last executing test programs:

2.759890007s ago: executing program 1 (id=6674):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0)

2.36340981s ago: executing program 1 (id=6679):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30)

2.121615381s ago: executing program 0 (id=6682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x0)

2.093173463s ago: executing program 1 (id=6683):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0)

1.916253438s ago: executing program 0 (id=6685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00028005000100000000002c00018014000300f400000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c006aa4b30f0100000000002c0001"], 0x90}}, 0x0)

1.815823017s ago: executing program 3 (id=6686):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
lseek(r0, 0x400000000000003, 0x1)

1.7756867s ago: executing program 1 (id=6687):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0)

1.632961562s ago: executing program 4 (id=6688):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200c100007006000000002000020d3"])

1.576402757s ago: executing program 3 (id=6689):
symlink(&(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount$bind(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10008, 0x0)

1.510634382s ago: executing program 0 (id=6690):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
write$vga_arbiter(r0, &(0x7f00000000c0)=@unlock_all, 0xb)

1.373702044s ago: executing program 3 (id=6691):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)=0x7)

1.345814686s ago: executing program 0 (id=6701):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgid(0x0)

1.321732729s ago: executing program 1 (id=6693):
syz_mount_image$fuse(0x0, &(0x7f0000000dc0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@index_on, 0x0}], [], 0x2c})

1.281941272s ago: executing program 4 (id=6694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}}, 0x0)

1.112768886s ago: executing program 2 (id=6695):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @local}})

1.095161808s ago: executing program 3 (id=6696):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/101, 0x65}], 0x1, 0x6, 0x5)

1.017197204s ago: executing program 4 (id=6697):
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002000)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, &(0x7f0000001480)=[@sndrcv={0x30}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x10}}], 0x50}], 0x1, 0x0)

1.017023344s ago: executing program 0 (id=6706):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000040)=0x5f)

882.659175ms ago: executing program 2 (id=6698):
r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_overlay={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "040000f5"}, 0x0, 0x3, {0x0}})

869.120527ms ago: executing program 0 (id=6699):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000000000)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c40)={0x2, 0x0, {0x6, @struct, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, @struct={0x2, 0x2}, 0x100, 0x0, [0x0, 0x0, 0x0, 0x8000000000000000]}, {0xffffffffffffffff, @struct={0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x39b8b663, 0x0, @usage=0xfffffffffffffffd, 0x80000, 0xfffffffc, [0x0, 0x0, 0x0, 0x8, 0x28000000000000]}, {0x1, @struct={0xfffff0b7, 0x4}, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x58, @struct={0x2, 0x7c61}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}})

812.261651ms ago: executing program 3 (id=6700):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x80, 0x35a, &(0x7f0000001600)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

786.698884ms ago: executing program 4 (id=6702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

450.595032ms ago: executing program 2 (id=6703):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
prlimit64(0x0, 0x5, 0x0, &(0x7f0000000600))

450.439172ms ago: executing program 1 (id=6704):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004100)={{0x12, 0x1, 0x0, 0x58, 0xfc, 0x14, 0x8, 0x17ef, 0x721e, 0x7360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x4, "20b70974"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

420.351465ms ago: executing program 4 (id=6714):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/152)

282.391706ms ago: executing program 2 (id=6705):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)

234.11451ms ago: executing program 2 (id=6707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)

115.73837ms ago: executing program 4 (id=6708):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x98ea, &(0x7f0000013140)="$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")
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/86)

52.818856ms ago: executing program 2 (id=6709):
r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00')
preadv(r0, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}, {&(0x7f0000000140)=""/88, 0x58}], 0x2, 0x0, 0x0)

0s ago: executing program 3 (id=6710):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c108906d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22)

kernel console output (not intermixed with test programs):

