last executing test programs:

26.803444123s ago: executing program 1 (id=280):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r1, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4)

26.593154997s ago: executing program 1 (id=283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20)

26.351675043s ago: executing program 1 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

25.462114323s ago: executing program 1 (id=288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x410, 0x2, [@TCA_U32_SEL={0x404, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x8, 0x9c19, [{0x5b5, 0x0, 0xa, 0x10001}, {0x1, 0x7fffffff, 0xa6b7, 0x9}, {0xf16, 0x1ff, 0x5, 0x40}, {0x59c, 0x4, 0x7, 0x9}, {0x800007ff, 0x2, 0x8, 0x10000}, {0x2, 0x2, 0xffff, 0x7}, {0x5, 0x6, 0x9, 0x23903cef}, {0x2, 0x9, 0x7, 0x6}, {0xfffffff7, 0x8, 0x80000000, 0x2}, {0x40, 0x80000001, 0x2, 0x2}, {0xa, 0x5, 0x545, 0xd}, {0x9, 0x3, 0xa52, 0x8}, {0x1, 0x3, 0x4, 0x5a8}, {0x7, 0x8b5, 0xff, 0x3}, {0x7ff, 0x0, 0x6, 0x1}, {0x4, 0x8, 0xffff, 0x4}, {0xffffffff, 0x2, 0x1, 0xe}, {0x126c, 0x2ba70bc3, 0x7, 0x7}, {0xc, 0x8, 0x3, 0xb}, {0x8, 0x7, 0x7, 0x7}, {0x4, 0x1, 0x1, 0x56}, {0x0, 0x4, 0x0, 0x1}, {0xfffffffd, 0x8001, 0x200, 0x7}, {0x0, 0xa, 0x800, 0xd849}, {0x5, 0x9, 0x3, 0x2db}, {0x13318b36, 0xffff, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x7}, {0x7f, 0x9b5d, 0x4c6e, 0x1}, {0x6, 0x5, 0x4d2, 0x292b}, {0x4, 0x1ff, 0x5, 0x4}, {0x80, 0x5, 0xff, 0x1}, {0x4, 0x9b0, 0x2, 0x3}, {0x2000, 0x3, 0x2c, 0x8}, {0x793dd766, 0x3f, 0x7, 0x1ff}, {0xd, 0xfffffffc, 0x8, 0x2}, {0x687, 0x1, 0x4, 0x1}, {0x4, 0x1bc, 0x1000, 0x9}, {0x6, 0xfffffff9, 0xfffffff9, 0x5}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x9, 0x1, 0x3}, {0x1, 0x416a, 0xe0000000, 0x40}, {0x2, 0x1, 0x7fff, 0x1}, {0x7, 0x7fff, 0x800, 0x8000}, {0x3, 0x9, 0xfff, 0x7}, {0xbd7, 0xd0c, 0x40000f, 0x8}, {0x7, 0x2, 0x5, 0x3}, {0x80, 0xe, 0xc09c}, {0xd, 0x9, 0x0, 0x9}, {0x4, 0x4, 0x0, 0x3}, {0x1, 0x8, 0x8, 0x7}, {0x3, 0x2, 0x9, 0x6}, {0x1, 0xd6a1, 0xe9a3, 0xb07}, {0x3, 0xfff, 0x0, 0x1}, {0x48000000, 0x9, 0x4, 0x3fd}, {0x8, 0xfb, 0x800, 0x1}, {0x62, 0x3, 0x5, 0x5}, {0xd5a, 0xffffe007, 0xfffffffb, 0x1000}, {0x81, 0x7, 0x66, 0x1ff}, {0x5, 0xffff8001, 0x1, 0x401}, {0xf, 0x4, 0xffffff09, 0x3bfd}, {0x5, 0x200003, 0x5, 0x5}, {0x9c8c, 0x6, 0x9, 0x8}, {0x990, 0x40, 0x2, 0xb}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000)

25.191507621s ago: executing program 1 (id=289):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080)

25.020095112s ago: executing program 1 (id=290):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

9.448782157s ago: executing program 32 (id=290):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
write$binfmt_aout(r4, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

9.332396395s ago: executing program 2 (id=322):
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

8.182350141s ago: executing program 3 (id=326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.736474629s ago: executing program 2 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ftruncate(r5, 0x200004)
sendfile(r4, r5, 0x0, 0x80001d00c0d1)

6.689796572s ago: executing program 3 (id=328):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$VT_DISALLOCATE(r5, 0x5608)

4.544015586s ago: executing program 2 (id=329):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

4.436722323s ago: executing program 3 (id=330):
syz_io_uring_setup(0x9ed, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x8, 0x6, 0x9, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0xffffffff, 0x9, 0x3, 0x0, 0xc7c, 0x3, 0x40000003, 0x2, 0xcaa3, 0x0, 0x20001e57, 0x6, 0x2000e66, 0x6, 0x1, 0x10004086, 0x3, 0xfffffff8]})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_type(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r5, 0xf5f)
r6 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008000)
write(r1, 0x0, 0x0)

4.204043018s ago: executing program 2 (id=332):
syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000200)='./bus\x00', 0x300800c, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x252, &(0x7f0000000500)="$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")
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

4.182293679s ago: executing program 3 (id=333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)

4.02702751s ago: executing program 0 (id=334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvfrom(r2, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x13, 0x0, &(0x7f00000000c0))

3.700065992s ago: executing program 2 (id=335):
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

3.117571291s ago: executing program 3 (id=336):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@nouuid}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x979e, &(0x7f0000009780)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0xe00f, 0x0)

2.958303712s ago: executing program 0 (id=337):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20)

2.712027838s ago: executing program 0 (id=338):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
sendmsg$inet(r0, 0x0, 0x20010404)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x28, 0x35, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

1.975327238s ago: executing program 2 (id=339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

1.913937302s ago: executing program 0 (id=340):
syz_io_uring_setup(0x9ed, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x8, 0x6, 0x9, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0xffffffff, 0x9, 0x3, 0x0, 0xc7c, 0x3, 0x40000003, 0x2, 0xcaa3, 0x0, 0x20001e57, 0x6, 0x2000e66, 0x6, 0x1, 0x10004086, 0x3, 0xfffffff8]})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_type(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r5, 0xf5f)
r6 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008000)
write(r1, 0x0, 0x0)

1.714508255s ago: executing program 0 (id=341):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
socket$inet6_sctp(0xa, 0x1, 0x84)
accept4(r0, 0x0, 0x0, 0x80000)
syz_usb_connect$cdc_ncm(0x4, 0x94, &(0x7f00000006c0)=ANY=[], 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)
socket(0x2a, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

83.291385ms ago: executing program 3 (id=342):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read(r1, &(0x7f0000001400)=""/4096, 0x1000)

0s ago: executing program 0 (id=343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

