d USB device number 10 using dummy_hcd [ 375.934705][T14147] overlayfs: overlapping upperdir path 00:30:35 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:35 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) [ 375.980375][ T2663] usb 5-1: new high-speed USB device number 98 using dummy_hcd 00:30:35 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 376.173568][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 376.222602][ T2663] usb 5-1: Using ep0 maxpacket: 8 [ 376.302907][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.313926][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 376.324631][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.334875][ T2553] usb 6-1: config 0 descriptor?? [ 376.345947][ T2663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.356831][ T2663] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 376.366712][ T2663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.376964][ T2663] usb 5-1: config 0 descriptor?? [ 376.922521][ T2663] hid-picolcd 0003:04D8:F002.0038: No report with id 0xf3 found [ 376.930275][ T2663] hid-picolcd 0003:04D8:F002.0038: No report with id 0xf4 found [ 377.072539][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 377.078537][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 377.091057][ T2553] usb 6-1: USB disconnect, device number 10 [ 377.257255][ T2507] usb 5-1: USB disconnect, device number 98 00:30:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000001800)) 00:30:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:37 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:37 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 00:30:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:37 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) [ 377.843520][T14205] overlayfs: overlapping upperdir path 00:30:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, 0x0) 00:30:37 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:37 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 00:30:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 378.082452][ T12] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 378.090145][T14223] overlayfs: failed to resolve './fil': -2 [ 378.132509][ T2507] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 378.342359][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 378.372376][ T2507] usb 5-1: Using ep0 maxpacket: 8 [ 378.472685][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.483766][ T12] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 378.492611][ T2507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.495388][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.508769][ T2507] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 378.516469][ T12] usb 6-1: config 0 descriptor?? [ 378.521363][ T2507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.541524][ T2507] usb 5-1: config 0 descriptor?? [ 379.095700][ T2507] hid-picolcd 0003:04D8:F002.0039: No report with id 0xf3 found [ 379.103525][ T2507] hid-picolcd 0003:04D8:F002.0039: No report with id 0xf4 found [ 379.252511][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 379.258557][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 379.270280][ T12] usb 6-1: USB disconnect, device number 11 [ 379.429800][ T2663] usb 5-1: USB disconnect, device number 99 00:30:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000001800)) 00:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, 0x0) 00:30:39 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:39 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 00:30:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:39 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) 00:30:39 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 380.029983][T14273] overlayfs: failed to resolve './fil': -2 00:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, 0x0) 00:30:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:39 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) 00:30:39 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 380.226554][T14293] overlayfs: failed to resolve './fil': -2 [ 380.272420][ T5] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 380.293081][ T2663] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 380.532528][ T2663] usb 5-1: Using ep0 maxpacket: 8 [ 380.552354][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 380.652505][ T2663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.663418][ T2663] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 380.673983][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.684921][ T2663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.695290][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 380.705227][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.713820][ T2663] usb 5-1: config 0 descriptor?? [ 380.724658][ T5] usb 6-1: config 0 descriptor?? [ 381.282306][ T2663] hid-picolcd 0003:04D8:F002.003A: No report with id 0xf3 found [ 381.289952][ T2663] hid-picolcd 0003:04D8:F002.003A: No report with id 0xf4 found [ 381.492505][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 381.498609][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 381.509311][ T5] usb 6-1: USB disconnect, device number 12 [ 381.614468][ T2507] usb 5-1: USB disconnect, device number 100 00:30:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000001800)) 00:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:41 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:41 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) 00:30:41 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:30:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, 0x0, 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:41 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 382.258391][T14343] overlayfs: failed to resolve './file': -2 00:30:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:42 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:30:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") [ 382.465146][T14364] overlayfs: failed to resolve './file': -2 [ 382.467522][ T5] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 382.472240][ T2507] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 382.722159][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 382.727303][ T2480] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 382.732200][ T2507] usb 5-1: Using ep0 maxpacket: 8 [ 382.852401][ T2507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.852529][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.863453][ T2507] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 382.881709][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 382.883787][ T2507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.893666][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.907508][ T2507] usb 5-1: config 0 descriptor?? [ 382.917951][ T5] usb 6-1: config 0 descriptor?? [ 383.012337][ T2480] usb 3-1: Using ep0 maxpacket: 8 [ 383.152238][ T2480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.163201][ T2480] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 383.173790][ T2480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.187245][ T2480] usb 3-1: config 0 descriptor?? [ 383.462233][ T2507] hid-picolcd 0003:04D8:F002.003B: No report with id 0xf3 found [ 383.470016][ T2507] hid-picolcd 0003:04D8:F002.003B: No report with id 0xf4 found [ 383.672231][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 383.678268][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 383.691145][ T5] usb 6-1: USB disconnect, device number 13 [ 383.752327][ T2480] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf3 found [ 383.759982][ T2480] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf4 found [ 383.799696][ T2527] usb 5-1: USB disconnect, device number 101 [ 383.877270][ T2480] usb 3-1: USB disconnect, device number 2 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) 00:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:44 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:44 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:44 executing program 0: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) [ 384.413532][T14429] overlayfs: failed to resolve './file': -2 00:30:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:30:44 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 384.632127][ T2553] usb 6-1: new high-speed USB device number 14 using dummy_hcd 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:30:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:44 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 384.877007][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 385.003587][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.027425][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 385.047654][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.065879][ T2553] usb 6-1: config 0 descriptor?? [ 385.812080][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 385.818141][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 385.828894][ T2553] usb 6-1: USB disconnect, device number 14 00:30:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:45 executing program 0: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:45 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:30:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:45 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/101, 0x65) 00:30:46 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:46 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:46 executing program 0 (fault-call:6 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 386.433863][T14503] FAULT_INJECTION: forcing a failure. [ 386.433863][T14503] name failslab, interval 1, probability 0, space 0, times 1 [ 386.472787][T14507] FAULT_INJECTION: forcing a failure. [ 386.472787][T14507] name failslab, interval 1, probability 0, space 0, times 1 [ 386.491224][T14503] CPU: 1 PID: 14503 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 386.499902][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.509948][T14503] Call Trace: [ 386.513226][T14503] dump_stack+0x1f0/0x31e [ 386.517647][T14503] should_fail+0x38a/0x4e0 [ 386.522049][T14503] ? do_sys_poll+0x223/0x1210 [ 386.526709][T14503] should_failslab+0x5/0x20 [ 386.531198][T14503] __kmalloc+0x74/0x330 [ 386.535356][T14503] do_sys_poll+0x223/0x1210 [ 386.539868][T14503] ? __lock_acquire+0x116c/0x2c30 [ 386.544898][T14503] ? trace_lock_release+0x137/0x1a0 [ 386.550081][T14503] ? trace_lock_release+0x137/0x1a0 [ 386.555263][T14503] ? lock_is_held_type+0x87/0xe0 [ 386.560176][T14503] ? trace_lock_release+0x137/0x1a0 [ 386.565363][T14503] ? ksys_write+0x1b1/0x220 [ 386.569843][T14503] ? lock_is_held_type+0x87/0xe0 [ 386.574760][T14503] __se_sys_poll+0x19b/0x350 [ 386.579399][T14503] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.585443][T14503] do_syscall_64+0x73/0xe0 [ 386.589840][T14503] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.595712][T14503] RIP: 0033:0x45cba9 [ 386.599576][T14503] Code: Bad RIP value. [ 386.603618][T14503] RSP: 002b:00007fd258e16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 386.612010][T14503] RAX: ffffffffffffffda RBX: 00000000004fc280 RCX: 000000000045cba9 [ 386.619993][T14503] RDX: 0000000000000000 RSI: 200000000000007d RDI: 0000000020000080 [ 386.627949][T14503] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.635894][T14503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 386.643841][T14503] R13: 0000000000000885 R14: 00000000004cb63e R15: 00007fd258e176d4 [ 386.651804][T14507] CPU: 0 PID: 14507 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 386.660473][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.670513][T14507] Call Trace: [ 386.673805][T14507] dump_stack+0x1f0/0x31e 00:30:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/101, 0x65) 00:30:46 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 386.675019][ T2507] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 386.678127][T14507] should_fail+0x38a/0x4e0 [ 386.689971][T14507] ? tomoyo_realpath_from_path+0xd8/0x630 [ 386.695688][T14507] should_failslab+0x5/0x20 [ 386.700201][T14507] __kmalloc+0x74/0x330 [ 386.704367][T14507] ? tomoyo_realpath_from_path+0xcb/0x630 [ 386.710080][T14507] tomoyo_realpath_from_path+0xd8/0x630 [ 386.715625][T14507] tomoyo_path_number_perm+0x18f/0x690 [ 386.721098][T14507] security_file_ioctl+0x55/0xb0 [ 386.726045][T14507] __se_sys_ioctl+0x48/0x160 [ 386.730633][T14507] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.736693][T14507] do_syscall_64+0x73/0xe0 [ 386.741101][T14507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.746978][T14507] RIP: 0033:0x45cba9 [ 386.750865][T14507] Code: Bad RIP value. [ 386.754921][T14507] RSP: 002b:00007f54fef67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.763330][T14507] RAX: ffffffffffffffda RBX: 00000000004f0380 RCX: 000000000045cba9 [ 386.771293][T14507] RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 386.779257][T14507] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.787218][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 386.795179][T14507] R13: 0000000000000589 R14: 00000000004c8503 R15: 00007f54fef686d4 [ 386.851693][T14507] ERROR: Out of memory at tomoyo_realpath_from_path. 00:30:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:46 executing program 0 (fault-call:6 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:46 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 386.942050][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 387.035603][T14524] FAULT_INJECTION: forcing a failure. [ 387.035603][T14524] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 387.048860][T14524] CPU: 0 PID: 14524 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 387.057530][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.062338][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.067600][T14524] Call Trace: [ 387.067624][T14524] dump_stack+0x1f0/0x31e [ 387.067641][T14524] should_fail+0x38a/0x4e0 [ 387.090441][T14524] prepare_alloc_pages+0x28c/0x4a0 [ 387.095557][T14524] __alloc_pages_nodemask+0xbc/0x5e0 [ 387.098329][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 387.100828][T14524] ? __lock_acquire+0x116c/0x2c30 [ 387.100846][T14524] kmem_getpages+0x49/0x900 [ 387.100859][T14524] cache_grow_begin+0x7b/0x2e0 [ 387.100871][T14524] cache_alloc_refill+0x359/0x3f0 [ 387.120378][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.124081][T14524] ? check_preemption_disabled+0x51/0x140 [ 387.124096][T14524] __kmalloc+0x30c/0x330 [ 387.124110][T14524] ? tomoyo_realpath_from_path+0xd8/0x630 [ 387.124121][T14524] tomoyo_realpath_from_path+0xd8/0x630 [ 387.124140][T14524] tomoyo_path_number_perm+0x18f/0x690 [ 387.124179][T14524] security_file_ioctl+0x55/0xb0 [ 387.124192][T14524] __se_sys_ioctl+0x48/0x160 [ 387.124206][T14524] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.140673][ T2507] usb 4-1: config 0 descriptor?? [ 387.142849][T14524] do_syscall_64+0x73/0xe0 [ 387.142864][T14524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.142874][T14524] RIP: 0033:0x45cba9 [ 387.142878][T14524] Code: Bad RIP value. [ 387.142884][T14524] RSP: 002b:00007f54fef67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.142893][T14524] RAX: ffffffffffffffda RBX: 00000000004f0380 RCX: 000000000045cba9 [ 387.142899][T14524] RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 387.142904][T14524] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.142910][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 387.142915][T14524] R13: 0000000000000589 R14: 00000000004c8503 R15: 00007f54fef686d4 [ 387.822012][ T2507] hid-picolcd 0003:04D8:F002.003D: No report with id 0xf3 found [ 387.829745][ T2507] hid-picolcd 0003:04D8:F002.003D: No report with id 0xf4 found [ 387.963398][ T2507] usb 4-1: USB disconnect, device number 2 00:30:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:30:48 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/101, 0x65) 00:30:48 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:30:48 executing program 4 (fault-call:4 fault-nth:1): r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:48 executing program 0 (fault-call:6 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:48 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:48 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:48 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:48 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:48 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 388.881966][ T2507] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 389.121876][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 389.242143][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.253133][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 389.264017][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.274120][ T2507] usb 4-1: config 0 descriptor?? [ 389.822031][ T2507] hid-picolcd 0003:04D8:F002.003E: No report with id 0xf3 found [ 389.829704][ T2507] hid-picolcd 0003:04D8:F002.003E: No report with id 0xf4 found [ 389.959026][ T2480] usb 4-1: USB disconnect, device number 3 00:30:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0, 0x2}], 0x200000000000007d, 0x0) 00:30:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:30:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x2, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:50 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:50 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x10, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:50 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0, 0x0, 0x2}], 0x200000000000007d, 0x0) 00:30:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000001e, 0x0) [ 390.811956][ T2480] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 390.841800][ T2507] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 391.061936][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 391.101790][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 391.181845][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.192864][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 391.201972][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.210880][ T2480] usb 6-1: config 0 descriptor?? [ 391.222981][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.236162][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 391.246400][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.263533][ T2507] usb 4-1: config 0 descriptor?? [ 391.692848][ T2480] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 391.761866][ T2480] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf3 found [ 391.769521][ T2480] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf4 found [ 391.821917][ T2507] hid-picolcd 0003:04D8:F002.0040: No report with id 0xf3 found [ 391.829725][ T2507] hid-picolcd 0003:04D8:F002.0040: No report with id 0xf4 found [ 391.911713][ C0] usb 6-1: input irq status -75 received [ 391.948066][ T2553] usb 4-1: USB disconnect, device number 4 [ 392.095306][ T2480] usb 6-1: USB disconnect, device number 15 00:30:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 00:30:52 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:30:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x4c00, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x2) 00:30:52 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:52 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0xca9a3b) 00:30:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x4c01, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 392.781792][ T2480] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 392.960538][ T2527] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 393.041871][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 393.162665][ T2480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.178758][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 393.188193][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.203891][ T2480] usb 4-1: config 0 descriptor?? [ 393.221698][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 393.351808][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.362865][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 393.373493][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.383058][ T2527] usb 6-1: config 0 descriptor?? [ 393.741790][ T2480] usbhid 4-1:0.0: can't add hid device: -71 [ 393.747802][ T2480] usbhid: probe of 4-1:0.0 failed with error -71 [ 393.758787][ T2480] usb 4-1: USB disconnect, device number 5 [ 393.872954][ T2527] hid-picolcd 0003:04D8:F002.0041: unknown main item tag 0x0 [ 393.941740][ T2527] hid-picolcd 0003:04D8:F002.0041: No report with id 0xf3 found [ 393.949417][ T2527] hid-picolcd 0003:04D8:F002.0041: No report with id 0xf4 found [ 394.091635][ C1] usb 6-1: input irq status -75 received 00:30:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 00:30:53 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:30:53 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) [ 394.274689][ T2480] usb 6-1: USB disconnect, device number 16 [ 394.471616][ T5] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 394.711612][ T5] usb 4-1: Using ep0 maxpacket: 8 00:30:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:54 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x1000000) 00:30:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) [ 394.832131][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.849174][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 394.859265][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.870543][ T5] usb 4-1: config 0 descriptor?? 00:30:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) 00:30:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x540b, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x540c, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) [ 395.081646][ T2663] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 395.321546][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 395.436400][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 395.442877][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.466563][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 395.501574][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 395.501587][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.502724][ T2663] usb 6-1: config 0 descriptor?? [ 395.532778][ T5] usb 4-1: USB disconnect, device number 6 00:30:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 00:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x540d, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:55 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 396.063039][ T2663] hid-picolcd 0003:04D8:F002.0042: unknown main item tag 0x0 [ 396.141557][ T2663] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf3 found [ 396.141569][ T2663] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf4 found [ 396.271582][ C0] usb 6-1: input irq status -75 received [ 396.466719][ T2507] usb 6-1: USB disconnect, device number 17 00:30:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x2000000) 00:30:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 00:30:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 00:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5413, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:56 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x10, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5415, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:56 executing program 1 (fault-call:7 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 397.272329][ T2507] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 397.312254][ T2527] usb 6-1: new high-speed USB device number 18 using dummy_hcd 00:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 397.338374][T14888] FAULT_INJECTION: forcing a failure. [ 397.338374][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 397.384301][T14888] CPU: 0 PID: 14888 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 397.392996][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.403034][T14888] Call Trace: [ 397.406328][T14888] dump_stack+0x1f0/0x31e [ 397.410658][T14888] should_fail+0x38a/0x4e0 [ 397.415074][T14888] ? ovl_iterate+0xdc9/0x1de0 [ 397.419745][T14888] should_failslab+0x5/0x20 [ 397.424245][T14888] kmem_cache_alloc_trace+0x57/0x300 [ 397.429529][T14888] ovl_iterate+0xdc9/0x1de0 00:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5417, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 397.434039][T14888] ? lock_acquire+0x160/0x720 [ 397.438714][T14888] ? iterate_dir+0x13f/0x500 [ 397.443314][T14888] ? iterate_dir+0x13f/0x500 [ 397.447915][T14888] ? down_write_killable+0xd8/0x160 [ 397.453116][T14888] iterate_dir+0x28c/0x500 [ 397.457545][T14888] ksys_getdents64+0x12a/0x380 [ 397.462309][T14888] ? ksys_getdents64+0x380/0x380 [ 397.467259][T14888] __x64_sys_getdents64+0x76/0x80 [ 397.472330][T14888] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 397.478377][T14888] do_syscall_64+0x73/0xe0 [ 397.482773][T14888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 397.488637][T14888] RIP: 0033:0x45cba9 [ 397.492509][T14888] Code: Bad RIP value. [ 397.496567][T14888] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 397.504972][T14888] RAX: ffffffffffffffda RBX: 00000000004de040 RCX: 000000000045cba9 [ 397.511463][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 397.512930][T14888] RDX: 0000000000000065 RSI: 0000000020000180 RDI: 0000000000000004 [ 397.526505][T14888] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.534658][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 397.542620][T14888] R13: 00000000000000fc R14: 00000000004c3bba R15: 00007fabd94466d4 [ 397.561656][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 397.651887][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.668180][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 397.691841][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.708982][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.721054][ T2507] usb 4-1: config 0 descriptor?? [ 397.729671][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 397.751495][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.766941][ T2527] usb 6-1: config 0 descriptor?? [ 398.252808][ T2527] hid-picolcd 0003:04D8:F002.0043: unknown main item tag 0x0 [ 398.281451][ T2507] usbhid 4-1:0.0: can't add hid device: -71 [ 398.287693][ T2507] usbhid: probe of 4-1:0.0 failed with error -71 [ 398.300089][ T2507] usb 4-1: USB disconnect, device number 7 [ 398.321542][ T2527] hid-picolcd 0003:04D8:F002.0043: No report with id 0xf3 found [ 398.329173][ T2527] hid-picolcd 0003:04D8:F002.0043: No report with id 0xf4 found [ 398.471401][ C1] usb 6-1: input irq status -75 received [ 398.654752][ T2507] usb 6-1: USB disconnect, device number 18 00:30:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000001800)="ba") 00:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:30:58 executing program 1 (fault-call:7 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:58 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:58 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x3b9aca00) 00:30:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:30:59 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 399.271997][T14948] FAULT_INJECTION: forcing a failure. [ 399.271997][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 399.308531][T14948] CPU: 0 PID: 14948 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 399.317300][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.327344][T14948] Call Trace: [ 399.330634][T14948] dump_stack+0x1f0/0x31e [ 399.334960][T14948] should_fail+0x38a/0x4e0 [ 399.339373][T14948] ? __alloc_file+0x26/0x390 [ 399.344058][T14948] should_failslab+0x5/0x20 [ 399.348556][T14948] kmem_cache_alloc+0x53/0x2d0 [ 399.353314][T14948] __alloc_file+0x26/0x390 [ 399.357726][T14948] ? alloc_empty_file+0x49/0x1b0 [ 399.362669][T14948] alloc_empty_file+0xa9/0x1b0 [ 399.367424][T14948] dentry_open+0x5c/0x120 [ 399.371752][T14948] ovl_dir_read+0x26/0x500 [ 399.376166][T14948] ? ovl_path_next+0x1df/0x270 [ 399.380926][T14948] ovl_dir_read_merged+0x1e1/0x4d0 [ 399.386035][T14948] ? ovl_indexdir_cleanup+0x750/0x750 [ 399.391416][T14948] ? trace_kmalloc+0xb0/0x120 [ 399.396087][T14948] ? __kmem_cache_create+0x161/0x4a0 [ 399.401370][T14948] ovl_iterate+0xe95/0x1de0 [ 399.405886][T14948] ? lock_acquire+0x160/0x720 [ 399.410561][T14948] ? iterate_dir+0x13f/0x500 [ 399.415159][T14948] ? iterate_dir+0x13f/0x500 [ 399.419745][T14948] ? down_write_killable+0xd8/0x160 [ 399.424942][T14948] iterate_dir+0x28c/0x500 [ 399.429365][T14948] ksys_getdents64+0x12a/0x380 [ 399.434118][T14948] ? ksys_getdents64+0x380/0x380 [ 399.439050][T14948] __x64_sys_getdents64+0x76/0x80 [ 399.444066][T14948] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.450122][T14948] do_syscall_64+0x73/0xe0 [ 399.454616][T14948] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.460498][T14948] RIP: 0033:0x45cba9 [ 399.464460][T14948] Code: Bad RIP value. [ 399.468515][T14948] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 399.476919][T14948] RAX: ffffffffffffffda RBX: 00000000004de040 RCX: 000000000045cba9 [ 399.484878][T14948] RDX: 0000000000000065 RSI: 0000000020000180 RDI: 0000000000000004 [ 399.492835][T14948] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.500792][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 399.508768][T14948] R13: 00000000000000fc R14: 00000000004c3bba R15: 00007fabd94466d4 00:30:59 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:30:59 executing program 1 (fault-call:7 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:30:59 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 399.521358][ T2527] usb 6-1: new high-speed USB device number 19 using dummy_hcd 00:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 399.671384][ T2663] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 399.696291][T14973] FAULT_INJECTION: forcing a failure. [ 399.696291][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 399.724787][T14973] CPU: 1 PID: 14973 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 399.733461][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.743497][T14973] Call Trace: [ 399.746764][T14973] dump_stack+0x1f0/0x31e [ 399.751205][T14973] should_fail+0x38a/0x4e0 [ 399.755753][T14973] ? security_file_alloc+0x32/0x200 [ 399.760934][T14973] should_failslab+0x5/0x20 [ 399.765422][T14973] kmem_cache_alloc+0x53/0x2d0 [ 399.770300][T14973] security_file_alloc+0x32/0x200 [ 399.775306][T14973] __alloc_file+0xd7/0x390 [ 399.779703][T14973] alloc_empty_file+0xa9/0x1b0 [ 399.784460][T14973] dentry_open+0x5c/0x120 [ 399.788778][T14973] ovl_dir_read+0x26/0x500 [ 399.793189][T14973] ? ovl_path_next+0x1df/0x270 [ 399.797950][T14973] ovl_dir_read_merged+0x1e1/0x4d0 [ 399.803046][T14973] ? ovl_indexdir_cleanup+0x750/0x750 [ 399.808392][T14973] ? trace_kmalloc+0xb0/0x120 [ 399.813046][T14973] ? __kmem_cache_create+0x161/0x4a0 [ 399.818309][T14973] ovl_iterate+0xe95/0x1de0 [ 399.822808][T14973] ? lock_acquire+0x160/0x720 [ 399.827468][T14973] ? iterate_dir+0x13f/0x500 [ 399.832046][T14973] ? iterate_dir+0x13f/0x500 [ 399.836613][T14973] ? down_write_killable+0xd8/0x160 [ 399.841786][T14973] iterate_dir+0x28c/0x500 [ 399.846181][T14973] ksys_getdents64+0x12a/0x380 [ 399.850920][T14973] ? ksys_getdents64+0x380/0x380 [ 399.855832][T14973] __x64_sys_getdents64+0x76/0x80 [ 399.860838][T14973] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.866888][T14973] do_syscall_64+0x73/0xe0 [ 399.871290][T14973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.877150][T14973] RIP: 0033:0x45cba9 [ 399.881019][T14973] Code: Bad RIP value. [ 399.885072][T14973] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 399.893474][T14973] RAX: ffffffffffffffda RBX: 00000000004de040 RCX: 000000000045cba9 [ 399.901442][T14973] RDX: 0000000000000065 RSI: 0000000020000180 RDI: 0000000000000004 [ 399.909414][T14973] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.917373][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 399.925335][T14973] R13: 00000000000000fc R14: 00000000004c3bba R15: 00007fabd94466d4 [ 399.971526][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 400.082384][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 400.092554][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.105692][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 400.115566][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.127421][ T2527] usb 6-1: config 0 descriptor?? [ 400.231435][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.245269][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 400.255751][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.269244][ T2663] usb 4-1: config 0 descriptor?? [ 400.613305][ T2527] hid-picolcd 0003:04D8:F002.0044: unknown main item tag 0x0 [ 400.681486][ T2527] hid-picolcd 0003:04D8:F002.0044: No report with id 0xf3 found [ 400.689425][ T2527] hid-picolcd 0003:04D8:F002.0044: No report with id 0xf4 found [ 400.801377][ T2663] usbhid 4-1:0.0: can't add hid device: -71 [ 400.807463][ T2663] usbhid: probe of 4-1:0.0 failed with error -71 [ 400.818613][ T2663] usb 4-1: USB disconnect, device number 8 [ 400.831313][ C1] usb 6-1: input irq status -75 received [ 401.016972][ T2507] usb 6-1: USB disconnect, device number 19 00:31:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:01 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:01 executing program 1 (fault-call:7 fault-nth:3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:01 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0xfefdffff) 00:31:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:01 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 401.646522][T15026] FAULT_INJECTION: forcing a failure. [ 401.646522][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 401.688948][T15026] CPU: 1 PID: 15026 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 401.697646][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.707698][T15026] Call Trace: [ 401.710992][T15026] dump_stack+0x1f0/0x31e [ 401.715320][T15026] should_fail+0x38a/0x4e0 [ 401.719736][T15026] ? tomoyo_realpath_from_path+0xd8/0x630 [ 401.725443][T15026] should_failslab+0x5/0x20 [ 401.729939][T15026] __kmalloc+0x74/0x330 [ 401.734096][T15026] ? tomoyo_realpath_from_path+0xcb/0x630 [ 401.739806][T15026] tomoyo_realpath_from_path+0xd8/0x630 [ 401.745345][T15026] ? memset+0x1f/0x40 [ 401.749331][T15026] tomoyo_check_open_permission+0x1b6/0x900 [ 401.755246][T15026] security_file_open+0x50/0xc0 [ 401.760087][T15026] do_dentry_open+0x3cd/0x1070 [ 401.764847][T15026] dentry_open+0xc6/0x120 [ 401.769167][T15026] ovl_dir_read+0x26/0x500 [ 401.773584][T15026] ? ovl_path_next+0x1df/0x270 [ 401.778341][T15026] ovl_dir_read_merged+0x1e1/0x4d0 [ 401.783459][T15026] ? ovl_indexdir_cleanup+0x750/0x750 [ 401.788820][T15026] ? trace_kmalloc+0xb0/0x120 [ 401.793488][T15026] ? __kmem_cache_create+0x161/0x4a0 [ 401.798769][T15026] ovl_iterate+0xe95/0x1de0 [ 401.803278][T15026] ? lock_acquire+0x160/0x720 [ 401.807947][T15026] ? iterate_dir+0x13f/0x500 [ 401.812539][T15026] ? iterate_dir+0x13f/0x500 [ 401.817121][T15026] ? down_write_killable+0xd8/0x160 [ 401.822320][T15026] iterate_dir+0x28c/0x500 [ 401.826741][T15026] ksys_getdents64+0x12a/0x380 [ 401.831500][T15026] ? ksys_getdents64+0x380/0x380 00:31:01 executing program 2: socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:01 executing program 2: socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 401.836432][T15026] __x64_sys_getdents64+0x76/0x80 [ 401.841457][T15026] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 401.847515][T15026] do_syscall_64+0x73/0xe0 [ 401.851930][T15026] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 401.857811][T15026] RIP: 0033:0x45cba9 [ 401.861691][T15026] Code: Bad RIP value. [ 401.865744][T15026] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 401.874141][T15026] RAX: ffffffffffffffda RBX: 00000000004de040 RCX: 000000000045cba9 [ 401.882104][T15026] RDX: 0000000000000065 RSI: 0000000020000180 RDI: 0000000000000004 00:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 401.890061][T15026] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 401.898022][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 401.905983][T15026] R13: 00000000000000fc R14: 00000000004c3bba R15: 00007fabd94466d4 00:31:01 executing program 2: socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 401.969632][T15026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.071264][ T2663] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 402.079547][ T12] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 402.363007][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 402.368805][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 402.501709][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.512631][ T12] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 402.522153][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.533090][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.541212][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 402.550218][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.559376][ T12] usb 6-1: config 0 descriptor?? [ 402.566028][ T2663] usb 4-1: config 0 descriptor?? [ 403.042641][ T12] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 403.121334][ T2663] usbhid 4-1:0.0: can't add hid device: -71 [ 403.127334][ T2663] usbhid: probe of 4-1:0.0 failed with error -71 [ 403.137213][ T12] hid-picolcd 0003:04D8:F002.0045: No report with id 0xf3 found [ 403.144923][ T12] hid-picolcd 0003:04D8:F002.0045: No report with id 0xf4 found [ 403.158069][ T2663] usb 4-1: USB disconnect, device number 9 [ 403.261274][ C0] usb 6-1: input irq status -75 received [ 403.447680][ T12] usb 6-1: USB disconnect, device number 20 00:31:03 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:03 executing program 1 (fault-call:7 fault-nth:4): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:03 executing program 2: socket$inet(0x2, 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0xfffffdfe) 00:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 404.048232][T15109] FAULT_INJECTION: forcing a failure. [ 404.048232][T15109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.061461][T15109] CPU: 0 PID: 15109 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 404.070125][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.080175][T15109] Call Trace: [ 404.083475][T15109] dump_stack+0x1f0/0x31e [ 404.087809][T15109] should_fail+0x38a/0x4e0 [ 404.092225][T15109] prepare_alloc_pages+0x28c/0x4a0 [ 404.097337][T15109] __alloc_pages_nodemask+0xbc/0x5e0 [ 404.102629][T15109] kmem_getpages+0x49/0x900 [ 404.107132][T15109] cache_grow_begin+0x7b/0x2e0 [ 404.111892][T15109] cache_alloc_refill+0x359/0x3f0 [ 404.116914][T15109] ? check_preemption_disabled+0x51/0x140 [ 404.122634][T15109] __kmalloc+0x30c/0x330 [ 404.126878][T15109] ? tomoyo_realpath_from_path+0xd8/0x630 [ 404.132613][T15109] tomoyo_realpath_from_path+0xd8/0x630 [ 404.138159][T15109] ? memset+0x1f/0x40 [ 404.142151][T15109] tomoyo_check_open_permission+0x1b6/0x900 00:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 404.148067][T15109] security_file_open+0x50/0xc0 [ 404.152912][T15109] do_dentry_open+0x3cd/0x1070 [ 404.157681][T15109] dentry_open+0xc6/0x120 [ 404.162011][T15109] ovl_dir_read+0x26/0x500 [ 404.166437][T15109] ? ovl_path_next+0x1df/0x270 [ 404.171334][T15109] ovl_dir_read_merged+0x1e1/0x4d0 [ 404.176482][T15109] ? ovl_indexdir_cleanup+0x750/0x750 [ 404.181844][T15109] ? trace_kmalloc+0xb0/0x120 [ 404.186515][T15109] ? __kmem_cache_create+0x161/0x4a0 [ 404.191810][T15109] ovl_iterate+0xe95/0x1de0 00:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 404.196315][T15109] ? lock_acquire+0x160/0x720 [ 404.200982][T15109] ? iterate_dir+0x13f/0x500 [ 404.205576][T15109] ? iterate_dir+0x13f/0x500 [ 404.210156][T15109] ? down_write_killable+0xd8/0x160 [ 404.215345][T15109] iterate_dir+0x28c/0x500 [ 404.219768][T15109] ksys_getdents64+0x12a/0x380 [ 404.224534][T15109] ? ksys_getdents64+0x380/0x380 [ 404.229463][T15109] __x64_sys_getdents64+0x76/0x80 [ 404.234477][T15109] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 404.240531][T15109] do_syscall_64+0x73/0xe0 [ 404.244937][T15109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 404.250817][T15109] RIP: 0033:0x45cba9 [ 404.254705][T15109] Code: Bad RIP value. [ 404.258853][T15109] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 404.267255][T15109] RAX: ffffffffffffffda RBX: 00000000004de040 RCX: 000000000045cba9 [ 404.275318][T15109] RDX: 0000000000000065 RSI: 0000000020000180 RDI: 0000000000000004 [ 404.283283][T15109] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 404.291244][T15109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:31:04 executing program 2: socket$inet(0x2, 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 404.299204][T15109] R13: 00000000000000fc R14: 00000000004c3bba R15: 00007fabd94466d4 00:31:04 executing program 1 (fault-call:7 fault-nth:5): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:04 executing program 2: socket$inet(0x2, 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 404.484325][ T12] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.492027][ T2663] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 404.751297][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 404.756548][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 404.921265][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.932243][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.943142][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 404.953509][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 404.964034][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.972466][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.986227][ T2663] usb 6-1: config 0 descriptor?? [ 405.000707][ T12] usb 4-1: config 0 descriptor?? [ 405.482579][ T2663] hid-picolcd 0003:04D8:F002.0046: unknown main item tag 0x0 [ 405.552726][ T2663] hid-picolcd 0003:04D8:F002.0046: No report with id 0xf3 found [ 405.560494][ T2663] hid-picolcd 0003:04D8:F002.0046: No report with id 0xf4 found [ 405.574313][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 405.580293][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 405.594004][ T12] usb 4-1: USB disconnect, device number 10 [ 405.701103][ C0] usb 6-1: input irq status -75 received [ 405.884848][ T12] usb 6-1: USB disconnect, device number 21 00:31:06 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:06 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x0, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:06 executing program 4: syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1000001, 0x7c5243) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000300)={0xa30000, 0x7eb, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9b0951, 0xffffffff, [], @value=0x8}}) poll(&(0x7f0000000280)=[{r1, 0x40a}, {r1, 0x20a}, {r2, 0xa}, {0xffffffffffffffff, 0x40}], 0x4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0xffffffffffffffff, 0x4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0xee01, 0x0, 0xee00, 0x10, 0x101}, 0x7, 0xff, 0x6, 0xde, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000000c0)=""/167, &(0x7f0000000040)=0xa7) 00:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x22c00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:06 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x0, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000580)=[{&(0x7f0000000280)="362c436aa124278a8bffc391575c1966aa40d079645f61c9bfbc9bc12ae04d68245767602e124e9da06894f812fd0b20bd100b488e9576ce3ff1f65f8dfa90952d825160c93fa333e8821b063d884493c2d9bcc4795a9b876bda61eb2f3a51a945b2537ccabbf50b4f1b88ba2aa5f81c6f2dcc52a8f797e9a0b1fe1a450a8a71021d110310f9b535d09a79bb0137f8cac26d65763204707f11919ed444f9abc90107b37925b7c4182b6bac5318c246583a", 0xb1}, {&(0x7f0000000340)="d8777b531d678d5759389e28d3e6a6dec151760081a8c8cdea1c36870b36cc784db559d4332234ce0db663f28c6059cab5446eab33df985bbeb71db080fc59ec87787e9389eb059e12361554f24bb2a7f4071641e29151c48c2fac0985e133c2eb3683d50bc3d06887b27198", 0x6c}], 0x2, &(0x7f00000005c0)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2400002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0e871a75a16419a708010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040801}, 0x40000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) recvfrom$l2tp(r7, &(0x7f0000000140)=""/100, 0x64, 0x40000220, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x18) 00:31:06 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x0, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 406.731137][ T2507] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 406.814186][T15221] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 406.971154][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 407.092914][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.103907][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 407.115466][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.127200][ T2507] usb 6-1: config 0 descriptor?? [ 407.612264][ T2507] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0 [ 407.682136][ T2507] hid-picolcd 0003:04D8:F002.0047: No report with id 0xf3 found [ 407.690044][ T2507] hid-picolcd 0003:04D8:F002.0047: No report with id 0xf4 found [ 407.830964][ C1] usb 6-1: input irq status -75 received [ 408.014464][ T2480] usb 6-1: USB disconnect, device number 22 00:31:08 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:08 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x25) 00:31:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getown(0xffffffffffffffff, 0x9) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:08 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 408.643137][T15258] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r6, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) connect$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x5c) 00:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:08 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 408.881003][ T2663] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 408.919239][T15281] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 409.130924][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 409.251396][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.262530][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 409.272814][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.286745][ T2663] usb 6-1: config 0 descriptor?? [ 409.772372][ T2663] hid-picolcd 0003:04D8:F002.0048: unknown main item tag 0x0 [ 409.841087][ T2663] hid-picolcd 0003:04D8:F002.0048: No report with id 0xf3 found [ 409.848751][ T2663] hid-picolcd 0003:04D8:F002.0048: No report with id 0xf4 found [ 409.980913][ C0] usb 6-1: input irq status -75 received [ 410.186169][ T2551] usb 6-1: USB disconnect, device number 23 00:31:10 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x3d, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x9a, "", {{{0x9, 0x5, 0x1, 0x2, 0x248, 0x0, 0xc5, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x40, 0xff}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x9, 0xff, 0x1, 0x0, 0x7}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x45, &(0x7f00000002c0)=@string={0x45, 0x3, "09e9a32f52d602ce7d837fbd6b7fd4b741c946a95e0f29b7e05f6897424ac25da60d8212cc22aaa62d9910eac5e307000a9c24c8230e7f90e4d5c717def5f6dd0ebe36"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}, {0x27, &(0x7f0000000380)=@string={0x27, 0x3, "6591a07def7e5025640eb9ce0d36cd7c6ea76d857a3080623139464379290848d27e319eec"}}]}) syz_usb_disconnect(r5) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0x10001, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xb78}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x894) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r6, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x0, 'vxcan1\x00', {0x1}, 0x4}) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:10 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x1000, 0x2) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r2, r6) syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000200)='./file2\x00', 0x8, 0x7, &(0x7f0000000740)=[{&(0x7f00000002c0), 0x0, 0x2}, {&(0x7f0000000340)="493b713efd5ae357d3a70e8ff22881fcfa0fbd853a7826afdf4c76cceac3dca506e4e94223fefdbb62b6ad5519068cbfba14f96918c608f8e0c1e091a17a9ab9856e9e18b8214c9249a8b7518a543480609cfd0f32f4e8db3731c1b2095c8e1bb4aff54a6cfad3628a30c074be4587d6c4c47b1053a7506f59ba41343b6df02c693412c60752093fcc2b735345f24a4b58b325495d5da5f6b9fc3896fdce55", 0x9f, 0x8}, {&(0x7f0000000440)="aee2c2a0e169671500a32670d7b57258659e4365f226315a1e67801389a6f0bd186fe70d288e126c31d8df8d4e70351dd483db8fb351409212b5d02c01bc6a735cc5bdbf64da52615dcd8613c55683bd50d3be2cd36b200517024a70ea18adb9431956e2ee78b830f840f89947b2d05f81a0a3cbd62fadee57e1c2be47edbf5b7e236957b124c1afbb65cb61f288b116f20ea4cfaf847f45d66f0431c86a", 0x9e, 0x9}, {&(0x7f0000000500)="6dd60d0af2fa28fd394183394ee3c27a1172bb973874d8c8bc040c2d8e07be64aaa4b049ac4f30bdc29dd89335cc7c23661f6c1670b177", 0x37, 0xe77}, {&(0x7f0000000540)="abfc42b150a726eb7a342550f7dd5955be97f77ddba0678134602f6b4427330d5947d27354da3790afcd5fa67a559db27c8a46cf3f1cc6e5a8b7b40c4386a7b220127e96945712bec169b1e2ff6a49d19852742ff222a7bd81e206c77276c92fdc86906add4407406d1b0555b0c9642ede7837214a68fe3223bdfef745f00a62a0cc3cffd276eb2ea05b65d8c1fa", 0x8e, 0x672e}, {&(0x7f0000000600)="1ff16ec4397cb1595e78c57312d41fdb6f0550c76cd9500c37da7b9425ec6bb13e0d5d0be41cb86ad3f5580070ff655a50a636f73105fc61d5ac532e6c67fb9324da0df6f1526d3af4b89248315d03342abc0dda7e8a4f6d815650913973e0c19b94f6eb79d23d6cac2cd084abe06d5c99f7d54fd8fe340845b6c820eebfdf0dc7c66ff8af2fe3a9f317571ad8af9a751d3b669d05d93c69e86387234a25a48b832fead73bc95bf704610b94bb2c1a8cf8260dc785bbe320113fe8ca", 0xbc, 0x8}, {&(0x7f00000006c0)="0d72bd8fc3e29ecde3176b051b26d8c0c4ab0dc6fd312b9700a51709de1cfdc7f59233cc44de1b5d91211e718a895b425d37173cbcbf34bd135c1cdbebb8ca4de6ea88581b4e0ecf628ac56d3991a2cdfe788bbd436c1348f174cf3e923835c2102c472cb16904608f5a7b70290211cc89df4f3cbe81d540c9eb88ac1e9e", 0x7e, 0x2}], 0x200d860, &(0x7f0000000800)={[{@gid={'gid', 0x3d, r4}}, {@errors_recover='errors=recover'}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@case_sensitive_no='case_sensitive=no'}, {@umask={'umask', 0x3d, 0x9}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@utf8='utf8'}, {@show_sys_files_no='show_sys_files=no'}, {@disable_sparse_no='disable_sparse=no'}], [{@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@appraise_type='appraise_type=imasig'}]}) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/101, 0x65) 00:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:10 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:10 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 00:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 410.845901][T15334] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530ed56ff6e212986444a3f4c70b40668f1bd345fe157116b0c7f1569343646aaa4a83d84ae5fedbe68751f26753128b41350a5181431ad8bf5dbe4f955c763824bb8ab312bacc851071cea56e981981a9d3cf105500703ff6b34ea6031fa679b1ac33e7ad13be23b43c36382bdbf7eb00034415f33b3eafd2fec973e171c63639f0aa5b9b6eb7f833d51129bb46bf63e761e"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x800, 0x203) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) mknodat(r1, &(0x7f0000000000)='./bus\x00', 0x10, 0x5) 00:31:10 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 411.021552][ T2507] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 411.061969][ T2527] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 411.095860][T15348] overlayfs: failed to resolve './file0íVÿn!)†DJ?Lp´hñ½4_áWk i46Fª¤¨=„®_í¾hu&u1(´P¥1­‹õÛäùUÇc‚K¸«1+¬ÈQêVé˜<ñPÿk4ê`1úg›Ã>zÑ;â;CÃc‚½¿~°': -2 [ 411.157103][T15348] overlayfs: failed to resolve './file0íVÿn!)†DJ?Lp´hñ½4_áWk i46Fª¤¨=„®_í¾hu&u1(´P¥1­‹õÛäùUÇc‚K¸«1+¬ÈQêVé˜<ñPÿk4ê`1úg›Ã>zÑ;â;CÃc‚½¿~°': -2 [ 411.290826][ T2507] usb 5-1: device descriptor read/64, error 18 [ 411.300967][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 411.420904][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.432009][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 411.442292][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.454662][ T2527] usb 6-1: config 0 descriptor?? [ 411.680832][ T2507] usb 5-1: device descriptor read/64, error 18 [ 411.931989][ T2527] hid-picolcd 0003:04D8:F002.0049: unknown main item tag 0x0 [ 411.951328][ T2507] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 412.002349][ T2527] hid-picolcd 0003:04D8:F002.0049: No report with id 0xf3 found [ 412.010086][ T2527] hid-picolcd 0003:04D8:F002.0049: No report with id 0xf4 found [ 412.150756][ C1] usb 6-1: input irq status -75 received [ 412.220805][ T2507] usb 5-1: device descriptor read/64, error 18 [ 412.333621][ T2527] usb 6-1: USB disconnect, device number 24 [ 412.372632][ T0] NOHZ: local_softirq_pending 08 [ 412.610850][ T2507] usb 5-1: device descriptor read/64, error 18 [ 412.731935][ T2507] usb usb5-port1: attempt power cycle 00:31:12 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 413.130726][ T2663] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 413.390704][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 413.440717][ T2507] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 413.530921][ T2507] usb 5-1: Invalid ep0 maxpacket: 0 [ 413.530960][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.547191][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 413.556720][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.566473][ T2663] usb 6-1: config 0 descriptor?? 00:31:13 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x12f0, @remote, 0x1}, {0xa, 0x4e20, 0x8000, @private1={0xfc, 0x1, [], 0x1}}, 0x6, [0x2, 0x7, 0x10200000, 0x9, 0x3, 0x6, 0xb4, 0x4]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x6364, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000340)={{0x1, 0x2, 0x9, 0x2, 0x5}, 0x7ff, 0x4}) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:13 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 413.680726][ T2507] usb 5-1: new high-speed USB device number 105 using dummy_hcd 00:31:13 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0xa10000, 0x7ff, 0xb2aa, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0x6, [], @ptr=0x401}}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x8f, 0x4, 0x1, r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$BLKBSZSET(r8, 0x40081271, &(0x7f0000000140)=0x9) r9 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 413.791200][ T2507] usb 5-1: device descriptor read/8, error -71 00:31:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x8912, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./bus\x00', 0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103000, 0x121) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) lsetxattr$smack_xattr_label(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)={'overlay\x00'}, 0x9, 0x3) 00:31:13 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) poll(&(0x7f0000000080), 0x0, 0x0) [ 413.905584][T15398] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 414.010915][ T2507] usb 5-1: device descriptor read/8, error -71 [ 414.036890][ T2480] usb 4-1: new high-speed USB device number 11 using dummy_hcd 00:31:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x8933, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="75707065726469723d2ef436ae2f6275732c776f726b6469723d2e2f66696c65312c836f7765726469723d2e2f66696c65301828a7493d59455fa46f0b8a0000208091afeb75c9c1b061ab31be669e302bc3452b0e8e209ce79d0c726cde82e8e9abfd57ec275ff4f74a8f7132ff20eeb858510810c882c388d25822cf12df8b5c74523c27b7e6b9687745551c66b706e4209a3cd84d0c0f9c9bf1ca5e3cdd2922b1aca48d316adce3ff312084df43026775c0ecb7357a86d76739f984c25a562849a50e4918f684657f9664bf32290a61ba3900"/224]) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x440000, 0x4) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 414.052131][T15417] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 414.053014][ T2663] hid-picolcd 0003:04D8:F002.004A: unknown main item tag 0x0 [ 414.141173][ T2507] usb usb5-port1: unable to enumerate USB device [ 414.180880][ T2663] hid-picolcd 0003:04D8:F002.004A: No report with id 0xf3 found [ 414.188541][ T2663] hid-picolcd 0003:04D8:F002.004A: No report with id 0xf4 found [ 414.213722][T15428] overlayfs: unrecognized mount option "ƒowerdir=./file0(§I=YE_¤o Š" or missing value [ 414.252051][T15428] overlayfs: unrecognized mount option "ƒowerdir=./file0(§I=YE_¤o Š" or missing value [ 414.270694][ C0] usb 6-1: input irq status -75 received [ 414.330658][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 414.450858][ T2480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.462532][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 414.473732][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.484188][ T2663] usb 6-1: USB disconnect, device number 25 [ 414.494357][ T2480] usb 4-1: config 0 descriptor?? 00:31:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:14 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x0, 0x0, 0x8b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xffffffff, 0x7ff, 0x3, 0x22b, 0x1, 0x9735, 0x1, {r4, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0xf7, 0xffffffff, 0x2, 0x2, 0xfffffff8}}, &(0x7f0000000280)=0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000006fd94b1e2a4aa13fdc485612d864d62925f798690879384b2c1be76d260efcb603d36d3b1aa5f67e11edac593c7aa8374ac30a9c3b282328c2bff1094221383121a3f04708974f575197c693149f8f0191d891f92b238388e709eea7d3f509eb352e02ff68a53b87a42aae5af3a760f24c8f3b", @ANYRES16=r8, @ANYBLOB="00022bbd7000fedbdf250e0000003c000380140002006272696467653000000000000000000006000400ff0300000800010000000000140002007369743000"/74], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:14 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="89a1cb02a1204b7fa5f86746692e8b8ed784e795a40a472a67089a52b6bc322667d6dbda4f6f6d22c9eb32e3859367e23b5074fd5ce0a87ae759244e25fd3328110ab3a97754c55c11c75d6bd5686d7fc8549608796a22355250549481159d0981bb3ce0a84c9d5ecd513f1d15049fa60951235f4add8a333751b3a0e4c63f6590efa1d745c2ca530d07eddf3e71967c1cf1a40010f5f7f6a6932d6a50886624b6c13ab7e641baf9fcf902002bca376a840000ace7768ad4e5b80200c3d72008b876e2a61619166789db9d25f763127172f256f1e435dc03b0fbfb5df21a51dfd5fb0cd419052ff0d000000000000000"]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x894c, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 415.040752][ T2480] hid-picolcd 0003:04D8:F002.004B: No report with id 0xf3 found [ 415.052319][T15460] overlayfs: unrecognized mount option "‰¡Ë¡ K¥øgFi.‹Ž×„畤 [ 415.052319][T15460] G*gšR¶¼2&gÖÛÚOom"Éë2ã…“gâ;Ptý\à¨zçY$N%ý3( [ 415.052319][T15460] ³©wTÅ\Ç]kÕhmÈT–yj"5RPT” »<à¨L^ÍQ?Ÿ¦ Q#_JÝŠ37Q³ äÆ?eï¡×EÂÊS íß>q–|ñ¤" or missing value [ 415.056016][ T2480] hid-picolcd 0003:04D8:F002.004B: No report with id 0xf4 found [ 415.176856][ T2507] usb 4-1: USB disconnect, device number 11 [ 415.290848][ T2551] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 415.530606][ T2551] usb 6-1: Using ep0 maxpacket: 8 00:31:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:15 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x400454ca, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=@random={'os2.', 'overlay\x00'}, &(0x7f0000000440)=""/253, 0xfd) 00:31:15 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x20000004001fa) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 415.650673][ T2551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.661889][ T2551] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 415.671534][ T2551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.680406][ T2551] usb 6-1: config 0 descriptor?? 00:31:15 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10da00, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:15 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @default, r5}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0xc, 0x0, &(0x7f000095dffc)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 415.852914][T15510] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 416.050814][ T2480] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 416.191942][ T2551] hid-picolcd 0003:04D8:F002.004C: unknown main item tag 0x0 [ 416.260664][ T2551] hid-picolcd 0003:04D8:F002.004C: No report with id 0xf3 found [ 416.268407][ T2551] hid-picolcd 0003:04D8:F002.004C: No report with id 0xf4 found [ 416.310611][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 416.410617][ C1] usb 6-1: input irq status -75 received [ 416.430852][ T2480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.441742][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 416.452048][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.465514][ T2480] usb 4-1: config 0 descriptor?? [ 416.602872][ T2551] usb 6-1: USB disconnect, device number 26 [ 417.030593][ T2480] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf3 found [ 417.038247][ T2480] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf4 found 00:31:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x40186366, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:16 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x1b, &(0x7f0000000140)={r5, 0x10, 0x20}, &(0x7f0000000040)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000100)={0xfb, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r5, 0xfffffff9}, &(0x7f00000000c0)=0x8) r8 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x80000001, 0x284800) getsockopt$netrom_NETROM_T2(r9, 0x103, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 417.165944][ T12] usb 4-1: USB disconnect, device number 12 [ 417.201763][T15555] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 417.420686][ T2480] usb 6-1: new high-speed USB device number 27 using dummy_hcd 00:31:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:17 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:17 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="75707065706469703d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65fe4902cf521b6ae0ad1422c5f019ba045e0b2f23ce8e54223c0cc9896a08bfc67fed316b0baaa255b8777cf800981125b8f4ef86fdec6bd49dc29fab6e7312ebe2d8599fe5bf49e2cff9cdbf7bd4ba657be56e14a85f4a46b345fdb24b3bc4147ab14d37104e71ad638318310fcc1cc80ded8f0b4d5138e3008c89f0ba93436a80a8bb384b3057eac03dc4434e7cd620ead8efc95b5c33"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./bus\x00', 0x40, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:17 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) kexec_load(0x0, 0x5, &(0x7f0000002300)=[{&(0x7f00000001c0)="9cde2023d9abf91e00fc1bfb0cb16b738f79213fb94e3b4810920c60a69b920305b210d1a66e3f88cfff115528afa298a9b782e62537ee8dd19adaecd67c692713d2168e46220c187bfeccdca2c3158ac11798e98816f8c1b296f58aff6627ca866ea18bd01ccda4f926fc5f9138df02208d09b210ce714277d7b4c04a55a76b7a675f6ada9be279a67a14b4aa374d2c81aca7dff398010fefe94a422641752b2d6d708a47b965c3c4f68964d90f1f85fcd4a67722", 0xb5, 0x7, 0x200}, {&(0x7f0000000100)="7cca1ec8f454f9fc1d2ce0d196831295823f5c377cec43c550ef9203b003ee70209e01bf425cb5f8bab0a2e611a23c1ebd97244938af6760e305de071f77f9f497d7543d9f0aa33b66a07ca2c7e8a857c95fc0701a5bc8f3dd6c28b64c0935a3d50065d89ec3df", 0x67, 0xc47a, 0x8001}, {&(0x7f0000000280)="6947bfdde4ef87832820f8d2dfd340213736024eb814c691e8a9e86fdb209b1898885fb4b79e7e3da4b89009c3fbc9a884bb31eda2f08d5cba65186748e1e4fee9a4fda900221272040935377a602e762f89fed443", 0x55, 0x0, 0x10001}, {&(0x7f0000000300)="4dec7384bd8e7eb89aaa746748b24bf89731c2cda1979eccf7b991cda9307ac2b709bb2e1c182344d1b78c1e5175db2995f983b9b6bc7a26de480303d287e65a7effbbbf381caf089949633ddd7e4ac4e071f333aea6c689cf38ed19c9b469b008d91d6f3a8453c0ba48579b6ec30193a94385f8d7b4a26f1a8cc73d6b1abc0d79bf82f22763c32089ebe2a05edfe3b6473b6e1edb7ba52d7a472359e88d92b3665d1df90c0a9db259e877fa7c74253950e36206c10f6f21845e12e6b9fe996914e00455f3e6b4c254e18edc1db713a53acb284618a07d5e07cc51d48ed5082b57c3f1a8a39d2d60d358f018e1f6531154a041aada9459294024c54cfa0863060667fb5631fb0fc55a80d56062be83f8e16377359c567706cf936b27fd3d3d4a5ebefb483c42236ee9c55d8bf3a68f0cfa960cdcbc26ca331342f904f60535267e3d64fd21152654c2c0c1a97de63b9192cb2c3d6ce0fba2a19b58522628c17105559d20a11f310e4235fbb20f521943c0285f1944e1fb764090166b99d3281e79799cc95f547ec0380fe1c13989479ddf10439587aaa2205706d72666afce76b9f83f5d8ffb1aa7edbda4d852a33d359a78005a18c9a2c1fc9197de5b5f7a03416f5b5cfa59e6c45e2468b6211f9f160cdcc8acacbc4674336f3c56cffa243b5b86d45deaeea0e236a68f3166469de1395f75eb07f644194ef839fd6d4b3e13ef398fc92d02b551fb20f8056e313f6655bf7cc1e71aa5f83435a17078fb46e3ad9802f672400f080f938f35cf81f96e3801ae89a4f6a83bd632a74289dd4b8db5fbb81e4fc02f006b8ea3287b268f33fac19c497e9f4d9a11a625b350d304897e0550eacbea99964c1502a105722059a2c7223eb73fec28c7d402a5e38a14d04c7c567b326726cd2dcdaf67e075fdbd18fc325285da7b5c093b12b34920e4c59d9bcf7bb136b23c6abb43b5a5b073afe7ac2cee045585e9dfdad66d8cbc54450fb7e83bdf6b895d0a532d05a15cf32447c66732109dc801502661d4d1de2d19d58fceef0f70dcd060150f9b35b3b06b77caa4afd98f1b1b2a59ff78bef9fa043f575881f6a5a99e01c5f2b57292848ef6523f51d89c233aaf0e06b104089b5346591470a89cddf9d9c212be288ca081aed6df1a96ef9f16d461681e0bd8ad503229a95226d2577c94c64a8839ddee9f2df6a592b3a8e9702530db9d30df2c969bf518ce448e64a71be7068871d3cce6edf53aec4043f0682ab83c00df42bc7f179e0f5e80daaed5ee255ff64b72960f66585812a2fc9b391027d1a56d159b7bfb7cf95367ab2f3d1dcbe4909a85b27691c9d83c5cadd853d8c30e6add6621790484cccd0d3563c81edb8de6bfa500146d6ed02c1cdbe2caed20bfc6d9ca7b6c9de38fc6868e5e001132e89b5d187b0d291824569ab29134d6373c754a04296a63b62833abf33709d9ce31521cfb2e947d40b2704a9867a53098a34e15ec96c5fd51ae39aabf60825f18c528d1a41ea8300f05c12def1010691618e1b94cc7fc078234c90837d2d5bd6492ce65a8b9e7afa815b1486beba574cdc4b7d377f1ded8bcc0d29469fae5911d3549cf6f45815618b7ffe8e98699ddbc587f84b8b67a7eefebad2d4f4c00fcbaed0b82d8b1f580c627b455281685079567e9d396004b0a1f77a7d2d2fd07c8b34f4ccbfc49963d98c578f3b54640e4427f34649f0f307ce2b3a426f5442568db6414dcfebfc44027c2840dfa5e2b9c21807070d4764c90c3ea039442a80f979d889f3cd6879368cf3615a002eb673b24e531bc42de18a8f894d68d4ceefbf019ede126beb310168fa52c8930dd16e3b03cbe0f70403e4c657b91dcd4f671f95d9e45aa0810de8c6584bed672c1b1a8c0ed9607febdf437fffe15310abf702678b14e9469b73fc6ac310d592453fd2ebddd50c85facf93e07290b56f209ed6a6783364a5806e730170d996fb8a3aaf498cf3a516bc38cda6a88609bc6e3605bef7a800b253a64505e09829ccc66206164d8f8e32f28e41e2a184e87aca5aa4c521ea0c7c2362d42afb12a50bc422337a351802bf893e58c55660906585d6127ebcbf1083185fc26b7cff4e8175e6edda4db4357997dd7625086435ebbd04d50fc17cce307e3dca5e8d68cff307cb8376942f5b5d852830f62239ec1d040083320b57fb66eb870e28135f08465a0c7beff84cb484737b894e35db362edf8fbf17196fc640f84aeac1d92976dbe9ee392b823780f2574aec21c2c0b4d3573d3e3915c4baf820ce60c5c5599c7c23f95a862eefc52bed41bf6eee0dc01902d2ccb600ff94bf6f32939f07874a4bd9739860eb59923e11d0439de51b858d03a02c2b9c1a0de6f14f39be02bb64facd64c7774d134ccd32141e7852712b96fa12385f3323da09d16d78c33db61ba73511a781009f118b8a00fea038246934aa1d4406cec20f07179e9fd43554ff38df13a1e7f6a4fa9beab03eb1264fc4434185a28cab05d1b098efe9e8a05db6c7541d8e2b7e6eb63e353eefc1d90a95efd37446c86b60ef2ff6e8f1bd4da16530710244bb255191ec59f355296255ce6c88b08a2231360c9080b78df56676aadc018951d71e207d0da5c1472962026da16ce36801b58604f97b8dd7df832cd0d399caff7c9c2188d8d9bb4dfa133e2e5b6be2faf964314bb06ceeaab9b1b690ddea711dd081f1e6a8c34408fb48254499a2f9196245460a134bfaa69bd9d282b1a82e3c3b050c89f9b644bf39af65dc00e1dfcc529c2669d8412e8ee199281370d6cd0e06343fa9d4d9655dfb63e3253c360bc81fb46534a1ea0d027f89cf2ff37f4956c0fa73d8cb4fd545486a4f115d6ee4c2a99ff7674e323fc61f59401c9ab557abe01c3938d44edad28b7d88c88111f8d2a0158adae9910959eae47e065a1206ee7bd07e20686e4fae581dee16eb069381016a35d4ba4c1c5ec228b0e73453768ad7e666bfa47e06ec86699c6267d0d6892343ec50eb4b702fd4823205657cf059fc3110e38a11ac73fa196f39d4d41d0cfac49788746fd7e351492b748857e7d2f33618c5cf3bf63cd084e7d5705da98837404842eee3ae15d214cf013e77ec149ba9c638516e281c795c8eb5d9eed66741ffbff4bab8271a84833be20ffa4c65fb4251524719f08d7cef59411643a3831f05c8ff19177d046572be3efebfde6cb37956a356722daaf79b0f5c3393ab74f2db085ada0a898357f3cf39eeb2365c1fbcdcc4995250b8189074e706bcfdb6df13e6431a41b7ae1041992ffda2b989d33f371654fa9fb9920f4db2b067561dbd3def7538070e23e3bd0d26e60eb88b87b654d1cf6a8add7501ecf438ca060335edb827488467ef8ce41053b6755f0207820a1a961a2b41f8df1821d8e9b3b8c55d1040ea731359c19b7e9fbae728c8224c6683e267b50155b707880d48e20a042932b94686b9fba3573fb3e6f9af70a657bd45e8a03ac777d482706e21effdda21bebfb3df3607af963d524fa4ee42f3738898ce75f6112db2b1975de2f535da3c9e11cf25c4ba3f2380373b9761740510fc61b26d10684c8ac747d1f7d940b1f97369ef4128c974ca1dc0f451dfd689ff54f2111ec9b322bdcfc02bce8e88e83626b505c7e1324140a3f5bdc3bb03eb1ecdbb1c7f9fb3120366c566096ad94e4873d900620d0f33513f312209ce17182116aab50d4c469e22ce6a85cad1521b8f1da313ff30aa26c52e77b98065e61f7f169c661366e36d15bc9175bf57ff17925ce3bb9f74062676e57233efc82f89438d88af2a117b77bfa269965e682a32582110c00eb6772a069e4beb73d3c9e07ad8d7375d7340554fc99784cd72d2c482a8989168c00f59a9d9f7ed5e8bec2eeb0538d1505320110ec002365ca1d9179b0bfcf8a659576a493749ff35b5e86be2f25d4db552a53f2708f084d51f98b44d53eb555072e28d1b8c05cfbe1c74fa7821d4d8076d9226037ff7afcab921d639e41faa38294e466e9fdfca683479cb49986ddf06455e21aa81ca495156da09b41dd6c289740535c032658544761e5294ebca4b2e0cf49a32bd62d4cd8ec0f2108bf0b53e90a43a5d5cbd2ccc16e11ef843b70564b7593aabac2524a747450a05b220ee2dc17734f645ba342f492b3e4ea8b1de4b4906157429a5e99a0d856d78b8b58fad5df52884d698684ed9efe09739e08b4adc3b89170ac715e17709a7a8a2216b9f3cf03465a3801cd3cf8a54cead3eb2bcaac8ee71dbb2d1910741494f2befbbf4ba24cb8fae8ae95f24d4258e1eee54adb7af0e71d13482d13fca11aeac48e407a105fc6edaefea3455c5e061933c8b8027fac70f9bfa27afabe696a937d5b40e0f0d285365bf9c9e1dbc955ec2b285a059570107f5edb2bf9e0ea6695b579393b08471a1d1bd61aad55beb0625c043e2e1c0900d08045d6e852817d5fedb1b73e781ceb803b1c4b4a408b057029d1f7ef1c3520a2d787bab450f1735ad497ee6a6f899ee9169f8efab2263d7c0cea08de0d37aabcbbbb3af088773a227a913db5a8c6744a55bafb7b115a684137dc2dbe3ec27e6ef6c5339a0f57f0e3a4defcbe4f2f0a79eb4577bd79688ce451834c282aa15e107193f64d2e71ca1b258de26c2c13fc3e40fa2a9c09084c6d7cb19cd6031e46df934d95189673c46aedeed1b24e1b5accdccb856ab2034fa85d3965747f645c6066fad6d072a58990a24a55b8f71a4a0f77948a38bdac19be21936173e200bf8659c1c4e673547915bcb68def7c3a04841e5237897f9f1a8c6a90cf648efab7aa25692714389a93ee17b20b6d56eec2c02d7b279d38f9039aad6e279061d953eafa38c8dd68a42a466bcd538cd3821f1d9e7e0a0251048bf937c5fc434c8932bb8dacb4fc9a4d671be9358248316a3ad1150f029cd5b1c6f7c62d720dff4cf24b78a292e78a3363274d8bc53802e4974941c287a2acfedb2b53fb297152faeacdcc35b9eb0d19c3aff23460639b7905b9b4b4878900135c56390a4273ce8355969dd99b02f3e094d7c577877c288b6caf65183b34169fe66272a29b946ae08b063d3ae3f6052d8e71be172d3577c6be94613337cf75bf8f5d7cce140146de37063c91a5ff4d519ed8b9e0df04bf9afaa735efb41229cb3667fb079208df635817cd4c66332a9989de1aaa0bdfc455e866a9c9af84723fb3c7b7cfb48a19c7e78163a776e506a38d81f5ed4f1763e60fafe4c419a3a6be91566ec5d2e9fde3017ef9ca77ebecb79a40737100058b67a64e91a8590aba4bb0c31f27649e51313bba17ebf8541d5211b4a97e6cea29ebcc2d67c3ecd2728fa48cf8457ae26d22876fd1fb77d8941f58b0c3416598fbf1e4006c5b2f6c114b95d09afa126e9a4635c174efa410013b35d7e877c0ea3a43ceaa519855ad5d5b22ccb4f336c53ea7fa637599b34a8b06838a406f61ebc47559764cb5f75c5e9211dff50b3f57d6d5d72f275781664040dab5eb5f3a4114431d7701662eaf0899be1b8a56b7e222067a8ef5ca074b85ed352456ccb9e1233a2f34e353b618377a42e718801f8a4320b64e607f9a212afcd055120c88aca464d65f15eee033912061ae1557613118226c6971a9aa8df820d34d0dfcb54e2301671fd03053f78a074404d142d58e004212ccb8b9bc92a44e39c7762a94bb8d13f268363e88314e21ecbe22d00ecdc37dd5c76530a154769dd50f594cd14d648d4025eddcfec9dc1f199075c085b2222eac71ad2157caba79667f051c4344d8d5174ad0778b79c1c733fc045a84bf37", 0x1000, 0xa}, {&(0x7f0000001300)="2b38aad6f13b26fd3b5f486632d68669e0b3e6ae4226ab06a0057622420413556fdbd0dc8f8be3afe181799d9714c02dd209c56adaba519c68218f9c71849311d3e06e8fb6dfa730ff1dea6b50a8c6f26124c1ae406d6ec749bc45c6eb00fe46b5965101b41782984f10e1b95a4c24260dcf8bdb6a12f0bbed2d8530f91b8ff45b20cb13caa25826bbd4592f88ce54a00595b27b19356b37647e9114e55eaedc2199e4e9a9bb96673e2fd25716f0972bb5ae827494560fac238ed4dba3e2ac71e872b4d32cba8b7fd3481207f444d52c35ce30660c39f065c7eb81765f8c0175c6101ac97c3e1a072c12156a3d85a669bb9476138f2e35c9cca9cbd27cdc7a7144adaa0359f60b39b6f26f844c7bb5d15c995b3146c3379dd5cf7fa117f618eb02dca4caafaf81da72b2500cf3dcfe26c40a21069d047b87bfe2bcaf747f8b80180d4c93152b52a749c57db2692578c9d7118869f22c795a7a8a246ef6911727de25991b248d226623a84e57a5e00c3e9d8c6c2830dc6f03fe9050bc6f45ab5f682213a9536b781f6af5c6444c837247d77e2746a2bf6c607141c28f53de9a0e8128cfe2b0fc88224f9cf8d3fcfedfce6764ba9a370a3b3089682ca2ad28fc20d85a1258d3aa44f0e0b5af358ab8390da20194213c9e64360ccc68e65501418a7b59d09886dd6a435d51f2c57b31ced704c6532c9534f8d699d0604e32b3b03b2448a8697cc56dbdfa1acab8919eac893e082a80cabf26ac8e2d8f4594a6c8861fc1279b57339f3567b2ee99328db69d9e240a513c5cd0d8a42c2bb68bf8f9416a9cdf39506e7b070081aaefab79d910405039dadb620fd28629850022c09fa40181e779a51829b5bac3f157457cfbf8dbc4d3db41d093c36c9acb915bb9367b196e69fcb4148c5084782de7d02f737e682d8ced63a507e140fa9238c9e0954527450ddd2549f06b7e5cad123819d0fc3243d70f4f1fc3d2df9562e4d4fb449465b9656eb2baa28a406a2286efd14f0af063367c6ac465311e65e6a8511aad942d6e145fc395c4200a66fbf0b4aaa1461f2dd5e9cef114cfc2ee66d8242a0ef071e9affce72c9c36066b28773fcadf65e9a6bd3cbf8c72904ccff66d9a3d1095fbf3db573b553efaf4a13583896ad2fe55502733d547996620e8294e2534027dadb8ed87905663fceaba97683c3162b5d6e1b06e68863847b0cc5426cc26ea1ebdea5393d1e69bc6c4f6aed27bd792fc3d5db22d3cddb6ff853a65084d5d68fdd5808e828ac3aa0676bda6be6d5ae0fa853b7406002f9b4c334127a1675bb08c8cb4c0a119b64c51a7bdacfb5d41a96c56afafff0a9fa46bf6a2caa4a34f41af21cb5ffc9d7286e77b2ded08c5e039e221d2e2964a22bda11a912691cb9a30b72d030c8ae8e3e3d027e4aa322cc361841255b4b61f30f63661ccf54ecf4fb8236eee0f85e65614646cbbc162d603f876542b84e706225c269f320ed59f3ceab7c0fbff90e7037c5346fc058026d44ab396901418f6a08c4bc65d878b85caf54d5725e9ad10408bf6b812ada480f40b074301e483bc892dfdcd4b08c91cec6d87fd7e4a2c34d54333627b85e5c478b02926e86b1e52f7932af4543b4378435eb2bd65f90961dc121db173d3979504fb0622e0d2cadf5b9b4f33a27431b7679c4b976474c5757c369ccddd31d31b406bf0dcc68f9c032989d37b2dbecfbcfce6abed3e29541733545f2ee7fa0f219e481d73f4a7a0cc3035f28147be48c2fb5b53508ace96aad77342194779f7c13e1999e4baf1702ff0c524caba1d7313c10889ca2033daff0f9b74920edf2d68a04beb6646fe5ea5aa29f3facf9f965d1a975d2fba9937a1a9ac9d91c1b8fda7ef47da1bf67869554d349ab82ca4569bd3697822aaefd7aebac096b1c24e3c352610157b2d0fb79f24104de51eebd1ce8ee57df0f3fdccaf59bf3369f5c24793fb52562ebbbb09b9a765900258e81f22d40eac1c0140a77391f187cb29d7c5ad4b42b402e498cf51fb423305dac2f9cb9881a9bf1067632143588509ca0bb0631a1c722c47d3dc4baec3e7692103fdfa055e29da2f5960829ff04dc929ff39a74ff92308a06c6631ce32d99994f0476d899c1e9d017731647737acb028052ca3a2f6e18ec591cec64623a68441e9e05371caa54da55b0a277c416ce277b67ab5bc2d5f39791f3d7aa47a92175db2827daa4f6cb7c5429cd12b91a421e7d7647697fdb92f1151e4595f4ac72eb8538398d8a674dd2880604d381d5c7f635fd01afc577ccdd6610e08a4f12163a6111d8bee497f048ab2f50eb4887c08a680c1d4c60439a875db04ee0c7f5e6577cb62847eb312522d4ca20c35faab8c07d80ff46c88a43c30193647ffdcb8e452b55c90a29999daeb92a80fdcf2fa46b37e42eed7a0c5aaa49323ec4e4025d11294279dd0a21af1767408b18fe12562ee06c876aa2e8412464dac5815c9e4a2056c787d0601b68801aace4244ebe44d6c2b864c6890bffe70cc578dffc66a4e2459bd943fed8d46038b074afde3f083b5140520bf62a66bdd415f34b150bc99a04772779b681a9e62ce3771ce03a979116cd321c5c8c2615e660ecd071d13ebe0309a60d2ea4e43fda8fbbbcda1640fa8af15c2b1718b2ece98b051125de8169cd672912286229c00b1611da318843042d37abdd7d9b0c602e9589f37a7834ba83cdedc6c2434f442ac7dad9baa10201d757251cb58ce09ca97a1ef41d0b3d8315d73e25de5aa4f2c08c7f107968d7b338eea83a0b714c7e9a331cd202ad71931854dd1d35491b9a870437cab81aa1a935a2823ef27d1d5ac802daf1720e47d4b0e299d84564a8652edc13e499d950e79ca1ac3bfbb039a21d0fbca8478f1be1065f71fce114fcf65d3ee9ae585d03459d5bcd8b1b11ad519dfd7b50ee44d1287b20f0a7fe93dd5c53dc4ff24ff1ae699d9efc170bf70bb0bc90005a3a89c3d6a59da5dbee465c4d990ca8604b3ce3bf10dd33d56b47813d4cc6f42df7326a5f98802868c57be318ad9c02d927f3f60cc178b2fbf82bf9bbb3e2b0598352fe1e3c451240d449076089fba8331dcc96a230db375d9255345452706ddf863d8c873a10d4af83f36f68a2be5da0d9d5016370278703ad9b281b03a106ce229f9348c501ad8cd20bb9e79deb1e5569d337e99f35a14d50cfc0695ac5f50fc0ae722e6f6dea6d60279ff214e8c63a9c3adeb565a02962529937ba08934c11a0282e8c3d65abd5d5995ef2ccae0d8bc7fbea53d5353cebf94bcf46389bf3cdb0a56e2c980738d7acba2904a2191669734473b194f29b93804fb83237295dac908a11f531157f5c326487265da0b45f188f60969f0a542ee7de2d691301dca4d6e01f395afa1122ae4fa7c9fdb176c26cff7dbbafea9c1e933c39b73ea0d727e4f18dfa73f8e2797da21226af3affa0942af414eb7e616eccfa5efdc176cc1a044c8a99abe6d8560276951ee41e3d37e5c7281788863bfbb836e058f3a7cf737f6b4ececa9949bf75c75b3321158b484665a3b07060ef1b27ee6be88d27ee98dd9e9dbba78d0c7380a003fb31259fafa0d2a04975847a9ffa40b4497c33ecd345c9bde49ca3d607bcf78bf83687a3c57a87db577ad5afb7571207f935e9801029398f02a8a242723504d6464a6066bbe8525ea3df1a463b44ba14f1078d1a9867bb2924a42ecad10828b4e71e4b1df775e161be96dd517b0c6c1694360a490bde246066f610f74543e4c48a97fcb024f1da35ac8528753c445ba145c7691255173e27f8ec90828ab260989d937ea31719836b1b99600fee607952ceb6af853a3a67f199a2815a5fa52947f7fa79d70746f80bab76dfbc439d93b3d1d5d83c247a5016b097b0ff0167ab5f9de4f680f777656800378d8531db6f831f15e17f1eab4483d00582b1b3542f4ef5d4255afc656440ce86eeeaaed8b504566b9ef515dd3d69da6a4a340e9369a95707c9d4c6b8473d2e0c13b773a2d5028fa94d45d6551dc0a059186281c31109a5d4543ef9e351132e4859ffa331f57e310c3f70376a5a80be01b987a652e4bc39d9ddc7a6c346708ed4dd811d6a3fe2bd7a5a5cce1f946d9f1432b327145b6ee34233860107c87845ac32fcf081032b0d269bba60da6006cdb3ce0021f67d50536eddc285998affbceb783412da6a92cfc6f11b33a12b789c2108cc3252f7afa06f7b0eadb99afe90a406b0322dd2925b09d71ebde7562166a598026a93455db1934c9aa923f80bc6ab23df823da1628e4ecc2e65f8f55fec0929f6f2d3ed86224a05920339af696f5e66f18ebdb32d107ca04f6f48e00decb56f44ed156dc3e87498d6eaed0544e2609635ec4583b29d0ed74d5421f715f7c745c32d3b0e1833a524859c4bf8ce411148338a603ef986cdb2ed1c88711ccabb44cd704345f0af66abef110a0aa3f6428c5981e7173e287dc6b10d70712b1d32aae54e14e62819352e1fd745fafbe874c3ea0a391c44a4dcc243bf4a86db20f7fea532056759656d9d47a2c32913e5e7f9f944ec0b6e67e079663a40b2afa3ebb6593c4b8f51a11ad4e8912502da0f798283c8ae798bd5aab876dcc22a01e4a1ab5bf416f25d3a47b9fc10882d02b68f1ac446b6448b151ab5a1a1e74be0e8572dbe81e2c64ef5fce1e337e95410f95c1918677c26bc4cd1df3fcc6b3b390bf0a8b6a6b7f5bb178a53a79657549b74cc61b2e270d94fa9b0a0bd413b03c5dc935f97ad979511a7939fdeb4b99a075d854c87ae9cbe2d2e15144320e0cfd8d3d3c2fb97b9af24ddbc18bf5270d94fa3a995e3963547ac5c4e5bc1cc5e63e50e40768aeceb907e35e2428d6954ad9f3720ea1e88131775c1568b0474e5169b54f0d745ad1b42c228f91bbc37105db5138ae791e73783985594edc4b1fd43e7159f6f905c3998453845a8202970b14184716cd3b37c2e4cdc0b7793083592a1fe422ca998241d6cde1930c97ea54a6fbe27ae9bdd0741ff73c6021ad6809efab6748f4cbab40697f9e2ed3b4b3ce6f8cc609b4098ec859605e71815845361f04202285b7b5f1bc72bb7d07ce96769cbed12a0eae4894a50b4eea9019efc78bb311ccecc4627ce8ad2f65b59d13946ca610062d1d55efa136073b1f5c7aa197600778c4f5b9c22e07723a7277cd04a3f274ad551a95ad6bf918dfb77f8428eb5f512ee730904093010e51546aec1934655a48652d060ae2d7d0d2fa6af606aa5668cf41759962b4b1af5ec17407db357ac9d3451a5dc14d98febe62844a82d2860584867e53d2832fef183fecebca14a29a1e8f1876367b0b30ef6b5a0aaabce842f56aae8a9943771fa2b4ee8f3217b16b23c26e2b478b239906ce00405707b67acccd0a14450a76d011da4ee0f9474d2a06dd438c6127e786359178c0dec8ad482b9c78c184e36a0eadfb94a973d6169c485f0f9e4eae171d42ebd4f13795e7d886ea501e6d674a86eeac999bbff2f4a5bd115728ab2d39588980d312d1a3f119ecef4c49b9df0104256f9ef2bcb02d2299ff3cb72486fb246637382a809462fd0017c09af05ee49e52591cf4cde038256c5d0f3d243a2e0c1a25681a2977fe9a54c23ea658245c11cdbd4503977b83ab304a2a417b359603f391cf81046872b7f88cc0b5500f285a89b38a91de7d0d1f64bee9d3cd974715ac3405d32a1bf8a903cd5dd17d1ada3058c600a4e49d2ff7e4deece002f659e0cfea033ff9e767bfe07e9322576a1bb455c93f061ba93f65f3ea40824ecb64c4ad5cfa221e6ba144230ba1dc11b5", 0x1000, 0x2, 0x80000000}], 0x30000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000040)=0x5, 0x4) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 00:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 417.684808][ T2480] usb 6-1: Using ep0 maxpacket: 8 00:31:17 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 417.728217][T15581] overlayfs: unrecognized mount option "uppepdip=./bus" or missing value [ 417.764648][T15581] overlayfs: unrecognized mount option "uppepdip=./bus" or missing value 00:31:17 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x2802, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0xc5, 0x20, 0x4000000}) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7570d3ba726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530"]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 417.820913][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.849679][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 417.902113][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.928929][T15598] overlayfs: unrecognized mount option "upÓºrdir=./bus" or missing value [ 417.944640][ T2480] usb 6-1: config 0 descriptor?? [ 417.966864][T15598] overlayfs: unrecognized mount option "upÓºrdir=./bus" or missing value [ 418.024780][ T2499] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 418.300577][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 418.412131][ T2480] hid-picolcd 0003:04D8:F002.004E: unknown main item tag 0x0 [ 418.420936][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.431929][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 418.441045][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.449825][ T2499] usb 4-1: config 0 descriptor?? [ 418.480558][ T2480] hid-picolcd 0003:04D8:F002.004E: No report with id 0xf3 found [ 418.488183][ T2480] hid-picolcd 0003:04D8:F002.004E: No report with id 0xf4 found [ 418.630502][ C0] usb 6-1: input irq status -75 received [ 418.814236][ T2507] usb 6-1: USB disconnect, device number 27 [ 419.000555][ T2499] hid-picolcd 0003:04D8:F002.004F: No report with id 0xf3 found [ 419.008329][ T2499] hid-picolcd 0003:04D8:F002.004F: No report with id 0xf4 found [ 419.135508][ T2499] usb 4-1: USB disconnect, device number 13 00:31:19 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x400c00) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4001, 0x10) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="23213a5c202f6465762f6d65646961230020331d72d980656469612300202f6465762f6d6564696123000a50b42d749741792c35ceafc73f668d0c8e5f553ffbadcf626c48e48081f1051230bf8326040094c2b8a0fc86cf8805c871182e488e2c98302a38e79bf883fe6f2503ed6f82a8d1756a5ed324f7dc200c13216e214a2708120937b27d3ece3c07944f2a66cfa6996a16201e078f75400630d467b455ebad2ac3bf064f3a05ff38a5b8a144f1de757a2a1a2e304e73b03a05fbdb546ff069d916d913c298a1afc4eb723dad6242d340bd13057ebb7c0000000000000000"], 0xe5) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:19 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x200, 0x4) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") [ 419.450247][T15649] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:19 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:19 executing program 4: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x60000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x99f4685aa2aba39}, {0xffffffffffffffff, 0x4}, {r4, 0x1001}, {0xffffffffffffffff, 0x3080}, {0xffffffffffffffff, 0x30c2}, {0xffffffffffffffff, 0x2090}, {0xffffffffffffffff, 0x1410}], 0x7, 0xfffffffd) 00:31:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7797f98aef6d265865726469723d2e2f66696c6530"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getcwd(&(0x7f0000000340)=""/102, 0x66) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 419.630442][ T2499] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 419.694170][T15664] overlayfs: unrecognized mount option "low—ùŠïm&Xerdir=./file0" or missing value 00:31:19 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x80086301, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 419.742778][T15664] overlayfs: unrecognized mount option "low—ùŠïm&Xerdir=./file0" or missing value 00:31:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d1a6469723d2e2f66696c654c2c6c6f7765726469723d2e2f66696c6530000000000000000000"]) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x93, 0x0, 0x820e, 0x80000001, 0x1, 0x400, 0x4, 0x7, r3}, &(0x7f0000000480)=0x20) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x180, 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x101, 0x2}, {0x7fff, 0x8}]}, 0x14, 0x7) getdents64(r5, &(0x7f0000000180)=""/101, 0x65) 00:31:19 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 419.841417][T15681] overlayfs: missing 'workdir' [ 419.856910][T15681] overlayfs: missing 'workdir' [ 419.875028][ T2499] usb 6-1: Using ep0 maxpacket: 8 00:31:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x80404509, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 419.990488][ T12] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 419.990748][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.026756][T15693] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 420.045833][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 420.059829][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.069573][ T2499] usb 6-1: config 0 descriptor?? [ 420.240471][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 420.360558][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.371527][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 420.380921][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.389940][ T12] usb 4-1: config 0 descriptor?? [ 420.561898][ T2499] hid-picolcd 0003:04D8:F002.0050: unknown main item tag 0x0 [ 420.631210][ T2499] hid-picolcd 0003:04D8:F002.0050: No report with id 0xf3 found [ 420.638859][ T2499] hid-picolcd 0003:04D8:F002.0050: No report with id 0xf4 found [ 420.780364][ C1] usb 6-1: input irq status -75 received [ 420.940420][ T12] hid-picolcd 0003:04D8:F002.0051: No report with id 0xf3 found [ 420.948120][ T12] hid-picolcd 0003:04D8:F002.0051: No report with id 0xf4 found [ 420.967750][ T2499] usb 6-1: USB disconnect, device number 28 [ 421.074954][ T12] usb 4-1: USB disconnect, device number 14 00:31:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:21 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0xffffffffffffffff, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x7}, &(0x7f0000000200)=0x8) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/101, 0x65) 00:31:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r6}, 