0: jid=0: Journal head lookup took 263ms
[  477.563869][ T3990] gfs2: fsid=syz:syz.0: jid=0: Done
[  477.569116][T15620] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  477.907149][T15699] netlink: 'syz.3.5255': attribute type 2 has an invalid length.
[  477.936530][T15699] netlink: 'syz.3.5255': attribute type 1 has an invalid length.
[  478.005999][T15699] netlink: 'syz.3.5255': attribute type 1 has an invalid length.
[  478.427713][T15708] loop0: detected capacity change from 0 to 4096
[  478.530100][ T5326] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  478.614359][T15708] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  479.140612][ T5326] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  479.168703][ T5326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.200370][ T5326] usb 4-1: Product: syz
[  479.204746][ T5326] usb 4-1: Manufacturer: syz
[  479.229743][ T5326] usb 4-1: SerialNumber: syz
[  479.268580][ T5326] usb 4-1: config 0 descriptor??
[  479.315047][T15728] loop1: detected capacity change from 0 to 2048
[  479.401403][T15734] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  479.526470][T15728] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=16, inode=2, rec_len=33040, name_len=2
[  479.571716][ T5326] usb-storage 4-1:0.0: USB Mass Storage device detected
[  479.614686][   T26] audit: type=1326 audit(1729177882.288:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15740 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  479.675254][   T26] audit: type=1326 audit(1729177882.318:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15740 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  479.678674][T15728] Remounting filesystem read-only
[  479.704452][   T26] audit: type=1326 audit(1729177882.318:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15740 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  479.728994][   T26] audit: type=1326 audit(1729177882.318:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15740 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  479.926767][T15728] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=16, inode=2, rec_len=33040, name_len=2
[  479.989207][T15750] usb usb8: usbfs: process 15750 (syz.4.5277) did not claim interface 0 before use
[  480.189647][ T3639] NILFS (loop1): discard dirty page: offset=268697600, ino=6
[  480.225424][ T3639] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.250020][ T3639] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  480.257287][ T3639] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  480.305493][ T3639] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  480.341585][ T3639] NILFS (loop1): discard dirty page: offset=0, ino=3
[  480.348340][ T3639] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  480.419921][ T3639] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  480.456177][ T3639] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  480.480023][ T3639] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.520038][ T3639] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  480.567083][ T3639] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.609868][ T3639] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.643813][ T3639] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  480.677780][ T3639] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.728149][T15773] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  480.796433][T15773] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  480.830374][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'.
[  480.839393][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5293'.
[  480.872750][T15778] sctp: [Deprecated]: syz.1.5284 (pid 15778) Use of int in max_burst socket option.
[  480.872750][T15778] Use struct sctp_assoc_value instead
[  481.160017][T15789] netlink: 'syz.1.5297': attribute type 1 has an invalid length.
[  481.734746][T15804] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5306'.
[  482.420418][    C0] net_ratelimit: 5264 callbacks suppressed
[  482.420441][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.438579][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  482.450859][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.463819][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  482.476191][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.488454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  482.500923][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.513542][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  482.526114][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  482.538542][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  482.812265][ T5326] usb 4-1: USB disconnect, device number 19
[  483.462046][T15836] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5321'.
[  484.643782][T15881] netlink: 'syz.0.5343': attribute type 29 has an invalid length.
[  484.707755][T15883] loop3: detected capacity change from 0 to 512
[  484.757267][T15883] EXT4-fs: Ignoring removed oldalloc option
[  484.891038][T15883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.5344: Parent and EA inode have the same ino 15
[  484.965590][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5349'.
[  485.041215][T15883] EXT4-fs (loop3): Remounting filesystem read-only
[  485.047846][T15883] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  485.115707][T15883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.5344: Parent and EA inode have the same ino 15
[  485.147624][T15883] EXT4-fs (loop3): Remounting filesystem read-only
[  485.181079][T15883] EXT4-fs (loop3): 1 orphan inode deleted
[  485.186973][T15883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  485.187969][T15898] loop4: detected capacity change from 0 to 2048
[  485.203361][T15902] loop1: detected capacity change from 0 to 512
[  485.288466][T15902] EXT4-fs (loop1): orphan cleanup on readonly fs
[  485.302961][T15883] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.5344: deleted inode referenced: 15
[  485.315421][T15902] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.5353: corrupted in-inode xattr
[  485.325103][T15883] EXT4-fs (loop3): Remounting filesystem read-only
[  485.380101][T15902] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5353: couldn't read orphan inode 15 (err -117)
[  485.434903][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  485.515339][T15902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  485.741071][ T3639] EXT4-fs (loop1): unmounting filesystem.
[  485.779556][T15898] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.5350: bad orphan inode 8192
[  485.873480][T15898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  485.925774][T15926] autofs4:pid:15926:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374)
[  485.984052][T15926] autofs4:pid:15926:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  486.190714][T14174] EXT4-fs (loop4): unmounting filesystem.
[  487.181533][ T3689] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  487.456543][    C0] net_ratelimit: 4461 callbacks suppressed
[  487.456564][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  487.475202][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  487.487567][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  487.500202][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  487.512881][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  487.525625][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  487.538030][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  487.550434][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  487.563120][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  487.575906][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  487.729060][T15979] loop0: detected capacity change from 0 to 4096
[  487.885057][T15979] ntfs: volume version 3.1.
[  488.074935][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  488.105010][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  488.147639][T15965] loop4: detected capacity change from 0 to 40427
[  488.160028][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  488.199561][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  488.209688][T15965] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  488.235965][T15965] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  488.255053][ T3689] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  488.285132][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.331287][ T3689] usb 2-1: config 0 descriptor??
[  488.469377][T15965] F2FS-fs (loop4): Found nat_bits in checkpoint
[  488.502155][T15996] loop3: detected capacity change from 0 to 1024
[  488.550914][T15996] EXT4-fs: Ignoring removed orlov option
[  488.556705][T15996] EXT4-fs: Ignoring removed nomblk_io_submit option
[  488.621220][ T3689] hdpvr 2-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³
[  488.621220][ T3689] 4(r¥ý
[  488.621220][ T3689] d×Å2}±dæ~ýýŠÙ­^r¤
[  488.631782][T15996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  488.670153][T15996] System zones: 0-1, 3-36
[  488.688744][T15996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  488.772163][T15965] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  488.782137][T15965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  488.831698][ T3689] hdpvr 2-1:0.0: device init failed
[  488.837025][ T3689] hdpvr: probe of 2-1:0.0 failed with error -12
[  488.911419][ T3689] usb 2-1: USB disconnect, device number 29
[  488.942056][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  489.349836][T16012] loop3: detected capacity change from 0 to 512
[  489.409427][T16012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  489.421524][T16013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5404'.
[  489.469388][T16013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5404'.
[  489.513889][T16012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  489.530101][T16012] ext4 filesystem being mounted at /1133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  489.998462][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  490.143251][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[  490.190082][T16031] netlink: 'syz.2.5413': attribute type 1 has an invalid length.
[  490.300178][ T5326] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  490.350824][T16038] netlink: 'syz.3.5414': attribute type 21 has an invalid length.
[  490.358759][T16038] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5414'.
[  490.710588][ T5326] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  490.727124][ T5326] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  490.798251][ T5326] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  490.840495][ T5326] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  490.910178][ T5326] usb 1-1: config 0 interface 0 has no altsetting 0
[  490.976305][T16061] loop3: detected capacity change from 0 to 256
[  491.111002][ T5326] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  491.151093][ T5326] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  491.191275][ T5326] usb 1-1: Product: syz
[  491.195595][ T5326] usb 1-1: Manufacturer: syz
[  491.241995][ T5326] usb 1-1: SerialNumber: syz
[  491.275963][ T5326] usb 1-1: config 0 descriptor??
[  491.342073][ T5326] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  491.392744][ T5326] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  491.425974][T16075] loop4: detected capacity change from 0 to 256
[  491.718210][T16083] loop3: detected capacity change from 0 to 512
[  491.718864][ T3994] usb 1-1: USB disconnect, device number 31
[  491.751721][ T3994] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  491.761559][   T26] audit: type=1326 audit(1729177894.438:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  491.819062][T16083] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  491.847370][T16083] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  491.857021][   T26] audit: type=1326 audit(1729177894.448:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  491.866858][T16085] loop4: detected capacity change from 0 to 2048
[  491.928647][T16083] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  491.958579][   T26] audit: type=1326 audit(1729177894.448:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78f5d7e033 code=0x7ffc0000
[  491.995691][T16083] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  492.040365][T16083] System zones: 0-2, 18-18, 34-34
[  492.062270][   T26] audit: type=1326 audit(1729177894.448:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f78f5d7cadf code=0x7ffc0000
[  492.093736][T16083] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  492.155536][T16083] EXT4-fs (loop3): 1 truncate cleaned up
[  492.179159][   T26] audit: type=1326 audit(1729177894.538:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f78f5d7e087 code=0x7ffc0000
[  492.212202][T16083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  492.269182][   T26] audit: type=1326 audit(1729177894.538:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78f5d7c990 code=0x7ffc0000
[  492.378141][   T26] audit: type=1326 audit(1729177894.538:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78f5d7dbfb code=0x7ffc0000
[  492.381873][T16083] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 13: comm syz.3.5438: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0
[  492.466833][   T26] audit: type=1326 audit(1729177894.628:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f78f5d7cc8a code=0x7ffc0000
[  492.474302][    C0] net_ratelimit: 3819 callbacks suppressed
[  492.474321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  492.507571][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  492.520078][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  492.532855][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  492.545632][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  492.558262][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  492.570761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  492.580816][   T26] audit: type=1326 audit(1729177894.628:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78f5d7dbfb code=0x7ffc0000
[  492.583669][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  492.618142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  492.618816][T16083] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  492.630534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  492.739917][T16108] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  492.749463][   T26] audit: type=1326 audit(1729177894.628:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.4.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78f5d7dbfb code=0x7ffc0000
[  492.982290][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  493.315226][T16130] netlink: 'syz.2.5459': attribute type 11 has an invalid length.
[  493.364691][T16130] netlink: 'syz.2.5459': attribute type 5 has an invalid length.
[  493.986498][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5472'.
[  494.971380][T16152] loop1: detected capacity change from 0 to 32768
[  495.342934][T16193] netlink: 'syz.1.5492': attribute type 8 has an invalid length.
[  495.430295][ T5326] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  495.821372][ T5326] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  495.837514][ T5326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.922430][ T5326] pwc: Logitech ViewPort AV 100 webcam detected.
[  495.947108][T16209] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5499'.
[  496.371112][ T5326] pwc: send_video_command error -71
[  496.376430][ T5326] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  496.411502][ T5326] Philips webcam: probe of 1-1:127.0 failed with error -71
[  496.460975][ T5326] usb 1-1: USB disconnect, device number 32
[  496.950182][T16242] netlink: 'syz.2.5516': attribute type 32 has an invalid length.
[  497.146929][T16248] netlink: 'syz.2.5519': attribute type 15 has an invalid length.
[  497.480057][    C0] net_ratelimit: 4157 callbacks suppressed
[  497.480079][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  497.498692][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  497.511070][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  497.523520][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  497.553203][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  497.566030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  497.578555][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  497.590985][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  497.603725][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  497.616682][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  497.811425][ T3968] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  498.051600][T16238] loop3: detected capacity change from 0 to 32768
[  498.141587][T16238] read_mapping_page failed!
[  498.146195][T16238] ialloc: diAlloc returned -5!