t 6081 - 0
[   86.006708][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.016047][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.028113][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.040254][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.049825][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.059032][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.101343][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.117840][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.128786][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.156569][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.171270][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.205121][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.220513][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.278914][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.315637][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.337547][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.353082][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.843822][   T51] Bluetooth: hci0: command tx timeout
[   87.243199][   T51] Bluetooth: hci2: command tx timeout
[   87.249084][   T51] Bluetooth: hci3: command tx timeout
[   87.255501][   T51] Bluetooth: hci1: command tx timeout
[   87.487122][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.509452][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.531737][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.558045][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.650768][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.676487][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.714363][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.722277][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.771367][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.793791][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.840824][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.882618][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.265782][ T5850] syz.3.4[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   88.923993][ T5085] Bluetooth: hci0: command tx timeout
[   89.184142][ T5854] loop1: detected capacity change from 0 to 512
[   89.342289][   T27] audit: type=1326 audit(1775366211.929:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.0.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd982b9c819 code=0x0
[   89.345384][ T5085] Bluetooth: hci1: command tx timeout
[   89.369995][ T5085] Bluetooth: hci3: command tx timeout
[   89.375818][ T5085] Bluetooth: hci2: command tx timeout
[   89.430416][ T5854] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7: invalid indirect mapped block 256 (level 2)
[   89.554143][ T5854] EXT4-fs (loop1): 2 truncates cleaned up
[   89.561506][ T5854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.660239][   T27] audit: type=1800 audit(1775366212.249:3): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="file1" dev="loop1" ino=15 res=0 errno=0
[   90.844422][ T5860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   90.854867][    T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   90.960234][ T5850] loop3: detected capacity change from 0 to 32768
[   90.983510][ T5850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (5850)
[   91.017827][ T5850] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.056883][ T5850] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   91.066883][    T9] usb 2-1: device descriptor read/64, error -71
[   91.152688][ T5850] BTRFS info (device loop3): turning on sync discard
[   91.177294][ T5850] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   91.189657][ T5856] loop2: detected capacity change from 0 to 32768
[   91.227583][ T5850] BTRFS info (device loop3): use zstd compression, level 3
[   91.246479][ T5856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6 (5856)
[   91.283030][ T5850] BTRFS info (device loop3): turning on async discard
[   91.302854][ T5850] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   91.332727][ T5850] BTRFS info (device loop3): trying to use backup root at mount time
[   91.341773][ T5850] BTRFS info (device loop3): enabling auto defrag
[   91.348940][ T5850] BTRFS info (device loop3): using free space tree
[   91.354062][ T5856] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.358745][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[   91.530294][ T5856] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   91.567550][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[   91.572902][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[   91.641388][ T5864] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[   91.665374][ T5864] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.665374][ T5864] 
[   91.675470][ T5864] EXT4-fs (loop1): Total free blocks count 0
[   91.681570][ T5864] EXT4-fs (loop1): Free/Dirty block details
[   91.690314][ T5864] EXT4-fs (loop1): free_blocks=0
[   91.695480][ T5864] EXT4-fs (loop1): dirty_blocks=32
[   91.700652][ T5864] EXT4-fs (loop1): Block reservation details
[   91.706932][ T5864] EXT4-fs (loop1): i_reserved_data_blocks=32
[   91.885061][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[   91.885952][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[   91.915515][ T5856] BTRFS info (device loop2): using free space tree
[   91.933413][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[   91.934052][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   91.956612][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[   92.007431][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[   92.036561][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[   92.050628][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[   92.063685][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[   92.070829][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.076485][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[   92.093185][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   92.104095][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[   92.114156][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   92.126174][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   92.137714][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[   92.145595][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   92.149105][ T5856] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   92.178740][ T5856] BTRFS error (device loop2): open_ctree failed: -12
[   92.196592][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   92.197135][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[   92.214324][ T5850] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   92.230366][ T5850] BTRFS error (device loop3): open_ctree failed: -12
[   92.338724][ T5899] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.378083][  T966] cfg80211: failed to load regulatory.db
[   92.389248][ T5774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5774)
[   92.389513][ T5901] loop1: detected capacity change from 0 to 64
[   92.460582][ T5899] netlink: 'syz.0.11': attribute type 10 has an invalid length.
[   92.776639][ T5899] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.787783][ T5911] Zero length message leads to an empty skb
[   92.914455][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'.
[   93.704377][ T5924] loop1: detected capacity change from 0 to 1024
[   93.763289][ T5924] EXT4-fs: inline encryption not supported
[   93.916975][ T5924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.026924][   T27] audit: type=1800 audit(1775366216.619:4): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="file1" dev="loop1" ino=15 res=0 errno=0
[   94.055945][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.140727][ T5936] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.19'.
[   94.292816][ T5812] usb 3-1: Using ep0 maxpacket: 32
[   94.335587][ T5812] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   94.360053][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.373731][ T5812] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   94.393641][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   94.413211][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   94.462543][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   94.500724][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   94.557086][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   94.595147][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   94.626977][ T5812] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   94.636800][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.659088][ T5812] usb 3-1: config 0 descriptor??
[   94.674044][ T5940] tipc: Started in network mode
[   94.686211][ T5940] tipc: Node identity 42f3cb7dd55, cluster identity 4711
[   94.695558][ T5940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.709224][ T5940] syzkaller0: entered promiscuous mode
[   94.715672][ T5940] syzkaller0: entered allmulticast mode
[   94.800709][ T5940] tipc: Resetting bearer <eth:syzkaller0>
[   94.831647][ T5938] tipc: Resetting bearer <eth:syzkaller0>
[   94.885076][ T5812] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   94.918117][ T5938] tipc: Disabling bearer <eth:syzkaller0>
[   94.970615][ T5812] usb 3-1: USB disconnect, device number 2
[   94.996566][ T5812] usblp0: removed
[   95.437983][ T5939] loop1: detected capacity change from 0 to 32768
[   95.445161][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.462382][ T5939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.20 (5939)
[   95.485497][  T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.496817][ T5939] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   95.509531][ T5939] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   95.520674][ T5939] BTRFS info (device loop1): using free space tree
[   95.638153][ T5812] usb 3-1: Using ep0 maxpacket: 32
[   95.663112][ T5939] BTRFS info (device loop1): enabling ssd optimizations
[   95.690277][ T5812] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   95.700089][ T5939] BTRFS info (device loop1): auto enabling async discard
[   95.709317][ T5812] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   95.773030][  T966] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   95.783346][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   95.793209][  T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.801527][  T966] usb 4-1: Product: syz
[   95.806032][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   95.819006][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   95.832507][  T966] usb 4-1: Manufacturer: syz
[   95.837236][  T966] usb 4-1: SerialNumber: syz
[   95.892793][   T27] audit: type=1800 audit(1775366218.479:5): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=260 res=0 errno=0
[   95.893844][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   95.932835][  T966] usb 4-1: config 0 descriptor??
[   95.957800][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   95.970992][   T27] audit: type=1800 audit(1775366218.519:6): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=260 res=0 errno=0
[   95.971806][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   96.027158][  T966] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   96.079914][  T966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.102871][ T5812] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   96.111294][ T5961] tipc: Started in network mode
[   96.118313][  T966] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[   96.130754][ T5961] tipc: Node identity ae6697450e6d, cluster identity 4711
[   96.150598][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.151056][ T5961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.167619][  T966] usb 4-1: media controller created
[   96.180701][ T5942] dvb-usb: bulk message failed: -22 (7/0)
[   96.212754][ T5962] syzkaller0: entered promiscuous mode
[   96.213239][ T5812] usb 3-1: config 0 descriptor??
[   96.231458][ T5962] syzkaller0: entered allmulticast mode
[   96.298576][  T966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.310036][ T5961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23'.
[   96.358068][ T5961] tipc: Resetting bearer <eth:syzkaller0>
[   96.398954][ T5960] tipc: Resetting bearer <eth:syzkaller0>
[   96.450080][ T5769] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   96.466783][ T5960] tipc: Disabling bearer <eth:syzkaller0>
[   96.484844][  T966] DVB: Unable to find symbol mt352_attach()
[   96.494646][ T5812] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   96.642862][  T966] DVB: Unable to find symbol nxt6000_attach()
[   96.649022][  T966] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[   96.705871][  T966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   96.758985][  T966] dvb-usb: schedule remote query interval to 1000 msecs.
[   96.783150][  T966] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[   96.819335][  T966] dvb-usb: bulk message failed: -22 (7/0)
[   96.832486][  T966] dvb-usb: bulk message failed: -22 (7/0)
[   96.848682][  T966] usb 4-1: USB disconnect, device number 2
[   97.104159][  T966] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[   97.108041][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[   97.350319][ T5981] netlink: 'syz.1.28': attribute type 10 has an invalid length.
[   97.420290][ T5981] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.819731][ T5992] tipc: Started in network mode
[   97.827713][ T5992] tipc: Node identity ea380c207862, cluster identity 4711
[   97.831287][ T5995] loop0: detected capacity change from 0 to 64
[   97.838644][ T5992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.871764][ T5992] syzkaller0: entered promiscuous mode
[   97.907610][ T5992] syzkaller0: entered allmulticast mode
[   97.971773][ T5992] tipc: Resetting bearer <eth:syzkaller0>
[   98.020462][ T5991] tipc: Resetting bearer <eth:syzkaller0>
[   98.044590][   T35] usb 3-1: USB disconnect, device number 3
[   98.085773][ T5991] tipc: Disabling bearer <eth:syzkaller0>
[   98.095496][   T35] usblp0: removed
[   99.170227][   T27] audit: type=1326 audit(1775366221.759:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.1.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981cd9c819 code=0x0
[   99.288659][ T6006] tipc: Started in network mode
[   99.296697][ T6006] tipc: Node identity 4a938666cf52, cluster identity 4711
[   99.304271][ T6006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.314554][ T6006] syzkaller0: entered promiscuous mode
[   99.320125][ T6006] syzkaller0: entered allmulticast mode
[   99.362762][ T6006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34'.
[   99.429055][ T6006] tipc: Resetting bearer <eth:syzkaller0>
[   99.455112][ T6005] tipc: Resetting bearer <eth:syzkaller0>
[   99.485390][ T6005] tipc: Disabling bearer <eth:syzkaller0>
[   99.522533][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.713056][    T9] usb 1-1: Using ep0 maxpacket: 32
[   99.724141][    T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   99.733647][    T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   99.743992][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   99.763681][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   99.785184][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   99.799647][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   99.810096][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   99.820983][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   99.854861][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   99.867632][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.893738][    T9] usb 1-1: config 0 descriptor??
[   99.942064][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'.
[   99.951650][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  100.101774][ T6019] netlink: 'syz.3.40': attribute type 10 has an invalid length.
[  100.153220][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  100.188082][ T5812] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  100.191767][ T6019] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.202485][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.227991][ T5812] usb 3-1: Product: syz
[  100.235103][    T9] usb 1-1: USB disconnect, device number 2
[  100.244161][ T5812] usb 3-1: Manufacturer: syz
[  100.251207][    T9] usblp0: removed
[  100.255153][ T5812] usb 3-1: SerialNumber: syz
[  100.298104][ T5812] usb 3-1: config 0 descriptor??
[  100.307908][ T5812] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  100.328188][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.338774][ T5812] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  100.386814][ T5812] usb 3-1: media controller created
[  100.445341][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.453563][ T6024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.462238][ T6024] syzkaller0: entered promiscuous mode
