usb 4-1: SerialNumber: syz
[  216.461140][ T5932] usb 4-1: config 0 descriptor??
[  216.476612][ T5932] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  216.504444][T10002] bcachefs (loop4): bch2_check_root(): error restart_recovery
[  216.532646][T10002] bcachefs (loop4): scan_for_btree_nodes...
[  216.571611][T10002] bcachefs (loop4): bch2_scan_for_btree_nodes: no btree nodes found
[  216.609098][T10002] bcachefs (loop4): error in recovery: EINVAL
[  216.609118][T10002]   emergency read only at seq 10
[  216.631881][T10002] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINVAL
[  216.643511][T10002] bcachefs (loop4): shutting down
[  216.704754][T10002] bcachefs (loop4): shutdown complete
[  216.881758][ T5932] sonixb 4-1:0.0: Error writing register 01: -71
[  216.892047][ T5932] sonixb 4-1:0.0: probe with driver sonixb failed with error -71
[  216.944743][ T5932] usb 4-1: USB disconnect, device number 8
[  217.429781][T10106] loop0: detected capacity change from 0 to 256
[  217.503290][T10107] loop2: detected capacity change from 0 to 2048
[  217.537841][T10107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.667748][T10106] FAT-fs (loop0): Directory bread(block 64) failed
[  217.684849][T10106] FAT-fs (loop0): Directory bread(block 65) failed
[  217.693150][T10106] FAT-fs (loop0): Directory bread(block 66) failed
[  217.706564][T10106] FAT-fs (loop0): Directory bread(block 67) failed
[  217.713370][T10106] FAT-fs (loop0): Directory bread(block 68) failed
[  217.752353][T10106] FAT-fs (loop0): Directory bread(block 69) failed
[  217.771510][T10106] FAT-fs (loop0): Directory bread(block 70) failed
[  217.844300][T10106] FAT-fs (loop0): Directory bread(block 71) failed
[  217.862741][T10106] FAT-fs (loop0): Directory bread(block 72) failed
[  217.889747][T10106] FAT-fs (loop0): Directory bread(block 73) failed
[  218.048176][T10124] bridge0: port 3(veth0_to_bridge) entered blocking state
[  218.060827][T10124] bridge0: port 3(veth0_to_bridge) entered disabled state
[  218.071281][T10125] netlink: 'syz.1.1821': attribute type 2 has an invalid length.
[  218.071477][T10124] veth0_to_bridge: entered allmulticast mode
[  218.121637][T10125] netlink: 'syz.1.1821': attribute type 1 has an invalid length.
[  218.144922][T10124] veth0_to_bridge: entered promiscuous mode
[  218.221002][T10127] xt_hashlimit: max too large, truncated to 1048576
[  218.221576][T10124] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  218.256868][T10124] bridge0: port 3(veth0_to_bridge) entered blocking state
[  218.264313][T10124] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  218.554161][T10002] bcachefs: bch2_fs_get_tree() error: EINVAL
[  218.823280][   T30] audit: type=1326 audit(1751973940.807:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93418e929 code=0x7ffc0000
[  218.860360][ T5949] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  218.884884][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  218.902890][   T30] audit: type=1326 audit(1751973940.807:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93418e929 code=0x7ffc0000
[  218.954018][   T30] audit: type=1326 audit(1751973940.817:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc93418e929 code=0x7ffc0000
[  219.020698][   T30] audit: type=1326 audit(1751973940.817:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93418e929 code=0x7ffc0000
[  219.047557][   T30] audit: type=1326 audit(1751973940.817:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93418e929 code=0x7ffc0000
[  219.072940][ T5949] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.092502][ T5949] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.108233][   T10] usb 4-1: Using ep0 maxpacket: 16
[  219.129301][   T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  219.152371][   T10] usb 4-1: config 0 has no interface number 0
[  219.161123][ T5949] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  219.175727][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.196410][ T5949] usb 1-1: Product: syz
[  219.202911][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  219.212916][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.222438][ T5949] usb 1-1: Manufacturer: syz
[  219.234237][ T5949] usb 1-1: SerialNumber: syz
[  219.242682][   T10] usb 4-1: Product: syz
[  219.252806][   T10] usb 4-1: Manufacturer: syz
[  219.270350][   T10] usb 4-1: SerialNumber: syz
[  219.287859][   T10] usb 4-1: config 0 descriptor??
