last executing test programs: 8.541774176s ago: executing program 1 (id=954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 6.253336621s ago: executing program 1 (id=961): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07c", 0x2cb, 0xbcff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 6.108167411s ago: executing program 1 (id=964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_connect(0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.687862847s ago: executing program 3 (id=967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.007033626s ago: executing program 2 (id=968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$FUSE_POLL(r2, &(0x7f0000003900)={0x18, 0x0, 0x0, {0x400}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0x411) 4.006751353s ago: executing program 2 (id=969): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d41595f2b5845432c61707072616973652c0087e004439811ef4ad70fa96a87a04a948d5fe99cd16fa3f0e5bf7ef431150ca312673ce5c8d3ac3e310df8051a691f40f0f3bd3c0d289dbcf46b5bdd3836649061e44d94fc1d2f3988b522fd15ce705c3a1a4cda5609040b0ce8c450e0381702bc6385321398"]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00', 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='fdinfo/3\x00') creat(&(0x7f0000000040)='./bus\x00', 0x8) 3.691128015s ago: executing program 3 (id=971): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0), 0x0, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.990221914s ago: executing program 0 (id=972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.990022099s ago: executing program 1 (id=973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x2cb, 0xbcff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 2.793914354s ago: executing program 2 (id=974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="04020300c900"], 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.565721571s ago: executing program 3 (id=975): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000380), 0x1001) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e00000000002000010005000000000000140000030000000400000004"], 0x58) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r1, &(0x7f00000000c0), 0x0, 0xfe, 0x0, 0x0) 2.564105271s ago: executing program 1 (id=983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private1}}, [@lastused={0xf, 0xf, 0xc}]}, 0x5c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_connect(0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000041) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.482781606s ago: executing program 0 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x7fffffff, 0x400, 0x6, 0x7, 0x4da11d3, 0x3ff], &(0x7f0000000180)=[0x0], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x300, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x7, 0xa}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008008) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') fsopen(&(0x7f0000000340)='msdos\x00', 0x1) 1.472091647s ago: executing program 2 (id=977): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r0) ftruncate(r2, 0x7fff) 1.026508995s ago: executing program 1 (id=978): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d"]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x5, &(0x7f0000000340)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00', 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='fdinfo/3\x00') creat(&(0x7f0000000040)='./bus\x00', 0x8) 1.026327755s ago: executing program 3 (id=979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$FUSE_POLL(r2, &(0x7f0000003900)={0x18, 0x0, 0x0, {0x400}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) 1.024510654s ago: executing program 0 (id=987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) 988.018001ms ago: executing program 3 (id=980): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000380), 0x1001) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e00000000002000010005000000000000140000030000000400000004"], 0x58) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r1, &(0x7f00000000c0), 0x0, 0xfe, 0x0, 0x0) 983.450473ms ago: executing program 0 (id=981): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) write$P9_RLERRORu(r2, 0x0, 0x13) dup3(r2, r0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) 723.486788ms ago: executing program 0 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x400, 0x6, 0x7, 0x4da11d3, 0x3ff], &(0x7f0000000180)=[0x0], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x300, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff1}, {0x7, 0xa}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008008) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') fsopen(&(0x7f0000000340)='msdos\x00', 0x1) 487.314636ms ago: executing program 2 (id=984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4f4", 0x2}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) 302.795674ms ago: executing program 2 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x7fffffff, 0x6, 0x7, 0x4da11d3, 0x3ff], &(0x7f0000000180)=[0x0], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c0100001000070028bd7000000000000a01010200000000000000fc0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x300, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff1}, {0x7, 0xa}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008008) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') fsopen(&(0x7f0000000340)='msdos\x00', 0x1) 263.457308ms ago: executing program 0 (id=986): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d"]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x5, &(0x7f0000000340)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0]) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00', 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='fdinfo/3\x00') creat(&(0x7f0000000040)='./bus\x00', 0x8) 0s ago: executing program 3 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): :00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 59.599222][ T6341] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 59.599229][ T6341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.599236][ T6341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.599242][ T6341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.599248][ T6341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.599262][ T6341] [ 59.611597][ T6344] jffs2: notice: (6344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 24 of xdatum (0 unchecked, 24 orphan) and 24 of xref (4 dead, 20 orphan) found. [ 59.613617][ T6341] socket: no more sockets [ 59.641249][ T6344] overlayfs: upper fs does not support tmpfile. [ 59.641495][ T6344] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.901319][ T6357] jffs2: notice: (6357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 30 of xdatum (0 unchecked, 30 orphan) and 30 of xref (5 dead, 25 orphan) found. [ 59.934087][ T6357] overlayfs: upper fs does not support tmpfile. [ 59.934359][ T6357] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.010568][ T6362] netlink: 52 bytes leftover after parsing attributes in process `syz.2.171'. [ 60.053209][ T5134] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.078635][ T6366] FAULT_INJECTION: forcing a failure. [ 60.078635][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 60.078689][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT(full) [ 60.078713][ T6366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.078721][ T6366] Call Trace: [ 60.078725][ T6366] [ 60.078730][ T6366] dump_stack_lvl+0x100/0x190 [ 60.078749][ T6366] should_fail_ex.cold+0x5/0xa [ 60.078764][ T6366] should_failslab+0xc2/0x120 [ 60.078781][ T6366] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 60.078796][ T6366] ? find_held_lock+0x2b/0x80 [ 60.078808][ T6366] ? sock_alloc_inode+0x26/0x2c0 [ 60.078826][ T6366] ? __pfx_sock_alloc_inode+0x10/0x10 [ 60.078843][ T6366] sock_alloc_inode+0x26/0x2c0 [ 60.078859][ T6366] ? __pfx_sock_alloc_inode+0x10/0x10 [ 60.078874][ T6366] alloc_inode+0x68/0x250 [ 60.078891][ T6366] sock_alloc+0x44/0x280 [ 60.078905][ T6366] ? security_socket_create+0x7f/0x250 [ 60.078920][ T6366] __sock_create+0xc2/0x860 [ 60.078939][ T6366] __sys_socket+0x14d/0x260 [ 60.078949][ T6366] ? fput+0x7c/0x100 [ 60.078962][ T6366] ? __pfx___sys_socket+0x10/0x10 [ 60.078972][ T6366] ? ksys_write+0x1ac/0x250 [ 60.078983][ T6366] ? __pfx_ksys_write+0x10/0x10 [ 60.078997][ T6366] __ia32_sys_socket+0x72/0xb0 [ 60.079007][ T6366] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.079024][ T6366] __do_fast_syscall_32+0x13a/0x8b0 [ 60.079043][ T6366] do_fast_syscall_32+0x32/0x70 [ 60.079059][ T6366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.079074][ T6366] RIP: 0023:0xf7f32fec [ 60.079087][ T6366] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 60.079091][ T6366] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 60.079103][ T6366] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 60.079109][ T6366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.079115][ T6366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.079122][ T6366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.079128][ T6366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.079141][ T6366] [ 60.079180][ T6366] socket: no more sockets [ 60.109797][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 60.109811][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 60.127016][ T6368] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 60.203056][ T5134] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 60.204321][ T5134] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.204341][ T5134] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 60.204369][ T5134] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.212255][ T5134] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 60.215020][ T5134] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 60.321100][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 36 of xdatum (0 unchecked, 36 orphan) and 36 of xref (6 dead, 30 orphan) found. [ 60.348863][ T6371] overlayfs: upper fs does not support tmpfile. [ 60.349141][ T6371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.451709][ T6376] jffs2: notice: (6376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 42 of xdatum (0 unchecked, 42 orphan) and 42 of xref (7 dead, 35 orphan) found. [ 60.478654][ T6376] overlayfs: upper fs does not support tmpfile. [ 60.478965][ T6376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.536880][ T5134] usb 8-1: USB disconnect, device number 3 [ 60.539220][ T5134] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 60.539472][ T5134] spcp8x5 8-1:1.0: device disconnected [ 60.688804][ T6392] FAULT_INJECTION: forcing a failure. [ 60.688804][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 60.688866][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT(full) [ 60.688890][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.688898][ T6392] Call Trace: [ 60.688902][ T6392] [ 60.688907][ T6392] dump_stack_lvl+0x100/0x190 [ 60.688927][ T6392] should_fail_ex.cold+0x5/0xa [ 60.688943][ T6392] should_failslab+0xc2/0x120 [ 60.688959][ T6392] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 60.688973][ T6392] ? find_held_lock+0x2b/0x80 [ 60.688985][ T6392] ? sock_alloc_inode+0x26/0x2c0 [ 60.689003][ T6392] ? __pfx_sock_alloc_inode+0x10/0x10 [ 60.689020][ T6392] sock_alloc_inode+0x26/0x2c0 [ 60.689035][ T6392] ? __pfx_sock_alloc_inode+0x10/0x10 [ 60.689050][ T6392] alloc_inode+0x68/0x250 [ 60.689067][ T6392] sock_alloc+0x44/0x280 [ 60.689081][ T6392] ? security_socket_create+0x7f/0x250 [ 60.689102][ T6392] __sock_create+0xc2/0x860 [ 60.689132][ T6392] __sys_socket+0x14d/0x260 [ 60.689148][ T6392] ? xfd_validate_state+0x129/0x190 [ 60.689167][ T6392] ? __pfx___sys_socket+0x10/0x10 [ 60.689182][ T6392] __ia32_sys_socket+0x72/0xb0 [ 60.689192][ T6392] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.689209][ T6392] __do_fast_syscall_32+0x13a/0x8b0 [ 60.689237][ T6392] do_fast_syscall_32+0x32/0x70 [ 60.689264][ T6392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.689279][ T6392] RIP: 0023:0xf70aefec [ 60.689293][ T6392] Code: Unable to access opcode bytes at 0xf70aefc2. [ 60.689298][ T6392] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 60.689309][ T6392] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 60.689315][ T6392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.689321][ T6392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.689327][ T6392] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.689334][ T6392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.689361][ T6392] [ 60.690748][ T6392] socket: no more sockets [ 60.770111][ T6396] jffs2: notice: (6396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 48 of xdatum (0 unchecked, 48 orphan) and 48 of xref (8 dead, 40 orphan) found. [ 60.819673][ T6396] overlayfs: upper fs does not support tmpfile. [ 60.820340][ T6396] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.899686][ T6407] jffs2: notice: (6407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 54 of xdatum (0 unchecked, 54 orphan) and 54 of xref (9 dead, 45 orphan) found. [ 60.927300][ T6407] overlayfs: upper fs does not support tmpfile. [ 60.927604][ T6407] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.091486][ T6417] FAULT_INJECTION: forcing a failure. [ 61.091486][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 61.095798][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.0.193 Not tainted syzkaller #0 PREEMPT(full) [ 61.095825][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.095834][ T6417] Call Trace: [ 61.095839][ T6417] [ 61.095844][ T6417] dump_stack_lvl+0x100/0x190 [ 61.095863][ T6417] should_fail_ex.cold+0x5/0xa [ 61.095878][ T6417] should_failslab+0xc2/0x120 [ 61.095895][ T6417] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 61.095910][ T6417] ? find_held_lock+0x2b/0x80 [ 61.095922][ T6417] ? sock_alloc_inode+0x26/0x2c0 [ 61.095940][ T6417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.095956][ T6417] sock_alloc_inode+0x26/0x2c0 [ 61.095972][ T6417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.095989][ T6417] alloc_inode+0x68/0x250 [ 61.096006][ T6417] sock_alloc+0x44/0x280 [ 61.096021][ T6417] ? security_socket_create+0x7f/0x250 [ 61.096036][ T6417] __sock_create+0xc2/0x860 [ 61.096056][ T6417] __sys_socket+0x14d/0x260 [ 61.096066][ T6417] ? xfd_validate_state+0x129/0x190 [ 61.096083][ T6417] ? __pfx___sys_socket+0x10/0x10 [ 61.096098][ T6417] __ia32_sys_socket+0x72/0xb0 [ 61.096108][ T6417] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.096124][ T6417] __do_fast_syscall_32+0x13a/0x8b0 [ 61.096143][ T6417] do_fast_syscall_32+0x32/0x70 [ 61.096160][ T6417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.096178][ T6417] RIP: 0023:0xf700efec [ 61.096191][ T6417] Code: Unable to access opcode bytes at 0xf700efc2. [ 61.096196][ T6417] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 61.096208][ T6417] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 61.096216][ T6417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.096223][ T6417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.096230][ T6417] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.096237][ T6417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.096251][ T6417] [ 61.099461][ T6417] socket: no more sockets [ 61.257397][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 61.257470][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 61.274603][ T6421] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 61.405425][ T6427] jffs2: notice: (6427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 60 of xdatum (0 unchecked, 60 orphan) and 60 of xref (10 dead, 50 orphan) found. [ 61.407834][ T5752] Bluetooth: hci2: command 0x2016 tx timeout [ 61.443735][ T6427] overlayfs: upper fs does not support tmpfile. [ 61.444315][ T6427] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.517946][ T6430] jffs2: notice: (6430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 66 of xdatum (0 unchecked, 66 orphan) and 66 of xref (11 dead, 55 orphan) found. [ 61.548112][ T6430] overlayfs: upper fs does not support tmpfile. [ 61.548380][ T6430] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.719482][ T6441] FAULT_INJECTION: forcing a failure. [ 61.719482][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 61.719531][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 61.719555][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.719563][ T6441] Call Trace: [ 61.719567][ T6441] [ 61.719571][ T6441] dump_stack_lvl+0x100/0x190 [ 61.719590][ T6441] should_fail_ex.cold+0x5/0xa [ 61.719606][ T6441] should_failslab+0xc2/0x120 [ 61.719622][ T6441] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 61.719636][ T6441] ? find_held_lock+0x2b/0x80 [ 61.719648][ T6441] ? sock_alloc_inode+0x26/0x2c0 [ 61.719668][ T6441] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.719685][ T6441] sock_alloc_inode+0x26/0x2c0 [ 61.719701][ T6441] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.719716][ T6441] alloc_inode+0x68/0x250 [ 61.719733][ T6441] sock_alloc+0x44/0x280 [ 61.719747][ T6441] ? security_socket_create+0x7f/0x250 [ 61.719762][ T6441] __sock_create+0xc2/0x860 [ 61.719782][ T6441] __sys_socket+0x14d/0x260 [ 61.719792][ T6441] ? fput+0x7c/0x100 [ 61.719805][ T6441] ? __pfx___sys_socket+0x10/0x10 [ 61.719815][ T6441] ? ksys_write+0x1ac/0x250 [ 61.719826][ T6441] ? __pfx_ksys_write+0x10/0x10 [ 61.719840][ T6441] __ia32_sys_socket+0x72/0xb0 [ 61.719850][ T6441] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.719866][ T6441] __do_fast_syscall_32+0x13a/0x8b0 [ 61.719885][ T6441] do_fast_syscall_32+0x32/0x70 [ 61.719901][ T6441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.719915][ T6441] RIP: 0023:0xf706efec [ 61.719927][ T6441] Code: Unable to access opcode bytes at 0xf706efc2. [ 61.719932][ T6441] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 61.719943][ T6441] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 61.719950][ T6441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.719956][ T6441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.719963][ T6441] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.719969][ T6441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.719982][ T6441] [ 61.720020][ T6441] socket: no more sockets [ 61.832945][ T6447] jffs2: notice: (6447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 72 orphan) and 72 of xref (12 dead, 60 orphan) found. [ 61.876052][ T6447] overlayfs: upper fs does not support tmpfile. [ 61.876320][ T6447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.944528][ T5134] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.988550][ T6453] jffs2: notice: (6453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 78 of xdatum (0 unchecked, 78 orphan) and 78 of xref (13 dead, 65 orphan) found. [ 62.021619][ T6453] overlayfs: upper fs does not support tmpfile. [ 62.021985][ T6453] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.104672][ T5134] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 62.108635][ T5134] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.108735][ T5134] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.108765][ T5134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.117497][ T6464] Zero length message leads to an empty skb [ 62.123500][ T5134] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 62.129721][ T5134] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 62.158231][ T6467] FAULT_INJECTION: forcing a failure. [ 62.158231][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 62.158277][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.3.213 Not tainted syzkaller #0 PREEMPT(full) [ 62.158303][ T6467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.158311][ T6467] Call Trace: [ 62.158315][ T6467] [ 62.158320][ T6467] dump_stack_lvl+0x100/0x190 [ 62.158339][ T6467] should_fail_ex.cold+0x5/0xa [ 62.158355][ T6467] should_failslab+0xc2/0x120 [ 62.158372][ T6467] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 62.158386][ T6467] ? find_held_lock+0x2b/0x80 [ 62.158399][ T6467] ? sock_alloc_inode+0x26/0x2c0 [ 62.158417][ T6467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 62.158433][ T6467] sock_alloc_inode+0x26/0x2c0 [ 62.158449][ T6467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 62.158464][ T6467] alloc_inode+0x68/0x250 [ 62.158481][ T6467] sock_alloc+0x44/0x280 [ 62.158500][ T6467] ? security_socket_create+0x7f/0x250 [ 62.158522][ T6467] __sock_create+0xc2/0x860 [ 62.158551][ T6467] __sys_socket+0x14d/0x260 [ 62.158566][ T6467] ? xfd_validate_state+0x129/0x190 [ 62.158592][ T6467] ? __pfx___sys_socket+0x10/0x10 [ 62.158616][ T6467] __ia32_sys_socket+0x72/0xb0 [ 62.158632][ T6467] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.158656][ T6467] __do_fast_syscall_32+0x13a/0x8b0 [ 62.158688][ T6467] do_fast_syscall_32+0x32/0x70 [ 62.158716][ T6467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.158736][ T6467] RIP: 0023:0xf706efec [ 62.158757][ T6467] Code: Unable to access opcode bytes at 0xf706efc2. [ 62.158764][ T6467] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 62.158783][ T6467] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 62.158795][ T6467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.158806][ T6467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.158817][ T6467] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.158827][ T6467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.158851][ T6467] [ 62.161140][ T6467] socket: no more sockets [ 62.243613][ T6471] jffs2: notice: (6471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 75 of xdatum (0 unchecked, 75 orphan) and 77 of xref (14 dead, 63 orphan) found. [ 62.269933][ T6471] overlayfs: upper fs does not support tmpfile. [ 62.270209][ T6471] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.446146][ T30] usb 6-1: USB disconnect, device number 6 [ 62.466293][ T30] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 62.466883][ T30] spcp8x5 6-1:1.0: device disconnected [ 62.514634][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 62.514741][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 62.534357][ T6481] netlink: 'syz.3.218': attribute type 2 has an invalid length. [ 62.875436][ T6484] jffs2: notice: (6484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 81 of xdatum (0 unchecked, 81 orphan) and 83 of xref (15 dead, 68 orphan) found. [ 62.911688][ T6484] overlayfs: upper fs does not support tmpfile. [ 62.911990][ T6484] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.021754][ T6495] FAULT_INJECTION: forcing a failure. [ 63.021754][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 63.025600][ T6495] CPU: 2 UID: 0 PID: 6495 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT(full) [ 63.025625][ T6495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.025634][ T6495] Call Trace: [ 63.025639][ T6495] [ 63.025644][ T6495] dump_stack_lvl+0x100/0x190 [ 63.025663][ T6495] should_fail_ex.cold+0x5/0xa [ 63.025682][ T6495] should_failslab+0xc2/0x120 [ 63.025698][ T6495] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 63.025711][ T6495] ? find_held_lock+0x2b/0x80 [ 63.025724][ T6495] ? sock_alloc_inode+0x26/0x2c0 [ 63.025742][ T6495] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.025759][ T6495] sock_alloc_inode+0x26/0x2c0 [ 63.025774][ T6495] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.025790][ T6495] alloc_inode+0x68/0x250 [ 63.025808][ T6495] sock_alloc+0x44/0x280 [ 63.025822][ T6495] ? security_socket_create+0x7f/0x250 [ 63.025837][ T6495] __sock_create+0xc2/0x860 [ 63.025857][ T6495] __sys_socket+0x14d/0x260 [ 63.025867][ T6495] ? xfd_validate_state+0x129/0x190 [ 63.025883][ T6495] ? __pfx___sys_socket+0x10/0x10 [ 63.025898][ T6495] __ia32_sys_socket+0x72/0xb0 [ 63.025909][ T6495] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.025925][ T6495] __do_fast_syscall_32+0x13a/0x8b0 [ 63.025943][ T6495] do_fast_syscall_32+0x32/0x70 [ 63.025959][ T6495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.025974][ T6495] RIP: 0023:0xf70aefec [ 63.025987][ T6495] Code: Unable to access opcode bytes at 0xf70aefc2. [ 63.025992][ T6495] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 63.026003][ T6495] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 63.026010][ T6495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.026016][ T6495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.026022][ T6495] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.026029][ T6495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.026042][ T6495] [ 63.029780][ T6495] socket: no more sockets [ 63.050053][ T6497] jffs2: notice: (6497) jffs2_build_xattr_subsystem: complete building xattr subsystem, 85 of xdatum (0 unchecked, 85 orphan) and 87 of xref (16 dead, 71 orphan) found. [ 63.097086][ T6497] overlayfs: upper fs does not support tmpfile. [ 63.104053][ T6497] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.209365][ T6504] jffs2: notice: (6504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 91 orphan) and 93 of xref (17 dead, 76 orphan) found. [ 63.350960][ T6517] fuse: Bad value for 'fd' [ 63.377546][ T6504] overlayfs: upper fs does not support tmpfile. [ 63.377816][ T6504] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.533767][ T6530] FAULT_INJECTION: forcing a failure. [ 63.533767][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 63.533850][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.2.235 Not tainted syzkaller #0 PREEMPT(full) [ 63.533885][ T6530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.533898][ T6530] Call Trace: [ 63.533904][ T6530] [ 63.533910][ T6530] dump_stack_lvl+0x100/0x190 [ 63.533939][ T6530] should_fail_ex.cold+0x5/0xa [ 63.533963][ T6530] should_failslab+0xc2/0x120 [ 63.533986][ T6530] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 63.534007][ T6530] ? find_held_lock+0x2b/0x80 [ 63.534025][ T6530] ? sock_alloc_inode+0x26/0x2c0 [ 63.534055][ T6530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.534092][ T6530] sock_alloc_inode+0x26/0x2c0 [ 63.534119][ T6530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.534146][ T6530] alloc_inode+0x68/0x250 [ 63.534175][ T6530] sock_alloc+0x44/0x280 [ 63.534198][ T6530] ? security_socket_create+0x7f/0x250 [ 63.534220][ T6530] __sock_create+0xc2/0x860 [ 63.534254][ T6530] __sys_socket+0x14d/0x260 [ 63.534269][ T6530] ? fput+0x7c/0x100 [ 63.534294][ T6530] ? __pfx___sys_socket+0x10/0x10 [ 63.534310][ T6530] ? ksys_write+0x1ac/0x250 [ 63.534330][ T6530] ? __pfx_ksys_write+0x10/0x10 [ 63.534352][ T6530] __ia32_sys_socket+0x72/0xb0 [ 63.534369][ T6530] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.534395][ T6530] __do_fast_syscall_32+0x13a/0x8b0 [ 63.534425][ T6530] do_fast_syscall_32+0x32/0x70 [ 63.534451][ T6530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.534472][ T6530] RIP: 0023:0xf7f32fec [ 63.534493][ T6530] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 63.534500][ T6530] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 63.534519][ T6530] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 63.534530][ T6530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.534541][ T6530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.534551][ T6530] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.534561][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.534585][ T6530] [ 63.534635][ T6530] socket: no more sockets [ 63.578925][ T6532] jffs2: notice: (6532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 95 of xdatum (0 unchecked, 95 orphan) and 97 of xref (18 dead, 79 orphan) found. [ 63.614007][ T6532] overlayfs: upper fs does not support tmpfile. [ 63.614284][ T6532] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.622440][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.756722][ T6537] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 63.880474][ T10] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 63.881896][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.881910][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 63.881936][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.893148][ T10] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 63.895847][ T10] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 64.248803][ T6553] __nla_validate_parse: 4 callbacks suppressed [ 64.248878][ T6553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.242'. [ 64.287960][ T6559] FAULT_INJECTION: forcing a failure. [ 64.287960][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 64.288024][ T6559] CPU: 0 UID: 0 PID: 6559 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 64.288049][ T6559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.288057][ T6559] Call Trace: [ 64.288061][ T6559] [ 64.288066][ T6559] dump_stack_lvl+0x100/0x190 [ 64.288086][ T6559] should_fail_ex.cold+0x5/0xa [ 64.288101][ T6559] should_failslab+0xc2/0x120 [ 64.288117][ T6559] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 64.288131][ T6559] ? find_held_lock+0x2b/0x80 [ 64.288143][ T6559] ? sock_alloc_inode+0x26/0x2c0 [ 64.288160][ T6559] ? __pfx_sock_alloc_inode+0x10/0x10 [ 64.288177][ T6559] sock_alloc_inode+0x26/0x2c0 [ 64.288192][ T6559] ? __pfx_sock_alloc_inode+0x10/0x10 [ 64.288208][ T6559] alloc_inode+0x68/0x250 [ 64.288225][ T6559] sock_alloc+0x44/0x280 [ 64.288239][ T6559] ? security_socket_create+0x7f/0x250 [ 64.288254][ T6559] __sock_create+0xc2/0x860 [ 64.288274][ T6559] __sys_socket+0x14d/0x260 [ 64.288284][ T6559] ? xfd_validate_state+0x129/0x190 [ 64.288300][ T6559] ? __pfx___sys_socket+0x10/0x10 [ 64.288315][ T6559] __ia32_sys_socket+0x72/0xb0 [ 64.288325][ T6559] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.288341][ T6559] __do_fast_syscall_32+0x13a/0x8b0 [ 64.288360][ T6559] do_fast_syscall_32+0x32/0x70 [ 64.288376][ T6559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.288390][ T6559] RIP: 0023:0xf700efec [ 64.288403][ T6559] Code: Unable to access opcode bytes at 0xf700efc2. [ 64.288408][ T6559] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 64.288420][ T6559] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 64.288427][ T6559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.288433][ T6559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.288439][ T6559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.288445][ T6559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.288461][ T6559] [ 64.288504][ T6559] socket: no more sockets [ 64.291855][ T6557] jffs2: notice: (6557) jffs2_build_xattr_subsystem: complete building xattr subsystem, 95 of xdatum (0 unchecked, 95 orphan) and 98 of xref (19 dead, 79 orphan) found. [ 64.321703][ T6557] overlayfs: upper fs does not support tmpfile. [ 64.321928][ T6557] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.384514][ T6562] overlayfs: upper fs does not support tmpfile. [ 64.385080][ T6562] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.454641][ T6568] fuse: Bad value for 'fd' [ 64.552853][ T6567] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 64.553523][ T6567] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 64.553783][ T6567] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 64.752748][ T6519] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 64.753593][ T30] usb 8-1: USB disconnect, device number 4 [ 64.761039][ T30] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 64.761363][ T30] spcp8x5 8-1:1.0: device disconnected [ 65.401060][ T6590] jffs2: notice: (6590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 86 orphan) and 92 of xref (21 dead, 71 orphan) found. [ 65.439774][ T6590] overlayfs: upper fs does not support tmpfile. [ 65.440224][ T6590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.487736][ T6593] overlayfs: upper fs does not support tmpfile. [ 65.493493][ T6593] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.632460][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 65.632531][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 65.659988][ T6602] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 65.668378][ T6608] fuse: Bad value for 'fd' [ 66.102285][ T6290] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.263042][ T6290] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 66.264006][ T6290] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.264019][ T6290] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 66.264037][ T6290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.271166][ T6290] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 66.275419][ T6290] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 66.460348][ T6619] jffs2: notice: (6619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 90 of xdatum (0 unchecked, 90 orphan) and 97 of xref (23 dead, 74 orphan) found. [ 66.491235][ T6619] overlayfs: upper fs does not support tmpfile. [ 66.491982][ T6619] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.541132][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.269'. [ 66.549782][ T6626] jffs2: notice: (6626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 94 of xdatum (0 unchecked, 94 orphan) and 101 of xref (24 dead, 77 orphan) found. [ 66.594834][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 66.594896][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 66.601069][ T6626] overlayfs: upper fs does not support tmpfile. [ 66.603041][ T6626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.611813][ T6631] netlink: 'syz.0.272': attribute type 2 has an invalid length. [ 66.824898][ T6635] warning: `syz.1.