[  100.468856][ T6024] syzkaller0: entered allmulticast mode
[  100.491599][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[  100.512085][ T6023] tipc: Resetting bearer <eth:syzkaller0>
[  100.512639][ T6009] dvb-usb: bulk message failed: -22 (7/0)
[  100.553355][ T6023] tipc: Disabling bearer <eth:syzkaller0>
[  100.564545][ T5812] DVB: Unable to find symbol mt352_attach()
[  100.603478][ T5812] DVB: Unable to find symbol nxt6000_attach()
[  100.609846][ T5812] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  100.624272][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  100.642878][ T5812] dvb-usb: schedule remote query interval to 1000 msecs.
[  100.651529][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  100.674448][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  100.680290][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  100.705449][ T5812] usb 3-1: USB disconnect, device number 4
[  100.747837][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.818532][ T6030] loop3: detected capacity change from 0 to 512
[  100.874137][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  100.904731][ T6030] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.44: invalid indirect mapped block 256 (level 2)
[  100.925296][ T6030] EXT4-fs (loop3): 2 truncates cleaned up
[  100.933848][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.992801][    T9] usb 1-1: Using ep0 maxpacket: 32
[  101.007015][    T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  101.016505][   T27] audit: type=1800 audit(1775366223.599:8): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=15 res=0 errno=0
[  101.023643][    T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  101.322304][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  101.342271][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  101.358345][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  102.709621][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  102.754061][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  102.811147][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  102.884950][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  102.915201][ T5759] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  102.935961][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.965634][ T6043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.976476][    T9] usb 1-1: config 0 descriptor??
[  103.020356][    T9] usb 1-1: can't set config #0, error -71
[  103.029699][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'.
[  103.066283][    T9] usb 1-1: USB disconnect, device number 3
[  103.073156][ T6043] syzkaller0: entered promiscuous mode
[  103.080407][ T6043] syzkaller0: entered allmulticast mode
[  103.116888][ T5759] usb 4-1: device descriptor read/64, error -71
[  103.138991][ T6043] tipc: Resetting bearer <eth:syzkaller0>
[  103.153279][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[  103.202360][ T6042] tipc: Disabling bearer <eth:syzkaller0>
[  103.869388][ T6037] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.44: bg 0: block 5: invalid block bitmap
[  103.907557][ T6037] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  103.920754][ T6037] EXT4-fs (loop3): This should not happen!! Data will be lost
[  103.920754][ T6037] 
[  103.930529][ T6037] EXT4-fs (loop3): Total free blocks count 0
[  103.937132][ T6037] EXT4-fs (loop3): Free/Dirty block details
[  103.943195][ T6037] EXT4-fs (loop3): free_blocks=0
[  103.948167][ T6037] EXT4-fs (loop3): dirty_blocks=32
[  103.954401][ T6037] EXT4-fs (loop3): Block reservation details
[  103.960731][ T6037] EXT4-fs (loop3): i_reserved_data_blocks=32
[  104.058141][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.338383][ T6065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.347236][ T6065] syzkaller0: entered promiscuous mode
[  104.353676][ T6065] syzkaller0: entered allmulticast mode
[  104.406166][ T6065] tipc: Resetting bearer <eth:syzkaller0>
[  104.427871][ T6061] tipc: Resetting bearer <eth:syzkaller0>
[  104.456992][ T6061] tipc: Disabling bearer <eth:syzkaller0>
[  104.773179][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  104.882617][ T5759] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  104.972591][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  104.979910][ T5810] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  104.988604][ T5810] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  104.997680][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  105.007315][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.017088][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  105.027055][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  105.036997][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  105.047145][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  105.061283][ T5810] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  105.071278][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.085120][ T5810] usb 1-1: config 0 descriptor??
[  105.091416][ T5759] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  105.113489][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.122233][ T5759] usb 4-1: Product: syz
[  105.127111][ T5759] usb 4-1: Manufacturer: syz
[  105.142751][ T5759] usb 4-1: SerialNumber: syz
[  105.164221][ T5759] usb 4-1: config 0 descriptor??
[  105.224920][ T5759] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  105.237705][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  105.265242][ T6074] loop1: detected capacity change from 0 to 128
[  105.278194][ T5759] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  105.311947][ T5759] usb 4-1: media controller created
[  105.330297][ T5810] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  105.377382][ T5810] usb 1-1: USB disconnect, device number 4
[  105.389937][ T6072] dvb-usb: bulk message failed: -22 (7/0)
[  105.398222][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  105.413950][ T5810] usblp0: removed
[  105.541845][ T5759] DVB: Unable to find symbol mt352_attach()
[  105.545128][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'.
[  105.662818][ T5759] DVB: Unable to find symbol nxt6000_attach()
[  105.691589][ T5759] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  105.718729][ T5759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  105.727899][ T6084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.740616][ T5759] dvb-usb: schedule remote query interval to 1000 msecs.
[  105.744532][ T6084] syzkaller0: entered promiscuous mode
[  105.749197][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  105.760617][ T6084] syzkaller0: entered allmulticast mode
[  105.764635][ T5759] dvb-usb: bulk message failed: -22 (7/0)
[  105.777301][ T5759] dvb-usb: bulk message failed: -22 (7/0)
[  105.787911][ T5759] usb 4-1: USB disconnect, device number 4
[  105.921677][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[  105.988072][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[  106.522332][ T6082] tipc: Disabling bearer <eth:syzkaller0>
[  106.574195][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  106.782348][ T5810] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.894789][ T6096] loop2: detected capacity change from 0 to 512
[  106.936504][ T6096] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.67: invalid indirect mapped block 256 (level 2)
[  106.952868][ T6096] EXT4-fs (loop2): 2 truncates cleaned up
[  106.966641][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.993397][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  107.022135][ T5810] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  107.066174][ T5810] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  107.249107][   T27] audit: type=1800 audit(1775366229.709:9): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file1" dev="loop2" ino=15 res=0 errno=0
[  107.272658][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  107.295362][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.309824][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.328390][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  107.732787][ T5759] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  108.698720][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  108.712923][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  108.726052][ T5810] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  108.733675][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.753198][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.781093][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[  108.804059][ T5810] usb 1-1: config 0 descriptor??
[  108.819250][ T6104] tipc: Disabling bearer <eth:syzkaller0>
[  108.842801][ T5810] usb 1-1: can't set config #0, error -71
[  108.893096][ T5759] usb 3-1: device descriptor read/64, error -71
[  108.901380][ T5810] usb 1-1: USB disconnect, device number 5
[  109.105663][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'.
[  109.182570][ T5759] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  109.352616][ T5759] usb 3-1: device descriptor read/64, error -71
[  109.485938][ T5759] usb usb3-port1: attempt power cycle
[  109.602564][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.745616][ T6117] loop3: detected capacity change from 0 to 32768
[  109.761422][ T6117] =======================================================
[  109.761422][ T6117] WARNING: The mand mount option has been deprecated and
[  109.761422][ T6117]          and is ignored by this kernel. Remove the mand
[  109.761422][ T6117]          option from the mount to silence this warning.
[  109.761422][ T6117] =======================================================
[  109.842315][ T5812] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  109.854713][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.866376][ T6117] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.875995][ T5812] usb 2-1: Product: syz
[  109.880416][ T5812] usb 2-1: Manufacturer: syz
[  109.885326][ T5812] usb 2-1: SerialNumber: syz
[  109.909853][ T6108] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.67: bg 0: block 5: invalid block bitmap
[  109.932705][ T5759] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  109.940625][ T6108] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  109.954524][ T6108] EXT4-fs (loop2): This should not happen!! Data will be lost
[  109.954524][ T6108] 
[  109.965234][ T6108] EXT4-fs (loop2): Total free blocks count 0
[  109.971456][ T6108] EXT4-fs (loop2): Free/Dirty block details
[  109.977973][ T6108] EXT4-fs (loop2): free_blocks=0
[  109.983172][ T6108] EXT4-fs (loop2): dirty_blocks=32
[  109.988508][ T6108] EXT4-fs (loop2): Block reservation details
[  109.994592][ T6108] EXT4-fs (loop2): i_reserved_data_blocks=32
[  110.063341][ T5812] usb 2-1: config 0 descriptor??
[  110.070704][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.075708][ T5812] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  110.096894][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  110.109792][ T5812] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  110.121268][ T5812] usb 2-1: media controller created
[  110.149958][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.240722][ T5812] DVB: Unable to find symbol mt352_attach()
[  110.263063][ T5759] usb 3-1: device not accepting address 7, error -71
[  110.284949][ T6119] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  110.304544][ T6119] dvb-usb: bulk message failed: -22 (7/0)
[  110.339136][ T5812] DVB: Unable to find symbol nxt6000_attach()
[  110.347270][ T5812] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  110.373129][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  110.422223][ T5812] dvb-usb: schedule remote query interval to 1000 msecs.
[  110.447648][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  110.450762][ T6117] XFS (loop3): Ending clean mount
[  110.479630][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  110.498913][ T6131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.505662][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  110.529614][ T5812] usb 2-1: USB disconnect, device number 4
[  110.532900][ T6131] syzkaller0: entered promiscuous mode
[  110.552315][ T6131] syzkaller0: entered allmulticast mode
[  110.628483][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  110.723060][ T6131] tipc: Resetting bearer <eth:syzkaller0>
[  110.735467][ T6130] tipc: Resetting bearer <eth:syzkaller0>
[  110.741956][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.791811][ T6130] tipc: Disabling bearer <eth:syzkaller0>
[  111.577753][ T6146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.593781][ T6146] syzkaller0: entered promiscuous mode
[  111.599510][ T6146] syzkaller0: entered allmulticast mode
[  111.743116][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.461681][ T6153] tipc: Resetting bearer <eth:syzkaller0>
[  112.474561][ T6142] tipc: Resetting bearer <eth:syzkaller0>
[  112.495257][ T6142] tipc: Disabling bearer <eth:syzkaller0>
[  112.505672][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'.
[  112.589889][ T5874] usb 2-1: Using ep0 maxpacket: 32
[  112.612331][ T5874] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  112.652980][ T5874] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  112.668636][ T5874] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  112.688345][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  112.718756][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  112.732093][ T6159] loop2: detected capacity change from 0 to 512
[  112.749440][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  112.776873][ T5874] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  112.787864][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.819117][ T5874] usb 2-1: config 0 descriptor??
[  112.921481][ T6159] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.84: invalid indirect mapped block 256 (level 2)
[  112.958583][ T6159] EXT4-fs (loop2): 2 truncates cleaned up
[  112.972920][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.082651][ T6165] netlink: 'syz.3.85': attribute type 10 has an invalid length.
[  113.156864][ T5874] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  113.429056][   T27] audit: type=1800 audit(1775366236.019:10): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=15 res=0 errno=0
[  113.719852][ T6163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  114.159462][ T6158] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.84: bg 0: block 5: invalid block bitmap
[  114.563339][ T6158] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117
[  114.576326][ T6158] EXT4-fs (loop2): This should not happen!! Data will be lost
[  114.576326][ T6158] 
[  114.703974][ T5874] usb 2-1: USB disconnect, device number 5
[  114.712316][ T5874] usblp0: removed
[  114.749091][ T6165] veth0_vlan: left promiscuous mode
[  114.759603][ T6165] veth0_vlan: entered promiscuous mode
[  114.775831][ T6165] team0: Device veth0_vlan failed to register rx_handler
[  114.789379][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.983262][ T6165] syz.3.85 (6165) used greatest stack depth: 19592 bytes left
[  115.057091][ T6171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.078227][   T27] audit: type=1326 audit(1775366237.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981cd9c819 code=0x0
[  115.158338][ T6170] tipc: Resetting bearer <eth:syzkaller0>
[  115.173772][ T6172] syzkaller0: entered promiscuous mode
[  115.179505][ T6172] syzkaller0: entered allmulticast mode
[  115.193351][ T6167] tipc: Resetting bearer <eth:syzkaller0>
[  115.214551][ T6167] tipc: Disabling bearer <eth:syzkaller0>
[  115.559658][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.581439][ T6190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.591461][ T6190] syzkaller0: entered promiscuous mode
[  115.599010][ T6190] syzkaller0: entered allmulticast mode
[  115.625499][ T6190] tipc: Resetting bearer <eth:syzkaller0>
[  115.646667][ T6189] tipc: Resetting bearer <eth:syzkaller0>
[  115.846135][ T6189] tipc: Disabling bearer <eth:syzkaller0>
[  116.523417][ T5874] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  116.545826][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.573180][ T5874] usb 3-1: Product: syz
[  116.582833][ T5874] usb 3-1: Manufacturer: syz
[  116.587641][ T5874] usb 3-1: SerialNumber: syz
[  116.601906][ T5874] usb 3-1: config 0 descriptor??
[  116.634654][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  116.688916][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  116.703120][ T6204] loop3: detected capacity change from 0 to 512
[  116.703338][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  116.720248][ T5874] usb 3-1: media controller created