[  219.310454][   T10] hub 4-1:0.132: bad descriptor, ignoring hub
[  219.330891][   T10] hub 4-1:0.132: probe with driver hub failed with error -5
[  219.369379][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input10
[  219.473997][ T5949] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8
[  219.568485][ T5949] usb 1-1: USB disconnect, device number 10
[  219.620322][ T5949] usblp0: removed
[  219.711562][T10145] loop2: detected capacity change from 0 to 32768
[  219.958309][T10176] Cannot find set identified by id 2 to match
[  219.988051][T10145] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  219.988109][T10145]   allowing incompatible features above 0.0: (unknown version)
[  219.988122][T10145]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  220.020242][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  220.021934][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.022358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.023570][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  220.023915][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.024502][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.024951][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  220.025294][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.025777][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  220.026198][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  223.444072][    C1] sched: DL replenish lagged too much
[  225.024503][    C1] net_ratelimit: 11425 callbacks suppressed
[  225.024527][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.025049][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  225.025430][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.025945][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.026402][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  225.026766][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.027272][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.027710][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  225.028101][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  225.028646][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.034527][    C1] net_ratelimit: 11612 callbacks suppressed
[  230.034556][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.035007][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  230.035373][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.035919][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.036362][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  230.036781][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.037313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.037764][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  230.038131][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  230.038656][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.044386][    C1] net_ratelimit: 12007 callbacks suppressed
[  235.044407][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.044872][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.045244][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  235.045556][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.046014][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.046395][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  235.046706][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.047192][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  235.047569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  235.047875][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.054554][    C1] net_ratelimit: 12525 callbacks suppressed
[  240.054575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.054975][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  240.055368][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.055844][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.056297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  240.056657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.057135][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.057556][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  240.057891][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  240.058342][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.064980][    C1] net_ratelimit: 12268 callbacks suppressed
[  245.065000][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.065321][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.065732][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  245.066018][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.066454][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.066741][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  245.067145][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  245.067457][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.067862][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.068171][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  250.074411][    C1] net_ratelimit: 12612 callbacks suppressed
[  250.074432][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  250.074766][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  250.075270][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  250.075606][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  250.076076][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  250.076429][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  250.076842][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  250.077159][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  250.077593][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  250.077906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.084330][    C1] net_ratelimit: 12587 callbacks suppressed
[  255.084370][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.084936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.085315][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  255.085892][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  255.086228][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.086711][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.087069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  255.087546][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  255.087890][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.088387][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.530047][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  258.541556][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  260.094432][    C1] net_ratelimit: 12436 callbacks suppressed
[  260.094453][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  260.094989][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  260.095350][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  260.095865][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  260.096165][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  260.096582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  260.096862][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  260.097621][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  260.097902][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  260.098315][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  265.104488][    C1] net_ratelimit: 12918 callbacks suppressed
[  265.104513][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  265.105075][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  265.105439][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  265.105981][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  265.106349][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  265.106913][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  265.107291][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  265.107856][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  265.108236][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  265.108802][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  270.114237][    C1] net_ratelimit: 12378 callbacks suppressed
[  270.114260][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.114764][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  270.115111][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.115632][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.115965][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.116583][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  270.116953][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.117433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.117765][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.118266][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  275.124364][    C1] net_ratelimit: 11441 callbacks suppressed
[  275.124387][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.124719][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  275.125182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  275.125516][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.125978][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.126354][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  275.126818][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  275.132938][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.133435][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.133805][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  280.134514][    C1] net_ratelimit: 11176 callbacks suppressed
[  280.134537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  280.134868][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.135342][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.135694][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  280.136188][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  280.136515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.136984][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  280.137318][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  280.137807][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  280.138130][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.144365][    C1] net_ratelimit: 11148 callbacks suppressed
[  285.144388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.144767][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.145326][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  285.145698][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.146255][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.146631][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.147164][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  285.147537][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.148097][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.148474][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.154400][    C1] net_ratelimit: 11128 callbacks suppressed