0x3c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003200)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003300)=0xe8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="361feec71191086fd0053c789cef50ea463501080cecd3c98ef19e558e37de477155064bcb88a7c14b963c6786ef3804a60a579b3a8f3ae19cdbfc6b7f43efb8a92741f3f61d640216be5d4660152289d651ebdae768dd94b0932fb69fdfe67c7755b4541d4d87e3b0d7ab6d9c77d3725346300b536057b3932066039ecf1b74e94c79e5cc9b129efb55fd461a5f55f9958ca51bef2d4739a4e2367c9bff520a4d9ed442fff0c5cf4c5134214df4b6d5e30c0f56febe41d52524c0b1ce3efe73c42bd623", 0xc4}], 0x1, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="6bb3beaeaf1dec712940177b1c03aecc7c4fd1a375b978d016edc4046a0780aa03cc5d660da56bc667f410915fabb6f7d2c813aac9e8907396d7d3aea3cb2ad6d3eb705ad6ab928bff5aa50349bdfdd6445704da25", 0x55}, {&(0x7f00000003c0)="16a4448c52ba11edb65e98566987a327cf1a10bab7aecde41d7f7053602e018ed489964fe4dfcb1a16c51bb5828d9f65b96e2042909d3c7e3ea81aa8a30144ce1c45d6cf35b06d306993123b715f290187b2b2a2cca80be9eb1c26cbfb99d9", 0x5f}, {&(0x7f0000000440)}, {&(0x7f0000000480)="2db45d1762dd86dab9c89cc874582935679c866ed1f834a490a24e585c32e335791a3f72bbd464e3f67f53371f85918120", 0x31}, {&(0x7f00000004c0)="f56fbc97c899c73b51e92e4faf9b1909bb8b24968babc68a6d9a3a18fe131408b5876a", 0x23}, {&(0x7f0000000500)="210bbc37d27e00ef1518f8ae04ef698ec66326e324bfe58e48ac83dea0a29901009f09cf39a046fd6d738efe4a828a7335b9510f70f4d3367582585f882c33cb7b1528e59301327d780fc1e89c48000000000000000000", 0x57}, {&(0x7f0000000580)="d126016b89295fe858cc1eaa56683d0ebcf712707e8c84d4b67c5e141affbae1275623255393dbde565d712dd7d23d864a95ed7232f3e324ab7db517a705737c341cb9fcbcf565690da1eaa673b2628426ac61ad9775d5f2c3434e66db54f6500e804288f07825e2298a7bb30bb887615639d5c85524d104f73b1860accecf9490085b4894cd2ac0d4965804d566d3", 0x8f}, {&(0x7f0000000640)="c76f2ae800cada2104a238fc14fed6569ec391e0a80da4cdef33ae8ab830f7e2cfa404448d9ea6bc189db47380b04e7374d43cbbc3e8b01a99f9a2f29d9fab411f76c8beb7936e48ceac6571d391e821b0931a44c1", 0x55}, {&(0x7f00000006c0)="c65ef028a12940070ea618a5f5bb2ca30297b0e115faf8012a9d2ac4486a3d142bf01df3067eec3733a7d6509053f8e92cc9604d3b052167c0fa01f1235ca764202a3ef1d2a552822dcfb8de93368359a72e2bad16958b25ba41539209876837cf6f2894bcd2148a8541a0e4c57f79c859997457d0e2f5790c90ae26495f8913282e32f56bbb6cc4", 0x88}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000000000000002000000010001000000000090000000000000000000000007000000831f567f000001ac1e0001ac141434ac1414bb00000000000000006401010189171f6401010064010101ac1e0101ac14142ee0000002441c2811ffffffff0000026264010101000000060a01010000000006071bafab6f976f60429562650f0aac1e0101ac14143effffffff94040000891bea7f000001ffffffff7f000001e00000020a0101020000000014000000000000000000000002000000ff000000000000001400000000000000000000000200000000800000000000001c00000000", @ANYRES16, @ANYBLOB="ffffffff0000000000000010"], 0xf8}}, {{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xcca9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}], 0x60}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000a40)="4c6d34e2e3c3d0ea5c94efbd3dbeb3897320409e995648b43602919d869b46c3239023d3051d8bbfc68a", 0x2a}, {&(0x7f0000000a80)="8f70e18339a1c5f83ff83a25e51588275f2ed97eeb29703318e69ac50a834a0508d45cc8705707b371822fa12f4bbcc3e6b0207fec2d", 0x36}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="003e10d6bb21e501eeb1d6425f7653de3e17bb978438155f994fa2bfaa521df93ff14f856b74babc74cab25e19f347862a4147a83c43f0d06e1aba8c38a54b9502ad024ea99386a1d3ef28aad113b4ce3884bcbf806b4747a678f3958c823200b99ed83414d9b62d81755a462f11786037effbf49ea75179ef02ed4f9b92c3aab020c00b826c4543be282aedf95b28f7cc258dc68f745ad8ca19f983fe5b4f6b2df9fdd24e59156640607e56f37c46df719ee75dabdbce1c938f770ae3dd12be95c15f92af1f34d9ea4ccca24b3d979fd7e8301260e4", 0xd6}, {&(0x7f0000001bc0)}, {&(0x7f0000003800)="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", 0xfd}, {&(0x7f0000001d00)="34636eafd0fa41175433a5e5c276f59b8f20094fdfc083d3e2af5806292bdbe33d6f68a95e9b45a7681fe5ac60d4bd4530895f6b4e43f27e2ed79d9cd1f449a46f1e2158793049907452be4f64f0fcc33c16c252cb21de55eac2ca00cd798a12980e0cd7783945c72be312f4b80a3874adcf47de96c087f97210f66b75b7ec08b162117e07095df555e84bd2690ffd19f786886d5c80c72d340fefe6", 0x9c}, {&(0x7f0000001dc0)="c9abb16b6bf52a2a61518b70f06e81fbea805325def8a5ee391324ed1d2bb3eea4b010e96dfc3fd519adc63a99c3c13a376ad60dd584b0036be1ee676caa60a91dbce8bb3630809f91fda1334ab62544a1a08b447038bc0d97f0dde320371a5a8a2eccc341a82bf5275d0a87c8b61ea06ff75d5b3bd45ec0d18baf0c6fffbbfaf3f6df8c3749dd92d12cf7159966a882ce60834fd94746f9f082373b793cd7dfa0234348f52caed6a19e62b187e89d9794e106bdf840a942aa74d1280b8abceed400c55e447777bb9ac4879d1c", 0xcd}, {&(0x7f0000001ec0)="a4bf936b6aa46708b1b9c3a177c0a2772156ad77a9ecce7e2405825be132af839bb78a33fb447e9307b9a524a3c2e159134bc237861eb8c944443562e8fb5a4bc540bf1eb3a7903463c38f3aa3d44b547ed01d57caded321009ce384cad521f333e02fd9e2f43673d763917e73557e426de19a1bd1052dabfdfc2e416879c9b93d8fe7ec96db265c7146794502e787b250405342a1b6358b41b49feedc82a3251ede991b00c8184535c0", 0xaa}], 0x9, &(0x7f0000003740)=ANY=[@ANYBLOB="14000000000000000000000001000000563b00000000000014000000000000000000000002000000ff010000000000001400000000000000000000000100000091020000000000001000000000000020000000000700000014000000000000000000000001000000ffffff3d4ea5b55da5c5d01ce6c4bbc47313366b13855d50fbe3b3631530ce"], 0x70}}, {{&(0x7f00000020c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002100)="e0d19f9be5a7f1a53b5f39cbf850b68df282c197dd19b7ea8280577ef50a153d05fa4a9d4a1d8ec6480492e714283cca05e90f71d09f70014b7de8a8abb618c6edde4cadfca21e2cd67c53f3b9d8e3ac2b8e0e085a77f48894bea4952a0e1403a7fd0db3070e362f62856de3d44c9797eded575f46d583f3ae0dbf014d18fbed8b65cd9411934ffa82c22aa496f1aee1ec512cc8bfaf63e78352983af469077751cc5ae00ceb14e40b479364effa53e1c00588", 0xb3}, {&(0x7f00000021c0)="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", 0x1000}], 0x2, &(0x7f0000003340)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xed, 0x0, 0x9, [0x6, 0x0, 0x401]}, @timestamp_addr={0x44, 0x54, 0xf1, 0x1, 0xc, [{@multicast2, 0x4}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x400}, {@broadcast, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@private=0xa010100, 0x2}, {@broadcast, 0x80}, {@multicast2}, {@remote, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x69fa30e5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x108}}, {{&(0x7f0000003480)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000003580)=[{&(0x7f00000034c0)="cf9b75bfacea9a8ddfacc91ad1c30754917af3462f1a0ec8ca7f1203b82a0826b1453958cb8885cc920f194e1d", 0x2d}, {&(0x7f0000003500)="357bc1a68b1bad634ea149748e518821d9dc5a45b41fb123654f7ec654b1343773546520c1599c3b0ce97c71999a8ca63b544f0047", 0x35}, {&(0x7f0000003540)="02559d2060d8613e1e865502e05bff938dabf02679e2d1e83d10edb01853c16b29", 0x21}], 0x3}}], 0x6, 0x40000) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000180)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) [ 421.660980][T15749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:31:21 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r6}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r6, 0x4, 0x0, 0x2, 0x80008000, 0x26, @private0, @private1, 0x40, 0x80, 0x5, 0x6a}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 421.745804][T15750] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 421.770450][ T2481] usb 6-1: new high-speed USB device number 29 using dummy_hcd 00:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getrusage(0x0, &(0x7f0000000340)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r2, r6) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./bus\x00', 0x100, 0x3, &(0x7f0000001600)=[{&(0x7f0000000440)="f036c8b897a16e9a413ce4e35885615b9ee20f216789a1ae4455c22dfd83d24027f5177aed17e29eab9a3e326dc1f034526082b45bfd36272de1a90225ed07757db7020592d786d1e9b267a6287846d95728bf36e951d8e88f50a80060d8228dcbcc3613b2b8402e758e0601ba2a43c82c9739069d5697ad117aa24bfb90e566baab6b7802a4ff4cafd2a24ccdf9a1ce3cb5146e9061915c0f28ed78fb9d2e862a5e463b86a4e9a02931c7b692f85ea754824574314321b6ba4db5bfdce5a94dd2ac72aec97ca677c287069ec790a49f65", 0xd1, 0x2}, {&(0x7f0000000540)="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", 0x1000, 0x400}, {&(0x7f0000001540)="153d172e1de678746504e7406bb1788e8921026c9b812fcdce6d808ad9d257e68202d9e322847b54c06c8bb830e059184fdc4c0060198c2963840bc361a1e0d0bf8f64426f361d9c596e4b549ed8f34d528b2dd05ad2705134fa6751a0507ba03696204d65d2200148c4c255aadea321932338eacdd412ea6fafadeb9736b380c3", 0x81, 0x6}], 0x10000, &(0x7f0000001680)={[{@nojoliet='nojoliet'}, {@gid={'gid', 0x3d, r2}}], [{@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}]}) getdents64(r0, &(0x7f0000000180)=""/101, 0x65) 00:31:21 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 421.973422][ T2499] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 422.035435][T15779] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 422.050331][ T2481] usb 6-1: Using ep0 maxpacket: 8 [ 422.170802][ T2481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.208138][ T2481] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 422.226274][ T2481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.230390][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 422.238735][ T2481] usb 6-1: config 0 descriptor?? [ 422.360516][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.374844][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 422.384346][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.396201][ T2499] usb 4-1: config 0 descriptor?? [ 422.731497][ T2481] hid-picolcd 0003:04D8:F002.0052: unknown main item tag 0x0 [ 422.800693][ T2481] hid-picolcd 0003:04D8:F002.0052: No report with id 0xf3 found [ 422.808490][ T2481] hid-picolcd 0003:04D8:F002.0052: No report with id 0xf4 found [ 422.940329][ C0] usb 6-1: input irq status -75 received [ 422.950339][ T2499] hid-picolcd 0003:04D8:F002.0053: No report with id 0xf3 found [ 422.958161][ T2499] hid-picolcd 0003:04D8:F002.0053: No report with id 0xf4 found [ 423.084814][ T2481] usb 4-1: USB disconnect, device number 15 [ 423.132677][ T12] usb 6-1: USB disconnect, device number 29 00:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:23 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) 00:31:23 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0xc01) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)) write$qrtrtun(r2, &(0x7f0000000340)="6478e8d61bc911370492f841400debfda595fe9f683c7828b89dda42e9a54bebd54db5766bd6c14fba80546c977a6853659943c0576e91059134e89ba5a07f3871bf099b65f7dc4f9eae77", 0x4b) 00:31:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:23 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:31:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c090) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r6 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 423.787118][T15846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:23 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x564c76a14072ca82, &(0x7f0000000400)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000001c0)=""/43) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents64(r4, &(0x7f0000000340)=""/108, 0x6c) 00:31:23 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8800, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) 00:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x2, 0x0, 0x0, 0x0, "b2e700"}) 00:31:23 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 423.960399][ T12] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 424.001297][ T2663] usb 6-1: new high-speed USB device number 30 using dummy_hcd 00:31:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 424.230227][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 424.270511][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 424.370501][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.381547][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 424.392121][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.403073][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.412621][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 424.422688][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.431325][ T12] usb 4-1: config 0 descriptor?? [ 424.443343][ T2663] usb 6-1: config 0 descriptor?? [ 424.921795][ T2663] hid-picolcd 0003:04D8:F002.0054: unknown main item tag 0x0 [ 424.991289][ T2663] hid-picolcd 0003:04D8:F002.0054: No report with id 0xf3 found [ 424.999069][ T2663] hid-picolcd 0003:04D8:F002.0054: No report with id 0xf4 found [ 425.006964][ T12] hid-picolcd 0003:04D8:F002.0055: No report with id 0xf3 found [ 425.018048][ T12] hid-picolcd 0003:04D8:F002.0055: No report with id 0xf4 found [ 425.125914][ T12] usb 4-1: USB disconnect, device number 16 [ 425.150254][ C0] usb 6-1: input irq status -75 received [ 425.326398][ T2499] usb 6-1: USB disconnect, device number 30 00:31:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x40, 0x12) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000340)='./bus\x00', 0x2, 0x6, &(0x7f0000001680)=[{&(0x7f0000000380)="440eb9412701a83dbd7c654179ba3171512a057efbc80d139f0ac4dafb898ff293b4dbbd08f1a4a8b06af21bd46152e248a632cda885af0e2614db2caed8168dc15642166dedf14ab1ca78689809262ada0c60e4f29f4524804153527b6cc63f17130871337ca2cd8879c623cc65b9ed7e69", 0x72, 0x87}, {&(0x7f0000000400)="f68f5ca845e1b9f2d7300718c40e32ca56dbe5d8d3cec60e0c72f71c8a7eb8e76524703a1cef2cdc7944138c185165a1a6357c5b385ccc9eb311877dd9e82758de", 0x41, 0x401}, {&(0x7f0000000480)="5b932822b3d8ce9ef7c8c26478edc9c9dd160692dfef28a3e9a57ab0b86bff4f8b596700c0e7fc339de33d5ebb2c226fec4a1ccf3d274e51fbf4ea6433fb7b19bb4a249c6fafaee5125aa3cec28a1adafe0a30487ece9af3153c1e1c3133571c7736d457390a26db9a84c77e186536600fecc849393b9444d169b4891e8c79465a19391f2837", 0x86, 0x8}, {&(0x7f0000000540)="ed33fc27223dd424ea85c5dddf146ef7db802bf05dc4944c170c52", 0x1b, 0x8}, {&(0x7f0000000580)="744d0fda9f51647e316fc87845fbb2b577a9404ac90ab9cc93fd22f0a93d2c185b363b7ce43fcd41cf2421c44ac6925fb68a523c60648f623dc5b1ef3e06db5d184e976c05167c2ccf47098b4444d0a34bd75e54cffe687c97875397c451850a9d601b7be6122ad38a0bccffcb607273fcf7c1f5c6ecd67ca9c5c2296ee8d5298b4d1b0d7b8d35e9322a37becfdc055062cff45a185d723c5f8db55258186faf04ba20175aaf367c63cadfb57b3c8d228f62ef72f9cf6e08b32ea0b21100a7a2ad429007d1682e3363370882cd47f3c75d7c3a850f1b7e60563c719dc0317ded57b17d0192d154c16962", 0xea, 0x100}, {&(0x7f0000000680)="dfba3a65643ff64e313e7476d6493904fcce58271296e201e730f97612db18f6c044926d39df8352111f78c95a3b26b8665fa43668a4a98ae447eb5499064d80ed465da8664af64efbd0abaa85fefbaed27db4b70bce0405c90247780fd9bb1b20e6cc3a4892883587f5733c2a45ec1d445d11f4f7d840cc3451b728b612b52529aeb16906b962de9bc6d96de46a19823faeae52faede4e2b1564a621a3d18666d721c336b658d63938a6d8f17d8dfa8dd81703bff573a2ccaf1559ff50b97e342cb337ed4732c8d442e69055600a5688151e9f712f259a8516a7cfff62d06a990c8b86461d14674673dfa6962b4a89809c2366acf5b4b27d6d0bbad96a9a1d61971427f39d4c30514f9274737133fd4ad5d88d459797b156b6272cb924d7f0e5b36d87f02ac1aa97fff9630d622c8e13ff98026b10a4938db30abf20fb55460d88f96658d3c9738feff341f50c1288b551130e26d432a0bbdf3ac2bd6765cc0421f95c1091a228023820c31ec5de995bb724a4a6bb85b017b83a728b4d48536e64f17dd87f5fa3076727dd084ed4e320a697bf2392bda2729615839236fbd55e2a43e108fc09ed321b832a77b68d4846c84ef4903b36e19a7d85b11dbef363377dbeaecd387abd1f11b77603d562613c955f50609e0402c58a4a0dc014dc19b2f6d2865a1d8b483173a3fa58b444914251efda1968b09054343434bcb31a803b1663472ca5c119d80ee3f6bb151c9b831c9a7bfe304b3798151874ad69902b2ce7ccc918887192e266b091579d5de87dfc4640ce339b59c76c7f35d8e535c4df05b77e07dee7be6f80dad9949c13355f2a9e358ceef83ced62b5c4955f52507459077942264925b4a316a83750f7a598f9b46a757eb1b0ab01cf81e0d0553a9da4ddf832aee0b6c20f44c0263db8dec958b867f81317fde7761c717d6d16e3b786711e23c2f79d6f8d50cde381f1d8fd3975b4adf93c567d6683041813684f56a38be37db8ce8f50e1b158656c70c7b9188d0e1c51354df23a8442e73f37b50c17bbffcc06cbedcf2321184471ad0014adec0235285bb66da619c59e2a3aab6874151680724ee9d90b1d35a24aad9858521a234ca0489db8fd68e357648340c8364477c331091f8a7ea56dd4a7c018403b774df83e2306b98a36aff43807f6f4f9829c6de2aad1dda7131551137eb660f26c5473cc81551b6b4ba4443ea974dc735291d2c92f598c8fd72935c94c9d265ce65d00e9d79fdbdbcfdfdd0f51ed68f671b485471949b0a464dcf40d6e692a35b74918d7327e69dcce65cb8b83b657c2cf013bb196a7edeac8117d8fe5dc34da9497f25673a36caa400e25494df60af685864650113e8e9e29a1d9e6acc3f67b48329f0368e6479b644c95bdcfef3cba86658d6bf44ca52a078c81bc12585ba3d6df8279b93e83d4a6c35f40470b2a589ef4fe3f159dc1e0c0918c2b727173a768a551b753d9675ebc2af4a5ade51616f0e75bb75d67af70736cb8b9d5cfe61796b505c743cea9c47c7582b0b1830f22b1d15b7376647a5d848f5438c94a48d4c39c051e82ff1601dbcfd86ba3a9ccc44998fa44e669640f61f6b950ca3c8166ef40d21e00b76e94f47482d5f46984e315fed5828cca068c7d276d3af7cfd9af374fe82090e0b63fda4dc229c23d7ee1a3cf27f085a20f44a662f1deb0e2d0e5f84be033fe740a93bf5d60cfd06a254c43e6be3b7c28468342776f2ceed6efcf50faf4f800cc305e200a822f214a78d4737ad18fba2af58c5b9a7a5e8c9937f5127e78a569ebc2c19b84e9a89fc9eeccb1faa28a1728bbd4929a4541194434a00d4cee2a8582f444e4e8b4e46ad924ff8ae66e1046b4cb28a72197656d66fd93151d3890f55f9223b35aabf07ee1e7921762bbc1b502e1daecc0e73fb0d620fb24e709a729d40a942322b99ee421be6dfb540e44085c0a33478e0a86040bfbe6f7863942d2af56ccf2c96b4ca18262d5eeb281db2d8b2613f2d92c42ee34a4fc210e2d089936443d3c615f6521fcb95c4b953283026e87c9452b6130e0233fdb36279bb955a10d4ae8fa919b538d563387db150f8d7b03d1ccf516ad6d06b70b9954d095db580416632f86b11a47cd6173e6321e41c170a53b1417e0984b70202d8c5213fe23f7c3e217160e04d45c06f65e300f4d47d68ad31904df74d4a47364a451163d83c2fbe2c7d38337243aba36539d0f6914212df6bedf61b861446d2219e9c6f69e402f654cdf6744aa1173f892893cddaa89a9b04506be48ca85be61a9dc750048d7989e3c013e3aeb2ecfe013161f44ebc4cb35af4e3c1057c917135d1b621d7faab66e3c23b86b1a12fcde534d96ba721fca39bb83311c87aa098ae479c599c75fa2898599edc5fd5756dd8c81a36d0393d8cc90aa18bf7ad18cf840b3b582287063991d9704dabcf77974306c7212b9b07f41a25b6bc7e4e4357459e915b6fc0008564fcb1b16e1f9dcfa7ee75d5fd1d4714dd05a7e70e3f704b15c16d2ff07f14ae2fd4dea2e073d23ff458ce7b5fd78ae26e3f5c6e0e5ca5442e6822e8347eb95d833e8e539aa10f86a12efdd4e8417157351f4b26a26f39bb53b5badcb9972512878edf0ac2135c7e803a9a3f1fc1aabb9ef9b5bf08c9f33f27137e328a06c153ea9fda688279747b91433f39dbc2d7a22d37d2a826f9b3c0cce4daba23930a9b3ea93b905355743fd716d5216e89851d7f5a1912f68bd380a16f432f65ca5c324d5abf222f429c16c46b63ec87b923c6370b55ab3f6e87c4dd733bb8777a7b6fb862f9e4a6de8dce10684cc018c5bc7f1a3939b10d693ff0fbd833f117976a338bcfefcee3abad2f7f62516a0ed1002d17292b94fbbee1aeb27777093a41f10e29d357c6b3a4032a9e3ef194186c13676442e2e1d5de2735b8afed288c34861a8c87f59543719522f57e61fa98729a88afee145ebf0a5aa4d3ab8bb2542aa7a34fa030f0a27986771f7499d6f3c4ead654069764c2c5153444a2797d7f9b00cc2cfed90305c9395823280853b0f2b3f2e3379727b2caafbfc0a3a617760b81041f666b45ecd29c18f99cda6cfd3573768834c4c1a5992796de74863f06707fd9eb76cf64b40dcb5da9343c1dd700666183b83e4cca8b29b6b48bbc6779004306874bee035d2b6c89f63f678974c32dd6649c23ff60384fc29fc68a23bbc32c9f4156c0eb523c372424d544db13133a05ecbee1b84984445b761cbbeddf08f99887b5068a6a712cba76cdae484277cdba19cb5f4f73cc748736da96131c1ea6a541d58f8db04d756a3b7fd018c49428a13f424473e487c9dac187dad1ba99f8ff85619f837d5cda0293498188d09b3e84a8f7883f2f13c49c388da48956087219aa32a877d795040a8c121ed954097d6e0b896ce760ab0d67c146113dd269503731728b31c9c15151edbd778f58e762b6236a8c0eb4258eefcdb37994032248fb05673f87d40118a8d079b3a500b02c1dd2a135d82da74df3712867c723995351005d21c0c63e06baf9f4c5972951a3703e59f315fd10ec396dd1f98b1d7f5f6c7f9f2c7654d57727d975e8f8ad40e1abfa5b69b67726bdd8946804a9a67046885fabe010fae59b08c7da0843a702cf31a4dc6146f9f236092db28625c2bee7861d12af052d009a84ef829aaed9d89dc1df7b869df7f03d71436f71e8b02ec8b3702f11281f91b6493c12f1e9a2bbc71028b0f59b415f0b8d790a53bbcac1aa685800bd3be4323d63db2a21bcf66a70d75b8d137d55fecabcb97a3bab0ddb230af6011faf59f5cd03e62240aab06df2002545d04a3c246625fc786fccba008bb256545a2f873b9dad64668a6d58eef99d019ccb024dea365c4b4af63241017c591caba43ba16700711c797c17b9d78c36889785d38b75fdc65ea00b3ba3aa55c2d7a99fdfe89929e5d5473df6c191f6e7a14461d2107c6c569b60b4ee682c19cd21c9bf1dc44283670cd185dca90cd1c9419df8ab9b239c509384418244ea09567c92e0bf71667b2d49943bfae9f0954c224111103e7dc33a4a7aa655720578df18a066d9da2e156246874b84fbeb33b47252e75bad63ed2d65f8ffd1f19b544ec62f3b600d6d19825b28529533977cc334b74f310858ba733d713d3edb9d0fb1aceb1ac4cacb69063c8a93ff3f367c634d3b75033722d08e8bc1f4fb43a86c7861c5c94ea71726f96e7e014068f88434a9de938a434bd7d53a08f0e076cb07a4cfa914a39751f4c36f69234b3bbf7088e2889305e6aecec1b72db74e81090ebda914c94e95dcc7eb83d53064230560782d63b753057689f6994edc4118098cfb4fe1cc36d329243dcf4e05b59f954aeb6e57a1edc51236f58f7498a975fc5dd226625ebeeaa2de9544591b6bd3e75b47b070a8ddd05e9fe9fe421f597a485c14ec4eb766e6b5a49cb03372539554b1733b8156ddff9706a9ca4a31f1f5427393605362e241486bb5076d3ca7d4c1cdf82a2775345244774734e14d14541b1e99d5e3bd7c32a3dcaaf6d7201717785eef2c328911b4083cac75ad72432e07eaed925e649494ed6c0da07daa96b70ab9952856610baeb2a5a003c139cb021261dd34671a77bd80aeb2ff5cc5e64ae6a26331e32769a1620eae3daa1431265fc967890138edfbb4b2b5e4f8d767bc74093403795e0573fb01c463f3a2ea64afb7b7cd88933f8ea223ee5c23bb342f12a78d971be3192009867087c58047b71cee669713934355c583526f0b8c51810133e669ac36ea34e7683c365095be1628aa32f150509076f94375313c39e0ea702ffe594d21c8e2530b40fc6522db80af21d33cfb9e1b2083ff137a5027dafec60bb53058fffe06dd99ff3949ef8192dd18498b0ae6e79bce71c1db70dc3605e96740dae7f4fbf9f5dd27249d2d921c8f58768f930c633fca6b8334c0326e2e61bb5d3f7aba11f8811ad105a04e9c320b597fc564b76f79c83401c856576d637ed59595839822cf77f4ec243d9aa08359984e4f4ba7f2350b684a39d0aa5467a2c316a3fe056f10cb433d76d8f41b1028ec6af9ccc8061d99f5704265330ae2e9e361956012d68a66785ef74d03310036b67637acbe7b6b15ccf5d9ab11bc0627a5d1ef2b187af123873b80265a0e5b8fbedcfb33fbcbc6fbd2ec1266b4b8c477a1d896a9a3550700efddc40d7d52ea766c7fdf2583f4f20790da8f021ac170cb9b902bdee8642d56788e8712f99cd75c9932178f16e9a1e473dd5854b4c369ed25c9b934e7b6453ab87004fbc9577f62fe548f924ddbb19e928e5a96f1c3e7ce0393f7e5710bfb457335ce65b227b0a2f51cb0a25dfb5a6436223f4248225dff0483a63a990ab3f10f69e2156bac888118ab795300cbc5ac21ebc34455b119e249c581d85d5cfb72b8def8ac13d85b518f56750793995d7cd8e3ba206fab26c9be15c15ad776b8c23af8317c31361c44c717c8b0d8cf57391978babc344e18a29ae7595e1560dd79c409a0eedc381ccf8f2ed32719142ea4d86c33588d168264c3c1565a396ec7c8bf36dfb45019677c2e6e602ae832f72aee4c007f42ac649204049ac23fa4fe787718a01049d2de5e3233a3be213d2ab0a9e79913647a9e0a4303de4e794bd00921a92ded13cbeb132017190ac45eaf89afe9ac3ddcb4c7ae6057a1b05b302ebddf8ef37c71727308a13f8e9600918ffa58ee85f540b1eebc572674afa163d8f3646f6b2fc3da007649908e8d2134d825b2ebd9bf4c7096f0c2f3926d4ffac1a3d34588f1d771417158d8598d3b9c2666", 0x1000, 0x8}], 0x800004, &(0x7f0000001740)={[{@map_normal='map=normal'}, {@session={'session', 0x3d, 0x25}}, {@hide='hide'}], [{@audit='audit'}, {@euid_lt={'euid<', r4}}]}) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x3, 0x0, 0x0, 0x0, "b2e700"}) 00:31:25 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x400000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r4 = semget$private(0x0, 0x1, 0x100) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000140)=0x8000) poll(&(0x7f0000000080)=[{r3, 0x1a0}], 0x200000000000018f, 0xffffffff) 00:31:25 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:25 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 425.881605][T15930] overlayfs: missing 'lowerdir' 00:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x4, 0x0, 0x0, 0x0, "b2e700"}) 00:31:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/92, 0xbd) 00:31:25 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getgid() r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:25 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000000c0)=0xfffffff7, &(0x7f0000000100)=0x4) 00:31:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200000, 0x0) bind$tipc(r0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:25 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000180)={@qipcrtr={0x2a, 0x4, 0x3fff}, {&(0x7f00000000c0)=""/103, 0x67}, &(0x7f0000000140), 0x54}, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r6, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000240)={r6, 0x101}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000019c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 426.140391][ T2499] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 426.185192][ T2480] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 426.234823][T15963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 426.390171][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 426.450224][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 426.510268][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.521335][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 426.532256][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.542411][ T2499] usb 4-1: config 0 descriptor?? [ 426.580586][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.594383][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 426.603537][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.614362][ T2480] usb 6-1: config 0 descriptor?? [ 427.081659][ T2480] hid-picolcd 0003:04D8:F002.0057: unknown main item tag 0x0 [ 427.094336][ T2499] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf3 found [ 427.102266][ T2499] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf4 found [ 427.150322][ T2480] hid-picolcd 0003:04D8:F002.0057: No report with id 0xf3 found [ 427.157966][ T2480] hid-picolcd 0003:04D8:F002.0057: No report with id 0xf4 found [ 427.221794][ T2499] usb 4-1: USB disconnect, device number 17 [ 427.310146][ C0] usb 6-1: input irq status -75 received [ 427.492831][ T12] usb 6-1: USB disconnect, device number 31 00:31:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x5, 0x0, 0x0, 0x0, "b2e700"}) 00:31:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x59, 0x20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:27 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000401c1b3e1b400000000001090224000100000000090400000103010000092100000001220500090581", @ANYRES16], 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000440)={0x20, 0x8, 0xb5, {0xb5, 0x7, "7aba4a02d4532759ef74d08dcdb122bd1628d7498c6764d27a67d5ab6bd18622427634d62772984e63c89f14c08b32bdd067d705079cadb271a4ff1b70f3f730222ff35b658874891a437f880b987af325c9947915a06e42afe486006f25137387c51fdd2910ece4cf4cf1137d8016f61fee4765d7450594b335849b37c578396f2664a34fc95399ae48b2876af3c317023cb6bf48c7ffb1f00d6b689d03257a59c05dc347b55995c39ad190a4b5d8f28a56fa"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f00000003c0)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x4, "1a194fd2"}, @global=@item_4={0x3, 0x1, 0x1, "238fe375"}, @global=@item_012={0x1, 0x1, 0x0, 'E'}, @local=@item_4={0x3, 0x2, 0x1, "374bdd5d"}, @global=@item_012={0x1, 0x1, 0x3, "93"}, @global=@item_012={0x2, 0x1, 0x5, "0229"}, @global]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x657}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4014480000007d30b91a46ce7bf67d6a33d16be1a7b5de8638101b3613572280053802a0f0af7711b8b18eca74e1b0d1ae325853eab025db083bba6d4900000008f7ffc91f6d2f2f000000000000"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0xd0}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x1, 0xe4, "adf6534edc51ab194626c418e438b2b74c5a10c8651b385be73683d9c9aec8d0158e0d12339fe6b88a024e1842b862074a5fce518dcdd0b366692b373ea2924dba4c5222a5e3d160ba09e9c76ba5bbdf8a79f51c9e2809e419d057a42f569183e3d6aa8f24e2fe55bff5b962f06c97f83ad64228a308b1188c27bf62f09be58e84c42cd513288490169750076e75ef24d9b0b9389831be0b1e50afd980a53aa69e5b4905516bb45bed5ee19b0e27b96589beb8cc2fc285e135d2946f409954936ed25ac8c49724996f12e7dfc3c83099d13ae56eb5236356815e7ce47b1107d8fc2494a2"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xff}}) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f12cb701930"]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000000800)='./file0\x00', 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000340)='./bus\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @local}], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000000)) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000180)=""/101, 0x65) 00:31:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x1e34c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x624600) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x6, 0x0, 0x0, 0x0, "b2e700"}) 00:31:27 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) poll(&(0x7f0000000080), 0x0, 0x0) 00:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x7, 0x0, 0x0, 0x0, "b2e700"}) [ 428.312751][ T2551] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 428.351890][ T2663] usb 2-1: new high-speed USB device number 2 using dummy_hcd 00:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x8, 0x0, 0x0, 0x0, "b2e700"}) [ 428.374974][ T2480] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 428.560148][ T2551] usb 4-1: Using ep0 maxpacket: 8 [ 428.640081][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 428.680598][ T2551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.695716][ T2551] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 428.708031][ T2551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.720361][ T2663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.721012][ T2551] usb 4-1: config 0 descriptor?? [ 428.740915][ T2663] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.40 [ 428.751442][ T2663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.764734][ T2663] usb 2-1: config 0 descriptor?? [ 428.773636][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.785711][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 428.803271][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.816493][ T2480] usb 6-1: config 0 descriptor?? [ 429.225649][T16016] overlayfs: failed to resolve './Ëp0': -2 [ 429.300078][ T2551] hid-picolcd 0003:04D8:F002.0058: No report with id 0xf3 found [ 429.307793][ T2551] hid-picolcd 0003:04D8:F002.0058: No report with id 0xf4 found [ 429.322467][ T2480] hid-picolcd 0003:04D8:F002.0059: unknown main item tag 0x0 [ 429.334511][ T2663] usbhid 2-1:0.0: can't add hid device: -71 [ 429.340896][ T2663] usbhid: probe of 2-1:0.0 failed with error -71 [ 429.349764][ T2663] usb 2-1: USB disconnect, device number 2 [ 429.410246][ T2480] hid-picolcd 0003:04D8:F002.0059: No report with id 0xf3 found [ 429.417918][ T2480] hid-picolcd 0003:04D8:F002.0059: No report with id 0xf4 found [ 429.438784][ T2480] usb 4-1: USB disconnect, device number 18 [ 429.549994][ C0] usb 6-1: input irq status -75 received [ 429.733923][ T2499] usb 6-1: USB disconnect, device number 32 [ 429.772476][T16105] overlayfs: failed to resolve './Ëp0': -2 00:31:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x9, 0x0, 0x0, 0x0, "b2e700"}) 00:31:29 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0x7f, 0x0, 0x3, 0x500000000, 0x3, 0x3, 0x7, 0x346, 0x38, 0x1cd, 0x7fffffff, 0x5, 0x20, 0x1, 0x5, 0x4, 0x9}, [{0x3, 0x10001, 0x5, 0x5, 0x7, 0x8ce, 0x80000000, 0x1ff}, {0x6, 0x20, 0x1, 0x401, 0x0, 0x80000001, 0x1, 0x800}], "182741eaedd08efda653be809c04952e83a4bb65110d1737bc8079ad2310a106b793318d70336018ee64ba2d", [[], [], [], [], [], [], [], [], [], []]}, 0xaa4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) poll(&(0x7f0000000140)=[{r0, 0x23}, {r0, 0x22a6}, {r1, 0xc020}, {r4, 0x285}, {0xffffffffffffffff, 0x1000}], 0x5, 0x80000000) 00:31:29 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="757070b8964ac565726469723d2e2f6275732c776f726b6469723d2e66696c65312c6c6f7765726469723d2e2f66696c6530"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:29 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:29 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xa, 0x0, 0x0, 0x0, "b2e700"}) 00:31:30 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 430.336665][T16123] overlayfs: unrecognized mount option "upp¸–JÅerdir=./bus" or missing value 00:31:30 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x2717, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ppoll(&(0x7f0000004380)=[{0xffffffffffffffff, 0x2100}, {0xffffffffffffffff, 0x1}, {r1, 0x20}, {0xffffffffffffffff, 0x1}, {r2, 0x4000}, {0xffffffffffffffff, 0x6018}, {0xffffffffffffffff, 0x2}, {r4, 0x4002}], 0x8, &(0x7f00000043c0), &(0x7f0000004400)={[0x7f]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 430.406124][T16123] overlayfs: unrecognized mount option "upp¸–JÅerdir=./bus" or missing value 00:31:30 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX]) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000100)=0x7ff) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x1) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) getxattr(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)=@random={'btrfs.', '{\x00'}, &(0x7f0000000340)=""/188, 0xbc) 00:31:30 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xb, 0x0, 0x0, 0x0, "b2e700"}) [ 430.570062][ T12] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 430.580010][ T2551] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 430.608047][T16148] overlayfs: unrecognized mount option "0xffffffffffffffff" or missing value [ 430.655692][T16148] overlayfs: unrecognized mount option "0xffffffffffffffff" or missing value [ 430.822845][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 430.830771][ T2551] usb 6-1: Using ep0 maxpacket: 8 [ 430.950099][ T2551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.961079][ T2551] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 430.971459][ T2551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.980034][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.987061][ T2551] usb 6-1: config 0 descriptor?? [ 430.995882][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 431.005539][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.018100][ T12] usb 4-1: config 0 descriptor?? [ 431.471415][ T2551] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 431.540581][ T2551] hid-picolcd 0003:04D8:F002.005A: No report with id 0xf3 found [ 431.548265][ T2551] hid-picolcd 0003:04D8:F002.005A: No report with id 0xf4 found [ 431.580158][ T12] hid-picolcd 0003:04D8:F002.005B: No report with id 0xf3 found [ 431.587887][ T12] hid-picolcd 0003:04D8:F002.005B: No report with id 0xf4 found [ 431.689881][ C1] usb 6-1: input irq status -75 received [ 431.714817][ T2551] usb 4-1: USB disconnect, device number 19 [ 431.875678][ T2499] usb 6-1: USB disconnect, device number 33 00:31:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r2, &(0x7f0000000040)=""/25, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xc, 0x0, 0x0, 0x0, "b2e700"}) 00:31:32 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:32 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x76) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/50) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:31:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0xc00, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000002c0)={0x1000, 0x4f565559, 0x3, 0x7, 0x2, @discrete={0x9, 0x400}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r8, 0xffff2325}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r10, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r10, 0xffffffff}}, 0x10) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 432.491569][T16209] overlayfs: unrecognized mount option "" or missing value 00:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xd, 0x0, 0x0, 0x0, "b2e700"}) 00:31:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000100)=""/103, &(0x7f00000001c0)=0x67) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f00000000c0)={0x2e}) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000040)={r1, 0x6, 0x401, "0f862aca2bc3e10bc47de1d1813f530518f6f958734f0dba9f451b"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1b0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48010}, 0x0) [ 432.646582][T16209] overlayfs: unrecognized mount option "" or missing value 00:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xe, 0x0, 0x0, 0x0, "b2e700"}) 00:31:32 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:31:32 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) syncfs(r2) accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000000)=0x6e) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 432.699964][ T12] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 432.714512][ T2527] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 432.798661][T16243] IPVS: length: 103 != 24 [ 432.875054][T16245] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 432.940260][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 432.989961][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 433.060150][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.075528][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 433.085390][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.096883][ T12] usb 4-1: config 0 descriptor?? [ 433.110944][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.123295][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 433.132446][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.141833][ T2527] usb 6-1: config 0 descriptor?? [ 433.611309][ T2527] hid-picolcd 0003:04D8:F002.005D: unknown main item tag 0x0 [ 433.650109][ T12] hid-picolcd 0003:04D8:F002.005C: No report with id 0xf3 found [ 433.657866][ T12] hid-picolcd 0003:04D8:F002.005C: No report with id 0xf4 found [ 433.679965][ T2527] hid-picolcd 0003:04D8:F002.005D: No report with id 0xf3 found [ 433.687614][ T2527] hid-picolcd 0003:04D8:F002.005D: No report with id 0xf4 found [ 433.772868][ T12] usb 4-1: USB disconnect, device number 20 [ 433.829783][ C1] usb 6-1: input irq status -75 received [ 434.018208][ T2527] usb 6-1: USB disconnect, device number 34 00:31:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x10, 0x0, 0x0, 0x0, "b2e700"}) 00:31:34 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:31:34 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/netlabel\x00', 0x2, 0x0) 00:31:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:34 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x11, 0x0, 0x0, 0x0, "b2e700"}) 00:31:34 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 434.647495][T16301] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:34 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312cec6f7765726469723d2e2f66696c6530"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x20101, 0x91) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:34 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 434.839819][ T2499] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 434.849935][ T2663] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 434.859446][T16326] overlayfs: unrecognized mount option "ìowerdir=./file0" or missing value [ 434.877385][T16326] overlayfs: unrecognized mount option "ìowerdir=./file0" or missing value [ 435.099822][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 435.110569][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 435.230071][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.230079][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.230104][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 435.245315][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 435.254873][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.267447][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.273182][ T2499] usb 4-1: config 0 descriptor?? [ 435.292065][ T2663] usb 6-1: config 0 descriptor?? [ 435.770963][ T2663] hid-picolcd 0003:04D8:F002.005E: unknown main item tag 0x0 [ 435.839807][ T2663] hid-picolcd 0003:04D8:F002.005E: No report with id 0xf3 found [ 435.847640][ T2663] hid-picolcd 0003:04D8:F002.005E: No report with id 0xf4 found [ 435.864762][ T2499] hid-picolcd 0003:04D8:F002.005F: No report with id 0xf3 found [ 435.872484][ T2499] hid-picolcd 0003:04D8:F002.005F: No report with id 0xf4 found [ 435.984243][ T2663] usb 4-1: USB disconnect, device number 21 [ 435.990371][ C0] usb 6-1: input irq status -75 received [ 436.173162][ T2480] usb 6-1: USB disconnect, device number 35 00:31:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x12, 0x0, 0x0, 0x0, "b2e700"}) 00:31:36 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) gettid() r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r7}, 0x3c) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r11}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="280100004300000226bd7000fedb986e0f5ded0de526b2c93b56ecbddf250a0000000800020006000000080003007f0000000800040004000000df000200020000000f000100403a2b26237b2d2b2f230000240006800800110004000068a0af1453e1e2cb529d5d63f70c3a000c00060040000000000000000c000400070000000000000058", @ANYRES32=r7, @ANYBLOB="0c00040001000100000000000c000500f85ca72b000000000c00040007000000000000000c000d00070000000000000008000800020000000c000400ff00000000000000580006800c000c0001000100000000000c000c0005000004000000000c000f0001000000000000000c000500090000000000000008000b0001000000080009000101000008000100", @ANYRES32=r11, @ANYBLOB="0c000600030000000000000008000300000400000800040000000100"], 0x128}, 0x1, 0x0, 0x0, 0x440c0}, 0x1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:36 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file2\x00', 0x0, 0x4) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:36 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x25, 0x0, 0x0, 0x0, "b2e700"}) [ 436.818629][T16388] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:36 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x80, 0x4, &(0x7f0000000540)=[{&(0x7f0000000200)="6209108a1bb2b9d6d615042e", 0xc, 0x8206}, {&(0x7f0000000340)="98f563e00777e3a01017e588d367b54db369bd42d8925b20cb8b0f4e0c7b5da6f688c5f7095ac1c11937ba0972d31d555c34dfb9aee05c325e843e60e8a6a6c731a630cdebe4f0b847ab875634dd318c79679bbcab198929824a7edf570a7293c7ccb81567ae1a4a49a020ce37fb79cc9e387bbdff5c639c8776677529809921a5f06e80ae6dec0419a983edd10f00f7e85cf95e84114260d500aaeef59a", 0x9e, 0x8}, {&(0x7f0000000440)="deec513a87ed5dd5a3fd5591461d1739c6df762f7d78869fa494b2196dc97a48ba8c695f444c25512f305be4b76672a5314460afe660401e32c88f2f6f59121a745b66", 0x43, 0x6}, {&(0x7f00000004c0)="223ba6a3cf86156c21ffe15c14b973371fe0693b09a24bdad1013bba831fbb2dac11576ce718aec9724c1d7f6c2c839c34de82b6df876177dd1ba29dc9360b5b7d0f021af543b568d2eeb23ed45105d89d42e7bdbd2b9203074fd46a3b8ec2", 0x5f, 0x3}], 0x4, &(0x7f00000002c0)='{\f{}^[[!)*[(\x00') r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 436.998580][T16404] nfs4: Unknown parameter '{ {}^[[!)*[(' [ 437.004689][ T2527] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 437.032288][ T2499] usb 6-1: new high-speed USB device number 36 using dummy_hcd 00:31:36 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r7}, 0x3c) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x118, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2010}, 0x4008051) r8 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r8}], 0x200000000000007d, 0x0) [ 437.086552][T16404] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 437.109372][T16408] nfs4: Unknown parameter '{ {}^[[!)