last executing test programs:

13.020671214s ago: executing program 2 (id=1435):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)=ANY=[@ANYBLOB='warrier,nodiscard,norecovery,order=strict,nobarrier,order=strict,nodiscard,order=relaxed,,'], 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x4000000, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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")
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x2, 0x8, 0x0, 0x64, 0xf8, 0x0, 0x0, 0x0, 0x88, 0x1, 0xfd, 0x2}, 0xe)
shutdown(r1, 0x1)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x610000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000003240)={{r0}, r5, 0x0, @unused=[0x4, 0x5, 0x3, 0xdf], @subvolid=0x10})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000540)={0x40, 0x9, 0x3, "182c17"}, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r8, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x0, 0x42474752, 0x140, 0xefff8000, 0x2, @stepwise={{0x1, 0x1}, {0x80, 0x5}, {0x3, 0xc433}}})
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f0000002240)=""/4095, 0xfff}], 0x2}, 0xffffffff}], 0x2, 0x406, 0x0)

9.19083314s ago: executing program 1 (id=1445):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0)
r1 = dup(r0)
read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mmap(&(0x7f0000672000/0x4000)=nil, 0x4000, 0x5, 0x2010, r0, 0xf5f68000)
sendto$inet(r2, &(0x7f0000001040)="8932ed209b2309", 0x7, 0x6000c804, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe6, 0x64, &(0x7f0000000080)="c14d75383658a27c0a2c8b3c65bfd1c5e6816627c66ab0b466beda95bb358a43c0dd88e64956ca12705f7be2abef920af01e187b487fbded09d25e14c58f953ea43b063748426c2d1ba31acc7ca3836631c59c1ebf4947b423425be3f23cf2f2faac590341f63552a8ac36ba640efd746bb3ba4bb342057ca61f108ddd467ce47693a465ecbcdfcdf86b8a5ce89d58e73209bbee0185f3e6338bca052804a6717cf4a0fea6f26b62694ee5eaaad34e8547f309f1665896bca59908926d8ed8f69a663c22df1d21da3b20197553b3df689c4c74028b309285ea6a3845f66beb5df750d500e198", &(0x7f00000001c0)=""/100, 0x6, 0x0, 0xd7, 0x5e, &(0x7f0000000340)="f817e2d0a6adc85a78f86b22972c332676c932ab93ba32302333b38827181bf61ba0577099cdc0a9d0cc302e8b47c7b64a40788b39978eb0efca0e2b9c388116eaf0e613f1fd6857737432750a7b7cd01885299f10a80e2715ce3f20504ce06a267efb67ea040c2a95f50c75423c7eba266f1398b70f435404a2ed07734fb4cc108a1134c7739c1291c4ef354d26b52693417a06c48ac25e62d39242c95fe3ee8c2bb2dc53173c7386f3b6c212842923fb51318b23860b7abc71486039994bc073129f9c67d1940a4ac79e8c95bc690379c014560e4f72", &(0x7f0000000240)="10027c12c36a597f204fa557bbf4d2b90e07db387b5d63f23983c9b3be381cc7460d75517e3af9dccea0ad6c7f4cc719b0cd3086cc49ca95c615d8b5382d37d9edfc0ff5a3bd57a746f3bcb57e9bc3c3769f64fafda378063c9174f1970a", 0x5, 0x0, 0xfffffffc}, 0x4c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001080)={<r3=>0x0, "200bc506119a56a35dd79de3f5309867"})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002080)={r3, "e4e2ecd9c44d1ece1de9c0d8784b332c"})
clock_gettime(0xb, &(0x7f0000000040))

7.380669723s ago: executing program 2 (id=1449):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10}}], 0x1, 0x4800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x100000500)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setrlimit(0x7, &(0x7f0000000000)={0x9, 0x7})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000)

7.376075218s ago: executing program 3 (id=1450):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
pwrite64(r0, 0x0, 0x0, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0)

7.260922981s ago: executing program 4 (id=1451):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

6.979179035s ago: executing program 1 (id=1452):
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6.556280026s ago: executing program 4 (id=1453):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)={0x34, 0x3, 0x0, {0x3, 0x13, 0x0, './binderfs/custom0\x00'}}, 0x34)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
flock(0xffffffffffffffff, 0x8)

6.141445336s ago: executing program 1 (id=1455):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c)

6.004593319s ago: executing program 0 (id=1456):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)={0x34, 0x3, 0x0, {0x3, 0x13, 0x0, './binderfs/custom0\x00'}}, 0x34)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

5.676211207s ago: executing program 4 (id=1457):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/551, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=0x0], 0x233)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80))
mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x0, 0x541102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
listen(0xffffffffffffffff, 0x0)
socket(0x28, 0x5, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000008000000bc6500001600000000000000", @ANYRES32=r5], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400"], 0x50)

5.63966468s ago: executing program 2 (id=1458):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000580)=0x1, 0x4)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x4, 0x98}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xb3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xb6}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xde, &(0x7f0000000780)=@string={0xde, 0x3, "d62dbb200ae82aa319b070eb36b06a0651125706d6d9a346b532e4fcf7ef28576034636b1e18486f6825a762c0630e960b2268f6af061352451e59e4bb2900ccba6f58f57b643f6a4992db69dafbbd748727874117e0325d5b8cf7a2edd3869486387c2a116e009cc127fce978f28ea44280e8a11a3831aa454bfe016cfe1c628457166f3a3eb5761f58f24dfef18e8705e7f1c737fad8a65e88920dc7df248d14c6b8135874833e57569303cd17c6a0497eaf6bd75b347dcc806dcc3e79bf433687a7bfa6fd7a80563075c18d70d9af30a05aa4afc6cb3f2ec0af25"}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "b9142d12e5fb131867c9e4d189095f5cdbfd89b21ae58f48298a34127e5d7c592b2842794e3052c74f92c8586817"}}]})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r1, &(0x7f00000013c0)=""/208, 0x31, 0x401)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
io_setup(0x206, &(0x7f0000000200)=<r5=>0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180), 0xde, 0x53b, &(0x7f0000000e00)="$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")
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00')
r6 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
io_submit(r5, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80, 0x0, 0x0, 0x3f00}])
openat$full(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x4, 0x5, 0x0, {0x9, @pix_mp={0x1, 0x405, 0x30385056, 0x0, 0x3b7cf101fdb6e239, [{0x0, 0x20}, {0x8, 0x8}, {0x0, 0x3}, {0x1, 0xfffffffc}, {0x40000, 0xa}, {0x0, 0xffffffff}, {0x7}], 0x3, 0x0, 0x8, 0x0, 0x1}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000880)=""/115, 0x41000, 0x3, '\x00', r4, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x1, 0x2, 0xdb8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x5, 0xc}, {0x1, 0x4, 0x6, 0x9}], 0x10, 0x1e9}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@newlink={0xb4, 0x10, 0xc3b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x7192c, 0x1006}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8001}, @IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "78b3b99d6c98eaf1f6534008fa8d967c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a37e094ae65ca7c634b780fd809de19c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "85f07c25b3e7abdf56cb8803fac87af4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bbb8c8506c1d81f3eeb44536854700"}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fe7a280fc0968e1aefd5f7ec8ab6d871"}, @IFLA_PORT_VF={0x8, 0x1, 0x1a8d}]}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffd}]}, 0xb4}}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0xf7, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0xb7, 0xc5, 0x8, 0x7}, 0x2a, &(0x7f0000000400)={0x5, 0xf, 0x2a, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x7, 0xa5, 0x0, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd, 0xc0, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0xd3}]}, 0x6, [{0xe1, &(0x7f0000000200)=@string={0xe1, 0x3, "36825de63a8632084813342547eb3361d5940613be830b57af30d0d995d699f1f348e85ba71068db93344c3bcd09e2266babc2258b72b82275953fc420a4375483c3384924db1e7785333120e3e1f99e0111992afa3ac68e25cdf872fa6aa54c50cb58023e366df1ba729f4fffe9c01a2830f9712d4c3fded0cce4f3c386a460b640a644d9d48876ecc7f458171744d1b75b4af01ebf19593d68a481b0779667418340e6844ac659f746bfc858474320c278e7fb2a23abc20a8f1af3e40cc027205aee516b0e52511eb7b05d01e3d4a3c0ed251f610e1ac72d0a90eb41742b"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xb4, &(0x7f00000005c0)=@string={0xb4, 0x3, "9905ba1ee5e3a7278960e6ad3a6456966309b737853af70805acf3682ff68895aabf9795514deca3c4b338a96027d172c30d3bec971f0d1b4dc5de1c71a6584292a20f6377f698181843335a0f538797b7d94762b828c03bd3f05f16ac9f884a940dfde0245a4dc90c7b1214c14f6bc6bee2dac11e60acecaec24208aac9348d1755ca3b1f0bd659cbaa9c6c962cf6aca4c824649868f755e429f8fcfbc151039028912f5a2ce3eba2c53cf0bc17d83a3e8c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]})

5.266763081s ago: executing program 1 (id=1459):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)=ANY=[@ANYBLOB='warrier,nodiscard,norecovery,order=strict,nobarrier,order=strict,nodiscard,order=relaxed,,'], 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x4000000, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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")
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x2, 0x8, 0x0, 0x64, 0xf8, 0x0, 0x0, 0x0, 0x88, 0x1, 0xfd, 0x2}, 0xe)
shutdown(r1, 0x1)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x610000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000003240)={{r0}, r5, 0x0, @unused=[0x4, 0x5, 0x3, 0xdf], @subvolid=0x10})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000540)={0x40, 0x9, 0x3, "182c17"}, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x0, 0x42474752, 0x140, 0xefff8000, 0x2, @stepwise={{0x1, 0x1}, {0x80, 0x5}, {0x3, 0xc433}}})
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f0000002240)=""/4095, 0xfff}], 0x2}, 0xffffffff}], 0x2, 0x406, 0x0)

5.148603544s ago: executing program 0 (id=1460):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x100000, 0x1, r2, 0x8})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

4.660994731s ago: executing program 4 (id=1461):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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")
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})
open(&(0x7f0000000140)='./file1\x00', 0x1e3042, 0x9c)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x3, 0x80, 0x3000006}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x6}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
unshare(0x26000680)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r4, 0xfffd, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

4.609258557s ago: executing program 3 (id=1462):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0)
r1 = dup(r0)
read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mmap(&(0x7f0000672000/0x4000)=nil, 0x4000, 0x5, 0x2010, r0, 0xf5f68000)
sendto$inet(r2, &(0x7f0000001040)="8932ed209b2309", 0x7, 0x6000c804, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe6, 0x64, &(0x7f0000000080)="c14d75383658a27c0a2c8b3c65bfd1c5e6816627c66ab0b466beda95bb358a43c0dd88e64956ca12705f7be2abef920af01e187b487fbded09d25e14c58f953ea43b063748426c2d1ba31acc7ca3836631c59c1ebf4947b423425be3f23cf2f2faac590341f63552a8ac36ba640efd746bb3ba4bb342057ca61f108ddd467ce47693a465ecbcdfcdf86b8a5ce89d58e73209bbee0185f3e6338bca052804a6717cf4a0fea6f26b62694ee5eaaad34e8547f309f1665896bca59908926d8ed8f69a663c22df1d21da3b20197553b3df689c4c74028b309285ea6a3845f66beb5df750d500e198", &(0x7f00000001c0)=""/100, 0x6, 0x0, 0xd7, 0x5e, &(0x7f0000000340)="f817e2d0a6adc85a78f86b22972c332676c932ab93ba32302333b38827181bf61ba0577099cdc0a9d0cc302e8b47c7b64a40788b39978eb0efca0e2b9c388116eaf0e613f1fd6857737432750a7b7cd01885299f10a80e2715ce3f20504ce06a267efb67ea040c2a95f50c75423c7eba266f1398b70f435404a2ed07734fb4cc108a1134c7739c1291c4ef354d26b52693417a06c48ac25e62d39242c95fe3ee8c2bb2dc53173c7386f3b6c212842923fb51318b23860b7abc71486039994bc073129f9c67d1940a4ac79e8c95bc690379c014560e4f72", &(0x7f0000000240)="10027c12c36a597f204fa557bbf4d2b90e07db387b5d63f23983c9b3be381cc7460d75517e3af9dccea0ad6c7f4cc719b0cd3086cc49ca95c615d8b5382d37d9edfc0ff5a3bd57a746f3bcb57e9bc3c3769f64fafda378063c9174f1970a", 0x5, 0x0, 0xfffffffc}, 0x4c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001080)={<r3=>0x0, "200bc506119a56a35dd79de3f5309867"})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002080)={r3, "e4e2ecd9c44d1ece1de9c0d8784b332c"})
clock_gettime(0xb, &(0x7f0000000040))