[  498.896567][    T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!!
[  498.993392][T16264] loop0: detected capacity change from 0 to 32768
[  499.058776][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  499.067134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  499.075590][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  499.083901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  499.092326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  499.100960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  499.127924][ T3994] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  499.557179][ T3994] usb 3-1: Using ep0 maxpacket: 8
[  499.818564][ T3994] usb 3-1: unable to get BOS descriptor or descriptor too short
[  499.844537][T16317] loop4: detected capacity change from 0 to 4096
[  499.845598][T16321] loop3: detected capacity change from 0 to 1024
[  499.863310][T16316] loop1: detected capacity change from 0 to 4096
[  499.935271][ T3994] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  499.955104][ T3994] usb 3-1: config 1 interface 0 has no altsetting 0
[  500.222186][ T3994] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  500.232091][ T3994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.259421][ T3994] usb 3-1: Product: syz
[  500.262852][T16325] loop3: detected capacity change from 0 to 256
[  500.281550][ T3994] usb 3-1: Manufacturer: aኖ剾ﵴ赅�⿤볡瀟ꕌ䂠顧⃲դ鱂ꉆ뛼񙑯塌�鮅�段�མ别䡯嵦⻳ఖﰧ㚵괰蛱㷋苑械倴㊃쟓횽㶀�䊸谵쿡�磠衟ꫡ麕놤秴♲浠ﭥｕ뮶઎鳈䇅鼯婄≀俄穆䔰辋쉰䧶�房ᕉ猳먱�龻�潅�ힽ�⒭ᨓ�
[  500.311488][    C0] vkms_vblank_simulate: vblank timer overrun
[  500.403974][ T3994] usb 3-1: SerialNumber: syz
[  500.463370][T16290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  500.658335][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'.
[  500.859197][ T3994] usb 3-1: USB disconnect, device number 23
[  501.103403][T16344] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20001
[  501.490409][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  501.496770][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  501.850321][ T5326] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  502.350774][T16341] loop4: detected capacity change from 0 to 40427
[  502.417809][T16341] F2FS-fs (loop4): invalid crc value
[  502.451829][ T5326] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  502.470055][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.499836][    C0] net_ratelimit: 4249 callbacks suppressed
[  502.499854][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  502.505390][ T5326] usb 1-1: Product: syz
[  502.506346][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  502.519835][ T5326] usb 1-1: Manufacturer: syz
[  502.522496][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  502.534544][ T5326] usb 1-1: SerialNumber: syz
[  502.538866][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  502.567632][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  502.580402][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  502.593095][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  502.605515][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  502.618075][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  502.630858][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  502.641264][ T5326] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  502.668703][T16341] F2FS-fs (loop4): Found nat_bits in checkpoint
[  502.804046][T16341] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  502.860691][T16341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  503.340353][ T5326] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  503.647960][T16416] netlink: 'syz.4.5593': attribute type 1 has an invalid length.
[  503.860389][ T5323] usb 1-1: USB disconnect, device number 33
[  504.071086][T16428] loop4: detected capacity change from 0 to 1024
[  504.088959][ T3994] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  504.150173][T16428] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  504.176951][T16428] EXT4-fs (loop4): orphan cleanup on readonly fs
[  504.313953][T16428] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.5603: Invalid inode table block 0 in block_group 0
[  504.420061][T16428] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  504.420328][ T5326] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  504.454459][T16428] EXT4-fs error (device loop4): ext4_quota_write:7196: inode #3: comm syz.4.5603: mark_inode_dirty error
[  504.500507][ T5326] ath9k_htc: Failed to initialize the device
[  504.507141][ T5323] usb 1-1: ath9k_htc: USB layer deinitialized
[  504.530594][T16428] Quota error (device loop4): write_blk: dquota write failed
[  504.538105][T16428] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  504.580322][T16428] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.5603: Failed to acquire dquot type 0
[  504.630298][T16428] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.5603: Invalid inode table block 0 in block_group 0
[  504.678983][T16428] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  504.710175][T16428] EXT4-fs error (device loop4): ext4_ext_truncate:4453: inode #15: comm syz.4.5603: mark_inode_dirty error
[  504.740319][T16428] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.5603: Invalid inode table block 0 in block_group 0
[  504.785181][ T3994] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[  504.793535][ T3994] usb 2-1: config 0 has no interface number 0
[  504.810097][ T3994] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  504.830837][T16428] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  504.859580][T16428] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  504.868758][ T3994] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  504.899158][T16428] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.5603: Invalid inode table block 0 in block_group 0
[  505.040543][T16428] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  505.088615][T16428] EXT4-fs error (device loop4): ext4_truncate:4311: inode #15: comm syz.4.5603: mark_inode_dirty error
[  505.141130][T16428] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  505.170676][T16428] EXT4-fs (loop4): 1 truncate cleaned up
[  505.176806][T16428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  505.213237][ T3994] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  505.230033][ T3994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.267997][ T3994] usb 2-1: Product: syz
[  505.289269][ T3994] usb 2-1: Manufacturer: syz
[  505.296075][T16428] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (60729!=0)
[  505.304651][ T3994] usb 2-1: SerialNumber: syz
[  505.334007][ T3994] usb 2-1: config 0 descriptor??
[  505.452863][ T3994] snd-usb-audio: probe of 2-1:0.216 failed with error -2
[  505.508567][T14174] EXT4-fs (loop4): unmounting filesystem.
[  505.561455][ T3968] udevd[3968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  505.727320][ T3990] usb 2-1: USB disconnect, device number 30
[  506.000543][T16481] netlink: 'syz.0.5630': attribute type 10 has an invalid length.
[  506.022381][T16481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5630'.
[  506.057577][T16481] bond0: (slave syz_tun): Releasing backup interface
[  506.098649][T16481] bridge0: port 3(syz_tun) entered blocking state
[  506.126838][T16481] bridge0: port 3(syz_tun) entered disabled state
[  506.147311][T16481] device syz_tun entered promiscuous mode
[  506.980738][T16517] netlink: 'syz.3.5647': attribute type 10 has an invalid length.
[  507.146625][T16517] team0: Port device dummy0 added
[  507.501818][T16530] kAFS: unparsable volume name
[  507.510577][    C0] net_ratelimit: 4052 callbacks suppressed
[  507.510595][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  507.528951][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  507.541590][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  507.554313][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  507.567035][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  507.579428][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  507.591968][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  507.605061][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  507.617746][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  507.630259][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  508.123194][T16505] loop0: detected capacity change from 0 to 32768
[  508.210079][ T5327] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  508.348062][ T3990] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  508.351279][T16505] XFS (loop0): Mounting V5 Filesystem
[  508.438892][   T26] audit: type=1326 audit(2000000002.630:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  508.469413][   T26] audit: type=1326 audit(2000000002.660:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  508.494955][   T26] audit: type=1326 audit(2000000002.690:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  508.519655][   T26] audit: type=1326 audit(2000000002.690:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f5d7dff9 code=0x7ffc0000
[  508.557575][T16505] XFS (loop0): Ending clean mount
[  508.758455][ T3899] XFS (loop0): Unmounting Filesystem
[  508.800632][ T5327] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  508.835232][ T5327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.853734][ T5327] usb 4-1: Product: syz
[  508.858044][ T5327] usb 4-1: Manufacturer: syz
[  508.864526][ T5327] usb 4-1: SerialNumber: syz
[  508.920949][ T5327] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  508.938688][ T3990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  508.948472][ T3990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  509.018338][ T3990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  509.063777][ T3990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  509.102575][ T3990] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  509.140014][ T3990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.190074][ T3990] usb 3-1: config 0 descriptor??
[  509.254805][T16569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5671'.
[  509.359330][T16571] device bond4 entered promiscuous mode
[  509.448251][T16576] loop4: detected capacity change from 0 to 64
[  509.511656][ T3990] hdpvr 3-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³
[  509.511656][ T3990] 4(r¥ý
[  509.511656][ T3990] d×Å2}±dæ~ýýŠÙ­^r¤
[  509.513545][T16578] loop0: detected capacity change from 0 to 256
[  509.621323][ T5323] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  509.638223][T16576] syz.4.5673: attempt to access beyond end of device
[  509.638223][T16576] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64
[  509.647508][T16578] FAT-fs (loop0): Directory bread(block 64) failed
[  509.675151][T16578] FAT-fs (loop0): Directory bread(block 65) failed
[  509.690186][T16578] FAT-fs (loop0): Directory bread(block 66) failed
[  509.697545][T16578] FAT-fs (loop0): Directory bread(block 67) failed
[  509.723468][ T3990] hdpvr 3-1:0.0: device init failed
[  509.726681][T16578] FAT-fs (loop0): Directory bread(block 68) failed
[  509.756256][T16578] FAT-fs (loop0): Directory bread(block 69) failed
[  509.760064][ T3990] hdpvr: probe of 3-1:0.0 failed with error -12
[  509.766828][T16578] FAT-fs (loop0): Directory bread(block 70) failed
[  509.793454][T16578] FAT-fs (loop0): Directory bread(block 71) failed
[  509.808418][T16578] FAT-fs (loop0): Directory bread(block 72) failed
[  509.820289][ T3990] usb 3-1: USB disconnect, device number 24
[  509.878656][T16578] FAT-fs (loop0): Directory bread(block 73) failed
[  509.900200][    C1] usb 4-1: ath9k_htc: invalid pkt_len (ff59)
[  509.918306][T16584] netlink: 'syz.4.5677': attribute type 21 has an invalid length.
[  509.955672][T16584] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5677'.
[  510.007857][   T26] audit: type=1800 audit(2000000004.200:127): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5674" name="bus" dev="loop0" ino=1048669 res=0 errno=0
[  510.097801][   T27] usb 4-1: USB disconnect, device number 20
[  510.730155][ T5323] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  510.737217][ T5323] ath9k_htc: Failed to initialize the device
[  510.768854][   T27] usb 4-1: ath9k_htc: USB layer deinitialized
[  511.293860][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5696'.
[  511.945037][ T3990] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  512.359381][ T3990] usb 5-1: Using ep0 maxpacket: 16
[  512.520084][    C0] net_ratelimit: 5424 callbacks suppressed
[  512.520104][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.538421][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.550942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.563270][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.575671][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  512.588130][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.600972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  512.613657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.625917][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.638161][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  512.915491][ T3990] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  512.930008][ T3990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.970080][ T3990] usb 5-1: Product: syz
[  512.974399][ T3990] usb 5-1: Manufacturer: syz
[  512.999418][ T3990] usb 5-1: SerialNumber: syz
[  513.023500][ T3990] r8152-cfgselector 5-1: config 0 descriptor??
[  513.235757][T16600] loop1: detected capacity change from 0 to 65536
[  513.448802][T16600] XFS (loop1): Mounting V5 Filesystem
[  513.560077][ T3990] r8152-cfgselector 5-1: Unknown version 0x0000
[  513.566553][ T3990] r8152-cfgselector 5-1: bad CDC descriptors
[  513.618728][ T3990] r8152-cfgselector 5-1: Unknown version 0x0000
[  513.664626][ T3990] r8152-cfgselector 5-1: USB disconnect, device number 33
[  513.791077][T16600] XFS (loop1): Ending clean mount
[  513.795394][T16706] netlink: 'syz.3.5733': attribute type 8 has an invalid length.
[  513.824354][T16600] XFS (loop1): Quotacheck needed: Please wait.
[  513.980276][T16600] XFS (loop1): Quotacheck: Done.
[  514.123302][ T3639] XFS (loop1): Unmounting Filesystem
[  514.294213][T16718] loop0: detected capacity change from 0 to 512
[  514.438026][T16718] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  514.495781][T16718] ext4 filesystem being mounted at /1184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.584003][T16718] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5738: bg 0: block 145: padding at end of block bitmap is not set
[  514.781788][ T3899] EXT4-fs (loop0): unmounting filesystem.
[  515.004746][T16739] loop0: detected capacity change from 0 to 2048
[  515.061964][T16739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  515.527636][T16757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5757'.
[  515.582095][T16752] loop4: detected capacity change from 0 to 4096
[  515.638375][T16752] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  515.733971][T16752] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  515.755471][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5760'.
[  515.826164][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5760'.
[  516.767950][T16795] loop0: detected capacity change from 0 to 2048
[  516.811422][T16795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.889221][T16801] overlayfs: missing 'lowerdir'
[  517.261623][T16810] loop4: detected capacity change from 0 to 1024
[  517.304635][T16810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  517.550941][    C0] net_ratelimit: 5811 callbacks suppressed
[  517.550964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.569644][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  517.582333][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.596996][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.609394][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.621741][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.634106][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.646449][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  517.659246][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  517.671927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  517.700238][T16810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  517.881055][T14174] EXT4-fs (loop4): unmounting filesystem.
[  518.440287][T16859] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5805'.
[  518.552154][T16862] overlayfs: failed to resolve './file1': -2
[  519.007099][T16834] loop0: detected capacity change from 0 to 32768
[  519.041822][T16834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5793 (16834)
[  519.140159][T16834] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.220486][T16834] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  519.277992][T16834] BTRFS info (device loop0): using free space tree
[  519.665963][T16834] BTRFS info (device loop0): enabling ssd optimizations