*[(' 00:31:36 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:36 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x81) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8400, &(0x7f0000000340)={[{@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_lt={'fowner<', r1}}, {@subj_user={'subj_user', 0x3d, '#(#]}'}}, {@euid_lt={'euid<'}}, {@appraise_type='appraise_type=imasig'}]}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, r3, r7) lchown(&(0x7f0000000000)='./file1\x00', r1, r3) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r8, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000180)=""/101, 0x65) 00:31:37 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 437.259683][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 437.280203][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 437.361156][T16421] overlayfs: unrecognized mount option "fowner<00000000000000003327" or missing value [ 437.380407][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.400055][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.416886][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 437.431768][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 437.473186][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.491570][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.509023][ T2527] usb 4-1: config 0 descriptor?? [ 437.515688][ T2499] usb 6-1: config 0 descriptor?? [ 437.991124][ T2499] hid-picolcd 0003:04D8:F002.0060: unknown main item tag 0x0 [ 438.059682][ T2499] hid-picolcd 0003:04D8:F002.0060: No report with id 0xf3 found [ 438.067423][ T2499] hid-picolcd 0003:04D8:F002.0060: No report with id 0xf4 found [ 438.079710][ T2527] hid-picolcd 0003:04D8:F002.0061: No report with id 0xf3 found [ 438.087348][ T2527] hid-picolcd 0003:04D8:F002.0061: No report with id 0xf4 found [ 438.207411][ T2480] usb 4-1: USB disconnect, device number 22 [ 438.219586][ C1] usb 6-1: input irq status -75 received [ 438.407670][ T12] usb 6-1: USB disconnect, device number 36 00:31:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:38 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x1b, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={r6, 0x3, 0x5, [0x39ef, 0x9, 0xffff, 0x0, 0x1000]}, &(0x7f00000000c0)=0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000100)={@private=0xa010100, @empty, 0x1, 0x5, [@multicast2, @empty, @empty, @empty, @loopback]}, 0x24) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) sendto$l2tp(r7, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) 00:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x5c, 0x0, 0x0, 0x0, "b2e700"}) 00:31:38 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75700800726469723d2e2f62757313776f72cde200679e60ea9d7e867bcd86b9d26b6469723d2e4766696c65312c6c6f7765726469723d02b88ecf6c6530"]) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000f12000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/37) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) statx(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x4, &(0x7f0000000440)) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/change-rule\x00', 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:31:38 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:38 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000045) [ 438.991775][T16474] overlayfs: unrecognized mount option "up" or missing value 00:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x300, 0x0, 0x0, 0x0, "b2e700"}) 00:31:38 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b64697203000000000000002c6c6f7765726469723d2e2f66696c6530"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x288000, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 439.053136][T16474] overlayfs: unrecognized mount option "up" or missing value 00:31:38 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x78, r3, 0x0, 0x0, 0x1}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x500, 0x0, 0x0, 0x0, "b2e700"}) [ 439.231808][T16499] overlayfs: unrecognized mount option "workdir" or missing value [ 439.242008][ T2499] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 439.269980][ T2507] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 439.307315][T16499] overlayfs: unrecognized mount option "workdir" or missing value 00:31:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x80, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) faccessat(r3, &(0x7f0000000000)='./file1\x00', 0xe0) [ 439.493900][T16510] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 439.508387][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 439.529949][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 439.649847][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.661327][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 439.672067][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.682965][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.692361][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 439.706072][ T2499] usb 4-1: config 0 descriptor?? [ 439.722282][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.747857][ T2507] usb 6-1: config 0 descriptor?? [ 440.250703][ T2507] hid-picolcd 0003:04D8:F002.0063: unknown main item tag 0x0 [ 440.299702][ T2499] hid-picolcd 0003:04D8:F002.0062: No report with id 0xf3 found [ 440.307414][ T2499] hid-picolcd 0003:04D8:F002.0062: No report with id 0xf4 found [ 440.319660][ T2507] hid-picolcd 0003:04D8:F002.0063: No report with id 0xf3 found [ 440.327322][ T2507] hid-picolcd 0003:04D8:F002.0063: No report with id 0xf4 found [ 440.425802][ T12] usb 4-1: USB disconnect, device number 23 [ 440.459591][ C1] usb 6-1: input irq status -75 received [ 440.652635][ T2499] usb 6-1: USB disconnect, device number 37 00:31:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x600, 0x0, 0x0, 0x0, "b2e700"}) 00:31:40 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1080c, &(0x7f0000000340)=ANY=[@ANYBLOB="6469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65306fafa327d1540ae0063686ebfe787b9379840f274dc4f26edb50c1219cd5c38dcd2fe2fd4215ce6edb642f042082372f0000000000"]) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000500)={{0x2, 0x0, 0x1, 0x0, 'syz1\x00', 0x1}, 0x3, 0x4, 0x4, 0x0, 0xa, 0x3, 'syz1\x00', &(0x7f00000006c0)=['\x00', '/-\x00', '#q', '\\\v\xdaL&\b\x02\r\xa7^\xd5%\x99\xec\xe59\xe2\xeeWYd6\xf6i\x9a\x01j\x8ff\xadw\x0f\xb1\x9a\xbf@vt\xd9\xe7', ',:{+%\x00', '\x00', '\v)\x00\xbc\xee\xfd\xd0\xb2\xa2&O\xf6\xd4\xa40\xa9\xa73\x8d\x0f=\xad3T\xb3\xff\xd8\x8bD\xff\x81|2\x9dA-\xdf\xcaq\x8bJB', ' ', 'raw\x00', 'overlay\x00'], 0x6c, [], [0x800, 0x5, 0x4, 0xcb2]}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x68000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x30) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe9, "3f3f0a148bb6ac686da884bf14a265c7f5b815038452e032701a4e1614052fe6aef29006af5df462aae1a40753305915813ca6bd3f5bc86527677bb6b43fd5475997837a0b2e48a6e9d6c7af2d743a7c78cc7a07034114d5d1ffdecf33fca177727ab3c65d240b85e4c23aa2cb45133cd98ecc18eeb46e918144ae969b4a2e4b755a91f076d51783418bb9b6b70214e9450d3c153e1ac89024d80ae62b46efcddb7a33682b240291f47354848b053f44359847eab426a149766f515b9bb857873b982c8876e897e8c489ebe543ff604975e207203bff104b83dfe81e1b28f27e258ac7f91990c58673"}, &(0x7f0000000100)=0x10d) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000000180)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100", 0x1b}, {&(0x7f0000000300)="513abcbc", 0x4}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'syz_tun\x00'}) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/101, 0x65) 00:31:40 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r5 = accept$alg(r3, 0x0, 0x0) r6 = dup2(r4, r5) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r7, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="e1d3f7721f794e9452fa2249a365a524eb6cfaf6b49b9beefb76c5460d16db94d91e01e35c57289d8de2f5def7ef8dc5490e47bf789d6a1600cef399761d0b2e701e8af60455bb5f2eaa4f", 0x4b}, {&(0x7f00000001c0)="7044ac7373d656f0c7e0b1fc98cb06cbf938741486572fc4c7", 0x19}, {&(0x7f0000000200)="9ac113adf1bb0cffb423bd2c7b1950a1a138ee1b5636dc986fcaeb8afcb7ff8d00134bdb6f3b359b17f806d1299a7277feecba1af3453ce01ebf2c", 0x3b}, {&(0x7f0000000240)="f8560c873f90b3f2c566befc2febc42673c1eed89be1b9fe9931ddde5998060806b49497cedaf6aefe", 0x29}], 0x4, &(0x7f00000005c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r5, r2, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x80}, {&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000780)="9963b536e919783f2603b5f195246a7814c9d68e337ffc3fc28081af2072553e1e01f4411ea1b860af8887195f27512859d7cb53b39ebd8a310f2540c32c126cd43b98c860a84f732f9b1f8fe88651208e8d1c2902d8afd5bfa2f6cd5054c4583c2377c87ea8fd8c363b80044c640f89f210cbaaf312cd45025c068d34109c963b9276d568049c84281f4d56025ff896dedda05c47c3edb46d346661beb0553ecfa3d3d9ad396875b76d1adf01fcddf3c31983ba27270f869a14756049905f", 0xbf}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="ac7f5dfd9987b0551ad076", 0xb}, {&(0x7f0000001880)="b461b25cf5cf06c56307d240ef8e0908630550aa25a44dcaeaba2b9571e959a0a63f4149a841d151c38c01550573f85e30d60bc128ec378d289e1170007d8cc3cdd3ec1f9be07ae9d1b675a4cc022220135e3ea47927cf7b9197ca0dade23c0b502cf013031016232449cf058764ddd99de35cc6aa55121575eb1d417e2dd7cf377b2394e56306cc18b3ce7a43f6d6bbe68ff3d85a55a337bed5c4462edbfb16b2872537cb6ffa4ce4aac94f2698c5ff2b2174305a908627016743e3541a51182ba11913871a059cb7191c83d1f855d4880bbd36d9380204e976d2a74204b1d4bba65ed5a0c8", 0xe6}, {&(0x7f0000001980)="2b2f34ac74daba3a4dddc99d25313306ccf7cea97c82cd652bada515753e7d029e68812972326986bb25465456ebbf81bacbe44852afff2d3b5ff2e3fdbb335f", 0x40}, {&(0x7f00000019c0)="03a8eb441fdff7e254598b2b13197e09681d7a7aef327e5209258fa6ffbe2d01fcbbc63ee284aa8d6eb14a6714f5eb5845e3515f0313890182924e1ce48fea707a1eb9e2322c65e37cc3b1ec34abadf10188f63673a19db45c73bf0e83843c53918202bfcb9646e98b26d58524462a5b50b995f813dbd840829144d557f015ec3b0b105d98414a3999de3d03cf400b63bab05f", 0x93}, {&(0x7f0000001a80)="c1f599ff64a3819e48a2d2d4d2145eb227914dfb33c148c663274ad52f4ca8a99cb924a12cc8805dd66abcec2c02a689f764cd1f28e388007d6aebefe0c53e02c5e9f521c3d5f5b5086e8dff85e8cccbe211397643574ec39465eb2f1b8f169b6dc3d28d04d0bc63051511926a7c7e1a8a904df542fad7abb91cb3afc0c375f12229e7247fd67067f6b33664a715859bb2dc4fa2ad", 0x95}, {&(0x7f0000001b40)="8fa314c7a27b9f94e0a05c7577ae6fe735dae74fecb56453beae", 0x1a}, {&(0x7f0000001b80)="38d70f245b5ad3be5f2274750d254e1475783600b364fae7260c7e62c6a09300e7ac95f53dd01e45cf93b7b5e1ca060fa73c9aebf65e72daa857517f5267520dd66c22fdc2ce7717618989554d4aaf01624c9f4692c8988afc6ee15c6c", 0x5d}, {&(0x7f0000001c00)="da8e9fdfc6d0aaa40a8f82460df453c84c751640", 0x14}], 0xa}, {&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001d80)="de8a", 0x2}, {&(0x7f0000001dc0)="d3c76c0c8d524fa402b0ef0be7b33220797c48c53c39985d88de17b08ae6de692c3f12fb706a46655e4003a49bd4d246fcd592ed468e0a471ac2662523dcf02b59bbdc822506df65918e69fb1153bac04f185885a3b7d49f2fb9bdfe413340c7528e20afde649cb81547312836c5db35f64835f9683acb7e2d974f2cf1c446a2ac6103bdd01aa227034517de3f1a56ca67b179288ef64069d0df74d6588bd06ceb303900a6da96f1f9975c28543d452492156d249c28f231daafd1ddbce05301e5b6", 0xc2}, {&(0x7f0000001ec0)="579378e0885a4a8dee6cd111fc9b360dfa90471bbecefd9e0b96b8df0aba985ecaf27149d2696fa0d56bd233c9d9ec939f729160b319a4f1b5dc0588549d30dbb431df0f56159b20d4065aa111cb3b4d99b50a54613b74a1a8a8cb1fde1fca6385db6b325a", 0x65}, {&(0x7f0000001f40)="b2772b645f005bc1d492913a8d8cab4e378df6e8289e134a1df9c63346c50daf1a41bd4a819f6583a371ca547153a7fdd63cb0e112ee4e3aac25619eb5a289c923457a3d95e56e7372c987e731d647c3a389aec3fb18f15c6e4fdc109814cd467b55", 0x62}, {&(0x7f0000001fc0)="5bda68893656d7c4098dcf61443deee687ea8f85aa76ce77f4fa720a68200e9970351a367dabb89b12fcbd35dda19a0ac3dc0bd103da80c66535317a8ff9d143ee46018ab2ed4b9fe77cbe03fc92202671146d0eaef44102e4da7c00d1364bdff1672d5408c3908ea2fc2756b636d8437016867e95d0033b5b70f570074458952a0a53d976ff5627b79e247522500aa37318db932b7da2df5ea956fd14f27733b9ad69424cac15d66581f8a9bf6b7f2dab7671027bb0b1cba36948d02e9dbfc1133d57ee213f7e362550da70dd1585b78d2db7d348737b437c3b5b2ff7b62c2ad72b87d309ad3fb6652c6fa88d71", 0xee}, {&(0x7f00000020c0)="56d9b9d827c7ebd5721b95ea858455e85f8067b56a9f77be37aa36a6ae4f747181e147eec7e440bf1ae08a229356476c2aa16325da308b75352db2d1baae2f484e99b7ee93f2eac349c2996ad4eacf032b17d64f3171d0f256fa771d3b5bd400be61a4b1b633637d269714cd6343994e000aad777ed4b5d93d664d6dbd6685df9841c345015aedb6f63a6c7b494b4667", 0x90}], 0x6, &(0x7f00000023c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r6, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r6, r1, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0xf0, 0x4000001}], 0x3, 0x20000041) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:40 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:41 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r5 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000001c0)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, 0xd01, 0x3, 0x400, 0x500, 0x83, 0x140420000, r8}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 441.246051][T16565] overlayfs: unrecognized mount option "dir=./bus" or missing value 00:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x700, 0x0, 0x0, 0x0, "b2e700"}) 00:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x900, 0x0, 0x0, 0x0, "b2e700"}) 00:31:41 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a3100000000440004"], 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd84a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x805) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x4) poll(&(0x7f0000000080)=[{r3}], 0x200000000000007d, 0x0) [ 441.460879][T16579] overlayfs: unrecognized mount option "dir=./bus" or missing value [ 441.469590][ T2507] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.499996][ T2499] usb 6-1: new high-speed USB device number 38 using dummy_hcd 00:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xa00, 0x0, 0x0, 0x0, "b2e700"}) [ 441.719457][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 441.739922][ T2499] usb 6-1: Using ep0 maxpacket: 8 00:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xb00, 0x0, 0x0, 0x0, "b2e700"}) [ 441.849868][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.861304][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.883567][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 441.896375][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 441.923279][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.935273][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.946312][ T2499] usb 6-1: config 0 descriptor?? [ 441.955686][ T2507] usb 4-1: config 0 descriptor?? [ 441.961130][T16596] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.978741][T16596] tipc: Invalid UDP bearer configuration [ 441.978794][T16596] tipc: Enabling of bearer rejected, failed to enable media [ 442.074113][T16596] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 442.096130][T16596] tipc: Invalid UDP bearer configuration [ 442.096155][T16596] tipc: Enabling of bearer rejected, failed to enable media [ 442.470804][ T2499] hid-picolcd 0003:04D8:F002.0064: unknown main item tag 0x0 [ 442.549584][ T2499] hid-picolcd 0003:04D8:F002.0064: No report with id 0xf3 found [ 442.557366][ T2507] hid-picolcd 0003:04D8:F002.0065: No report with id 0xf3 found [ 442.565181][ T2499] hid-picolcd 0003:04D8:F002.0064: No report with id 0xf4 found [ 442.579440][ T2507] hid-picolcd 0003:04D8:F002.0065: No report with id 0xf4 found [ 442.675701][ T2663] usb 4-1: USB disconnect, device number 24 [ 442.679430][ C1] usb 6-1: input irq status -75 received [ 442.876967][ T12] usb 6-1: USB disconnect, device number 38 00:31:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:43 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x288781, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xc00, 0x0, 0x0, 0x0, "b2e700"}) 00:31:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x5, 0x521000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000040), &(0x7f0000000140)=""/207, 0xcf}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1f, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) [ 443.507532][T16660] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xd00, 0x0, 0x0, 0x0, "b2e700"}) 00:31:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800, 0xc20) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/247, 0xf7}], 0x3, &(0x7f0000000400)=""/93, 0x5d}, 0x40) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 00:31:43 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 443.699499][ T2499] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 443.719496][ T2507] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 443.753824][T16686] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 443.949396][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 443.969853][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 444.069772][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.080743][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 444.090275][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.101192][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.109379][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 444.118475][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.128518][ T2499] usb 4-1: config 0 descriptor?? [ 444.140417][ T2507] usb 6-1: config 0 descriptor?? [ 444.626146][ T2507] hid-picolcd 0003:04D8:F002.0067: unknown main item tag 0x0 [ 444.679420][ T2499] hid-picolcd 0003:04D8:F002.0066: No report with id 0xf3 found [ 444.687077][ T2499] hid-picolcd 0003:04D8:F002.0066: No report with id 0xf4 found [ 444.699412][ T2507] hid-picolcd 0003:04D8:F002.0067: No report with id 0xf3 found [ 444.707062][ T2507] hid-picolcd 0003:04D8:F002.0067: No report with id 0xf4 found [ 444.811710][ T2499] usb 4-1: USB disconnect, device number 25 [ 444.829360][ C1] usb 6-1: input irq status -75 received [ 445.028778][ T2663] usb 6-1: USB disconnect, device number 39 00:31:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xe00, 0x0, 0x0, 0x0, "b2e700"}) 00:31:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000005bc0054451dd000000000000000111c71de5fd1ac4adfa638bbaf63251bd7632f3b27f436c3bcbefd87e8cb4c6071f2dcca7030f0b67b4aa7dfd2137fef4dce398d921a72a96e04e5151e41e41f07e204f888c46ce08"], 0x6, 0x1) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:45 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 445.606953][T16743] overlayfs: failed to resolve './bus': -2 00:31:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)={0x4, 0x9, 0x40, 0x0, 0x9, 0x1, 0x0, 0x6b, 0x80, 0x3f, 0x7, 0x3f, 0x0, 0xea, 0x4, 0xc0, 0x1, 0x1, 0xc3, [], 0x7, 0x80000001}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100010000"]) r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x7, 0x761242) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0xffffffffffffffff, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xde3}, &(0x7f0000000180)=0x8) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x1b, &(0x7f0000000140)={r6, 0x3, 0x10, 0xb8f0, 0xffffffffffffffff}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r5, 0x4, 0x3f}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r2}], 0x200000000000007d, 0x0) 00:31:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x1100, 0x0, 0x0, 0x0, "b2e700"}) [ 445.656712][T16743] overlayfs: failed to resolve './bus': -2 00:31:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f72030069723d2e2f66696c65312cff6f37657264670934f080e18d58"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x200, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000000)) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000000c0)) 00:31:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x1200, 0x0, 0x0, 0x0, "b2e700"}) [ 445.805885][T16764] overlayfs: unrecognized mount option "wor" or missing value 00:31:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x60400, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000140)=0x17f) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) [ 445.850216][ T2507] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 445.869749][T16764] overlayfs: unrecognized mount option "wor" or missing value [ 445.909329][ T2499] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 446.101703][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 446.179304][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 446.219655][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.230779][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 446.241259][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.252027][ T2507] usb 4-1: config 0 descriptor?? [ 446.309380][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.320655][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 446.331160][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.342924][ T2499] usb 6-1: config 0 descriptor?? [ 446.799358][ T2507] hid-picolcd 0003:04D8:F002.0068: No report with id 0xf3 found [ 446.807567][ T2507] hid-picolcd 0003:04D8:F002.0068: No report with id 0xf4 found [ 446.820711][ T2499] hid-picolcd 0003:04D8:F002.0069: unknown main item tag 0x0 [ 446.889297][ T2499] hid-picolcd 0003:04D8:F002.0069: No report with id 0xf3 found [ 446.897145][ T2499] hid-picolcd 0003:04D8:F002.0069: No report with id 0xf4 found [ 446.935807][ T2663] usb 4-1: USB disconnect, device number 26 [ 447.039215][ C1] usb 6-1: input irq status -75 received [ 447.221837][ T2663] usb 6-1: USB disconnect, device number 40 00:31:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./fine1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utime(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)={0x7ff, 0x687}) lsetxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000200)={'!'}, 0x2, 0x2) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x2500, 0x0, 0x0, 0x0, "b2e700"}) 00:31:47 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000000400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="410000000600000000000000000000000100000000000200030000000000000018000000000000002f70726f632f73646c662f617474722f63757272656e740000"], 0x41) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$snddsp(r5, &(0x7f00000000c0)="447a4e192c4feea7997e183c2bd2942c675bdbd811dc9d30f1721b3f0c21d105680648fceae1d5c797b5cca389d9", 0x2e) r7 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/change-rule\x00', 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x7, 0x1ff, 0x400, 0x6}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r8, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r7, 0x300}, {r8, 0xa000}, {0xffffffffffffffff, 0x601}], 0x3, 0x3) 00:31:47 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 00:31:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 447.794703][T16832] overlayfs: failed to resolve './fine1': -2 00:31:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x5c00, 0x0, 0x0, 0x0, "b2e700"}) 00:31:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) r6 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28080, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000100)) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 447.838092][T16832] overlayfs: failed to resolve './fine1': -2 00:31:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/149) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x391401) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x9, 0x2, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule\x00', 0x2, 0x0) fcntl$dupfd(r3, 0x406, r6) 00:31:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x1000000, 0x0, 0x0, 0x0, "b2e700"}) [ 447.944736][T16849] Unknown ioctl -2147203839 [ 448.050396][ T2499] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 448.054675][ T2663] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 448.077723][T16850] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 448.309212][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 448.319226][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 448.429955][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.440898][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 448.450022][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.459699][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.461823][ T2663] usb 4-1: config 0 descriptor?? [ 448.476321][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 448.491237][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.504120][ T2499] usb 6-1: config 0 descriptor?? [ 449.010907][ T2499] hid-picolcd 0003:04D8:F002.006B: unknown main item tag 0x0 [ 449.029933][ T2663] hid-picolcd 0003:04D8:F002.006A: No report with id 0xf3 found [ 449.037592][ T2663] hid-picolcd 0003:04D8:F002.006A: No report with id 0xf4 found [ 449.090913][ T2499] hid-picolcd 0003:04D8:F002.006B: No report with id 0xf3 found [ 449.098638][ T2499] hid-picolcd 0003:04D8:F002.006B: No report with id 0xf4 found [ 449.163070][ T2663] usb 4-1: USB disconnect, device number 27 [ 449.219186][ C1] usb 6-1: input irq status -75 received [ 449.419021][ T2499] usb 6-1: USB disconnect, device number 41 00:31:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$unix(r1, &(0x7f00000000c0)="1645eb17e39aba29d1e7e84f15a245268cf23bdc07fce8e44e641a8d5ac4d6cf07ab9b3b1d4452d18c617a96611598a77b6bb10ae07aec867891e9e624c10f803935341b64306c74cb741cc41e55a4169c73a75dff95da7d37156f8a8cd335a6f37e4d2d97856706fbae9d4ec0a76ffffd986d2e321371586ae056bf434674623e62f6894270b7a1307815ff9fc584046c23a8555ca31eb1d6b40de890f3a13c7f9644adc9d8bdec35dff0ef8c0108adb8738d425ba3bcd9eb984f9fda", 0xbd, 0x40800, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r2}], 0x200000000000007d, 0x0) 00:31:49 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/124, 0x7c) 00:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x2000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:49 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 00:31:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:49 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040), 0x2) 00:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x3000000, 0x0, 0x0, 0x0, "b2e700"}) [ 450.075221][T16919] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x4000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:49 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x8) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400003, 0x140) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 450.209167][ T2499] usb 4-1: new high-speed USB device number 28 using dummy_hcd 00:31:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x5000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r5, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r6], 0x28}, 0x1, 0xfffffff0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x300, 0x70bd27, 0x9, {{}, {}, {0x8, 0x11, 0xa87}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) read$snddsp(r3, &(0x7f0000000040)=""/59, 0x3b) [ 450.366513][T16940] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 450.459132][ T2499] usb 4-1: Using ep0 maxpacket: 8 00:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:50 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r1}], 0x200000000000007d, 0x0) 00:31:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75927065726469723d2e2f627566696c652c6c6f7765726469723d2e2f66696c653000"/46]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x60000, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xa6}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:31:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x6000000, 0x0, 0x0, 0x0, "b2e700"}) [ 450.541400][T16956] overlayfs: unrecognized mount option "u’perdir=./bufile" or missing value [ 450.575189][T16956] overlayfs: unrecognized mount option "u’perdir=./bufile" or missing value [ 450.584599][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.597238][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 450.646278][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.665028][ T2499] usb 4-1: config 0 descriptor?? 00:31:50 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 451.239134][ T2499] hid-picolcd 0003:04D8:F002.006C: No report with id 0xf3 found [ 451.246883][ T2499] hid-picolcd 0003:04D8:F002.006C: No report with id 0xf4 found [ 451.375881][ T2663] usb 4-1: USB disconnect, device number 28 00:31:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x7000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000340)=""/95, &(0x7f0000000200)=0x5f) 00:31:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_BMAP(r5, &(0x7f0000000040)={0x18, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:51 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 00:31:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$smackfs_access(r3, &(0x7f0000000040), 0x14) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x8000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:51 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) set_tid_address(&(0x7f0000000040)) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x87c6}], 0x1, 0xfffffffd) [ 452.146480][T17000] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x9000000, 0x0, 0x0, 0x0, "b2e700"}) [ 452.224631][ T2663] usb 4-1: new high-speed USB device number 29 using dummy_hcd 00:31:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x106) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f000001a7c0)={0x8e, {{0x2, 0x4e23, @empty}}}, 0x88) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={{0x77359400}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f00000017c0)=""/102395, 0x18ffb}, {&(0x7f0000001740)=""/126, 0x7e}, {&(0x7f0000000100)}], 0x6, &(0x7f0000001640)=""/194, 0xc2}, 0x2) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xa000000, 0x0, 0x0, 0x0, "b2e700"}) [ 452.402011][T17034] overlayfs: failed to resolve './file1': -2 [ 452.509134][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 452.649183][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.660167][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 452.670952][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.683155][ T2663] usb 4-1: config 0 descriptor?? [ 453.190218][T17034] overlayfs: failed to resolve './file1': -2 [ 453.249112][ T2663] hid-picolcd 0003:04D8:F002.006D: No report with id 0xf3 found [ 453.263803][ T2663] hid-picolcd 0003:04D8:F002.006D: No report with id 0xf4 found [ 453.371550][ T2663] usb 4-1: USB disconnect, device number 29 00:31:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xb000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:53 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 00:31:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:53 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x1b, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000180)=""/228) 00:31:53 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x62) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./buse1,\towerdir=./file0']) r0 = open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x12b) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) clock_adjtime(0x4, &(0x7f0000000440)={0x1, 0x1, 0xfb, 0x7, 0x100, 0x800, 0x1, 0x0, 0x7fff, 0x7, 0x1f, 0x7608, 0x80000001, 0x9, 0x5, 0x2, 0x3cd, 0x1, 0x3e4, 0x8, 0x7b83a17e, 0x0, 0x40, 0x8, 0x1f, 0xffff}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:53 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) [ 453.955932][T17077] overlayfs: unrecognized mount option " owerdir=./file0" or missing value 00:31:53 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x100) 00:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xc000000, 0x0, 0x0, 0x0, "b2e700"}) [ 454.027286][T17077] overlayfs: unrecognized mount option " owerdir=./file0" or missing value 00:31:53 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f00000002c0)='./bus\x00', 0xb71, 0x3, &(0x7f0000000340)=[{&(0x7f0000000440)="d41a2cf3d067afb4b35bda169b08bb07fd3295393c4ac98cfd9d01ab151869bb3837d5f852f2a419983cf67717e7cc18a33e483344fb9e117a592ba83005c930cb4411c40ec1c090360a88e43828045187018c9b128389a4b452da40ffb65c7e0f16d2142c9ad73da6d76974e7386ed907feb220a92d2f04e6d45678ce22e0c2d6a48f4f4654f5e3b66b3a1b5a81b5bd7b623215d95a2ce9d9430a841232ba0aaba910bc76ce53f1ced191e706f91737246ca9ecd8b51b5b31e71134e5dc55b041e0f8b8344ecd8f668c4f2fa56b7d93ca477c7ab2efa148f4408c", 0xdb, 0x57}, {&(0x7f0000000540)="3ce887a1c2a3351b2f333192a913478304051e14ffb17bff53c9ef308c9284e843dd4aeae60c5c6fd5e9d12622376c9dd2350e5c0b8a7f81732e6c78dff2c7d33e12c2630d17a28804f481c9c829718d8804fe6b718908a0721700e17ac6ec979561488f1cd76702258d0e248eb0eff86ca10316fb733002b0ddd407161680bbd7efb3d343a752d9ecc4d961bf28b5fa54ef49443a65437e08f996e5412324894b5fe928c7c425db34697c8a9f551a3378337d340307118c7da9b40a70dd261eee2c7082c488e209e26ce87244555e11cfae74", 0xd3, 0x200}, {&(0x7f0000000640)="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", 0x1000, 0x6}], 0x0, &(0x7f0000001640)={[{@errors_continue='errors=continue'}, {@nouser_xattr='nouser_xattr'}, {@conv='conv'}], [{@appraise='appraise'}, {@euid_lt={'euid<', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x401}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/101, 0x65) 00:31:53 executing program 2: socket$inet(0x2, 0x2000000080002, 0x0) socket(0x1, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 00:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xd000000, 0x0, 0x0, 0x0, "b2e700"}) [ 454.184341][T17102] REISERFS warning (device loop1): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 454.184341][T17102] [ 454.198955][ T2663] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 454.236064][ T2527] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 454.272262][T17102] overlayfs: failed to resolve './file1': -2 [ 454.488908][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 454.538938][ T2663] usb 6-1: device descriptor read/64, error 18 [ 454.609154][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.620114][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 454.629508][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.638414][ T2527] usb 4-1: config 0 descriptor?? [ 454.948927][ T2663] usb 6-1: device descriptor read/64, error 18 [ 455.189856][ T2527] hid-picolcd 0003:04D8:F002.006E: No report with id 0xf3 found [ 455.197529][ T2527] hid-picolcd 0003:04D8:F002.006E: No report with id 0xf4 found [ 455.228904][ T2663] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 455.321163][ T12] usb 4-1: USB disconnect, device number 30 [ 455.519632][ T2663] usb 6-1: device descriptor read/64, error 18 00:31:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xe000000, 0x0, 0x0, 0x0, "b2e700"}) [ 455.909051][ T2663] usb 6-1: device descriptor read/64, error 18 [ 456.029004][ T2663] usb usb6-port1: attempt power cycle [ 456.138929][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 456.147188][ T2480] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 456.418929][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 456.424053][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 456.539509][ T2480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.550575][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 456.562327][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.573307][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.582782][ T12] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 456.592729][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.601231][ T2480] usb 4-1: config 0 descriptor?? [ 456.611908][ T12] usb 3-1: config 0 descriptor?? [ 456.748826][ T2663] usb 6-1: new high-speed USB device number 44 using dummy_hcd 00:31:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:56 executing program 1: dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x600) pread64(r0, &(0x7f0000000180)=""/163, 0xa3, 0x80000001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:31:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1f, 0x102680) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x1b, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3}, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r6, 0x5501) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x3ff, 0x3, 0x7fffffff}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r8, 0x80dc5521, &(0x7f0000000140)=""/127) 00:31:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x10000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setfsuid(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 456.929395][ T2663] usb 6-1: device descriptor read/8, error -71 00:31:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x11000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x400, 0x18b) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:31:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000b034000000000000000000c00000a100001002f6465762f6d656469612300100001002f6465762f6d656469612300"], 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x24000011) r7 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x9, 0x400100) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0xe5678a1dff2ffd25) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 457.082655][ T12] hid-picolcd 0003:04D8:F002.0070: unknown main item tag 0x0 [ 457.148929][ T2663] usb 6-1: device descriptor read/8, error -71 [ 457.155291][ T2480] hid-picolcd 0003:04D8:F002.006F: No report with id 0xf3 found [ 457.173758][ T12] hid-picolcd 0003:04D8:F002.0070: No report with id 0xf3 found [ 457.183157][ T2480] hid-picolcd 0003:04D8:F002.006F: No report with id 0xf4 found [ 457.196850][ T12] hid-picolcd 0003:04D8:F002.0070: No report with id 0xf4 found 00:31:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x12000000, 0x0, 0x0, 0x0, "b2e700"}) [ 457.236080][T17180] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 457.291364][ T12] usb 4-1: USB disconnect, device number 31 [ 457.338772][ C0] usb 3-1: input irq status -75 received [ 457.523850][ T2480] usb 3-1: USB disconnect, device number 3 [ 457.658893][ T2663] usb 6-1: new high-speed USB device number 45 using dummy_hcd 00:31:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 457.829134][ T2663] usb 6-1: device descriptor read/8, error -61 00:31:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) r6 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:57 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x301002, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 458.093987][ T2499] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 458.138839][ T2663] usb 6-1: device descriptor read/8, error -61 [ 458.259877][ T2663] usb usb6-port1: unable to enumerate USB device [ 458.338747][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 458.459971][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.471002][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 458.480490][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.490268][ T2499] usb 4-1: config 0 descriptor?? [ 459.038740][ T2499] hid-picolcd 0003:04D8:F002.0071: No report with id 0xf3 found [ 459.046598][ T2499] hid-picolcd 0003:04D8:F002.0071: No report with id 0xf4 found [ 459.171654][ T2499] usb 4-1: USB disconnect, device number 32 00:31:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x25000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001030101000921000000012205000905810346"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:31:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0, 0x8284}], 0x1, 0x0) 00:31:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) r6 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:31:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) r6 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x5c000000, 0x0, 0x0, 0x0, "b2e700"}) 00:31:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xfdfdffff, 0x0, 0x0, 0x0, "b2e700"}) 00:31:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) dup3(r3, r2, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:31:59 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x8, 0xa5, 0x0, 0x1}, {0x3, 0xa, 0x7, 0xc5d2}]}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) [ 460.258721][ T2663] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 460.276163][ T29] audit: type=1326 audit(1594859520.009:19): auid=0 uid=0 gid=0 ses=4 subj=_ pid=17290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f9ea code=0x0 [ 460.296221][ T2499] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 460.408848][ T2527] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 460.528920][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 460.538743][ T2499] usb 2-1: Using ep0 maxpacket: 16 [ 460.658739][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.658750][ T2499] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 460.658774][ T2499] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 460.673277][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 460.682820][ T2527] usb 6-1: device descriptor read/64, error 18 [ 460.692873][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.706095][ T2499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.712389][ T2663] usb 4-1: config 0 descriptor?? [ 460.717210][ T2499] usb 2-1: config 0 descriptor?? [ 460.779448][ T2499] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 460.985665][ T2499] usb 2-1: USB disconnect, device number 3 [ 461.095792][ T2527] usb 6-1: device descriptor read/64, error 18 [ 461.278665][ T2663] hid-picolcd 0003:04D8:F002.0072: No report with id 0xf3 found [ 461.286306][ T2663] hid-picolcd 0003:04D8:F002.0072: No report with id 0xf4 found [ 461.368676][ T2527] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 461.413284][ T2551] usb 4-1: USB disconnect, device number 33 [ 461.548652][ T2499] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 461.639532][ T2527] usb 6-1: device descriptor read/64, error 18 [ 461.788596][ T2499] usb 2-1: Using ep0 maxpacket: 32 [ 461.908905][ T2499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.919962][ T2499] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 461.929537][ T2499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.939288][ T2499] usb 2-1: config 0 descriptor?? [ 461.979342][ T2499] hub 2-1:0.0: USB hub found [ 462.028655][ T2527] usb 6-1: device descriptor read/64, error 18 [ 462.148725][ T2527] usb usb6-port1: attempt power cycle [ 462.198682][ T2499] hub 2-1:0.0: 1 port detected [ 462.858553][ T2527] usb 6-1: new high-speed USB device number 48 using dummy_hcd 00:32:02 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000180)={0x800, 0x10001, 0x6, 0x5, [], [], [], 0x400, 0x2, 0x9, 0x90, "389e3bc3276957a28e57d0b583764700"}) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 463.008685][ T2527] usb 6-1: device descriptor read/8, error -71 [ 463.218620][ T2527] usb 6-1: device descriptor read/8, error -71 [ 463.292872][ T2551] usb 2-1: USB disconnect, device number 4 [ 463.310756][ T2499] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 463.708567][ T2527] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 463.878807][ T2527] usb 6-1: device descriptor read/8, error -61 [ 464.068564][ T2480] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 464.148742][ T2527] usb 6-1: device descriptor read/8, error -61 [ 464.269855][ T2527] usb usb6-port1: unable to enumerate USB device [ 464.308488][ T2480] usb 2-1: Using ep0 maxpacket: 16 [ 464.438598][ T2480] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.451420][ T2480] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 464.462063][ T2480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.474141][ T2480] usb 2-1: config 0 descriptor?? [ 464.519609][ T2480] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 00:32:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./bus\x00', 0x1, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000440)="f6a12d1cd9daa00848b7a6d84c7e4407fa405eed0a7ac0341a61a202bb98f66ba15979148a40e01570c58adb173bccb4683a269148f5fec9bbf0d457fb6ad89f01b579a2842979d264c5a4e55aa194f818db28d7c3be1cd93777bf2794a15984129915fc618a425ce92828ba10b2a016d25961fe14191abf2300176290cd6b062fce38d465095d432cef913dca6d78dfd0c786195b847c374971d103dbe4e7ade3cc685bb35dbd687f0b4b7d69a0c44468a77bf3ad97743ec685952e87f61731654a204f9f2a6b22e85236ff443478215462440d45c031", 