3.271186687s ago: executing program 0 (id=1463):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.99145668s ago: executing program 4 (id=1464):
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
dup(r0)
pipe(0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)

2.744260955s ago: executing program 2 (id=1465):
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2.634298928s ago: executing program 3 (id=1466):
r0 = socket(0x15, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r3=>0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @loopback, @remote, 0x8, 0x700, 0x400076, 0x3e6}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r3, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x35cbed5e909d5f12}, 0x4000014)
getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000000340)=""/17, &(0x7f0000000000)=0x11)

2.487996575s ago: executing program 0 (id=1467):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)={0x34, 0x3, 0x0, {0x3, 0x13, 0x0, './binderfs/custom0\x00'}}, 0x34)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
flock(0xffffffffffffffff, 0x8)

2.26433049s ago: executing program 3 (id=1468):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10}}], 0x1, 0x4800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x100000500)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setrlimit(0x7, &(0x7f0000000000)={0x9, 0x7})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000)

1.94205931s ago: executing program 2 (id=1469):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c)

1.838450647s ago: executing program 0 (id=1470):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)={0x34, 0x3, 0x0, {0x3, 0x13, 0x0, './binderfs/custom0\x00'}}, 0x34)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.596726582s ago: executing program 1 (id=1471):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/551, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=0x0], 0x233)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80))
mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x0, 0x541102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
listen(r1, 0x0)
socket(0x28, 0x5, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000008000000bc6500001600000000000000", @ANYRES32=r5], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400"], 0x50)

1.049911226s ago: executing program 2 (id=1472):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
pwrite64(r0, 0x0, 0x0, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0)

981.511128ms ago: executing program 3 (id=1473):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x100000, 0x1, r2, 0x8})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

979.173199ms ago: executing program 0 (id=1474):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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")
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})
open(&(0x7f0000000140)='./file1\x00', 0x1e3042, 0x9c)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x3, 0x80, 0x3000006}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x6}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
unshare(0x26000680)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r4, 0xfffd, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

682.633831ms ago: executing program 4 (id=1475):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000580)=0x1, 0x4)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x4, 0x98}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xb3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xb6}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xde, &(0x7f0000000780)=@string={0xde, 0x3, "d62dbb200ae82aa319b070eb36b06a0651125706d6d9a346b532e4fcf7ef28576034636b1e18486f6825a762c0630e960b2268f6af061352451e59e4bb2900ccba6f58f57b643f6a4992db69dafbbd748727874117e0325d5b8cf7a2edd3869486387c2a116e009cc127fce978f28ea44280e8a11a3831aa454bfe016cfe1c628457166f3a3eb5761f58f24dfef18e8705e7f1c737fad8a65e88920dc7df248d14c6b8135874833e57569303cd17c6a0497eaf6bd75b347dcc806dcc3e79bf433687a7bfa6fd7a80563075c18d70d9af30a05aa4afc6cb3f2ec0af25"}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "b9142d12e5fb131867c9e4d189095f5cdbfd89b21ae58f48298a34127e5d7c592b2842794e3052c74f92c8586817"}}]})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
pread64(r1, &(0x7f00000013c0)=""/208, 0x31, 0x401)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180), 0xde, 0x53b, &(0x7f0000000e00)="$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")
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00')
r5 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
io_submit(r4, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80, 0x0, 0x0, 0x3f00}])
openat$full(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x4, 0x5, 0x0, {0x9, @pix_mp={0x1, 0x405, 0x30385056, 0x0, 0x3b7cf101fdb6e239, [{0x0, 0x20}, {0x8, 0x8}, {0x0, 0x3}, {0x1, 0xfffffffc}, {0x40000, 0xa}, {0x0, 0xffffffff}, {0x7}], 0x3, 0x0, 0x8, 0x0, 0x1}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x73, &(0x7f0000000880)=""/115, 0x41000, 0x3, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x1, 0x2, 0xdb8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x5, 0xc}, {0x1, 0x4, 0x6, 0x9}], 0x10, 0x1e9}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@newlink={0xb4, 0x10, 0xc3b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7192c, 0x1006}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8001}, @IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "78b3b99d6c98eaf1f6534008fa8d967c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a37e094ae65ca7c634b780fd809de19c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "85f07c25b3e7abdf56cb8803fac87af4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bbb8c8506c1d81f3eeb44536854700"}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fe7a280fc0968e1aefd5f7ec8ab6d871"}, @IFLA_PORT_VF={0x8, 0x1, 0x1a8d}]}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffd}]}, 0xb4}}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0xf7, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0xb7, 0xc5, 0x8, 0x7}, 0x2a, &(0x7f0000000400)={0x5, 0xf, 0x2a, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x7, 0xa5, 0x0, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd, 0xc0, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0xd3}]}, 0x6, [{0xe1, &(0x7f0000000200)=@string={0xe1, 0x3, "36825de63a8632084813342547eb3361d5940613be830b57af30d0d995d699f1f348e85ba71068db93344c3bcd09e2266babc2258b72b82275953fc420a4375483c3384924db1e7785333120e3e1f99e0111992afa3ac68e25cdf872fa6aa54c50cb58023e366df1ba729f4fffe9c01a2830f9712d4c3fded0cce4f3c386a460b640a644d9d48876ecc7f458171744d1b75b4af01ebf19593d68a481b0779667418340e6844ac659f746bfc858474320c278e7fb2a23abc20a8f1af3e40cc027205aee516b0e52511eb7b05d01e3d4a3c0ed251f610e1ac72d0a90eb41742b"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xb4, &(0x7f00000005c0)=@string={0xb4, 0x3, "9905ba1ee5e3a7278960e6ad3a6456966309b737853af70805acf3682ff68895aabf9795514deca3c4b338a96027d172c30d3bec971f0d1b4dc5de1c71a6584292a20f6377f698181843335a0f538797b7d94762b828c03bd3f05f16ac9f884a940dfde0245a4dc90c7b1214c14f6bc6bee2dac11e60acecaec24208aac9348d1755ca3b1f0bd659cbaa9c6c962cf6aca4c824649868f755e429f8fcfbc151039028912f5a2ce3eba2c53cf0bc17d83a3e8c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]})

494.887648ms ago: executing program 1 (id=1476):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0)
r1 = dup(r0)
read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mmap(&(0x7f0000672000/0x4000)=nil, 0x4000, 0x5, 0x2010, r0, 0xf5f68000)
sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001080)={<r3=>0x0, "200bc506119a56a35dd79de3f5309867"})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002080)={r3, "e4e2ecd9c44d1ece1de9c0d8784b332c"})
clock_gettime(0xb, &(0x7f0000000040))

0s ago: executing program 3 (id=1477):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3ff, 0x4000000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000340)={0x3, 0x2b4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

kernel console output (not intermixed with test programs):