[  519.933498][ T3899] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  520.902680][T16943] loop4: detected capacity change from 0 to 4096
[  520.945909][T16943] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  521.629736][T16975] x_tables: duplicate entry at hook 3
[  521.889683][T16986] netlink: 'syz.4.5859': attribute type 13 has an invalid length.
[  521.913830][T16990] loop1: detected capacity change from 0 to 256
[  521.917698][T16989] loop3: detected capacity change from 0 to 512
[  521.966876][T16989] EXT4-fs: Ignoring removed bh option
[  521.981046][T16986] gretap0: refused to change device tx_queue_len
[  522.003453][T16992] netlink: 'syz.0.5862': attribute type 1 has an invalid length.
[  522.111560][T16989] EXT4-fs (loop3): orphan cleanup on readonly fs
[  522.150270][T16989] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  522.182755][T16989] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5858: invalid indirect mapped block 8 (level 2)
[  522.245183][T16997] loop0: detected capacity change from 0 to 256
[  522.268102][ T3689] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  522.308374][T16989] EXT4-fs (loop3): Remounting filesystem read-only
[  522.319364][T16989] EXT4-fs (loop3): 1 truncate cleaned up
[  522.331141][T16997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcd43d30d, utbl_chksum : 0xe619d30d)
[  522.353327][T16989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  522.475662][T16997] syz.0.5864: attempt to access beyond end of device
[  522.475662][T16997] loop0: rw=524288, sector=34359738496, nr_sectors = 1 limit=256
[  522.511467][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  522.560109][    C0] net_ratelimit: 4564 callbacks suppressed
[  522.560131][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.572200][T16997] syz.0.5864: attempt to access beyond end of device
[  522.572200][T16997] loop0: rw=0, sector=34359738496, nr_sectors = 1 limit=256
[  522.578234][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.604291][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  522.616727][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.629632][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  522.642363][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.644303][   T26] audit: type=1800 audit(2000000016.840:128): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5864" name="file1" dev="loop0" ino=1048671 res=0 errno=0
[  522.654610][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.654808][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.674834][    C1] vkms_vblank_simulate: vblank timer overrun
[  522.706018][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.718317][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  522.737054][T17007] netlink: 'syz.1.5868': attribute type 10 has an invalid length.
[  522.755317][T17007] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5868'.
[  522.775596][T17007] device bridge0 entered promiscuous mode
[  522.906431][ T3689] usb 3-1: Using ep0 maxpacket: 16
[  522.963660][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5871'.
[  523.125048][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  523.144497][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  523.263672][T17024] loop3: detected capacity change from 0 to 256
[  523.318158][T17024] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  523.457804][ T3689] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47
[  523.483551][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.503490][ T3689] usb 3-1: Product: syz
[  523.510260][ T3689] usb 3-1: Manufacturer: syz
[  523.514985][ T3689] usb 3-1: SerialNumber: syz
[  523.538501][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5882'.
[  523.567989][ T3689] usb 3-1: config 0 descriptor??
[  523.666669][T17037] netlink: 'syz.3.5884': attribute type 5 has an invalid length.
[  523.707089][T17037] netlink: 'syz.3.5884': attribute type 11 has an invalid length.
[  523.969882][ T5106] usb 3-1: USB disconnect, device number 25
[  524.254033][T17051] loop3: detected capacity change from 0 to 4096
[  524.290890][T17051] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  524.407990][T17062] netlink: 'syz.1.5893': attribute type 1 has an invalid length.
[  524.444193][T17063] loop0: detected capacity change from 0 to 512
[  524.464747][T17051] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  524.483884][T17051] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  524.535272][T17051] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  524.557761][T17051] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  524.573487][T17063] EXT4-fs error (device loop0): __ext4_fill_super:5400: inode #2: comm syz.0.5894: casefold flag without casefold feature
[  524.594639][T17063] EXT4-fs (loop0): get root inode failed
[  524.602309][T17063] EXT4-fs (loop0): mount failed
[  524.627202][T17051] ntfs: volume version 3.1.
[  524.635387][T17051] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  524.646255][T17051] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  524.775270][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'.
[  524.778060][T17051] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set cp932 contains characters that cannot be converted to Unicode.
[  524.850125][T17051] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode.
[  525.477825][T17086] loop4: detected capacity change from 0 to 4096
[  525.520037][T17086] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  525.993443][T17110] netlink: 'syz.3.5916': attribute type 14 has an invalid length.
[  526.043027][T17112] netlink: 'syz.2.5917': attribute type 1 has an invalid length.
[  526.098769][T17112] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5917'.
[  526.677217][T17129] kAFS: unparsable volume name
[  526.937494][ T5106] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  527.156717][T17114] loop1: detected capacity change from 0 to 32768
[  527.216632][T17114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5918 (17114)
[  527.267683][T17114] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  527.288576][T17114] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  527.313466][T17114] BTRFS info (device loop1): using free space tree
[  527.570367][    C0] net_ratelimit: 5212 callbacks suppressed
[  527.570388][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.588777][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.601150][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.613435][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.625860][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  527.638400][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.651101][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  527.663791][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.676073][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.688401][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  527.708371][T17114] BTRFS info (device loop1): enabling ssd optimizations
[  527.807379][ T3639] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  528.069088][T17167] loop3: detected capacity change from 0 to 4096
[  528.101814][T17167] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  528.114667][T17167] ntfs3: loop3: Failed to load $MFTMirr.
[  528.193867][ T5106] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  528.203298][ T5106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.235625][ T5106] usb 5-1: Product: syz
[  528.239863][ T5106] usb 5-1: Manufacturer: syz
[  528.252724][ T5106] usb 5-1: SerialNumber: syz
[  528.293622][T17167] loop3: detected capacity change from 0 to 4096
[  528.321407][T17167] ntfs: (device loop3): parse_options(): Unrecognized mount option discard.
[  528.322597][ T5106] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  528.361871][T17167] ntfs: (device loop3): parse_options(): Unrecognized mount option sparse.
[  528.382223][T17167] ntfs: (device loop3): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  528.395641][T17167] ntfs: (device loop3): parse_options(): Unrecognized mount option nohidden.
[  528.405264][T17167] ntfs: (device loop3): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  528.427487][T17167] ntfs: (device loop3): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  528.451581][T17167] ntfs: (device loop3): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  528.474203][T17167] ntfs: (device loop3): parse_options(): Unrecognized mount option .
[  529.204328][T17173] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  529.289313][T17195] netlink: 'syz.0.5948': attribute type 4 has an invalid length.
[  529.371856][ T3992] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  529.576032][T17173] usb 3-1: Using ep0 maxpacket: 8
[  529.660114][ T3684] usb 5-1: USB disconnect, device number 34
[  529.724367][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5954'.
[  529.725629][T17209] SET target dimension over the limit!
[  529.808221][T17173] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  529.820009][T17173] usb 3-1: config 0 has no interface number 0
[  529.826188][T17173] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  529.855666][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5957'.
[  529.890313][T17173] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  529.928186][T17173] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  529.973459][T17217] loop3: detected capacity change from 0 to 64
[  529.976494][T17173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.034468][T17217] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  530.044509][T17173] usb 3-1: config 0 descriptor??
[  530.167061][T17173] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  530.424356][ T3992] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  530.449698][T17173] usb 3-1: USB disconnect, device number 26
[  530.457489][ T3992] ath9k_htc: Failed to initialize the device
[  530.480565][ T3684] usb 5-1: ath9k_htc: USB layer deinitialized
[  531.071440][ T3994] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  531.460478][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5982'.
[  531.578319][ T3992] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  531.678735][ T3994] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  531.885459][T17275] netlink: 'syz.3.5987': attribute type 13 has an invalid length.
[  531.945557][ T3992] usb 3-1: Using ep0 maxpacket: 16
[  531.967552][ T3994] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  531.987141][ T3994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.014316][ T3994] usb 2-1: Product: syz
[  532.018553][ T3994] usb 2-1: Manufacturer: syz
[  532.043123][ T3994] usb 2-1: SerialNumber: syz
[  532.120775][ T3994] usb 2-1: bad CDC descriptors
[  532.129027][ T3992] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  532.170050][ T3992] usb 3-1: config 0 has no interface number 0
[  532.176273][ T3992] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  532.308486][T17282] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5991'.
[  532.390659][ T3689] usb 2-1: USB disconnect, device number 31
[  532.436791][ T3992] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  532.458438][ T3992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.484035][ T3992] usb 3-1: Product: syz
[  532.504175][ T3992] usb 3-1: Manufacturer: syz
[  532.529695][ T3992] usb 3-1: SerialNumber: syz
[  532.550515][ T3992] usb 3-1: config 0 descriptor??
[  532.599533][    C0] net_ratelimit: 6534 callbacks suppressed
[  532.599558][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.617948][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.630399][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.642764][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.655048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.667446][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  532.680010][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.692698][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  532.705456][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  532.717817][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.225949][ T3992] usbtouchscreen: probe of 3-1:0.214 failed with error -71
[  533.282225][ T3992] usb 3-1: USB disconnect, device number 27
[  533.423282][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'.
[  533.588596][T17311] loop1: detected capacity change from 0 to 256
[  533.805600][T17311] FAT-fs (loop1): Directory bread(block 64) failed
[  533.832748][T17311] FAT-fs (loop1): Directory bread(block 65) failed
[  533.839442][T17311] FAT-fs (loop1): Directory bread(block 66) failed
[  533.896317][T17311] FAT-fs (loop1): Directory bread(block 67) failed
[  533.939033][T17311] FAT-fs (loop1): Directory bread(block 68) failed
[  533.976239][T17311] FAT-fs (loop1): Directory bread(block 69) failed
[  533.983631][T17324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6010'.
[  534.010149][T17311] FAT-fs (loop1): Directory bread(block 70) failed
[  534.016773][T17311] FAT-fs (loop1): Directory bread(block 71) failed
[  534.030065][T17324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6010'.
[  534.080149][T17311] FAT-fs (loop1): Directory bread(block 72) failed
[  534.109302][T17311] FAT-fs (loop1): Directory bread(block 73) failed
[  534.676608][ T8271] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  535.042599][T17352] netlink: 'syz.1.6025': attribute type 49 has an invalid length.
[  535.080738][ T8271] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  535.106541][ T8271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.137519][T17356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6027'.
[  535.155183][ T8271] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  535.189991][ T8271] usb 4-1: config 1 has no interface number 1
[  535.190566][T17325] loop4: detected capacity change from 0 to 32768
[  535.252131][T17325] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.6012 (17325)
[  535.269442][T17358] usb usb7: usbfs: process 17358 (syz.1.6028) did not claim interface 7 before use
[  535.319757][T17325] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  535.348351][T17325] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  535.389008][T17325] BTRFS info (device loop4): force zlib compression, level 3
[  535.403681][T17361] loop0: detected capacity change from 0 to 8
[  535.428042][T17361] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  535.454582][T17325] BTRFS info (device loop4): force clearing of disk cache
[  535.481531][T17325] BTRFS info (device loop4): setting nodatasum
[  535.490434][ T8271] usb 4-1: string descriptor 0 read error: -22
[  535.496752][ T8271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  535.511510][T17325] BTRFS info (device loop4): allowing degraded mounts
[  535.518353][T17325] BTRFS info (device loop4): enabling disk space caching
[  535.519753][T17361] cramfs: Error -3 while decompressing!
[  535.541548][ T3994] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  535.559650][T17325] BTRFS info (device loop4): disk space caching is enabled
[  535.564461][ T8271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.612079][T17361] cramfs: ffffffff974c4568(26)->ffff888050415000(4096)
[  535.639768][T17361] cramfs: Error -3 while decompressing!
[  535.646225][T17361] cramfs: ffffffff974c4582(26)->ffff88804869d000(4096)
[  535.667493][T17361] cramfs: Error -3 while decompressing!
[  535.683313][T17361] cramfs: ffffffff974c4568(26)->ffff888050415000(4096)
[  535.967741][T17325] BTRFS info (device loop4): rebuilding free space tree
[  536.024552][T17325] BTRFS info (device loop4): disabling free space tree
[  536.033499][T17325] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  536.059358][ T3994] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  536.079471][ T3994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.087807][T17325] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  536.122057][ T3994] usb 3-1: config 0 descriptor??
[  536.147067][ T8271] usb 4-1: USB disconnect, device number 21
[  536.218405][ T3994] gspca_main: spca508-2.14.0 probing 8086:0110
[  536.244495][T17325] BTRFS info (device loop4): balance: start -sdrange=0..6,vrange=0..0,limit=2..31841
[  536.273471][T17325] BTRFS info (device loop4): balance: ended with status: 0
[  536.469463][T14174] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  536.669356][ T3994] gspca_spca508: reg_read err -71
[  536.677131][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'.
[  536.707033][ T3994] gspca_spca508: reg_read err -71
[  536.775643][ T3994] gspca_spca508: reg_read err -71
[  536.811692][ T3994] gspca_spca508: reg_read err -71
[  536.890049][ T3994] gspca_spca508: reg write: error -71
[  536.895657][ T3994] spca508: probe of 3-1:0.0 failed with error -71
[  536.963704][ T3994] usb 3-1: USB disconnect, device number 28
[  536.976887][T17401] loop3: detected capacity change from 0 to 256