0xd7, 0x1fffffffc000}, {&(0x7f0000000340)="5224fec965910f3f4da51ba44576a14e579662c6d9b46c40e3cf67b9312dc460780a3c3192e8de1d68a07f3c6639907dcbb082ec2f09a9429d772389e51cc8fa83c64f8a99e59a68db168ef4e443be7faa193a8fb13d251f9354e1cfee27", 0x5e, 0x4}, {&(0x7f0000000540)="f929b0b8539f58f7edf9ebde4771d2c7520d1400402d574d0a7be27fe6db8f3a4f92db1b44942a2c63f6b82d5d87386b6fcdeaea8179e69a88311b0be6c6cbfb3c520ff7266bc2ae571f06956ab14d574702894e6f4f3eb1833ae3aa682269ff866b1906632548d073a722e685abd4e76c6a10777465e13524fd197464890c4d967e516edb3f3939b140564fe5daf46db980eb8d8a9abc806cdd6cee7cd2433e145e6b3492aae5da00d07298cf2b8111b7261f02935a2afc7267aae8246a6f6859b83723b1f5808c55e69b3f96aed3a0420c95bdf8b6ad76670630bb4ec0470968fc79b827a23508f306e978", 0xec, 0x4}, {&(0x7f0000000640)="d31f40e1d0c2fd9b04a466760fdc8dc62522260495c82db181a466a1ddbdf7a3d4015fe130ee8f2707b82211db0f0ab4ed4cbe715e474bdacf89619cc355b135ded7dc8b96cdbd70cdb89d674edc3558c602bd469b03c357ad54dcc495b72c2667f3914461af0c99a919942b20bb0ca66ea810e337c95e62ba6e273f4337fe2a419a047ecce20cbd1f4710ee30d09592ca872705f8087e5f17887da4cb719796b4fea9ab406880782ab4ee383799a9122857f7129c5134638549014f7a87862f6f0f769193becd38ce4c", 0xca, 0x6580000000000}, {&(0x7f0000000740)="6519e39e96bbdfad2edf4e65aaa80db2f29f07ebdfc11af588944395022d2ececbc94a3d000ef1b8630d1444333570bff651590e77024af43137c870efc3855771105431666a3f2a7b1c71968cdc57315a29a6bcbed6f989bbdb5f44543dc51ac06b5bd789a5511a8552a72b10d6a3", 0x6f, 0x9}], 0xb0810, &(0x7f0000000840)={[{@noenospc_debug='noenospc_debug'}, {@noenospc_debug='noenospc_debug'}, {@subvol={'subvol', 0x3d, 'overlay\x00'}}, {@usebackuproot='usebackuproot'}], [{@euid_eq={'euid', 0x3d, r2}}, {@euid_lt={'euid<', r4}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}]}) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/101, 0x65) 00:32:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r4, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0xfffffdfd, 0x0, 0x0, 0x0, "b2e700"}) 00:32:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 464.603831][ T2527] usb 2-1: USB disconnect, device number 5 00:32:04 executing program 4: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x7fff, 0x13d641) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:32:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:04 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x801, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 'syz1\x00', 0x3fc2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffff7fffffa) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="a1f82758f8ec3f9118c2db3bb41ae1dae9727f003be34d9014c0cb67b238c612aff6a82016efafee0cbaee33305abe9b752d4ae7e74de30327358fa62498e8b1c3ccdab6777103876d9409ddb9bcb329aa4cb31e72e3cbfac9f97c7e639df6133e124528c175b9abb8b4971b69b6d213725713a7ae7e982c27626bb0650747d278658a4caee5ee0fd2419cb2795ecc207e1cfdfeeead8a14fdc0467cd86e8a029e3755e431082847f7fea98deb459d2836c769a895ec3aa438746f59649692bd078279ce39f2e7a386cb858f278ac2d4b874c6b69adf223db5407179a0741bac66419f175e6748a6ec3edfe488a5", 0xee) poll(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x3, 0x1, 0x5, 0x0, 'syz1\x00'}}, 0x2e) 00:32:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="00003f0000003f8a762e79193a1f9e00b03b782df1d30d78635f839b8bc83b4e2300000000000000babf6ef3a37a9f5e4a6ddba201dae583329086aef5ce123dd28835628607f8277130d459c2"], 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2a0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) 00:32:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 464.938615][ T2551] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 464.972120][T17397] overlayfs: unrecognized mount option "" or missing value [ 465.188491][ T2551] usb 4-1: Using ep0 maxpacket: 8 [ 465.298470][ T2480] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 465.308936][ T2551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.322616][ T2551] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 465.331822][ T2551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.346323][ T2551] usb 4-1: config 0 descriptor?? [ 465.588509][ T2480] usb 2-1: device descriptor read/64, error 18 [ 465.898480][ T2551] hid-picolcd 0003:04D8:F002.0073: No report with id 0xf3 found [ 465.906218][ T2551] hid-picolcd 0003:04D8:F002.0073: No report with id 0xf4 found 00:32:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:05 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 466.008443][ T2480] usb 2-1: device descriptor read/64, error 18 [ 466.036284][ T2551] usb 4-1: USB disconnect, device number 34 [ 466.288489][ T2480] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 466.468397][ T2481] usb 6-1: new high-speed USB device number 50 using dummy_hcd 00:32:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x80, 0xe55, 0x9b7, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RFLUSH(r5, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x2, 0x0, 0x0, "b2e700"}) 00:32:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 466.562468][ T2480] usb 2-1: device descriptor read/64, error 18 00:32:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x3, 0x0, 0x0, "b2e700"}) 00:32:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040)=0x1, 0x4) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v2={0x5, 0x1, 0x4, 0x5, 0xe, "05824574d0dcdc62f1c8967ed5c3"}, 0x17, 0x1) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x7) [ 466.738408][ T2481] usb 6-1: device descriptor read/64, error 18 [ 466.868459][ T12] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 466.959415][ T2480] usb 2-1: device descriptor read/64, error 18 [ 467.078654][ T2480] usb usb2-port1: attempt power cycle [ 467.108361][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 467.128757][ T2481] usb 6-1: device descriptor read/64, error 18 [ 467.228507][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.239428][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 467.250315][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.260694][ T12] usb 4-1: config 0 descriptor?? [ 467.398389][ T2481] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 467.668407][ T2481] usb 6-1: device descriptor read/64, error 18 [ 467.788382][ T2480] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 467.813781][ T12] hid-picolcd 0003:04D8:F002.0074: No report with id 0xf3 found [ 467.821689][ T12] hid-picolcd 0003:04D8:F002.0074: No report with id 0xf4 found 00:32:07 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469720000000075732c7767726b6469723d2e2f6669f76ce5312c6c6f7765726469723d2e2fba46cee71957e7ef6c413cbb7b66696c65"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @private2, 0xfff}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400000000400213) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 467.944014][ T2527] usb 4-1: USB disconnect, device number 35 [ 467.948380][ T2480] usb 2-1: device descriptor read/8, error -71 [ 467.996651][T17478] overlayfs: unrecognized mount option "upperdir" or missing value [ 468.023533][T17478] overlayfs: unrecognized mount option "upperdir" or missing value [ 468.062970][ T2481] usb 6-1: device descriptor read/64, error 18 [ 468.158377][ T2480] usb 2-1: device descriptor read/8, error -71 [ 468.188440][ T2481] usb usb6-port1: attempt power cycle [ 468.898223][ T2481] usb 6-1: new high-speed USB device number 52 using dummy_hcd 00:32:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:08 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x4, 0x0, 0x0, "b2e700"}) 00:32:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000040)={0x7f, 0x401}) 00:32:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x30, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f0000000080)='overlay\x00', 0x201989a, &(0x7f0000000400)=ANY=[]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:08 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 469.068343][ T2481] usb 6-1: device descriptor read/8, error -71 00:32:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000002c0)={0x0, 0x0, 0x15, 0xf, 0x6, &(0x7f0000000400)="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"}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="75707065720004000000000000732c776f726b6069723d2e2e66696c65312c6c6f77657264690600000000696c653032656b347165139bc77f01f0568b1b0500000000000000d0233718f2490f498d6ff04bcbb9de3180c251025ee98ed60c3c724a92b1004320494f237ff2c6785b44b4058b230cefd2346f9421dead7b92c8c1d75968f52c462d81d2c44a03acaa306d3df243e9ec6b07772c2d6ba42a239a6e1e5b5e43e4fca1af9ebfdc373d4c83a74809885e53b089ead5386ade"]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000800)={0x0, 0x1, 0xfff, 0x7, 0x1, 0x9, 0x3}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00'}, 0x10) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clock_settime(0x7, &(0x7f0000000000)={0x77359400}) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000140)=0x8, 0xfa) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0xffffffffffffffff, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000740)={0x79}, 0x1) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x80000) r3 = dup3(r1, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x470, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf81}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x101}, @ETHTOOL_A_LINKMODES_OURS={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/media#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbda7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "2e43e96313a28c0f95789ceda8e7ecd5bda9b4b984ec4d80409ff38f92382d76f5cb3dc572eb476268998c81ad09fea9f86116d5881debbf"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff}, @ETHTOOL_A_LINKMODES_OURS={0x378, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "46fa36e12540eb514097a7cab5405ca4c35d029cbba4e0c9e0e2339aacf9e0c99431def07d205fd9befb1078a17899644b7dfd57eb31b18af56c824eb900207b22b046ba1de120b446debf6fb38a52cfd7de66df853afdaae0c667a318042e24cc774818b40d7a14e1235cd4a7d8e52a2d9e95aaa64596920bc32f7ef9dc6b17c0bf71100fc5454d4fa9d1ec70b9ad0e40d13702d0ea305f01a1639ffc8984eb934bf2b2b54eee6cbb8e080866"}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "6e8dcd9db80c75defc1450bca0fdb57e1042f4d953afd84a81b198b98958e0669c9613ec11456a1b3f177367b98a7fd33993c728a2a3a6368004a9ed2503e3c9c0299399fe6b564b1a04f64226d0a77787822d547d9b9b597554071f79eadad5b06062ced26b8579b7084f0c5aed19566f9cb096221c490e681e364f426b24e444cfa73b11867d98e54968616abfc520bbf020a59675c06b5d82e0b753612b1aba8b782110ddcad3f96611e1110931c10d9c549941c6c6bec190877ba7178ea3927f66ada04b0a37d9da56570f15b39a4e6f6af4fc8da38ecc9cb486304955f2b4631a6ba5e131f9f721205c447d632c19e8b87735d9f034"}, @ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "6783698fba57e151121637346880b9fa05ba94f9deb77d3713d0f6b138642c20b7391d0c066d77e57df5f7e1116e209382a8ebda395b35fc6e83529f318fe6c48a5d1a1d28d9651e320b3d87f0a4899b16c97a35c3ab702c448e7a5ded5a55c85db70cff1f1bfd658870161f08c1a366375a155053f1610b98fb6f8346147f46357cbe082832432c1af307c9350cd86056e434e6c543f2c03767b2e6a89da4b1e4b62416c3df9182f197a673f68dfe4e980c3ffb76c962a78594893ac2b5a56f0bcd7cb27d1d7a23f9616bbb71"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff1b}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/media#\x00'}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xf6eth1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%\'!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/media#\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(#\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff354}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb1e2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}]}, 0x470}, 0x1, 0x0, 0x0, 0x800}, 0x40044) 00:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x5, 0x0, 0x0, "b2e700"}) 00:32:08 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 469.273279][T17517] overlayfs: unrecognized mount option "upper" or missing value [ 469.288874][ T2481] usb 6-1: device descriptor read/8, error -71 00:32:09 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 469.313699][T17517] overlayfs: unrecognized mount option "upper" or missing value [ 469.398279][ T12] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 469.668127][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 469.788583][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.799774][ T2481] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 469.807388][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 469.818699][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.831407][ T12] usb 4-1: config 0 descriptor?? [ 469.988389][ T2481] usb 6-1: device descriptor read/8, error -61 [ 470.301224][ T2481] usb 6-1: device descriptor read/8, error -61 [ 470.378228][ T12] hid-picolcd 0003:04D8:F002.0075: No report with id 0xf3 found [ 470.385895][ T12] hid-picolcd 0003:04D8:F002.0075: No report with id 0xf4 found [ 470.428892][ T2481] usb usb6-port1: unable to enumerate USB device [ 470.511388][ T2551] usb 4-1: USB disconnect, device number 36 00:32:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x6, 0x0, 0x0, "b2e700"}) 00:32:11 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:11 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:11 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)=0x20) 00:32:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:11 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0x17, &(0x7f0000000040)="3c6991236a8e7e2283c89971219cd8826d48bf95496649"}) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:11 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 472.203059][T17570] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uppworkdir=./file1,lowerdir=./file0\x00'/47]) socket$can_j1939(0x1d, 0x2, 0x7) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x7, 0x0, 0x0, "b2e700"}) 00:32:12 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x800004001fb) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:12 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 472.397739][ T12] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 472.424226][T17591] overlayfs: unrecognized mount option "uppworkdir=./file1" or missing value [ 472.467858][ T2551] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 472.481556][T17591] overlayfs: unrecognized mount option "uppworkdir=./file1" or missing value [ 472.657691][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 472.727710][ T2551] usb 6-1: Using ep0 maxpacket: 8 [ 472.778075][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.789137][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 472.798557][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.811035][ T12] usb 4-1: config 0 descriptor?? [ 472.868051][ T2551] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.878192][ T2551] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.887351][ T2551] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 472.898121][ T2551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.906996][ T2551] usb 6-1: config 0 descriptor?? [ 473.358278][ T12] hid-picolcd 0003:04D8:F002.0076: No report with id 0xf3 found [ 473.366126][ T12] hid-picolcd 0003:04D8:F002.0076: No report with id 0xf4 found [ 473.490455][ T2499] usb 4-1: USB disconnect, device number 37 00:32:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:14 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:14 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x8, 0x0, 0x0, "b2e700"}) 00:32:14 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x9) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000100)='./file2\x00', 0x1000, 0x3) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 475.129044][ T2527] usb 6-1: USB disconnect, device number 54 00:32:14 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:15 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 475.239092][T17646] overlayfs: failed to resolve './file1': -2 00:32:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x9, 0x0, 0x0, "b2e700"}) [ 475.281472][T17653] overlayfs: failed to resolve './file1': -2 00:32:15 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:15 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0xfffff001) 00:32:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40001, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r0]) open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x183) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x8}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknodat(r2, &(0x7f0000000000)='./file2\x00', 0x8000, 0x7) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 475.505143][T17671] overlayfs: unrecognized mount option "" or missing value [ 475.549777][T17671] overlayfs: unrecognized mount option "" or missing value [ 475.592571][ T2527] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 475.837213][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 475.957201][ T2527] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.967432][ T2527] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.976365][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 475.986893][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.996360][ T2527] usb 6-1: config 0 descriptor?? 00:32:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:17 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_pts(r2, 0x200080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x200a00}]) r8 = accept4$packet(r5, 0x0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_submit(r7, 0x3, &(0x7f0000001280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4c0, r8, &(0x7f00000000c0)="c4169e9e934bb628af8276b7edfbfc245bf21faae473f32d8385b164c7220961959d737e3c048e0bb315aadd8e3a7cc18642773d73157391f4fe4f54a73ea338513fbd559cc4d5ae93fbad8dd59e8a", 0x4f, 0x401, 0x0, 0x3, r10}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0xc, 0xfff, 0xffffffffffffffff, &(0x7f0000000180)="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", 0x1000, 0x3, 0x0, 0x3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3, 0x9, r4, &(0x7f00000011c0)="d99bb9c15d85fe1debb02d991198ffe48eaa680733e254a563570d2e109ec97bca2781ad792b600883f9a4ab127aa49ce3f9b7597e9baa4415e4a8937cfc6e603378440078a2407c759627f3a4080ba906adaf66812c0f094920e0e11d4edfdf71f8567c494161b02b5cfe812a9bf093f9fb910d4569273d598c", 0x7a, 0x3980000000, 0x0, 0x2, r12}]) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xa, 0x0, 0x0, "b2e700"}) 00:32:17 executing program 1: getegid() mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x97) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/167, 0xa7) prctl$PR_SET_TSC(0x1a, 0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:17 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 478.184133][ T2499] usb 6-1: USB disconnect, device number 55 00:32:18 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:32:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xb, 0x0, 0x0, "b2e700"}) 00:32:18 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:32:18 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) [ 478.366111][T17716] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xc, 0x0, 0x0, "b2e700"}) 00:32:18 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 478.544258][T17725] overlayfs: unrecognized mount option "00000000000000000000003" or missing value [ 478.611399][T17731] overlayfs: unrecognized mount option "00000000000000000000003" or missing value [ 478.686837][ T2499] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 478.946705][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 479.066915][ T2499] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.078172][ T2499] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.089410][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 479.100051][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.112085][ T2499] usb 6-1: config 0 descriptor?? 00:32:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:20 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)=0x9) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:20 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xd, 0x0, 0x0, "b2e700"}) 00:32:20 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0xac, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xf1fe0}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x377}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x810) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x40040, 0x8a) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 481.229471][ T2553] usb 6-1: USB disconnect, device number 56 00:32:21 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000040), 0x800) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xe, 0x0, 0x0, "b2e700"}) 00:32:21 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0xffffffffffffffff, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0xa, 0x0, [{0x10000, 0x64, &(0x7f00000000c0)=""/100}, {0x14000, 0x57, &(0x7f0000000140)=""/87}, {0x10000, 0xee, &(0x7f00000001c0)=""/238}, {0xf000, 0x27, &(0x7f00000002c0)=""/39}, {0xf000, 0x31, &(0x7f0000000300)=""/49}, {0x1000, 0x27, &(0x7f0000000340)=""/39}, {0x100000, 0xd8, &(0x7f0000000380)=""/216}, {0x3000, 0xab, &(0x7f0000000480)=""/171}, {0x100000, 0x48, &(0x7f0000000540)=""/72}, {0x3000, 0x5b, &(0x7f00000005c0)=""/91}]}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x10, 0x0, 0x0, "b2e700"}) [ 481.551130][T17767] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 481.686355][ T2553] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 481.936295][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 482.056470][ T2553] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.066796][ T2553] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.079767][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 482.088919][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.102194][ T2553] usb 6-1: config 0 descriptor?? [ 482.147311][ T2553] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 00:32:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:24 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000240)={0x51, 0x4, 0xffff, {0x1001}, {0x1, 0x1000}, @const={0xfffe, {0x9, 0x0, 0x1, 0x56}}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r7, 0x8010550e, &(0x7f0000000200)={0x0, &(0x7f0000000140)="6b96438e2fce016f08470305c6f7a93a01437c634b0430e33ae1a0cc54c7888caecdbfe79b2d6315ba486c6768b5cae0e0edadb5758bdea8a06a2bef8d593733c1bec0d7e4b7d19ec45fc10a9f7e7643f0d6b0a7998b4121953a1e5420b86276bf568a1b0a5671c98c77e5e98b33849e48fe2c0f52ef0be8242c8a87b1cbe349f4b15cbb7ca8b21d8124ccf54f8f199d460847"}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000000c0)={0x3, 0x0, 0x0, {0x0, 0x100000000000001}, {0x8, 0x2}, @const={0x3, {0x1, 0x80, 0x6, 0x2}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$evdev(r3, &(0x7f0000000040), 0x2b8) readahead(r2, 0xfff, 0x7) 00:32:24 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file2\x00', 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x40) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75703f00000069723d2e2f6275732c776f726b6469721d2e2f66696c65312c6c6f7765722400723d2e2f66696c6530"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x14c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r7}, 0x3c) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000640002002bbdffffff7f000000000000", @ANYRES32=0x0, @ANYBLOB="0e00e0ffffff0c00f17f0400"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48080) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x400, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000180)=""/101, 0x65) 00:32:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x11, 0x0, 0x0, "b2e700"}) 00:32:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 484.285434][ T5] usb 6-1: USB disconnect, device number 57 00:32:24 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 484.349998][T17812] overlayfs: unrecognized mount option "up?" or missing value 00:32:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0x8, {0x5, 0x6, 0x6, 0x408000}, {0x5, 0x0, 0x7, 0xed}, {0x74, 0x8d2d}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200804, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0x0000000000007fff,timeout=0x0000000000000496,sq=0x0000000020f20c44,appraise_type=imasig,euid=', @ANYRESDEC=r5, @ANYBLOB=',measure,smackfsht=staff_5,\x00'/43]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:24 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 484.458611][T17820] overlayfs: unrecognized mount option "up?" or missing value 00:32:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x12, 0x0, 0x0, "b2e700"}) 00:32:24 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80000) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:24 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 484.615989][ T2499] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 484.659120][T17836] overlayfs: filesystem on './bus' not supported as upperdir [ 484.815946][ T5] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 484.885941][ T2499] usb 4-1: device descriptor read/64, error 18 [ 485.085891][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 485.205895][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.216161][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.230407][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 485.239563][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.249320][ T5] usb 6-1: config 0 descriptor?? [ 485.276451][ T2499] usb 4-1: device descriptor read/64, error 18 [ 485.296818][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 485.545861][ T2499] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 485.815767][ T2499] usb 4-1: device descriptor read/64, error 18 [ 486.205698][ T2499] usb 4-1: device descriptor read/64, error 18 [ 486.336984][ T2499] usb usb4-port1: attempt power cycle [ 487.065564][ T2499] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 487.265679][ T2499] usb 4-1: device descriptor read/8, error -61 00:32:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x20005) 00:32:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r4) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x25, 0x0, 0x0, "b2e700"}) 00:32:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x4, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 487.365887][ T5] usb 6-1: USB disconnect, device number 58 00:32:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 487.460563][T17873] overlayfs: unrecognized mount option "æ)­of.v½:ÖF" or missing value [ 487.475873][ T2499] usb 4-1: device descriptor read/8, error -71 00:32:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) r4 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000440)=""/241) socket$phonet_pipe(0x23, 0x5, 0x2) 00:32:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x5c, 0x0, 0x0, "b2e700"}) 00:32:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x0, 0x4}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 487.731421][T17889] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 487.795631][ T5] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 487.985512][ T2499] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 488.035489][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 488.155814][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.157314][ T2499] usb 4-1: device descriptor read/8, error -61 [ 488.171698][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.185001][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 488.197633][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.210256][ T5] usb 6-1: config 0 descriptor?? 00:32:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) r4 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000440)=""/241) socket$phonet_pipe(0x23, 0x5, 0x2) [ 488.260744][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 488.455438][ T2499] usb 4-1: device descriptor read/8, error -61 [ 488.577242][ T2499] usb usb4-port1: unable to enumerate USB device 00:32:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x300, 0x0, 0x0, "b2e700"}) 00:32:30 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x9, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:30 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) r4 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000440)=""/241) socket$phonet_pipe(0x23, 0x5, 0x2) 00:32:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 490.440741][ T5] usb 6-1: USB disconnect, device number 59 00:32:30 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x40008, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x500, 0x0, 0x0, "b2e700"}) 00:32:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) r4 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000440)=""/241) socket$phonet_pipe(0x23, 0x5, 0x2) [ 490.620683][T17940] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:30 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x1, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x600, 0x0, 0x0, "b2e700"}) 00:32:30 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x80000000, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 490.787578][ T2499] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 490.955268][ T5] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 491.075041][ T2499] usb 4-1: device descriptor read/64, error 18 [ 491.225094][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 491.355232][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.365478][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.378710][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 491.387924][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.398027][ T5] usb 6-1: config 0 descriptor?? [ 491.446050][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 491.465064][ T2499] usb 4-1: device descriptor read/64, error 18 [ 491.734938][ T2499] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 492.004976][ T2499] usb 4-1: device descriptor read/64, error 18 [ 492.394858][ T2499] usb 4-1: device descriptor read/64, error 18 [ 492.515897][ T2499] usb usb4-port1: attempt power cycle [ 493.224754][ T2499] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 493.394998][ T2499] usb 4-1: device descriptor read/8, error -61 00:32:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x700, 0x0, 0x0, "b2e700"}) 00:32:33 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x200000, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x1b, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x1b, &(0x7f0000000140)={r8}, &(0x7f0000000040)=0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000005540)=[{&(0x7f0000000ac0)=@in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x45}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)="d46c8386736fa25f7889e981b0e2116638dda4e892ea525bef1b5572b9d5b089a27521b8c5c50c7677862cd10231594ad278e56e62f7b04d2f2a8c878837bcfbaf949efd4bf2b1387d2b489df589ac6f3fc1604cc2798347d232db013722023e8abbebb05423fe7d39c5b34f3d13c22002e497faf1e70fb68fa829a6fd133be3b848ae1fe417d1cb9e16618b6a3199011f69c36870b2c2c398e6da0b72c4ad4311aebefe030faebe2bd85204eca6f06c96b2d2c5", 0xb4}], 0x1, 0x0, 0x0, 0x4008004}, {&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0xfffffffc, @private2={0xfc, 0x2, [], 0x1}, 0x1}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000440)="32535b201db0ba7070d9929540c219bc3f72d57dbbf55255e231b2b87a2578f6f8779bc25d805586f36da56b583c17e3f73bec7d7fcedb6c71b4233fc1c7aea9264016fbe5f34f58652028241e102fe8cb5ac4913788a7e6ba540faec0bf1761bd17d9630f435b38faaeece74c1de42a589d4c31452f372e88fd25503bf4da87f77973815acc4daefde466df9be1946784e4c696d82cb4faa079529970f94f37b6e4602938f4f1b1f6fbe1a695ab872035d651442d87ae9b755c23c5d8d91e9644e510a566f20cba0ab2722b", 0xcc}, {&(0x7f0000000540)="a6c0e35444c06876161be92bc8adf12002ad3126d3d2baa753cc623f3b323243f95363e8beb8d1dc9dfe63dc51a1a56c2344dfa6ab75bec46198fe80429a32dc565f4add7190539f7689e4", 0x4b}, {&(0x7f00000005c0)="a517b86100212435dbce434ee098b2be61396a10c5798d178caeb5f612b1", 0x1e}, {&(0x7f0000000600)="d2502ff7addd91d216dc564a2287b9446910cad3d4d8a594535bae950f3545c4543da5c4f3598fd1a62223f50e938226fd0ef46b58f154b4f074eca5cf93f184d2b896dc23c0a1e78eb0b8717fd6334c5b12649c61066bac283dca53561fb54c6b37dca59d8c5be4a32b80cd4a55cbc94321b0", 0x73}, {&(0x7f0000000680)="21e94220dc828369de52a636b5d4d49c37dfc02cc7befa194f84495e58a431d21eea3adeede5b3aa4dcffcd662ab93a867bfe6afdcce3869dc701222e6452b17bae27137fcf5083d4f6d16fb410182ccd68a9d7bb460ee46833ba78c8d0747175d37815d48730af2074876ee041e49e1803e11ca4edce9f07c0f12ae6b34c6a7e3aafd0097b965c433387393117e60d37f2b0c7ab78898a790e26d27e48dc2062fa0601fe79a6ebd0d35109b6325f3f1886004c435412b4ff85e8094af7a42ae4fe1", 0xc2}, {&(0x7f0000000780)="d5ae89b9fb1cf5868f2db571aa3be4e1921027cf0967c9f48259a38f7c530064dbb0419ee2f581527a9747faba048e5df277752fe4343692a137d41503cb5e80907c0b15e32a013989fe61067d213dcfc96acf87", 0x54}], 0x6, 0x0, 0x0, 0x4}, {&(0x7f0000000880)=@in6={0xa, 0x4e23, 0xfffffc01, @mcast1, 0x4}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000008c0)="3681bb29416cd51cba87292f68a9632ba7c807466e640cac946732dd9c9ee8d68e4bd29346af54842613d8d825c720a2d2eb729dacae096af18b0fba9ed7b052ef36d259620a49f6552cb37aa496e29c11bfdf910799618afdc963d7f498f77631c7f6f93c19a45cc80bde93da3a4dfc05b1068b3837c5f402f91e67dd09f0ea8b6fe64196834428d68da8391649f50f17e294d19e788a1d257568ec876cebf2652dbaff1d4542205f32f7934c5e9ba25997c1a15feb75a659aa4b8762698507f3bf5526533cdb4d16b3236c27bd398421d9fb85fac7a5bb25ee538f23fe3212f11f", 0xe2}, {&(0x7f00000009c0)="5316f6f10ee29e5c5b53597b13dbf7c2a7015b1fc6baa9c44382693b70dd39d29239c8aa628b1a727a9cf71a122658b59d5178483a5574843372a74d57635909904d4fcc70eab5477af18f0d441fa62f7e8f14b1eed1d2f1744b69002a90a46fcb984448df71c365eca6ad2851e16501caca30a631fbece38106f4", 0x7b}, {&(0x7f0000000a40)="0ba9c27bd2", 0x5}], 0x3, &(0x7f0000000c00)=[@sndrcv={0x30, 0x84, 0x1, {0xfafa, 0x6, 0x8004, 0xffffff81, 0x1, 0x3, 0x3, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4a1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8, 0x4, 0xfff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}, @init={0x18, 0x84, 0x0, {0x4, 0x3d, 0x9, 0x7f}}], 0x98, 0x44000}, {&(0x7f0000000cc0)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000d00)="35d030964f67a0b78f02d72e94ec9bf3f9db58fdbc6b9edd12836168561eae37e8ea8c1337a60970a2bfde9e9dbe7298ef21363589599a1c90a1500e116ef7e544ea4bab69f7eb1401a880fc6a2dc1b7cbcd2c49b9f2d52735c3f771ee8bed52c3a58fc0685c869aeebca80f0f84fc525ce672f16e10ea34ac11344f672dc7bb89a615f77f86a93b38d7c1ac157046359ba532f7723230cd4bd193fe2b9173711e4840f4b9b382fe07e32b38d7b91c7c20380cc29546da1c441f75231a3b4b08e27970b4e109af", 0xc7}, {&(0x7f0000000e00)="4846a0817a803d04f239d049ec08e64bb35ba65d441bc5215806f44848032cd7cae8e858ba37e7a7fe1c5120270ea47b", 0x30}, {&(0x7f0000000e40)="cedf75fb2ff7cfdcb9f9e002ef735b4c02f8c143ae8089925d0d6fb1843b8a97d4059da0ea", 0x25}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="e4c3c3c309dc20321b4505e6226e7728f3955c9608cf85", 0x17}, {&(0x7f0000001ec0)="3ac9b738d309aaa81fb360725d91486287d7aaf800124fcb6f2cc8b72845e66f54482c1e216f835446edd3a8c31c67e485a7f602dd7b44e8ea791b03f9c30b4448b6e424943a254659fd3825a8fcb5160183eb449a1b6e2f18dad3d2d6caf4ab5a2264dbc0d25156c088a0ac2b80c69cae4cfec57267505e00e4f366b60731e90918283256b051fc277b398dabc8", 0x8e}], 0x6, &(0x7f0000002000)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x1, 0x7, 0x2, 0x2}}], 0x30, 0x40}, {&(0x7f0000002040)=@in6={0xa, 0x4e24, 0x7f, @private0, 0xfffffffe}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000002080)="6a79aa8958db53b2cc2c4d442b05afa205cac8fcc845b54474696148ffe5534d358d94a4119e9198a07cc0e094b2420e8c63d50427162a2bfbb87d6182bf6f4607de094bf5b50ccb824299387638b99d7f3519a0ee371d01ba3ff37e9e88ceeedef681ecdd80511831202975bfbcfe34a65fef11a3d28ae93d571aacc9219de585c768be27ae8c9ab9130d8b08ee30cb1dabb66dd8d09c91cfce8cf5ed9bb87bcbf8d1e8fb483fcfda265fa09d1a1095a8de1d6991406460b940bc5324126648e39961a9a688b56acb93a990a52e62eef2449616bef0560df1423016dcc46aa4cdcbfe9e06ae197ee984e05befda42828de1", 0xf2}, {&(0x7f0000002180)="2052235039591f13b3253a756f1bb26e32047b3cc7e84f403424bf4cd1c0c7c733548087fc82bef37f0e340246d8b622cca98496afd4306c0e910f6d99b72f41e69b1ab1953cef8f59bbe402f1aae4c644435b5b988b7629a8fa5eb17a17690e5096a5d9907da1865489ef1999c7cca57495eeeab8f6fef760524675f6da45b0a0892e38643c6f7ba6de6daccf53856e3adb5a6faa80a9e693d8d6b98f7110ddda0efff74a5c6f12df9928cc30fa82dc049853ba14b5fb4936c7d79d3b7b252ee91be793f68d432545101372242305530a5b675a7c4b009bdbf68bdd1dbea803a3c0da13c849bf922819a6890eb2", 0xee}, {&(0x7f0000002280)="c329e4bc37db71fe294665a01d545e8f4ec6aa6a4b7c093bd808f5f4317404d214b8da576a43282cdb589125c018dae96b9226042978fb1384e0100a4ae71bf608f27d64c18f9903c69b546d37d5d7671c39474c8560792918d2f3b1748f8b1a55dcba0886349442dab75459c0849d45e8dc8ff3e17608cc9b65d85c036f44610363d126d5a9a636f78fbae29690125ab909574b00f5e34b", 0x98}], 0x3, &(0x7f0000002400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x3f, 0xfd}}, @init={0x18, 0x84, 0x0, {0x1, 0x4, 0x9, 0x6}}, @init={0x18, 0x84, 0x0, {0x4, 0x0, 0x200, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x30d, 0x0, 0xfffffffe}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x7b20}}], 0xa8, 0x10}, {&(0x7f00000024c0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002500), 0x0, &(0x7f00000025c0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x3, 0x200, 0x7f, 0x800b, 0x6, 0x80000000, 0xffff}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @empty}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8, 0x3, 0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xc0, 0x40000}, {&(0x7f0000002680)=@in={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000002ac0)=[{&(0x7f00000026c0)="5a0664214bc6661eeee29cfa084d429aaa883d20b45ec91ae1b480f70730ed11af948c6eb0988cd410e9ce20034c8038fae4ded5b2ddc03e21fd218f2c0d83d69290c107993b5653836c8a4531710cc6ddf6e892f8be61af21451d05beac199ceffb6550efab00ceda8eb78d16b4dafb2573d71e2d67b2a60ce782b2e8f7577eded456f4f316d21215d0bba75032e205512b227f66eb30676fc7e5614620ea82b0ba0a5e71ccb15df78d9c55", 0xac}, {&(0x7f0000002780)="9949df24ee99f898524923e72bbd3df775c0a057ccaafee539f799dcf56cfd049b4df267b7fa33980787855d00bfb78fe62b572cc6b4e997684659980b2fa8b820bef7be374fd5d7d7cc3c80f5c8c9e641fc18dcc5819041a66f1d5c9b463608b013ff6a902555093c19b8541fd89f44b27bc5af5ac473097182860df5241fef43ae477a22254b2bdd9738160543", 0x8e}, {&(0x7f0000002840)="ab5147638bf4bb5af5e3aa404ab5710161797aca2eb66f28ba8f0514044afb4bd0850987bc2f904e86c137a1bce230c97d3a52f8957be9ad9e08c413372116b6e14aa71dcce77d8b1a79e96811062c057f17df18d14897125db42f3d244d6f24ffa46e5b73a8f22d075967911be68ba2cb14bc81901276804de5fd3f3fbed0817a2c55caa9fffb7e3f3ff3dc7bc471ba7c50e00979003dd42e76fc1d9a4ea9f848", 0xa1}, {&(0x7f0000002900)="9a36cfd7f1bd7e1d7666ef78b046b2981a4855954143a88cc0ad32dd5f54dc0e996dd5626737d9b24a54a42777ca374f9d4243b74f9d91956145e2b19b93c89ca065f4674ac2687f9d3ac32769e5868e82f0a3064919015e31c0bb1e798843ae95dc1920fb81efb6e4b4fbe2e70ece755b334cfb577fd793362362cb07c59bc59194d45d0a57890d6147e5a5d40ea6bee68649710306b93fd2aaf4e05d09a90391214ff9976c28c760b859119bbf1f5afb8d259e893c08", 0xb7}, {&(0x7f00000029c0)="ddbf96411e7954279b1a7fe8fa61ae30144c1ae837671ad4581472255f263e34827a9e3164ac2c91e0500f047213f41abaf6f5514b82325ca60866c1f1dcd4d243508fd344d4204c1253a5e91d4c4f7d54fb236b16bfa3ca9d3e9ed71ec53e61e8a032baa52465cba54d22de99f76c4e477bbc8342750732bf1f864f6297f041c965c8cf96e24d827b3a502b92fd9365e130a4034a", 0x95}, {&(0x7f0000002a80)="6c7ceca7c327362d20ef7e96ab3b781a58ea60e2243107e9e1791638c092836cb3e65d7b77b780cbf5f7fbc3d350059cd9bb19b41b1dca3f", 0x38}], 0x6, &(0x7f0000002b40)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x3, 0x7, 0x4}}, @init={0x18, 0x84, 0x0, {0x101, 0x0, 0x8000, 0x8}}, @init={0x18, 0x84, 0x0, {0xfc01, 0xfff, 0x6, 0x1d2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x100, 0x0, 0x0, 0x80000000, 0xc6, 0x4, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x81, 0x202, 0x1, 0x1, 0x5, 0xffff7134, 0x9}}, @init={0x18, 0x84, 0x0, {0x101, 0x9, 0x0, 0x4}}], 0xf8, 0x24040090}, {&(0x7f0000002c40)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000004040)=[{&(0x7f0000002c80)="97fc2e2fe84cde8dcf6fba162a98c54a1696f6c756a07ddda1a336e5ca7dd7857be4534cc4bdc688ca35e6be17e3e073167ea00d12bf2ce50e3ec53598fe49b655a845a8875c5d29b85facfc6dfc44716b7bd7260bd561e035f03f4fa61b4bb1c67b4db83ee0c712b132ac9ef5c385d7c6fe08b7cf0ed7b348f7a8bfc3fb6f6c07", 0x81}, {&(0x7f0000002d40)="5a59acbfc2ceab6f439b176224331a705517bb1ab8e026e4909bbba8332ad5a88eb992130e780d7abe9d3cbc0b7409e69d54fb316f60e012a6bd7483", 0x3c}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)="5df5a94ad3c9432bbdd1259b3f2e2c784cfea10c813d14224b6e0f38a2bcfe16386837c900adf08bea5578332993b92dfa23a95bb0074a530fd342bdbaec136707c2e7e64ab0d85683003cdb2d311d2dc696accd07d7dc5625e56d96a4c4ad0507a0a1709cd7b8f6a25eba078ce3f612c00da7b1848c110c4d4ed1f1b96778342c2e348eff52c6a1b671ea32324cafa7377823e502935b6d801ca15d9ef6834939f80a49de034e46c70251a197f3aeb4286663da175480", 0xb7}, {&(0x7f0000002e80)="9c44b6e7eb67667964eb51072f764d0f0b4fed0e9fc726f12eacbd03b4809dbbbbfa8549091df8f7bb1f5597336d0da32711196e9bfbc2706a1865887be851f710d43d3a0ce156a3af61669006073aa9e938286acd33e3fb51601f79bf3ef954bcfe875432b1efc528cc5fca133b00d59d91e097b9be8b750c4074e0699d071952a3e7be92fe89cb8477a3e6597a3236df9471ae3f48bdcca63da77bf9a39de55319aa891fcfcc67399b7bd7d8d8f117e28b9b8893", 