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.992815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 67.002574][ T6636] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 67.005767][ T6636] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 67.009196][ T6636] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 67.202678][ T6609] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 67.208223][ T5888] usb 8-1: USB disconnect, device number 5 [ 67.237921][ T5888] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 67.238525][ T5888] spcp8x5 8-1:1.0: device disconnected [ 67.772325][ T6654] jffs2: notice: (6654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 100 of xdatum (0 unchecked, 100 orphan) and 107 of xref (25 dead, 82 orphan) found. [ 68.117409][ T6661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.282'. [ 68.276883][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 68.276930][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 68.299377][ T6667] netlink: 'syz.2.284': attribute type 2 has an invalid length. [ 68.446608][ T6680] jffs2: notice: (6680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 100 of xdatum (0 unchecked, 100 orphan) and 107 of xref (25 dead, 82 orphan) found. [ 68.494928][ T6680] overlayfs: upper fs does not support tmpfile. [ 68.496678][ T6680] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.642316][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.950337][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 69.153196][ T6692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.294'. [ 69.393656][ T6700] jffs2: notice: (6700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 106 of xdatum (0 unchecked, 106 orphan) and 113 of xref (26 dead, 87 orphan) found. [ 69.453406][ T6700] overlayfs: upper fs does not support tmpfile. [ 69.455660][ T6700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.521506][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.521557][ T5888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.521609][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.522838][ T6705] overlayfs: upper fs does not support tmpfile. [ 69.523483][ T6705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.538227][ T5888] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 69.543524][ T5888] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 69.560173][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 69.560221][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 69.576725][ T6709] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 69.635909][ T6712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.303'. [ 69.764127][ T6714] jffs2: notice: (6714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 116 of xref (27 dead, 89 orphan) found. [ 69.798887][ T6714] overlayfs: upper fs does not support tmpfile. [ 69.799939][ T6714] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.064129][ T6731] jffs2: notice: (6731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 116 of xref (27 dead, 89 orphan) found. [ 70.097145][ T6731] overlayfs: upper fs does not support tmpfile. [ 70.097440][ T6731] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.203060][ T6733] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 70.203465][ T6733] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 70.203717][ T6733] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 70.413615][ T6677] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 70.415736][ T5887] usb 5-1: USB disconnect, device number 4 [ 70.426560][ T5887] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 70.427027][ T5887] spcp8x5 5-1:1.0: device disconnected [ 70.428525][ T6743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.314'. [ 70.838073][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.838183][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.839530][ T1474] cfg80211: failed to load regulatory.db [ 71.050205][ T6748] jffs2: notice: (6748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 115 of xdatum (0 unchecked, 115 orphan) and 122 of xref (28 dead, 94 orphan) found. [ 71.137496][ T6748] overlayfs: upper fs does not support tmpfile. [ 71.142391][ T6748] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.205698][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 71.209250][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 71.228713][ T6760] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 71.270805][ T6765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.323'. [ 71.415959][ T6768] jffs2: notice: (6768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 113 of xdatum (0 unchecked, 113 orphan) and 121 of xref (29 dead, 92 orphan) found. [ 71.433112][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 71.433160][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 71.483630][ T6768] overlayfs: upper fs does not support tmpfile. [ 71.489181][ T6768] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.506256][ T6771] netlink: 'syz.2.325': attribute type 2 has an invalid length. [ 72.312265][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.475379][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 72.476273][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.476287][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 72.476304][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.481749][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 72.485012][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 73.518066][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 73.518846][ T6801] jffs2: notice: (6801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 113 of xdatum (0 unchecked, 113 orphan) and 120 of xref (28 dead, 92 orphan) found. [ 73.556990][ T6803] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 73.572631][ T6801] overlayfs: upper fs does not support tmpfile. [ 73.573032][ T6801] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.014526][ T6822] fuse: Bad value for 'fd' [ 75.165850][ T5888] usb 5-1: USB disconnect, device number 5 [ 75.261052][ T5888] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 75.274015][ T5888] spcp8x5 5-1:1.0: device disconnected [ 75.439426][ T6837] jffs2: notice: (6837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 119 of xdatum (0 unchecked, 119 orphan) and 126 of xref (29 dead, 97 orphan) found. [ 75.465676][ T6837] overlayfs: upper fs does not support tmpfile. [ 75.465937][ T6837] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.908382][ T6844] __nla_validate_parse: 1 callbacks suppressed [ 75.909469][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 75.909487][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 75.937653][ T6844] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 76.662271][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.822776][ T5888] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 76.823627][ T5888] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.823640][ T5888] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 76.823657][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.832327][ T5888] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 76.838598][ T5888] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 77.038015][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 77.038067][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 77.080975][ T6864] netlink: 'syz.3.354': attribute type 2 has an invalid length. [ 77.267130][ T6870] jffs2: notice: (6870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 120 of xdatum (0 unchecked, 120 orphan) and 128 of xref (29 dead, 99 orphan) found. [ 77.514354][ T6875] fuse: Bad value for 'fd' [ 78.621103][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 78.621150][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 78.642162][ T6888] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 78.944768][ T6896] jffs2: notice: (6896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 120 of xdatum (0 unchecked, 120 orphan) and 128 of xref (29 dead, 99 orphan) found. [ 78.980110][ T6896] overlayfs: upper fs does not support tmpfile. [ 78.980424][ T6896] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.503867][ T5887] usb 7-1: USB disconnect, device number 7 [ 79.555884][ T6909] fuse: Bad value for 'fd' [ 79.625647][ T5887] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 79.632362][ T5887] spcp8x5 7-1:1.0: device disconnected [ 80.392039][ T6923] jffs2: notice: (6923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 126 of xdatum (0 unchecked, 126 orphan) and 134 of xref (30 dead, 104 orphan) found. [ 80.475155][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 80.475213][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 80.548097][ T6928] netlink: 'syz.3.378': attribute type 2 has an invalid length. [ 80.650810][ T6938] syz_tun: entered allmulticast mode [ 80.808454][ T6936] syz_tun: left allmulticast mode [ 81.002290][ T6290] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.162734][ T6290] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 81.163599][ T6290] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 81.163612][ T6290] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 81.163630][ T6290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.746400][ T6290] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 81.751528][ T6290] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 81.800259][ T6957] jffs2: notice: (6957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 126 of xdatum (0 unchecked, 126 orphan) and 134 of xref (30 dead, 104 orphan) found. [ 81.836488][ T6957] overlayfs: upper fs does not support tmpfile. [ 81.836809][ T6957] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.951564][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 81.951609][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 81.968657][ T6975] netlink: 'syz.2.395': attribute type 2 has an invalid length. [ 82.876648][ T6987] syz_tun: entered allmulticast mode [ 83.079202][ T6986] syz_tun: left allmulticast mode [ 83.791999][ T5825] usb 5-1: USB disconnect, device number 6 [ 83.812157][ T5825] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 83.815253][ T5825] spcp8x5 5-1:1.0: device disconnected [ 83.893338][ T7002] jffs2: notice: (7002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 132 of xdatum (0 unchecked, 132 orphan) and 140 of xref (31 dead, 109 orphan) found. [ 84.014188][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 84.023540][ T44] audit: type=1800 audit(1788807761.648:2): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 84.039417][ T7002] overlayfs: upper fs does not support tmpfile. [ 84.039694][ T7002] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.114593][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 84.114643][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 84.169305][ T7015] netlink: 'syz.0.406': attribute type 2 has an invalid length. [ 86.363109][ T5825] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 86.525884][ T5825] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 86.541110][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.544877][ T5825] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 86.548354][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.556948][ T5825] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 86.565027][ T5825] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 86.939265][ T7045] jffs2: notice: (7045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 138 of xdatum (0 unchecked, 138 orphan) and 146 of xref (32 dead, 114 orphan) found. [ 86.976357][ T7045] overlayfs: upper fs does not support tmpfile. [ 86.976677][ T7045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.919253][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 87.919286][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 87.965461][ T7059] netlink: 'syz.1.421': attribute type 2 has an invalid length. [ 88.068130][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 88.068938][ T44] audit: type=1800 audit(1788807765.688:3): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.420" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 88.822054][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 88.822112][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 88.845074][ T7073] netlink: 'syz.0.423': attribute type 2 has an invalid length. [ 89.139377][ T1482] usb 7-1: USB disconnect, device number 8 [ 89.151741][ T1482] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 89.152434][ T1482] spcp8x5 7-1:1.0: device disconnected [ 89.343367][ T7084] jffs2: notice: (7084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 132 of xdatum (0 unchecked, 132 orphan) and 140 of xref (31 dead, 109 orphan) found. [ 89.866374][ T7084] overlayfs: upper fs does not support tmpfile. [ 89.875818][ T7084] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 90.525235][ T7108] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 90.812295][ T1482] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 90.982822][ T1482] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 90.983675][ T1482] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.983689][ T1482] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 90.983706][ T1482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.987435][ T1482] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 90.991806][ T1482] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 91.250576][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 91.250620][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 91.302972][ T7116] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 92.205613][ T7125] jffs2: notice: (7125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 123 of xdatum (0 unchecked, 123 orphan) and 132 of xref (30 dead, 102 orphan) found. [ 92.233422][ T7125] overlayfs: upper fs does not support tmpfile. [ 92.234046][ T7125] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.480983][ T7134] kAFS: unable to lookup cell '(,c¾Ì' [ 92.496092][ T7134] binfmt_misc: register: failed to install interpreter ./bus [ 93.217469][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 93.220298][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 93.235301][ T7142] netlink: 'syz.1.446': attribute type 2 has an invalid length. [ 93.567508][ T7148] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 93.607676][ T856] usb 8-1: USB disconnect, device number 6 [ 93.614467][ T856] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 93.614771][ T856] spcp8x5 8-1:1.0: device disconnected [ 94.475756][ T7168] kAFS: unable to lookup cell '(,c¾Ì' [ 94.478961][ T7168] binfmt_misc: register: failed to install interpreter ./bus [ 94.691807][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 94.695222][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 94.742358][ T7175] netlink: 'syz.3.457': attribute type 2 has an invalid length. [ 94.845665][ T7179] FAULT_INJECTION: forcing a failure. [ 94.845665][ T7179] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.845706][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.1.