 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  569.972584][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  569.986362][ T5868] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  569.987224][ T5872] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  569.996297][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.090076][ T9472] loop1: detected capacity change from 0 to 512
[  570.127913][ T5868] usb 5-1: config 0 descriptor??
[  570.138021][ T9470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  570.193021][ T9472] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  570.202764][ T9472] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  570.275601][ T9472] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  570.288985][ T9472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  570.303367][ T9472] System zones: 0-2, 18-18, 34-34
[  570.328068][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'.
[  570.341996][ T9472] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1179: iget: bad i_size value: 360287970189639680
[  570.359217][ T9472] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1179: couldn't read orphan inode 15 (err -117)
[  570.383777][ T9472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.502368][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.512391][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.558543][ T6139] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  570.595798][ T6139] usb 2-1: USB disconnect, device number 29
[  570.623541][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.634050][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.917105][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.931173][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.059749][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.069711][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.149868][ T6139] usb 1-1: USB disconnect, device number 26
[  571.213491][ T5868] usbhid 5-1:0.0: can't add hid device: -71
[  571.220389][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  571.289266][ T5868] usb 5-1: USB disconnect, device number 17
[  571.502731][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.576888][ T9488] overlayfs: failed to resolve './file0': -2
[  572.953858][ T9496] loop4: detected capacity change from 0 to 4096
[  572.982893][ T9496] nilfs2: Unknown parameter 'warrier'
[  573.156346][ T9507] loop3: detected capacity change from 0 to 1024
[  573.206296][ T9507] EXT4-fs: Ignoring removed nobh option
[  573.213444][ T9507] EXT4-fs: Ignoring removed bh option
[  573.285803][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  573.394590][ T9507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.516689][ T9513] loop2: detected capacity change from 0 to 1024
[  573.573157][ T9513] netdevsim netdevsim2: Direct firmware load for ..� failed with error -2
[  573.582374][ T9513] netdevsim netdevsim2: Falling back to sysfs fallback for: ..�
[  573.615221][ T9515] loop4: detected capacity change from 0 to 512
[  573.624661][ T9515] EXT4-fs: Ignoring removed mblk_io_submit option
[  573.670405][ T9515] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  573.734640][ T9515] EXT4-fs (loop4): orphan cleanup on readonly fs
[  573.761573][   T30] audit: type=1804 audit(1756222513.473:16): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1191" name="/newroot/237/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  573.785601][ T9515] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  573.803085][ T9515] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  573.826535][ T9515] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  573.857505][ T9515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1186: bg 0: block 40: padding at end of block bitmap is not set
[  573.876936][ T9515] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  573.889991][ T9515] EXT4-fs (loop4): 1 truncate cleaned up
[  573.905091][ T9515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  574.061656][ T5868] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  574.242565][ T5868] usb 4-1: Using ep0 maxpacket: 32
[  574.252769][ T6139] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  574.281811][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  574.331952][ T5868] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  574.341741][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.350112][ T5868] usb 4-1: Product: syz
[  574.354924][ T5868] usb 4-1: Manufacturer: syz
[  574.359782][ T5868] usb 4-1: SerialNumber: syz
[  574.402053][ T5868] usb 4-1: config 0 descriptor??
[  574.432404][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  574.471883][ T6139] usb 1-1: Using ep0 maxpacket: 8
[  574.496965][ T6139] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  574.513325][ T6139] usb 1-1: config 1 interface 0 has no altsetting 0
[  574.564573][ T6139] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  574.574644][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.583613][ T6139] usb 1-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  574.594401][ T6139] usb 1-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  574.627717][    C0] vkms_vblank_simulate: vblank timer overrun
[  574.640952][ T6139] usb 1-1: SerialNumber: syz
[  574.649218][ T5868] ath6kl: Failed to submit usb control message: -71
[  574.657210][ T5868] ath6kl: unable to send the bmi data to the device: -71
[  574.664877][ T5868] ath6kl: Unable to send get target info: -71
[  574.683848][ T5868] ath6kl: Failed to init ath6kl core: -71
[  574.695321][ T5876] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  574.696317][ T5868] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  574.719154][ T5872] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  574.719335][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.755572][ T5868] usb 4-1: USB disconnect, device number 30
[  574.794502][ T5872] usb 5-1: config 0 descriptor??
[  574.803711][ T9526] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  574.847561][ T5872] cp210x 5-1:0.0: cp210x converter detected
[  574.936147][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  574.948344][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  574.960582][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  574.972693][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  574.986606][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  574.996344][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.044823][ T5876] usb 2-1: config 0 descriptor??
[  575.056576][ T9528] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  575.304163][ T9526] loop0: detected capacity change from 0 to 512
[  575.334892][ T9532] overlayfs: failed to resolve './file0': -2
[  575.425095][ T9515] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1186: iget: bad i_size value: 360287970189639690
[  575.470695][ T9526] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  575.480705][ T9526] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  575.512726][ T9516] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1186: iget: bad i_size value: 360287970189639690
[  575.560746][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.570844][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.687721][ T9526] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  575.758716][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.789473][ T9526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  575.889559][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.900760][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.912085][ T9526] System zones: 0-2, 18-18, 34-34
[  575.957012][ T9526] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1195: iget: bad i_size value: 360287970189639680
[  575.986329][ T9526] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1195: couldn't read orphan inode 15 (err -117)
[  576.033702][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.048412][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.137642][ T9526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.166037][ T5876] usbhid 2-1:0.0: can't add hid device: -71
[  576.173480][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  576.263032][ T5876] usb 2-1: USB disconnect, device number 30
[  576.429543][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.440104][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.247872][ T5872] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  577.255914][ T5872] cp210x 5-1:0.0: querying part number failed
[  577.329188][ T5872] usb 5-1: cp210x converter now attached to ttyUSB0
[  577.349320][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.357206][ T5872] usb 5-1: USB disconnect, device number 18
[  577.504679][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  577.514245][ T5872] cp210x 5-1:0.0: device disconnected
[  578.165483][ T6139] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  578.221877][ T6139] usb 1-1: USB disconnect, device number 27
[  578.227938][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.465298][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  578.979628][ T9558] loop3: detected capacity change from 0 to 1024
[  579.158503][ T9558] netdevsim netdevsim3: Direct firmware load for ..� failed with error -2
[  579.168191][ T9558] netdevsim netdevsim3: Falling back to sysfs fallback for: ..�
[  579.175089][ T9561] loop2: detected capacity change from 0 to 1024
[  579.202845][ T9563] overlayfs: statfs failed on './file0'
[  579.238316][ T9561] EXT4-fs: Ignoring removed nobh option
[  579.244755][ T9561] EXT4-fs: Ignoring removed bh option
[  579.418937][ T9561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.799947][   T30] audit: type=1804 audit(1756222519.513:17): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1208" name="/newroot/247/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  580.051715][ T6139] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  580.259331][ T6139] usb 3-1: Using ep0 maxpacket: 32
[  580.303714][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  580.350947][ T6139] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  580.360661][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.369523][ T6139] usb 3-1: Product: syz
[  580.374396][ T6139] usb 3-1: Manufacturer: syz
[  580.379769][ T6139] usb 3-1: SerialNumber: syz
[  580.473871][ T6139] usb 3-1: config 0 descriptor??
[  580.561703][ T5872] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  580.696485][ T6139] ath6kl: Failed to submit usb control message: -71
[  580.703883][ T6139] ath6kl: unable to send the bmi data to the device: -71
[  580.713082][ T6139] ath6kl: Unable to send get target info: -71
[  580.720523][ T6139] ath6kl: Failed to init ath6kl core: -71
[  580.735945][ T6139] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  580.806693][ T9581] loop4: detected capacity change from 0 to 4096
[  580.817160][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  580.829417][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  580.841064][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  580.842971][ T6139] usb 3-1: USB disconnect, device number 23
[  580.852811][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  580.853064][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  580.853235][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.866086][ T9581] nilfs2: Unknown parameter 'warrier'
[  580.922892][ T5872] usb 2-1: config 0 descriptor??
[  580.931991][ T9577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  581.376610][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.387000][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.407549][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  581.555182][ T9590] loop4: detected capacity change from 0 to 512
[  581.577650][ T9590] EXT4-fs: Ignoring removed mblk_io_submit option
[  581.616312][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  581.626672][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.636643][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.654170][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.665285][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.679532][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.718189][ T9590] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  581.729275][ T5868] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  581.740128][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0
[  581.772065][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  581.786463][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.796529][ T5868] usb 1-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  581.805064][ T5872] usbhid 2-1:0.0: can't add hid device: -71
[  581.806849][ T5868] usb 1-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  581.813547][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  581.846519][ T5868] usb 1-1: SerialNumber: syz
[  581.888162][ T9590] EXT4-fs (loop4): orphan cleanup on readonly fs
[  581.909233][ T9587] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  581.928997][ T9590] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  581.940114][ T9590] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  582.023000][ T9590] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  582.023961][ T5872] usb 2-1: USB disconnect, device number 31
[  582.080288][ T9590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1212: bg 0: block 40: padding at end of block bitmap is not set
[  582.131746][ T9590] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  582.171109][ T9590] EXT4-fs (loop4): 1 truncate cleaned up
[  582.182368][ T9590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  582.315240][ T9587] loop0: detected capacity change from 0 to 512
[  582.397217][ T9587] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  582.406919][ T9587] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  582.503014][ T9587] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  582.569304][ T9587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  582.579215][ T9587] System zones: 0-2, 18-18, 34-34
[  582.603033][ T9587] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1215: iget: bad i_size value: 360287970189639680
[  582.711302][ T9587] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1215: couldn't read orphan inode 15 (err -117)
[  582.817862][ T9587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.880222][ T6139] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  583.048843][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.058554][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.060053][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  583.102693][ T6139] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  583.117129][ T6139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.138924][ T6139] usb 5-1: config 0 descriptor??
[  583.161799][ T6139] cp210x 5-1:0.0: cp210x converter detected
[  583.760023][ T9590] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1212: iget: bad i_size value: 360287970189639690
[  583.783574][ T9590] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1212: iget: bad i_size value: 360287970189639690
[  584.055969][ T9611] overlayfs: statfs failed on './file0'
[  585.008434][ T5868] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  585.085586][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.175405][ T5868] usb 1-1: USB disconnect, device number 28
[  585.393039][ T6139] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  585.401133][ T6139] cp210x 5-1:0.0: querying part number failed
[  585.432815][ T6139] usb 5-1: cp210x converter now attached to ttyUSB0
[  585.444817][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.485200][ T6139] usb 5-1: USB disconnect, device number 19
[  585.508743][ T6139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  585.518622][ T6139] cp210x 5-1:0.0: device disconnected
[  585.545463][ T9619] loop1: detected capacity change from 0 to 1024
[  585.734381][ T9623] loop2: detected capacity change from 0 to 1024
[  585.745610][ T9619] netdevsim netdevsim1: Direct firmware load for ..� failed with error -2
[  585.754942][ T9619] netdevsim netdevsim1: Falling back to sysfs fallback for: ..�
[  585.779439][ T9623] EXT4-fs: Ignoring removed nobh option
[  585.786179][ T9623] EXT4-fs: Ignoring removed bh option
[  585.895298][ T9623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.935737][ T9626] 9pnet_fd: Insufficient options for proto=fd
[  586.068239][   T30] audit: type=1804 audit(1756222525.773:18): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1227" name="/newroot/251/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  586.364108][ T6139] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  586.563775][ T6139] usb 3-1: Using ep0 maxpacket: 32
[  586.582327][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'.
[  586.614663][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  586.664961][ T6139] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  586.674838][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.683384][ T6139] usb 3-1: Product: syz
[  586.687776][ T6139] usb 3-1: Manufacturer: syz
[  586.697887][ T6139] usb 3-1: SerialNumber: syz
[  586.732453][ T6139] usb 3-1: config 0 descriptor??
[  586.771833][ T6137] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  586.959357][ T6139] ath6kl: Failed to submit usb control message: -71
[  586.968066][ T6139] ath6kl: unable to send the bmi data to the device: -71
[  586.975997][ T6139] ath6kl: Unable to send get target info: -71
[  587.025633][ T6137] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  587.037950][ T6137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  587.049790][ T6137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  587.061548][ T6137] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  587.078692][ T6137] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  587.088188][ T6137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.118237][ T6139] ath6kl: Failed to init ath6kl core: -71