0xb5}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)="a280055527df50b8cba788780a8693c9630b866b481886caf0a87e080adc14cf6c4be6234e6d19611a988d3406e8defc2d2b21b897b29724f4960026da9c402fa88126cb42e7a4ee5bb1753df39c4a982e38608f8e343c51c8a7174c74b82920e905792da2b750f8756afcf1df50dba82bfff9f208379320911e6afe2de8fa6ffcb27f1ed41e74c9584f630e73a217b75a4b00c018f5198c0d48e4949f9b57202a8c767341d4267582c37af3a5c9fcd06215d7a01d87d76edd6ceecca7a64fb0f065cfe333ff73396f504bd29aee19bb337ea659128e5b8a85138e30f82c65894aa3cefd8009e00e7b659d3d67167906eba7b675c3809247d7026bce6d73bad990f9244601508447999ecc12d64a041cc32d6b5ace5b08e472f9a1ac2165379a13b71b59ae06d272de57af41eff127c5a7c3cee65f299b4b7e485f24e1d4f0b6d8835106262d575bd2f99ea0c84b3918e79e238485497488e46e7282e4a420d7aa3b85af6080eda3c9fcd3458003b87be78bbcea18d4ea9da71da17514c5536f039980169466d589a4da57630877c6febe427a816f76b568780c78ca714db96c3776c3b65c5cac007774af5df98aec5e50a0d9857f91c234154aea6b2152870085e3b2925c180d2077fb64e687c7fbe6e35d73720b4519e2d56b12bc3db253a2361bcf9d6ae7cb9696676931df5993f69051de77e7b9314adcae49988fc836f3c629a00b32c108e77988f131f739d385eccbfaf9e492311c01582a411f16bfe486603484ac7243c77670826d3198091ef38ee95139427781b226157ce72d98a3be4b61b43978d4246a4e14c65d7d50c78eb17569e8b1c8e0ef7c981fa3371ddb98edf44b64d602402f6de67c09776d84e230a7cec7e64add4c4804de2295d225c7cdae0a58313605363552a85df3c1819a255118c92b8bc920a401320049a66f7fe40dbc691464111aed496b66bce6e8a4980552eb98ad74a88fc0231622abd664c9ce7b3dd08a389f123ccabbfdfab2007fd6bbc9f0399e3ee2f992ce8237f799637c4891800e71313979865f5469aeee37dbe8938373d9de7afc09cd3779bd8206c5204c0e2fb40e56a2ef628c9999099dcabe92092fe553685499d746eac4ebbbaf2df958cca06d4c2ac52f39d2f2622cb9471208fdc8da05a07a99962253c2c18b6a5b1a50f3e750647d936134834a75c02434ccbfab27d61d813a1856e0c0b2f776ba6df9627fbb8f6e6aa854e0090347c3a66dbb7439d11a08e24011813cfe8a55d49a592935fb89f4d04a5a79e896b30d34f37cb44e9659347d4da99a05ec2b774520875ec3be45c97d39628e0ea3699306dd9c497f8c6f2e0f879490242a4766d2d93c77717cd44126ce9e926121b4e64f286e3155418751900f6cfe4c81966a219f7add799646020a9480f53a13e4ecbe47e9867ea904ebd419c0a124b2ee37444084eb4d8ed8f593b996c95d5b8c45b20e4244fff9c1c341e98c1e7dbb3026d69f29a7e0b84edc61d32dcd225f2eba73133aa20b8008677783dc080d32ca242fde9e942f443680d42c8cb2a5a13973248c652da230e9f345c954fbadeb80f3e63cb33933190714bb0e9d42abbaacdb09eb8afabba9fdae85298cdb413e88f435e93432e5bc3e4ba1eb5f050f264fc4974c1b0c4f4b78702269ed19c44a4aed860818e703625db6b1cd15384b7a5614290e0076da5bdee9019a15fa7b03eecd69081dcbb7660978a67c0c76c1cbf80e4c1db689bf755bf7d6f8f366600f2c0c18862ea566a7e9e544529007239d995f96ac689a817ac8464cb00300d948cf4e0023580374c8146aa8bb0165392a04d9d0f2b42c7a0eb1ee173e8ffb932cd6c9153c46e2573bc47dc13c9c8d9e5376fa16103e6889d94a1c5e98cbc6319ea7c03a81846bdc840668bbe132ca3fe81a5ea7a2b77d0f2b4d03b84de90eb96ac1868153417383441f4c7fde625d9877aa13fc162107a188b2df5aa5d388fe5ae8a633d68bf746e56e2de8571cef08fb869bfd32b20e378637d8e1c43f22c79b90abdee83f025db3c80bd156ed388f856f7fb945b440bd20e498cf07add5ea43f01081227180326ac94891567b1efec3c6953a257d579cd26eebb9b8fe48744c20cca9a646ec84486a2b413172dcfc141d6100953b7c3bc0db6733eded95f44f15df801d0a2b59c6444580ae3f11a343dbd62b9c6dd890e3f623f13c4b268f8090d7b20d6925a94e50d8bdb6d1f01d471326f2836e9c23df8c548d2e3ae80f34be989991edb7fed0dc54b1de8d05da168a650723080214e070db817c82567c2e205f9e2b8d050be720e0bd4e17476a45af7495c498406d450861350cfddf19c99e80b226bd02bff06414b38773f5e72d145bb96e7997774f4de6b1c45f2922d31fb57a9cc6e1526e070b056e77e4c3010eb4384315e23247a70ed426519a23107855bb6d7fe859c535a0a66c4a5890971ffafb0c1c2d292f194e721d31bd5c87b8fc7e6e576213db1d10d618bd0d6ec410b819c4b39638fdb98d952f4b36264701a369187c3ede99778d34482539104a633fee8193e58738af45e095a9ba15921145de4968243f995b9da0fdb20df1878fddf56996299b044627d0b01c310049532bac2028d5430dc4d0a71d355e86a9935444012c6f32c6162805b5df674daa648b8860267cca284b189682e1bc818107f05153580714bdd6381f4c4aaa74410fc5b0dca7ef7c32c2c99dd29a9c3390c3b591f18e47dc0a0cc2ac7e4ea4948fed4fdd3ed9561c7db709c7e38f9f123d32c658321ad50d9f72bf59ef7c304f8587900879b69926529326ed3784ea11cd23756bdd7420700ba48f4579f549b3793e53d087036312985d01a68e0d3ab8e222b52f317d8ee94bb4ffd4153a85a8ff70eea158c6104901088be48267dabc95c6bbe91e59395fc3314694e11e107c005ae5616001c64f5080409b5bb3a77edb274b6a5ca004f6ae8415559e462759115439833c561b7106308858438c19451eaa53c0e79c64951f74f8be94b329ad9b8914714f2d8536770b97d644c782ab29808f27f539b760c14c3d54e1a8703c1159bafdbb790156649593eff03d67f1876701491e78cace08864ff7d8baa9d0f1285c467ea98c17b85fbea13a8428ba1ef4f572e640ed368c5939854a3a0ccd329cd1f2e63725bd2e802f0e7037e675fff91c54a1ba24de2fb4c833ea179db3af4ed69b29df3411d5205817b96fdd76c7d5f7c1491e7ab3607f0ec605b7300dd8989c52f613cffcf056b96d4bfafe86b6b4a831b73bf957f00fddb1361c8bea35eb81286806b2ff9463d8b2de3aafa89bfb55f17e8d2bf5689ff35ecd19102e36d7a6bac1bfb4e014be5b2e13abb4ec69ca6dfd36d28e182b93c5b7a37ab36047c2146c3d267bfd0caca940e4cdc37311db77950534b5bde5bcec2c7fffdc14bc6e5fd88f1a7850bc5eec3b07ef9af7ccee4e2393e414069d8b66430b213eb145b2142272f4bcd893d92e6d2d37405364466c5e72eddc532ee0647380a2d1d31ea97d5699630b1682a4efbb6606bb8dd522ee244aee4be394679f7c591aab2884c4a9f9fb903656a1f9519ace864a2d7764dfc72970bc3e1e98ccd6665d036c6417b3369aa03bf86b6946f155a5ca6d3f9ff0ce6ccc206f6eb0afa8ea7b49830e47bd21e850624cea17fd1435202d590eaa565f9d8977bea324a952a828ed29e6efcbddf4e2a0c4536a45816c07d2f351ec06d73750a80094139271689853b45c586bc6c4471b9020b677471f7e36492602ab32c577853f2e52418a5ff549c4cef63cd897cb84053e265848e0277eb73c07d9bb79941126d5d1b38b812e48ac4b05728a79ae561a3725e4a9d025675c5b9973fcbfd689dc4d8b98c22157e5dcdc78b7bb8cf723535fc5b7a93a034dfb53aed1738f50c3cc62bff8d164d743cce68f20a99d4c45b078275690b9c00c3290850ec871c65f3fddf1f12a5578573c55d3aa5e71b688749ddc39075a8f1822615a899a7688d6c751a4ee912b6173fc0a1091d60692894ff09ebe1fe0d1f0497c2a9b5edb0d2f9100b34be72cd3d4dda7e4467f3fd19a4cdefc3c62c1859eb5fedeb015fb6f96004361304b399c15aa8ced3efdea074c99564d81dd6b671e0a6805892201be9e0ca0fd68ad64aa686b34a82b143978761aa2070520c50e9de5bf23e8bb66c2c1eda531852661f156b48fe2c29b7a2e7425e530ffc636361bb276b903a95d08c681aefddd87238485ae1f7005b0233ad49588f6cc7c8fe5cbf6b7530ebcf041b509104bf137a916180969b287618e08a17f2b4ffbffc0ffcf10bb35b2b38eb253e23bdf6b62b2f87151e5a4a780bc2d9ef2180b5f1e6195cbbb82c2311c4c4d09b655024fbaaa2c6237ccdfb023fd829e596c41605597e7ee481ff935dcc551751db6901a173a8bf9740e262397ef1263d18a524d196e76004b4187ac6ff0fb0fb8e5abd2a2c0c4f202ccb2144bb53767026a8a5385f1030a55497cbcaac90b77bb4906f66b59b5ea2d5125267273630b89249d129ece920376168a07c89db0361a3e4c59ae48b23884d48b00dd9e06861457ebb3f22e33e4a7a096b9faeb232e083877a1685f8aea780ae17fc7f07999e7372545fc055acdacb1caa2cb27a97903e8c9802c72d9a999edf42ca6887447f4306893d25e27ce5411436e01f59f2f7651dfda7c2e09ab1b152dc02c62e4cd8b081f893c871955cdea58a167574609ec7eb1cd81754672a7343a7dbe1470a0687b0dab89bdf727b6e59d524074c14f01196512c52ddab3d5d73fa3d3290a02ee450d20d4d846bd89fa1cee955e4e5141c37b7ca292c6b3561fece61d267870ac941eb22d31d8e7545d564c8bd38cffb8a7591b7fe764001565db53c23c535a67590826d63d4aff6657ed83027fa2f40c3c70853e71a26fab5b5c0a479938fd15167bae1a34e668366385a1fc4c3507ca758837ec8e43dd7095df93a40238bc8556b9550dcf7e95527d940380868f8639e59fd3a9a66ec60154dcdedc449dc31c0aeeea463b10bf69bcd5af92684961ec25b58ff4c3b4dc5d36d4dee82f69c414a650a511b24abb21d419d61d3529657b88e5a7acc00dc8743df008c5a12bdc92e24b2e5d66403c29fb43f76effca79b0b46d4455a0d50191686cfee14915417a501464d2c4fcea6e0b8af331857cec3dcdb06fd2cc4a98a22ea29cabc3fd416a4c239ade385d8236185009326b302ec5aee4d85d5a940fb3330d7a4a0e72e66bf908afb266d6ad1f0e9bb81814b27011f77320606236be0d8d7b857214e2747f5e8a89f4b572eeb13307ccfa42a8f1e2c0e81d6edf26e935e978d05634b3377254c90e28f0999827ed51895cb07af3058b4d25afc3baabe778a40677e49118aad6f73ea13baae4dc8c5ca57c8d7ab70268639c32f9739494f4bdb34e99ef5db9d8d8a7bd28a85c7df4f0ceca0b5e72fd8c48b9059b9dc2c60353e1c797ce109da1cee1ad078db97a3fe0bb306e1b2ec45c6377a0360fd92a1d27e97fe246beaa194740a27c6f2913d5d66ef380798b92592b9093dc7017009ccbb756155307f45d56ecf7ec211782fbd009f4f1cde9c01b1aa41024aa04b670960f1ea20b99aad25a6e9655824af450864eee0b5d73ffd00ccddc8d1aac855fb26ee12316a0b61e1847f8a720c0b9297b11e3c1662337fbdb2d1cba69c90d9d1925f272b255850173164f46c67a468c3603a4e3336cdecb6f48f58df0aefe034113c6af0ae14d0eb12462f9c22002d4fca78519d99d551a5b36af44ab56", 0x1000}, {&(0x7f0000003f80)="a33eb58a8fcd7d177dd01961aaf81995baff83a1b9d3420fc536010619f15c8795d102c8e3c9b7e256888331f0405a07d467561d07f53d7477881bcd8f0e571ebc00ce323838b346a9b2b0f5789600cdba52c84433e360a93c035758cd60e7b3bf9d5d448e32e3ff3c43dd9791eb1972e9ec7f7bcf90d90503ad04b59655720495ab1fcd5fcb0b49770a5061d300f967040ee81cbc4d18", 0x97}], 0x8, &(0x7f00000040c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @init={0x18, 0x84, 0x0, {0xfff, 0xffff, 0x0, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8001, 0xc, 0x2, 0xcd, 0x6e508a26, 0x6, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @init={0x18, 0x84, 0x0, {0xffff, 0x8, 0x61, 0x7}}], 0x90, 0x10}, {&(0x7f0000004180)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000005280)=[{&(0x7f00000041c0)="dabd4aaa7be40c74793c69af58cd7de36310bb6d9bbed6b35b969916188206348ad520419b035602ff6c4afff07bef66109d504ecbf767a88a7b11a3e05bac13d20af1d98b717b6d9886ca19d0e654ec1d913a4965be0a73d2a99bc551a40d9d9c79ed84abc08f3ab737391b80aeb0381f5a5b72019b2e4a3b60d85cea95d420a88fe7af72cf3a74c41fdeb95d0772ecda874776cf6470e72d277701fbdac8569b19669573760b7c87c45a997cc768716f2e6308", 0xb4}, {&(0x7f0000004280)="e1a0f97a688c4a64d4c78e2fd87b440c8df8f6743a25644753ae23f609ea81d00f25a5b77a81fc000620ef252333a9a92c377902b457b97955191b70c389ea243521ff07bb3f35035023696e5a460cdd0ca8214a405c6971cf34369caf2079116f44fad5f2ad283217dc38b43110e3b4dd81cf2c76ec0cde27f89a38646ba7821f8748b7718c531ebea822d42733c6dc10942dad2ce0e072886f44eefe0dfa7c460070e4d92e91ed02579ef0c7794ebfe8f4ea28ca0eeeb897a84934d8944e6ca3728d6cf0e75347d223d888db48a39512f36695de94fa2d6ae8baca95e70bdc31d72d1189502a80930e43a372d5a50fc9d94c00740b7de3809316ab7b66270d3d95a85327dc7561468fcc04842b51cc486419e0d7e877e1f8e9fcd3a1245b24f9a18e6499d1615e07e27e28cb3851f4b5257ab0bfb5ec3dee1f36a4372bb2394004de2e662632ae01a2f91e39959fadd30a34d7e0838b3c1f426a028ed07d973a097b22bd70f6dfecccf7f1b29a5200eabf63286011d9fac44ad1a2eeeb8da1943364590bb9c213c753708d7565feb3d5d4722535a41778e47da285eeec0b2505439e47fb9ae5954c46baee69e2196ff583691f3ca7ac745112130b8c8650011b7f8e01414d1523436cc98ad0dceb516c0fbc8c5c6cd7b9586f732753d2af4b1f8e050a763a410dff74d9945606627975b7a246e170a4179d24498d0830df18e17374125119191a7ff9819a573cf662c574cfc3d4d68cad81a1eb3f051f599b07a93c76ca6cbc978988d0ac45705fcfe9188047c1a1444d398e2af5f82fa83921dd9d7cac997e43d80886cb17ad362ec0045f78aa2d8ea41d2f05012a336b814ecc859d642be85f04ae72427dd3dd0a8f307db64721b74a8d0fc300dc346b61268f76dea95d11df1ab370f4d69894bad90e3519b0c532182de3c33316608a33d4d5dc2e646ba8689b4eebfccbfac918cd268ddfa4650bb5c982e2690ee3f389b3f0585ccd65d9c3518ac6451c6f3a2d82eaab04ed4e2b3d1bdda52df6775f0bd8b5c72e19af8b95617b449b5b1aafbfdf4c3b32ea57acca7d4362d7a15182a979e59b7c75735ea66e3b15110756efc70dcc9c3f2140d2b0c3c92d592fa5a899d452e0c0aa271d5fd05929c687a8b56c8f6e3e1a0bc59a267f44526693514d90a716290a97ec21d75c7d329ccb9d3f72126edd1288297dfed6eeb302323ebb74c4685886551f8fd534ea33892c7cffb3e568ac5c85dc0de14800811367d9f8d6ab1d951788a980bf2c0c388e392d282187a03f3694959bffff5057a71f88d2d4beb73c9c3fe37333ba2602fdc9b60e5d3e09adbcb2efa8c7aa055079cd4892042149494a4f9a44f881c074950460e4dd481718b96da65f9d0e222cb530aa11cf60e743b7bdb061f3908c6a1b92f42a35df4bdafdd330286f1203003287663fb4027e9336cdcfecf8103731ccb9bbc0782ce305d72321e7afb98247a29757580a469ccdde8c3663151d8c53fd361af715a990df3d2c82e076ce44817c9937f4d5fa9578b5544cd3999b59d8a96cf6cac347495d0b7b3c03bffca60a3accaab620e587812f2ba144fcf857890b3f29a080e8932c2c5de2cd10761f2938a98618075c21de77c94273966919acc684c6a9e1ee2c6556b8ccf7ba4e560230bde1674afe251deccf13d97307861c6f5556b792d91d30e7cace879163bf282d3034375c2ac3a612e89a4fac761d47ce4daa5221349fff906c07e4d20744c150c96fc20a6dbff5c1177e867a517f17034dc564ebdd9600f47cf0c88fd654c0817b1d28ff0abc793e687b98c3bdfd00cc2d517f0ddb905e389cd884b67af3a040afad447468853fd23dfce5393980c76412d284daf5f2a0bb2cb8747ff3c3ba4a749526cfca71bff8edb71741f113dfdc9748f6d42235c7630c001750ddfd307afbef9f44a8e3c5d37ed9e372fb11b71291bb72c4ed82c6a26ffe5207c525b1b8b1e7c274d3c953d7537b419d6a9fe6b1e15ff3a8769b3ce93d6369f2dbbc7f3f17d25750f81737fc43daa3543780f3cdcefd547ab9dc37a5154c11b062bb894ead10ca7bfb31a4850759a4bb7b964955a930e81cc4d7202ceef57b98adf730aea74580fe3fc9b6873aedc711df40d2fb7ef29049abacf58957b27e85cba926378b1f9a23a31a3340d7f02482b5d9518938897a6609b7792b2e114343c80e77ce14bf55a05624daaed2e1d10676ee89a4a1948b8d8b813ead799c9af45b6635f80e23a1e5c238a95e6b8eab050b5dde4d3e9fcb061ba46e922915272945f1456643d7fdf953b56c9432f9f928870fc9ea35bb68cc28aebae9f466889df442b44f69e9c6b960ba6053d9d31370941923e8d2a8fd6c05b2067f5933f110e1eb1c7fe8d534ed3def51913610fd044cb466ec35e2959e9a5522b23946999ffa42babf77851e39013a0b634759490a08ebc6c8774d91b30e275d0167d46a1adba5cff3dbc238453ea34fe96f618ce5b15abeb57550266e2ba4206f5431a71568e17090dce53d8f6ec998c59c3126860be7187c8d43b27340d301fd0f5f828742dd0682be6fe6a529b0ca61c57ebeb96010dcc47867e08a4056b447b6b7b3d94b383e5214639ff84c8043552cff17eb73736983bd720e7f7cc22d264e341d8259cbdf5a6a669fd5c294e3d70dc2d8e42745bd72b8c2e4d88ab1ee086db7af741b284f79977930d0516881f7e5da9fc21dbca7c621eec3bbab01768d0b4d5206344e63977ef978c7ddc4abf3377075e223c1c8b4c8dfa9562204525d924d60da027c2e61dbd5273e816028a08b1db994b1b2544b7aea490bbcc8dc7b619a610f2fbaa377af3ac2647c61ffb07ca871d4bac157b052cf6baee17a8c8c4dd85467a1319ad687cca11f8662a1634af785df955bae3e8d315ff66ba66eae12aee188419436c58c58beaea4e5580857b31bfe1e8b32b0b2a78caa7c49ddb85641166cb191bf8309f9662054f6deef347dc892191e33bd45a5ad4aa4420a9b07aa85e2959aaaf5a35796b199af03051672b6d35bab5518e4e5cca88d3bc011e85006a1f39f14d2310d623bfc655fc0e93ebe2663a4cdf10e2306bb528f15fa9480cefb2952b4b5eac3d485f4545fe11bb7525d64139ba23749ff936c4c56d5085e9abad468280b8bc5d9fc0c8f9985578b75e8e9cc67631c43a150ec3c491d0714baadd76601be3441a3aac61c1cb54e750af52952a3761fada7c71782e158e46eb853c0d741408687bca89e320cc39c4bdda01b071ed0b81c6b3b74a814daaae4977f22501a26c3ab6b61307709b6075cb8ea74085cae131d0ccdd602e7bfdcc1cdf6a4ed7f0e72eaeccb4dcc334c19e327c8c66f4635d4306891c474663220dc92307489ae10a282341c133d08a7cc2d3090caad16383956cbd6859bad126598faf8b0612e1388ca8af658579c8690a70a67b2cf648c3a1298a391b1ac15779d17095ea2f7e255ad1b533c95e541faab6b426e93d67228f9435048227aae153939ac29446d0508d61fc1284f236497e043c20091dae0cd709d63aefa97063d06ff91113946fedd4d14f3b86d342ff8a6d6d7697e2c23acf8fc4eab3ca92802a07b3e438cea216f9874858cc37519c95950db15888b091f30dddfadf0909e11fd25e01d4a68f9a5e05aed9b9d499ff863794931779c95110db7272a0df26b50686be8a4187f0ce9d582892ed5b364674e9688b8fb9ed2dddd99ce46da5881256e4ac8fa6045ce02754feef465d8b12aa6bc288c23c83c410279a0c382eb1a55aeb672250073a291f70470bcdda404c680971884e312e0bb14750740360ff3c8a613bbf872536e86a033ec9970a0e192402f3027925f3c8703f8c0964630ecec7f8e00dc188879cabeabdc004c279121cc0c95587e5c52ead57facfce8610cb59d82376114640cee30ab99c80eba8044fb2c6236df2a5422e3086683ce68c9afc7a1ff2a1e3416e6807ef1a30b1ec5df55fde051de2f226b6e2be1d1e3987e77631424433d9317cef82dea6e4676e72987e60fad84ad853d4730472ae5bb51b3b21150af3335d1d6b4b77d4347c340e05b5d943b478f9fba909d990b102d98d220a2575ff93b25599a863700529ef5cc030e66d01830feea6db0c49708408395c225de78a64a8ce8ac64aa17cc38f3760e982a7a82af86c09dc4da72a39c81c694773b0503f284cba8e0c3d3738229d6ef6fd92b3fa7289fee32f76100a2c0bd2571a4bad6a201bfbc1f0cfd9eedfd1a1d0f58aef250c2cf95953078ad5e8c2a1bc4bdf78692e41c74cbd804996ff1b3c0043407c6a19e1f86d33d4b7523321d5c058b042ec180023d3745fc681062751b090f9200905c1029d1c7131eb933fe18012624bfe337f98a305330f5482f5fbb2514b61e1d60876c5cdce4054cb3ed2919f749f3838ad2523be9b45e15b4f78a897bcfdb56e1c9d30362baed6fc6e15c9aa0212669fe372e16295c8129f7f122fbb7dfeb025b553679332890f0b0f2f2e32bb03912d6de445b4c62e1a839e70e0b5756143c5b99a0d38eb70938895ce2f73d43fa8f985c4226f3af250704cf5d1c2f36a4d5d0626576269e2bf5a89721b7693a710da99deedd265d3ab1cd667a4dfdc78213e404395ce28ee9b843acd08f35592195e2b9d405510d1cb2240dc13349a009674df9927c0b0e148d3798c67cfda75a34283f52726dadeb56b6724d8d2d1d646b4983fafdcd8c2d55fce1031ce5281b795a1bbb06d1133bb0dbff0aae59a58111ce0d78372d3c9101fdcde1f287291b2b0b91330624ea9f8691af1a8c4fd67348a56edbb9beb71d28c47b9989b49903f23d6248c5a66ed8b24e1bdf3ceb7f5048d46d630fe70df4ffa15a06473ff57302d1548320e8799e781a37d90191af5ebf4f1e0f8c85321e325cebf95fba8b8be5130f511d17d67a4a18e4b9763284d2994929f9dc3204ddbed92472b47c2872c92f6ae99c76783d21c2aba68888826a6ff8174eb3742f9ebd468f8c59c5a4120ffc9168e374afc7dd2f5245fb0ab708a8567f7eae78f4aa9d79b884fc394d938e32f5d9564f7f903d6426079fa73d4e83d316724ad46d50ab14dbe3f14704c0652a05a306fb6b7a2b6f19f15ccad879dd49f0b0eb7f7e72c7daf6c4c7a5df37652e43d8503cc7ab83b4bdd216f94ecbba4b92647051990dd1a3edb5a5917e98f44ae2a521b526c77f9de084a91cb4296003673310d8c5280bb1671c0560ab6288415f9eb740dd55245e5d801bfe5e12d48a3eb05f05eec652654351d04b8433e992a259f840e447d229e675742e96e16dafe713b4d80545412b747e5a9859eed1d1773f2338b42dd4affc202a94672bcd1f65e41cc40769ed14b48fd139c194414e3d729b1555d8d7a5559be4afdae06da99c65f79a7ee851391149823e0446a10499a6725e9efcaf6dd6d5b433dd2363f0976b00f47b7438d485de71d9194bf820c2f499a80e1f1d128e29e1b9ca17a56963628594e524bdd740a927b6ec6d5b971df502f99c3197d59c2a0e68ae46855fc1bfe35f5054e21b7a39cfbd5482f3f99d05d11d3cf0c444f17ae2c3f5e9e17744e072ade37cc461a1fc6ad2372e847bbe6d04231475030bbb1576abe1bd3195ba96cbf4d2de52f2404f0844198a1e65bd44d549a47457017fcfa0a7bfccd8576d5b17b05e0c0c4dc370290d32891fcff8acb922b0b8945c0ab16adae9a2c23f348727312db4cf2fb643601f076afd22a286cc96637f8325edb620819781e45f5ec9f8cd338734c39eb4566f3ac0f37dfaba7dcd", 0x1000}], 0x2, &(0x7f00000052c0)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x8, 0x400e, 0xa5b, 0x1, 0xffffff17, 0x800, 0x3, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x0, 0xc1, 0x2, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8202, 0x1f, 0xfffffff8, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x292f, 0x200, 0x1, 0x2, 0x6, 0x2, 0x80000000}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xd0, 0x4000000}, {&(0x7f00000053c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000005500)=[{&(0x7f0000005400)="3ecc035079a34e90d55a2b891d6fb40051c699cc0f7c0dee71e4d038ae88e6906f83a6a9d2f1d66386fb0a4a666c96b8a3bf0b08c4be8edb3078d79dbeef59aa5a0b68675602a2c4f543f1fbf9b6e79e65d44ad6379db0829f8889b20b8a804f4f0bbb9749f42988193d6669b500a9ba76a76c555154752f6acfa33b2514de67f49b6f9af0c0e48a41d6aa0d593e40c0f4e2c89c49a5", 0x96}, {&(0x7f00000054c0)="edbd548512b7d0deaec1d6418ced4b993df3e90a89efa81a2dd57ee37c04075f60d86cd891979c198df5d72a23ade2aab8e03c", 0x33}], 0x2, 0x0, 0x0, 0x8000}], 0xa, 0x20040000) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000180)=""/101, 0x65) 00:32:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) r4 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000440)=""/241) 00:32:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 493.502079][ T5] usb 6-1: USB disconnect, device number 60 00:32:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 493.604760][ T2499] usb 4-1: device descriptor read/8, error -71 00:32:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x900, 0x0, 0x0, "b2e700"}) 00:32:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) msgget(0x0, 0x0) [ 493.683144][T18004] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:33 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fkle0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 493.952220][T18021] overlayfs: failed to resolve './fkle0': -2 [ 493.979750][T18021] overlayfs: failed to resolve './fkle0': -2 [ 494.064707][ T5] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 494.094671][ T2499] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 494.264665][ T2499] usb 4-1: device descriptor read/8, error -61 [ 494.314639][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 494.454709][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.464954][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.479522][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 494.489208][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.500945][ T5] usb 6-1: config 0 descriptor?? [ 494.534776][ T2499] usb 4-1: device descriptor read/8, error -61 [ 494.545395][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 494.655300][ T2499] usb usb4-port1: unable to enumerate USB device [ 494.927682][ T0] NOHZ: local_softirq_pending 08 [ 495.565620][ T0] NOHZ: local_softirq_pending 08 00:32:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xa00, 0x0, 0x0, "b2e700"}) 00:32:36 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) 00:32:36 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000440)={0x12054800, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000200), {0x1}, &(0x7f00000002c0)=""/11, 0xb, &(0x7f0000000340)=""/79, &(0x7f00000003c0)=[0x0, r0], 0x2, {r2}}, 0x58) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/101, 0x65) 00:32:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 496.586564][ T2527] usb 6-1: USB disconnect, device number 61 00:32:36 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x4) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x50100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:36 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xb00, 0x0, 0x0, "b2e700"}) 00:32:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) 00:32:36 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 496.785429][T18069] overlayfs: failed to resolve './file1': -2 00:32:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xc00, 0x0, 0x0, "b2e700"}) [ 496.840308][T18074] overlayfs: failed to resolve './file1': -2 [ 497.010546][ T5] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 497.044363][ T2527] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 497.284150][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 497.324298][ T5] usb 4-1: device descriptor read/64, error 18 [ 497.405512][ T2527] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.415884][ T2527] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.429955][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 497.439625][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.449140][ T2527] usb 6-1: config 0 descriptor?? [ 497.494956][ T2527] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 497.754109][ T5] usb 4-1: device descriptor read/64, error 18 [ 498.024145][ T5] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 498.304047][ T5] usb 4-1: device descriptor read/64, error 18 [ 498.724014][ T5] usb 4-1: device descriptor read/64, error 18 [ 498.846345][ T5] usb usb4-port1: attempt power cycle [ 499.564467][ T5] usb 4-1: new high-speed USB device number 48 using dummy_hcd 00:32:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@remote={[], 0x1}, 0xe, 'syz_tun\x00'}) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xd00, 0x0, 0x0, "b2e700"}) 00:32:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) 00:32:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 499.641167][ T2499] usb 6-1: USB disconnect, device number 62 [ 499.674054][ T5] usb 4-1: device descriptor read/8, error -71 00:32:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xe00, 0x0, 0x0, "b2e700"}) 00:32:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 499.883891][ T5] usb 4-1: device descriptor read/8, error -71 [ 499.941099][T18123] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x1100, 0x0, 0x0, "b2e700"}) [ 500.204009][ T2499] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 500.373838][ T5] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 500.473778][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 500.543805][ T5] usb 4-1: device descriptor read/8, error -61 [ 500.604965][ T2499] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 500.615540][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 500.624961][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.634109][ T2499] usb 6-1: config 0 descriptor?? [ 500.674790][ T2499] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 500.813854][ T5] usb 4-1: device descriptor read/8, error -61 [ 500.933852][ T5] usb usb4-port1: unable to enumerate USB device 00:32:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:42 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x198) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="557070657264690800001662757369725d2e2f66696c65312c6c6f7765726469723d2e2f66696c65170000000000df00"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x20) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r6, r4, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0xee00) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x100010, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@subj_user={'subj_user'}}, {@seclabel='seclabel'}, {@subj_user={'subj_user', 0x3d, '['}}, {@pcr={'pcr', 0x3d, 0x23}}, {@fowner_gt={'fowner>', r8}}, {@seclabel='seclabel'}]}}) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:42 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x1200, 0x0, 0x0, "b2e700"}) 00:32:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 502.715533][ T2527] usb 6-1: USB disconnect, device number 63 00:32:42 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 502.792004][T18171] overlayfs: unrecognized mount option "Upperdi" or missing value 00:32:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x2500, 0x0, 0x0, "b2e700"}) 00:32:42 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:42 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 502.976054][T18186] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:42 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 503.123446][ T12] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 503.225085][ T2527] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 503.373387][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 503.463362][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 503.493550][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.506247][ T12] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.515449][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 503.527602][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.537054][ T12] usb 4-1: config 0 descriptor?? [ 503.583471][ T2527] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.594386][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 503.605030][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.616453][ T2527] usb 6-1: config 0 descriptor?? [ 503.664391][ T2527] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 00:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x5c00, 0x0, 0x0, "b2e700"}) 00:32:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x5) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:45 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 505.748566][ T12] usb 4-1: USB disconnect, device number 50 [ 505.784971][ T2481] usb 6-1: USB disconnect, device number 64 00:32:45 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x1000000, 0x0, 0x0, "b2e700"}) 00:32:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:45 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 505.972365][T18243] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7ff, 0x8, 0x4001, 0x2, 0xc, 0x10}}) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:45 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x2000000, 0x0, 0x0, "b2e700"}) 00:32:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) [ 506.233103][ T12] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 506.278075][ T2481] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 506.506958][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 506.582982][ T2481] usb 6-1: Using ep0 maxpacket: 8 [ 506.633140][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.643498][ T12] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.652432][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 506.661962][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.671283][ T12] usb 4-1: config 0 descriptor?? [ 506.733770][ T2481] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 506.744303][ T2481] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 506.754714][ T2481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.764338][ T2481] usb 6-1: config 0 descriptor?? [ 506.815168][ T2481] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 00:32:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:48 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x3000000, 0x0, 0x0, "b2e700"}) 00:32:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:48 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000000)=0x6e) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000440)={0xb, @output={0x1000, 0x1, {0x9, 0xfffffff9}, 0xf4f, 0x100}}) 00:32:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) [ 508.818194][ T12] usb 4-1: USB disconnect, device number 51 [ 508.851978][ T2551] usb 6-1: USB disconnect, device number 65 00:32:48 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x4000000, 0x0, 0x0, "b2e700"}) [ 509.027344][T18317] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:32:48 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:48 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x8001, 0x200, 0x0, 0x4], &(0x7f0000000200), 0x4, 0x400, 0xbbbbbbbb}) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x5000000, 0x0, 0x0, "b2e700"}) [ 509.272776][ T12] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 509.332802][T18336] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 509.347146][ T2551] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 509.522582][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 509.592613][ T2551] usb 6-1: Using ep0 maxpacket: 8 [ 509.662924][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.673067][ T12] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.681992][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 509.691215][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.700556][ T12] usb 4-1: config 0 descriptor?? [ 509.713013][ T2551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.724214][ T2551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.735084][ T2551] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 509.744364][ T2551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.753924][ T2551] usb 6-1: config 0 descriptor?? [ 510.234101][ T2551] hid-picolcd 0003:04D8:F002.0077: unknown main item tag 0x0 [ 510.305688][ T2551] hid-picolcd 0003:04D8:F002.0077: No report with id 0xf3 found [ 510.313468][ T2551] hid-picolcd 0003:04D8:F002.0077: No report with id 0xf4 found [ 510.441222][ T2551] usb 6-1: USB disconnect, device number 66 00:32:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:32:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x6000000, 0x0, 0x0, "b2e700"}) 00:32:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./le1,lowerdir=./file0\x00\x00']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 510.999404][T18376] overlayfs: failed to resolve './le1': -2 [ 511.022609][T18376] overlayfs: failed to resolve './le1': -2 [ 511.262495][ T2553] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 511.502500][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 511.622670][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.633700][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.644812][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 511.654542][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.663864][ T2553] usb 6-1: config 0 descriptor?? 00:32:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:51 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x7000000, 0x0, 0x0, "b2e700"}) 00:32:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='f2fs\x00', 0x80010, &(0x7f0000000440)='overlay\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000500)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, r3, 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040004000000000008000000", @ANYRES32=r3, @ANYBLOB="10750100000085002000050000000000f2aab40017bb318d60374a3baf27777a862f9a763bb519dadf756ff5315d"], 0x6c, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r6, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000000)='./bus\x00', 0x30281, 0x12) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f00000002c0)=@md5={0x1, "12c4c1c922b602685297f5adafdb9c35"}, 0x11, 0x2) getdents64(r7, &(0x7f0000000180)=""/101, 0x65) 00:32:51 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 511.887319][ T2480] usb 4-1: USB disconnect, device number 52 00:32:51 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) [ 511.988011][T18403] overlayfs: failed to resolve './bus': -2 00:32:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 512.143729][ T2553] hid-picolcd 0003:04D8:F002.0078: unknown main item tag 0x0 [ 512.215644][ T2553] hid-picolcd 0003:04D8:F002.0078: No report with id 0xf3 found [ 512.225313][ T2553] hid-picolcd 0003:04D8:F002.0078: No report with id 0xf4 found [ 512.344775][ T2481] usb 6-1: USB disconnect, device number 67 [ 512.355509][ T2480] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 512.633110][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 512.763275][ T2480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.774006][ T2480] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.788128][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 512.797861][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.807380][ T2480] usb 4-1: config 0 descriptor?? 00:32:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:32:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x8000000, 0x0, 0x0, "b2e700"}) 00:32:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:52 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:32:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f720b6469060a2e2f66696c65312c6c6f7765726469723d2e2f66696c653024b7e80cc4b491700de3609053de6fb23d0000bb21cc7e5e2add5e5281f67c12d7d735208092e91c077332c801d80c7e1005"]) r0 = socket(0x10, 0x80002, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x400, 0xe8e0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="d81500e5", @ANYRES16=0x0, @ANYBLOB="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"], 0x15d8}, 0x1, 0x0, 0x0, 0x2000000}, 0x4008000) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x1, 0x1) creat(&(0x7f0000001ac0)='./file1\x00', 0x6) accept$netrom(0xffffffffffffffff, &(0x7f0000001a40)={{}, [@bcast, @bcast, @null, @bcast, @null, @netrom, @default]}, &(0x7f0000001b40)=0x48) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000001b00)={0x6, 0x53}) [ 512.870685][ T2480] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 512.910634][T18440] overlayfs: unrecognized mount option "wor di [ 512.910634][T18440] ./file1" or missing value [ 512.939538][T18444] overlayfs: failed to resolve './bus': -2 [ 512.960969][T18450] overlayfs: unrecognized mount option "wor di [ 512.960969][T18450] ./file1" or missing value [ 513.202156][ T2527] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 513.472875][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 513.614847][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.625904][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.637285][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 513.647213][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.657280][ T2527] usb 6-1: config 0 descriptor?? [ 514.143212][ T2527] hid-picolcd 0003:04D8:F002.0079: unknown main item tag 0x0 [ 514.223108][ T2527] hid-picolcd 0003:04D8:F002.0079: No report with id 0xf3 found [ 514.230963][ T2527] hid-picolcd 0003:04D8:F002.0079: No report with id 0xf4 found [ 514.344477][ T2527] usb 6-1: USB disconnect, device number 68 00:32:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x9000000, 0x0, 0x0, "b2e700"}) 00:32:54 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:32:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,work^ir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x1) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000440)=""/4096, 0x1000) 00:32:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000340)="f846198c50c14b86f97cd1a585c16567675dbe5375a8047911419a73000c33e8deaa31ebd0ad07c17f410941501d77eb897e97d9c01caf958f4a8a124daa6472520af675fe769756da93188a157036efbb187429428964549f") mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 514.934361][ T2553] usb 4-1: USB disconnect, device number 53 00:32:54 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) [ 515.031788][T18490] overlayfs: failed to resolve './bus': -2 [ 515.034446][T18489] overlayfs: unrecognized mount option "work^ir=./file1" or missing value 00:32:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xa000000, 0x0, 0x0, "b2e700"}) 00:32:54 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) [ 515.130638][T18499] overlayfs: unrecognized mount option "work^ir=./file1" or missing value 00:32:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/101, 0x65) 00:32:54 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) 00:32:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xb000000, 0x0, 0x0, "b2e700"}) 00:32:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:55 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 515.314129][T18512] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 515.332708][ T2499] usb 6-1: new high-speed USB device number 69 using dummy_hcd 00:32:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x5400, &(0x7f0000000340)=ANY=[@ANYRES32=r0]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMGET(r4, 0x5415, &(0x7f00000002c0)) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2) [ 515.411890][ T2553] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 515.595760][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 515.681962][ T2553] usb 4-1: Using ep0 maxpacket: 8 [ 515.722303][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.733399][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 515.742788][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.751647][ T2499] usb 6-1: config 0 descriptor?? [ 515.812220][ T2553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.822521][ T2553] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.837849][ T2553] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 515.847544][ T2553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.859589][ T2553] usb 4-1: config 0 descriptor?? [ 515.907378][ T2553] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 516.472063][ T2499] usbhid 6-1:0.0: can't add hid device: -71 [ 516.478239][ T2499] usbhid: probe of 6-1:0.0 failed with error -71 [ 516.489611][ T2499] usb 6-1: USB disconnect, device number 69 00:32:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:32:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xc000000, 0x0, 0x0, "b2e700"}) 00:32:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001030101000921000000012205000905810346"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:32:57 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:32:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 518.003132][ T12] usb 4-1: USB disconnect, device number 54 00:32:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xd000000, 0x0, 0x0, "b2e700"}) 00:32:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) [ 518.107753][T18569] overlayfs: failed to resolve './file1': -2 [ 518.145580][T18569] overlayfs: failed to resolve './file1': -2 00:32:57 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./bus\x00', 0x2, 0x4, &(0x7f00000014c0)=[{&(0x7f0000000340)="956b4e9dac5a9f5c96b609036557b6a463a4f824ec28df0e81896b706bd3a7ad83ceeafbe926256240b9f53c10e77038ba0fca6fbc735cae7fc418e35c11f440360cf8c6d0ab8cc8f6a68ccdbcf7c8d1b30fde50fc78f66fedf10640200cfa36f2e762a75bd61b997c0f8923a79f04a4d03566e8f0bd47270b90ef1a5a727733c5ffaa28c69acb986b559c1a00c81ecbbb7d5c1da9937d19f27d40017db81bc5153b0bc490195abcd2a941d49b1e3f5ce9713cc3293db16d", 0xb8, 0xd765}, {&(0x7f0000000440)="be86f6e2c0fceddd46904d2e57f869ab49328c852b96a2ed797cf8cc8dcdc44fb189ba4b20d049bbb083e5e6c4ee19ac078d326ce44ebd525ccea3f952aa6f7f3b2f53a6ee3eb4cfb26bcecfad506b9b6cc18002bc3911264812b26d6c0c666d45e879200d59b43be1cd4c89b6b14f537dc54e9c6034096e2cf26adb041f3240e0b3a84afbf74f7e72c386bd2b371e94a127f3f1af0398979c78ad00acbbe42eaffd98fc5a2b325f72cd443d59ad5d1d76f531deee697e07431c43d3e0dc00c2adc0c805b05462de6e1541ab8552e25ae34bbb5c2ad2129316c16d2ca04554b0c0829714de022337e98c38cd9b0050f02577a5e5160243ceb03e53d6f4b250d97f9b0bdef95b930089c7536afabe3258e60411461228c2125e19087a58d3b328889452e5a7f74510bf0d6535fca6f828dc2c38cdbb011ee36091db35b36a69a71914614bf08af96762fac2c36176992526c5d93fb4100779621f254c09fef455fbe4d7bed65301c9cff389a8b95ed3c16ed7914b3e29cdce7668eda2758f8df936af7059313e8f62588e1366848d59c60907a91cd50b73f042f1c13f539685bb41fcc64f87650d9cfcf32f516450b4081ad8dca77de397a2cb4575f1c1279858079d1b941ea85ebb172a8d7c8df0a6707f201d7784756c453a7f0a82e2914aa92a8ed78352d15fdf4f0e893fdfb023a4ad38790702d0096458f5866fbf8362f74cfb933f61268c66764f42f8a6291939c93de233e9894bae5afc3e8730fa695a1f80cfaab267c4dd132637d436d52fd0d11b126cd72538478d77282b4a38b2bcb8f586f59f6542f27f7ed0381e25a62dd057c5cff548f921052bef599d8d3258ab1ca79a3ca1ed4e09b04e7d4573a93d878869025579407a46c7c017767eae854a2822b21c88e57e525b4fb1908e3c9586681b54a8ef90ec31fc876510f40d95f55cad975a89da255c10c16e8fbf31f17cc1fe8288988c56aeae619b5ecabef9f093f9e901321e786f18ce2ca2107b161e56397cc828168aad8206919cbf308623276b186fd4f3df09c13d35b90026ecd11d7f8687ea68fb58fd0e36fbc4ded3a14534d33234307b329c33df1d1da0d8ed7eda82a8df2ecf83ba2222d4a7ecc6f9924293874c68b9c39ba8c3d913544ca5dadcfa7dc4fbdb9f8053d8198a86ef536930f06efb5d22d4c645c42b9a29d7345eda9df7e334f231d254c4eb6ffe26c8dc35bf2a884883e85995e918cfe6185cbd62bac2feb44c68112aa750f89b31d1da6d11fa9a89ff88abfdbdbe6ea78ab183f6deb33a6b450f2e90021bfa3555a9e8b30cdfa256f3e6f4c0e8dbaa1a335acf9c62a762023d45825ccb6c83142dd65480d5d58a625b4a38571bfa328b2cd081df3713ce0095e15cbb43bb3009b1c58fb06bba588b6f19c0e88b1ff6853a8ecd444024e3c435d1ca0091cb3fbc68e8976d07ec958665ef874f7287afccf8ac7eedb2b6c9d6fcc0a78df407b576a8750812f92a079b46fa1037b0127b176be6160ac708f491a339cd1d8b5523bd7edb7d5e2fccdca44be928c033883d2f3328cc7032c1785fb5175a3504478e9275d3c79e3cc4834aab4173cbfbee04a8c863ab0f1f487537a28027e0c5e3812a06982c67152287dcc7739fe5617c7fc86d4de346443633e21777b1d747f5702a5f8038789644f52deac4df66af28c22705ac6fb7a954d9c35b1ed64d5d760d03c54f0269d80395b10bed94ffa13e16c19cb53f57d54f1605a8230a4fcd99a8b7d655f333fbc0f84c52f0300e4cd2f8c6901ae1e4585a4b45bc6ca026f97f2c8b7b973c649fcafe08214692399050fd313929e719f69f79eb35145023ad3d46a8bd8ca567eee4d54246158fd3300582cb94feaf84db21419148c900a2d36f43013b93512e799bfcd39b647603d78b7c108e9c5a04e51934d7fd48f85fbbf76711d1785c9fa267f2f391514b3a5222e8677ff3ae49471cf353ce656496a0a3dbcaa15aa53e966bb12ffa3d28eabad938ced0e07527e4da1d637b48c678ffeb026f1bd67dd4b53f9355b6ddbc7503e21e485fbe5bd6707a79e75fbd19a4511e26e8f0e2e22ee2329c5dabb5b4bf652d5c266083b2bd2cd7b8e1191d183b4f99da48927722515170d8158d5420c80e3b413368594cd2e6362c3e5c8081332a46074e6f79ceedc3fab13f2cb12c8902a4995fe64b339e0c01cc3c4ea3a25ea614652a078daabcef8002d4366e6b6b1ddfc873793f6cdc7bbce46a24a3d0d38f610f349123ae1b3f34adb1aa09b28cc2c9f57d9008d791525c6032a4666507cf1648e4f8250962f07aa099c785976be76ac460bd4f650e556c3eefb439df3f41089890dd8806a7744eb7394dde9d14a91bbb46b1b8656d478afd5468c85bb340de96b6a94d3fa4f3c07e684da408f9013d1b3597e747b0962d9f496d1013c1bd9174941c265c979af3c42429d289159355c7ef4c9bf1017757693eddd2967aa3e75862be8deac7dfb4b47f54b90379b8cf62489576bd66888552f08d3e2b68be7e66a0b3a1d2e316dc6416033ce7315bed6e0dfbdf3077419dbd0d5d02fe8aff0fa75fafe9b50ca2a2b3d82ae2a2449dbcd502df47e4800b0586abf741bd3905c5979fc86d73679d7409375a54b21ca587279f4e730707768b796a1d4b30ac0cee557115cc6d765b51658178369ff658cc47810edf3f00026a66d6ae17a845a82d1381ec62b654f22aaf8504430c1044c3d42d8f8c0ce1c9b5e000024e817084ec1df6da02e7de08445e98b9dfcb323fbcee2553045124be28987cb04604c3f1684fecaef486ea188820309ab84b65e3a5f9f488ca70a4b38e46938a8d692ab86e20684af2da886d2886637c05bd5053dbb5284334b4cfa1fc182fc81b310365ba3e7e1f134a72a61cda09cd49b42f4addc7c55f0e77425d90c3c3d41de1394f82d65eefdd0e12a9defa69c212c264b85c3608e361a6e2e45a84ccf6431df2de78056779019836f0e41b13ff1809cb7446f800f9153f5a9ec9b266b8dc88dc63add597181d60cb0227caa61b49d43250a64e3cbc486b7a78288eb3251b95460abdf74e0fb89c2f81043e9c441983c62471a08dc1593f3211d794d328d4179c7153f765503ea84c1676668b0ab4da433a7a6aaefeb1943a3b697702ff1fe79b4887a1e64a5c66429f5fc25f0247b1eb2eb5c80d3b1403dc565677d56a79f88c6e7b36d67c8e71e4f26bc7947127a2124573b5d120af5f22136a7def2cd8b9fd2fea925e7582d9a890206565d3d015324180f0d66666c4e09f4565481ae00a72c1bf71e3ecbca6123522b4ed965e32748f167222fae1de866a121dd73b588c654b10bef595cd28869698dad985fabdd5c140c09bde366820bb43d5a8522b80c74adbe7aca1cbf8563603e0b6a2a00de4cad1bad1764994a268c03528a81ad4d442f805fd2672550d1c2b01b896c75f3203dfc0d796f438a83407af36dd0252888bbc1169fa34c1dda61a0eef28dbf1bc2399f346d958461ed78fe083d63a60e63290eb807a6c28f08ca0eaef399f153f689009afc68a5d69ac05367077aa8c5a194137b570f268f50606db7c18768a3d4f42a8c66388703a99d36bcae2f39827ff63698fd4088e6867710336cef80af9ba1d0fe563c7a797d0289c15abd894069a906c9fcaed50dc69c076ff006546ed18bab3f9ad5c605aa07cb53f7b0088eae2af7fbc14d5694caef07699ddf8a9df41003802294a9dc982aec8a2f4b7fe229000bfdfaf28a80f3c964ca2f2075acaa411a146bb180d55e6fac6b5d383d95d66a02faaae855b3e806229f73a6b7e8c307800e85fcd543a68a1f8f8fbb4ba3dab084739d92e2b298c501baf4ee7cec7cf84bc0a7f3a8f5fa65981c7cbb0b75469f9300c6339244846a136fbcdab6cb18c81cda8c8e6e6a1191a54100bcee51ffd5fdf196862b9de6deaa27a89fb70b1ccbacff80eaf2479cd9bd904513013fb9047a8f9040bd586b0005e757ebc36d3a26a1168406842c9d1de730255b59353815c045a42c90946f793889e5d5dc3c2bc639da8b4cdc9a733e195e079f8f1b4694e902f881f4153c5671127661e12ce5e9780a06b74f77cb62cdfa27297f6d8cad35fae8402f22de9e7149c730ae93fa381d6254673094854a2de6783fc791c8a16f58d02612a43789be75d1305f76874d8c22a8b8d0bc6519d3a6550c6d0c99cef6d96b68753ebd3437a7df3b98a7b7e6ba4256f414fe66c61f96ddbcfaf18a2b6305dd57790c562860f2367d994812624caa755f7dc8c097bc9de15a280aea9927ff41a1ef303cd1bd3ebd86b01e8febd36750da10aeee51d21807cdc84fc6edd24c92dcf8dca94dc8b01df42ec3694848d81524a2aac16918435afdfa269638eea8cd56959ce6abcceaca26af4fbe48a0bcbe49f32b54c2d030049eab7dd04f3180d9b1cc3cfad0e5dae57033641f71215f4b8f959db263031f31afe451232c82655a8fadc5eeeb962ad9b7d90b1f6d9b9c2752c9ac35586fdbf74071084d01021a11296507309cba1dfccc9ea91d63d10a3ea62bccac02dda635d9cf0da18f395d7fff4d9bab6c737175ef9a612cad5f196e05351d6999be66f34f1db1b7b3d4b534e18508c7db904eb75359a532a44fdec75e2cd77c0293ce2a74036fb2256ce792cb1365def32730349942eb027aa7bdec16f585ca5c514cf9f92a8acf146f60fa438ca973f01cd70674ba353812ae8a303bd2f332415a357b297975630c590f0bb7693714e4c8c52e01c912fea3136b372bc0b73e8bfccd97b878af25ac3a3742d9e7da0a0eea78dfbba9c8497d3ec27bdbf96916b8613aede6affc688a00c19ff8d800adb84a5b0af51d2e87d433067beebc3ae3d61bcb8632ed0110dfa33fb8c7e729156de255b1c38c9cde76eb8d56fdb3d83549eab1bd8be7e54e0676c99c22bb68132d1544181706b4e729894014cf7718fe6966aaaaf55d270e62a847699d2803abeae3759791e317f9c526292c65761a52e5c2088e8ee52246a20d1ff4da0264513a8864fe89fa9aad4e4805906377787fb2998c4ca1a5dcb9f94403165155a2c9f1f4307882a0e2718956b6651f41f37f9386fa83f1663460ab287bd1b948392ba33390b304619bd7bfb6ce6e898039ced172ba2f460ca3ac1692651d266c0d88fbcaba4447c7089af9138b115388d63bec26e246a7fb60a61bc9d1af64a8a2b6df688f2f1cba1944b15215e642a3a979b60b9559052ba367668d006d117b92e6a0b0e5e23572ab49c19c5189abf34bebe5ade6e45d415cec0007c53f232abea92b24d031e0eff7667f55b25921c06dcb264c46f40c7839d1699ee3dfb29565f49494405273f06c8499fedf9a23395d6c1bc6dac618aa2028fbdf3742816cb6a70d03bec51d38028617ac3bc620a6be673ed0be4ecd879c19e69bc804edff12e4f3341f6be702d28a0912b2085b6ebf4c7858f78f96345896464e8ba7fa2819cf0fe24e4deda6a8e8b079efda0e80b43bbf616e04b67423b14497499981ef6f2cf601b75362211f1e53c47e7c12bc2659ea38b4b36ed2962cfa6a0ddeae0d0cd658b32d6700ed33834495fa1d7267eae41114d3a8a8922d259dc05ddd5f89b88e328b29a712181a467ad1c42c2dc8ba2ed36e489e6ad498478408df3b71860d5ad66e8da28e258ada1ad273a1389c41671a5602c6d1dd58816730f5bb21326e261581574c012af01e14701ac28bed793c10502a734f75114c37d9b7a7814c4ecb5e6178ae42b578a7148936250669a1f091ceb13aad0276090ce1386e7", 