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.845732][ T7179] Tainted: [L]=SOFTLOCKUP [ 94.845738][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.845744][ T7179] Call Trace: [ 94.845748][ T7179] [ 94.845752][ T7179] dump_stack_lvl+0x100/0x190 [ 94.845771][ T7179] should_fail_ex.cold+0x5/0xa [ 94.845786][ T7179] get_futex_key+0x1d0/0x14f0 [ 94.845805][ T7179] ? __pfx_get_futex_key+0x10/0x10 [ 94.845822][ T7179] ? __mutex_unlock_slowpath+0x35d/0x930 [ 94.845842][ T7179] futex_wake+0xf4/0x5e0 [ 94.845856][ T7179] ? __pfx_futex_wake+0x10/0x10 [ 94.845871][ T7179] ? detach_task_ctx_data+0x83/0x490 [ 94.845890][ T7179] do_futex+0x2b2/0x440 [ 94.845901][ T7179] ? __pfx_do_futex+0x10/0x10 [ 94.845910][ T7179] ? __might_fault+0xc5/0x140 [ 94.845930][ T7179] mm_exit_exec_release+0x256/0x2f0 [ 94.845949][ T7179] do_exit+0x707/0x2ae0 [ 94.845962][ T7179] ? __pfx_do_exit+0x10/0x10 [ 94.845974][ T7179] ? do_raw_spin_lock+0x128/0x260 [ 94.845997][ T7179] ? find_held_lock+0x2b/0x80 [ 94.846007][ T7179] ? get_signal+0x7e0/0x21e0 [ 94.846025][ T7179] do_group_exit+0xd5/0x2a0 [ 94.846038][ T7179] get_signal+0x1ec7/0x21e0 [ 94.846058][ T7179] ? putname+0xb1/0x110 [ 94.846072][ T7179] ? __pfx_get_signal+0x10/0x10 [ 94.846089][ T7179] ? do_futex+0x190/0x440 [ 94.846100][ T7179] arch_do_signal_or_restart+0x91/0x7a0 [ 94.846115][ T7179] ? rcu_is_watching+0x13/0xc0 [ 94.846126][ T7179] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 94.846148][ T7179] exit_to_user_mode_loop+0x139/0x700 [ 94.846164][ T7179] ? rcu_is_watching+0x13/0xc0 [ 94.846176][ T7179] __do_fast_syscall_32+0x59f/0x8b0 [ 94.846194][ T7179] do_fast_syscall_32+0x32/0x70 [ 94.846210][ T7179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.846223][ T7179] RIP: 0023:0xf70aefec [ 94.846235][ T7179] Code: Unable to access opcode bytes at 0xf70aefc2. [ 94.846239][ T7179] RSP: 002b:00000000f549d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 94.846262][ T7179] RAX: fffffffffffffe00 RBX: 00000000f74a4f88 RCX: 0000000000000080 [ 94.846270][ T7179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74a4f8c [ 94.846276][ T7179] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 94.846282][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.846288][ T7179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.846301][ T7179] [ 94.977523][ T7181] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 95.240165][ T7185] jffs2: notice: (7185) jffs2_build_xattr_subsystem: complete building xattr subsystem, 129 of xdatum (0 unchecked, 129 orphan) and 138 of xref (31 dead, 107 orphan) found. [ 95.269348][ T7185] overlayfs: upper fs does not support tmpfile. [ 95.269654][ T7185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.272385][ T1474] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 95.443463][ T1474] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 95.444481][ T1474] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.444499][ T1474] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.444525][ T1474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.455227][ T1474] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 95.459282][ T1474] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 97.056812][ T7197] kAFS: unable to lookup cell '(,c¾Ì' [ 97.058760][ T7197] binfmt_misc: register: failed to install interpreter ./bus [ 97.075236][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 97.075300][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 97.104070][ T7201] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 98.032628][ T1474] usb 6-1: USB disconnect, device number 7 [ 98.043314][ T1474] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 98.043624][ T1474] spcp8x5 6-1:1.0: device disconnected [ 98.135764][ T7214] jffs2: notice: (7214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 127 of xdatum (0 unchecked, 127 orphan) and 138 of xref (32 dead, 106 orphan) found. [ 98.165984][ T7214] overlayfs: upper fs does not support tmpfile. [ 98.167058][ T7214] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.127250][ T7243] input: syz1 as /devices/virtual/input/input9 [ 101.176244][ T7282] jffs2: notice: (7282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 133 of xdatum (0 unchecked, 133 orphan) and 144 of xref (33 dead, 111 orphan) found. [ 101.212673][ T7282] overlayfs: upper fs does not support tmpfile. [ 101.213905][ T7282] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.533079][ T7293] input: syz1 as /devices/virtual/input/input10 [ 102.163449][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 102.163511][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 102.201444][ T7298] netlink: 'syz.1.500': attribute type 2 has an invalid length. [ 102.203953][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 102.203964][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 102.243290][ T7301] netlink: 'syz.3.501': attribute type 2 has an invalid length. [ 105.126600][ T7312] jffs2: notice: (7312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 132 of xdatum (0 unchecked, 132 orphan) and 144 of xref (34 dead, 110 orphan) found. [ 105.176767][ T7312] overlayfs: upper fs does not support tmpfile. [ 105.178099][ T7312] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.855854][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 105.855906][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 105.901533][ T7341] netlink: 'syz.3.515': attribute type 2 has an invalid length. [ 106.408517][ T7345] fuse: Bad value for 'group_id' [ 106.408562][ T7345] fuse: Bad value for 'group_id' [ 106.469909][ T7351] jffs2: notice: (7351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 130 of xdatum (0 unchecked, 130 orphan) and 144 of xref (35 dead, 109 orphan) found. [ 106.522041][ T7351] overlayfs: upper fs does not support tmpfile. [ 106.522599][ T7351] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.574894][ T7355] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 106.767402][ T7359] jffs2: notice: (7359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 136 of xdatum (0 unchecked, 136 orphan) and 150 of xref (36 dead, 114 orphan) found. [ 107.912383][ T6290] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 108.022430][ T5825] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 108.042320][ T6290] usb 7-1: device descriptor read/64, error -71 [ 108.182788][ T5825] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 108.187277][ T5825] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.193676][ T5825] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.197908][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.200801][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.210569][ T5825] usb 6-1: config 0 descriptor?? [ 108.292488][ T6290] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 108.375766][ T7387] jffs2: notice: (7387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 136 of xdatum (0 unchecked, 136 orphan) and 150 of xref (36 dead, 114 orphan) found. [ 108.422297][ T6290] usb 7-1: device descriptor read/64, error -71 [ 108.427682][ T7387] overlayfs: upper fs does not support tmpfile. [ 108.428336][ T7387] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.501723][ T7390] fuse: Bad value for 'group_id' [ 108.501776][ T7390] fuse: Bad value for 'group_id' [ 108.533109][ T6290] usb usb7-port1: attempt power cycle [ 108.626662][ T5825] hid_parser_main: 30 callbacks suppressed [ 108.629631][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.629686][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634824][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634839][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634851][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634862][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634873][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634885][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634896][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.634907][ T5825] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 108.829710][ T5825] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 108.837859][ T5825] usb 6-1: USB disconnect, device number 8 [ 108.874793][ T6290] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.902888][ T6290] usb 7-1: device descriptor read/8, error -71 [ 109.142272][ T6290] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 109.162921][ T6290] usb 7-1: device descriptor read/8, error -71 [ 109.277325][ T6290] usb usb7-port1: unable to enumerate USB device [ 109.478014][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 109.478078][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 109.499227][ T7403] netlink: 'syz.3.539': attribute type 2 has an invalid length. [ 110.091210][ T7418] jffs2: notice: (7418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 134 of xdatum (0 unchecked, 134 orphan) and 149 of xref (37 dead, 112 orphan) found. [ 110.130128][ T7418] overlayfs: upper fs does not support tmpfile. [ 110.130582][ T7418] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.219412][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 110.219468][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 110.258747][ T7422] netlink: 'syz.0.546': attribute type 2 has an invalid length. [ 110.577479][ T7426] fuse: Bad value for 'group_id' [ 110.579806][ T7426] fuse: Bad value for 'group_id' [ 112.176498][ T7445] jffs2: notice: (7445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 132 of xdatum (0 unchecked, 132 orphan) and 148 of xref (38 dead, 110 orphan) found. [ 112.211251][ T7445] overlayfs: upper fs does not support tmpfile. [ 112.211840][ T7445] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.542341][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 112.672283][ T30] usb 8-1: device descriptor read/64, error -71 [ 112.912283][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 113.052256][ T30] usb 8-1: device descriptor read/64, error -71 [ 113.162626][ T30] usb usb8-port1: attempt power cycle [ 113.182803][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 113.182848][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 113.202748][ T7464] netlink: 'syz.1.561': attribute type 2 has an invalid length. [ 113.503160][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 113.533335][ T30] usb 8-1: device descriptor read/8, error -71 [ 113.773895][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 113.799597][ T30] usb 8-1: device descriptor read/8, error -71 [ 113.914135][ T30] usb usb8-port1: unable to enumerate USB device [ 114.335180][ T7479] jffs2: notice: (7479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 138 of xdatum (0 unchecked, 138 orphan) and 154 of xref (39 dead, 115 orphan) found. [ 114.398061][ T7479] overlayfs: upper fs does not support tmpfile. [ 114.398334][ T7479] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.371142][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 115.371184][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 115.387373][ T7497] netlink: 'syz.2.573': attribute type 2 has an invalid length. [ 115.605469][ T7508] jffs2: notice: (7508) jffs2_build_xattr_subsystem: complete building xattr subsystem, 138 of xdatum (0 unchecked, 138 orphan) and 155 of xref (40 dead, 115 orphan) found. [ 115.656818][ T7508] overlayfs: upper fs does not support tmpfile. [ 115.659307][ T7508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.782348][ T6290] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 116.912714][ T6290] usb 8-1: device descriptor read/64, error -71 [ 117.162465][ T6290] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 117.302282][ T6290] usb 8-1: device descriptor read/64, error -71 [ 117.412453][ T6290] usb usb8-port1: attempt power cycle [ 117.575973][ T7538] jffs2: notice: (7538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 144 of xdatum (0 unchecked, 144 orphan) and 161 of xref (41 dead, 120 orphan) found. [ 117.600762][ T7538] overlayfs: upper fs does not support tmpfile. [ 117.601051][ T7538] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.657891][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 117.657939][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 117.752407][ T6290] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.774274][ T6290] usb 8-1: device descriptor read/8, error -71 [ 118.012294][ T6290] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 118.034638][ T6290] usb 8-1: device descriptor read/8, error -71 [ 118.155297][ T6290] usb usb8-port1: unable to enumerate USB device [ 118.634004][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 118.636929][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 118.696703][ T7554] netlink: 'syz.2.595': attribute type 2 has an invalid length. [ 119.570723][ T7570] jffs2: notice: (7570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 150 of xdatum (0 unchecked, 150 orphan) and 167 of xref (42 dead, 125 orphan) found. [ 119.641471][ T7570] overlayfs: upper fs does not support tmpfile. [ 119.642135][ T7570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.746323][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 119.746483][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 121.012275][ T5825] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 121.142289][ T5825] usb 8-1: device descriptor read/64, error -71 [ 121.382328][ T5825] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 121.513623][ T5825] usb 8-1: device descriptor read/64, error -71 [ 121.523125][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 121.523182][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 121.633158][ T5825] usb usb8-port1: attempt power cycle [ 121.982283][ T5825] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 122.007579][ T5825] usb 8-1: device descriptor read/8, error -71 [ 122.242318][ T5825] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 122.263171][ T5825] usb 8-1: device descriptor read/8, error -71 [ 122.372508][ T5825] usb usb8-port1: unable to enumerate USB device [ 123.453744][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 123.453812][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 123.520284][ T7637] jffs2: notice: (7637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 156 of xdatum (0 unchecked, 156 orphan) and 173 of xref (43 dead, 130 orphan) found. [ 123.591360][ T7637] overlayfs: upper fs does not support tmpfile. [ 123.591747][ T7637] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.082271][ T1041] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.212584][ T1041] usb 5-1: device descriptor read/64, error -71 [ 124.452400][ T1041] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.582290][ T1041] usb 5-1: device descriptor read/64, error -71 [ 124.702393][ T1041] usb usb5-port1: attempt power cycle [ 124.990503][ T7668] jffs2: notice: (7668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 154 of xdatum (0 unchecked, 154 orphan) and 171 of xref (43 dead, 128 orphan) found. [ 125.042275][ T1041] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.069710][ T7668] overlayfs: upper fs does not support tmpfile. [ 125.070203][ T7668] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.073487][ T1041] usb 5-1: device descriptor read/8, error -71 [ 125.208194][ T7673] fuse: Unknown parameter 'grou00000000000000000000' [ 125.312430][ T1041] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.332771][ T1041] usb 5-1: device descriptor read/8, error -71 [ 125.442900][ T1041] usb usb5-port1: unable to enumerate USB device [ 126.376017][ T7686] jffs2: notice: (7686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 153 of xdatum (0 unchecked, 153 orphan) and 168 of xref (42 dead, 126 orphan) found. [ 126.406638][ T7686] overlayfs: upper fs does not support tmpfile. [ 126.406928][ T7686] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.890718][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 126.890767][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 127.994405][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 127.994466][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 128.011526][ T7710] netlink: 'syz.3.649': attribute type 2 has an invalid length. [ 128.385714][ T7714] fuse: Unknown parameter 'grou00000000000000000000' [ 128.712223][ T7717] jffs2: notice: (7717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 150 of xdatum (0 unchecked, 150 orphan) and 166 of xref (43 dead, 123 orphan) found. [ 128.793766][ T7717] overlayfs: upper fs does not support tmpfile. [ 128.794326][ T7717] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.969544][ T7720] jffs2: notice: (7720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 156 of xdatum (0 unchecked, 156 orphan) and 172 of xref (44 dead, 128 orphan) found. [ 129.031048][ T7720] overlayfs: upper fs does not support tmpfile. [ 129.031326][ T7720] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.111759][ T7725] jffs2: notice: (7725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 156 of xdatum (0 unchecked, 156 orphan) and 173 of xref (45 dead, 128 orphan) found. [ 129.180360][ T7725] overlayfs: upper fs does not support tmpfile. [ 129.180633][ T7725] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.243089][ T6290] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.372914][ T6290] usb 5-1: device descriptor read/64, error -71 [ 129.387297][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.390221][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 129.612307][ T6290] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.742362][ T6290] usb 5-1: device descriptor read/64, error -71 [ 129.863846][ T6290] usb usb5-port1: attempt power cycle [ 130.222600][ T6290] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.244551][ T6290] usb 5-1: device descriptor read/8, error -71 [ 130.503409][ T6290] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.526758][ T6290] usb 5-1: device descriptor read/8, error -71 [ 130.531307][ T7748] jffs2: notice: (7748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 162 of xdatum (0 unchecked, 162 orphan) and 179 of xref (46 dead, 133 orphan) found. [ 130.565376][ T7748] overlayfs: upper fs does not support tmpfile. [ 130.565740][ T7748] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.633994][ T6290] usb usb5-port1: unable to enumerate USB device [ 130.697888][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 130.697965][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 130.745875][ T7751] netlink: 'syz.2.661': attribute type 2 has an invalid length. [ 132.283251][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.283353][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.498550][ T7759] fuse: Unknown parameter 'grou00000000000000000000' [ 133.089113][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 133.089184][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 133.105205][ T7762] netlink: 'syz.2.664': attribute type 2 has an invalid length. [ 134.800762][ T7779] jffs2: notice: (7779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 168 of xdatum (0 unchecked, 168 orphan) and 185 of xref (47 dead, 138 orphan) found. [ 134.866190][ T7779] overlayfs: upper fs does not support tmpfile. [ 134.866631][ T7779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.053740][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 135.053787][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 135.092317][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 135.244260][ T35] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 135.248850][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.249066][ T35] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 135.255543][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.024568][ T7797] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.883372][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 136.885494][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 136.927733][ T7802] netlink: 'syz.0.675': attribute type 2 has an invalid length. [ 137.204574][ T7809] jffs2: notice: (7809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 167 of xdatum (0 unchecked, 167 orphan) and 184 of xref (47 dead, 137 orphan) found. [ 137.263617][ T7809] overlayfs: upper fs does not support tmpfile. [ 137.263905][ T7809] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 137.823665][ T1041] usb 6-1: USB disconnect, device number 9 [ 137.870133][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 137.870186][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 137.905815][ T7821] netlink: 'syz.1.683': attribute type 2 has an invalid length. [ 138.117332][ T7828] jffs2: notice: (7828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 173 of xdatum (0 unchecked, 173 orphan) and 190 of xref (48 dead, 142 orphan) found. [ 138.185458][ T7828] overlayfs: upper fs does not support tmpfile. [ 138.185786][ T7828] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.207009][ T7837] fuse: Unknown parameter 'group_i00000000000000000000' [ 138.502279][ T6290] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.672897][ T6290] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 138.673728][ T6290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.673741][ T6290] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 138.673757][ T6290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.409530][ T7850] jffs2: notice: (7850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 179 of xdatum (0 unchecked, 179 orphan) and 196 of xref (49 dead, 147 orphan) found. [ 139.472319][ T7850] overlayfs: upper fs does not support tmpfile. [ 139.490729][ T7850] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.742730][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 139.742796][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 140.005593][ T7869] fuse: Unknown parameter 'group_i00000000000000000000' [ 140.881363][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 140.881420][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 140.918334][ T7878] netlink: 'syz.1.704': attribute type 2 has an invalid length. [ 141.531477][ T1041] usb 5-1: USB disconnect, device number 15 [ 141.884888][ T7882] jffs2: notice: (7882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 185 of xdatum (0 unchecked, 185 orphan) and 202 of xref (50 dead, 152 orphan) found. [ 142.492597][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 142.495928][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 143.499589][ T7903] fuse: Unknown parameter 'group_id00000000000000000000' [ 143.855075][ T6290] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 144.012995][ T6290] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 144.014337][ T6290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.014355][ T6290] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.014383][ T6290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.039668][ T7917] jffs2: notice: (7917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 185 of xdatum (0 unchecked, 185 orphan) and 202 of xref (50 dead, 152 orphan) found. [ 144.079756][ T7917] overlayfs: upper fs does not support tmpfile. [ 144.080082][ T7917] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 144.152746][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 144.152785][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 145.337678][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 145.337741][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 145.355591][ T7948] netlink: 'syz.0.728': attribute type 2 has an invalid length. [ 145.369291][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 145.369343][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 145.410066][ T7951] netlink: 'syz.2.729': attribute type 2 has an invalid length. [ 146.601374][ T7959] jffs2: notice: (7959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 185 of xdatum (0 unchecked, 185 orphan) and 203 of xref (51 dead, 152 orphan) found. [ 146.819744][ T25] usb 6-1: USB disconnect, device number 10 [ 147.507100][ T7966] fuse: Unknown parameter 'group_id00000000000000000000' [ 148.309007][ T7983] syz.2.737 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 148.368912][ T7989] jffs2: notice: (7989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 185 of xdatum (0 unchecked, 185 orphan) and 203 of xref (51 dead, 152 orphan) found. [ 148.373842][ T7983] CPU: 2 UID: 0 PID: 7983 Comm: syz.2.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.373874][ T7983] Tainted: [L]=SOFTLOCKUP [ 148.373879][ T7983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.373886][ T7983] Call Trace: [ 148.373891][ T7983] [ 148.373896][ T7983] dump_stack_lvl+0x100/0x190 [ 148.373916][ T7983] dump_header+0xfb/0x606 [ 148.373931][ T7983] oom_kill_process.cold+0xd/0x380 [ 148.373945][ T7983] out_of_memory+0x1256/0x14f0 [ 148.373965][ T7983] ? __pfx_out_of_memory+0x10/0x10 [ 148.373985][ T7983] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 148.374006][ T7983] ? __lock_acquire+0x5c0/0x1f40 [ 148.374022][ T7983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.374035][ T7983] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.374046][ T7983] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.374069][ T7983] ? rcu_is_watching+0x13/0xc0 [ 148.374088][ T7983] ? find_held_lock+0x2b/0x80 [ 148.374100][ T7983] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 148.374121][ T7983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.374149][ T7983] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 148.374166][ T7983] ? policy_nodemask+0xed/0x4f0 [ 148.374183][ T7983] alloc_pages_mpol+0x201/0x550 [ 148.374199][ T7983] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.374221][ T7983] folio_alloc_mpol_noprof+0x36/0x260 [ 148.374239][ T7983] vma_alloc_folio_noprof+0xed/0x1d0 [ 148.374261][ T7983] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.374284][ T7983] ? rcu_read_unlock+0x2d/0xb0 [ 148.374306][ T7983] ? rcu_read_unlock+0x2d/0xb0 [ 148.374334][ T7983] do_wp_page+0xe11/0x45c0 [ 148.374364][ T7983] ? lock_acquire+0x1d1/0x380 [ 148.374386][ T7983] ? __pfx_do_wp_page+0x10/0x10 [ 148.374403][ T7983] ? do_raw_spin_lock+0x128/0x260 [ 148.374422][ T7983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 148.374444][ T7983] __handle_mm_fault+0x1cd2/0x2f60 [ 148.374464][ T7983] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.374479][ T7983] ? __pfx_mt_find+0x10/0x10 [ 148.374504][ T7983] ? find_vma+0xbf/0x140 [ 148.374516][ T7983] ? __pfx_find_vma+0x10/0x10 [ 148.374530][ T7983] handle_mm_fault+0x363/0xa20 [ 148.374549][ T7983] do_user_addr_fault+0x745/0x12f0 [ 148.374569][ T7983] exc_page_fault+0x6f/0xd0 [ 148.374585][ T7983] asm_exc_page_fault+0x26/0x30 [ 148.374596][ T7983] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 148.374612][ T7983] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 81 ec 03 00 90 90 90 90 90 90 90 90 90 90 [ 148.374623][ T7983] RSP: 0018:ffffc90006c879a8 EFLAGS: 00050287 [ 148.374633][ T7983] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080002e98 [ 148.374640][ T7983] RDX: 0000000000080000 RSI: ffffffff898ff22d RDI: ffff88802927cb00 [ 148.374647][ T7983] RBP: ffffc90006c87d40 R08: 0000000000000005 R09: 0000000000000000 [ 148.374654][ T7983] R10: 000000008000830b R11: 0000000000000000 R12: 0000000000000000 [ 148.374660][ T7983] R13: 0000000000000000 R14: ffffc90006c87d84 R15: 000000008000830b [ 148.374672][ T7983] ? ____sys_recvmsg+0x3bd/0x670 [ 148.374692][ T7983] ____sys_recvmsg+0x3cc/0x670 [ 148.374712][ T7983] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.374734][ T7983] ? __lock_acquire+0x5c0/0x1f40 [ 148.374752][ T7983] ___sys_recvmsg+0x16a/0x1a0 [ 148.374763][ T7983] ? __pfx____sys_recvmsg+0x10/0x10 [ 148.374774][ T7983] ? lock_acquire+0x1d1/0x380 [ 148.374801][ T7983] do_recvmmsg+0x54d/0x740 [ 148.374815][ T7983] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.374838][ T7983] __sys_recvmmsg+0x21f/0x270 [ 148.374854][ T7983] ? __pfx___sys_recvmmsg+0x10/0x10 [ 148.374873][ T7983] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 148.374892][ T7983] ? __do_fast_syscall_32+0xb3/0x8b0 [ 148.374908][ T7983] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.374923][ T7983] __do_fast_syscall_32+0x13a/0x8b0 [ 148.374939][ T7983] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.374956][ T7983] do_fast_syscall_32+0x32/0x70 [ 148.374972][ T7983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.374986][ T7983] RIP: 0023:0xf7f32fec [ 148.374999][ T7983] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 148.375004][ T7983] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 148.375015][ T7983] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002e80 [ 148.375021][ T7983] RDX: 0000000004000071 RSI: 000000000000830b RDI: 0000000000000000 [ 148.375028][ T7983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.375034][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.375041][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.375055][ T7983] [ 148.376250][ T7983] Mem-Info: [ 148.376258][ T7983] active_anon:8642 inactive_anon:471 isolated_anon:0 [ 148.376258][ T7983] active_file:8063 inactive_file:26894 isolated_file:0 [ 148.376258][ T7983] unevictable:1000 dirty:80 writeback:0 [ 148.376258][ T7983] slab_reclaimable:5873 slab_unreclaimable:51507 [ 148.376258][ T7983] mapped:23981 shmem:1520 pagetables:2298 [ 148.376258][ T7983] sec_pagetables:301 bounce:0 [ 148.376258][ T7983] kernel_misc_reclaimable:0 [ 148.376258][ T7983] free:66914 free_pcp:1558 free_cma:0 [ 148.376427][ T7983] Node 0 active_anon:4kB inactive_anon:36kB active_file:72kB inactive_file:64kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9664kB pagetables:1860kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.376657][ T7983] Node 0 DMA free:1868kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB [ 148.376782][ T7983] lowmem_reserve[]: 0 277 277 277 277 [ 148.377011][ T7983] Node 0 DMA32 free:25128kB boost:14336kB min:26964kB low:30120kB high:33276kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:36kB active_file:72kB inactive_file:64kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284588kB mlocked:0kB bounce:0kB free_pcp:6004kB local_pcp:212kB free_cma:0kB [ 148.377141][ T7983] lowmem_reserve[]: 0 0 0 0 0 [ 148.378098][ T7983] Node 0 DMA: 19*4kB (U) 8*8kB (UM) 