[  290.154423][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  290.154780][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.155292][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.155668][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.156158][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  290.156501][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.156999][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.157344][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.157884][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  290.158229][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.164398][    C1] net_ratelimit: 10997 callbacks suppressed
[  295.164427][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  295.164943][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  295.165336][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.165870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.166233][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  295.166749][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  295.167109][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.167631][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  295.168016][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  295.168559][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  300.174325][    C1] net_ratelimit: 11383 callbacks suppressed
[  300.174347][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  300.174700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.175165][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.175500][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  300.175936][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  300.176248][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.176699][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.177007][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  300.177493][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  300.177848][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.288369][ T5864] Bluetooth: hci4: command 0x0406 tx timeout
[  305.184615][    C1] net_ratelimit: 11970 callbacks suppressed
[  305.184638][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  305.184972][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.185451][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.185781][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.186216][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  305.186534][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.186987][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.187305][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.187740][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  305.188068][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.194197][    C1] net_ratelimit: 12442 callbacks suppressed
[  310.194217][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  310.194515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.195658][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.196001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  310.196443][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  310.196752][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.197246][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.197585][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  310.198002][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  310.198292][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.204200][    C1] net_ratelimit: 12775 callbacks suppressed
[  315.204220][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.204690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.205048][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  315.205522][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  315.205870][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.206339][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.206676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  315.207128][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  315.207445][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.207891][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  317.617714][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.629319][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  320.214543][    C1] net_ratelimit: 11917 callbacks suppressed
[  320.214563][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  320.214884][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.215366][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.215713][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  320.216211][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  320.216579][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.217050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.217380][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  320.217842][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  320.218161][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.224345][    C1] net_ratelimit: 12078 callbacks suppressed
[  325.224376][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  325.224738][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.225172][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.225512][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  325.225953][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  325.226254][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.226694][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.227000][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  325.227445][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  325.227773][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.234195][    C1] net_ratelimit: 12504 callbacks suppressed
[  330.234217][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.234570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  330.235078][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  330.235395][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.235852][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.236170][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  330.236648][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  330.236984][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.237456][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.237803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.244348][    C1] net_ratelimit: 11664 callbacks suppressed
[  335.244371][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  335.244700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.245165][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.245524][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.246011][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  335.246336][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.246806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.247165][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.247672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  335.248052][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.254366][    C1] net_ratelimit: 11678 callbacks suppressed
[  340.254390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  340.254719][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.255194][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.255540][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  340.256066][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  340.256426][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.256958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.257301][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  340.257764][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  340.258095][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  345.264587][    C1] net_ratelimit: 12030 callbacks suppressed
[  345.264610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  345.264952][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  345.265447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  345.265787][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  345.266299][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  345.266659][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  345.267150][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  345.267519][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  345.268029][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  345.268391][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.274152][    C1] net_ratelimit: 12023 callbacks suppressed
[  350.274173][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.274627][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.274960][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  350.275413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  350.275724][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.276168][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.276473][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  350.276950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  350.277293][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.277724][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.284523][    C1] net_ratelimit: 11647 callbacks suppressed
[  355.284545][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  355.284878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.285342][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.285679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  355.286073][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.286567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.286985][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  355.287310][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.287781][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.288110][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.294585][    C1] net_ratelimit: 11378 callbacks suppressed
[  360.294609][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  360.294990][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.295450][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.295986][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.296419][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  360.296808][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.297336][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.297796][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  360.298174][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.298643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.304522][    C1] net_ratelimit: 12257 callbacks suppressed
[  365.304544][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.304963][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  365.305307][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.305795][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.306177][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  365.306502][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  365.306922][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.307380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  365.307778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:df:a1:eb:00:74, vlan:0)
[  365.308096][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.269867][   T31] INFO: task kworker/0:1:10 blocked for more than 144 seconds.