[  537.056147][T17403] netlink: 'syz.1.6042': attribute type 11 has an invalid length.
[  537.124641][T17403] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6042'.
[  537.496894][T17392] loop0: detected capacity change from 0 to 32768
[  537.600409][    C0] net_ratelimit: 5470 callbacks suppressed
[  537.600433][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.618711][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.631057][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.644216][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.656540][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.669097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  537.681603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.694462][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  537.707160][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.720185][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  537.751817][T17412] loop4: detected capacity change from 0 to 256
[  537.993773][T17412] FAT-fs (loop4): Directory bread(block 64) failed
[  538.018250][T17412] FAT-fs (loop4): Directory bread(block 65) failed
[  538.038402][T17412] FAT-fs (loop4): Directory bread(block 66) failed
[  538.066583][T17412] FAT-fs (loop4): Directory bread(block 67) failed
[  538.090446][T17412] FAT-fs (loop4): Directory bread(block 68) failed
[  538.130238][T17412] FAT-fs (loop4): Directory bread(block 69) failed
[  538.137018][T17412] FAT-fs (loop4): Directory bread(block 70) failed
[  538.181811][T17412] FAT-fs (loop4): Directory bread(block 71) failed
[  538.188516][T17412] FAT-fs (loop4): Directory bread(block 72) failed
[  538.230149][ T3917] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  538.244028][T17412] FAT-fs (loop4): Directory bread(block 73) failed
[  538.780262][ T3917] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  538.819495][ T3917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.820211][T17445] loop4: detected capacity change from 0 to 2048
[  538.859712][ T3917] usb 4-1: Product: syz
[  538.871002][ T3917] usb 4-1: Manufacturer: syz
[  538.900097][ T3917] usb 4-1: SerialNumber: syz
[  538.961379][ T3917] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  539.014744][T17454] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  539.017314][T17453] x_tables: ip_tables: icmp match: only valid for protocol 1
[  539.116251][T17454] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  539.134479][T17454] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  539.165565][T17454] Remounting filesystem read-only
[  539.290557][T14174] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  539.299495][T14174] NILFS (loop4): discard dirty page: offset=0, ino=2
[  539.325227][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6070'.
[  539.345013][T17460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6070'.
[  539.364212][T17460] netlink: 'syz.0.6070': attribute type 6 has an invalid length.
[  539.370119][T14174] NILFS (loop4): discard dirty block: blocknr=18, size=1024
[  539.374570][ T3652] Bluetooth: hci1: command 0x0406 tx timeout
[  539.405008][T17464] loop1: detected capacity change from 0 to 64
[  539.425774][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.468484][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.487716][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.540311][T14174] NILFS (loop4): discard dirty page: offset=0, ino=6
[  539.570240][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.610962][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.620018][T14174] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  539.627484][T14174] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  539.660276][ T3917] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  539.724127][T14174] NILFS (loop4): discard dirty page: offset=0, ino=5
[  539.748723][T14174] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  539.792832][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.820014][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.867883][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  539.905055][T14174] NILFS (loop4): discard dirty page: offset=0, ino=4
[  539.911888][T14174] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  539.966426][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  540.004213][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  540.040026][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  540.109926][T14174] NILFS (loop4): discard dirty page: offset=0, ino=3
[  540.116808][T14174] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  540.118237][   T27] usb 4-1: USB disconnect, device number 22
[  540.130015][T14174] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  540.153548][T14174] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  540.169132][T17173] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  540.182461][T14174] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  540.495613][T17173] usb 2-1: Using ep0 maxpacket: 32
[  540.619354][T17494] loop0: detected capacity change from 0 to 256
[  540.645207][T17173] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  540.653767][T17173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  540.694079][T17173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  540.730396][ T3917] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  540.737464][ T3917] ath9k_htc: Failed to initialize the device
[  540.756434][ T3684] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  540.800681][   T27] usb 4-1: ath9k_htc: USB layer deinitialized
[  540.932589][T17502] [U] 
[  540.936088][T17502] [U] 
[  540.938820][T17502] [U] 
[  540.941554][T17502] [U] 
[  540.968367][T17173] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  540.980280][T17173] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  541.006233][T17173] usb 2-1: Product: syz
[  541.023421][T17173] usb 2-1: Manufacturer: syz
[  541.032104][T17502] [U] 
[  541.033677][T17173] usb 2-1: SerialNumber: syz
[  541.034838][T17502] [U] 
[  541.042414][T17502] [U] 
[  541.045136][T17502] [U] 
[  541.061960][T17173] usb 2-1: config 0 descriptor??
[  541.124706][T17173] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  541.134247][ T3684] usb 3-1: Using ep0 maxpacket: 8
[  541.142304][T17173] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  541.167371][T17502] [U] 
[  541.170138][T17502] [U] 
[  541.172864][T17502] [U] 
[  541.233346][T17501] [U] 
[  541.283129][ T3684] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc
[  541.300009][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.347408][T17508] loop4: detected capacity change from 0 to 4096
[  541.365078][ T3684] usb 3-1: config 0 descriptor??
[  541.393354][T17474] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90
[  541.445618][ T3684] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  541.465578][T17173] usb 2-1: USB disconnect, device number 32
[  541.475813][T17173] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  541.494241][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84
[  541.520794][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  541.537666][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82
[  541.554207][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  541.570739][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  541.599326][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  541.624316][ T3684] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  541.677265][ T3684] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  541.743317][ T3684] usb 3-1: USB disconnect, device number 29
[  541.766296][ T3684] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  541.772553][T17518] IPv6: sit2: Disabled Multicast RS
[  541.810839][ T3684] keyspan 3-1:0.0: device disconnected
[  541.937560][T17520] sctp: [Deprecated]: syz.3.6099 (pid 17520) Use of int in maxseg socket option.
[  541.937560][T17520] Use struct sctp_assoc_value instead
[  542.247687][T17529] overlayfs: conflicting options: userxattr,metacopy=on
[  542.426176][T17538] netlink: 'syz.4.6108': attribute type 10 has an invalid length.
[  542.610138][    C0] net_ratelimit: 5536 callbacks suppressed
[  542.610160][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.628561][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.641038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  542.653528][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.665929][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  542.678739][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  542.691580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.704009][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.716384][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  542.728797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.142923][T17559] loop3: detected capacity change from 0 to 1024
[  543.235742][T17559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  543.357419][T17565] loop4: detected capacity change from 0 to 2048
[  543.399657][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  543.540083][T17565] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  544.008406][T17578] libceph: resolve '0' (ret=-3): failed
[  544.439389][T17550] loop0: detected capacity change from 0 to 32768
[  544.544556][T17550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  544.556183][T17594] netlink: 'syz.2.6134': attribute type 3 has an invalid length.
[  544.570643][T17550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  544.597280][T17596] loop1: detected capacity change from 0 to 512
[  544.657119][T17550] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  544.660780][T17596] EXT4-fs: Ignoring removed bh option
[  544.702926][   T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  544.709765][   T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  544.750095][T17596] EXT4-fs (loop1): orphan cleanup on readonly fs
[  544.787814][T17596] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  544.806010][T17596] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6135: invalid indirect mapped block 8 (level 2)
[  544.875327][T17596] EXT4-fs (loop1): Remounting filesystem read-only
[  544.898656][T17596] EXT4-fs (loop1): 1 truncate cleaned up
[  544.904245][   T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 194ms
[  544.923373][T17596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  544.943238][   T27] gfs2: fsid=syz:syz.0: jid=0: Done
[  544.971027][T17550] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  545.117028][ T3639] EXT4-fs (loop1): unmounting filesystem.
[  545.571355][T17622] loop3: detected capacity change from 0 to 64
[  546.865972][T17669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6169'.
[  547.240708][ T3990] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  547.364604][T17686] loop3: detected capacity change from 0 to 64
[  547.647592][    C0] net_ratelimit: 5174 callbacks suppressed
[  547.647613][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.665915][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.678283][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  547.690740][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.703118][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  547.715711][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  547.728321][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.732659][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6182'.
[  547.740583][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.761794][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  547.774695][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.123810][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6188'.
[  548.167216][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6188'.
[  548.223006][ T3990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.243456][ T3990] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  548.280000][ T3990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.331746][ T3990] usb 2-1: config 0 descriptor??
[  548.430891][ T3990] rndis_wlan: probe of 2-1:0.0 failed with error -22
[  548.438150][ T3990] rndis_host: probe of 2-1:0.0 failed with error -22
[  548.462875][ T3990] cdc_acm 2-1:0.0: Control and data interfaces are not separated!
[  548.501574][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6190'.
[  548.510394][ T3990] cdc_acm 2-1:0.0: This needs exactly 3 endpoints
[  548.516985][ T3990] cdc_acm: probe of 2-1:0.0 failed with error -22
[  548.585801][T17674] loop0: detected capacity change from 0 to 32768
[  548.642432][T17674] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  548.690275][T17674] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  548.717537][T17674] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  548.723602][   T14] usb 2-1: USB disconnect, device number 33
[  548.778732][ T3917] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  548.787463][ T3917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  548.993030][ T3917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms
[  549.049685][ T3917] gfs2: fsid=syz:syz.0: jid=0: Done
[  549.065757][T17674] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  549.682999][T17744] netlink: 'syz.0.6205': attribute type 1 has an invalid length.
[  549.730090][T17744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6205'.
[  550.028361][T17757] loop4: detected capacity change from 0 to 1024
[  550.206982][T17765] loop0: detected capacity change from 0 to 256
[  550.255946][T17765] exfat: Deprecated parameter 'utf8'
[  550.282685][T17765] exfat: Deprecated parameter 'utf8'
[  550.325209][T17765] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  550.810746][   T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  551.060331][   T27] usb 4-1: Using ep0 maxpacket: 32
[  551.101731][T17795] loop4: detected capacity change from 0 to 8
[  551.180369][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  551.210208][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  551.270176][   T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  551.320853][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.375097][   T27] usb 4-1: config 0 descriptor??
[  551.430506][T17775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  551.451890][   T27] hub 4-1:0.0: USB hub found
[  551.647140][T17811] netlink: 'syz.1.6239': attribute type 3 has an invalid length.
[  551.680294][   T27] hub 4-1:0.0: 2 ports detected
[  551.890526][   T27] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  551.897153][   T27] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  552.060139][   T27] usbhid 4-1:0.0: can't add hid device: -71
[  552.066314][   T27] usbhid: probe of 4-1:0.0 failed with error -71
[  552.150881][   T27] usb 4-1: USB disconnect, device number 23
[  552.448493][T17809] loop0: detected capacity change from 0 to 32768
[  552.513567][T17809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6236 (17809)
[  552.656497][    C0] net_ratelimit: 4614 callbacks suppressed
[  552.656519][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.674905][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.687923][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.700244][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.712665][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  552.725093][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.737570][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  552.750295][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  552.763007][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.775739][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.792928][T17809] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  552.831463][T17809] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  552.870071][T17809] BTRFS info (device loop0): using free space tree
[  552.975457][T17853] loop3: detected capacity change from 0 to 64
[  553.083919][T17809] BTRFS info (device loop0): enabling ssd optimizations
[  553.245423][ T3899] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  553.438492][   T14] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  553.615797][T17832] loop4: detected capacity change from 0 to 32768
[  553.898085][   T14] usb 3-1: Using ep0 maxpacket: 16
[  554.104132][   T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  554.120013][   T14] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  554.148820][   T14] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  554.186037][   T14] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  554.225448][   T14] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  554.246861][T17864] loop1: detected capacity change from 0 to 32768
[  554.263853][   T14] usb 3-1: config 1 interface 0 has no altsetting 0
[  554.275867][   T14] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  554.329420][T17864] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  554.329420][T17864] 