4*16kB (U) 2*32kB (U) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1868kB [ 148.378790][ T7983] Node 0 DMA32: 516*4kB (UE) 71*8kB (UE) 26*16kB (UE) 188*32kB (UME) 41*64kB (UME) 13*128kB (UE) 2*256kB (UE) 8*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (M) = 25128kB [ 148.378881][ T7983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.378889][ T7983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.378898][ T7983] 37019 total pagecache pages [ 148.378902][ T7983] 545 pages in swap cache [ 148.378906][ T7983] Free swap = 120504kB [ 148.378910][ T7983] Total swap = 124996kB [ 148.378914][ T7983] 524155 pages RAM [ 148.378917][ T7983] 0 pages HighMem/MovableOnly [ 148.378921][ T7983] 212116 pages reserved [ 148.378924][ T7983] 0 pages cma reserved [ 148.378929][ T7983] Unreclaimable slab info: [ 148.378932][ T7983] Name Used Total [ 148.378985][ T7983] pid_2 71KB 110KB [ 148.379000][ T7983] bio-464 17KB 31KB [ 148.379008][ T7983] bio-528 19KB 31KB [ 148.379019][ T7983] bio-544 19KB 31KB [ 148.379027][ T7983] bio-552 19KB 31KB [ 148.379034][ T7983] afs_inode_cache 51KB 63KB [ 148.379045][ T7983] zswap_entry 60KB 114KB [ 148.379056][ T7983] batadv_tt_change_cache 13KB 16KB [ 148.379071][ T7983] batadv_tl_cache 29KB 32KB [ 148.379083][ T7983] p9_req_t 12KB 47KB [ 148.379096][ T7983] TIPC 222KB 277KB [ 148.379109][ T7983] RDS 20KB 30KB [ 148.379118][ T7983] SCTPv6 48KB 210KB [ 148.379125][ T7983] SCTP 67KB 91KB [ 148.379132][ T7983] sctp_chunk 11KB 39KB [ 148.379139][ T7983] sctp_bind_bucket 11KB 16KB [ 148.379148][ T7983] L2TP/IPv6 20KB 31KB [ 148.379158][ T7983] RXRPC 94KB 96KB [ 148.379165][ T7983] rxrpc_call_jar 116KB 159KB [ 148.379173][ T7983] can_receiver 20KB 31KB [ 148.379180][ T7983] net_bridge_fdb_entry 43KB 47KB [ 148.379189][ T7983] xfrm6_tunnel_spi 7KB 8KB [ 148.379196][ T7983] MPTCPv6 35KB 63KB [ 148.379204][ T7983] fib6_node 134KB 140KB [ 148.379214][ T7983] ip6_dst_cache 286KB 429KB [ 148.379222][ T7983] RAWv6 136KB 185KB [ 148.379230][ T7983] UDPv6 103KB 252KB [ 148.379238][ T7983] TCPv6 145KB 273KB [ 148.379263][ T7983] wg_peer 118KB 118KB [ 148.379271][ T7983] allowedips_node 24KB 31KB [ 148.379282][ T7983] t10_alua_lu_gp_cache 8KB 15KB [ 148.379290][ T7983] scsi_sense_cache 52KB 56KB [ 148.379298][ T7983] virtio_scsi_cmd 21KB 24KB [ 148.379307][ T7983] bio-136 46KB 80KB [ 148.379323][ T7983] io_kiocb 0KB 31KB [ 148.379330][ T7983] bfq_io_cq 27KB 63KB [ 148.379337][ T7983] bfq_queue 38KB 63KB [ 148.379344][ T7983] bio-264 30KB 39KB [ 148.379351][ T7983] mqueue_inode_cache 76KB 92KB [ 148.379362][ T7983] f2fs_evict_inode_work 7KB 7KB [ 148.379369][ T7983] bio-272 10KB 15KB [ 148.379376][ T7983] f2fs_bio_post_read_ctx 30KB 31KB [ 148.379421][ T7983] jfs_mp 14KB 15KB [ 148.379431][ T7983] fuse_request 14KB 39KB [ 148.379438][ T7983] jffs2_xattr_ref 35KB 40KB [ 148.379446][ T7983] jffs2_xattr_datum 60KB 68KB [ 148.379454][ T7983] jffs2_inode_cache 33KB 40KB [ 148.379461][ T7983] jffs2_refblock 82KB 92KB [ 148.379469][ T7983] jffs2_raw_inode 20KB 32KB [ 148.379476][ T7983] jffs2_raw_dirent 5KB 20KB [ 148.379483][ T7983] jffs2_full_dnode 6KB 19KB [ 148.379493][ T7983] cifs_small_rq 28KB 32KB [ 148.379499][ T7983] cifs_request 67KB 67KB [ 148.379506][ T7983] cifs_mpx_ids 8KB 15KB [ 148.379513][ T7983] cifs_io_subrequest 42KB 47KB [ 148.379520][ T7983] cifs_io_request 105KB 111KB [ 148.379535][ T7983] nfs_commit_data 24KB 31KB [ 148.379542][ T7983] nfs_write_data 40KB 63KB [ 148.379557][ T7983] jbd2_inode 16KB 19KB [ 148.379568][ T7983] ext4_system_zone 1KB 3KB [ 148.379576][ T7983] ext4_io_end_vec 7KB 11KB [ 148.379587][ T7983] kioctx 32KB 127KB [ 148.379594][ T7983] aio_kiocb 29KB 54KB [ 148.379607][ T7983] userfaultfd_ctx_cache 18KB 31KB [ 148.379615][ T7983] zspage 49KB 74KB [ 148.379623][ T7983] zs_handle 17KB 48KB [ 148.379630][ T7983] pid_namespace 56KB 108KB [ 148.379637][ T7983] kvm_gmem_inode_cache 15KB 30KB [ 148.379645][ T7983] kvm_vcpu 101KB 243KB [ 148.379653][ T7983] x86_emulator 122KB 223KB [ 148.379661][ T7983] rpc_buffers 48KB 63KB [ 148.379668][ T7983] rpc_tasks 17KB 23KB [ 148.379675][ T7983] UNIX-STREAM 40KB 223KB [ 148.379683][ T7983] UNIX 184KB 318KB [ 148.379694][ T7983] tcp_bind2_bucket 21KB 32KB [ 148.379702][ T7983] tcp_bind_bucket 23KB 32KB [ 148.379710][ T7983] xfrm_state 12KB 31KB [ 148.379716][ T7983] ip_fib_trie 26KB 28KB [ 148.379724][ T7983] ip_fib_alias 76KB 86KB [ 148.379732][ T7983] rtable 27KB 84KB [ 148.379740][ T7983] RAW 118KB 191KB [ 148.379747][ T7983] UDP 221KB 255KB [ 148.379754][ T7983] tw_sock_TCP 29KB 47KB [ 148.379761][ T7983] request_sock_TCP 9KB 15KB [ 148.379769][ T7983] TCP 195KB 292KB [ 148.379776][ T7983] fs_bio_integrity 7KB 8KB [ 148.379783][ T7983] hugetlbfs_inode_cache 13KB 31KB [ 148.379790][ T7983] fscache_cookie_jar 17KB 30KB [ 148.379798][ T7983] netfs_subrequest 45KB 70KB [ 148.379805][ T7983] netfs_request 153KB 175KB [ 148.379812][ T7983] bio-288 31KB 31KB [ 148.379819][ T7983] bio-328 12KB 15KB [ 148.379827][ T7983] ep_head 4KB 19KB [ 148.379834][ T7983] eventpoll_pwq 7KB 27KB [ 148.379842][ T7983] eventpoll_epi 27KB 66KB [ 148.379849][ T7983] inotify_inode_mark 35KB 42KB [ 148.379856][ T7983] bpf_fs_inode_cache 14KB 31KB [ 148.379865][ T7983] sgpool-128 42KB 148KB [ 148.379872][ T7983] sgpool-64 78KB 127KB [ 148.379879][ T7983] sgpool-32 14KB 63KB [ 148.379886][ T7983] sgpool-16 29KB 78KB [ 148.379894][ T7983] sgpool-8 20KB 54KB [ 148.379901][ T7983] bio_crypt_ctx 9KB 11KB [ 148.379907][ T7983] bio_integrity_data 7KB 8KB [ 148.379914][ T7983] request_queue 223KB 242KB [ 148.379922][ T7983] blkdev_ioc 24KB 39KB [ 148.379929][ T7983] bio-200 12KB 62KB [ 148.379938][ T7983] biovec-max 412KB 654KB [ 148.379945][ T7983] biovec-128 63KB 95KB [ 148.379951][ T7983] biovec-64 16KB 63KB [ 148.379958][ T7983] biovec-16 18KB 46KB [ 148.379969][ T7983] uid_cache 25KB 46KB [ 148.379976][ T7983] iommu_iova_magazine 64KB 220KB [ 148.379984][ T7983] iommu_iova 150KB 152KB [ 148.379990][ T7983] dmaengine-unmap-256 26KB 30KB [ 148.379997][ T7983] dmaengine-unmap-128 14KB 30KB [ 148.380004][ T7983] dmaengine-unmap-16 7KB 8KB [ 148.380011][ T7983] dmaengine-unmap-2 3KB 4KB [ 148.380018][ T7983] QIPCRTR 18KB 31KB [ 148.380025][ T7983] audit_buffer 34KB 35KB [ 148.380033][ T7983] skbuff_ext_cache 403KB 452KB [ 148.380047][ T7983] skbuff_small_head 1335KB 1729KB [ 148.380055][ T7983] skbuff_fclone_cache 125KB 218KB [ 148.380078][ T7983] skbuff_head_cache 1769KB 2132KB [ 148.380086][ T7983] configfs_dir_cache 30KB 32KB [ 148.380094][ T7983] file_lock_cache 21KB 63KB [ 148.380102][ T7983] file_lock_ctx 40KB 43KB [ 148.380110][ T7983] fsnotify_inode_mark_connector 30KB 39KB [ 148.380118][ T7983] posix_timers_cache 25KB 40KB [ 148.380127][ T7983] taskstats 34KB 143KB [ 148.380134][ T7983] mem_cgroup_per_node 94KB 122KB [ 148.380141][ T7983] mem_cgroup 123KB 154KB [ 148.380149][ T7983] proc_dir_entry 605KB 617KB [ 148.380156][ T7983] pde_opener 6KB 7KB [ 148.380163][ T7983] seq_file 35KB 78KB [ 148.380171][ T7983] sigqueue 6KB 31KB [ 148.380181][ T7983] shmem_inode_cache 7193KB 7441KB [ 148.380188][ T7983] kernfs_iattrs_cache 26KB 31KB [ 148.380195][ T7983] kernfs_node_cache 24282KB 24296KB [ 148.380203][ T7983] mnt_cache 102KB 141KB [ 148.380214][ T7983] filp 535KB 661KB [ 148.380221][ T7983] names_cache 459KB 464KB [ 148.380228][ T7983] net_namespace 118KB 118KB [ 148.380236][ T7983] ima_iint_cache 50KB 63KB [ 148.380266][ T7983] lsm_inode_cache 1392KB 1870KB [ 148.380275][ T7983] lsm_file_cache 210KB 253KB [ 148.380283][ T7983] key_jar 45KB 63KB [ 148.380291][ T7983] uts_namespace 45KB 46KB [ 148.380298][ T7983] nsproxy 20KB 31KB [ 148.380307][ T7983] vm_area_struct 1202KB 1234KB [ 148.380316][ T7983] fs_cache 40KB 64KB [ 148.380326][ T7983] files_cache 150KB 239KB [ 148.380337][ T7983] task_exec_state 16KB 44KB [ 148.380352][ T7983] signal_cache 906KB 1879KB [ 148.380369][ T7983] sighand_cache 1153KB 2224KB [ 148.380379][ T7983] task_struct 4818KB 4978KB [ 148.380395][ T7983] cred 157KB 284KB [ 148.380407][ T7983] anon_vma_chain 423KB 437KB [ 148.380418][ T7983] anon_vma 471KB 511KB [ 148.380430][ T7983] pid 145KB 343KB [ 148.380441][ T7983] Acpi-Operand 201KB 312KB [ 148.380449][ T7983] Acpi-ParseExt 21KB 39KB [ 148.380457][ T7983] Acpi-Parse 19KB 27KB [ 148.380465][ T7983] Acpi-State 16KB 31KB [ 148.380472][ T7983] Acpi-Namespace 35KB 44KB [ 148.380480][ T7983] numa_policy 10KB 16KB [ 148.380487][ T7983] perf_event 15KB 31KB [ 148.380494][ T7983] trace_event_file 577KB 580KB [ 148.380501][ T7983] ftrace_event_field 1124KB 1126KB [ 148.380509][ T7983] pool_workqueue 2027KB 2048KB [ 148.380516][ T7983] task_group 36KB 48KB [ 148.380536][ T7983] maple_node 699KB 1488KB [ 148.380544][ T7983] mm_struct 436KB 541KB [ 148.380559][ T7983] vmap_area 678KB 887KB [ 148.380634][ T7983] debug_objects_cache 1856KB 4559KB [ 148.380642][ T7983] page->ptl 204KB 216KB [ 148.380650][ T7983] kmalloc-cg-8k 1264KB 1408KB [ 148.380657][ T7983] kmalloc-cg-4k 11232KB 11264KB [ 148.380665][ T7983] kmalloc-cg-2k 6960KB 7072KB [ 148.380674][ T7983] kmalloc-cg-1k 2126KB 2240KB [ 148.380682][ T7983] kmalloc-cg-512 1003KB 1072KB [ 148.380690][ T7983] kmalloc-cg-256 286KB 320KB [ 148.380698][ T7983] kmalloc-cg-128 200KB 208KB [ 148.380705][ T7983] kmalloc-cg-64 49KB 72KB [ 148.380715][ T7983] kmalloc-cg-32 47KB 164KB [ 148.380723][ T7983] kmalloc-cg-16 5KB 24KB [ 148.380731][ T7983] kmalloc-cg-8 15KB 36KB [ 148.380740][ T7983] kmalloc-cg-192 52KB 68KB [ 148.380748][ T7983] kmalloc-cg-96 67KB 80KB [ 148.380765][ T7983] kmalloc-8k 5824KB 5952KB [ 148.380773][ T7983] kmalloc-4k 29248KB 29312KB [ 148.380789][ T7983] kmalloc-2k 12008KB 13760KB [ 148.380802][ T7983] kmalloc-1k 6354KB 7008KB [ 148.380818][ T7983] kmalloc-512 11022KB 11584KB [ 148.380828][ T7983] kmalloc-256 4796KB 4848KB [ 148.380837][ T7983] kmalloc-128 1542KB 1580KB [ 148.380845][ T7983] kmalloc-64 3142KB 3144KB [ 148.384290][ T7989] overlayfs: upper fs does not support tmpfile. [ 148.384583][ T7989] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.389567][ T7983] kmalloc-32 1537KB 1648KB [ 148.389584][ T7983] kmalloc-16 375KB 392KB [ 148.389592][ T7983] kmalloc-8 385KB 404KB [ 148.389603][ T7983] kmalloc-192 1198KB 1236KB [ 148.389617][ T7983] kmalloc-96 1649KB 1748KB [ 148.389624][ T7983] kmem_cache_node 216KB 220KB [ 148.389632][ T7983] kmem_cache 180KB 226KB [ 148.389640][ T7983] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.737,pid=7983,uid=0 [ 148.391373][ T7983] Out of memory (oom_kill_allocating_task): Killed process 7978 (syz.2.737) total-vm:102300kB, anon-rss:1324kB, file-rss:23724kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 148.582391][ T1041] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 148.733629][ T1041] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 148.734525][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.734561][ T1041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.734578][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.734603][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.741594][ T1041] spcp8x5 5-1:1.0: required endpoints missing [ 148.823314][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 148.823334][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 149.912578][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 149.912664][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 149.985811][ T8006] netlink: 'syz.3.746': attribute type 2 has an invalid length. [ 150.498356][ T46] oom_reaper: reaped process 7978 (syz.2.737), now anon-rss:0kB, file-rss:20452kB, shmem-rss:0kB [ 150.511030][ T8013] fuse: Unknown parameter 'group_id00000000000000000000' [ 150.598908][ T8016] jffs2: notice: (8016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 184 of xdatum (0 unchecked, 184 orphan) and 203 of xref (52 dead, 151 orphan) found. [ 150.611338][ T8016] overlayfs: upper fs does not support tmpfile. [ 150.612009][ T8016] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.402570][ T25] usb 5-1: USB disconnect, device number 16 [ 151.425744][ T8024] jffs2: notice: (8024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 183 of xdatum (0 unchecked, 183 orphan) and 203 of xref (53 dead, 150 orphan) found. [ 151.495697][ T8024] overlayfs: upper fs does not support tmpfile. [ 151.498892][ T8024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.505338][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 151.505400][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 152.477441][ T8043] jffs2: notice: (8043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 183 of xdatum (0 unchecked, 183 orphan) and 204 of xref (54 dead, 150 orphan) found. [ 152.485550][ T8043] overlayfs: upper fs does not support tmpfile. [ 152.485811][ T8043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.543862][ T8045] fuse: Bad value for 'user_id' [ 152.545997][ T8045] fuse: Bad value for 'user_id' [ 152.970209][ T1482] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 153.044378][ T8055] jffs2: notice: (8055) jffs2_build_xattr_subsystem: complete building xattr subsystem, 189 of xdatum (0 unchecked, 189 orphan) and 210 of xref (55 dead, 155 orphan) found. [ 153.129802][ T8055] overlayfs: upper fs does not support tmpfile. [ 153.130157][ T8055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 153.159817][ T1482] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 153.197328][ T1482] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.197421][ T1482] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.197436][ T1482] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.197456][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.288196][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 153.288248][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 153.301980][ T8064] netlink: 'syz.3.765': attribute type 2 has an invalid length. [ 154.411281][ T1482] spcp8x5 7-1:1.0: required endpoints missing [ 154.643585][ T8071] jffs2: notice: (8071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 189 of xdatum (0 unchecked, 189 orphan) and 210 of xref (55 dead, 155 orphan) found. [ 154.660698][ T8071] overlayfs: upper fs does not support tmpfile. [ 154.661175][ T8071] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.774914][ T8092] fuse: Bad value for 'user_id' [ 155.776538][ T8092] fuse: Bad value for 'user_id' [ 156.040325][ T25] usb 7-1: USB disconnect, device number 13 [ 156.089137][ T8095] jffs2: notice: (8095) jffs2_build_xattr_subsystem: complete building xattr subsystem, 195 of xdatum (0 unchecked, 195 orphan) and 216 of xref (56 dead, 160 orphan) found. [ 156.131952][ T8095] overlayfs: upper fs does not support tmpfile. [ 156.132289][ T8095] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.314249][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 156.314295][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 156.331075][ T8104] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 158.205918][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 158.205973][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 158.207320][ T8113] fuse: Bad value for 'user_id' [ 158.207329][ T8113] fuse: Bad value for 'user_id' [ 158.242592][ T8111] netlink: 'syz.3.780': attribute type 2 has an invalid length. [ 159.861847][ T8133] fuse: Bad value for 'fd' [ 159.959044][ T5752] Bluetooth: hci2: command 0x2016 tx timeout [ 159.959091][ T5752] Bluetooth: hci0: command 0x0406 tx timeout [ 159.959127][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 160.092259][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 160.108518][ T8138] jffs2: notice: (8138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 201 of xdatum (0 unchecked, 201 orphan) and 222 of xref (57 dead, 165 orphan) found. [ 160.147093][ T8138] overlayfs: upper fs does not support tmpfile. [ 160.147694][ T8138] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.244795][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 160.245894][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.245921][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.245935][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.245953][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.249634][ T10] spcp8x5 7-1:1.0: required endpoints missing [ 161.239777][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 161.245772][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 161.266485][ T8156] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 162.874609][ T1474] usb 7-1: USB disconnect, device number 14 [ 163.128522][ T8168] jffs2: notice: (8168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 200 of xdatum (0 unchecked, 200 orphan) and 222 of xref (58 dead, 164 orphan) found. [ 163.161197][ T8168] overlayfs: upper fs does not support tmpfile. [ 163.161508][ T8168] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.202434][ T6290] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 163.232062][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 163.232115][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 163.276043][ T8172] netlink: 'syz.0.801': attribute type 2 has an invalid length. [ 163.354221][ T6290] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 163.359041][ T6290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.359110][ T6290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.359144][ T6290] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.359179][ T6290] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.359228][ T6290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.431346][ T6290] spcp8x5 6-1:1.0: required endpoints missing [ 163.871891][ T8176] fuse: Bad value for 'fd' [ 165.968794][ T1482] usb 6-1: USB disconnect, device number 11 [ 165.998352][ T8188] fuse: Bad value for 'fd' [ 166.947427][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 166.951268][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 166.968246][ T8203] jffs2: notice: (8203) jffs2_build_xattr_subsystem: complete building xattr subsystem, 200 of xdatum (0 unchecked, 200 orphan) and 222 of xref (58 dead, 164 orphan) found. [ 166.976671][ T8201] netlink: 'syz.3.812': attribute type 2 has an invalid length. [ 167.105646][ T8203] overlayfs: upper fs does not support tmpfile. [ 167.106023][ T8203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.272947][ T1482] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 167.435979][ T1482] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 167.448726][ T1482] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.449105][ T1482] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.449153][ T1482] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.449287][ T1482] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.449436][ T1482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.509052][ T1482] spcp8x5 6-1:1.0: required endpoints missing [ 169.281134][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 169.281185][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 169.371208][ T8225] netlink: 'syz.2.819': attribute type 2 has an invalid length. [ 170.051630][ T1041] usb 6-1: USB disconnect, device number 12 [ 171.241179][ T8237] fuse: Bad value for 'fd' [ 171.318218][ T8239] jffs2: notice: (8239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 206 of xdatum (0 unchecked, 206 orphan) and 228 of xref (59 dead, 169 orphan) found. [ 171.369695][ T8239] overlayfs: upper fs does not support tmpfile. [ 171.372754][ T8239] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.132773][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 172.132821][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 172.180763][ T8250] netlink: 'syz.1.826': attribute type 2 has an invalid length. [ 173.002329][ T1482] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 173.155350][ T1482] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 173.170963][ T1482] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.171030][ T1482] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.171048][ T1482] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.171070][ T1482] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.171101][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.184326][ T1482] spcp8x5 7-1:1.0: required endpoints missing [ 174.430404][ T8266] jffs2: notice: (8266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 205 of xdatum (0 unchecked, 205 orphan) and 228 of xref (60 dead, 168 orphan) found. [ 174.456655][ T8266] overlayfs: upper fs does not support tmpfile. [ 174.457054][ T8266] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 174.546342][ T8271] fuse: Bad value for 'fd' [ 176.104784][ T1474] usb 7-1: USB disconnect, device number 15 [ 176.176683][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 176.181256][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 176.253922][ T8292] netlink: 'syz.2.840': attribute type 2 has an invalid length. [ 177.621977][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 177.622091][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 177.771454][ T8300] netlink: 'syz.0.843': attribute type 2 has an invalid length. [ 179.707853][ T8316] fuse: Bad value for 'fd' [ 180.052276][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 180.203568][ T25] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 180.204432][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.204460][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.209716][ T25] spcp8x5 8-1:1.0: required endpoints missing [ 180.624279][ T8329] fuse: Invalid rootmode [ 180.669969][ T8331] jffs2: notice: (8331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 211 of xdatum (0 unchecked, 211 orphan) and 234 of xref (61 dead, 173 orphan) found. [ 180.750946][ T8331] overlayfs: upper fs does not support tmpfile. [ 180.751309][ T8331] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.856415][ T8336] jffs2: notice: (8336) jffs2_build_xattr_subsystem: complete building xattr subsystem, 211 of xdatum (0 unchecked, 211 orphan) and 234 of xref (61 dead, 173 orphan) found. [ 180.902934][ T8336] overlayfs: upper fs does not support tmpfile. [ 180.904231][ T8336] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.999406][ T8339] jffs2: notice: (8339) jffs2_build_xattr_subsystem: complete building xattr subsystem, 206 of xdatum (0 unchecked, 206 orphan) and 230 of xref (61 dead, 169 orphan) found. [ 181.077398][ T8339] overlayfs: upper fs does not support tmpfile. [ 181.078579][ T8339] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.695528][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 181.699411][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 181.728644][ T8350] netlink: 'syz.0.854': attribute type 2 has an invalid length. [ 183.066007][ T1474] usb 8-1: USB disconnect, device number 19 [ 183.591845][ T8364] jffs2: notice: (8364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 212 of xdatum (0 unchecked, 212 orphan) and 236 of xref (62 dead, 174 orphan) found. [ 183.630313][ T8364] overlayfs: upper fs does not support tmpfile. [ 183.630621][ T8364] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.070984][ T8375] jffs2: notice: (8375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 218 of xdatum (0 unchecked, 218 orphan) and 242 of xref (63 dead, 179 orphan) found. [ 184.234635][ T8382] fuse: Invalid rootmode [ 184.942258][ T50] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.450701][ T50] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 185.552505][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 185.561470][ T50] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.561518][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.597610][ T8402] jffs2: notice: (8402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 218 of xdatum (0 unchecked, 218 orphan) and 242 of xref (63 dead, 179 orphan) found. [ 185.616126][ T50] spcp8x5 5-1:1.0: required endpoints missing [ 185.640273][ T8402] overlayfs: upper fs does not support tmpfile. [ 185.642784][ T8402] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.052099][ T8409] jffs2: notice: (8409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 224 of xdatum (0 unchecked, 224 orphan) and 248 of xref (64 dead, 184 orphan) found. [ 186.086397][ T8409] overlayfs: upper fs does not support tmpfile. [ 186.086734][ T8409] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.728406][ T8417] jffs2: notice: (8417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 223 of xdatum (0 unchecked, 223 orphan) and 248 of xref (65 dead, 183 orphan) found. [ 186.795206][ T8420] overlayfs: upper fs does not support tmpfile. [ 186.795514][ T8420] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.834813][ T8417] overlayfs: upper fs does not support tmpfile. [ 186.837849][ T8417] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.639990][ T6290] usb 5-1: USB disconnect, device number 17 [ 187.652782][ T8422] fuse: Invalid rootmode [ 187.737637][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 187.737681][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 187.788425][ T8433] netlink: 'syz.2.880': attribute type 2 has an invalid length. [ 188.807505][ T8449] jffs2: notice: (8449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 228 of xdatum (0 unchecked, 228 orphan) and 254 of xref (66 dead, 188 orphan) found. [ 189.122332][ T50] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 189.163653][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 189.163706][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 189.225938][ T8455] netlink: 'syz.2.887': attribute type 2 has an invalid length. [ 189.274856][ T50] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 189.278140][ T50] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.278334][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.346857][ T50] spcp8x5 6-1:1.0: required endpoints missing [ 191.140363][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 191.140423][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 191.224765][ T8466] netlink: 'syz.2.889': attribute type 2 has an invalid length. [ 191.515912][ T8474] fuse: Bad value for 'rootmode' [ 191.885338][ T1482] usb 6-1: USB disconnect, device number 13 [ 192.171213][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 192.174880][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 192.210865][ T8479] netlink: 'syz.0.893': attribute type 2 has an invalid length. [ 192.405099][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 192.405139][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 192.447992][ T8484] jffs2: notice: (8484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 228 of xdatum (0 unchecked, 228 orphan) and 254 of xref (66 dead, 188 orphan) found. [ 192.478894][ T8484] overlayfs: upper fs does not support tmpfile. [ 192.479178][ T8484] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 192.712159][ T8482] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 193.741752][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.741853][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400694][ T8499] jffs2: notice: (8499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 234 of xdatum (0 unchecked, 234 orphan) and 260 of xref (67 dead, 193 orphan) found. [ 194.471105][ T8502] overlayfs: upper fs does not support tmpfile. [ 194.473522][ T8502] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.475657][ T8499] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 194.668668][ T8510] fuse: Bad value for 'rootmode' [ 194.832356][ T5888] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 194.894158][ T8518] jffs2: notice: (8518) jffs2_build_xattr_subsystem: complete building xattr subsystem, 234 of xdatum (0 unchecked, 234 orphan) and 261 of xref (68 dead, 193 orphan) found. [ 194.945243][ T8518] overlayfs: upper fs does not support tmpfile. [ 194.945800][ T8518] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.985350][ T5888] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 195.034575][ T5888] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.037714][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.126597][ T5888] spcp8x5 8-1:1.0: required endpoints missing [ 195.858460][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 195.858527][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 195.889814][ T8529] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 195.893101][ T8531] jffs2: notice: (8531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 240 of xdatum (0 unchecked, 240 orphan) and 267 of xref (69 dead, 198 orphan) found. [ 196.090689][ T8531] overlayfs: upper fs does not support tmpfile. [ 196.091329][ T8531] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.500741][ T8543] jffs2: notice: (8543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 240 of xdatum (0 unchecked, 240 orphan) and 265 of xref (67 dead, 198 orphan) found. [ 196.539191][ T8543] overlayfs: upper fs does not support tmpfile. [ 196.539509][ T8543] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.557307][ T8546] fuse: Bad value for 'rootmode' [ 197.480078][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 197.482272][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 197.540482][ T8557] netlink: 'syz.0.920': attribute type 2 has an invalid length. [ 197.972727][ T35] usb 8-1: USB disconnect, device number 20 [ 199.273173][ T8579] jffs2: notice: (8579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 246 of xdatum (0 unchecked, 246 orphan) and 271 of xref (68 dead, 203 orphan) found. [ 199.545708][ T8579] overlayfs: upper fs does not support tmpfile. [ 199.590183][ T8579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.919320][ T8591] fuse: Unknown parameter 'use00000000000000000000' [ 200.508556][ T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 200.674211][ T35] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 200.679601][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 200.679866][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.762794][ T35] spcp8x5 5-1:1.0: required endpoints missing [ 200.940766][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 200.940822][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 200.999269][ T8609] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 202.162934][ T8619] jffs2: notice: (8619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 244 of xdatum (0 unchecked, 244 orphan) and 270 of xref (69 dead, 201 orphan) found. [ 202.211259][ T8619] overlayfs: upper fs does not support tmpfile. [ 202.212869][ T8619] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 203.250050][ T1474] usb 5-1: USB disconnect, device number 18 [ 203.312368][ T8636] fuse: Unknown parameter 'use00000000000000000000' [ 203.387314][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 203.390190][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 203.432620][ T8639] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 204.335721][ T8653] fuse: Unknown parameter 'use00000000000000000000' [ 204.485898][ T8656] jffs2: notice: (8656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 250 of xdatum (0 unchecked, 250 orphan) and 276 of xref (70 dead, 206 orphan) found. [ 204.528684][ T8656] overlayfs: upper fs does not support tmpfile. [ 204.529004][ T8656] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.570688][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 204.570743][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 204.610014][ T8659] netlink: 'syz.3.950': attribute type 2 has an invalid length. [ 204.942463][ T6290] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.093018][ T6290] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 