[  367.269893][   T31]       Not tainted 6.16.0-rc5-next-20250708-syzkaller #0
[  367.269905][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  367.269916][   T31] task:kworker/0:1     state:D stack:22488 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  367.269974][   T31] Workqueue: usb_hub_wq hub_event
[  367.270016][   T31] Call Trace:
[  367.270024][   T31]  <TASK>
[  367.270039][   T31]  __schedule+0x16f5/0x4d00
[  367.270083][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  367.270109][   T31]  ? schedule+0x165/0x360
[  367.270138][   T31]  ? __pfx___schedule+0x10/0x10
[  367.270179][   T31]  ? schedule+0x91/0x360
[  367.270208][   T31]  schedule+0x165/0x360
[  367.270242][   T31]  schedule_preempt_disabled+0x13/0x30
[  367.270267][   T31]  __mutex_lock+0x724/0xe80
[  367.270298][   T31]  ? __mutex_lock+0x51b/0xe80
[  367.270332][   T31]  ? hub_event+0x628/0x4a00
[  367.270361][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  367.270397][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.270422][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.270451][   T31]  ? pm_runtime_barrier+0x14f/0x1d0
[  367.270482][   T31]  hub_event+0x628/0x4a00
[  367.270512][   T31]  ? sched_clock+0x3f/0x60
[  367.270540][   T31]  ? psi_task_switch+0x39a/0x6d0
[  367.270578][   T31]  ? do_raw_spin_lock+0x121/0x290
[  367.270602][   T31]  ? look_up_lock_class+0x74/0x170
[  367.270631][   T31]  ? register_lock_class+0x51/0x320
[  367.270676][   T31]  ? __pfx_hub_event+0x10/0x10
[  367.270704][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  367.270730][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.270753][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  367.270772][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  367.270794][   T31]  process_scheduled_works+0xade/0x17b0
[  367.270841][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.270878][   T31]  worker_thread+0x8a0/0xda0
[  367.270925][   T31]  kthread+0x711/0x8a0
[  367.270952][   T31]  ? __pfx_worker_thread+0x10/0x10
[  367.270991][   T31]  ? __pfx_kthread+0x10/0x10
[  367.271036][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.271062][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.271089][   T31]  ? __pfx_kthread+0x10/0x10
[  367.271117][   T31]  ret_from_fork+0x3fc/0x770
[  367.271141][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  367.271169][   T31]  ? __switch_to_asm+0x39/0x70
[  367.271195][   T31]  ? __switch_to_asm+0x33/0x70
[  367.271227][   T31]  ? __pfx_kthread+0x10/0x10
[  367.271254][   T31]  ret_from_fork_asm+0x1a/0x30
[  367.271299][   T31]  </TASK>
[  367.271437][   T31] 
[  367.271437][   T31] Showing all locks held in the system:
[  367.271448][   T31] 2 locks held by kthreadd/2:
[  367.271462][   T31] 4 locks held by kworker/0:0/9:
[  367.271474][   T31]  #0: ffff8880256dbd48 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  367.271539][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  367.271633][   T31]  #2: ffff888034ded308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[  367.271709][   T31]  #3: ffff88805787b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[  367.271784][   T31] 4 locks held by kworker/0:1/10:
[  367.271798][   T31]  #0: ffff8881432f3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  367.271860][   T31]  #1: ffffc900000f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  367.271921][   T31]  #2: ffff88802837c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  367.271989][   T31]  #3: ffff888028480510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4a00
[  367.272059][   T31] 3 locks held by kworker/u8:0/12:
[  367.272074][   T31] 3 locks held by kworker/u8:1/13:
[  367.272088][   T31] 2 locks held by kworker/1:0/24:
[  367.272102][   T31] 1 lock held by khungtaskd/31:
[  367.272116][   T31]  #0: ffffffff8e13bfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  367.272183][   T31] 3 locks held by kworker/u8:2/36:
[  367.272198][   T31] 3 locks held by kworker/1:1/43:
[  367.272211][   T31] 3 locks held by kworker/u8:3/49:
[  367.272235][   T31] 4 locks held by kworker/u8:4/64:
[  367.272255][   T31] 3 locks held by kworker/u8:5/1306:
[  367.272270][   T31] 4 locks held by kworker/u8:6/1335:
[  367.272284][   T31]  #0: ffff88807b702148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  367.272352][   T31]  #1: ffffc90004807bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  367.272415][   T31]  #2: ffff88802e255308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  367.272490][   T31]  #3: ffff888057993ea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  367.272572][   T31] 3 locks held by kworker/u8:7/2946:
[  367.272586][   T31] 6 locks held by kworker/u8:8/2971:
[  367.272600][   T31] 3 locks held by kworker/u8:9/2997:
[  367.272614][   T31] 3 locks held by kworker/u8:10/3030:
[  367.272629][   T31] 4 locks held by kworker/R-bat_e/3415:
[  367.272644][   T31] 4 locks held by kworker/1:2/5185:
[  367.272657][   T31]  #0: ffff88805935e148 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  367.272726][   T31]  #1: ffffc9000f737bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  367.272808][   T31]  #2: ffff888034f49308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[  367.272883][   T31]  #3: ffff88805787dc60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[  367.272958][   T31] 5 locks held by acpid/5207:
[  367.272972][   T31] 2 locks held by klogd/5211:
[  367.272985][   T31] 3 locks held by udevd/5222:
[  367.272999][   T31] 2 locks held by dhcpcd/5516:
[  367.273012][   T31] 1 lock held by dhcpcd/5517:
[  367.273027][   T31] 2 locks held by crond/5595:
[  367.273040][   T31] 2 locks held by getty/5614:
[  367.273053][   T31]  #0: ffff88814db090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  367.273120][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  367.273182][   T31] 3 locks held by syz-executor/5839:
[  367.273197][   T31] 1 lock held by syz-executor/5849:
[  367.273211][   T31]  #0: ffff88802fd68308 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x54/0x3e0
[  367.273283][   T31] 1 lock held by syz-executor/5851:
[  367.273297][   T31]  #0: ffff88802fd68308 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_target+0x81/0x240
[  367.273356][   T31] 1 lock held by udevd/5852:
[  367.273369][   T31]  #0: ffff8880300b6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2cf/0x5a0
[  367.273431][   T31] 2 locks held by kworker/1:3/5856:
[  367.273444][   T31] 2 locks held by syz-executor/5860:
[  367.273459][   T31] 1 lock held by syz-executor/5867:
[  367.273485][   T31]  #0: ffff88802fd68308 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_target+0x81/0x240
[  367.273544][   T31] 1 lock held by kworker/R-wg-cr/5892:
[  367.273559][   T31] 3 locks held by kworker/0:3/5908:
[  367.273573][   T31] 3 locks held by kworker/0:4/5918:
[  367.273598][   T31] 2 locks held by kworker/1:5/5925:
[  367.273611][   T31] 3 locks held by kworker/1:6/5932:
[  367.273623][   T31] 3 locks held by kworker/0:5/5949:
[  367.273636][   T31] 4 locks held by kworker/0:6/5969:
[  367.273648][   T31] 3 locks held by kworker/0:7/5970:
[  367.273662][   T31] 2 locks held by syz.2.1831/10145:
[  367.273675][   T31] 4 locks held by kworker/u8:11/10178:
[  367.273687][   T31] 4 locks held by kworker/1:7/10180:
[  367.273700][   T31] 
[  367.273706][   T31] =============================================
[  367.273706][   T31] 
[  367.273722][   T31] NMI backtrace for cpu 1
[  367.273740][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) 
[  367.273777][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.273796][   T31] Call Trace:
[  367.273808][   T31]  <TASK>
[  367.273820][   T31]  dump_stack_lvl+0x189/0x250
[  367.273856][   T31]  ? __wake_up_klogd+0xd9/0x110
[  367.273900][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.273937][   T31]  ? __pfx__printk+0x10/0x10
[  367.273976][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  367.274002][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  367.274024][   T31]  ? _printk+0xcf/0x120
[  367.274054][   T31]  ? __pfx__printk+0x10/0x10
[  367.274083][   T31]  ? debug_show_all_locks+0x2e/0x180
[  367.274109][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  367.274142][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  367.274169][   T31]  watchdog+0xfee/0x1030
[  367.274198][   T31]  ? watchdog+0x1de/0x1030
[  367.274238][   T31]  kthread+0x711/0x8a0
[  367.274266][   T31]  ? __pfx_watchdog+0x10/0x10
[  367.274291][   T31]  ? __pfx_kthread+0x10/0x10
[  367.274318][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.274342][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.274367][   T31]  ? __pfx_kthread+0x10/0x10
[  367.274393][   T31]  ret_from_fork+0x3fc/0x770
[  367.274414][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  367.274440][   T31]  ? __switch_to_asm+0x39/0x70