[  116.754706][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  116.754708][ T6204] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.97: invalid indirect mapped block 256 (level 2)
[  116.818417][ T6204] EXT4-fs (loop3): 2 truncates cleaned up
[  116.829187][ T5874] DVB: Unable to find symbol mt352_attach()
[  116.863652][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.876366][ T5813] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  116.887852][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  116.894944][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  116.908808][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  116.929212][   T27] audit: type=1800 audit(1775366239.519:12): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.97" name="file1" dev="loop3" ino=15 res=0 errno=0
[  116.954280][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  116.961657][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  117.085644][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  117.098353][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  117.242614][ T5813] usb 1-1: Using ep0 maxpacket: 32
[  117.330841][ T5813] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  117.492825][ T5813] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  117.576722][ T6203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.97: bg 0: block 5: invalid block bitmap
[  117.615745][ T5813] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  117.994255][ T6203] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  117.999114][  T966] dvb-usb: bulk message failed: -22 (7/0)
[  118.007012][ T6203] EXT4-fs (loop3): This should not happen!! Data will be lost
[  118.007012][ T6203] 
[  118.007049][ T6203] EXT4-fs (loop3): Total free blocks count 0
[  118.007063][ T6203] EXT4-fs (loop3): Free/Dirty block details
[  118.007077][ T6203] EXT4-fs (loop3): free_blocks=0
[  118.007092][ T6203] EXT4-fs (loop3): dirty_blocks=32
[  118.007105][ T6203] EXT4-fs (loop3): Block reservation details
[  118.007117][ T6203] EXT4-fs (loop3): i_reserved_data_blocks=32
[  118.009330][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  118.104662][ T5874] usb 3-1: USB disconnect, device number 9
[  118.112238][  T966] dvb-usb: error while querying for an remote control event.
[  118.158239][ T5813] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  118.169923][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  118.180402][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.183967][ T5813] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  118.202566][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.218876][ T5813] usb 1-1: config 0 descriptor??
[  118.378769][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  118.454575][ T5813] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  118.509980][ T5813] usb 1-1: USB disconnect, device number 6
[  118.525387][ T6219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.533635][ T5813] usblp0: removed
[  118.540017][ T6219] syzkaller0: entered promiscuous mode
[  118.548998][ T6219] syzkaller0: entered allmulticast mode
[  118.602341][ T6219] tipc: Resetting bearer <eth:syzkaller0>
[  118.623633][ T6217] tipc: Resetting bearer <eth:syzkaller0>
[  118.672985][   T27] audit: type=1326 audit(1775366241.269:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00acf9c819 code=0x0
[  118.709200][ T6217] tipc: Disabling bearer <eth:syzkaller0>
[  118.848733][ T6227] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  118.866389][   T27] audit: type=1326 audit(1775366241.419:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  118.894316][   T27] audit: type=1326 audit(1775366241.429:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  118.903081][ T6230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.936961][   T27] audit: type=1326 audit(1775366241.429:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  118.962187][   T27] audit: type=1326 audit(1775366241.429:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  118.985093][ T6230] syzkaller0: entered promiscuous mode
[  118.991476][ T6230] syzkaller0: entered allmulticast mode
[  119.014209][   T27] audit: type=1326 audit(1775366241.429:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  119.062630][   T27] audit: type=1326 audit(1775366241.429:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  119.086921][   T27] audit: type=1326 audit(1775366241.429:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  119.109773][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[  119.127611][   T27] audit: type=1326 audit(1775366241.429:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  119.158105][ T6229] tipc: Disabling bearer <eth:syzkaller0>
[  119.184178][   T27] audit: type=1326 audit(1775366241.429:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x7ffc0000
[  120.499949][ T6247] loop0: detected capacity change from 0 to 512
[  120.530004][ T6247] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.108: invalid indirect mapped block 256 (level 2)
[  120.555193][ T6247] EXT4-fs (loop0): 2 truncates cleaned up
[  120.563344][ T6247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.399857][ T6246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.108: bg 0: block 5: invalid block bitmap
[  121.599827][ T6246] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  121.612821][ T6246] EXT4-fs (loop0): This should not happen!! Data will be lost
[  121.612821][ T6246] 
[  121.623019][ T6246] EXT4-fs (loop0): Total free blocks count 0
[  121.629058][ T6246] EXT4-fs (loop0): Free/Dirty block details
[  121.635174][ T6246] EXT4-fs (loop0): free_blocks=0
[  121.640205][ T6246] EXT4-fs (loop0): dirty_blocks=32
[  121.645367][ T6246] EXT4-fs (loop0): Block reservation details
[  121.651557][ T6246] EXT4-fs (loop0): i_reserved_data_blocks=32
[  121.755602][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.873557][ T6257] loop0: detected capacity change from 0 to 512
[  122.063087][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.187013][ T6257] EXT4-fs (loop0): Test dummy encryption mode enabled
[  122.213904][ T6257] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.277992][ T5874] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  122.291463][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.300217][ T5874] usb 2-1: Product: syz
[  122.305231][ T5874] usb 2-1: Manufacturer: syz
[  122.309982][ T5874] usb 2-1: SerialNumber: syz
[  122.313424][ T6257] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.110: Directory hole found for htree leaf block 0
[  122.317919][ T5874] usb 2-1: config 0 descriptor??
[  122.347073][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  122.372212][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  122.382993][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  122.393453][ T5874] usb 2-1: media controller created
[  122.411546][ T6265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.412694][ T6257] EXT4-fs (loop0): Remounting filesystem read-only
[  122.443223][ T6265] syzkaller0: entered promiscuous mode
[  122.467181][ T6265] syzkaller0: entered allmulticast mode
[  122.485013][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.527419][ T6265] tipc: Resetting bearer <eth:syzkaller0>
[  122.538094][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.549349][ T5778] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  122.573794][ T6267] syzkaller0: entered promiscuous mode
[  122.581726][ T6267] syzkaller0: entered allmulticast mode
[  122.596720][ T6264] tipc: Resetting bearer <eth:syzkaller0>
[  122.615578][ T5874] DVB: Unable to find symbol mt352_attach()
[  122.677636][ T6264] tipc: Disabling bearer <eth:syzkaller0>
[  122.708275][ T6266] tipc: Resetting bearer <eth:syzkaller0>
[  122.721548][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  122.729812][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  122.756306][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  122.770202][ T6266] tipc: Disabling bearer <eth:syzkaller0>
[  122.806960][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  122.825188][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  122.835567][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  122.841617][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  122.854523][ T5874] usb 2-1: USB disconnect, device number 6
[  122.947853][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  122.973016][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  123.950092][ T6286] loop3: detected capacity change from 0 to 512
[  123.991499][ T6286] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.119: invalid indirect mapped block 256 (level 2)
[  124.030046][ T6286] EXT4-fs (loop3): 2 truncates cleaned up
[  124.051922][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.075866][ T5813] usb 1-1: Using ep0 maxpacket: 32
[  124.106073][ T5813] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  124.116361][ T5813] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  124.132949][ T5813] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  124.142629][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.153557][ T5813] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  124.163744][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  124.165305][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  124.165317][   T27] audit: type=1800 audit(1775366246.749:37): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=15 res=0 errno=0
[  124.176934][ T5813] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  124.176960][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.244058][ T5813] usb 1-1: config 0 descriptor??
[  124.311028][ T6285] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.119: bg 0: block 5: invalid block bitmap
[  124.375263][ T6285] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  124.392677][ T6285] EXT4-fs (loop3): This should not happen!! Data will be lost
[  124.392677][ T6285] 
[  124.412356][ T6285] EXT4-fs (loop3): Total free blocks count 0
[  124.432116][ T6285] EXT4-fs (loop3): Free/Dirty block details
[  124.442366][ T6285] EXT4-fs (loop3): free_blocks=0
[  124.448330][ T6285] EXT4-fs (loop3): dirty_blocks=32
[  124.461861][ T6285] EXT4-fs (loop3): Block reservation details
[  124.481128][ T6285] EXT4-fs (loop3): i_reserved_data_blocks=32
[  124.492941][ T5813] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  124.542750][ T5813] usb 1-1: USB disconnect, device number 7
[  124.601988][ T5813] usblp0: removed
[  124.624694][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.574659][ T6302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.583955][ T6302] syzkaller0: entered promiscuous mode
[  125.589477][ T6302] syzkaller0: entered allmulticast mode
[  125.678628][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[  125.699259][ T6304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.722860][ T6301] tipc: Resetting bearer <eth:syzkaller0>
[  125.778601][ T6301] tipc: Disabling bearer <eth:syzkaller0>
[  125.800956][ T6304] syzkaller0: entered promiscuous mode
[  125.814647][ T6304] syzkaller0: entered allmulticast mode
[  125.910952][ T6303] tipc: Resetting bearer <eth:syzkaller0>
[  125.980696][ T6297] loop3: detected capacity change from 0 to 32768
[  126.000845][ T6303] tipc: Disabling bearer <eth:syzkaller0>
[  126.080896][ T6297] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  126.122043][ T6297] JBD2: Ignoring recovery information on journal
[  126.213583][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  126.245591][ T6297] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  126.426047][ T5874] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  126.447057][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.474336][ T5874] usb 1-1: Product: syz
[  126.478682][ T5874] usb 1-1: Manufacturer: syz
[  126.490482][ T5874] usb 1-1: SerialNumber: syz
[  126.512793][ T5874] usb 1-1: config 0 descriptor??
[  126.531479][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  126.563114][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  126.587170][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  126.611822][ T5874] usb 1-1: media controller created
[  126.754622][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.374742][   T27] audit: type=1326 audit(1775366249.969:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x0
[  127.494779][ T6297] syz.3.123 (6297) used greatest stack depth: 19464 bytes left
[  127.602069][ T6330] loop0: detected capacity change from 0 to 512
[  127.623948][ T6330] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.132: invalid indirect mapped block 256 (level 2)
[  127.637969][ T5874] DVB: Unable to find symbol mt352_attach()
[  127.653754][ T6330] EXT4-fs (loop0): 2 truncates cleaned up
[  127.689837][ T6330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.714362][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  127.720624][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  127.743750][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  127.768715][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  127.780688][   T27] audit: type=1800 audit(1775366250.369:39): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="file1" dev="loop0" ino=15 res=0 errno=0
[  127.785215][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  127.832549][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  127.853045][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  127.883238][ T5874] usb 1-1: USB disconnect, device number 8
[  127.899430][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  127.940942][ T6329] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.132: bg 0: block 5: invalid block bitmap
[  127.954090][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  128.034106][ T6329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  128.072564][ T6329] EXT4-fs (loop0): This should not happen!! Data will be lost
[  128.072564][ T6329] 
[  128.082381][ T6329] EXT4-fs (loop0): Total free blocks count 0
[  128.122517][ T6329] EXT4-fs (loop0): Free/Dirty block details
[  128.128595][ T6329] EXT4-fs (loop0): free_blocks=0
[  128.157607][ T6329] EXT4-fs (loop0): dirty_blocks=32
[  128.172484][ T6329] EXT4-fs (loop0): Block reservation details
[  128.178971][ T6329] EXT4-fs (loop0): i_reserved_data_blocks=32
[  128.270855][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.285485][ T6343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.328204][ T6343] syzkaller0: entered promiscuous mode
[  128.364130][ T6343] syzkaller0: entered allmulticast mode
[  128.409993][ T6343] tipc: Resetting bearer <eth:syzkaller0>
[  128.434288][ T6342] tipc: Resetting bearer <eth:syzkaller0>
[  128.506091][ T6342] tipc: Disabling bearer <eth:syzkaller0>
[  129.262572][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  129.534517][ T5874] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  130.192964][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.201129][ T5874] usb 1-1: Product: syz
[  130.232400][ T5874] usb 1-1: Manufacturer: syz
[  130.237723][ T5874] usb 1-1: SerialNumber: syz
[  130.255476][ T5874] usb 1-1: config 0 descriptor??
[  130.264720][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  130.300150][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.321378][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  130.331436][ T5874] usb 1-1: media controller created
[  130.360031][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.483293][ T6360] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  130.540268][   T27] audit: type=1326 audit(1775366253.129:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.1.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981cd9c819 code=0x0
[  130.578191][ T5874] DVB: Unable to find symbol mt352_attach()
[  130.635315][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  130.660376][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  130.691766][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12
[  130.728874][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  130.772616][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  130.806535][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  130.812355][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  130.858514][ T5874] usb 1-1: USB disconnect, device number 9
[  131.008626][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  131.171032][ T6374] loop0: detected capacity change from 0 to 512
[  131.196263][ T6374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  131.231510][ T6374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  131.275387][ T6374] EXT4-fs (loop0): 1 truncate cleaned up
[  131.284383][ T6374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.341411][ T6378] loop3: detected capacity change from 0 to 512
[  131.406942][ T6366] loop2: detected capacity change from 0 to 40427
[  131.458135][ T6378] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.146: invalid indirect mapped block 256 (level 2)