0x1000, 0x96}, {&(0x7f0000001440)="27ec5a336a0877c06fd8c4baddf14b90e013522507c4f306f1aaa2ffdf08972be3e2dcc6f6af11e047b0f810860cd330fed4ae5c06ec9dc72e1eeb4246ff7ff511162094a37bd010a5f11c6824e69094eeb186266eadfd", 0x57}, {&(0x7f0000000200)="75441442f73b0cf1d10917ca05d43372edd355", 0x13, 0x9fa}], 0x1000802, &(0x7f00000002c0)={[], [{@uid_gt={'uid>', r2}}]}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:32:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xe000000, 0x0, 0x0, "b2e700"}) 00:32:58 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x800, 0x30, 0x13}, 0x18) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x9) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 518.331673][ T2480] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 518.341778][ T2481] usb 6-1: new high-speed USB device number 70 using dummy_hcd 00:32:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) [ 518.491518][ T12] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 518.538178][T18595] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 518.601707][ T2480] usb 3-1: Using ep0 maxpacket: 16 [ 518.606936][ T2481] usb 6-1: Using ep0 maxpacket: 8 [ 518.751841][ T2480] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 518.764732][ T2481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.776028][ T2481] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 518.785272][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 518.790353][ T2480] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 518.799447][ T2481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.807534][ T2480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.825718][ T2481] usb 6-1: config 0 descriptor?? [ 518.830997][ T2480] usb 3-1: config 0 descriptor?? [ 518.879492][ T2480] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 518.931691][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.942045][ T12] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.955409][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 518.964538][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.974674][ T12] usb 4-1: config 0 descriptor?? [ 519.015191][ T12] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 519.080601][ T12] usb 3-1: USB disconnect, device number 4 [ 519.561609][ T2481] usbhid 6-1:0.0: can't add hid device: -71 [ 519.567698][ T2481] usbhid: probe of 6-1:0.0 failed with error -71 [ 519.578866][ T2481] usb 6-1: USB disconnect, device number 70 [ 519.721541][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 519.971357][ T12] usb 3-1: Using ep0 maxpacket: 32 [ 520.101723][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.115521][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 520.127067][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.139998][ T12] usb 3-1: config 0 descriptor?? [ 520.192248][ T12] hub 3-1:0.0: USB hub found [ 520.401357][ T12] hub 3-1:0.0: 1 port detected 00:33:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x10000000, 0x0, 0x0, "b2e700"}) [ 521.072129][ T2553] usb 4-1: USB disconnect, device number 55 [ 521.481193][ T2553] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 521.514141][ T2499] usb 3-1: USB disconnect, device number 5 [ 521.543863][ T2480] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 521.721242][ T2553] usb 4-1: Using ep0 maxpacket: 8 [ 521.841521][ T2553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.851758][ T2553] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.865952][ T2553] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 521.875812][ T2553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.887612][ T2553] usb 4-1: config 0 descriptor?? [ 521.935006][ T2553] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 00:33:01 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:01 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0xea60}}) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x11000000, 0x0, 0x0, "b2e700"}) 00:33:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x12000000, 0x0, 0x0, "b2e700"}) [ 522.136730][T18680] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:33:01 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75702f6275332c776f726b6469723d2ec0ffffff65dd8c0ddc978d8f312c6c6d7765736469723d2e2f66697c6007604678b2b0dccf20d4ae34b1de09fbe900bde2600db52ee8d6dbba3d9162d9009bf89545cbb1421186cde1af45b6995e"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000002c0)={0x1}) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) migrate_pages(0x0, 0xffffffffffffffff, &(0x7f0000000340)=0xffff, &(0x7f0000000380)=0x2) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000100)=0x72a2, &(0x7f0000000200)=0x2) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:01 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x25000000, 0x0, 0x0, "b2e700"}) [ 522.321098][ T2553] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 522.353599][T18696] overlayfs: unrecognized mount option "up/bu3" or missing value [ 522.419901][T18696] overlayfs: unrecognized mount option "up/bu3" or missing value [ 522.581030][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 522.701211][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.715041][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 522.724476][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.738747][ T2553] usb 6-1: config 0 descriptor?? [ 523.481026][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 523.487089][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 523.495918][ T2553] usb 6-1: USB disconnect, device number 71 00:33:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x5c000000, 0x0, 0x0, "b2e700"}) 00:33:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22086e, &(0x7f0000000340)={[{@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r3}}, {@hash='hash'}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure='measure'}]}) 00:33:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 524.121163][ T12] usb 4-1: USB disconnect, device number 56 00:33:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) dup3(r2, r1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xfdfdffff, 0x0, 0x0, "b2e700"}) 00:33:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 524.321309][T18745] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:33:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)=',,!^},.}%\x00', 0xa) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 524.460987][ T2480] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 524.599838][T18763] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 524.600747][ T12] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 524.750888][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 524.881303][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.892335][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 524.902777][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.916569][ T2480] usb 6-1: config 0 descriptor?? [ 524.940823][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 525.061058][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.071215][ T12] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.086496][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 525.096018][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.113285][ T12] usb 4-1: config 0 descriptor?? [ 525.171630][ T12] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 525.660722][ T2480] usbhid 6-1:0.0: can't add hid device: -71 [ 525.666955][ T2480] usbhid: probe of 6-1:0.0 failed with error -71 [ 525.678976][ T2480] usb 6-1: USB disconnect, device number 72 00:33:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0xfffffdfd, 0x0, 0x0, "b2e700"}) 00:33:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x7, 0x8}, {0x284, 0xccb6}], r2}, 0x18, 0x2) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001880)={0x6b4, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_IE={0x649, 0x2a, "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"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, "f34d0d19c681"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x800}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="6ca4c8ec6758"}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_mount_image$reiserfs(&(0x7f00000002c0)='reiserfs\x00', &(0x7f0000000340)='./file0\x00', 0x2ba, 0x8, &(0x7f0000001700)=[{&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f0000000380)="fd613605941b5fe0787b6a3e97c682db4964d3dca7fa91a8abce736c1a5217a2eebbd765ddadc308567a537834515368ab9f6f0ecfba87455e1c532b8540435ca8", 0x41, 0x400}, {&(0x7f0000001440)="f4098b495abc1150ff60ef5d8d6da924e2ccc38173f3d583ee3219a9cda59e63296da7bd791321e31f3e47919e0d31763f6bab462e65e26f6e21c4e33741ac30d69f4b4c7ccb3e521c81fae022094d5b5cce17837b0bdce2bb0a2c78052838ca80c4df73ecd6d329721728b15e77870793b45c151455d01977ba168e6e7a3b82c7d1b523f3d877492bb443b8aff5c9126bb41d5f5b74c5c92b603ff812a7e0e6958cca94dec33b358269c49fe06eb46f2ec0aa", 0xb3, 0x1}, {&(0x7f0000001500)="0bec85c4b7a776419fe41fc424896d71411f5996c8edca9a737e5702e4fca43d36fc37090a17ae6c3ca146448004", 0x2e, 0x2}, {&(0x7f0000001540)="58b7c2913a562be36c", 0x9, 0x2}, {&(0x7f0000001580)="8632ffa0b71cab8d91bdc73ebb94bf9116d9acfbb3e67e07a916a18f4cf2544ed10fc0a9281759b308ffe1e14e718e0a1c98fdf6cf611a3913d3e4a4e442e3a2aaccf9239f4834d7fcdfe721f7e7609db4d7697a92d3a3b7818f1af8eb5eae935f8674ab86", 0x65, 0x80000001}, {&(0x7f0000001600)="75adb9a4cc0d14865b12e4080237dc678e75fc1ddc4cf9d1f7c74bc7177b6e85aa830faa7f8dae97b3d521466e669357b5b7648899696b74895a0ac5b6d4a0c17fbaf2eebccda3a386ba0702f1878ccdeaf0b972d940f73a79a98ddb81e4fb0ba6a95a7fd29ffcd9b0f9dfd59d95d96c758ccad01f5ec066d5edfe355e7ba1eaea4b6ccdff58ba3ee620df0265b598d7a0b2c2a4e261b916f7", 0x99, 0x1}, {&(0x7f00000016c0)="8a938cbd6af81a", 0x7, 0x5}], 0x800008, &(0x7f00000017c0)={[{@hash_tea='hash=tea'}, {@tails_small='tails=small'}], [{@fsname={'fsname', 0x3d, 'overlay\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 527.157921][ T12] usb 4-1: USB disconnect, device number 57 00:33:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:33:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 527.358622][T18811] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "hash=tea" 00:33:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 527.406933][T18818] overlayfs: failed to resolve './file1': -2 00:33:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 527.490650][ T2553] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 527.597306][T18829] overlayfs: failed to resolve './file1': -2 [ 527.683692][ T12] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 527.750418][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 527.870733][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.881729][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 527.892122][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.907795][ T2553] usb 6-1: config 0 descriptor?? [ 527.950394][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 528.080431][ T12] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.090756][ T12] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.103825][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 528.112953][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.122880][ T12] usb 4-1: config 0 descriptor?? [ 528.161358][ T12] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 528.650382][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 528.656525][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 528.668829][ T2553] usb 6-1: USB disconnect, device number 73 00:33:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x2, 0x0, "b2e700"}) 00:33:10 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r0, 0xee00) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r2, r6) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000002c0)=0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x7, r0}], {0x4, 0x5}, [{0x8, 0x1, r2}, {0x8, 0x4, r7}], {0x10, 0x2}, {0x20, 0x7}}, 0x5c, 0x1) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r8, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000180)=""/101, 0x65) 00:33:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 530.251843][ T2553] usb 4-1: USB disconnect, device number 58 00:33:10 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x3, 0x0, "b2e700"}) [ 530.379656][T18874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 530.403425][T18870] overlayfs: failed to resolve './file1': -2 00:33:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070657264695d3d2e2f6275732c776f726b6469723d2e2f66696c653101006f7765726469723d3e2f66696c6520"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:10 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x4, 0x0, "b2e700"}) [ 530.580116][ T2527] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 530.613677][T18891] overlayfs: unrecognized mount option "upperdi]=./bus" or missing value [ 530.641629][T18891] overlayfs: unrecognized mount option "upperdi]=./bus" or missing value [ 530.770212][ T2553] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 530.840114][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 530.960122][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.971120][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 530.981963][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.994011][ T2527] usb 6-1: config 0 descriptor?? [ 531.020095][ T2553] usb 4-1: Using ep0 maxpacket: 8 [ 531.140084][ T2553] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 531.153434][ T2553] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 531.163503][ T2553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.177594][ T2553] usb 4-1: config 0 descriptor?? [ 531.225572][ T2553] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 531.730086][ T2527] usbhid 6-1:0.0: can't add hid device: -71 [ 531.736232][ T2527] usbhid: probe of 6-1:0.0 failed with error -71 [ 531.747020][ T2527] usb 6-1: USB disconnect, device number 74 00:33:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x5, 0x0, "b2e700"}) 00:33:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/89, 0x59) 00:33:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 533.330294][ T2527] usb 4-1: USB disconnect, device number 59 00:33:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x6, 0x0, "b2e700"}) 00:33:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 533.490637][T18943] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:33:13 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 533.642604][ T2553] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 533.711417][T18965] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 533.849803][ T2527] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 533.909712][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 534.049950][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.063836][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 534.073334][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.085440][ T2553] usb 6-1: config 0 descriptor?? [ 534.109783][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 534.249752][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 534.260412][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 534.269440][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.283377][ T2527] usb 4-1: config 0 descriptor?? [ 534.322325][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 534.809694][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 534.815881][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 534.824752][ T2553] usb 6-1: USB disconnect, device number 75 [ 535.881004][ T0] NOHZ: local_softirq_pending 08 00:33:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x7, 0x0, "b2e700"}) 00:33:16 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:16 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e687d3a772f6275732c776f726b6469723d2e2f53116c65312c6c6f77f59df6bccd65726469"]) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 536.378222][ T2527] usb 4-1: USB disconnect, device number 60 00:33:16 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 536.461466][T19002] overlayfs: unrecognized mount option "lowõö¼Íerdi" or missing value 00:33:16 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 536.510427][T19002] overlayfs: unrecognized mount option "lowõö¼Íerdi" or missing value 00:33:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x29) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/101, 0x65) 00:33:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x8, 0x0, "b2e700"}) 00:33:16 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 536.688033][T19022] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 536.730459][ T2480] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 536.769911][T19030] overlayfs: failed to resolve './file1': -2 [ 536.869544][ T2527] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 536.979387][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 537.099717][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.110743][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 537.122025][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.135684][ T2480] usb 6-1: config 0 descriptor?? [ 537.149421][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 537.269485][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 537.280049][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 537.289039][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.298648][ T2527] usb 4-1: config 0 descriptor?? [ 537.350346][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 537.859370][ T2480] usbhid 6-1:0.0: can't add hid device: -71 [ 537.865418][ T2480] usbhid: probe of 6-1:0.0 failed with error -71 [ 537.873892][ T2480] usb 6-1: USB disconnect, device number 76 00:33:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:19 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:19 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x9, 0x0, "b2e700"}) 00:33:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") [ 539.435886][ T12] usb 4-1: USB disconnect, device number 61 00:33:19 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 539.495798][T19067] overlayfs: failed to resolve './file1': -2 00:33:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:19 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xa, 0x0, "b2e700"}) 00:33:19 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) dup(r1) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 539.663084][T19083] overlayfs: failed to resolve './file1': -2 [ 539.749219][ T2480] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 539.909090][ T12] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 539.999013][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 540.119988][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.131054][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 540.141096][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.150555][ T2480] usb 6-1: config 0 descriptor?? [ 540.159169][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 540.279099][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.292838][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.303104][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 540.315162][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.327015][ T12] usb 4-1: config 0 descriptor?? [ 540.869422][ T2480] usbhid 6-1:0.0: can't add hid device: -71 [ 540.875514][ T2480] usbhid: probe of 6-1:0.0 failed with error -71 [ 540.882023][ T12] hid-picolcd 0003:04D8:F002.007A: No report with id 0xf3 found [ 540.891851][ T2480] usb 6-1: USB disconnect, device number 77 [ 540.897836][ T12] hid-picolcd 0003:04D8:F002.007A: No report with id 0xf4 found [ 541.012129][ T2553] usb 4-1: USB disconnect, device number 62 00:33:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xb, 0x0, "b2e700"}) 00:33:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xc, 0x0, "b2e700"}) 00:33:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 541.838888][ T2553] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 541.888884][ T5] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 542.118873][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 542.138852][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 542.249309][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.259109][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.260354][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 542.276165][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.282664][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.295011][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 542.299832][ T2553] usb 6-1: config 0 descriptor?? [ 542.315880][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.333580][ T5] usb 4-1: config 0 descriptor?? [ 542.878960][ T5] hid-picolcd 0003:04D8:F002.007B: No report with id 0xf3 found [ 542.886902][ T5] hid-picolcd 0003:04D8:F002.007B: No report with id 0xf4 found [ 543.010849][ T5] usb 4-1: USB disconnect, device number 63 [ 543.040539][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 543.046641][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 543.057587][ T2553] usb 6-1: USB disconnect, device number 78 00:33:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xd, 0x0, "b2e700"}) 00:33:23 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xe, 0x0, "b2e700"}) 00:33:23 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 543.848812][ T5] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 543.848818][ T2553] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 544.098652][ T2553] usb 4-1: Using ep0 maxpacket: 8 [ 544.128659][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 544.218687][ T2553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.229707][ T2553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.239712][ T2553] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 544.248988][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.248994][ T2553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.253266][ T2553] usb 4-1: config 0 descriptor?? [ 544.272348][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 544.282921][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.293648][ T5] usb 6-1: config 0 descriptor?? [ 544.858673][ T2553] hid-picolcd 0003:04D8:F002.007C: No report with id 0xf3 found [ 544.866347][ T2553] hid-picolcd 0003:04D8:F002.007C: No report with id 0xf4 found [ 544.980493][ T2553] usb 4-1: USB disconnect, device number 64 [ 545.018676][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 545.025167][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 545.036032][ T5] usb 6-1: USB disconnect, device number 79 00:33:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x10, 0x0, "b2e700"}) 00:33:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:25 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x11, 0x0, "b2e700"}) 00:33:25 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:25 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 545.803275][ T5] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 545.898506][ T12] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 546.068391][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 546.158555][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 546.198682][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.210126][ T5] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 546.220611][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.232585][ T5] usb 6-1: config 0 descriptor?? [ 546.298567][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.309504][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 546.320990][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.332786][ T12] usb 4-1: config 0 descriptor?? [ 546.878414][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 546.884575][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 546.893458][ T12] usb 4-1: USB disconnect, device number 65 [ 546.958385][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 546.964561][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 546.975929][ T5] usb 6-1: USB disconnect, device number 80 00:33:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x12, 0x0, "b2e700"}) 00:33:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:27 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:27 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x25, 0x0, "b2e700"}) 00:33:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:27 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 547.668378][ T12] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 547.838200][ T2553] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 547.928169][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 548.068325][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.078170][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 548.079303][ T12] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 548.093346][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.102816][ T12] usb 4-1: config 0 descriptor?? [ 548.198439][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.209581][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 548.218674][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.227643][ T2553] usb 6-1: config 0 descriptor?? [ 548.618367][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 548.624498][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 548.635801][ T12] usb 4-1: USB disconnect, device number 66 [ 548.948149][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 548.954244][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 548.962221][ T2553] usb 6-1: USB disconnect, device number 81 00:33:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x5c, 0x0, "b2e700"}) 00:33:28 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:29 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:33:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x300, 0x0, "b2e700"}) [ 549.428053][ T2551] usb 4-1: new high-speed USB device number 67 using dummy_hcd 00:33:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) [ 549.679122][ T2551] usb 4-1: Using ep0 maxpacket: 8 [ 549.738164][ T2480] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 549.808747][ T2551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.819729][ T2551] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 549.830179][ T2551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.839684][ T2551] usb 4-1: config 0 descriptor?? [ 549.977991][ T2480] usb 6-1: Using ep0 maxpacket: 8 [ 550.098402][ T2480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.109333][ T2480] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 550.120004][ T2480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.133767][ T2480] usb 6-1: config 0 descriptor?? [ 550.378104][ T2551] usbhid 4-1:0.0: can't add hid device: -71 [ 550.384171][ T2551] usbhid: probe of 4-1:0.0 failed with error -71 [ 550.392184][ T2551] usb 4-1: USB disconnect, device number 67 00:33:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:30 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x500, 0x0, "b2e700"}) 00:33:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) [ 550.859874][ T2480] usbhid 6-1:0.0: can't add hid device: -71 [ 550.865952][ T2480] usbhid: probe of 6-1:0.0 failed with error -71 [ 550.923371][ T2480] usb 6-1: USB disconnect, device number 82 [ 551.157943][ T2499] usb 4-1: new high-speed USB device number 68 using dummy_hcd 00:33:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:31 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:31 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x600, 0x0, "b2e700"}) 00:33:31 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:31 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 551.408072][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 551.528299][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.551783][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 551.589742][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.600259][ T2499] usb 4-1: config 0 descriptor?? [ 551.618670][ T2553] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 551.887996][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 552.028198][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.039240][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 552.049779][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.059908][ T2553] usb 6-1: config 0 descriptor?? [ 552.138106][ T2499] usbhid 4-1:0.0: can't add hid device: -71 [ 552.144143][ T2499] usbhid: probe of 4-1:0.0 failed with error -71 [ 552.152117][ T2499] usb 4-1: USB disconnect, device number 68 00:33:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:32 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x700, 0x0, "b2e700"}) 00:33:32 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 552.779583][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 552.798159][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 552.805772][ T2553] usb 6-1: USB disconnect, device number 83 [ 552.917653][ T2527] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 553.157773][ T2527] usb 4-1: Using ep0 maxpacket: 8 00:33:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:32 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x900, 0x0, "b2e700"}) 00:33:32 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 553.267664][T19541] overlayfs: failed to resolve './bus': -2 [ 553.288644][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.301623][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 553.356605][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.362329][T19550] overlayfs: failed to resolve './bus': -2 [ 553.387283][ T2527] usb 4-1: config 0 descriptor?? [ 553.677554][ T2553] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 553.917562][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 553.947555][ T2527] usbhid 4-1:0.0: can't add hid device: -71 [ 553.953674][ T2527] usbhid: probe of 4-1:0.0 failed with error -71 [ 553.962159][ T2527] usb 4-1: USB disconnect, device number 69 [ 554.037692][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.048864][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 554.058025][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.066857][ T2553] usb 6-1: config 0 descriptor?? 00:33:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:34 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xa00, 0x0, "b2e700"}) 00:33:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:34 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 554.471369][T19580] overlayfs: failed to resolve './bus': -2 [ 554.717497][ T5] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 554.787540][ T2553] usbhid 6-1:0.0: can't add hid device: -71 [ 554.793692][ T2553] usbhid: probe of 6-1:0.0 failed with error -71 [ 554.801660][ T2553] usb 6-1: USB disconnect, device number 84 [ 554.987426][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 555.118529][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.129609][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 555.140225][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.152870][ T5] usb 4-1: config 0 descriptor?? 00:33:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:35 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xb00, 0x0, "b2e700"}) 00:33:35 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 555.607407][ T12] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 555.727577][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 555.733674][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 555.745680][ T5] usb 4-1: USB disconnect, device number 70 [ 555.857383][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 555.997560][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.011427][ T12] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 556.021570][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.032345][ T12] usb 6-1: config 0 descriptor?? 00:33:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 00:33:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xc00, 0x0, "b2e700"}) 00:33:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:35 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 556.467400][ T2553] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 556.707260][ T2553] usb 4-1: Using ep0 maxpacket: 8 [ 556.767477][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 556.773503][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 556.785116][ T12] usb 6-1: USB disconnect, device number 85 [ 556.827459][ T2553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.838858][ T2553] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 556.849743][ T2553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.862645][ T2553] usb 4-1: config 0 descriptor?? 00:33:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:36 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(0x0, 0x0, 0x0) 00:33:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xd00, 0x0, "b2e700"}) 00:33:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xe00, 0x0, "b2e700"}) [ 557.407295][ T2553] usbhid 4-1:0.0: can't add hid device: -71 [ 557.413570][ T2553] usbhid: probe of 4-1:0.0 failed with error -71 [ 557.431770][ T2553] usb 4-1: USB disconnect, device number 71 [ 557.547313][ T2499] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 557.787157][ T2499] usb 6-1: Using ep0 maxpacket: 8 00:33:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 00:33:37 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:37 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(0x0, 0x0, 0x0) 00:33:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x1100, 0x0, "b2e700"}) [ 557.907560][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.933661][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 557.962790][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.009078][ T2499] usb 6-1: config 0 descriptor?? [ 558.277213][ T2527] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 558.520816][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 558.637172][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.651018][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 558.661263][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.680664][ T2527] usb 4-1: config 0 descriptor?? [ 558.727131][ T2499] usbhid 6-1:0.0: can't add hid device: -71 [ 558.733248][ T2499] usbhid: probe of 6-1:0.0 failed with error -71 [ 558.745503][ T2499] usb 6-1: USB disconnect, device number 86 00:33:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x1200, 0x0, "b2e700"}) 00:33:38 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:38 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(0x0, 0x0, 0x0) [ 559.217152][ T2527] usbhid 4-1:0.0: can't add hid device: -71 [ 559.224478][ T2527] usbhid: probe of 4-1:0.0 failed with error -71 00:33:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:39 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080), 0x0, 0x0) [ 559.271247][ T2527] usb 4-1: USB disconnect, device number 72 [ 559.490621][ T12] usb 6-1: new high-speed USB device number 87 using dummy_hcd 00:33:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 00:33:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x2500, 0x0, "b2e700"}) 00:33:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:39 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080), 0x0, 0x0) [ 559.743805][T19775] overlayfs: missing 'lowerdir' [ 559.757018][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 559.887428][ T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.898421][ T12] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 559.907787][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.916670][ T12] usb 6-1: config 0 descriptor?? [ 560.017075][ T2663] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 560.266873][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 560.397446][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.408358][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 560.419102][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.432363][ T2663] usb 4-1: config 0 descriptor?? [ 560.847075][ T12] usbhid 6-1:0.0: can't add hid device: -71 [ 560.853141][ T12] usbhid: probe of 6-1:0.0 failed with error -71 [ 560.865234][ T12] usb 6-1: USB disconnect, device number 87 [ 561.016852][ T2663] usbhid 4-1:0.0: can't add hid device: -71 [ 561.023040][ T2663] usbhid: probe of 4-1:0.0 failed with error -71 [ 561.034845][ T2663] usb 4-1: USB disconnect, device number 73 00:33:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x5c00, 0x0, "b2e700"}) 00:33:41 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) poll(&(0x7f0000000080), 0x0, 0x0) 00:33:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:33:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:41 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) [ 561.393173][T19813] overlayfs: missing 'lowerdir' 00:33:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:33:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x1000000, 0x0, "b2e700"}) 00:33:41 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) dup3(r2, r1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 561.635956][T19832] overlayfs: missing 'lowerdir' [ 561.646857][ T2663] usb 6-1: new high-speed USB device number 88 using dummy_hcd 00:33:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x2000000, 0x0, "b2e700"}) [ 561.817003][ T2507] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 561.906858][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 562.056817][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.066697][ T2507] usb 4-1: Using ep0 maxpacket: 8 [ 562.067865][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 562.081913][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.093814][ T2663] usb 6-1: config 0 descriptor?? [ 562.186834][ T2507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.198006][ T2507] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 562.207677][ T2507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.220166][ T2507] usb 4-1: config 0 descriptor?? [ 562.769091][ T2507] usbhid 4-1:0.0: can't add hid device: -71 [ 562.775223][ T2507] usbhid: probe of 4-1:0.0 failed with error -71 [ 562.783246][ T2507] usb 4-1: USB disconnect, device number 74 [ 563.026675][ T2663] usbhid 6-1:0.0: can't add hid device: -71 [ 563.032779][ T2663] usbhid: probe of 6-1:0.0 failed with error -71 [ 563.045206][ T2663] usb 6-1: USB disconnect, device number 88 00:33:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:43 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) dup3(r2, r1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) 00:33:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(0x0, 0x0, 0x0) 00:33:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x3000000, 0x0, "b2e700"}) 00:33:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:33:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) 00:33:43 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000200)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) dup3(r2, r1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000007d, 0x0) [ 563.566393][T19888] overlayfs: missing 'lowerdir' 00:33:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x4000000, 0x0, "b2e700"}) 00:33:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) 00:33:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080), 0x0, 0x0) [ 563.739992][T19904] overlayfs: missing 'lowerdir' [ 563.784652][ T2499] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 563.856598][ T2507] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 564.046585][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 564.106942][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 564.167200][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.178129][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 564.188416][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.198674][ T2499] usb 4-1: config 0 descriptor?? [ 564.226654][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.239002][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 564.249425][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.259002][ T2507] usb 6-1: config 0 descriptor?? [ 564.736733][ T2499] usbhid 4-1:0.0: can't add hid device: -71 [ 564.742937][ T2499] usbhid: probe of 4-1:0.0 failed with error -71 [ 564.753761][ T2499] usb 4-1: USB disconnect, device number 75 [ 565.196590][ T2507] usbhid 6-1:0.0: can't add hid device: -71 [ 565.202716][ T2507] usbhid: probe of 6-1:0.0 failed with error -71 [ 565.213398][ T2507] usb 6-1: USB disconnect, device number 89 00:33:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:45 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000200)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) dup3(r1, r0, 0x0) 00:33:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x5000000, 0x0, "b2e700"}) 00:33:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301000080"], 0x0}, 0x0) 00:33:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 565.731533][T19945] overlayfs: missing 