[  367.274464][   T31]  ? __switch_to_asm+0x33/0x70
[  367.274487][   T31]  ? __pfx_kthread+0x10/0x10
[  367.274512][   T31]  ret_from_fork_asm+0x1a/0x30
[  367.274552][   T31]  </TASK>
[  367.286169][   T31] Sending NMI from CPU 1 to CPUs 0:
[  367.286209][    C0] NMI backtrace for cpu 0
[  367.286223][    C0] CPU: 0 UID: 0 PID: 3415 Comm: kworker/R-bat_e Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) 
[  367.286242][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.286272][    C0] Workqueue: bat_events batadv_tt_purge
[  367.286304][    C0] RIP: 0010:__netif_receive_skb_core+0x132/0x4010
[  367.286331][    C0] Code: 3a 00 00 e8 b0 95 5e f8 41 89 de c1 eb 06 48 8d 3c dd 30 54 a3 8f be 08 00 00 00 e8 98 2c c3 f8 31 f6 4c 0f a3 35 8e 3d 42 06 <0f> 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 7d 98 5e f8 84 db 74 10 e8
[  367.286364][    C0] RSP: 0018:ffffc90000006da0 EFLAGS: 00000247
[  367.286379][    C0] RAX: ffffffff89611601 RBX: 0000000000000000 RCX: ffffffff89611698
[  367.286392][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fa35430
[  367.286404][    C0] RBP: ffffc90000007008 R08: ffffffff8fa35437 R09: 1ffffffff1f46a86
[  367.286417][    C0] R10: dffffc0000000000 R11: fffffbfff1f46a87 R12: dffffc0000000000
[  367.286431][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001
[  367.286443][    C0] FS:  0000000000000000(0000) GS:ffff888125bd7000(0000) knlGS:0000000000000000
[  367.286457][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  367.286469][    C0] CR2: 00007f68fb47f708 CR3: 0000000030a94000 CR4: 00000000003526f0
[  367.286485][    C0] Call Trace:
[  367.286492][    C0]  <IRQ>
[  367.286500][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.286532][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  367.286549][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.286576][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  367.286595][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  367.286620][    C0]  ? do_raw_read_unlock+0x3d/0x80
[  367.286643][    C0]  ? ebt_do_table+0x265b/0x2820
[  367.286664][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.286694][    C0]  ? netif_receive_skb+0x115/0x790
[  367.286717][    C0]  ? netif_receive_skb+0x115/0x790
[  367.286742][    C0]  __netif_receive_skb+0x72/0x380
[  367.286768][    C0]  ? netif_receive_skb+0x115/0x790
[  367.286790][    C0]  netif_receive_skb+0x1cb/0x790
[  367.286814][    C0]  ? __pfx_netif_receive_skb+0x10/0x10
[  367.286840][    C0]  ? br_netif_receive_skb+0x126/0x190
[  367.286868][    C0]  NF_HOOK+0x9d/0x390
[  367.286892][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  367.286919][    C0]  ? NF_HOOK+0x102/0x390
[  367.286943][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  367.286976][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  367.287006][    C0]  ? br_pass_frame_up+0x275/0x420
[  367.287033][    C0]  br_handle_frame_finish+0x14d1/0x19b0
[  367.287066][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  367.287098][    C0]  ? ip6t_do_table+0x1db/0x1560
[  367.287117][    C0]  ? nf_hook_slow+0x176/0x220
[  367.287144][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  367.287170][    C0]  br_nf_hook_thresh+0x3c6/0x4a0
[  367.287201][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  367.287229][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  367.287254][    C0]  ? nf_nat_ipv6_in+0x1fc/0x2b0
[  367.287282][    C0]  br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  367.287310][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  367.287341][    C0]  ? br_nf_pre_routing_ipv6+0x42f/0x6b0
[  367.287368][    C0]  br_nf_pre_routing_ipv6+0x37e/0x6b0
[  367.287398][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  367.287427][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  367.287455][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  367.287496][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  367.287520][    C0]  br_handle_frame+0x97f/0x14c0
[  367.287549][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  367.287575][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  367.287603][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  367.287629][    C0]  __netif_receive_skb_core+0x10b6/0x4010
[  367.287653][    C0]  ? ip6_mc_input+0x8f4/0xaf0
[  367.287675][    C0]  ? ip6_mc_input+0x8f4/0xaf0
[  367.287697][    C0]  ? __pfx_ip6_mc_input+0x10/0x10
[  367.287717][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  367.287740][    C0]  ? ip6_rcv_finish+0x29e/0x2e0