[  587.136576][ T6139] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  587.172185][ T6139] usb 3-1: USB disconnect, device number 24
[  587.186446][ T6137] usb 1-1: config 0 descriptor??
[  587.210130][ T9636] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  587.642391][ T9650] overlayfs: statfs failed on './file0'
[  587.662365][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.672836][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.907019][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.962870][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.973120][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.033321][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.043097][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.082321][ T6137] usbhid 1-1:0.0: can't add hid device: -71
[  588.089177][ T6137] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  588.181773][ T6137] usb 1-1: USB disconnect, device number 29
[  588.681973][ T6139] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  588.753816][ T9656] loop3: detected capacity change from 0 to 4096
[  588.784618][ T9656] nilfs2: Unknown parameter 'warrier'
[  588.872920][ T6139] usb 3-1: Using ep0 maxpacket: 8
[  588.908968][ T6139] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  588.920563][ T6139] usb 3-1: config 1 interface 0 has no altsetting 0
[  588.998512][ T6139] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  589.008706][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.017452][ T6139] usb 3-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  589.027864][ T6139] usb 3-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  589.066023][ T6139] usb 3-1: SerialNumber: syz
[  589.190879][ T9657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  589.378767][ T9666] loop3: detected capacity change from 0 to 512
[  589.406724][ T9666] EXT4-fs: Ignoring removed mblk_io_submit option
[  589.550886][ T9666] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  589.569947][ T9666] EXT4-fs (loop3): orphan cleanup on readonly fs
[  589.590451][ T9657] loop2: detected capacity change from 0 to 512
[  589.599438][ T9666] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  589.610522][ T9666] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  589.640912][ T9657] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  589.650519][ T9657] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  589.695185][ T9666] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  589.716588][ T9670] 9pnet_fd: Insufficient options for proto=fd
[  589.725267][ T9666] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1238: bg 0: block 40: padding at end of block bitmap is not set
[  589.776908][ T9657] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  589.802904][ T9666] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  589.813382][ T9657] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  589.823969][ T9657] System zones: 0-2, 18-18, 34-34
[  589.830866][ T9666] EXT4-fs (loop3): 1 truncate cleaned up
[  589.839885][ T9666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  589.887234][ T9657] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1236: iget: bad i_size value: 360287970189639680
[  589.952046][ T9657] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1236: couldn't read orphan inode 15 (err -117)
[  590.019661][ T9657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.236131][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.245887][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.473236][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  590.495620][ T9677] loop0: detected capacity change from 0 to 1024
[  590.613993][ T6137] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  590.692879][ T9677] netdevsim netdevsim0: Direct firmware load for ..� failed with error -2
[  590.701980][ T9677] netdevsim netdevsim0: Falling back to sysfs fallback for: ..�
[  590.820306][ T6137] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  590.830391][ T6137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.912376][ T6137] usb 4-1: config 0 descriptor??
[  590.929731][ T6137] cp210x 4-1:0.0: cp210x converter detected
[  591.164190][ T9656] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1238: iget: bad i_size value: 360287970189639690
[  591.191831][ T9686] loop1: detected capacity change from 0 to 1024
[  591.233143][ T9686] EXT4-fs: Ignoring removed nobh option
[  591.239131][ T9686] EXT4-fs: Ignoring removed bh option
[  591.251439][ T9656] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1238: iget: bad i_size value: 360287970189639690
[  591.348022][ T6137] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  591.356270][ T6137] cp210x 4-1:0.0: querying part number failed
[  591.373347][ T9688] overlayfs: failed to resolve './file0': -2
[  591.374519][ T6137] usb 4-1: cp210x converter now attached to ttyUSB0
[  591.435658][ T9686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.438754][ T6137] usb 4-1: USB disconnect, device number 31
[  591.540674][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  591.552505][ T6137] cp210x 4-1:0.0: device disconnected
[  591.637808][   T30] audit: type=1804 audit(1756222531.343:19): pid=9686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1246" name="/newroot/239/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  591.884849][ T6139] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  591.905046][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.941817][ T5872] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  591.980730][ T6139] usb 3-1: USB disconnect, device number 25
[  592.131660][ T5872] usb 2-1: Using ep0 maxpacket: 32
[  592.167718][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  592.240273][ T5872] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  592.249980][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.258597][ T5872] usb 2-1: Product: syz
[  592.263951][ T5872] usb 2-1: Manufacturer: syz
[  592.268805][ T5872] usb 2-1: SerialNumber: syz
[  592.341520][ T9696] overlayfs: statfs failed on './file0'
[  592.367358][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.369598][ T5872] usb 2-1: config 0 descriptor??
[  592.617699][ T5872] ath6kl: Failed to submit usb control message: -71
[  592.625028][ T5872] ath6kl: unable to send the bmi data to the device: -71
[  592.639999][ T5872] ath6kl: Unable to send get target info: -71
[  592.722083][ T5872] ath6kl: Failed to init ath6kl core: -71
[  592.744941][ T5872] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  592.867053][ T5872] usb 2-1: USB disconnect, device number 32
[  593.432042][ T9695] loop4: detected capacity change from 0 to 8192
[  593.473065][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  593.730020][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.948782][ T9722] loop1: detected capacity change from 0 to 1024
[  595.033150][ T9723] overlayfs: failed to resolve './file0': -2
[  595.065753][ T9722] netdevsim netdevsim1: Direct firmware load for ..� failed with error -2
[  595.074917][ T9722] netdevsim netdevsim1: Falling back to sysfs fallback for: ..�
[  595.182033][ T5872] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  595.404372][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  595.440068][ T5872] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  595.450704][ T5872] usb 4-1: config 1 interface 0 has no altsetting 0
[  595.516852][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  595.526615][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.530534][ T9725] loop0: detected capacity change from 0 to 4096
[  595.535405][ T5872] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  595.535568][ T5872] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  595.585723][ T5872] usb 4-1: SerialNumber: syz
[  595.589473][ T9725] nilfs2: Unknown parameter 'warrier'
[  595.614575][ T6139] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  595.656990][ T9721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  595.828822][ T6139] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  595.841124][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  595.853128][ T6139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  595.865157][ T6139] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  595.879176][ T6139] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  595.888864][ T6139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.903176][ T6139] usb 5-1: config 0 descriptor??
[  595.920465][ T9728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  596.072343][ T9721] loop3: detected capacity change from 0 to 512
[  596.106770][ T9721] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  596.122649][ T9721] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  596.206032][ T9721] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  596.272795][ T9721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  596.310425][ T9734] loop0: detected capacity change from 0 to 512
[  596.327663][ T9734] EXT4-fs: Ignoring removed mblk_io_submit option
[  596.338419][ T9721] System zones: 0-2, 18-18, 34-34
[  596.396375][ T9734] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  596.428163][ T9721] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1259: iget: bad i_size value: 360287970189639680
[  596.445002][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.445357][ T9734] EXT4-fs (loop0): orphan cleanup on readonly fs
[  596.455234][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.564261][ T9734] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  596.576225][ T9734] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  596.602610][ T9721] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1259: couldn't read orphan inode 15 (err -117)
[  596.650400][ T9740] 9pnet_fd: Insufficient options for proto=fd
[  596.650393][ T9721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.678039][ T9734] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  596.748477][ T9734] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1261: bg 0: block 40: padding at end of block bitmap is not set
[  596.796955][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.797297][ T9734] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  596.807115][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.885839][ T9734] EXT4-fs (loop0): 1 truncate cleaned up
[  596.896421][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  596.990201][ T9743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.000706][ T9743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.007943][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.019131][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.201452][ T6139] usbhid 5-1:0.0: can't add hid device: -71
[  597.208321][ T6139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  597.276516][ T6139] usb 5-1: USB disconnect, device number 20
[  597.601814][ T6137] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  597.726883][ T9747] loop2: detected capacity change from 0 to 1024
[  597.769399][ T9747] EXT4-fs: Ignoring removed nobh option
[  597.775926][ T9747] EXT4-fs: Ignoring removed bh option
[  597.814194][ T6137] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  597.824081][ T6137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.882885][ T6137] usb 1-1: config 0 descriptor??
[  597.904505][ T9747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.923437][ T6137] cp210x 1-1:0.0: cp210x converter detected
[  598.110238][ T9725] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1261: iget: bad i_size value: 360287970189639690
[  598.164488][ T9725] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1261: iget: bad i_size value: 360287970189639690
[  598.224620][ T6137] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  598.232907][ T6137] cp210x 1-1:0.0: querying part number failed
[  598.251881][   T30] audit: type=1804 audit(1756222537.953:20): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1265" name="/newroot/258/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  598.311728][ T6137] usb 1-1: cp210x converter now attached to ttyUSB0
[  598.422760][ T6137] usb 1-1: USB disconnect, device number 30
[  598.453760][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  598.464482][ T6137] cp210x 1-1:0.0: device disconnected
[  598.612740][ T5876] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  598.693781][ T5872] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  598.696172][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.721621][ T5872] usb 4-1: USB disconnect, device number 32
[  598.808964][ T5876] usb 3-1: Using ep0 maxpacket: 32
[  598.841565][ T5928] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  598.862325][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  598.916055][ T5876] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  598.925736][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.934156][ T5876] usb 3-1: Product: syz
[  598.938708][ T5876] usb 3-1: Manufacturer: syz
[  598.943766][ T5876] usb 3-1: SerialNumber: syz
[  599.015270][ T5876] usb 3-1: config 0 descriptor??
[  599.048011][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.050521][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  599.069072][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.079499][ T5928] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  599.093819][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.233989][ T5876] ath6kl: Failed to submit usb control message: -71
[  599.241476][ T5876] ath6kl: unable to send the bmi data to the device: -71
[  599.248761][ T5876] ath6kl: Unable to send get target info: -71
[  599.279406][ T5928] usb 5-1: config 0 descriptor??
[  599.294173][ T5876] ath6kl: Failed to init ath6kl core: -71
[  599.307617][ T5876] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  599.352625][ T5876] usb 3-1: USB disconnect, device number 26
[  599.457215][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'.
[  599.581650][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'.
[  599.885481][ T5928] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  600.166957][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.375249][ T9769] overlayfs: failed to resolve './file0': -2
[  600.427805][ T9771] loop0: detected capacity change from 0 to 1024
[  600.542010][ T9771] netdevsim netdevsim0: Direct firmware load for ..� failed with error -2
[  600.552131][ T9771] netdevsim netdevsim0: Falling back to sysfs fallback for: ..�
[  600.823713][ T9776] 9pnet_fd: Insufficient options for proto=fd
[  601.017868][ T5928] usb 5-1: USB disconnect, device number 21
[  601.757209][ T9783] loop1: detected capacity change from 0 to 4096
[  601.774826][ T5928] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  601.800947][ T9783] nilfs2: Unknown parameter 'warrier'
[  601.831747][ T5876] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  601.964633][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  601.977099][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  601.988817][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  602.000779][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  602.014325][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  602.023826][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.098489][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  602.119373][ T5876] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  602.130034][ T5876] usb 3-1: config 1 interface 0 has no altsetting 0
[  602.151907][ T5928] usb 5-1: config 0 descriptor??
[  602.183379][ T9781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  602.226625][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  602.236398][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.245184][ T5876] usb 3-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  602.255812][ T5876] usb 3-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  602.264206][ T9791] loop1: detected capacity change from 0 to 512
[  602.288330][    C1] vkms_vblank_simulate: vblank timer overrun
[  602.293266][ T5876] usb 3-1: SerialNumber: syz
[  602.322479][ T9791] EXT4-fs: Ignoring removed mblk_io_submit option
[  602.349981][ T9787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  602.447549][ T9791] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  602.508476][ T9791] EXT4-fs (loop1): orphan cleanup on readonly fs
[  602.520240][ T9791] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  602.532924][ T9791] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  602.607766][ T9791] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  602.630961][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.641993][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.674079][ T9787] loop2: detected capacity change from 0 to 512
[  602.682847][ T9791] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1279: bg 0: block 40: padding at end of block bitmap is not set
[  602.753895][ T9787] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  602.764701][ T9787] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  602.784506][ T9791] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  602.808075][ T9787] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  602.841109][ T9787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  602.858342][ T9791] EXT4-fs (loop1): 1 truncate cleaned up
[  602.862859][ T9787] System zones: 0-2, 18-18, 34-34
[  602.869557][ T9791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  602.978947][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.990002][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.994863][ T9787] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1278: iget: bad i_size value: 360287970189639680
[  603.060118][ T9787] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1278: couldn't read orphan inode 15 (err -117)
[  603.080395][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.092047][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.117028][ T9799] loop3: detected capacity change from 0 to 1024