[  131.513490][ T6366] F2FS-fs (loop2): heap/no_heap options were deprecated
[  131.547174][ T6366] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff
[  131.554326][ T6378] EXT4-fs (loop3): 2 truncates cleaned up
[  131.573771][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.917326][   T27] audit: type=1800 audit(1775366254.459:41): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.146" name="file1" dev="loop3" ino=15 res=0 errno=0
[  132.223249][ T6376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  132.271959][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.420868][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.595293][ T6386] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  133.242728][ T6394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.273435][ T6394] syzkaller0: entered promiscuous mode
[  133.292576][ T6394] syzkaller0: entered allmulticast mode
[  133.345643][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  133.356672][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  133.393746][ T6394] tipc: Resetting bearer <eth:syzkaller0>
[  133.433122][ T6393] tipc: Resetting bearer <eth:syzkaller0>
[  133.470066][ T6393] tipc: Disabling bearer <eth:syzkaller0>
[  134.077882][   T27] audit: type=1326 audit(1775366256.649:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00acf9c819 code=0x0
[  134.502653][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  134.697098][ T5874] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  134.698384][ T6416] loop3: detected capacity change from 0 to 512
[  134.730513][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.742563][ T5874] usb 1-1: Product: syz
[  134.746996][ T5874] usb 1-1: Manufacturer: syz
[  134.751735][ T5874] usb 1-1: SerialNumber: syz
[  134.761959][ T6416] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.157: invalid indirect mapped block 256 (level 2)
[  134.795602][ T6416] EXT4-fs (loop3): 2 truncates cleaned up
[  134.823433][ T6416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.857846][ T5874] usb 1-1: config 0 descriptor??
[  134.920205][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  135.313382][ T6418] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  135.413768][   T27] audit: type=1800 audit(1775366258.009:43): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.157" name="file1" dev="loop3" ino=15 res=0 errno=0
[  135.576609][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  135.614494][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  135.640386][ T5874] usb 1-1: media controller created
[  135.704168][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.838849][ T5874] DVB: Unable to find symbol mt352_attach()
[  135.851604][ T5812] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  135.950856][ T6425] Bluetooth: MGMT ver 1.22
[  135.973826][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  135.979993][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  136.013683][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13
[  136.036278][ T5812] usb 4-1: device descriptor read/64, error -71
[  136.057691][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  136.090255][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  136.119417][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  136.142722][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  136.174187][ T5874] usb 1-1: USB disconnect, device number 10
[  136.324876][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  136.348853][ T5812] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  136.496593][ T6439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.522639][ T5812] usb 4-1: device descriptor read/64, error -71
[  136.617261][   T27] audit: type=1326 audit(1775366259.189:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.1.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981cd9c819 code=0x0
[  136.649050][ T6443] syzkaller0: entered promiscuous mode
[  136.656969][ T6443] syzkaller0: entered allmulticast mode
[  136.667787][ T5812] usb usb4-port1: attempt power cycle
[  136.749268][ T6439] tipc: Resetting bearer <eth:syzkaller0>
[  136.762367][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[  136.783946][ T6438] tipc: Disabling bearer <eth:syzkaller0>
[  137.102998][ T5812] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  137.226463][ T5812] usb 4-1: device descriptor read/8, error -71
[  137.562961][ T5812] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  137.614823][ T5812] usb 4-1: device descriptor read/8, error -71
[  137.772709][ T5812] usb usb4-port1: unable to enumerate USB device
[  137.824754][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.202691][  T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  138.417635][  T787] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  138.447738][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.477254][  T787] usb 1-1: Product: syz
[  138.481517][  T787] usb 1-1: Manufacturer: syz
[  138.504867][  T787] usb 1-1: SerialNumber: syz
[  138.526168][  T787] usb 1-1: config 0 descriptor??
[  138.546636][  T787] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  138.566914][  T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.583850][  T787] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  138.600903][  T787] usb 1-1: media controller created
[  138.655205][ T6462] loop3: detected capacity change from 0 to 32768
[  138.656195][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.699049][ T6462] JBD2: Ignoring recovery information on journal
[  138.770515][ T6457] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  138.776002][ T6462] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  138.920487][  T787] DVB: Unable to find symbol mt352_attach()
[  138.967232][ T6462] overlayfs: upper fs does not support tmpfile.
[  139.035087][ T6462] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  139.076151][ T6462] overlayfs: upper fs missing required features.
[  139.107990][  T787] DVB: Unable to find symbol nxt6000_attach()
[  139.127276][  T787] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  139.174573][  T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  139.197571][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  139.205091][  T787] dvb-usb: schedule remote query interval to 1000 msecs.
[  139.213486][  T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  139.268978][  T787] dvb-usb: bulk message failed: -22 (7/0)
[  139.296253][  T787] dvb-usb: bulk message failed: -22 (7/0)
[  139.344563][  T787] usb 1-1: USB disconnect, device number 11
[  139.540961][  T787] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  139.673263][ T6469] loop0: detected capacity change from 0 to 1024
[  140.254010][ T6475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.262301][ T6475] syzkaller0: entered promiscuous mode
[  140.270851][ T6475] syzkaller0: entered allmulticast mode
[  140.342178][ T6475] tipc: Resetting bearer <eth:syzkaller0>
[  140.384977][ T6474] tipc: Resetting bearer <eth:syzkaller0>
[  140.407804][ T6474] tipc: Disabling bearer <eth:syzkaller0>
[  141.721248][   T27] audit: type=1326 audit(1775366264.309:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00acf9c819 code=0x0
[  142.181121][ T6490] loop2: detected capacity change from 0 to 512
[  142.239830][ T6490] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.179: invalid indirect mapped block 256 (level 2)
[  142.269519][ T6490] EXT4-fs (loop2): 2 truncates cleaned up
[  142.290535][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.489591][   T27] audit: type=1800 audit(1775366264.969:46): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=15 res=0 errno=0
[  142.526102][   T12] hfsplus: b-tree write err: -5, ino 25
[  142.563870][   T12] hfsplus: b-tree write err: -5, ino 4
[  142.586086][   T12] hfsplus: b-tree write err: -5, ino 2
[  142.620335][   T12] hfsplus: b-tree write err: -5, ino 26
[  143.022677][  T787] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  143.750350][ T6488] loop1: detected capacity change from 0 to 32768
[  143.768684][ T6488] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.783122][ T5813] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  143.811382][ T6488] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  143.821443][ T6488] BTRFS info (device loop1): using free space tree
[  143.862682][  T787] usb 3-1: device descriptor read/64, error -71
[  143.916005][ T6488] BTRFS info (device loop1): enabling ssd optimizations
[  143.926042][ T6488] BTRFS info (device loop1): auto enabling async discard
[  143.981009][ T5813] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  144.004633][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.014892][ T5813] usb 1-1: Product: syz
[  144.019224][ T5813] usb 1-1: Manufacturer: syz
[  144.024613][ T5813] usb 1-1: SerialNumber: syz
[  144.043366][ T5813] usb 1-1: config 0 descriptor??
[  144.053678][ T5813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  144.070962][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.084853][ T5813] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  144.096338][ T5813] usb 1-1: media controller created
[  144.142101][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.156726][ T6520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.169517][ T6520] syzkaller0: entered promiscuous mode
[  144.172987][  T787] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  144.175505][ T6520] syzkaller0: entered allmulticast mode
[  144.246015][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.270786][ T6498] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  144.287128][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[  144.329326][ T5813] DVB: Unable to find symbol mt352_attach()
[  144.353388][ T6519] tipc: Resetting bearer <eth:syzkaller0>
[  144.382959][  T787] usb 3-1: device descriptor read/64, error -71
[  144.428901][ T6519] tipc: Disabling bearer <eth:syzkaller0>
[  144.471673][ T5813] DVB: Unable to find symbol nxt6000_attach()
[  144.480120][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5785)
[  144.494467][ T5813] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  144.525371][  T787] usb usb3-port1: attempt power cycle
[  144.534540][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15
[  144.584289][ T5813] dvb-usb: schedule remote query interval to 1000 msecs.
[  144.603262][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  144.650527][ T5813] dvb-usb: bulk message failed: -22 (7/0)
[  144.668476][ T5813] dvb-usb: bulk message failed: -22 (7/0)
[  144.697201][ T5813] usb 1-1: USB disconnect, device number 12
[  144.972860][  T787] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  145.043356][  T787] usb 3-1: device descriptor read/8, error -71
[  145.392755][  T787] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  145.690182][ T6495] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.179: bg 0: block 5: invalid block bitmap
[  145.775411][ T6495] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  145.788260][ T6495] EXT4-fs (loop2): This should not happen!! Data will be lost
[  145.788260][ T6495] 
[  145.798512][ T6495] EXT4-fs (loop2): Total free blocks count 0
[  145.805353][ T6495] EXT4-fs (loop2): Free/Dirty block details
[  145.811892][ T6495] EXT4-fs (loop2): free_blocks=0
[  145.817567][ T6495] EXT4-fs (loop2): dirty_blocks=32
[  145.824246][ T6495] EXT4-fs (loop2): Block reservation details
[  145.830466][ T6495] EXT4-fs (loop2): i_reserved_data_blocks=32
[  145.945326][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  146.026761][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.100611][  T787] usb 3-1: device not accepting address 13, error -71
[  146.130552][   T27] audit: type=1326 audit(1775366268.719:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.0.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd982b9c819 code=0x0
[  146.163862][  T787] usb usb3-port1: unable to enumerate USB device
[  147.206701][ T6552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.251427][ T6552] syzkaller0: entered promiscuous mode
[  147.271925][ T6552] syzkaller0: entered allmulticast mode
[  147.409296][ T6552] tipc: Resetting bearer <eth:syzkaller0>
[  147.434261][ T6551] tipc: Resetting bearer <eth:syzkaller0>
[  147.472125][ T6551] tipc: Disabling bearer <eth:syzkaller0>
[  148.759827][ T6562] loop2: detected capacity change from 0 to 512
[  148.922576][ T5812] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  148.980865][ T6562] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.200: invalid indirect mapped block 256 (level 2)
[  149.050435][ T6562] EXT4-fs (loop2): 2 truncates cleaned up
[  149.073965][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.150236][ T5812] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  149.159900][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.182577][   T27] audit: type=1800 audit(1775366271.769:48): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="file1" dev="loop2" ino=15 res=0 errno=0
[  149.392652][ T5812] usb 1-1: Product: syz
[  149.396914][ T5812] usb 1-1: Manufacturer: syz
[  149.412589][ T5812] usb 1-1: SerialNumber: syz
[  149.437956][ T5812] usb 1-1: config 0 descriptor??
[  149.812610][ T5813] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  149.971272][ T6574] loop3: detected capacity change from 0 to 128
[  149.983137][ T5813] usb 3-1: device descriptor read/64, error -71
[  150.272653][ T5813] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  150.302871][ T5812] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  150.623006][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  150.712384][ T5812] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  150.845861][   T27] audit: type=1326 audit(1775366273.439:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.0.206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd982b9c819 code=0x0
[  150.846164][ T5812] usb 1-1: media controller created
[  150.965692][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.972556][ T5813] usb 3-1: device descriptor read/64, error -71
[  151.007830][ T4556] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:11: bg 0: block 5: invalid block bitmap
[  151.043820][ T4556] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117
[  151.091478][ T4556] EXT4-fs (loop2): This should not happen!! Data will be lost
[  151.091478][ T4556] 
[  151.092626][ T6582] loop1: detected capacity change from 0 to 16
[  151.113657][ T5813] usb usb3-port1: attempt power cycle
[  151.195878][ T5812] DVB: Unable to find symbol mt352_attach()
[  151.197135][ T6582] erofs: (device loop1): mounted with root inode @ nid 36.
[  151.263484][ T6585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.275224][ T6582] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 510
[  151.298490][ T6585] syzkaller0: entered promiscuous mode
[  151.314790][ T6585] syzkaller0: entered allmulticast mode
[  151.350177][ T5812] DVB: Unable to find symbol nxt6000_attach()
[  151.368205][ T5812] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  151.403502][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16
[  151.416193][ T6585] tipc: Resetting bearer <eth:syzkaller0>
[  151.434952][ T5812] dvb-usb: schedule remote query interval to 1000 msecs.
[  151.446714][ T6583] tipc: Resetting bearer <eth:syzkaller0>
[  151.458474][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  151.479364][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  151.487486][ T5812] dvb-usb: bulk message failed: -22 (7/0)
[  151.505262][ T6583] tipc: Disabling bearer <eth:syzkaller0>
[  151.508022][ T5812] usb 1-1: USB disconnect, device number 13
[  151.539952][ T5813] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  151.583584][ T5813] usb 3-1: device descriptor read/8, error -71
[  151.620490][ T5812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  151.830586][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.079268][ T6594] loop3: detected capacity change from 0 to 8192
[  152.113837][ T6594] FAT-fs (loop3): Unrecognized mount option "ÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew" or missing value
[  152.813203][ T5759] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  153.037358][ T5759] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  153.087741][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.100561][ T5759] usb 4-1: Product: syz
[  153.105625][ T5759] usb 4-1: Manufacturer: syz
[  153.114448][ T5759] usb 4-1: SerialNumber: syz
[  153.131707][ T5759] usb 4-1: config 0 descriptor??
[  153.174589][ T5759] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  153.218249][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  153.253362][ T5759] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  153.272658][ T5759] usb 4-1: media controller created
[  153.310862][   T27] audit: type=1326 audit(1775366275.899:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936c99c819 code=0x0