[  554.350233][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.396620][T17864] ERROR: (device loop1): remounting filesystem as read-only
[  554.461456][   T14] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  554.710875][   T14] scsi host1: usb-storage 3-1:1.0
[  554.814138][T17895] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  554.847934][T17895] overlayfs: missing 'lowerdir'
[  554.931323][   T14] usb 3-1: USB disconnect, device number 30
[  555.398818][T17913] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  555.450278][T17913] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  555.539594][T17917] loop4: detected capacity change from 0 to 1024
[  555.717916][T17922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6282'.
[  555.739208][T17917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  555.802122][T17917] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.6280: inode #12: comm syz.4.6280: iget: illegal inode #
[  556.049090][T14174] EXT4-fs (loop4): unmounting filesystem.
[  556.149291][T17941] loop1: detected capacity change from 0 to 64
[  556.185028][T17942] loop4: detected capacity change from 0 to 256
[  556.329834][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6293'.
[  556.573277][T17942] FAT-fs (loop4): Directory bread(block 64) failed
[  556.600051][T17942] FAT-fs (loop4): Directory bread(block 65) failed
[  556.630156][T17942] FAT-fs (loop4): Directory bread(block 66) failed
[  556.636756][T17942] FAT-fs (loop4): Directory bread(block 67) failed
[  556.714230][T17942] FAT-fs (loop4): Directory bread(block 68) failed
[  556.736665][T17942] FAT-fs (loop4): Directory bread(block 69) failed
[  556.763190][T17942] FAT-fs (loop4): Directory bread(block 70) failed
[  556.817051][T17942] FAT-fs (loop4): Directory bread(block 71) failed
[  556.830649][T17942] FAT-fs (loop4): Directory bread(block 72) failed
[  556.853525][T17942] FAT-fs (loop4): Directory bread(block 73) failed
[  556.880041][ T3917] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  557.170395][ T3917] usb 4-1: Using ep0 maxpacket: 16
[  557.366821][T17976] wlan0 speed is unknown, defaulting to 1000
[  557.417508][T17976] vcan0 speed is unknown, defaulting to 1000
[  557.490314][ T3917] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  557.509673][ T3917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.535173][ T3917] usb 4-1: Product: syz
[  557.539484][ T3917] usb 4-1: Manufacturer: syz
[  557.560142][ T3917] usb 4-1: SerialNumber: syz
[  557.593673][ T3917] usb 4-1: config 0 descriptor??
[  557.634009][ T3917] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  557.689014][    C0] net_ratelimit: 3657 callbacks suppressed
[  557.689034][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  557.707735][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.720198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.732774][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.745438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.757721][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.770090][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.783115][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.795404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  557.807781][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  557.846667][T17984] loop1: detected capacity change from 0 to 256
[  557.860305][ T3917] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  557.868489][ T3917] visor: probe of 4-1:0.0 failed with error -5
[  558.091023][ T3917] usb 4-1: USB disconnect, device number 24
[  558.150692][T17993] loop0: detected capacity change from 0 to 64
[  558.225708][T17984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  558.913122][T18015] loop1: detected capacity change from 0 to 256
[  558.925658][T18013] loop3: detected capacity change from 0 to 4096
[  558.952571][T18017] 9pnet_virtio: no channels available for device syz
[  558.980060][T18013] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  559.040153][T18015] FAT-fs (loop1): Directory bread(block 64) failed
[  559.046926][T18015] FAT-fs (loop1): Directory bread(block 65) failed
[  559.070158][T18015] FAT-fs (loop1): Directory bread(block 66) failed
[  559.076764][T18015] FAT-fs (loop1): Directory bread(block 67) failed
[  559.158559][T18015] FAT-fs (loop1): Directory bread(block 68) failed
[  559.165241][T18015] FAT-fs (loop1): Directory bread(block 69) failed
[  559.167789][T18013] ntfs3: loop3: failed to convert "c46c" to euc-jp
[  559.220188][T18015] FAT-fs (loop1): Directory bread(block 70) failed
[  559.247239][T18015] FAT-fs (loop1): Directory bread(block 71) failed
[  559.277416][T18015] FAT-fs (loop1): Directory bread(block 72) failed
[  559.301803][T18015] FAT-fs (loop1): Directory bread(block 73) failed
[  559.370107][T18019] loop4: detected capacity change from 0 to 4096
[  559.410223][T18019] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  560.348206][T18049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6342'.
[  560.384265][   T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  560.490337][ T3917] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[  560.503471][T18051] loop4: detected capacity change from 0 to 256
[  560.606576][T18027] loop3: detected capacity change from 0 to 32768
[  560.617791][T17173] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  560.699820][T18027] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  560.726045][T18027] (syz.3.6331,18027,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  560.775618][   T14] usb 3-1: Using ep0 maxpacket: 32
[  560.776812][ T3641] ocfs2: Unmounting device (7,3) on (node local)
[  560.973251][T17173] usb 2-1: Using ep0 maxpacket: 16
[  561.007173][ T3917] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  561.031815][ T3917] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8
[  561.047565][T18057] loop4: detected capacity change from 0 to 4096
[  561.070032][ T3917] usb 1-1: config 1 interface 0 has no altsetting 0
[  561.093574][T18057] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  561.160800][T18057] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  561.172210][T18057] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  561.189464][   T14] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0
[  561.215341][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.223558][T18057] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  561.237228][   T14] usb 3-1: Product: syz
[  561.250236][   T14] usb 3-1: Manufacturer: syz
[  561.254897][   T14] usb 3-1: SerialNumber: syz
[  561.284658][T18057] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  561.301585][   T14] usb 3-1: config 0 descriptor??
[  561.354560][   T14] pwc: Visionite VCS-UC300 USB webcam detected.
[  561.370721][ T3917] usb 1-1: string descriptor 0 read error: -22
[  561.377157][ T3917] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.40
[  561.392404][T17173] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[  561.407589][ T3917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.407714][T17173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.441263][T17173] usb 2-1: Product: syz
[  561.445500][T17173] usb 2-1: Manufacturer: syz
[  561.470333][T18046] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  561.473306][T17173] usb 2-1: SerialNumber: syz
[  561.477636][T18046] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  561.499323][T17173] usb 2-1: config 0 descriptor??
[  561.601264][T17173] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  561.614861][T18057] ntfs: volume version 3.1.
[  561.633269][   T14] pwc: Failed to set LED on/off time (-71)
[  561.657671][ T3631] udevd[3631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  561.682327][   T14] pwc: send_video_command error -71
[  561.688008][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  561.705327][   T14] Philips webcam: probe of 3-1:0.0 failed with error -71
[  561.712628][T18057] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota.
[  561.731440][T18057] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  561.765235][   T14] usb 3-1: USB disconnect, device number 31
[  561.780613][T18046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.831508][T18046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.862937][T17173] usb 2-1: USB disconnect, device number 34
[  561.925648][T18057] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set cp932 contains characters that cannot be converted to Unicode.
[  561.961042][ T3917] usbhid 1-1:1.0: can't add hid device: -71
[  561.969209][ T3917] usbhid: probe of 1-1:1.0 failed with error -71
[  561.972367][T18057] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode.
[  562.005339][ T3917] usb 1-1: USB disconnect, device number 34
[  562.661005][T18087] loop0: detected capacity change from 0 to 1024
[  562.699332][    C0] net_ratelimit: 5190 callbacks suppressed
[  562.699352][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  562.718276][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.730941][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.743586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.756019][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.768391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.781411][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.793830][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.806265][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  562.818816][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  562.897278][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  562.905975][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  563.199099][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6368'.
[  563.217304][   T14] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  563.249144][T18099] loop0: detected capacity change from 0 to 4096
[  563.294152][T18099] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  563.462318][T18099] ntfs: volume version 3.1.
[  563.563365][   T14] usb 5-1: Using ep0 maxpacket: 16
[  563.739175][   T14] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  563.756251][   T14] usb 5-1: config 0 has no interface number 0
[  563.776548][   T14] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  564.048595][   T14] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  564.068090][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.098783][   T14] usb 5-1: Product: syz
[  564.125093][   T14] usb 5-1: Manufacturer: syz
[  564.129762][   T14] usb 5-1: SerialNumber: syz
[  564.137228][T18131] loop1: detected capacity change from 0 to 2048
[  564.179609][T18131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  564.203889][   T14] usb 5-1: config 0 descriptor??
[  564.252456][T18136] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6385'.
[  564.285392][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6384'.
[  564.650980][T18148] loop0: detected capacity change from 0 to 2048
[  564.685412][T18148] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  564.731021][   T14] usbtouchscreen: probe of 5-1:0.214 failed with error -71
[  564.769667][   T14] usb 5-1: USB disconnect, device number 35
[  564.970163][ T3652] Bluetooth: hci5: command 0x0406 tx timeout
[  565.203203][T18166] loop1: detected capacity change from 0 to 512
[  565.213660][T18165] netlink: 'syz.2.6399': attribute type 14 has an invalid length.
[  565.251385][T18165] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204)
[  565.270197][T18166] EXT4-fs (loop1): Test dummy encryption mode enabled
[  565.330315][T18168] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6400'.
[  565.456038][T18176] netlink: 'syz.0.6405': attribute type 4 has an invalid length.
[  565.523961][T18166] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.6398: inline data xattr refers to an external xattr inode
[  565.618613][T18166] EXT4-fs (loop1): Remounting filesystem read-only
[  565.628749][T18166] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6398: couldn't read orphan inode 12 (err -117)
[  565.689379][T18166] EXT4-fs (loop1): Remounting filesystem read-only
[  565.740779][T18166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  566.011035][T18166] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  566.044154][T18197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6411'.
[  566.149644][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6414'.
[  566.250443][ T3639] EXT4-fs (loop1): unmounting filesystem.
[  566.798880][   T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  566.896450][ T3918] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  567.170169][ T3918] usb 1-1: Using ep0 maxpacket: 8
[  567.179625][   T14] usb 2-1: Using ep0 maxpacket: 16
[  567.318940][T18241] netlink: 'syz.3.6433': attribute type 3 has an invalid length.
[  567.340706][ T3918] usb 1-1: unable to get BOS descriptor or descriptor too short
[  567.360136][   T14] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  567.368712][   T14] usb 2-1: config 0 has no interface number 0
[  567.404062][   T14] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  567.440430][ T3918] usb 1-1: config 15 has an invalid interface number: 102 but max is 1
[  567.469234][ T3918] usb 1-1: config 15 has an invalid interface number: 102 but max is 1
[  567.489484][ T3918] usb 1-1: config 15 contains an unexpected descriptor of type 0x1, skipping
[  567.513725][ T3918] usb 1-1: config 15 has 1 interface, different from the descriptor's value: 2
[  567.543212][ T3918] usb 1-1: config 15 has no interface number 0
[  567.549495][ T3918] usb 1-1: config 15 interface 102 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  567.601505][ T3918] usb 1-1: config 15 interface 102 has no altsetting 0
[  567.633307][   T14] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  567.642709][T17173] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  567.654674][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.658834][T18246] block device autoloading is deprecated and will be removed.
[  567.669882][   T14] usb 2-1: Product: syz
[  567.682665][   T14] usb 2-1: Manufacturer: syz
[  567.695986][   T14] usb 2-1: SerialNumber: syz
[  567.701323][    C0] net_ratelimit: 5707 callbacks suppressed
[  567.701342][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.719519][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.731936][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  567.744370][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.756725][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.769353][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  567.782098][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.794433][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.806919][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.819474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  567.847301][ T3918] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0381, bcdDevice=d5.6c
[  567.848202][   T14] usb 2-1: config 0 descriptor??
[  567.873276][ T3918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.910160][ T3918] usb 1-1: Product: syz
[  567.930828][ T3918] usb 1-1: Manufacturer: syz
[  567.946017][ T3918] usb 1-1: SerialNumber: syz
[  568.308215][ T3918] usb 1-1: USB disconnect, device number 35
[  568.356711][   T14] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  568.400393][   T14] usb 2-1: USB disconnect, device number 35
[  568.426444][T17173] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  568.435914][T17173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.452742][T17173] usb 5-1: Product: syz
[  568.457045][T17173] usb 5-1: Manufacturer: syz
[  568.480079][T17173] usb 5-1: SerialNumber: syz
[  568.516209][T17173] usb 5-1: config 0 descriptor??
[  568.802433][T17173] mos7840 5-1:0.0: required endpoints missing
[  569.052149][ T3689] usb 5-1: USB disconnect, device number 36
[  569.390012][T18261] tipc: Can't bind to reserved service type 2
[  570.156179][T18290] vivid-000: disconnect
[  570.181659][T18287] vivid-000: reconnect
[  570.900035][ T8271] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  570.925229][T18293] could not allocate digest TFM handle tgr160
[  571.180590][ T8271] usb 4-1: Using ep0 maxpacket: 8
[  571.271224][T18329] netlink: 'syz.0.6475': attribute type 2 has an invalid length.
[  571.302302][ T8271] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  571.332702][ T8271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.382738][ T8271] usb 4-1: config 0 descriptor??
[  571.472379][ T8271] gspca_main: spca501-2.14.0 probing 0000:0000
[  571.510426][T18336] loop0: detected capacity change from 0 to 128
[  571.565000][T18336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  571.572503][T18339] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  571.616436][T18336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  571.920658][ T8271] gspca_spca501: reg write: error -71