[  603.124966][ T9787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.164097][ T9799] EXT4-fs: Ignoring removed nobh option
[  603.170561][ T9799] EXT4-fs: Ignoring removed bh option
[  603.214604][ T5928] usbhid 5-1:0.0: can't add hid device: -71
[  603.223904][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  603.274157][ T5928] usb 5-1: USB disconnect, device number 22
[  603.327566][ T9799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.399763][   T30] audit: type=1804 audit(1756222543.083:21): pid=9799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1283" name="/newroot/259/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  603.422470][    C1] vkms_vblank_simulate: vblank timer overrun
[  603.438316][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.448678][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.531798][ T6137] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  603.574510][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  603.581984][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  603.612647][ T6139] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  603.715439][ T6137] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  603.725391][ T6137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.777645][ T6137] usb 2-1: config 0 descriptor??
[  603.787764][ T6139] usb 4-1: Using ep0 maxpacket: 32
[  603.839560][ T6137] cp210x 2-1:0.0: cp210x converter detected
[  603.860973][ T6139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  603.925502][ T6139] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  603.935599][ T6139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.944297][ T6139] usb 4-1: Product: syz
[  603.948838][ T6139] usb 4-1: Manufacturer: syz
[  603.953983][ T6139] usb 4-1: SerialNumber: syz
[  604.020992][ T9783] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1279: iget: bad i_size value: 360287970189639690
[  604.063110][ T9783] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1279: iget: bad i_size value: 360287970189639690
[  604.081859][ T6139] usb 4-1: config 0 descriptor??
[  604.173277][ T6137] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  604.187375][ T6137] cp210x 2-1:0.0: querying part number failed
[  604.210344][ T6137] usb 2-1: cp210x converter now attached to ttyUSB0
[  604.226547][ T6137] usb 2-1: USB disconnect, device number 33
[  604.255868][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  604.266357][ T6137] cp210x 2-1:0.0: device disconnected
[  604.315448][ T6139] ath6kl: Failed to submit usb control message: -71
[  604.322618][ T6139] ath6kl: unable to send the bmi data to the device: -71
[  604.329995][ T6139] ath6kl: Unable to send get target info: -71
[  604.338582][ T6139] ath6kl: Failed to init ath6kl core: -71
[  604.351382][ T6139] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  604.443598][ T6139] usb 4-1: USB disconnect, device number 33
[  604.591130][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'.
[  604.912055][ T5876] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  605.004064][ T5876] usb 3-1: USB disconnect, device number 27
[  605.043837][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.094767][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.177845][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.281611][ T6139] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  605.489962][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  605.500508][ T6139] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  605.511017][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  605.521743][ T6139] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  605.648422][ T9819] 9pnet_fd: Insufficient options for proto=fd
[  605.652449][ T6139] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  605.664687][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.673282][ T6139] usb 1-1: Product: syz
[  605.677846][ T6139] usb 1-1: Manufacturer: syz
[  605.682914][ T6139] usb 1-1: SerialNumber: syz
[  605.690464][ T6137] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  605.720263][ T6139] usb 1-1: config 0 descriptor??
[  605.744795][ T6139] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  605.902353][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  605.914284][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.924932][ T6137] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  605.934823][ T6137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.016092][ T6139] scsi host1: usb-storage 1-1:0.0
[  606.064176][ T6139] usb 1-1: USB disconnect, device number 31
[  606.089571][ T6137] usb 3-1: config 0 descriptor??
[  606.476605][ T9829] loop3: detected capacity change from 0 to 1024
[  606.599880][ T6137] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  606.642156][ T9829] netdevsim netdevsim3: Direct firmware load for ..� failed with error -2
[  606.651048][ T9829] netdevsim netdevsim3: Falling back to sysfs fallback for: ..�
[  607.037708][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  607.712380][ T5876] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  607.833068][ T6137] usb 3-1: USB disconnect, device number 28
[  607.935456][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  607.948615][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  607.960964][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  607.972854][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  607.986570][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  608.000783][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.114858][ T5876] usb 1-1: config 0 descriptor??
[  608.130197][ T9837] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  608.541748][ T5928] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  608.610807][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.622767][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.731855][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  608.759609][ T5928] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  608.770266][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0
[  608.771820][ T9850] netlink: 'syz.4.1299': attribute type 5 has an invalid length.
[  608.786275][ T9850] netlink: 'syz.4.1299': attribute type 11 has an invalid length.
[  608.860876][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.870476][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.896616][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.907847][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.920320][ T9848] loop2: detected capacity change from 0 to 4096
[  608.929313][ T5928] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  608.935433][ T9848] nilfs2: Unknown parameter 'warrier'
[  608.939985][ T5928] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  608.978244][    C1] vkms_vblank_simulate: vblank timer overrun
[  608.985298][ T5928] usb 4-1: SerialNumber: syz
[  609.040455][ T5876] usbhid 1-1:0.0: can't add hid device: -71
[  609.047640][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  609.104200][ T5876] usb 1-1: USB disconnect, device number 32
[  609.156666][ T9846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  609.402003][ T9854] loop2: detected capacity change from 0 to 512
[  609.443563][ T9854] EXT4-fs: Ignoring removed mblk_io_submit option
[  609.540203][ T9854] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  609.548594][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.549892][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.559248][ T9854] EXT4-fs (loop2): orphan cleanup on readonly fs
[  609.581824][ T9854] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  609.592842][ T9854] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  609.613431][ T9856] 9pnet_fd: Insufficient options for proto=fd
[  609.617960][ T9854] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  609.655403][ T9854] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1298: bg 0: block 40: padding at end of block bitmap is not set
[  609.696691][ T9854] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  609.738777][ T9854] EXT4-fs (loop2): 1 truncate cleaned up
[  609.747273][ T9854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  610.050570][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'.
[  610.604520][ T5876] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  610.649167][ T9867] loop4: detected capacity change from 0 to 1024
[  610.803257][ T9867] netdevsim netdevsim4: Direct firmware load for ..� failed with error -2
[  610.812784][ T9867] netdevsim netdevsim4: Falling back to sysfs fallback for: ..�
[  610.826547][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  610.836546][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.856881][ T5876] usb 3-1: config 0 descriptor??
[  610.897983][ T5876] cp210x 3-1:0.0: cp210x converter detected
[  611.094118][ T5872] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  611.143216][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0
[  611.303351][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  611.313954][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  611.324384][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  611.334805][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  611.416829][ T9848] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1298: iget: bad i_size value: 360287970189639690
[  611.507053][ T9848] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1298: iget: bad i_size value: 360287970189639690
[  611.582327][ T5872] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  611.592075][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.600339][ T5872] usb 1-1: Product: syz
[  611.605793][ T5872] usb 1-1: Manufacturer: syz
[  611.610693][ T5872] usb 1-1: SerialNumber: syz
[  611.611708][ T6137] usb 3-1: USB disconnect, device number 29
[  611.622702][ T5928] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  611.655891][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  611.665567][ T6137] cp210x 3-1:0.0: device disconnected
[  611.674170][ T5928] usb 4-1: USB disconnect, device number 34
[  611.703040][ T5872] usb 1-1: config 0 descriptor??
[  611.743213][ T5872] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  611.933985][ T5872] scsi host1: usb-storage 1-1:0.0
[  611.936669][ T9877] loop3: detected capacity change from 0 to 1024
[  611.969994][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  611.997728][ T5872] usb 1-1: USB disconnect, device number 33
[  612.041775][ T9877] netdevsim netdevsim3: Direct firmware load for ..� failed with error -2
[  612.050699][ T9877] netdevsim netdevsim3: Falling back to sysfs fallback for: ..�
[  612.414171][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.571646][ T6137] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  612.841532][ T6137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  612.853163][ T6137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.864574][ T6137] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  612.873997][ T6137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.098678][ T6137] usb 5-1: config 0 descriptor??
[  613.366541][ T9893] netlink: 'syz.0.1311': attribute type 5 has an invalid length.
[  613.376378][ T9893] netlink: 'syz.0.1311': attribute type 11 has an invalid length.
[  613.600855][ T6137] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  614.221479][ T6137] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  614.394119][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  614.460077][ T6137] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.472164][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  614.484288][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.495928][ T6137] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  614.509325][ T6137] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  614.518863][ T6137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.615454][ T6137] usb 3-1: config 0 descriptor??
[  614.627117][ T9898] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  614.692617][ T5872] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  614.710044][ T9909] loop0: detected capacity change from 0 to 1024
[  614.723852][ T6139] usb 5-1: USB disconnect, device number 23
[  614.926048][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  614.981680][ T5872] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  614.992441][ T5872] usb 4-1: config 1 interface 0 has no altsetting 0
[  615.020263][ T9909] netdevsim netdevsim0: Direct firmware load for ..� failed with error -2
[  615.029826][ T9909] netdevsim netdevsim0: Falling back to sysfs fallback for: ..�
[  615.069253][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  615.079227][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.087886][ T5872] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  615.098268][ T5872] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  615.131234][    C1] vkms_vblank_simulate: vblank timer overrun
[  615.137976][ T5872] usb 4-1: SerialNumber: syz
[  615.152305][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.166778][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.197173][ T9907] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  615.424682][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.426166][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'.
[  615.434956][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.565016][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.579600][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.639585][ T6137] usbhid 3-1:0.0: can't add hid device: -71
[  615.646872][ T6137] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  615.702841][ T6137] usb 3-1: USB disconnect, device number 30
[  615.867138][ T5872] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  615.961662][ T5872] usb 4-1: USB disconnect, device number 35
[  616.505327][ T9918] loop1: detected capacity change from 0 to 4096
[  616.515925][ T9918] nilfs2: Unknown parameter 'warrier'
[  616.558578][ T9922] loop0: detected capacity change from 0 to 1024
[  616.571785][ T6137] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  616.727789][ T9922] netdevsim netdevsim0: Direct firmware load for ..� failed with error -2
[  616.737313][ T9922] netdevsim netdevsim0: Falling back to sysfs fallback for: ..�
[  616.791960][ T6137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  616.806975][ T6137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  616.819048][ T6137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  616.829264][ T6137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  616.907112][ T6137] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  616.916905][ T6137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.925995][ T6137] usb 5-1: Product: syz
[  616.930405][ T6137] usb 5-1: Manufacturer: syz
[  616.935559][ T6137] usb 5-1: SerialNumber: syz
[  617.024812][ T9929] loop1: detected capacity change from 0 to 512
[  617.043721][ T6137] usb 5-1: config 0 descriptor??
[  617.059304][ T6137] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  617.077331][ T9929] EXT4-fs: Ignoring removed mblk_io_submit option
[  617.145292][ T9929] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  617.178637][ T9929] EXT4-fs (loop1): orphan cleanup on readonly fs
[  617.274527][ T9929] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  617.285915][ T9929] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  617.301878][ T6137] scsi host1: usb-storage 5-1:0.0
[  617.326402][ T9929] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  617.327286][ T6137] usb 5-1: USB disconnect, device number 24
[  617.406881][ T9929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1320: bg 0: block 40: padding at end of block bitmap is not set
[  617.497467][ T9929] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  617.535419][ T9929] EXT4-fs (loop1): 1 truncate cleaned up
[  617.544435][ T9929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  617.765157][ T9940] netlink: 'syz.2.1325': attribute type 5 has an invalid length.
[  617.774009][ T9940] netlink: 'syz.2.1325': attribute type 11 has an invalid length.
[  618.102702][ T5872] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  618.354371][ T5872] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  618.364353][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.405527][ T5872] usb 2-1: config 0 descriptor??
[  618.461496][ T5872] cp210x 2-1:0.0: cp210x converter detected
[  618.668981][ T5872] usb 2-1: cp210x converter now attached to ttyUSB0
[  618.870008][ T9918] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1320: iget: bad i_size value: 360287970189639690
[  618.914345][ T9918] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1320: iget: bad i_size value: 360287970189639690
[  618.998225][ T6137] usb 2-1: USB disconnect, device number 34
[  619.072782][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  619.082616][ T6137] cp210x 2-1:0.0: device disconnected
[  619.195666][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'.
[  619.242361][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  620.019312][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.183125][ T5872] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  620.400813][ T5876] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  620.432106][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  620.444544][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  620.456324][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  620.467931][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  620.481495][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  620.495737][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.656726][ T5872] usb 5-1: config 0 descriptor??
[  620.664951][ T9961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  620.671785][ T5876] usb 4-1: Using ep0 maxpacket: 8
[  620.696856][ T5876] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  620.707503][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0