'lowerdir' 00:33:45 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x4, 0x4, {0xf, @sliced={0x81, [0x9, 0x8, 0x800, 0x1, 0x200, 0xffff, 0x400, 0x2, 0x1, 0xf6, 0x80, 0x7, 0x7ff, 0x7f, 0x401, 0x0, 0x0, 0x3, 0xfff7, 0x0, 0xfffc, 0x2, 0x4, 0xfff0, 0x8000, 0x6, 0xff06, 0x6, 0x9, 0xb20, 0x4, 0x39, 0x7b8f, 0x1, 0x3, 0x2, 0x7f, 0x5, 0x7, 0x1, 0x8, 0x101, 0xc5, 0x1, 0x2, 0xe40, 0x81, 0x5], 0x5a61}}}) 00:33:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x6000000, 0x0, "b2e700"}) 00:33:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:45 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:33:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x7000000, 0x0, "b2e700"}) 00:33:45 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) dup(r0) [ 565.898524][T19967] overlayfs: missing 'lowerdir' [ 565.966401][ T2507] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 565.977212][ T2553] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 565.986348][ T2480] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 566.206337][ T2507] usb 3-1: Using ep0 maxpacket: 8 [ 566.226711][ T2553] usb 6-1: Using ep0 maxpacket: 8 [ 566.266337][ T2480] usb 4-1: Using ep0 maxpacket: 8 [ 566.326969][ T2507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.338000][ T2507] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 566.348379][ T2553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.359413][ T2507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.369021][ T2553] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 566.379136][ T2553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.388109][ T2507] usb 3-1: config 0 descriptor?? [ 566.399307][ T2480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.402778][ T2553] usb 6-1: config 0 descriptor?? [ 566.423501][ T2480] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 566.441566][ T2480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.451581][ T2480] usb 4-1: config 0 descriptor?? [ 566.897596][ T2553] hid-picolcd 0003:04D8:F002.007E: unknown main item tag 0x0 [ 566.936294][ T2507] hid-picolcd 0003:04D8:F002.007D: No report with id 0xf3 found [ 566.943975][ T2507] hid-picolcd 0003:04D8:F002.007D: No report with id 0xf4 found [ 566.966379][ T2553] hid-picolcd 0003:04D8:F002.007E: No report with id 0xf3 found [ 566.974355][ T2553] hid-picolcd 0003:04D8:F002.007E: No report with id 0xf4 found [ 567.006419][ T2480] usbhid 4-1:0.0: can't add hid device: -71 [ 567.012477][ T2480] usbhid: probe of 4-1:0.0 failed with error -71 [ 567.022703][ T2480] usb 4-1: USB disconnect, device number 76 [ 567.077139][ T2553] usb 3-1: USB disconnect, device number 6 [ 567.116206][ C1] usb 6-1: input irq status -75 received [ 567.299822][ T2480] usb 6-1: USB disconnect, device number 90 00:33:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:47 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) 00:33:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x8000000, 0x0, "b2e700"}) 00:33:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:47 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) [ 567.876278][T20032] overlayfs: missing 'lowerdir' 00:33:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x9000000, 0x0, "b2e700"}) 00:33:47 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) 00:33:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) [ 568.017569][T20050] overlayfs: missing 'lowerdir' 00:33:47 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) [ 568.116198][ T2527] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 568.135681][T20057] overlayfs: missing 'lowerdir' [ 568.151105][ T2480] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 568.167674][ T2663] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 568.356126][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 568.446077][ T2480] usb 3-1: Using ep0 maxpacket: 8 [ 568.451314][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 568.476398][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.487418][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 568.497682][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.514634][ T2527] usb 4-1: config 0 descriptor?? [ 568.586366][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.597409][ T2480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.608481][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 568.619841][ T2480] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 568.629669][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.638236][ T2480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.652422][ T2663] usb 6-1: config 0 descriptor?? [ 568.663466][ T2480] usb 3-1: config 0 descriptor?? [ 569.056108][ T2527] usbhid 4-1:0.0: can't add hid device: -71 [ 569.062095][ T2527] usbhid: probe of 4-1:0.0 failed with error -71 [ 569.074022][ T2527] usb 4-1: USB disconnect, device number 77 [ 569.147719][ T2480] hid-picolcd 0003:04D8:F002.007F: unknown main item tag 0x0 [ 569.217187][ T2480] hid-picolcd 0003:04D8:F002.007F: No report with id 0xf3 found [ 569.225172][ T2480] hid-picolcd 0003:04D8:F002.007F: No report with id 0xf4 found [ 569.366030][ C0] usb 3-1: input irq status -75 received [ 569.564398][ T5] usb 3-1: USB disconnect, device number 7 [ 569.606053][ T2663] usbhid 6-1:0.0: can't add hid device: -71 [ 569.612082][ T2663] usbhid: probe of 6-1:0.0 failed with error -71 [ 569.623635][ T2663] usb 6-1: USB disconnect, device number 91 00:33:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xa000000, 0x0, "b2e700"}) 00:33:49 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:49 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) 00:33:49 executing program 2 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 570.140390][T20119] FAULT_INJECTION: forcing a failure. [ 570.140390][T20119] name failslab, interval 1, probability 0, space 0, times 0 [ 570.158915][T20119] CPU: 1 PID: 20119 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 570.167606][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.167928][T20112] overlayfs: missing 'lowerdir' [ 570.177646][T20119] Call Trace: [ 570.177671][T20119] dump_stack+0x1f0/0x31e 00:33:49 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) [ 570.177684][T20119] should_fail+0x38a/0x4e0 [ 570.177722][T20119] ? do_sys_poll+0x223/0x1210 [ 570.177732][T20119] should_failslab+0x5/0x20 [ 570.177742][T20119] __kmalloc+0x74/0x330 [ 570.177756][T20119] do_sys_poll+0x223/0x1210 [ 570.212599][T20119] ? __lock_acquire+0x116c/0x2c30 [ 570.217638][T20119] ? trace_lock_release+0x137/0x1a0 [ 570.222934][T20119] ? trace_lock_release+0x137/0x1a0 [ 570.228130][T20119] ? lock_is_held_type+0x87/0xe0 [ 570.233061][T20119] ? trace_lock_release+0x137/0x1a0 00:33:50 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) [ 570.238256][T20119] ? ksys_write+0x1b1/0x220 [ 570.242751][T20119] ? ksys_write+0x1b1/0x220 [ 570.247253][T20119] __se_sys_poll+0x19b/0x350 [ 570.251848][T20119] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 570.257909][T20119] do_syscall_64+0x73/0xe0 [ 570.262328][T20119] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 570.268211][T20119] RIP: 0033:0x45cba9 [ 570.272091][T20119] Code: Bad RIP value. [ 570.276230][T20119] RSP: 002b:00007f7a34279c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 00:33:50 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xb000000, 0x0, "b2e700"}) [ 570.284631][T20119] RAX: ffffffffffffffda RBX: 00000000004fc280 RCX: 000000000045cba9 [ 570.292597][T20119] RDX: 0000000000000000 RSI: 200000000000007d RDI: 0000000020000080 [ 570.300559][T20119] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 570.308526][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 570.316503][T20119] R13: 0000000000000885 R14: 00000000004cb63e R15: 00007f7a3427a6d4 00:33:50 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:50 executing program 2 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 570.486025][ T5] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 570.486119][ T2507] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 570.520712][T20139] overlayfs: missing 'lowerdir' [ 570.745850][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 570.765927][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 570.866264][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.877246][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 570.886767][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.887162][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.899356][ T5] usb 4-1: config 0 descriptor?? [ 570.927312][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 570.936945][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.949135][ T2507] usb 6-1: config 0 descriptor?? [ 571.486393][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 571.492521][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 571.501564][ T5] usb 4-1: USB disconnect, device number 78 [ 571.885829][ T2507] usbhid 6-1:0.0: can't add hid device: -71 [ 571.892023][ T2507] usbhid: probe of 6-1:0.0 failed with error -71 [ 571.906380][ T2507] usb 6-1: USB disconnect, device number 92 00:33:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:52 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xc000000, 0x0, "b2e700"}) 00:33:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) 00:33:52 executing program 1: r0 = syz_open_dev$media(0x0, 0xbaf, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xd000000, 0x0, "b2e700"}) 00:33:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 572.440771][T20176] overlayfs: unrecognized mount option "lower" or missing value 00:33:52 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}], 0x200000000000007d, 0x0) [ 572.610608][T20198] overlayfs: unrecognized mount option "lower" or missing value [ 572.650761][ T5] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 572.695712][ T2507] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 572.935634][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 572.935639][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 573.056068][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.067111][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 573.076968][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.085866][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.088650][ T2507] usb 6-1: config 0 descriptor?? [ 573.110306][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 573.119832][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.132347][ T5] usb 4-1: config 0 descriptor?? [ 573.685681][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 573.691688][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 573.703967][ T5] usb 4-1: USB disconnect, device number 79 [ 574.045586][ T2507] usbhid 6-1:0.0: can't add hid device: -71 [ 574.051723][ T2507] usbhid: probe of 6-1:0.0 failed with error -71 [ 574.064357][ T2507] usb 6-1: USB disconnect, device number 93 00:33:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xe000000, 0x0, "b2e700"}) 00:33:54 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3f00}], 0x200000000000007d, 0x0) 00:33:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) 00:33:54 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x101400) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) [ 574.568024][T20237] overlayfs: unrecognized mount option "lower" or missing value 00:33:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x10000000, 0x0, "b2e700"}) 00:33:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:54 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:33:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x0, 0x2}], 0x200000000000007d, 0x0) [ 574.825562][ T5] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 574.850277][T20261] overlayfs: overlapping upperdir path [ 574.876329][ T2507] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 575.115503][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 575.125417][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 575.235545][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.245709][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.246568][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 575.264333][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 575.266950][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.281412][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.284715][ T5] usb 4-1: config 0 descriptor?? [ 575.308154][ T2507] usb 6-1: config 0 descriptor?? [ 575.786880][ T2507] hid-picolcd 0003:04D8:F002.0080: unknown main item tag 0x0 [ 575.845509][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 575.851503][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 575.859395][ T2507] hid-picolcd 0003:04D8:F002.0080: No report with id 0xf3 found [ 575.866560][ T5] usb 4-1: USB disconnect, device number 80 [ 575.881274][ T2507] hid-picolcd 0003:04D8:F002.0080: No report with id 0xf4 found [ 575.987440][ T2663] usb 6-1: USB disconnect, device number 94 00:33:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x11000000, 0x0, "b2e700"}) 00:33:56 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) 00:33:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x0, 0x3f00}], 0x200000000000007d, 0x0) 00:33:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) 00:33:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000001e, 0x0) [ 576.565792][T20307] overlayfs: overlapping upperdir path 00:33:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:56 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) 00:33:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x12000000, 0x0, "b2e700"}) 00:33:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:33:56 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)) [ 576.795421][ T2499] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 576.803838][T20328] overlayfs: overlapping upperdir path [ 576.866222][ T2507] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 577.055303][ T2499] usb 4-1: Using ep0 maxpacket: 8 [ 577.105298][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 577.175374][ T2499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.186453][ T2499] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 577.196809][ T2499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.208203][ T2499] usb 4-1: config 0 descriptor?? [ 577.247502][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.260396][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 577.269588][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.279396][ T2507] usb 6-1: config 0 descriptor?? [ 577.725251][ T2499] usbhid 4-1:0.0: can't add hid device: -71 [ 577.731338][ T2499] usbhid: probe of 4-1:0.0 failed with error -71 [ 577.739830][ T2499] usb 4-1: USB disconnect, device number 81 [ 577.769345][ T2507] hid-picolcd 0003:04D8:F002.0081: unknown main item tag 0x0 [ 577.845449][ T2507] hid-picolcd 0003:04D8:F002.0081: No report with id 0xf3 found [ 577.853180][ T2507] hid-picolcd 0003:04D8:F002.0081: No report with id 0xf4 found [ 577.967539][ T5] usb 6-1: USB disconnect, device number 95 00:33:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001800)="ba") 00:33:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x25000000, 0x0, "b2e700"}) 00:33:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x2) 00:33:58 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:33:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) 00:33:58 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:33:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x5c000000, 0x0, "b2e700"}) 00:33:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x3f00) [ 578.597516][T20384] overlayfs: failed to resolve './fil': -2 00:33:58 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:33:58 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:33:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xfdfdffff, 0x0, "b2e700"}) [ 578.785215][ T5] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 578.845588][ T2663] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 578.869649][T20404] overlayfs: failed to resolve './fil': -2 [ 579.065038][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 579.106183][ T2663] usb 6-1: Using ep0 maxpacket: 8 [ 579.185413][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.196371][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 579.205762][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.214800][ T5] usb 4-1: config 0 descriptor?? [ 579.245881][ T2663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.256940][ T2663] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 579.268634][ T2663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.278954][ T2663] usb 6-1: config 0 descriptor?? [ 579.755137][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 579.762693][ T2663] hid-picolcd 0003:04D8:F002.0082: unknown main item tag 0x0 [ 579.770357][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 579.785833][ T5] usb 4-1: USB disconnect, device number 82 [ 579.855048][ T2663] hid-picolcd 0003:04D8:F002.0082: No report with id 0xf3 found [ 579.862863][ T2663] hid-picolcd 0003:04D8:F002.0082: No report with id 0xf4 found [ 579.960746][ T2663] usb 6-1: USB disconnect, device number 96 00:34:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 00:34:00 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0xca9a3b) 00:34:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0xfffffdfd, 0x0, "b2e700"}) 00:34:00 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) [ 580.523363][T20453] FAULT_INJECTION: forcing a failure. [ 580.523363][T20453] name failslab, interval 1, probability 0, space 0, times 0 [ 580.560916][T20453] CPU: 1 PID: 20453 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 580.567808][T20450] overlayfs: failed to resolve './fil': -2 [ 580.569691][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.569697][T20453] Call Trace: [ 580.569718][T20453] dump_stack+0x1f0/0x31e [ 580.569739][T20453] should_fail+0x38a/0x4e0 [ 580.597556][T20453] ? tomoyo_realpath_from_path+0xd8/0x630 [ 580.603365][T20453] should_failslab+0x5/0x20 [ 580.607884][T20453] __kmalloc+0x74/0x330 [ 580.612036][T20453] ? tomoyo_realpath_from_path+0xcb/0x630 [ 580.617751][T20453] tomoyo_realpath_from_path+0xd8/0x630 [ 580.623299][T20453] tomoyo_path_number_perm+0x18f/0x690 [ 580.628749][T20453] security_file_ioctl+0x55/0xb0 [ 580.633754][T20453] __se_sys_ioctl+0x48/0x160 [ 580.638322][T20453] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.644361][T20453] do_syscall_64+0x73/0xe0 [ 580.648755][T20453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.654668][T20453] RIP: 0033:0x45cba9 [ 580.658539][T20453] Code: Bad RIP value. [ 580.662582][T20453] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.670968][T20453] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 580.678912][T20453] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 580.686872][T20453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.694830][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 580.702779][T20453] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 00:34:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x1000000) 00:34:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x0, "b2e700"}) 00:34:00 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:00 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x2000000) [ 580.723183][T20453] ERROR: Out of memory at tomoyo_realpath_from_path. 00:34:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x3b9aca00) [ 580.843797][T20471] FAULT_INJECTION: forcing a failure. [ 580.843797][T20471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.857145][T20471] CPU: 1 PID: 20471 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 580.865809][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.875856][T20471] Call Trace: [ 580.879144][T20471] dump_stack+0x1f0/0x31e [ 580.883499][T20471] should_fail+0x38a/0x4e0 [ 580.887925][T20471] prepare_alloc_pages+0x28c/0x4a0 [ 580.893037][T20471] __alloc_pages_nodemask+0xbc/0x5e0 [ 580.898320][T20471] ? __lock_acquire+0x116c/0x2c30 [ 580.903351][T20471] kmem_getpages+0x49/0x900 [ 580.907854][T20471] cache_grow_begin+0x7b/0x2e0 [ 580.912615][T20471] cache_alloc_refill+0x359/0x3f0 [ 580.917635][T20471] ? check_preemption_disabled+0x51/0x140 [ 580.923351][T20471] __kmalloc+0x30c/0x330 [ 580.927588][T20471] ? tomoyo_realpath_from_path+0xd8/0x630 [ 580.933304][T20471] tomoyo_realpath_from_path+0xd8/0x630 [ 580.938858][T20471] tomoyo_path_number_perm+0x18f/0x690 [ 580.944345][T20471] security_file_ioctl+0x55/0xb0 [ 580.949286][T20471] __se_sys_ioctl+0x48/0x160 [ 580.953882][T20471] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.959944][T20471] do_syscall_64+0x73/0xe0 [ 580.964364][T20471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.970262][T20471] RIP: 0033:0x45cba9 [ 580.974145][T20471] Code: Bad RIP value. [ 580.978205][T20471] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.986607][T20471] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 580.994573][T20471] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 581.002538][T20471] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.010503][T20471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 581.018471][T20471] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 581.027663][ T2499] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 581.035830][ T5] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 581.274827][ T2499] usb 6-1: Using ep0 maxpacket: 8 [ 581.294884][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 581.395268][ T2499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.406383][ T2499] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 581.416757][ T2499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.426649][ T2499] usb 6-1: config 0 descriptor?? [ 581.458200][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.469658][ T5] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 581.487960][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.498578][ T5] usb 4-1: config 0 descriptor?? [ 581.915987][ T2499] hid-picolcd 0003:04D8:F002.0083: unknown main item tag 0x0 [ 581.976273][ T5] hid-picolcd 0003:04D8:F002.0084: unknown main item tag 0x0 [ 581.997588][ T2499] hid-picolcd 0003:04D8:F002.0083: No report with id 0xf3 found [ 582.005316][ T2499] hid-picolcd 0003:04D8:F002.0083: No report with id 0xf4 found [ 582.045019][ T5] hid-picolcd 0003:04D8:F002.0084: No report with id 0xf3 found [ 582.052863][ T5] hid-picolcd 0003:04D8:F002.0084: No report with id 0xf4 found [ 582.186364][ T2499] usb 4-1: USB disconnect, device number 83 [ 582.317999][ T2507] usb 6-1: USB disconnect, device number 97 00:34:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 00:34:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:02 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x3f000000) 00:34:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x2, "b2e700"}) 00:34:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) [ 582.861768][T20533] FAULT_INJECTION: forcing a failure. [ 582.861768][T20533] name failslab, interval 1, probability 0, space 0, times 0 [ 582.895671][T20532] overlayfs: failed to resolve './file': -2 [ 582.901779][T20533] CPU: 0 PID: 20533 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 582.910456][T20533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.920528][T20533] Call Trace: [ 582.923824][T20533] dump_stack+0x1f0/0x31e [ 582.928150][T20533] should_fail+0x38a/0x4e0 [ 582.932573][T20533] ? tomoyo_encode2+0x25a/0x560 [ 582.937413][T20533] should_failslab+0x5/0x20 [ 582.941904][T20533] __kmalloc+0x74/0x330 [ 582.946058][T20533] tomoyo_encode2+0x25a/0x560 [ 582.950739][T20533] tomoyo_realpath_from_path+0x5d6/0x630 [ 582.956373][T20533] tomoyo_path_number_perm+0x18f/0x690 [ 582.961855][T20533] security_file_ioctl+0x55/0xb0 [ 582.966794][T20533] __se_sys_ioctl+0x48/0x160 [ 582.971374][T20533] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.977427][T20533] do_syscall_64+0x73/0xe0 [ 582.981829][T20533] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 582.987690][T20533] RIP: 0033:0x45cba9 [ 582.991574][T20533] Code: Bad RIP value. [ 582.995696][T20533] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.004073][T20533] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 00:34:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x3, "b2e700"}) 00:34:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000200)) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2201, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x9020}], 0x1, 0x0) [ 583.012016][T20533] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 583.020101][T20533] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 583.028053][T20533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 583.035997][T20533] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 583.053453][T20533] ERROR: Out of memory at tomoyo_realpath_from_path. 00:34:02 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x4, "b2e700"}) 00:34:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x8, 0x8, 0x0, 0x4}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x8, 0x0, 0x7fff}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 583.192419][T20556] FAULT_INJECTION: forcing a failure. [ 583.192419][T20556] name failslab, interval 1, probability 0, space 0, times 0 [ 583.205438][ T2663] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 583.215818][ T2527] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 583.240585][T20556] CPU: 0 PID: 20556 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 583.249274][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.259319][T20556] Call Trace: [ 583.262619][T20556] dump_stack+0x1f0/0x31e [ 583.266951][T20556] should_fail+0x38a/0x4e0 [ 583.271476][T20556] ? __alloc_file+0x26/0x390 [ 583.276148][T20556] should_failslab+0x5/0x20 [ 583.278515][T20558] overlayfs: failed to resolve './file': -2 [ 583.280649][T20556] kmem_cache_alloc+0x53/0x2d0 [ 583.280670][T20556] __alloc_file+0x26/0x390 [ 583.280681][T20556] ? alloc_empty_file+0x49/0x1b0 [ 583.280694][T20556] alloc_empty_file+0xa9/0x1b0 [ 583.280703][T20556] alloc_file+0x5d/0x4f0 [ 583.280716][T20556] alloc_file_pseudo+0x1b0/0x240 [ 583.314533][T20556] anon_inode_getfile+0xa7/0x170 [ 583.319473][T20556] media_request_alloc+0xcd/0x440 [ 583.324506][T20556] media_device_request_alloc+0x94/0xc0 [ 583.330169][T20556] media_device_ioctl+0x1fb/0x330 [ 583.335211][T20556] ? do_vfs_ioctl+0x6bc/0x16d0 [ 583.339981][T20556] ? media_ioctl+0x101/0x120 [ 583.344569][T20556] ? __media_device_usb_init+0x430/0x430 [ 583.350198][T20556] ? media_poll+0x110/0x110 [ 583.354696][T20556] __se_sys_ioctl+0xf9/0x160 [ 583.359276][T20556] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.365329][T20556] do_syscall_64+0x73/0xe0 [ 583.369737][T20556] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 583.375620][T20556] RIP: 0033:0x45cba9 [ 583.379506][T20556] Code: Bad RIP value. [ 583.383561][T20556] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.392001][T20556] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 583.399968][T20556] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 583.407933][T20556] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 583.415897][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 583.423862][T20556] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 583.644668][ T2663] usb 4-1: Using ep0 maxpacket: 8 [ 583.674645][ T2527] usb 6-1: Using ep0 maxpacket: 8 [ 583.764747][ T2663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.775839][ T2663] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 583.786367][ T2663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.799613][ T2663] usb 4-1: config 0 descriptor?? [ 583.815104][ T2527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.828983][ T2527] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 583.838239][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.854338][ T2527] usb 6-1: config 0 descriptor?? [ 584.286125][ T2663] hid-picolcd 0003:04D8:F002.0085: unknown main item tag 0x0 [ 584.336082][ T2527] hid-picolcd 0003:04D8:F002.0086: unknown main item tag 0x0 [ 584.355762][ T2663] hid-picolcd 0003:04D8:F002.0085: No report with id 0xf3 found [ 584.363477][ T2663] hid-picolcd 0003:04D8:F002.0085: No report with id 0xf4 found [ 584.404627][ T2527] hid-picolcd 0003:04D8:F002.0086: No report with id 0xf3 found [ 584.412267][ T2527] hid-picolcd 0003:04D8:F002.0086: No report with id 0xf4 found [ 584.491759][ T2663] usb 4-1: USB disconnect, device number 84 [ 584.746938][ T2663] usb 6-1: USB disconnect, device number 98 00:34:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) 00:34:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2200, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0) ioctl$TCSETXF(r3, 0x5434, &(0x7f00000000c0)={0x7, 0x9, [0x100, 0xb418, 0x8, 0x2, 0x1], 0x7}) 00:34:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x5, "b2e700"}) 00:34:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(0x0, 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:05 executing program 1 (fault-call:1 fault-nth:4): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00227301"], 0x0}, 0x0) 00:34:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x184, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x8, 0x80000000, 0x0, 0xffffffff, 0x4, 0x1000, 0x1800]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xffffffff]}, @CTA_NAT_DST={0xc0, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x1f}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 585.302283][T20620] Unknown ioctl 21556 [ 585.311018][T20622] FAULT_INJECTION: forcing a failure. [ 585.311018][T20622] name failslab, interval 1, probability 0, space 0, times 0 [ 585.367874][T20622] CPU: 1 PID: 20622 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 585.376575][T20622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.386623][T20622] Call Trace: [ 585.389918][T20622] dump_stack+0x1f0/0x31e [ 585.394250][T20622] should_fail+0x38a/0x4e0 [ 585.398671][T20622] ? __alloc_file+0x26/0x390 [ 585.403255][T20622] should_failslab+0x5/0x20 [ 585.407756][T20622] kmem_cache_alloc+0x53/0x2d0 [ 585.412523][T20622] __alloc_file+0x26/0x390 [ 585.416937][T20622] ? alloc_empty_file+0x49/0x1b0 [ 585.421875][T20622] alloc_empty_file+0xa9/0x1b0 [ 585.426635][T20622] alloc_file+0x5d/0x4f0 [ 585.430880][T20622] alloc_file_pseudo+0x1b0/0x240 [ 585.435820][T20622] anon_inode_getfile+0xa7/0x170 [ 585.440757][T20622] media_request_alloc+0xcd/0x440 [ 585.445781][T20622] media_device_request_alloc+0x94/0xc0 [ 585.451341][T20622] media_device_ioctl+0x1fb/0x330 [ 585.456463][T20622] ? do_vfs_ioctl+0x6bc/0x16d0 [ 585.461593][T20622] ? media_ioctl+0x101/0x120 00:34:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x6, "b2e700"}) [ 585.466176][T20622] ? __media_device_usb_init+0x430/0x430 [ 585.471802][T20622] ? media_poll+0x110/0x110 [ 585.476297][T20622] __se_sys_ioctl+0xf9/0x160 [ 585.480879][T20622] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.486957][T20622] do_syscall_64+0x73/0xe0 [ 585.491371][T20622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.497253][T20622] RIP: 0033:0x45cba9 [ 585.501134][T20622] Code: Bad RIP value. [ 585.505188][T20622] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:34:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x7, "b2e700"}) 00:34:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x5, 0x8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000040)="87", 0x1, 0x40001, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = dup(0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0xd8, 0x1, 0x7, 0x6, 0x0, 0xc9, 0x20000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8001, 0x9dda}, 0x0, 0x7, 0x5, 0x2, 0x4, 0x400, 0x4}, r4, 0xffffffffffffffff, r3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xffffffffffffffff) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) [ 585.513587][T20622] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 585.521651][T20622] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 585.529612][T20622] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 585.537608][T20622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 585.545657][T20622] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 00:34:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(0x0, 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:05 executing program 1 (fault-call:1 fault-nth:5): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) [ 585.651576][T20644] FAULT_INJECTION: forcing a failure. [ 585.651576][T20644] name failslab, interval 1, probability 0, space 0, times 0 [ 585.688540][T20644] CPU: 0 PID: 20644 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 585.697234][T20644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.707287][T20644] Call Trace: [ 585.710664][T20644] dump_stack+0x1f0/0x31e [ 585.714997][T20644] should_fail+0x38a/0x4e0 [ 585.719415][T20644] ? security_file_alloc+0x32/0x200 [ 585.719918][ T2527] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 585.724603][T20644] should_failslab+0x5/0x20 [ 585.724616][T20644] kmem_cache_alloc+0x53/0x2d0 [ 585.724633][T20644] security_file_alloc+0x32/0x200 [ 585.724649][T20644] __alloc_file+0xd7/0x390 [ 585.724664][T20644] alloc_empty_file+0xa9/0x1b0 [ 585.724680][T20644] alloc_file+0x5d/0x4f0 [ 585.732498][ T2507] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 585.736952][T20644] alloc_file_pseudo+0x1b0/0x240 [ 585.736973][T20644] anon_inode_getfile+0xa7/0x170 [ 585.736990][T20644] media_request_alloc+0xcd/0x440 [ 585.737008][T20644] media_device_request_alloc+0x94/0xc0 [ 585.787965][T20644] media_device_ioctl+0x1fb/0x330 [ 585.792994][T20644] ? do_vfs_ioctl+0x6bc/0x16d0 [ 585.797757][T20644] ? media_ioctl+0x101/0x120 [ 585.802360][T20644] ? __media_device_usb_init+0x430/0x430 [ 585.807987][T20644] ? media_poll+0x110/0x110 [ 585.812475][T20644] __se_sys_ioctl+0xf9/0x160 [ 585.817131][T20644] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.823168][T20644] do_syscall_64+0x73/0xe0 [ 585.827556][T20644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 585.833429][T20644] RIP: 0033:0x45cba9 [ 585.837305][T20644] Code: Bad RIP value. [ 585.841361][T20644] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.849776][T20644] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 585.857743][T20644] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 585.865705][T20644] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 585.873664][T20644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 585.881625][T20644] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 585.984448][ T2507] usb 6-1: Using ep0 maxpacket: 8 [ 585.995581][ T2527] usb 4-1: Using ep0 maxpacket: 8 [ 586.107321][ T2507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.118586][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.129479][ T2507] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 586.140113][ T2527] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 586.149705][ T2507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.158199][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.167809][ T2507] usb 6-1: config 0 descriptor?? [ 586.174064][ T2527] usb 4-1: config 0 descriptor?? [ 586.645991][ T2507] hid-picolcd 0003:04D8:F002.0087: unknown main item tag 0x0 [ 586.665754][ T2527] hid-picolcd 0003:04D8:F002.0088: unknown main item tag 0x0 [ 586.714494][ T2507] hid-picolcd 0003:04D8:F002.0087: No report with id 0xf3 found [ 586.722216][ T2507] hid-picolcd 0003:04D8:F002.0087: No report with id 0xf4 found [ 586.734408][ T2527] hid-picolcd 0003:04D8:F002.0088: No report with id 0xf3 found [ 586.742149][ T2527] hid-picolcd 0003:04D8:F002.0088: No report with id 0xf4 found [ 586.871003][ T2527] usb 4-1: USB disconnect, device number 85 [ 587.057331][ T2480] usb 6-1: USB disconnect, device number 99 00:34:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, &(0x7f0000001800)) 00:34:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = open$dir(0x0, 0x0, 0x0) mknodat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/101, 0x65) 00:34:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)) r2 = dup(r0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getitimer(0x0, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{}], 0x200000000000007d, 0x0) 00:34:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x8, "b2e700"}) 00:34:07 executing program 1 (fault-call:1 fault-nth:6): r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xbaf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) 00:34:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002273010000"], 0x0}, 0x0) [ 587.609678][T20703] FAULT_INJECTION: forcing a failure. [ 587.609678][T20703] name failslab, interval 1, probability 0, space 0, times 0 00:34:07 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/101, 0x65) 00:34:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x2000000000baf, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000100)={{0x0, 0x7f}, 0x1, 0x3, 0x1, {0x3, 0x7}, 0x3, 0x7ff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="ff0000000000000001800000000400000000000000000000001148bd7f75"]) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000003c0)={0x3c, 0x16, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1f, 0x8b, [0xd600, 0x0, 0x33, 0x8, 0x81, 0xc, 0xffff, 0x1]}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3969}, @jumbo={0xc2, 0x4, 0xcc67}, @pad1, @calipso={0x7, 0x48, {0x3, 0x10, 0x8, 0xb405, [0x4, 0x0, 0x81, 0x39, 0x7, 0x7f, 0x0, 0x339d]}}, @pad1]}, 0xc0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x600}], 0x1, 0xfffffffe) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r8}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={r8}, &(0x7f0000000380)=0x8) [ 587.669246][T20703] CPU: 0 PID: 20703 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 587.677946][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.687993][T20703] Call Trace: [ 587.691287][T20703] dump_stack+0x1f0/0x31e [ 587.695636][T20703] should_fail+0x38a/0x4e0 [ 587.700139][T20703] ? media_request_alloc+0x339/0x440 [ 587.705514][T20703] should_failslab+0x5/0x20 [ 587.710015][T20703] kmem_cache_alloc_trace+0x57/0x300 00:34:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0x9, "b2e700"}) [ 587.715299][T20703] ? anon_inode_getfile+0xe5/0x170 [ 587.720415][T20703] media_request_alloc+0x339/0x440 [ 587.725524][T20703] media_device_request_alloc+0x94/0xc0 [ 587.731063][T20703] media_device_ioctl+0x1fb/0x330 [ 587.736091][T20703] ? do_vfs_ioctl+0x6bc/0x16d0 [ 587.740872][T20703] ? media_ioctl+0x101/0x120 [ 587.745451][T20703] ? __media_device_usb_init+0x430/0x430 [ 587.751078][T20703] ? media_poll+0x110/0x110 [ 587.755573][T20703] __se_sys_ioctl+0xf9/0x160 [ 587.760159][T20703] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.766229][T20703] do_syscall_64+0x73/0xe0 [ 587.770645][T20703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.776534][T20703] RIP: 0033:0x45cba9 [ 587.780417][T20703] Code: Bad RIP value. [ 587.784475][T20703] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.792875][T20703] RAX: ffffffffffffffda RBX: 00000000004ea900 RCX: 000000000045cba9 [ 587.800835][T20703] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 587.808798][T20703] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 587.816763][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 587.824739][T20703] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 587.844292][T20703] ================================================================== [ 587.852710][T20703] BUG: KASAN: null-ptr-deref in media_request_close+0x4d/0x170 [ 587.860246][T20703] Write of size 4 at addr 0000000000000008 by task syz-executor.1/20703 [ 587.868555][T20703] [ 587.870878][T20703] CPU: 0 PID: 20703 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 587.879531][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.889573][T20703] Call Trace: [ 587.892860][T20703] dump_stack+0x1f0/0x31e [ 587.897183][T20703] kasan_report+0x151/0x1d0 [ 587.901679][T20703] ? media_request_close+0x4d/0x170 [ 587.906871][T20703] ? media_request_ioctl+0x760/0x760 [ 587.912141][T20703] check_memory_region+0x2b5/0x2f0 00:34:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0xa, "b2e700"}) [ 587.917242][T20703] media_request_close+0x4d/0x170 [ 587.922257][T20703] ? media_request_ioctl+0x760/0x760 [ 587.927525][T20703] __fput+0x2f0/0x750 [ 587.931503][T20703] task_work_run+0x137/0x1c0 [ 587.936090][T20703] __prepare_exit_to_usermode+0x14c/0x1e0 [ 587.941802][T20703] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.947862][T20703] do_syscall_64+0x7f/0xe0 [ 587.952273][T20703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 587.958156][T20703] RIP: 0033:0x45cba9 [ 587.962032][T20703] Code: Bad RIP value. [ 587.966083][T20703] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.974482][T20703] RAX: fffffffffffffff4 RBX: 00000000004ea900 RCX: 000000000045cba9 [ 587.982436][T20703] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 587.984398][ T2527] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 587.990382][T20703] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 587.990398][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:34:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0xb, "b2e700"}) [ 587.990404][T20703] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 587.990434][T20703] ================================================================== [ 587.990438][T20703] Disabling lock debugging due to kernel taint [ 588.043500][T20703] Kernel panic - not syncing: panic_on_warn set ... [ 588.050096][T20703] CPU: 0 PID: 20703 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 588.060132][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.070168][T20703] Call Trace: [ 588.073453][T20703] dump_stack+0x1f0/0x31e [ 588.077781][T20703] panic+0x264/0x7a0 [ 588.081685][T20703] ? trace_hardirqs_on+0x30/0x80 [ 588.086607][T20703] kasan_report+0x1c9/0x1d0 [ 588.091094][T20703] ? media_request_close+0x4d/0x170 [ 588.096277][T20703] ? media_request_ioctl+0x760/0x760 [ 588.101550][T20703] check_memory_region+0x2b5/0x2f0 [ 588.106651][T20703] media_request_close+0x4d/0x170 [ 588.111662][T20703] ? media_request_ioctl+0x760/0x760 [ 588.116934][T20703] __fput+0x2f0/0x750 00:34:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101406, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x0, 0xc, "b2e700"}) [ 588.120903][T20703] task_work_run+0x137/0x1c0 [ 588.125480][T20703] __prepare_exit_to_usermode+0x14c/0x1e0 [ 588.131184][T20703] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 588.137235][T20703] do_syscall_64+0x7f/0xe0 [ 588.141638][T20703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 588.147510][T20703] RIP: 0033:0x45cba9 [ 588.151393][T20703] Code: Bad RIP value. [ 588.155444][T20703] RSP: 002b:00007fabd9445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.163835][T20703] RAX: fffffffffffffff4 RBX: 00000000004ea900 RCX: 000000000045cba9 [ 588.171789][T20703] RDX: 0000000020000200 RSI: 0000000080047c05 RDI: 0000000000000003 [ 588.179746][T20703] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 588.187701][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 588.195656][T20703] R13: 000000000000041f R14: 00000000004c6eb3 R15: 00007fabd94466d4 [ 588.204994][T20703] Kernel Offset: disabled [ 588.209303][T20703] Rebooting in 86400 seconds..