[  571.926104][ T8271] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  571.964357][ T8271] spca501: probe of 4-1:0.0 failed with error -22
[  572.001790][ T8271] usb 4-1: USB disconnect, device number 25
[  572.311161][T17173] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  572.681146][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  572.681165][   T26] audit: type=1326 audit(2000000066.880:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3f7dff9 code=0x7ffc0000
[  572.710109][    C0] net_ratelimit: 6741 callbacks suppressed
[  572.710127][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.728474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.740800][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.753980][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.766290][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.778731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  572.779068][T18374] loop0: detected capacity change from 0 to 2048
[  572.791147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.791367][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.819085][   T26] audit: type=1326 audit(2000000066.880:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f59d3f7dff9 code=0x7ffc0000
[  572.822199][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  572.822722][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  572.919993][T18374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  572.940147][   T26] audit: type=1326 audit(2000000066.880:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3f7dff9 code=0x7ffc0000
[  572.956718][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6498'.
[  572.966577][T18371] loop3: detected capacity change from 0 to 4096
[  573.027355][   T26] audit: type=1326 audit(2000000066.880:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d3f7dff9 code=0x7ffc0000
[  573.362103][T17173] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[  573.385436][T17173] usb 3-1: config 0 has no interface number 0
[  573.397331][T17173] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  573.449794][T18394] loop1: detected capacity change from 0 to 256
[  573.670235][T17173] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  573.679431][T17173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.704957][T17173] usb 3-1: Product: syz
[  573.709396][T17173] usb 3-1: Manufacturer: syz
[  573.711095][T18398] loop3: detected capacity change from 0 to 2048
[  573.731282][T17173] usb 3-1: SerialNumber: syz
[  573.758061][T17173] usb 3-1: config 0 descriptor??
[  573.761217][T18398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  573.810374][   T14] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  573.828129][T18394] FAT-fs (loop1): Directory bread(block 64) failed
[  573.835389][T18394] FAT-fs (loop1): Directory bread(block 65) failed
[  573.842275][T18394] FAT-fs (loop1): Directory bread(block 66) failed
[  573.883817][T18394] FAT-fs (loop1): Directory bread(block 67) failed
[  573.914741][T18394] FAT-fs (loop1): Directory bread(block 68) failed
[  573.922607][T18394] FAT-fs (loop1): Directory bread(block 69) failed
[  573.955690][T18394] FAT-fs (loop1): Directory bread(block 70) failed
[  573.971199][T18394] FAT-fs (loop1): Directory bread(block 71) failed
[  573.977867][T18394] FAT-fs (loop1): Directory bread(block 72) failed
[  574.022464][T18394] FAT-fs (loop1): Directory bread(block 73) failed
[  574.109309][T17173] usb 3-1: USB disconnect, device number 32
[  574.150532][   T14] usb 5-1: Using ep0 maxpacket: 8
[  574.576358][   T14] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[  574.595825][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.639999][   T14] usb 5-1: Product: syz
[  574.644224][   T14] usb 5-1: Manufacturer: syz
[  574.693293][   T14] usb 5-1: SerialNumber: syz
[  574.711822][   T14] r8152-cfgselector 5-1: config 0 descriptor??
[  574.966170][T18426] netlink: 'syz.2.6522': attribute type 8 has an invalid length.
[  575.238702][   T14] r8152-cfgselector 5-1: Unknown version 0x0000
[  575.257278][   T14] r8152-cfgselector 5-1: bad CDC descriptors
[  575.352206][   T14] r8152-cfgselector 5-1: Unknown version 0x0000
[  575.390050][   T14] r8152-cfgselector 5-1: USB disconnect, device number 37
[  575.410774][T18436] loop1: detected capacity change from 0 to 64
[  575.659196][T18441] ALSA: mixer_oss: invalid OSS volume 'üÃÿ%—ˆ†å'
[  575.666644][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6531'.
[  575.993752][T18456] loop4: detected capacity change from 0 to 1024
[  576.135016][T18456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  576.190325][T18465] tmpfs: Bad value for 'mpol'
[  576.305249][T14174] EXT4-fs (loop4): unmounting filesystem.
[  576.379478][T18469] loop3: detected capacity change from 0 to 128
[  576.448278][T18469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  576.496859][T18474] loop4: detected capacity change from 0 to 16
[  576.504744][T18469] System zones: 1-3, 19-19, 35-36
[  576.528118][T18469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  576.552291][T18474] erofs: (device loop4): mounted with root inode @ nid 36.
[  576.569444][T18469] ext4 filesystem being mounted at /1405/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  576.640869][T18478] IPVS: stopping backup sync thread 6688 ...
[  576.660573][T18469] EXT4-fs warning (device loop3): ext4_group_extend:1870: can't shrink FS - resize aborted
[  576.846130][T18481] loop0: detected capacity change from 0 to 512
[  576.914538][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  576.922555][T18481] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.6547: casefold flag without casefold feature
[  576.950467][T18481] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6547: couldn't read orphan inode 15 (err -117)
[  577.078356][T18481] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  577.108192][T18487] loop4: detected capacity change from 0 to 2048
[  577.179707][T18487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  577.282741][ T3899] EXT4-fs (loop0): unmounting filesystem.
[  577.410775][T18495] proc: Bad value for 'gid'
[  577.609288][T18499] loop3: detected capacity change from 0 to 64
[  577.667087][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6556'.
[  577.740197][    C0] net_ratelimit: 5254 callbacks suppressed
[  577.740220][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.758513][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.771168][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  577.783846][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.796506][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.808978][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.821591][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.833992][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.847072][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  577.859374][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  578.145106][T18522] loop4: detected capacity change from 0 to 64
[  578.158200][T18523] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6567'.
[  578.875710][T18548] tmpfs: Bad value for 'mpol'
[  579.044161][T18553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6582'.
[  579.094043][T18553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6582'.
[  579.478331][T18562] loop3: detected capacity change from 0 to 256
[  579.540561][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'.
[  579.585950][T18562] FAT-fs (loop3): Directory bread(block 64) failed
[  579.598253][T18562] FAT-fs (loop3): Directory bread(block 65) failed
[  579.639434][T18562] FAT-fs (loop3): Directory bread(block 66) failed
[  579.660421][T18562] FAT-fs (loop3): Directory bread(block 67) failed
[  579.667239][T18562] FAT-fs (loop3): Directory bread(block 68) failed
[  579.720946][T18562] FAT-fs (loop3): Directory bread(block 69) failed
[  579.750432][T18562] FAT-fs (loop3): Directory bread(block 70) failed
[  579.760672][T18562] FAT-fs (loop3): Directory bread(block 71) failed
[  579.767320][T18562] FAT-fs (loop3): Directory bread(block 72) failed
[  579.809314][T18562] FAT-fs (loop3): Directory bread(block 73) failed
[  579.816401][T18570] netlink: 'syz.1.6591': attribute type 3 has an invalid length.
[  579.950709][T18542] loop0: detected capacity change from 0 to 32768
[  580.033209][T18542] add_index: next_index = 0.  Resetting!
[  580.039739][T18542] find_entry called with index >= next_index
[  580.100610][T18542] find_entry called with index >= next_index
[  581.173310][T18596] x_tables: duplicate entry at hook 1
[  581.742369][T18615] loop0: detected capacity change from 0 to 128
[  582.156537][T18578] loop4: detected capacity change from 0 to 32768
[  582.200435][T18578] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  582.212530][T18626] netlink: 'syz.2.6619': attribute type 5 has an invalid length.
[  582.226335][T18578] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  582.272566][T18578] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  582.370041][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  582.404177][T18632] loop0: detected capacity change from 0 to 256
[  582.409996][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  582.626460][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 216ms
[  582.668900][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  582.682920][T18578] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  582.780463][    C0] net_ratelimit: 4345 callbacks suppressed
[  582.780484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.799019][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  582.811562][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.824146][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.836822][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  582.849619][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.861901][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.874406][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.886858][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  582.899323][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  583.030089][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6630'.
[  583.043046][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6633'.
[  583.524354][T18668] loop4: detected capacity change from 0 to 512
[  583.673230][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6652'.
[  583.709502][T18668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  583.719190][T18668] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  583.940206][T18668] EXT4-fs error (device loop4): ext4_xattr_block_find:1828: inode #15: comm syz.4.6634: corrupted xattr block 32
[  584.130739][T14174] EXT4-fs (loop4): unmounting filesystem.
[  584.300960][T18697] loop3: detected capacity change from 0 to 1024
[  584.345483][T18697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  584.558678][ T3641] EXT4-fs (loop3): unmounting filesystem.
[  584.568477][ T3918] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  584.870237][ T3918] usb 1-1: Using ep0 maxpacket: 16
[  584.915794][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6663'.
[  584.936023][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6663'.
[  585.039049][T17173] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  585.173484][ T3918] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00
[  585.211711][ T3918] usb 1-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40
[  585.240659][ T3918] usb 1-1: Product: syz
[  585.245110][ T3918] usb 1-1: Manufacturer: syz
[  585.275393][ T3918] usb 1-1: SerialNumber: syz
[  585.297130][T18727] netlink: 'syz.3.6667': attribute type 3 has an invalid length.
[  585.320790][ T3918] usb 1-1: config 0 descriptor??
[  585.338580][T18727] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6667'.
[  585.362396][T17173] usb 3-1: Using ep0 maxpacket: 8
[  585.368375][ T3918] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  585.400511][ T3918] usb 1-1: Detected FT4232HA
[  585.526627][T18731] loop4: detected capacity change from 0 to 64
[  585.580364][ T3918] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  585.631926][ T3918] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  585.656070][ T3918] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  585.679490][T18737] netlink: 'syz.3.6672': attribute type 9 has an invalid length.
[  585.708694][ T3918] usb 1-1: USB disconnect, device number 36
[  585.783801][ T3918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  585.842316][ T3918] ftdi_sio 1-1:0.0: device disconnected
[  585.878203][T17173] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[  585.887371][T17173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.910115][T17173] usb 3-1: Product: syz
[  585.914358][T17173] usb 3-1: Manufacturer: syz
[  585.958251][T17173] usb 3-1: SerialNumber: syz
[  585.980550][T17173] r8152-cfgselector 3-1: config 0 descriptor??
[  586.530661][T17173] r8152-cfgselector 3-1: Unknown version 0x0000
[  586.576259][T17173] r8152-cfgselector 3-1: bad CDC descriptors
[  586.645008][T17173] r8152-cfgselector 3-1: Unknown version 0x0000
[  586.675097][T17173] r8152-cfgselector 3-1: USB disconnect, device number 33
[  586.769446][T18763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6685'.
[  586.839550][T18763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6685'.
[  587.484513][T18784] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  587.534503][T18784] overlayfs: missing 'lowerdir'
[  587.794830][T18797] loop3: detected capacity change from 0 to 256
[  587.810146][    C0] net_ratelimit: 5139 callbacks suppressed
[  587.810166][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:bf:33:91:5a:e5, vlan:0)
[  587.828588][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.841053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.853876][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.866567][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.878817][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.891266][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.903717][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.916163][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.929115][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  587.934740][T18797] FAT-fs (loop3): Directory bread(block 64) failed
[  587.971528][T18797] FAT-fs (loop3): Directory bread(block 65) failed
[  588.000392][T18797] FAT-fs (loop3): Directory bread(block 66) failed
[  588.007021][T18797] FAT-fs (loop3): Directory bread(block 67) failed
[  588.071165][T18797] FAT-fs (loop3): Directory bread(block 68) failed
[  588.100742][T18797] FAT-fs (loop3): Directory bread(block 69) failed
[  588.107824][T18797] FAT-fs (loop3): Directory bread(block 70) failed
[  588.160312][T18797] FAT-fs (loop3): Directory bread(block 71) failed
[  588.167002][T18797] FAT-fs (loop3): Directory bread(block 72) failed
[  588.201779][T18797] FAT-fs (loop3): Directory bread(block 73) failed
[  588.493258][   T28] INFO: task syz.2.4832:14576 blocked for more than 143 seconds.
[  588.502041][   T28]       Not tainted 6.1.113-syzkaller #0
[  588.507723][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  588.550322][ T3689] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  588.558552][   T28] task:syz.2.4832      state:D stack:24552 pid:14576 ppid:3645   flags:0x00004004
[  588.578703][   T28] Call Trace:
[  588.596463][   T28]  <TASK>
[  588.599480][   T28]  __schedule+0x143f/0x4570
[  588.620534][   T28]  ? xlog_grant_head_wait+0x1ee/0xa00
[  588.629500][   T28]  ? release_firmware_map_entry+0x186/0x186
[  588.647155][   T28]  ? xlog_space_left+0xa9/0x2b0
[  588.665279][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  588.682062][   T28]  ? xlog_grant_push_threshold+0x1a3/0x1f0
[  588.710318][   T28]  schedule+0xbf/0x180
[  588.734257][   T28]  xlog_grant_head_wait+0x3b6/0xa00
[  588.753634][   T28]  xlog_grant_head_check+0x295/0x480
[  588.771672][   T28]  ? xlog_grant_push_ail+0xd0/0xd0
[  588.788431][   T28]  ? xlog_grant_push_threshold+0x1a3/0x1f0
[  588.808911][   T28]  xfs_log_reserve+0x3e1/0xc30
[  588.826671][   T28]  ? xlog_grant_head_check+0x480/0x480
[  588.844800][   T28]  ? xfs_mod_freecounter+0x1e2/0x490
[  588.862734][   T28]  xfs_trans_reserve+0x239/0x6a0
[  588.881190][   T28]  xfs_trans_alloc+0x41b/0x870
[  588.897494][   T28]  xfs_trans_alloc_inode+0x129/0x450
[  588.911625][T18798] loop0: detected capacity change from 0 to 32768
[  588.920186][   T28]  ? xfs_trans_dup+0x6a0/0x6a0
[  588.930313][   T28]  ? xfs_da_hashname+0x23f/0x370
[  588.939431][ T3689] usb 2-1: Using ep0 maxpacket: 8
[  588.947186][T18798] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.6699 (18798)
[  588.967524][   T28]  ? xfs_attr_leaf_newentsize+0xd5/0x1d0
[  588.981477][   T28]  xfs_attr_set+0xa4e/0x1660
[  588.994038][   T28]  ? xfs_attr_leaf_shrink+0x410/0x410