[  620.775456][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  620.785410][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.799016][ T5876] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  620.811105][ T5876] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  620.845013][ T5876] usb 4-1: SerialNumber: syz
[  620.983320][ T9966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  621.152944][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.162759][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.428646][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.438591][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.450930][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.461000][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.524949][ T5872] usbhid 5-1:0.0: can't add hid device: -71
[  621.532556][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  621.593744][ T5872] usb 5-1: USB disconnect, device number 25
[  622.549273][ T6137] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  622.790085][ T9987] netlink: 'syz.1.1341': attribute type 5 has an invalid length.
[  622.798721][ T9987] netlink: 'syz.1.1341': attribute type 11 has an invalid length.
[  622.824411][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  622.834909][ T6137] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  622.849778][ T6137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  622.893860][ T6137] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  622.903485][ T6137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.912138][ T6137] usb 3-1: Product: syz
[  622.916625][ T6137] usb 3-1: Manufacturer: syz
[  622.921551][ T6137] usb 3-1: SerialNumber: syz
[  622.961781][ T6137] usb 3-1: config 0 descriptor??
[  622.978737][ T6137] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  623.196652][ T6137] usb 3-1: USB disconnect, device number 31
[  623.547717][ T5876] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  623.601112][ T5876] usb 4-1: USB disconnect, device number 36
[  624.028223][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'.
[  624.308261][ T9996] loop3: detected capacity change from 0 to 4096
[  624.356797][ T9996] nilfs2: Unknown parameter 'warrier'
[  624.980062][T10013] loop3: detected capacity change from 0 to 512
[  625.033968][T10013] EXT4-fs: Ignoring removed mblk_io_submit option
[  625.234518][T10013] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  625.280229][T10013] EXT4-fs (loop3): orphan cleanup on readonly fs
[  625.330461][T10018] 9pnet_fd: Insufficient options for proto=fd
[  625.334606][T10013] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  625.347632][T10013] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  625.386867][T10013] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  625.492002][T10013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1345: bg 0: block 40: padding at end of block bitmap is not set
[  625.533898][T10013] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  625.572792][T10013] EXT4-fs (loop3): 1 truncate cleaned up
[  625.581761][T10013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  625.882382][ T5876] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  626.096164][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  626.108712][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  626.125619][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  626.138843][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  626.152752][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  626.162263][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.176862][ T5876] usb 5-1: config 0 descriptor??
[  626.186328][T10023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  626.198131][ T6137] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  626.328511][ T5872] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  626.420160][ T6137] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  626.435650][ T6137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.484754][ T6137] usb 4-1: config 0 descriptor??
[  626.516145][ T6137] cp210x 4-1:0.0: cp210x converter detected
[  626.521589][ T5872] usb 3-1: Using ep0 maxpacket: 8
[  626.610432][ T5872] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  626.622058][ T5872] usb 3-1: config 1 interface 0 has no altsetting 0
[  626.667480][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.677928][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.743947][ T6137] usb 4-1: cp210x converter now attached to ttyUSB0
[  626.752098][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  626.761923][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.770442][ T5872] usb 3-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  626.781303][ T5872] usb 3-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  626.814609][ T5872] usb 3-1: SerialNumber: syz
[  626.953221][ T9996] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1345: iget: bad i_size value: 360287970189639690
[  626.960968][T10031] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  627.024363][ T9996] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1345: iget: bad i_size value: 360287970189639690
[  627.069270][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.078991][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.168923][ T5876] usbhid 5-1:0.0: can't add hid device: -71
[  627.172166][ T6137] usb 4-1: USB disconnect, device number 37
[  627.176604][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  627.201115][ T6137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  627.210904][ T6137] cp210x 4-1:0.0: device disconnected
[  627.294656][ T5876] usb 5-1: USB disconnect, device number 26
[  627.470288][T10031] loop2: detected capacity change from 0 to 512
[  627.511928][T10031] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  627.521846][T10031] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  627.573965][T10031] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  627.598691][T10031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  627.613434][T10031] System zones: 0-2, 18-18, 34-34
[  627.666355][T10031] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1355: iget: bad i_size value: 360287970189639680
[  627.699112][T10031] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1355: couldn't read orphan inode 15 (err -117)
[  627.784407][T10031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.831751][T10044] netlink: 'syz.0.1360': attribute type 5 has an invalid length.
[  627.840150][T10044] netlink: 'syz.0.1360': attribute type 11 has an invalid length.
[  627.913215][ T5876] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  627.956973][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.973260][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.038757][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.100865][ T5872] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  628.144751][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  628.155711][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  628.171577][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  628.190906][ T5872] usb 3-1: USB disconnect, device number 32
[  628.223929][ T5876] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  628.234000][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.243817][ T5876] usb 2-1: Product: syz
[  628.248470][ T5876] usb 2-1: Manufacturer: syz
[  628.255824][ T5876] usb 2-1: SerialNumber: syz
[  628.324466][ T5876] usb 2-1: config 0 descriptor??
[  628.338731][ T5876] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  628.450690][T10050] 9pnet_fd: Insufficient options for proto=fd
[  628.618484][ T5876] usb 2-1: USB disconnect, device number 35
[  628.965162][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.028171][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  629.383635][T10063] 9pnet_fd: Insufficient options for proto=fd
[  629.572269][ T5876] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  630.028750][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  630.044013][ T5876] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  630.054840][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0
[  630.073069][ T6137] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  630.096397][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  630.106441][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.119606][ T5876] usb 5-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  630.131626][ T5876] usb 5-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  630.164783][ T5876] usb 5-1: SerialNumber: syz
[  630.209927][T10058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  630.332280][ T6137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  630.343739][ T6137] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  630.354443][ T6137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  630.364480][ T6137] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  630.516678][T10058] loop4: detected capacity change from 0 to 512
[  630.572346][ T6137] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  630.581967][ T6137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.590219][ T6137] usb 2-1: Product: syz
[  630.594940][ T6137] usb 2-1: Manufacturer: syz
[  630.599774][ T6137] usb 2-1: SerialNumber: syz
[  630.639793][T10058] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  630.651090][T10058] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  630.712826][ T6137] usb 2-1: config 0 descriptor??
[  630.752498][ T6137] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  630.790276][T10058] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  630.887584][T10058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  630.985257][T10058] System zones: 0-2, 18-18, 34-34
[  630.992067][ T6137] scsi host1: usb-storage 2-1:0.0
[  631.050849][T10058] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1375: iget: bad i_size value: 360287970189639680
[  631.083683][ T6137] usb 2-1: USB disconnect, device number 36
[  631.121869][T10058] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1375: couldn't read orphan inode 15 (err -117)
[  631.208656][T10058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.305977][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.316457][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.396350][ T5876] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  631.447697][ T5876] usb 5-1: USB disconnect, device number 27
[  631.589260][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'.
[  632.268364][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.302385][T10084] loop3: detected capacity change from 0 to 4096
[  632.316890][T10084] nilfs2: Unknown parameter 'warrier'
[  632.336138][T10091] netlink: 'syz.2.1374': attribute type 5 has an invalid length.
[  632.344670][T10091] netlink: 'syz.2.1374': attribute type 11 has an invalid length.
[  632.357324][T10092] 9pnet_fd: Insufficient options for proto=fd
[  632.501748][ T6137] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  632.696395][ T6137] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  632.708702][ T6137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  632.721843][ T6137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  632.734540][ T6137] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  632.748530][ T6137] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  632.758039][ T6137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.807369][T10096] loop3: detected capacity change from 0 to 512
[  632.816932][T10096] EXT4-fs: Ignoring removed mblk_io_submit option
[  632.862745][T10096] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  632.900427][ T6137] usb 2-1: config 0 descriptor??
[  632.909373][T10086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  632.925201][T10096] EXT4-fs (loop3): orphan cleanup on readonly fs
[  633.029342][T10096] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  633.041463][T10096] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  633.092365][T10096] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  633.160403][T10096] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1371: bg 0: block 40: padding at end of block bitmap is not set
[  633.212242][T10096] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  633.231666][T10096] EXT4-fs (loop3): 1 truncate cleaned up
[  633.242648][T10096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  633.334421][T10086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.348205][T10086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.421679][ T6139] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  633.461451][T10104] 9pnet_fd: Insufficient options for proto=fd
[  633.605553][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  633.616107][ T6139] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  633.626582][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  633.635073][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'.
[  633.636700][ T6139] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  633.717380][T10086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.727095][T10086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.773264][ T6139] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  633.783322][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.791844][ T6139] usb 1-1: Product: syz
[  633.801356][ T6139] usb 1-1: Manufacturer: syz
[  633.806219][ T6139] usb 1-1: SerialNumber: syz
[  633.813261][ T5876] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  633.833103][ T6137] usbhid 2-1:0.0: can't add hid device: -71
[  633.839812][ T6137] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  633.868039][ T6137] usb 2-1: USB disconnect, device number 37
[  633.887413][ T6139] usb 1-1: config 0 descriptor??
[  633.912629][ T6139] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  633.993419][ T5876] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  634.009078][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.137387][ T5876] usb 4-1: config 0 descriptor??
[  634.142604][ T6139] scsi host1: usb-storage 1-1:0.0
[  634.174572][ T5876] cp210x 4-1:0.0: cp210x converter detected
[  634.194052][ T6139] usb 1-1: USB disconnect, device number 34
[  634.774590][T10096] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1371: iget: bad i_size value: 360287970189639690
[  634.866420][T10117] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1371: iget: bad i_size value: 360287970189639690
[  635.281981][ T6139] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  635.442925][ T6139] usb 5-1: device descriptor read/64, error -71
[  635.705648][ T6139] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  635.891748][ T6139] usb 5-1: device descriptor read/64, error -71
[  636.010299][ T6139] usb usb5-port1: attempt power cycle
[  636.130844][ T5872] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  636.389604][ T5876] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  636.397733][ T5876] cp210x 4-1:0.0: querying part number failed
[  636.411959][ T6139] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  636.413126][ T5872] usb 3-1: Using ep0 maxpacket: 8
[  636.432816][ T5876] usb 4-1: cp210x converter now attached to ttyUSB0
[  636.465046][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.494509][ T5872] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  636.505183][ T5872] usb 3-1: config 1 interface 0 has no altsetting 0
[  636.505287][ T6139] usb 5-1: device descriptor read/8, error -71
[  636.516929][ T5876] usb 4-1: USB disconnect, device number 38
[  636.601897][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  636.611759][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.620088][ T5872] usb 3-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  636.630619][ T5872] usb 3-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  636.668270][ T5872] usb 3-1: SerialNumber: syz
[  636.683376][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  636.693135][ T5876] cp210x 4-1:0.0: device disconnected
[  636.784010][ T6139] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  636.853062][T10126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  636.877626][ T6139] usb 5-1: device descriptor read/8, error -71
[  636.962025][T10134] 9pnet_fd: Insufficient options for proto=fd
[  637.010644][ T6139] usb usb5-port1: unable to enumerate USB device
[  637.236619][T10126] loop2: detected capacity change from 0 to 512
[  637.244119][ T6137] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  637.319418][T10126] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  637.329140][T10126] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  637.353682][T10126] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  637.372946][T10126] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  637.413360][T10126] System zones: 0-2, 18-18, 34-34
[  637.451486][ T6137] usb 4-1: Using ep0 maxpacket: 8
[  637.472306][ T6137] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  637.480963][T10126] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1384: iget: bad i_size value: 360287970189639680
[  637.503092][ T6137] usb 4-1: config 1 interface 0 has no altsetting 0
[  637.535635][T10126] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1384: couldn't read orphan inode 15 (err -117)
[  637.572678][ T6137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  637.582541][ T6137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.595850][ T6137] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  637.607691][ T6137] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  637.640697][ T6137] usb 4-1: SerialNumber: syz
[  637.696183][T10126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.742500][T10133] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  637.863020][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.873322][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.166415][T10144] netlink: 'syz.0.1388': attribute type 5 has an invalid length.