[  153.343600][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.378147][ T6604] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  153.520376][ T5759] DVB: Unable to find symbol mt352_attach()
[  153.656702][ T5759] DVB: Unable to find symbol nxt6000_attach()
[  153.682548][ T5759] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  153.783959][ T5759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  153.835806][ T5759] dvb-usb: schedule remote query interval to 1000 msecs.
[  153.847068][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  153.859340][ T5759] dvb-usb: bulk message failed: -22 (7/0)
[  153.868261][ T5759] dvb-usb: bulk message failed: -22 (7/0)
[  153.882169][ T5759] usb 4-1: USB disconnect, device number 9
[  154.102163][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  154.272313][ T6619] loop3: detected capacity change from 0 to 512
[  154.322839][ T6621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.333334][ T6621] syzkaller0: entered promiscuous mode
[  154.345762][ T6621] syzkaller0: entered allmulticast mode
[  154.367021][ T6619] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.220: invalid indirect mapped block 256 (level 2)
[  154.404015][ T6619] EXT4-fs (loop3): 2 truncates cleaned up
[  154.451049][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.515977][   T27] audit: type=1800 audit(1775366277.109:51): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.220" name="file1" dev="loop3" ino=15 res=0 errno=0
[  154.564153][ T6621] tipc: Resetting bearer <eth:syzkaller0>
[  154.595789][ T6620] tipc: Resetting bearer <eth:syzkaller0>
[  154.630333][ T6628] loop2: detected capacity change from 0 to 1024
[  154.704510][ T6628] EXT4-fs: inline encryption not supported
[  154.738890][ T6620] tipc: Disabling bearer <eth:syzkaller0>
[  154.761301][ T6628] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  155.115577][ T6618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.220: bg 0: block 5: invalid block bitmap
[  155.206351][ T6618] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  155.219377][ T6618] EXT4-fs (loop3): This should not happen!! Data will be lost
[  155.219377][ T6618] 
[  155.229939][ T6618] EXT4-fs (loop3): Total free blocks count 0
[  155.236583][ T6618] EXT4-fs (loop3): Free/Dirty block details
[  155.242656][ T6618] EXT4-fs (loop3): free_blocks=0
[  155.247823][ T6618] EXT4-fs (loop3): dirty_blocks=32
[  155.253226][ T6618] EXT4-fs (loop3): Block reservation details
[  155.259561][ T6618] EXT4-fs (loop3): i_reserved_data_blocks=32
[  155.584826][ T6628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.715230][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.944291][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.160044][ T6646] loop2: detected capacity change from 0 to 2048
[  157.173227][ T5810] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  157.196312][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.282908][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  157.370670][ T5810] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  157.380400][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.389586][ T5810] usb 1-1: Product: syz
[  157.395134][ T5810] usb 1-1: Manufacturer: syz
[  157.400102][ T5810] usb 1-1: SerialNumber: syz
[  157.477999][ T5810] usb 1-1: config 0 descriptor??
[  157.508481][ T5813] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  157.553823][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.566605][ T5810] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  157.593102][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  157.603571][ T5813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.638550][ T5813] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  157.661709][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  157.671512][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  157.684309][ T5810] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  157.695471][ T5813] usb 4-1: Product: syz
[  157.699919][ T5813] usb 4-1: Manufacturer: syz
[  157.705327][ T5810] usb 1-1: media controller created
[  157.866284][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.984562][ T5813] cdc_wdm 4-1:1.0: skipping garbage
[  157.986472][ T6640] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  157.992464][ T5813] cdc_wdm 4-1:1.0: skipping garbage
[  158.062699][ T6640] dvb-usb: bulk message failed: -22 (7/0)
[  158.069238][ T5813] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  158.078976][ T5813] cdc_wdm 4-1:1.0: Unknown control protocol
[  158.232245][ T5810] DVB: Unable to find symbol mt352_attach()
[  158.242328][ T5813] usb 4-1: USB disconnect, device number 10
[  158.335565][ T5810] DVB: Unable to find symbol nxt6000_attach()
[  158.354883][ T5810] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  158.370812][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18
[  158.539730][ T5810] dvb-usb: schedule remote query interval to 1000 msecs.
[  158.552580][ T5810] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  158.565343][ T5810] dvb-usb: bulk message failed: -22 (7/0)
[  158.573150][ T5810] dvb-usb: bulk message failed: -22 (7/0)
[  158.583395][ T5810] usb 1-1: USB disconnect, device number 14
[  158.688352][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.521457][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.234'.
[  159.547611][ T6665] gtp0: entered promiscuous mode
[  159.559452][ T5810] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  159.591740][ T6667] loop1: detected capacity change from 0 to 512
[  159.660833][ T6670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.676597][ T6667] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.236: invalid indirect mapped block 256 (level 2)
[  159.689340][ T6670] syzkaller0: entered promiscuous mode
[  159.722791][ T6670] syzkaller0: entered allmulticast mode
[  159.738380][ T6667] EXT4-fs (loop1): 2 truncates cleaned up
[  159.757217][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.840401][   T27] audit: type=1800 audit(1775366282.429:52): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.236" name="file1" dev="loop1" ino=15 res=0 errno=0
[  160.026976][ T6670] tipc: Resetting bearer <eth:syzkaller0>
[  160.467095][ T6666] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.236: bg 0: block 5: invalid block bitmap
[  160.701060][ T6666] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  160.715232][ T6666] EXT4-fs (loop1): This should not happen!! Data will be lost
[  160.715232][ T6666] 
[  160.725044][ T6666] EXT4-fs (loop1): Total free blocks count 0
[  160.731284][ T6666] EXT4-fs (loop1): Free/Dirty block details
[  160.737521][ T6666] EXT4-fs (loop1): free_blocks=0
[  160.742587][ T6666] EXT4-fs (loop1): dirty_blocks=32
[  160.747877][ T6666] EXT4-fs (loop1): Block reservation details
[  160.754171][ T6666] EXT4-fs (loop1): i_reserved_data_blocks=32
[  160.852897][ T6669] tipc: Resetting bearer <eth:syzkaller0>
[  160.971676][ T6669] tipc: Disabling bearer <eth:syzkaller0>
[  160.991742][ T5874] tipc: Node number set to 2244052582
[  161.346147][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.913919][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  162.090788][ T6696] loop0: detected capacity change from 0 to 32768
[  162.101984][ T6696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.244 (6696)
[  162.117251][ T5874] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  162.140643][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.152568][ T5874] usb 4-1: Product: syz
[  162.157082][ T5874] usb 4-1: Manufacturer: syz
[  162.161958][ T5874] usb 4-1: SerialNumber: syz
[  162.170104][ T5874] usb 4-1: config 0 descriptor??
[  162.174797][ T6696] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.181112][ T5874] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  162.204445][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  162.222174][ T6696] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  162.237284][ T6696] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  162.245243][ T5874] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  162.264950][ T6696] BTRFS info (device loop0): trying to use backup root at mount time
[  162.280245][ T5874] usb 4-1: media controller created
[  162.283080][ T6696] BTRFS info (device loop0): enabling auto defrag
[  162.302327][ T6696] BTRFS info (device loop0): use no compression
[  162.319105][ T6696] BTRFS info (device loop0): max_inline at 4096
[  162.328518][ T6696] BTRFS info (device loop0): using free space tree
[  162.469351][ T6694] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  162.497168][ T6694] dvb-usb: bulk message failed: -22 (7/0)
[  162.503923][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.438003][ T5874] DVB: Unable to find symbol mt352_attach()
[  163.457985][ T6696] BTRFS info (device loop0): enabling ssd optimizations
[  163.465962][ T6696] BTRFS info (device loop0): auto enabling async discard
[  163.585316][ T5874] DVB: Unable to find symbol nxt6000_attach()
[  163.591578][ T5874] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  163.625485][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  163.676512][ T5778] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.693669][ T5874] dvb-usb: schedule remote query interval to 1000 msecs.
[  163.721471][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  163.750853][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  163.763799][ T5874] dvb-usb: bulk message failed: -22 (7/0)
[  163.797388][ T5874] usb 4-1: USB disconnect, device number 11
[  163.861531][ T5874] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  164.124264][ T6725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.139340][ T6725] syzkaller0: entered promiscuous mode
[  164.149058][ T5785] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (5785)
[  164.199781][ T6725] syzkaller0: entered allmulticast mode
[  164.338008][ T6725] tipc: Resetting bearer <eth:syzkaller0>
[  164.408676][ T6724] tipc: Resetting bearer <eth:syzkaller0>
[  164.534741][ T6724] tipc: Disabling bearer <eth:syzkaller0>
[  164.823591][ T6735] loop0: detected capacity change from 0 to 512
[  164.884977][ T6735] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.251: invalid indirect mapped block 256 (level 2)
[  164.931346][ T6723] loop1: detected capacity change from 0 to 40427
[  164.942624][ T6723] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  164.951262][ T6723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  164.952870][ T6735] EXT4-fs (loop0): 2 truncates cleaned up
[  164.984029][ T6735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.062456][ T6723] F2FS-fs (loop1): Found nat_bits in checkpoint
[  165.101447][   T27] audit: type=1800 audit(1775366287.689:53): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=15 res=0 errno=0
[  165.697293][ T6734] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.251: bg 0: block 5: invalid block bitmap
[  166.244365][ T6734] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  166.257307][ T6734] EXT4-fs (loop0): This should not happen!! Data will be lost
[  166.257307][ T6734] 
[  166.267510][ T6734] EXT4-fs (loop0): Total free blocks count 0
[  166.274089][ T6734] EXT4-fs (loop0): Free/Dirty block details
[  166.280264][ T6734] EXT4-fs (loop0): free_blocks=0
[  166.285321][ T6734] EXT4-fs (loop0): dirty_blocks=32
[  166.291007][ T6734] EXT4-fs (loop0): Block reservation details
[  166.297772][ T6734] EXT4-fs (loop0): i_reserved_data_blocks=32
[  166.519003][ T6723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  166.540141][ T6723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  167.006485][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.336056][ T6750] loop2: detected capacity change from 0 to 32768
[  169.454131][ T6750] 
[  169.454131][ T6750]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.454131][ T6750] 
[  169.598858][ T6750] ERROR: (device loop2): diWrite: ixpxd invalid
[  169.598858][ T6750] 
[  169.654151][ T6750] ERROR: (device loop2): txCommit: 
[  169.654151][ T6750] 
[  169.830790][ T5781] 
[  169.830790][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.830790][ T5781] 
[  169.875187][ T5781] 
[  169.875187][ T5781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.875187][ T5781] 
[  170.062475][    C0] sched: RT throttling activated
[  170.062580][ T5874] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  170.557921][ T6769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.594940][ T6769] syzkaller0: entered promiscuous mode
[  170.627573][ T6769] syzkaller0: entered allmulticast mode
[  170.729962][ T6769] tipc: Resetting bearer <eth:syzkaller0>
[  170.759440][ T6768] tipc: Resetting bearer <eth:syzkaller0>
[  170.776166][ T5874] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  170.791206][ T6774] loop3: detected capacity change from 0 to 2048
[  170.793612][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.821250][ T6774] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.826378][ T5874] usb 1-1: Product: syz
[  170.841801][ T5874] usb 1-1: Manufacturer: syz
[  170.851664][ T5874] usb 1-1: SerialNumber: syz
[  170.865469][ T5874] usb 1-1: config 0 descriptor??
[  170.878182][ T6768] tipc: Disabling bearer <eth:syzkaller0>
[  170.924534][ T6774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.969371][   T27] audit: type=1800 audit(1775366293.559:54): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="file1" dev="loop3" ino=15 res=0 errno=0
[  170.994474][ T6774] EXT4-fs (loop3): Online defrag not supported with bigalloc
[  171.012882][   T27] audit: type=1800 audit(1775366293.589:55): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="file1" dev="loop3" ino=15 res=0 errno=0
[  171.064624][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.124717][ T5874] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  171.214556][ T6771] loop1: detected capacity change from 0 to 32768
[  171.263897][ T6771] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.290856][ T6771] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  171.313906][ T6771] BTRFS info (device loop1): using free space tree
[  171.502807][ T6771] BTRFS info (device loop1): enabling ssd optimizations
[  171.548679][ T6771] BTRFS info (device loop1): auto enabling async discard
[  171.680345][ T6799] loop3: detected capacity change from 0 to 2048
[  171.791744][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.810932][ T6799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.950068][ T6799] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  172.044818][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.081052][ T5979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5979)
[  172.231286][ T6779] loop2: detected capacity change from 0 to 40427
[  172.311987][ T6779] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  172.335466][ T6779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  172.413243][ T6779] F2FS-fs (loop2): invalid crc_offset: 33558524
[  172.484180][ T6779] F2FS-fs (loop2): Found nat_bits in checkpoint
[  172.537026][ T6808] kvm: faulting far call emulation tainted memory
[  172.569264][ T5874] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  172.610089][ T5874] usb 1-1: USB disconnect, device number 15
[  172.700116][ T6779] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  172.732065][ T6779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.809305][ T6815] loop3: detected capacity change from 0 to 2048
[  172.907142][ T6815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.192573][ T6821] loop2: detected capacity change from 0 to 128
[  173.432701][ T6821] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  173.450574][ T6823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.458852][ T6823] syzkaller0: entered promiscuous mode
[  173.465314][ T6823] syzkaller0: entered allmulticast mode
[  173.486442][ T6821] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  173.560324][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[  173.591511][ T6822] tipc: Resetting bearer <eth:syzkaller0>
[  173.773815][ T6822] tipc: Disabling bearer <eth:syzkaller0>
[  174.032170][ T6832] process 'syz.2.271' launched './file1' with NULL argv: empty string added
[  174.558740][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.291496][ T6826] loop3: detected capacity change from 0 to 40427
[  175.343010][ T6826] F2FS-fs (loop3): heap/no_heap options were deprecated
[  175.350406][ T6826] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff
[  175.916894][ T6836] loop2: detected capacity change from 0 to 32768
[  175.964367][ T6836] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  175.983338][ T5812] libceph: connect (1)[c::]:6789 error -101
[  175.990679][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  176.037944][ T5812] libceph: connect (1)[c::]:6789 error -101