[  367.287759][    C0]  ? NF_HOOK+0x309/0x3a0
[  367.287775][    C0]  ? skb_orphan+0xaf/0xd0
[  367.287795][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.287824][    C0]  ? process_backlog+0x2d5/0x14f0
[  367.287849][    C0]  ? process_backlog+0x2d5/0x14f0
[  367.287875][    C0]  __netif_receive_skb+0x72/0x380
[  367.287911][    C0]  ? process_backlog+0x2d5/0x14f0
[  367.287934][    C0]  process_backlog+0x60e/0x14f0
[  367.287965][    C0]  ? __pfx_process_backlog+0x10/0x10
[  367.287997][    C0]  __napi_poll+0xc7/0x480
[  367.288017][    C0]  ? net_rx_action+0x46d/0xe30
[  367.288041][    C0]  net_rx_action+0x707/0xe30
[  367.288063][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.288095][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  367.288119][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  367.288145][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  367.288168][    C0]  handle_softirqs+0x286/0x870
[  367.288185][    C0]  ? do_softirq+0xec/0x180
[  367.288202][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.288221][    C0]  ? batadv_tt_local_purge+0x2a7/0x340
[  367.288243][    C0]  do_softirq+0xec/0x180
[  367.288257][    C0]  </IRQ>
[  367.288262][    C0]  <TASK>
[  367.288268][    C0]  ? __pfx_do_softirq+0x10/0x10
[  367.288282][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.288309][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  367.288333][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  367.288349][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  367.288367][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  367.288387][    C0]  ? batadv_tt_local_purge+0x2a7/0x340
[  367.288408][    C0]  batadv_tt_local_purge+0x2a7/0x340
[  367.288435][    C0]  batadv_tt_purge+0x35/0x9e0
[  367.288457][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.288476][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.288491][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.288508][    C0]  process_scheduled_works+0xade/0x17b0
[  367.288536][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.288557][    C0]  ? assign_work+0x381/0x410
[  367.288573][    C0]  rescuer_thread+0x53c/0xdd0
[  367.288593][    C0]  ? rescuer_thread+0xbb/0xdd0
[  367.288620][    C0]  kthread+0x711/0x8a0
[  367.288640][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[  367.288657][    C0]  ? __pfx_kthread+0x10/0x10
[  367.288678][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.288697][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.288718][    C0]  ? __pfx_kthread+0x10/0x10
[  367.288737][    C0]  ret_from_fork+0x3fc/0x770
[  367.288754][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.288772][    C0]  ? __switch_to_asm+0x39/0x70
[  367.288792][    C0]  ? __switch_to_asm+0x33/0x70
[  367.288811][    C0]  ? __pfx_kthread+0x10/0x10
[  367.288831][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.288859][    C0]  </TASK>
[  367.289210][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  367.289229][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) 
[  367.289253][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  367.289266][   T31] Call Trace:
[  367.289274][   T31]  <TASK>
[  367.289283][   T31]  dump_stack_lvl+0x99/0x250
[  367.289308][   T31]  ? __asan_memcpy+0x40/0x70
[  367.289329][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.289353][   T31]  ? __pfx__printk+0x10/0x10
[  367.289394][   T31]  panic+0x2e2/0x7b0
[  367.289422][   T31]  ? __pfx_panic+0x10/0x10
[  367.289445][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  367.289474][   T31]  ? irq_work_queue+0xbc/0x140
[  367.289511][   T31]  watchdog+0x102d/0x1030
[  367.289542][   T31]  ? watchdog+0x1de/0x1030
[  367.289577][   T31]  kthread+0x711/0x8a0
[  367.289605][   T31]  ? __pfx_watchdog+0x10/0x10
[  367.289631][   T31]  ? __pfx_kthread+0x10/0x10
[  367.289659][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.289684][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.289709][   T31]  ? __pfx_kthread+0x10/0x10
[  367.289735][   T31]  ret_from_fork+0x3fc/0x770
[  367.289758][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  367.289784][   T31]  ? __switch_to_asm+0x39/0x70
[  367.289808][   T31]  ? __switch_to_asm+0x33/0x70
[  367.289833][   T31]  ? __pfx_kthread+0x10/0x10
[  367.289859][   T31]  ret_from_fork_asm+0x1a/0x30
[  367.289901][   T31]  </TASK>
[  367.290252][   T31] Kernel Offset: disabled