[  638.174835][T10144] netlink: 'syz.0.1388': attribute type 11 has an invalid length.
[  638.235333][T10133] loop3: detected capacity change from 0 to 512
[  638.320322][T10133] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  638.330211][T10133] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  638.437063][T10133] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  638.598650][T10133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  638.716769][T10133] System zones: 0-2, 18-18, 34-34
[  638.737918][T10133] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1386: iget: bad i_size value: 360287970189639680
[  638.820502][T10133] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1386: couldn't read orphan inode 15 (err -117)
[  638.911992][T10133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.119389][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.136213][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.279363][ T6137] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  639.348615][ T6137] usb 4-1: USB disconnect, device number 39
[  639.456816][ T5872] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  639.502202][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.503598][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'.
[  639.574550][ T5872] usb 3-1: USB disconnect, device number 33
[  639.952607][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  640.152067][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  640.165387][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  640.177540][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  640.189981][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  640.203602][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  640.213299][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.230224][ T5876] usb 2-1: config 0 descriptor??
[  640.239765][T10151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  640.347892][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.374054][ T5928] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  640.604951][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  640.615412][ T5928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  640.626014][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  640.636262][ T5928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  640.682158][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.692054][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.774053][ T5928] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  640.784101][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.792816][ T5928] usb 3-1: Product: syz
[  640.797477][ T5928] usb 3-1: Manufacturer: syz
[  640.802591][ T5928] usb 3-1: SerialNumber: syz
[  640.837905][ T5928] usb 3-1: config 0 descriptor??
[  640.909026][ T5928] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  640.993475][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.003563][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.116218][ T5928] scsi host1: usb-storage 3-1:0.0
[  641.158641][ T5876] usbhid 2-1:0.0: can't add hid device: -71
[  641.165551][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  641.193040][ T5928] usb 3-1: USB disconnect, device number 34
[  641.208552][ T5876] usb 2-1: USB disconnect, device number 38
[  641.512923][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'.
[  641.551024][T10168] loop0: detected capacity change from 0 to 4096
[  641.572300][T10168] nilfs2: Unknown parameter 'warrier'
[  642.185171][T10177] loop0: detected capacity change from 0 to 512
[  642.254576][T10177] EXT4-fs: Ignoring removed mblk_io_submit option
[  642.319949][T10177] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  642.344010][T10177] EXT4-fs (loop0): orphan cleanup on readonly fs
[  642.359519][T10177] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  642.370978][T10177] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  642.411861][T10176] loop4: detected capacity change from 0 to 4096
[  642.421921][T10176] nilfs2: Unknown parameter 'warrier'
[  642.451069][T10177] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  642.568395][T10177] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1397: bg 0: block 40: padding at end of block bitmap is not set
[  642.618597][T10177] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  642.635563][T10187] netlink: 'syz.3.1403': attribute type 5 has an invalid length.
[  642.640429][T10177] EXT4-fs (loop0): 1 truncate cleaned up
[  642.643871][T10187] netlink: 'syz.3.1403': attribute type 11 has an invalid length.
[  642.660665][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  642.853389][T10192] loop4: detected capacity change from 0 to 512
[  642.878420][T10192] EXT4-fs: Ignoring removed mblk_io_submit option
[  642.985912][T10192] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  643.028008][T10192] EXT4-fs (loop4): orphan cleanup on readonly fs
[  643.052933][T10192] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  643.064175][T10192] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  643.162612][T10192] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  643.189129][T10192] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1400: bg 0: block 40: padding at end of block bitmap is not set
[  643.262295][T10192] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  643.302126][T10192] EXT4-fs (loop4): 1 truncate cleaned up
[  643.310532][T10192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  643.441830][ T6137] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  643.529907][ T5928] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  643.604053][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'.
[  643.621831][ T6137] usb 3-1: device descriptor read/64, error -71
[  643.747239][ T5928] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  643.757155][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.774531][ T5928] usb 1-1: config 0 descriptor??
[  643.791084][ T5928] cp210x 1-1:0.0: cp210x converter detected
[  643.815296][ T6139] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  643.841717][ T5868] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  643.902384][ T6137] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  644.041982][ T6139] usb 2-1: Using ep0 maxpacket: 8
[  644.074849][ T5868] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  644.084472][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.101995][ T6137] usb 3-1: device descriptor read/64, error -71
[  644.123338][ T5868] usb 5-1: config 0 descriptor??
[  644.130236][ T6139] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  644.145822][ T6139] usb 2-1: config 1 interface 0 has no altsetting 0
[  644.170540][ T5868] cp210x 5-1:0.0: cp210x converter detected
[  644.192344][ T6139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  644.202628][ T6139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.211564][ T6139] usb 2-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  644.222003][ T6139] usb 2-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  644.260010][ T6139] usb 2-1: SerialNumber: syz
[  644.280844][ T6137] usb usb3-port1: attempt power cycle
[  644.304961][T10199] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  644.403986][T10177] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1397: iget: bad i_size value: 360287970189639690
[  644.469406][T10177] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1397: iget: bad i_size value: 360287970189639690
[  644.635411][ T6137] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  644.772979][ T6137] usb 3-1: device descriptor read/8, error -71
[  644.812143][T10192] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1400: iget: bad i_size value: 360287970189639690
[  644.880643][T10199] loop1: detected capacity change from 0 to 512
[  644.979524][T10199] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  644.989607][T10199] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  645.007291][T10205] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1400: iget: bad i_size value: 360287970189639690
[  645.024289][ T6137] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  645.066482][ T6137] usb 3-1: device descriptor read/8, error -71
[  645.083452][T10199] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  645.113076][T10199] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  645.152504][T10199] System zones: 0-2, 18-18, 34-34
[  645.186531][T10199] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1406: iget: bad i_size value: 360287970189639680
[  645.193495][ T6137] usb usb3-port1: unable to enumerate USB device
[  645.202052][T10199] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1406: couldn't read orphan inode 15 (err -117)
[  645.251767][T10199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.449871][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.459732][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  645.526808][ T6139] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  645.613401][ T6139] usb 2-1: USB disconnect, device number 39
[  645.979236][ T5928] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  645.994417][ T5928] cp210x 1-1:0.0: querying part number failed
[  646.021929][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.046950][ T5928] usb 1-1: cp210x converter now attached to ttyUSB0
[  646.073979][ T5928] usb 1-1: USB disconnect, device number 35
[  646.171610][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  646.180850][ T5928] cp210x 1-1:0.0: device disconnected
[  646.592954][ T5868] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  646.608184][ T5868] cp210x 5-1:0.0: querying part number failed
[  646.654888][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.667641][ T5868] usb 5-1: cp210x converter now attached to ttyUSB0
[  646.684489][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'.
[  646.709358][ T5868] usb 5-1: USB disconnect, device number 32
[  646.730534][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.765634][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  646.775621][ T5868] cp210x 5-1:0.0: device disconnected
[  647.400814][ T5868] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  647.481744][ T5928] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  647.606035][ T5868] usb 5-1: Using ep0 maxpacket: 8
[  647.652735][ T5868] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  647.663686][ T5868] usb 5-1: config 1 interface 0 has no altsetting 0
[  647.689855][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  647.702349][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  647.702770][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  647.714269][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  647.714467][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  647.714719][ T5928] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  647.714882][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.773091][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.781592][ T5868] usb 5-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  647.792051][ T5868] usb 5-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  647.796812][ T5928] usb 2-1: config 0 descriptor??
[  647.830205][ T5868] usb 5-1: SerialNumber: syz
[  647.863068][T10220] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  648.076604][T10221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  648.301937][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.311836][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.602989][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.613757][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.761568][T10221] loop4: detected capacity change from 0 to 512
[  648.783650][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.794486][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.943500][T10221] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  648.958952][T10221] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  649.019648][ T5928] usbhid 2-1:0.0: can't add hid device: -71
[  649.028103][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  649.113482][T10237] loop2: detected capacity change from 0 to 1024
[  649.123868][T10221] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  649.194426][T10221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  649.203817][T10221] System zones: 0-2, 18-18, 34-34
[  649.214129][ T5928] usb 2-1: USB disconnect, device number 40
[  649.308221][T10221] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1411: iget: bad i_size value: 360287970189639680
[  649.372156][T10221] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1411: couldn't read orphan inode 15 (err -117)
[  649.434775][T10221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.473535][T10237] netdevsim netdevsim2: Direct firmware load for ..� failed with error -2
[  649.482646][T10237] netdevsim netdevsim2: Falling back to sysfs fallback for: ..�
[  649.849055][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.858705][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.222237][ T6139] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  651.443432][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  651.455263][ T6139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.465973][ T6139] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  651.475546][ T6139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.611457][ T5868] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  651.644306][ T6139] usb 1-1: config 0 descriptor??
[  651.680369][ T5868] usb 5-1: USB disconnect, device number 33
[  651.763417][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.122590][ T6139] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  652.160857][T10264] overlayfs: statfs failed on './file0'
[  652.193887][ T5928] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  652.373207][T10266] ieee802154 phy0 wpan0: encryption failed: -22
[  652.405082][ T5928] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  652.414697][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.425593][ T5928] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  652.439601][ T5928] usb 2-1: config 1 has no interface number 1
[  652.447649][ T5928] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  652.627143][ T5928] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  652.642815][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.651093][ T5928] usb 2-1: Product: syz
[  652.657465][ T5928] usb 2-1: Manufacturer: syz
[  652.662731][ T5928] usb 2-1: SerialNumber: syz
[  652.991072][ T5928] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  652.999984][ T5928] usb 2-1: MIDIStreaming interface descriptor not found
[  653.022346][T10271] loop3: detected capacity change from 0 to 1024
[  653.202346][ T5928] usb 2-1: USB disconnect, device number 41
[  653.213934][T10271] netdevsim netdevsim3: Direct firmware load for ..� failed with error -2
[  653.223484][T10271] netdevsim netdevsim3: Falling back to sysfs fallback for: ..�
[  653.375600][ T6139] usb 1-1: USB disconnect, device number 36
[  653.750221][T10279] loop0: detected capacity change from 0 to 1024
[  653.796591][T10279] EXT4-fs: Ignoring removed nobh option
[  653.802935][T10279] EXT4-fs: Ignoring removed bh option
[  653.998925][T10279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  654.180727][   T30] audit: type=1804 audit(1756222593.863:22): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1433" name="/newroot/288/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  654.459132][ T5928] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  654.558543][T10283] loop2: detected capacity change from 0 to 4096
[  654.621011][T10283] nilfs2: Unknown parameter 'warrier'
[  654.677205][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  654.719829][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  654.782532][ T5928] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  654.797373][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.807454][ T5928] usb 1-1: Product: syz
[  654.812098][ T5928] usb 1-1: Manufacturer: syz
[  654.816914][ T5928] usb 1-1: SerialNumber: syz
[  654.897480][ T5928] usb 1-1: config 0 descriptor??
[  655.041748][ T6139] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  655.094004][T10296] loop2: detected capacity change from 0 to 512
[  655.112381][T10296] EXT4-fs: Ignoring removed mblk_io_submit option
[  655.129093][ T5928] ath6kl: Failed to submit usb control message: -71
[  655.136427][ T5928] ath6kl: unable to send the bmi data to the device: -71
[  655.144686][ T5928] ath6kl: Unable to send get target info: -71
[  655.152757][ T5928] ath6kl: Failed to init ath6kl core: -71
[  655.167771][ T5928] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  655.225934][T10296] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  655.239268][ T6139] usb 4-1: Using ep0 maxpacket: 8
[  655.262980][T10296] EXT4-fs (loop2): orphan cleanup on readonly fs
[  655.263138][ T5928] usb 1-1: USB disconnect, device number 37
[  655.304200][ T6139] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  655.316756][ T6139] usb 4-1: config 1 interface 0 has no altsetting 0
[  655.345973][T10296] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  655.357461][T10296] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  655.401060][ T6139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  655.417412][ T6139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.425974][ T6139] usb 4-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  655.432551][T10296] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  655.436369][ T6139] usb 4-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  655.475472][    C0] vkms_vblank_simulate: vblank timer overrun
[  655.482390][ T6139] usb 4-1: SerialNumber: syz
[  655.514819][T10294] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  655.534673][T10296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1435: bg 0: block 40: padding at end of block bitmap is not set