[  176.044380][ T5812] libceph: mon0 (1)[c::]:6789 connect error
[  176.075465][ T6854] ceph: No mds server is up or the cluster is laggy
[  176.088524][ T6856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.142539][ T6856] syzkaller0: entered promiscuous mode
[  176.155060][ T6856] syzkaller0: entered allmulticast mode
[  176.278487][ T6856] tipc: Resetting bearer <eth:syzkaller0>
[  176.315193][ T5759] libceph: connect (1)[c::]:6789 error -101
[  176.323774][ T5759] libceph: mon0 (1)[c::]:6789 connect error
[  176.331760][ T5979] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  176.371855][ T6855] tipc: Resetting bearer <eth:syzkaller0>
[  176.542525][ T5759] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  176.571667][ T6855] tipc: Disabling bearer <eth:syzkaller0>
[  176.754763][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  176.772547][ T5759] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  176.802254][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  176.829269][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  176.876078][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  176.896696][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  176.918930][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  176.932960][ T5759] usb 3-1: Product: syz
[  176.937329][ T5759] usb 3-1: Manufacturer: syz
[  176.962817][ T5759] cdc_wdm 3-1:1.0: skipping garbage
[  176.968778][ T5759] cdc_wdm 3-1:1.0: skipping garbage
[  176.986044][ T5759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  176.997379][ T5759] cdc_wdm 3-1:1.0: Unknown control protocol
[  177.191732][ T5759] usb 3-1: USB disconnect, device number 18
[  178.042886][ T5759] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  178.426255][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  178.439488][ T5759] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  178.450065][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  178.470002][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  178.488554][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  178.509253][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  178.519464][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  178.529623][ T5759] usb 3-1: Product: syz
[  178.537905][ T5759] usb 3-1: Manufacturer: syz
[  178.548538][ T5759] cdc_wdm 3-1:1.0: skipping garbage
[  178.564125][ T5759] cdc_wdm 3-1:1.0: skipping garbage
[  178.580830][ T5759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  178.592265][ T5759] cdc_wdm 3-1:1.0: Unknown control protocol
[  178.756143][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.762060][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  178.768665][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.774611][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.780845][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.787027][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.795252][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.801427][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.807885][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.814006][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.820018][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.825970][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.831914][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.840326][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.846572][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.852892][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.858970][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.865928][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.872170][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.878555][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.884717][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.891294][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.897376][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.903273][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.909396][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.915757][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.921777][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.928325][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.934503][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.941072][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.947469][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.953395][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.959369][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.966004][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.971999][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  178.978853][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.984683][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  178.992518][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  178.998904][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.004939][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.011000][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.017164][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.023232][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.029205][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.035652][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.041630][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.047729][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.054001][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.059888][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.065827][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.071899][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.080652][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.086530][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.092502][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.098964][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.105182][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.111059][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.117030][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.122979][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.130058][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.136839][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.143048][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE
[  179.151337][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.157703][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.163679][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.169886][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.176128][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.182068][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.187975][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.193996][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.200277][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.206192][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.212156][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.218137][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.224014][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.230241][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.236220][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.242258][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.248918][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.256304][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.262308][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.272502][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.278959][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.285361][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.291292][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.297810][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.304582][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.310502][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.316460][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.322621][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.328886][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.334996][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.340872][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.346740][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.352633][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.359047][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.365189][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.370967][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.376895][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.382879][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.389039][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.395537][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.401617][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.407801][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.415186][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.421077][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.427300][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.433582][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.439493][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.445684][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.451616][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.457770][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.463760][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.469865][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.475783][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.481845][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.487875][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.493911][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.499929][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.506264][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.512895][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.519494][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.525665][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.532351][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  179.538693][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  179.569779][ T5759] usb 3-1: USB disconnect, device number 19
[  179.889547][ T6883] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  180.638448][ T6892] loop2: detected capacity change from 0 to 64
[  181.203471][ T6900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.221836][ T6900] syzkaller0: entered promiscuous mode
[  181.228131][ T6900] syzkaller0: entered allmulticast mode
[  181.321658][ T6900] tipc: Resetting bearer <eth:syzkaller0>
[  181.349238][ T6898] tipc: Resetting bearer <eth:syzkaller0>
[  181.395941][ T6898] tipc: Disabling bearer <eth:syzkaller0>
[  181.574978][ T6894] loop3: detected capacity change from 0 to 32768
[  181.600294][ T6894] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  181.797738][ T5785] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  184.598378][ T6932] loop0: detected capacity change from 0 to 128
[  185.263116][   T27] audit: type=1800 audit(1775366307.829:56): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.306" name="file2" dev="loop0" ino=1048595 res=0 errno=0
[  185.813020][ T6939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.833433][ T6939] syzkaller0: entered promiscuous mode
[  185.839337][ T6939] syzkaller0: entered allmulticast mode
[  185.916700][ T6939] tipc: Resetting bearer <eth:syzkaller0>
[  185.927975][ T6938] tipc: Resetting bearer <eth:syzkaller0>
[  185.994086][ T6938] tipc: Disabling bearer <eth:syzkaller0>
[  186.226801][ T6941] loop0: detected capacity change from 0 to 512
[  186.293451][ T6941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.309: invalid indirect mapped block 256 (level 2)
[  186.348084][ T6941] EXT4-fs (loop0): 2 truncates cleaned up
[  186.470720][ T6941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.590474][   T27] audit: type=1800 audit(1775366309.179:57): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.309" name="file1" dev="loop0" ino=15 res=0 errno=0
[  186.825118][ T6949] loop3: detected capacity change from 0 to 512
[  187.242489][ T5813] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  187.322809][ T6945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  187.501279][ T6949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.709027][ T6949] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.971577][ T6949] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.312: corrupted xattr block 33: invalid checksum
[  188.040110][   T27] audit: type=1800 audit(1775366310.629:58): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=15 res=0 errno=0
[  188.072587][ T5813] usb 1-1: device descriptor read/64, error -71
[  188.129825][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.142598][ T6943] loop2: detected capacity change from 0 to 32768
[  188.179005][ T6943] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  188.343906][ T5813] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  188.350835][ T5785] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  188.532604][ T5813] usb 1-1: device descriptor read/64, error -71
[  188.760009][ T5813] usb usb1-port1: attempt power cycle
[  189.260906][ T6950] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  189.273687][ T6950] EXT4-fs (loop0): This should not happen!! Data will be lost
[  189.273687][ T6950] 
[  189.283548][ T6950] EXT4-fs (loop0): Total free blocks count 0
[  189.289668][ T6950] EXT4-fs (loop0): Free/Dirty block details
[  189.295917][ T6950] EXT4-fs (loop0): free_blocks=0
[  189.301601][ T6950] EXT4-fs (loop0): dirty_blocks=32
[  189.307101][ T6950] EXT4-fs (loop0): Block reservation details
[  189.313696][ T6950] EXT4-fs (loop0): i_reserved_data_blocks=32
[  189.455182][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.202814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  193.509721][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'.
[  193.749053][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.782535][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.797496][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.818513][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.831056][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  193.853385][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.021374][ T6994] loop0: detected capacity change from 0 to 512
[  194.112861][ T6981] loop2: detected capacity change from 0 to 32768
[  194.123815][ T6994] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.325: invalid indirect mapped block 256 (level 2)
[  194.192784][ T6981] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  194.217858][ T6994] EXT4-fs (loop0): 2 truncates cleaned up
[  194.262889][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.278050][ T6998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.305797][ T6998] syzkaller0: entered promiscuous mode
[  194.311354][ T6998] syzkaller0: entered allmulticast mode
[  194.357130][   T27] audit: type=1800 audit(1775366316.949:59): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="file1" dev="loop0" ino=15 res=0 errno=0
[  194.566411][ T3518] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:9: bg 0: block 5: invalid block bitmap
[  194.617582][ T6998] tipc: Resetting bearer <eth:syzkaller0>
[  194.631887][ T3518] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  194.653061][ T3518] EXT4-fs (loop0): This should not happen!! Data will be lost
[  194.653061][ T3518] 
[  194.778089][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  194.787050][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  194.824517][ T6996] tipc: Resetting bearer <eth:syzkaller0>
[  195.216847][ T6996] tipc: Disabling bearer <eth:syzkaller0>
[  195.276657][ T5874] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  195.393015][ T6989] chnl_net:caif_netlink_parms(): no params data found
[  195.473255][ T5874] usb 1-1: device descriptor read/64, error -71
[  196.269179][   T51] Bluetooth: hci4: command tx timeout
[  197.682274][ T5874] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  197.826225][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.094667][ T7026] loop2: detected capacity change from 0 to 16
[  198.115737][ T3518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.135053][ T7026] erofs: (device loop2): mounted with root inode @ nid 36.
[  198.242032][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.282565][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.290291][ T6989] bridge_slave_0: entered allmulticast mode
[  198.324069][ T6989] bridge_slave_0: entered promiscuous mode
[  198.345325][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.385752][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.393725][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'.