[  589.010882][T18798] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  589.026160][   T28]  ? lockdep_unlock+0x165/0x300
[  589.036789][   T28]  xfs_xattr_set+0x227/0x3a0
[  589.045139][T18798] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  589.057086][   T28]  ? xfs_xattr_get+0x2f0/0x2f0
[  589.067760][   T28]  ? evm_protect_xattr+0x366/0xb10
[  589.076542][T18798] BTRFS info (device loop0): force zlib compression, level 3
[  589.087625][   T28]  ? xfs_xattr_get+0x2f0/0x2f0
[  589.098286][T18798] BTRFS info (device loop0): force clearing of disk cache
[  589.108243][   T28]  __vfs_setxattr+0x3e7/0x420
[  589.121167][   T28]  __vfs_setxattr_noperm+0x12a/0x5e0
[  589.131976][T18798] BTRFS info (device loop0): setting nodatasum
[  589.141664][   T28]  vfs_setxattr+0x21d/0x420
[  589.153141][T18798] BTRFS info (device loop0): allowing degraded mounts
[  589.161298][   T28]  ? xattr_permission+0x4f0/0x4f0
[  589.177791][   T28]  ? _copy_from_user+0x31/0x170
[  589.185272][T18798] BTRFS info (device loop0): enabling disk space caching
[  589.202712][   T28]  ? copy_user_enhanced_fast_string+0xa/0x40
[  589.209530][T18798] BTRFS info (device loop0): disk space caching is enabled
[  589.225442][   T28]  ? _copy_from_user+0x109/0x170
[  589.243144][   T28]  setxattr+0x250/0x2b0
[  589.256425][   T28]  ? path_setxattr+0x2a0/0x2a0
[  589.274296][   T28]  ? __mnt_want_write+0x222/0x2a0
[  589.290974][   T28]  path_setxattr+0x1bc/0x2a0
[  589.318580][   T28]  ? simple_xattr_list_add+0xf0/0xf0
[  589.336616][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  589.359011][   T28]  __x64_sys_setxattr+0xb7/0xd0
[  589.371361][   T28]  do_syscall_64+0x3b/0xb0
[  589.375960][   T28]  ? clear_bhb_loop+0x45/0xa0
[  589.389722][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  589.398019][ T3689] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[  589.398448][   T28] RIP: 0033:0x7fb783d7dff9
[  589.417944][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.423657][   T28] RSP: 002b:00007fb784bbd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  589.439980][ T3689] usb 2-1: Product: syz
[  589.444283][ T3689] usb 2-1: Manufacturer: syz
[  589.456621][   T28] RAX: ffffffffffffffda RBX: 00007fb783f35f80 RCX: 00007fb783d7dff9
[  589.457911][T18813] loop4: detected capacity change from 0 to 32768
[  589.485890][   T28] RDX: 0000000020000880 RSI: 0000000020000240 RDI: 0000000020000300
[  589.494458][   T28] RBP: 00007fb783df0296 R08: 0000000000000000 R09: 0000000000000000
[  589.503038][   T28] R10: 000000000000ff27 R11: 0000000000000246 R12: 0000000000000000
[  589.506208][ T3689] usb 2-1: SerialNumber: syz
[  589.511779][   T28] R13: 0000000000000000 R14: 00007fb783f35f80 R15: 00007fffb5e057c8
[  589.524093][   T28]  </TASK>
[  589.527497][   T28] 
[  589.527497][   T28] Showing all locks held in the system:
[  589.537560][   T28] 1 lock held by rcu_tasks_kthre/12:
[  589.540747][ T3689] r8152-cfgselector 2-1: config 0 descriptor??
[  589.549137][   T28]  #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  589.559825][   T28] 1 lock held by rcu_tasks_trace/13:
[  589.565298][   T28]  #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  589.577915][   T28] 1 lock held by khungtaskd/28:
[  589.583138][   T28]  #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  589.650004][   T28] 2 locks held by getty/3400:
[  589.685310][   T28]  #0: ffff88802e736098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  589.716280][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  589.742602][   T28] 4 locks held by udevd/3631:
[  589.747798][T18813] XFS (loop4): Mounting V5 Filesystem
[  589.755370][   T28]  #0: ffff88805ef96668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[  589.778914][T18798] BTRFS info (device loop0): rebuilding free space tree
[  589.785473][   T28]  #1: ffff888058344888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0
[  589.819760][T18798] BTRFS info (device loop0): disabling free space tree
[  589.827110][T18798] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  589.848904][T18798] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  589.858580][   T28]  #2: ffff888024b0f578 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0
[  589.870268][   T28]  #3: ffff88801c6d0190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90
[  589.880248][   T28] 5 locks held by kworker/0:7/3689:
[  589.885702][   T28]  #0: ffff8881446f4138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  589.897809][   T28]  #1: ffffc9000434fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  589.911395][   T28]  #2: ffff88814576f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  589.921541][   T28]  #3: ffff88801c6d0190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  589.931756][   T28]  #4: ffff88801c6d6118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  589.941414][   T28] 2 locks held by kworker/1:19/8271:
[  589.946902][   T28]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  589.958016][   T28]  #1: ffffc9001022fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  589.970269][   T28] 3 locks held by syz.2.4832/14576:
[  589.975786][   T28]  #0: ffff888073e4c460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  589.985767][   T28]  #1: ffff8880586ee038 (&inode->i_sb->s_type->i_mutex_dir_key#2){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420
[  589.998009][   T28]  #2: ffff888073e4c650 (sb_internal#4){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450
[  590.008546][   T28] 3 locks held by syz.1.6656/18707:
[  590.014494][   T28] 1 lock held by syz.0.6699/18798:
[  590.019767][   T28]  #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  590.035047][   T28] 1 lock held by syz.4.6708/18813:
[  590.040670][   T28]  #0: ffff8880571ae0e0 (&type->s_umount_key#99/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930
[  590.075398][   T28] 
[  590.079118][   T28] =============================================
[  590.079118][   T28] 
[  590.098116][   T28] NMI backtrace for cpu 1
[  590.102513][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.113-syzkaller #0
[  590.110444][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  590.120539][   T28] Call Trace:
[  590.123851][   T28]  <TASK>
[  590.126814][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  590.131536][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  590.137034][   T28]  ? panic+0x764/0x764
[  590.141134][   T28]  ? vprintk_emit+0x622/0x740
[  590.145855][   T28]  ? printk_sprint+0x490/0x490
[  590.150662][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  590.155464][ T3689] r8152-cfgselector 2-1: Unknown version 0x0000
[  590.155794][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  590.167011][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  590.173195][   T28]  ? _printk+0xd1/0x111
[  590.177364][   T28]  ? panic+0x764/0x764
[  590.181443][   T28]  ? __wake_up_klogd+0xcc/0x100
[  590.186298][   T28]  ? panic+0x764/0x764
[  590.190369][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  590.196441][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  590.202509][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  590.208508][   T28]  watchdog+0xf88/0xfd0
[  590.212679][   T28]  ? watchdog+0x1f8/0xfd0
[  590.217020][   T28]  kthread+0x28d/0x320
[  590.221089][   T28]  ? hungtask_pm_notify+0x50/0x50
[  590.226117][   T28]  ? kthread_blkcg+0xd0/0xd0
[  590.230708][   T28]  ret_from_fork+0x1f/0x30
[  590.235141][   T28]  </TASK>
[  590.239421][   T28] Sending NMI from CPU 1 to CPUs 0:
[  590.242416][ T3689] r8152-cfgselector 2-1: bad CDC descriptors
[  590.245027][    C0] NMI backtrace for cpu 0
[  590.245039][    C0] CPU: 0 PID: 3689 Comm: kworker/0:7 Not tainted 6.1.113-syzkaller #0
[  590.245057][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  590.245067][    C0] Workqueue: usb_hub_wq hub_event
[  590.245091][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  590.245112][    C0] Code: e8 25 00 00 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 28 72 0f 0d 48 89 de 5b e9 87 aa 56 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d 74 dc 77 7e 65 8b 15 75 dc 77 7e 81 e2 00
[  590.245124][    C0] RSP: 0018:ffffc9000434e0a0 EFLAGS: 00000012
[  590.245137][    C0] RAX: 0000000000000002 RBX: ffff8880b8e275e0 RCX: ffff888027b13b80
[  590.245148][    C0] RDX: ffffc900140af000 RSI: 000000000000070b RDI: 0000000000000000
[  590.245158][    C0] RBP: 00000001000070af R08: ffffffff815a82b1 R09: ffffed10049d8047
[  590.245169][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000001000077ba
[  590.245179][    C0] R13: 0000000100006a0e R14: ffffffff8cd8d870 R15: dffffc0000000000
[  590.245190][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  590.245204][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  590.245214][    C0] CR2: 0000001b2f518ff8 CR3: 0000000062221000 CR4: 00000000003506f0
[  590.245230][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  590.245239][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  590.245248][    C0] Call Trace:
[  590.245253][    C0]  <NMI>
[  590.245259][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  590.245275][    C0]  ? read_lock_is_recursive+0x10/0x10
[  590.245297][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  590.245311][    C0]  ? nmi_handle+0x25/0x440
[  590.245338][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  590.245352][    C0]  ? nmi_handle+0x12e/0x440
[  590.245371][    C0]  ? nmi_handle+0x25/0x440
[  590.245391][    C0]  ? audit_tree_destroy_watch+0x20/0x20
[  590.245415][    C0]  ? default_do_nmi+0x62/0x150
[  590.245431][    C0]  ? exc_nmi+0xa8/0x100
[  590.245444][    C0]  ? end_repeat_nmi+0x16/0x31
[  590.245467][    C0]  ? wq_watchdog_touch+0xe1/0x170
[  590.245484][    C0]  ? audit_tree_destroy_watch+0x20/0x20
[  590.245502][    C0]  ? audit_tree_destroy_watch+0x20/0x20
[  590.245519][    C0]  ? audit_tree_destroy_watch+0x20/0x20
[  590.245537][    C0]  </NMI>
[  590.245541][    C0]  <TASK>
[  590.245546][    C0]  wq_watchdog_touch+0xeb/0x170
[  590.245562][    C0]  serial8250_console_write+0x1014/0x1750
[  590.245588][    C0]  ? serial8250_set_defaults+0x5f0/0x5f0
[  590.245603][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  590.245621][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  590.245639][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  590.245657][    C0]  console_emit_next_record+0xbb4/0x1000
[  590.245675][    C0]  ? console_emit_next_record+0xa9c/0x1000
[  590.245693][    C0]  ? info_print_prefix+0x300/0x300
[  590.245710][    C0]  ? mark_lock+0x9a/0x340
[  590.245731][    C0]  ? __lock_acquire+0x125b/0x1f80
[  590.245763][    C0]  console_unlock+0x278/0x7c0
[  590.245785][    C0]  ? vprintk_emit+0x740/0x740
[  590.245804][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  590.245821][    C0]  ? vprintk_emit+0x340/0x740
[  590.245840][    C0]  vprintk_emit+0x523/0x740
[  590.245860][    C0]  ? printk_sprint+0x490/0x490
[  590.245880][    C0]  ? vscnprintf+0x80/0x80
[  590.245895][    C0]  ? validate_chain+0x112/0x5950
[  590.245911][    C0]  ? read_word_at_a_time+0xe/0x20
[  590.245926][    C0]  ? strscpy+0x89/0x220
[  590.245942][    C0]  dev_vprintk_emit+0x2aa/0x323
[  590.245963][    C0]  ? _dev_info+0x165/0x165
[  590.245984][    C0]  ? mark_lock+0x9a/0x340
[  590.246006][    C0]  dev_printk_emit+0xd9/0x118
[  590.246029][    C0]  ? dev_vprintk_emit+0x323/0x323
[  590.246052][    C0]  ? __dev_printk+0x137/0x1a0
[  590.246068][    C0]  _dev_info+0x11e/0x165
[  590.246089][    C0]  ? entropy_timer+0xf6/0xf6
[  590.246114][    C0]  usbnet_generic_cdc_bind+0x15aa/0x1de0
[  590.246142][    C0]  ? usbnet_cdc_update_filter+0x1f0/0x1f0
[  590.246161][    C0]  ? memset+0x1f/0x40
[  590.246181][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  590.246200][    C0]  ? __debug_object_init+0xe9/0x450
[  590.246222][    C0]  usbnet_cdc_bind+0x21/0x330
[  590.246240][    C0]  ? r8153_bind+0x11/0x140
[  590.246257][    C0]  r8153_bind+0x1c/0x140
[  590.246273][    C0]  usbnet_probe+0xb8a/0x2860
[  590.246290][    C0]  ? __dev_printk+0x137/0x1a0
[  590.246314][    C0]  ? usbnet_disconnect+0x3c0/0x3c0
[  590.246330][    C0]  ? __rtl_get_hw_ver+0x284/0x350
[  590.246348][    C0]  ? __rtl_get_hw_ver+0x29d/0x350
[  590.246363][    C0]  ? rtl8152_get_version+0x46/0x70
[  590.246380][    C0]  usb_probe_interface+0x5c0/0xaf0
[  590.246408][    C0]  ? usb_register_driver+0x3d0/0x3d0
[  590.246422][    C0]  really_probe+0x2ab/0xcb0
[  590.246443][    C0]  __driver_probe_device+0x1a2/0x3d0
[  590.246464][    C0]  driver_probe_device+0x50/0x420
[  590.246482][    C0]  __device_attach_driver+0x2cf/0x510
[  590.246501][    C0]  ? coredump_store+0x90/0x90
[  590.246517][    C0]  bus_for_each_drv+0x183/0x200
[  590.246534][    C0]  ? subsys_find_device_by_id+0x310/0x310
[  590.246554][    C0]  __device_attach+0x359/0x570
[  590.246574][    C0]  ? device_attach+0x20/0x20
[  590.246590][    C0]  ? kobject_uevent_env+0x54a/0x8c0
[  590.246609][    C0]  ? kobject_uevent_env+0x54a/0x8c0
[  590.246627][    C0]  bus_probe_device+0xba/0x1e0
[  590.246642][    C0]  ? device_add+0xab9/0xfd0
[  590.246656][    C0]  device_add+0xb48/0xfd0
[  590.246673][    C0]  usb_set_configuration+0x19dd/0x2020
[  590.246698][    C0]  usb_generic_driver_probe+0x84/0x140
[  590.246713][    C0]  usb_probe_device+0xd3/0x260
[  590.246729][    C0]  ? usb_register_device_driver+0x240/0x240
[  590.246744][    C0]  really_probe+0x2ab/0xcb0
[  590.246766][    C0]  __driver_probe_device+0x1a2/0x3d0
[  590.246785][    C0]  driver_probe_device+0x50/0x420
[  590.246804][    C0]  __device_attach_driver+0x2cf/0x510
[  590.246823][    C0]  ? coredump_store+0x90/0x90
[  590.246839][    C0]  bus_for_each_drv+0x183/0x200
[  590.246856][    C0]  ? subsys_find_device_by_id+0x310/0x310
[  590.246877][    C0]  __device_attach+0x359/0x570
[  590.246896][    C0]  ? device_attach+0x20/0x20
[  590.246912][    C0]  ? kobject_uevent_env+0x54a/0x8c0
[  590.246930][    C0]  ? kobject_uevent_env+0x54a/0x8c0
[  590.246948][    C0]  bus_probe_device+0xba/0x1e0
[  590.246962][    C0]  ? device_add+0xab9/0xfd0
[  590.246976][    C0]  device_add+0xb48/0xfd0
[  590.246994][    C0]  usb_new_device+0xbdd/0x18f0
[  590.247019][    C0]  ? usb_disconnect+0x8c0/0x8c0
[  590.247036][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  590.247051][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  590.247068][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  590.247085][    C0]  hub_event+0x2efe/0x5730
[  590.247124][    C0]  ? led_work+0x700/0x700
[  590.247143][    C0]  ? read_lock_is_recursive+0x10/0x10
[  590.247162][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  590.247183][    C0]  ? print_irqtrace_events+0x210/0x210
[  590.247202][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  590.247220][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  590.247237][    C0]  ? process_one_work+0x7a9/0x11d0
[  590.247253][    C0]  process_one_work+0x8a9/0x11d0
[  590.247275][    C0]  ? worker_detach_from_pool+0x260/0x260
[  590.247293][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  590.247310][    C0]  ? kthread_data+0x4e/0xc0
[  590.247331][    C0]  ? wq_worker_running+0x97/0x190
[  590.247346][    C0]  worker_thread+0xa47/0x1200
[  590.247366][    C0]  ? _raw_spin_unlock+0x40/0x40
[  590.247388][    C0]  kthread+0x28d/0x320
[  590.247407][    C0]  ? worker_clr_flags+0x190/0x190
[  590.247422][    C0]  ? kthread_blkcg+0xd0/0xd0
[  590.247436][    C0]  ret_from_fork+0x1f/0x30
[  590.247461][    C0]  </TASK>
[  590.287085][T18798] BTRFS info (device loop0): balance: start -sdrange=0..6,vrange=0..0,limit=2..31841
[  590.524477][ T3689] r8152-cfgselector 2-1: Unknown version 0x0000
[  590.670512][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  590.670530][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.113-syzkaller #0
[  590.670551][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  590.670561][   T28] Call Trace:
[  590.670568][   T28]  <TASK>
[  590.670576][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  590.670602][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  590.670619][   T28]  ? panic+0x764/0x764
[  590.670639][   T28]  ? llist_add_batch+0x160/0x1d0
[  590.670674][   T28]  ? vscnprintf+0x59/0x80
[  590.670696][   T28]  panic+0x318/0x764
[  590.670717][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  590.670736][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  590.670759][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  590.670776][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  590.670795][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  590.670815][   T28]  watchdog+0xfc7/0xfd0
[  590.670843][   T28]  ? watchdog+0x1f8/0xfd0
[  590.670868][   T28]  kthread+0x28d/0x320
[  590.670885][   T28]  ? hungtask_pm_notify+0x50/0x50
[  590.670905][   T28]  ? kthread_blkcg+0xd0/0xd0
[  590.670923][   T28]  ret_from_fork+0x1f/0x30
[  590.670957][   T28]  </TASK>
[  590.673676][   T28] Kernel Offset: disabled
[  591.124587][   T28] Rebooting in 86400 seconds..