[  655.569660][T10296] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  655.614389][T10296] EXT4-fs (loop2): 1 truncate cleaned up
[  655.625222][T10296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  655.873434][T10294] loop3: detected capacity change from 0 to 512
[  655.939198][T10294] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  655.948998][T10294] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  656.048263][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.089653][T10294] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  656.182290][T10294] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  656.238835][T10294] System zones: 0-2, 18-18, 34-34
[  656.309852][T10294] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1437: iget: bad i_size value: 360287970189639680
[  656.400162][T10307] overlayfs: statfs failed on './file0'
[  656.401044][T10294] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1437: couldn't read orphan inode 15 (err -117)
[  656.480767][T10294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  656.562268][ T5868] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  656.672787][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.682710][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.802022][ T6139] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  656.829368][T10311] loop4: detected capacity change from 0 to 1024
[  656.847741][ T5868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  656.857338][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.884150][ T6139] usb 4-1: USB disconnect, device number 40
[  656.929435][ T5868] usb 3-1: config 0 descriptor??
[  656.976870][ T5868] cp210x 3-1:0.0: cp210x converter detected
[  657.008802][T10311] netdevsim netdevsim4: Direct firmware load for ..� failed with error -2
[  657.017944][T10311] netdevsim netdevsim4: Falling back to sysfs fallback for: ..�
[  657.238221][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  657.559061][T10296] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1435: iget: bad i_size value: 360287970189639690
[  657.616578][T10296] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1435: iget: bad i_size value: 360287970189639690
[  657.920148][T10320] ieee802154 phy0 wpan0: encryption failed: -22
[  657.958782][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.510799][ T6139] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  658.740469][ T6139] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  658.750395][ T6139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  658.761696][ T6139] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  658.771705][ T6139] usb 1-1: config 1 has no interface number 1
[  658.778268][ T6139] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  659.049618][ T6139] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  659.059530][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.068119][ T6139] usb 1-1: Product: syz
[  659.072791][ T6139] usb 1-1: Manufacturer: syz
[  659.077632][ T6139] usb 1-1: SerialNumber: syz
[  659.225895][ T5868] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  659.239577][ T5868] cp210x 3-1:0.0: querying part number failed
[  659.257649][ T5868] usb 3-1: cp210x converter now attached to ttyUSB0
[  659.289561][ T5868] usb 3-1: USB disconnect, device number 39
[  659.324950][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  659.335429][ T5868] cp210x 3-1:0.0: device disconnected
[  659.358198][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.577589][ T6139] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  659.585782][ T6139] usb 1-1: MIDIStreaming interface descriptor not found
[  659.775003][T10333] loop3: detected capacity change from 0 to 1024
[  659.786643][ T6139] usb 1-1: USB disconnect, device number 38
[  659.825564][T10333] EXT4-fs: Ignoring removed nobh option
[  659.832033][T10333] EXT4-fs: Ignoring removed bh option
[  659.974359][T10333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  660.194936][   T30] audit: type=1804 audit(1756222599.913:23): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1450" name="/newroot/290/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  660.431864][ T5868] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  660.615489][ T5868] usb 4-1: Using ep0 maxpacket: 32
[  660.697267][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  660.782486][ T5868] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[  660.792132][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.800398][ T5868] usb 4-1: Product: syz
[  660.805114][ T5868] usb 4-1: Manufacturer: syz
[  660.809941][ T5868] usb 4-1: SerialNumber: syz
[  660.880760][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  660.914033][ T5868] usb 4-1: config 0 descriptor??
[  661.169349][ T5868] ath6kl: Failed to submit usb control message: -71
[  661.176565][ T5868] ath6kl: unable to send the bmi data to the device: -71
[  661.184382][ T5868] ath6kl: Unable to send get target info: -71
[  661.232939][ T5868] ath6kl: Failed to init ath6kl core: -71
[  661.255983][ T5868] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  661.309262][ T5868] usb 4-1: USB disconnect, device number 41
[  661.492159][ T6139] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  661.722024][ T6139] usb 3-1: Using ep0 maxpacket: 8
[  661.742291][ T6139] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  661.757801][ T6139] usb 3-1: config 1 interface 0 has no altsetting 0
[  661.826719][ T6139] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  661.836375][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.845342][ T6139] usb 3-1: Product: ᒹርﯥ᠓쥧퇤উ屟﷛늉䢏訩ሴ嵾奼⠫祂ぎ읒鉏壈ᝨ
[  661.860387][ T6139] usb 3-1: Manufacturer: ⷖ₻ꌪ뀙뀶٪ቑٗ䚣㊵ﳤ在㑠正᠞潈╨抧揀阎∋گ刓ṅ⦻찀澺摻樿鉉槛ﯚ璽➇䆇崲豛ꋷ폭钆㢆⩼渑鰀⟁꒎聂ꇨ㠚ꨱ䭅Ǿ﹬戜垄漖㸺皵堟䷲螎쟱嘆ꛘ衞ඒ贤옔Ꮈ瑘㺃噗Γ៍ꃆ繉殯寗紴背챭社䎿蜶뾧ﶦ聺ざ셵炍꿙ꀰꑚ욯㿋쀮▯
[  661.894742][ T6139] usb 3-1: SerialNumber: syz
[  661.983917][T10357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  662.082020][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.311040][T10357] loop2: detected capacity change from 0 to 512
[  662.333187][T10362] loop1: detected capacity change from 0 to 4096
[  662.364422][T10357] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  662.381381][T10357] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  662.388108][T10362] nilfs2: Unknown parameter 'warrier'
[  662.445021][T10357] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  662.486415][T10368] loop4: detected capacity change from 0 to 1024
[  662.501037][T10357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  662.514919][T10357] System zones: 0-2, 18-18, 34-34
[  662.554010][T10357] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1458: iget: bad i_size value: 360287970189639680
[  662.626518][T10357] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1458: couldn't read orphan inode 15 (err -117)
[  662.695707][T10357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  662.712705][T10368] netdevsim netdevsim4: Direct firmware load for ..� failed with error -2
[  662.721955][T10368] netdevsim netdevsim4: Falling back to sysfs fallback for: ..�
[  662.754945][T10372] ieee802154 phy0 wpan0: encryption failed: -22
[  662.865730][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.875806][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.997173][ T6139] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  663.061653][ T6139] usb 3-1: USB disconnect, device number 40
[  663.179511][T10376] loop1: detected capacity change from 0 to 512
[  663.203835][T10376] EXT4-fs: Ignoring removed mblk_io_submit option
[  663.259749][T10376] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  663.350923][T10376] EXT4-fs (loop1): orphan cleanup on readonly fs
[  663.438465][T10376] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  663.450630][T10376] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  663.503321][T10376] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  663.542046][T10376] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1459: bg 0: block 40: padding at end of block bitmap is not set
[  663.572145][T10376] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  663.637695][T10376] EXT4-fs (loop1): 1 truncate cleaned up
[  663.646358][T10376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  663.944664][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.032195][T10362] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1459: iget: bad i_size value: 360287970189639690
[  664.097033][T10362] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1459: iget: bad i_size value: 360287970189639690
[  664.482496][ T5928] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  664.484563][T10391] overlayfs: statfs failed on './file0'
[  664.734825][ T5928] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  664.744811][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  664.755541][ T5928] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  664.765175][ T5928] usb 5-1: config 1 has no interface number 1
[  664.771642][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  664.818512][ T5928] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  664.833185][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.843326][ T5928] usb 5-1: Product: syz
[  664.847760][ T5928] usb 5-1: Manufacturer: syz
[  664.852841][ T5928] usb 5-1: SerialNumber: syz
[  665.002035][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  665.008841][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  665.091693][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.125454][ T5928] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  665.140726][ T5928] usb 5-1: MIDIStreaming interface descriptor not found
[  665.256760][ T5928] usb 5-1: USB disconnect, device number 34
[  665.273957][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  666.011879][T10407] loop2: detected capacity change from 0 to 1024
[  666.041374][T10407] EXT4-fs: Ignoring removed nobh option
[  666.047352][T10407] EXT4-fs: Ignoring removed bh option
[  666.180245][T10410] loop0: detected capacity change from 0 to 1024
[  666.197807][T10407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.378009][T10410] netdevsim netdevsim0: Direct firmware load for ..� failed with error -2
[  666.387402][T10410] netdevsim netdevsim0: Falling back to sysfs fallback for: ..�
[  666.417168][   T30] audit: type=1804 audit(1756222606.123:24): pid=10407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1472" name="/newroot/294/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  666.548967][ T5928] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  666.634216][T10419] =====================================================
[  666.641889][T10419] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7cb/0x990
[  666.650377][T10419]  __hfsplus_ext_cache_extent+0x7cb/0x990
[  666.656860][T10419]  hfsplus_file_extend+0x7b5/0x1df0
[  666.662900][T10419]  hfsplus_get_block+0xfc3/0x1a20
[  666.674283][T10419]  __block_write_begin_int+0xa73/0x3030
[  666.680101][T10419]  cont_write_begin+0x10e1/0x1bc0
[  666.687399][T10419]  hfsplus_write_begin+0x85/0x130
[  666.692894][T10419]  generic_perform_write+0x365/0x1050
[  666.698549][T10419]  __generic_file_write_iter+0x213/0x460
[  666.704868][T10419]  generic_file_write_iter+0x131/0x980
[  666.710612][T10419]  vfs_write+0xbe2/0x15d0
[  666.715605][T10419]  __ia32_sys_write+0x1f9/0x4d0
[  666.720681][T10419]  ia32_sys_call+0x35bc/0x4310
[  666.725943][T10419]  __do_fast_syscall_32+0xb0/0x150
[  666.731552][T10419]  do_fast_syscall_32+0x38/0x80
[  666.736651][T10419]  do_SYSENTER_32+0x1f/0x30
[  666.741642][T10419]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  666.748201][T10419] 
[  666.750626][T10419] Uninit was created at:
[  666.755453][T10419]  __kmalloc_noprof+0x95f/0x1310
[  666.760625][T10419]  hfsplus_find_init+0x90/0x1d0
[  666.766600][T10419]  hfsplus_file_extend+0x72f/0x1df0
[  666.778077][T10419]  hfsplus_get_block+0xfc3/0x1a20
[  666.785524][T10419]  __block_write_begin_int+0xa73/0x3030
[  666.791791][T10419]  cont_write_begin+0x10e1/0x1bc0
[  666.797091][T10419]  hfsplus_write_begin+0x85/0x130
[  666.802604][T10419]  generic_perform_write+0x365/0x1050
[  666.808242][T10419]  __generic_file_write_iter+0x213/0x460
[  666.814428][T10419]  generic_file_write_iter+0x131/0x980
[  666.820156][T10419]  vfs_write+0xbe2/0x15d0
[  666.825110][T10419]  __ia32_sys_write+0x1f9/0x4d0
[  666.830197][T10419]  ia32_sys_call+0x35bc/0x4310
[  666.835469][T10419]  __do_fast_syscall_32+0xb0/0x150
[  666.840821][T10419]  do_fast_syscall_32+0x38/0x80
[  666.846209][T10419]  do_SYSENTER_32+0x1f/0x30
[  666.850961][T10419]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  666.858410][T10419] 
[  666.860934][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.0.1474 Not tainted syzkaller #0 PREEMPT(none) 
[  666.876839][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  666.889359][T10419] =====================================================
[  666.896854][T10419] Disabling lock debugging due to kernel taint
[  666.903353][T10419] Kernel panic - not syncing: kmsan.panic set ...
[  666.909930][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.0.1474 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  666.921137][T10419] Tainted: [B]=BAD_PAGE
[  666.925415][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  666.935614][T10419] Call Trace:
[  666.939009][T10419]  <TASK>
[  666.942046][T10419]  __dump_stack+0x26/0x30
[  666.946585][T10419]  dump_stack_lvl+0x53/0x270
[  666.951395][T10419]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  666.957424][T10419]  dump_stack+0x1e/0x25
[  666.961911][T10419]  vpanic+0x361/0xc50
[  666.966332][T10419]  panic+0x15d/0x160
[  666.970502][T10419]  kmsan_report+0x31c/0x320
[  666.975237][T10419]  ? __msan_warning+0x1b/0x30
[  666.980100][T10419]  ? __hfsplus_ext_cache_extent+0x7cb/0x990
[  666.986208][T10419]  ? hfsplus_file_extend+0x7b5/0x1df0
[  666.991932][T10419]  ? hfsplus_get_block+0xfc3/0x1a20
[  666.997488][T10419]  ? __block_write_begin_int+0xa73/0x3030
[  667.003545][T10419]  ? cont_write_begin+0x10e1/0x1bc0
[  667.009061][T10419]  ? hfsplus_write_begin+0x85/0x130
[  667.014462][T10419]  ? generic_perform_write+0x365/0x1050
[  667.020261][T10419]  ? __generic_file_write_iter+0x213/0x460
[  667.026317][T10419]  ? generic_file_write_iter+0x131/0x980
[  667.032218][T10419]  ? vfs_write+0xbe2/0x15d0
[  667.036944][T10419]  ? __ia32_sys_write+0x1f9/0x4d0
[  667.042271][T10419]  ? ia32_sys_call+0x35bc/0x4310
[  667.047379][T10419]  ? __do_fast_syscall_32+0xb0/0x150
[  667.052894][T10419]  ? do_fast_syscall_32+0x38/0x80
[  667.058165][T10419]  ? do_SYSENTER_32+0x1f/0x30
[  667.063147][T10419]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  667.069879][T10419]  ? stack_depot_save_flags+0x35/0x7b0
[  667.075585][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.081093][T10419]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  667.087628][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.092944][T10419]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  667.098987][T10419]  ? hfsplus_brec_find+0x216/0x9f0
[  667.104347][T10419]  ? __pfx_hfs_find_rec_by_key+0x10/0x10
[  667.110242][T10419]  ? __hfsplus_ext_write_extent+0x535/0x620
[  667.116446][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.121770][T10419]  __msan_warning+0x1b/0x30
[  667.126470][T10419]  __hfsplus_ext_cache_extent+0x7cb/0x990
[  667.132526][T10419]  hfsplus_file_extend+0x7b5/0x1df0
[  667.137989][T10419]  hfsplus_get_block+0xfc3/0x1a20
[  667.143223][T10419]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  667.149808][T10419]  __block_write_begin_int+0xa73/0x3030
[  667.155882][T10419]  ? __pfx_hfsplus_get_block+0x10/0x10
[  667.161594][T10419]  cont_write_begin+0x10e1/0x1bc0
[  667.166871][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.172213][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.177543][T10419]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  667.183614][T10419]  hfsplus_write_begin+0x85/0x130
[  667.188852][T10419]  ? __pfx_hfsplus_get_block+0x10/0x10
[  667.194538][T10419]  ? __pfx_hfsplus_write_begin+0x10/0x10
[  667.200369][T10419]  generic_perform_write+0x365/0x1050
[  667.206070][T10419]  __generic_file_write_iter+0x213/0x460
[  667.211975][T10419]  generic_file_write_iter+0x131/0x980
[  667.217878][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.223288][T10419]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  667.229314][T10419]  ? vfs_write+0x481/0x15d0
[  667.234109][T10419]  ? filter_irq_stacks+0x49/0x190
[  667.239399][T10419]  ? stack_depot_save_flags+0x35/0x7b0
[  667.245101][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.250688][T10419]  ? kmsan_get_metadata+0xfb/0x160
[  667.256189][T10419]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  667.262742][T10419]  vfs_write+0xbe2/0x15d0
[  667.267311][T10419]  ? __pfx_generic_file_write_iter+0x10/0x10
[  667.273653][T10419]  __ia32_sys_write+0x1f9/0x4d0
[  667.278782][T10419]  ia32_sys_call+0x35bc/0x4310
[  667.283814][T10419]  __do_fast_syscall_32+0xb0/0x150
[  667.289200][T10419]  ? irqentry_exit_to_user_mode+0x82/0xa0
[  667.295148][T10419]  do_fast_syscall_32+0x38/0x80
[  667.300236][T10419]  do_SYSENTER_32+0x1f/0x30
[  667.304954][T10419]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  667.311572][T10419] RIP: 0023:0xf711e539
[  667.316206][T10419] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  667.336191][T10419] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  667.344811][T10419] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140
[  667.352937][T10419] RDX: 0000000000032600 RSI: 0000000000000000 RDI: 0000000000000000
[  667.361061][T10419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  667.369167][T10419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  667.377267][T10419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  667.385776][T10419]  </TASK>
[  667.389289][T10419] Kernel Offset: disabled
[  667.393712][T10419] Rebooting in 86400 seconds..