205.093958][ T6290] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 205.093987][ T6290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.098602][ T6290] spcp8x5 5-1:1.0: required endpoints missing [ 205.499805][ T8671] jffs2: notice: (8671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 256 of xdatum (0 unchecked, 256 orphan) and 282 of xref (71 dead, 211 orphan) found. [ 205.501805][ T8669] fuse: Unknown parameter 'user_i00000000000000000000' [ 205.536975][ T8671] overlayfs: upper fs does not support tmpfile. [ 205.537441][ T8671] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 206.361939][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 206.365040][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 206.408927][ T8679] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 208.556256][ T35] usb 5-1: USB disconnect, device number 19 [ 208.750667][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 208.750718][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 208.807872][ T8705] netlink: 'syz.1.964': attribute type 2 has an invalid length. [ 208.992856][ T35] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 209.153624][ T35] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 209.160831][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.160887][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 209.160933][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.182703][ T35] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 209.196140][ T35] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 209.855774][ T8716] fuse: Unknown parameter 'user_i00000000000000000000' [ 210.053813][ T8719] jffs2: notice: (8719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 255 of xdatum (0 unchecked, 255 orphan) and 282 of xref (72 dead, 210 orphan) found. [ 210.097552][ T8719] overlayfs: upper fs does not support tmpfile. [ 210.097967][ T8719] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.184544][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 210.187296][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 211.835342][ T30] usb 5-1: USB disconnect, device number 20 [ 211.921217][ T30] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 211.921776][ T30] spcp8x5 5-1:1.0: device disconnected [ 212.041200][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 212.041239][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 212.148832][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 212.148882][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 212.166873][ T8739] netlink: 'syz.0.972': attribute type 2 has an invalid length. [ 212.730426][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 212.733433][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 212.750720][ T8753] netlink: 'syz.1.983': attribute type 2 has an invalid length. [ 213.399177][ T8758] fuse: Unknown parameter 'user_i00000000000000000000' [ 213.410833][ T8756] jffs2: notice: (8756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 261 of xdatum (0 unchecked, 261 orphan) and 288 of xref (73 dead, 215 orphan) found. [ 213.446923][ T8756] overlayfs: upper fs does not support tmpfile. [ 213.447694][ T8756] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.454704][ T8777] jffs2: notice: (8777) jffs2_build_xattr_subsystem: complete building xattr subsystem, 261 of xdatum (0 unchecked, 261 orphan) and 288 of xref (73 dead, 215 orphan) found. [ 214.540690][ T8777] overlayfs: upper fs does not support tmpfile. [ 214.541106][ T8777] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.693505][ T8782] jffs2: notice: (8782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 260 of xdatum (0 unchecked, 260 orphan) and 287 of xref (73 dead, 214 orphan) found. [ 214.793333][ T8782] overlayfs: upper fs does not support tmpfile. [ 214.800210][ T8782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.925017][ T8785] [ 214.925772][ T8785] ====================================================== [ 214.928073][ T8785] WARNING: possible circular locking dependency detected [ 214.930281][ T8785] syzkaller #0 Tainted: G L [ 214.932246][ T8785] ------------------------------------------------------ [ 214.934467][ T8785] syz.0.986/8785 is trying to acquire lock: [ 214.936353][ T8785] ffff88804f0029d8 (&c->xattr_sem){++++}-{4:4}, at: jffs2_xattr_delete_inode+0x83/0x130 [ 214.939705][ T8785] [ 214.939705][ T8785] but task is already holding lock: [ 214.942030][ T8785] ffffffff8efc9860 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0xf35/0x3300 [ 214.945108][ T8785] [ 214.945108][ T8785] which lock already depends on the new lock. [ 214.945108][ T8785] [ 214.948348][ T8785] [ 214.948348][ T8785] the existing dependency chain (in reverse order) is: [ 214.951140][ T8785] [ 214.951140][ T8785] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 214.953392][ T8785] lock_acquire+0x1d1/0x380 [ 214.955003][ T8785] fs_reclaim_acquire+0xc4/0x100 [ 214.956699][ T8785] kmem_cache_alloc_noprof+0x63/0x6a0 [ 214.958552][ T8785] jffs2_alloc_xattr_datum+0x1c/0xe0 [ 214.960373][ T8785] do_jffs2_setxattr+0x6f0/0x1610 [ 214.962131][ T8785] __vfs_setxattr+0x175/0x1e0 [ 214.963758][ T8785] __vfs_setxattr_noperm+0x127/0x660 [ 214.965621][ T8785] __vfs_setxattr_locked+0x127/0x2b0 [ 214.967462][ T8785] vfs_setxattr+0x14a/0x390 [ 214.969057][ T8785] ovl_fill_super+0x1320/0x5ea0 [ 214.970740][ T8785] get_tree_nodev+0xdd/0x190 [ 214.972406][ T8785] vfs_get_tree+0x92/0x320 [ 214.973997][ T8785] path_mount+0x7d0/0x24c0 [ 214.975598][ T8785] __ia32_sys_mount+0x292/0x310 [ 214.977286][ T8785] __do_fast_syscall_32+0x13a/0x8b0 [ 214.979077][ T8785] do_fast_syscall_32+0x32/0x70 [ 214.980760][ T8785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.982875][ T8785] [ 214.982875][ T8785] -> #0 (&c->xattr_sem){++++}-{4:4}: [ 214.985238][ T8785] check_prev_add+0xeb/0xe60 [ 214.986749][ T8785] __lock_acquire+0x1528/0x1f40 [ 214.988320][ T8785] lock_acquire+0x1d1/0x380 [ 214.989809][ T8785] down_write+0x8b/0x1f0 [ 214.991218][ T8785] jffs2_xattr_delete_inode+0x83/0x130 [ 214.993025][ T8785] jffs2_do_clear_inode+0x50/0x470 [ 214.994728][ T8785] evict+0x3c2/0xad0 [ 214.996075][ T8785] iput.part.0+0x989/0x1050 [ 214.997624][ T8785] iput+0x35/0x40 [ 214.998858][ T8785] dentry_unlink_inode+0x284/0x470 [ 215.000600][ T8785] dentry_kill+0x25d/0xc20 [ 215.002126][ T8785] dput.part.0+0xd7/0x240 [ 215.003611][ T8785] dput+0x1f/0x30 [ 215.004908][ T8785] ovl_destroy_inode+0x3e/0x190 [ 215.006663][ T8785] destroy_inode+0xcb/0x1c0 [ 215.008665][ T8785] evict+0x599/0xad0 [ 215.010360][ T8785] iput.part.0+0x989/0x1050 [ 215.012310][ T8785] iput+0x35/0x40 [ 215.014059][ T8785] dentry_unlink_inode+0x284/0x470 [ 215.016313][ T8785] dentry_kill+0x25d/0xc20 [ 215.018260][ T8785] shrink_dentry_list+0x1e8/0x310 [ 215.020416][ T8785] prune_dcache_sb+0xea/0x150 [ 215.022199][ T8785] super_cache_scan+0x361/0x5c0 [ 215.023858][ T8785] do_shrink_slab+0x416/0x1200 [ 215.025986][ T8785] shrink_slab+0xa82/0x12e0 [ 215.027946][ T8785] shrink_one+0x398/0x850 [ 215.029889][ T8785] shrink_node+0x2b20/0x4320 [ 215.031839][ T8785] do_try_to_free_pages+0x33e/0x16d0 [ 215.034107][ T8785] try_to_free_pages+0x2a0/0x740 [ 215.036348][ T8785] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 215.038967][ T8785] alloc_pages_mpol+0x201/0x550 [ 215.040899][ T8785] folio_alloc_mpol_noprof+0x36/0x260 [ 215.043303][ T8785] alloc_migration_target_by_mpol+0x2c1/0x650 [ 215.046014][ T8785] migrate_pages_batch+0x5c4/0x4680 [ 215.048291][ T8785] migrate_pages_sync+0x12c/0x880 [ 215.050543][ T8785] migrate_pages+0x1a83/0x2850 [ 215.052761][ T8785] do_mbind+0x5a4/0xfd0 [ 215.054761][ T8785] kernel_mbind+0x1b7/0x200 [ 215.056769][ T8785] __do_fast_syscall_32+0x13a/0x8b0 [ 215.058836][ T8785] do_fast_syscall_32+0x32/0x70 [ 215.060692][ T8785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.062775][ T8785] [ 215.062775][ T8785] other info that might help us debug this: [ 215.062775][ T8785] [ 215.065881][ T8785] Possible unsafe locking scenario: [ 215.065881][ T8785] [ 215.068353][ T8785] CPU0 CPU1 [ 215.069994][ T8785] ---- ---- [ 215.071611][ T8785] lock(fs_reclaim); [ 215.072838][ T8785] lock(&c->xattr_sem); [ 215.074890][ T8785] lock(fs_reclaim); [ 215.076950][ T8785] lock(&c->xattr_sem); [ 215.078131][ T8785] [ 215.078131][ T8785] *** DEADLOCK *** [ 215.078131][ T8785] [ 215.080646][ T8785] locks held by syz.0.986/8785: 2, last CPU#3: [ 215.082589][ T8785] #0: ffffffff8efc9860 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0xf35/0x3300 [ 215.085742][ T8785] #1: ffff88804c56a0e8 (&type->s_umount_key#61){++++}-{4:4}, at: super_cache_scan+0x9b/0x5c0 [ 215.088795][ T8785] [ 215.088795][ T8785] stack backtrace: [ 215.090549][ T8785] CPU: 3 UID: 0 PID: 8785 Comm: syz.0.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.093730][ T8785] Tainted: [L]=SOFTLOCKUP [ 215.095028][ T8785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.098275][ T8785] Call Trace: [ 215.099310][ T8785] [ 215.100205][ T8785] dump_stack_lvl+0x100/0x190 [ 215.101660][ T8785] print_circular_bug.cold+0x178/0x1be [ 215.103361][ T8785] check_noncircular+0x146/0x160 [ 215.104947][ T8785] check_prev_add+0xeb/0xe60 [ 215.106424][ T8785] __lock_acquire+0x1528/0x1f40 [ 215.107941][ T8785] lock_acquire+0x1d1/0x380 [ 215.109340][ T8785] ? jffs2_xattr_delete_inode+0x83/0x130 [ 215.111036][ T8785] ? __pfx___might_resched+0x10/0x10 [ 215.112676][ T8785] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.114342][ T8785] down_write+0x8b/0x1f0 [ 215.115697][ T8785] ? jffs2_xattr_delete_inode+0x83/0x130 [ 215.117829][ T8785] ? __pfx_down_write+0x10/0x10 [ 215.119578][ T8785] jffs2_xattr_delete_inode+0x83/0x130 [ 215.121242][ T8785] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 215.122886][ T8785] jffs2_do_clear_inode+0x50/0x470 [ 215.124418][ T8785] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 215.126158][ T8785] evict+0x3c2/0xad0 [ 215.127395][ T8785] ? __pfx_evict+0x10/0x10 [ 215.128753][ T8785] ? preempt_schedule_thunk+0x16/0x40 [ 215.130384][ T8785] iput.part.0+0x989/0x1050 [ 215.131773][ T8785] iput+0x35/0x40 [ 215.132877][ T8785] dentry_unlink_inode+0x284/0x470 [ 215.134401][ T8785] dentry_kill+0x25d/0xc20 [ 215.135834][ T8785] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 215.137587][ T8785] dput.part.0+0xd7/0x240 [ 215.139217][ T8785] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 215.141254][ T8785] dput+0x1f/0x30 [ 215.142622][ T8785] ovl_destroy_inode+0x3e/0x190 [ 215.144700][ T8785] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 215.147221][ T8785] destroy_inode+0xcb/0x1c0 [ 215.148882][ T8785] evict+0x599/0xad0 [ 215.150074][ T8785] ? __pfx_evict+0x10/0x10 [ 215.151450][ T8785] ? lock_acquire+0x1d1/0x380 [ 215.152936][ T8785] ? iput.part.0+0x981/0x1050 [ 215.154395][ T8785] iput.part.0+0x989/0x1050 [ 215.155801][ T8785] iput+0x35/0x40 [ 215.156969][ T8785] dentry_unlink_inode+0x284/0x470 [ 215.158534][ T8785] dentry_kill+0x25d/0xc20 [ 215.159870][ T8785] shrink_dentry_list+0x1e8/0x310 [ 215.161406][ T8785] prune_dcache_sb+0xea/0x150 [ 215.162848][ T8785] ? list_lru_count_one+0x147/0x320 [ 215.164434][ T8785] ? __pfx_prune_dcache_sb+0x10/0x10 [ 215.166087][ T8785] super_cache_scan+0x361/0x5c0 [ 215.167572][ T8785] do_shrink_slab+0x416/0x1200 [ 215.169061][ T8785] shrink_slab+0xa82/0x12e0 [ 215.170458][ T8785] ? shrink_slab+0x677/0x12e0 [ 215.171873][ T8785] ? __pfx_shrink_slab+0x10/0x10 [ 215.173401][ T8785] ? __pfx_get_random_u8+0x10/0x10 [ 215.175021][ T8785] ? lock_acquire+0x1d1/0x380 [ 215.176522][ T8785] shrink_one+0x398/0x850 [ 215.177853][ T8785] ? shrink_node+0x2b00/0x4320 [ 215.179277][ T8785] shrink_node+0x2b20/0x4320 [ 215.180702][ T8785] ? shrink_node+0x286e/0x4320 [ 215.182270][ T8785] ? __pfx_shrink_node+0x10/0x10 [ 215.183742][ T8785] ? preempt_schedule_notrace+0x57/0xd0 [ 215.185470][ T8785] ? rcu_is_watching+0x90/0xc0 [ 215.186988][ T8785] ? do_try_to_free_pages+0x33e/0x16d0 [ 215.188687][ T8785] do_try_to_free_pages+0x33e/0x16d0 [ 215.190280][ T8785] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 215.191973][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 215.193503][ T8785] try_to_free_pages+0x2a0/0x740 [ 215.194992][ T8785] ? __pfx_try_to_free_pages+0x10/0x10 [ 215.196661][ T8785] ? find_held_lock+0x2b/0x80 [ 215.198132][ T8785] ? fs_reclaim_acquire+0x70/0x100 [ 215.199737][ T8785] ? fs_reclaim_acquire+0x70/0x100 [ 215.201320][ T8785] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 215.203140][ T8785] ? mt_validate_nulls+0x22f/0xae0 [ 215.204774][ T8785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.206758][ T8785] ? __pfx_mt_validate_nulls+0x10/0x10 [ 215.208427][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 215.209964][ T8785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.211802][ T8785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.213612][ T8785] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 215.215579][ T8785] ? policy_nodemask+0xed/0x4f0 [ 215.217076][ T8785] alloc_pages_mpol+0x201/0x550 [ 215.218588][ T8785] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 215.220227][ T8785] ? __lock_acquire+0x5c0/0x1f40 [ 215.221758][ T8785] folio_alloc_mpol_noprof+0x36/0x260 [ 215.223426][ T8785] alloc_migration_target_by_mpol+0x2c1/0x650 [ 215.225300][ T8785] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.227215][ T8785] ? __pfx___might_resched+0x10/0x10 [ 215.228679][ T8785] ? bpf_ksym_find+0x124/0x1c0 [ 215.230182][ T8785] migrate_pages_batch+0x5c4/0x4680 [ 215.232146][ T8785] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.234766][ T8785] ? __pfx_migrate_pages_batch+0x10/0x10 [ 215.236791][ T8785] ? stack_trace_save+0x8e/0xc0 [ 215.238474][ T8785] ? kasan_save_stack+0x3f/0x50 [ 215.240154][ T8785] ? kasan_save_stack+0x30/0x50 [ 215.241842][ T8785] ? kasan_save_track+0x14/0x30 [ 215.243511][ T8785] ? __kasan_slab_alloc+0x89/0x90 [ 215.245308][ T8785] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 215.247005][ T8785] ? __mpol_dup+0x74/0x390 [ 215.248404][ T8785] ? mbind_range+0x2ad/0x550 [ 215.249805][ T8785] ? do_mbind+0x7dc/0xfd0 [ 215.251127][ T8785] ? kernel_mbind+0x1b7/0x200 [ 215.252602][ T8785] migrate_pages_sync+0x12c/0x880 [ 215.254198][ T8785] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.256314][ T8785] ? __pfx_migrate_pages_sync+0x10/0x10 [ 215.258330][ T8785] migrate_pages+0x1a83/0x2850 [ 215.260187][ T8785] ? lock_acquire+0x1d1/0x380 [ 215.261680][ T8785] ? current_cpuset_is_being_rebound+0x24/0x370 [ 215.263616][ T8785] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 215.265628][ T8785] ? __pfx_migrate_pages+0x10/0x10 [ 215.267396][ T8785] ? do_mbind+0x555/0xfd0 [ 215.269205][ T8785] do_mbind+0x5a4/0xfd0 [ 215.270952][ T8785] ? __pfx_do_mbind+0x10/0x10 [ 215.272721][ T8785] ? madvise_unlock+0xa9/0x220 [ 215.274609][ T8785] ? __pfx_get_nodes+0x10/0x10 [ 215.276529][ T8785] kernel_mbind+0x1b7/0x200 [ 215.278349][ T8785] ? __pfx_kernel_mbind+0x10/0x10 [ 215.280259][ T8785] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 215.282483][ T8785] ? syscall_user_dispatch+0x76/0x130 [ 215.284785][ T8785] __do_fast_syscall_32+0x13a/0x8b0 [ 215.286906][ T8785] do_fast_syscall_32+0x32/0x70 [ 215.288906][ T8785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.291529][ T8785] RIP: 0023:0xf700efec [ 215.293291][ T8785] Code: Unable to access opcode bytes at 0xf700efc2. [ 215.296019][ T8785] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 215.299361][ T8785] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 215.302697][ T8785] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 215.306134][ T8785] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 215.309509][ T8785] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.312726][ T8785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.316009][ T8785]