[  198.423885][ T6989] bridge_slave_1: entered allmulticast mode
[  198.457034][ T6989] bridge_slave_1: entered promiscuous mode
[  198.675011][ T3518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.874108][ T3518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.914822][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.970094][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.064880][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  199.078974][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.261611][ T6989] team0: Port device team_slave_0 added
[  199.274424][ T6989] team0: Port device team_slave_1 added
[  199.355677][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.372567][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.418702][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.466545][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.505827][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.519144][ T7042] loop2: detected capacity change from 0 to 32768
[  199.541381][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.577288][ T5085] Bluetooth: hci4: command tx timeout
[  199.767644][ T7042] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  200.400753][ T6989] hsr_slave_0: entered promiscuous mode
[  200.420045][ T6993] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  200.453509][ T6989] hsr_slave_1: entered promiscuous mode
[  200.469866][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.490175][ T6989] Cannot create hsr debugfs directory
[  200.787989][ T3518] tipc: Left network mode
[  200.974655][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  201.119777][ T7044] loop3: detected capacity change from 0 to 32768
[  201.193182][    T9] usb 1-1: Using ep0 maxpacket: 8
[  201.201601][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.212696][    T9] usb 1-1: config 0 has no interfaces?
[  201.218832][    T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  201.228091][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.238924][    T9] usb 1-1: config 0 descriptor??
[  201.244465][ T7044] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  201.302748][ T7044] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.507017][ T7044] XFS (loop3): Ending clean mount
[  201.535548][   T35] usb 1-1: USB disconnect, device number 21
[  201.587358][ T7044] XFS (loop3): Quotacheck needed: Please wait.
[  201.643999][ T5085] Bluetooth: hci4: command tx timeout
[  201.896024][ T7044] XFS (loop3): Quotacheck: Done.
[  202.116542][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.080414][ T7086] loop3: detected capacity change from 0 to 32768
[  203.179750][ T7086] (syz.3.342,7086,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  203.202243][ T7086] (syz.3.342,7086,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  203.281119][ T7086] JBD2: Ignoring recovery information on journal
[  203.341087][ T7086] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.738435][ T5085] Bluetooth: hci4: command tx timeout
[  203.818352][ T7086] 
[  203.820830][ T7086] ======================================================
[  203.827943][ T7086] WARNING: possible circular locking dependency detected
[  203.835093][ T7086] syzkaller #0 Not tainted
[  203.839635][ T7086] ------------------------------------------------------
[  203.846683][ T7086] syz.3.342/7086 is trying to acquire lock:
[  203.852599][ T7086] ffff88805e4aeab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  203.862105][ T7086] 
[  203.862105][ T7086] but task is already holding lock:
[  203.869574][ T7086] ffff888020f478e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  203.880066][ T7086] 
[  203.880066][ T7086] which lock already depends on the new lock.
[  203.880066][ T7086] 
[  203.890921][ T7086] 
[  203.890921][ T7086] the existing dependency chain (in reverse order) is:
[  203.900231][ T7086] 
[  203.900231][ T7086] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  203.909200][ T7086]        down_read+0x46/0x2e0
[  203.913906][ T7086]        ocfs2_start_trans+0x3a8/0x6f0
[  203.919388][ T7086]        ocfs2_mknod+0xf1d/0x2300
[  203.924520][ T7086]        ocfs2_create+0x196/0x430
[  203.929580][ T7086]        path_openat+0x12a0/0x3230
[  203.934816][ T7086]        do_filp_open+0x1f5/0x430
[  203.940030][ T7086]        do_sys_openat2+0x134/0x1d0
[  203.945249][ T7086]        __x64_sys_openat+0x139/0x160
[  203.950815][ T7086]        do_syscall_64+0x55/0xa0
[  203.955857][ T7086]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.962550][ T7086] 
[  203.962550][ T7086] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  203.970347][ T7086]        ocfs2_start_trans+0x2a9/0x6f0
[  203.976094][ T7086]        ocfs2_xattr_set+0xeb7/0x13e0
[  203.981655][ T7086]        __vfs_removexattr+0x425/0x460
[  203.987208][ T7086]        __vfs_removexattr_locked+0x1e8/0x230
[  203.993742][ T7086]        vfs_removexattr+0x81/0x1b0
[  203.999041][ T7086]        ovl_get_workdir+0xd6c/0x17c0
[  204.004433][ T7086]        ovl_fill_super+0x13ff/0x3620
[  204.009831][ T7086]        get_tree_nodev+0xb5/0x140
[  204.014978][ T7086]        vfs_get_tree+0x8c/0x280
[  204.020010][ T7086]        do_new_mount+0x24b/0xa40
[  204.025036][ T7086]        __se_sys_mount+0x2e7/0x3d0
[  204.030232][ T7086]        do_syscall_64+0x55/0xa0
[  204.035364][ T7086]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.041786][ T7086] 
[  204.041786][ T7086] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  204.049685][ T7086]        __lock_acquire+0x2df1/0x7d40
[  204.055074][ T7086]        lock_acquire+0x19e/0x420
[  204.060090][ T7086]        down_read+0x46/0x2e0
[  204.064770][ T7086]        ocfs2_init_acl+0x30a/0x770
[  204.070060][ T7086]        ocfs2_mknod+0x140f/0x2300
[  204.075364][ T7086]        ocfs2_create+0x196/0x430
[  204.080571][ T7086]        path_openat+0x12a0/0x3230
[  204.085791][ T7086]        do_filp_open+0x1f5/0x430
[  204.090928][ T7086]        do_sys_openat2+0x134/0x1d0
[  204.096162][ T7086]        __x64_sys_openat+0x139/0x160
[  204.101749][ T7086]        do_syscall_64+0x55/0xa0
[  204.106888][ T7086]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.113416][ T7086] 
[  204.113416][ T7086] other info that might help us debug this:
[  204.113416][ T7086] 
[  204.123897][ T7086] Chain exists of:
[  204.123897][ T7086]   &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier
[  204.123897][ T7086] 
[  204.138328][ T7086]  Possible unsafe locking scenario:
[  204.138328][ T7086] 
[  204.145960][ T7086]        CPU0                    CPU1
[  204.151329][ T7086]        ----                    ----
[  204.156789][ T7086]   rlock(&journal->j_trans_barrier);
[  204.162426][ T7086]                                lock(sb_internal#3);
[  204.169296][ T7086]                                lock(&journal->j_trans_barrier);
[  204.177151][ T7086]   rlock(&oi->ip_xattr_sem);
[  204.181931][ T7086] 
[  204.181931][ T7086]  *** DEADLOCK ***
[  204.181931][ T7086] 
[  204.190445][ T7086] 8 locks held by syz.3.342/7086:
[  204.195649][ T7086]  #0: ffff888078114418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  204.204954][ T7086]  #1: ffff88805e4aed98 (&type->i_mutex_dir_key#9){+.+.}-{3:3}, at: path_openat+0x7dc/0x3230
[  204.215189][ T7086]  #2: ffff8880776c1818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.229109][ T7086]  #3: ffff8880776c09d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.243163][ T7086]  #4: ffff8880776c42d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  204.257820][ T7086]  #5: ffff888078114608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300
[  204.267420][ T7086]  #6: ffff888020f478e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  204.278836][ T7086]  #7: ffff88807af36990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0
[  204.289047][ T7086] 
[  204.289047][ T7086] stack backtrace:
[  204.294946][ T7086] CPU: 0 PID: 7086 Comm: syz.3.342 Not tainted syzkaller #0
[  204.302236][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.312295][ T7086] Call Trace:
[  204.315664][ T7086]  <TASK>
[  204.318684][ T7086]  dump_stack_lvl+0x18c/0x250
[  204.323467][ T7086]  ? load_image+0x400/0x400
[  204.327998][ T7086]  ? show_regs_print_info+0x20/0x20
[  204.333250][ T7086]  ? print_circular_bug+0x12b/0x1a0
[  204.338758][ T7086]  check_noncircular+0x2fc/0x400
[  204.344070][ T7086]  ? print_deadlock_bug+0x5d0/0x5d0
[  204.349482][ T7086]  ? _find_first_zero_bit+0xd3/0x100
[  204.354872][ T7086]  ? add_lock_to_list+0x191/0x280
[  204.360082][ T7086]  __lock_acquire+0x2df1/0x7d40
[  204.364963][ T7086]  ? verify_lock_unused+0x140/0x140
[  204.370529][ T7086]  ? __lock_acquire+0x7d40/0x7d40
[  204.375836][ T7086]  ? do_raw_spin_lock+0x11f/0x2c0
[  204.381053][ T7086]  lock_acquire+0x19e/0x420
[  204.385652][ T7086]  ? ocfs2_init_acl+0x30a/0x770
[  204.390694][ T7086]  ? __might_sleep+0xe0/0xe0
[  204.395301][ T7086]  ? read_lock_is_recursive+0x20/0x20
[  204.400765][ T7086]  ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0
[  204.407804][ T7086]  ? dquot_alloc_inode+0x772/0xa40
[  204.412931][ T7086]  down_read+0x46/0x2e0
[  204.417182][ T7086]  ? ocfs2_init_acl+0x30a/0x770
[  204.422463][ T7086]  ocfs2_init_acl+0x30a/0x770
[  204.427397][ T7086]  ? ocfs2_mknod_locked+0x159/0x290
[  204.433078][ T7086]  ? ocfs2_acl_chmod+0x330/0x330
[  204.438024][ T7086]  ? dquot_alloc_inode+0x8ac/0xa40
[  204.443139][ T7086]  ? dquot_alloc_inode+0x15e/0xa40
[  204.448318][ T7086]  ? ocfs2_block_signals+0x9b/0xe0
[  204.453539][ T7086]  ? ocfs2_init_security_get+0x139/0x1a0
[  204.459358][ T7086]  ocfs2_mknod+0x140f/0x2300
[  204.464060][ T7086]  ? ocfs2_mkdir+0x430/0x430
[  204.468915][ T7086]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  204.474815][ T7086]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  204.480860][ T7086]  ? ocfs2_inode_unlock+0xa5/0x140
[  204.485975][ T7086]  ? __lock_acquire+0x7d40/0x7d40
[  204.491113][ T7086]  ? __rwlock_init+0x150/0x150
[  204.495984][ T7086]  ? do_raw_spin_unlock+0x121/0x230
[  204.501535][ T7086]  ? rcu_is_watching+0x15/0xb0
[  204.506301][ T7086]  ? ocfs2_lookup+0x494/0x950
[  204.510979][ T7086]  ocfs2_create+0x196/0x430
[  204.515672][ T7086]  ? ocfs2_update_inode_fsync_trans+0x240/0x240
[  204.521912][ T7086]  ? from_kgid+0x16d/0x690
[  204.526425][ T7086]  ? ocfs2_lookup+0x950/0x950
[  204.531103][ T7086]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  204.536133][ T7086]  ? inode_permission+0xf3/0x480
[  204.541072][ T7086]  ? bpf_lsm_inode_create+0x9/0x10
[  204.546267][ T7086]  ? security_inode_create+0xb7/0x100
[  204.551740][ T7086]  ? ocfs2_lookup+0x950/0x950
[  204.556504][ T7086]  path_openat+0x12a0/0x3230
[  204.561107][ T7086]  ? do_filp_open+0x430/0x430
[  204.565781][ T7086]  ? __virt_addr_valid+0x18c/0x540
[  204.571083][ T7086]  do_filp_open+0x1f5/0x430
[  204.575775][ T7086]  ? vfs_tmpfile+0x490/0x490
[  204.580509][ T7086]  ? _raw_spin_unlock+0x28/0x40
[  204.585387][ T7086]  ? alloc_fd+0x58f/0x630
[  204.590344][ T7086]  do_sys_openat2+0x134/0x1d0
[  204.595439][ T7086]  ? do_sys_open+0xe0/0xe0
[  204.599914][ T7086]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  204.606412][ T7086]  ? lock_chain_count+0x20/0x20
[  204.611473][ T7086]  __x64_sys_openat+0x139/0x160
[  204.616442][ T7086]  do_syscall_64+0x55/0xa0
[  204.620881][ T7086]  ? clear_bhb_loop+0x40/0x90
[  204.625649][ T7086]  ? clear_bhb_loop+0x40/0x90
[  204.630399][ T7086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.636501][ T7086] RIP: 0033:0x7f00acf9c819
[  204.640922][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.661158][ T7086] RSP: 002b:00007f00ade24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  204.669695][ T7086] RAX: ffffffffffffffda RBX: 00007f00ad215fa0 RCX: 00007f00acf9c819
[  204.677772][ T7086] RDX: 0000000000105042 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  204.685833][ T7086] RBP: 00007f00ad032c91 R08: 0000000000000000 R09: 0000000000000000
[  204.693907][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.701892][ T7086] R13: 00007f00ad216038 R14: 00007f00ad215fa0 R15: 00007ffcaff35238
[  204.709866][ T7086]  </TASK>
[  204.725841][   T27] audit: type=1800 audit(1775366327.309:60): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.342" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  204.758180][   T27] audit: type=1800 audit(1775366327.319:61): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.342" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  204.844164][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  205.508588][ T7084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.518876][ T7087] syzkaller0: entered promiscuous mode
[  205.524962][ T7087] syzkaller0: entered allmulticast mode
[  205.567812][ T7093] tipc: Resetting bearer <eth:syzkaller0>
[  205.609021][ T7093] tipc: Disabling bearer <eth:syzkaller0>
[  205.757522][ T6989] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  205.768720][ T6989] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  205.780226][ T6989] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  205.791312][ T6989] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  205.897606][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.930165][ T6989] 8021q: adding VLAN 0 to HW filter on device team0
[  205.945139][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.953552][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.982004][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.989233][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.069131][ T3518] bond0: (slave wlan1): Releasing backup interface
[  206.230917][ T3518] hsr_slave_0: left promiscuous mode
[  206.246621][ T3518] hsr_slave_1: left promiscuous mode
[  206.259165][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.280381][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.290424][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.298271][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.307297][ T3518] bridge_slave_1: left allmulticast mode
[  206.315074][ T3518] bridge_slave_1: left promiscuous mode
[  206.320930][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.330886][ T3518] bridge_slave_0: left allmulticast mode
[  206.338159][ T3518] bridge_slave_0: left promiscuous mode
[  206.344247][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.358620][ T3518] veth1_macvtap: left promiscuous mode
[  206.364405][ T3518] veth0_macvtap: left promiscuous mode
[  206.370137][ T3518] veth1_vlan: left promiscuous mode
[  206.376399][ T3518] veth0_vlan: left promiscuous mode
[  206.687764][ T3518] team0 (unregistering): Port device team_slave_1 removed
[  206.717413][ T3518] team0 (unregistering): Port device team_slave_0 removed
[  206.746705][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.777858][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.904146][ T3518] bond0 (unregistering): Released all slaves
[  206.978332][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.082908][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  207.089276][ T5772] Bluetooth: hci2: command 0x0406 tx timeout
[  207.095675][ T5775] Bluetooth: hci3: command 0x0406 tx timeout
[  207.332013][ T6989] veth0_vlan: entered promiscuous mode
[  207.347120][ T6989] veth1_vlan: entered promiscuous mode
[  207.395651][ T6989] veth0_macvtap: entered promiscuous mode
[  207.407840][ T6989] veth1_macvtap: entered promiscuous mode
[  207.428001][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.439022][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.449857][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.460915][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.470966][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.481672][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.495973][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.511152][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.521948][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.532030][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.543933][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.554429][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.565960][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.578577][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.597954][ T6989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.609581][ T6989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.620188][ T6989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.629900][ T6989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.673551][ T6989] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
[  207.706591][ T4115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.713864][ T6989] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
[  207.716606][ T4115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.747151][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.758434][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50