(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:40 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 877.524478][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 877.561926][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 877.602796][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 877.649630][ T7] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 877.666125][ T3860] overlayfs: unrecognized mount option "xino=o" or missing value [ 877.696857][ T3862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.717095][ T3863] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.730367][ T7] usb 2-1: config 250 interface 228 has no altsetting 0 [ 877.755418][ T3861] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:40 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:40 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 877.804599][ T3864] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.829451][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 877.860323][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 877.905765][ T7] usb 2-1: SerialNumber: syz 04:12:40 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 877.960337][ T3816] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.967795][ T3816] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 878.071413][ T3873] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 878.079614][ T7] hub 2-1:250.228: bad descriptor, ignoring hub [ 878.085876][ T7] hub: probe of 2-1:250.228 failed with error -5 [ 878.110810][ T3876] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 878.115175][ T3878] overlayfs: unrecognized mount option "xino=o" or missing value 04:12:40 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 878.321932][ T3888] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 878.331451][ T7] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 878.377654][ T3895] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 878.442981][ T7] usb 2-1: USB disconnect, device number 30 [ 878.456161][ T7] usblp0: removed [ 878.564573][ T9762] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 878.818768][ T9762] usb 1-1: Using ep0 maxpacket: 8 [ 878.899270][ T7] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 878.938833][ T9762] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 878.947455][ T9762] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 878.957518][ T9762] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 878.967400][ T9762] usb 1-1: config 250 has no interface number 0 [ 878.974421][ T9762] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 878.986522][ T9762] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 878.997650][ T9762] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 879.009835][ T9762] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 879.021364][ T9762] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 879.035557][ T9762] usb 1-1: config 250 interface 228 has no altsetting 0 [ 879.118872][ T9762] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 879.128288][ T9762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.138727][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 879.144074][ T9762] usb 1-1: SerialNumber: syz [ 879.172431][ T3887] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.180939][ T3887] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.189676][ T9762] hub 1-1:250.228: bad descriptor, ignoring hub [ 879.196016][ T9762] hub: probe of 1-1:250.228 failed with error -5 [ 879.258906][ T7] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 879.267446][ T7] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 879.277527][ T7] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 879.287397][ T7] usb 2-1: config 250 has no interface number 0 [ 879.294477][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 879.306503][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 879.317582][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 879.329918][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 879.341319][ T7] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 879.355525][ T7] usb 2-1: config 250 interface 228 has no altsetting 0 [ 879.415094][ T9762] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 879.445916][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 879.455147][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.464862][ T7] usb 2-1: SerialNumber: syz [ 879.491304][ T3816] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.500070][ T3816] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.509702][ T7] hub 2-1:250.228: bad descriptor, ignoring hub [ 879.516054][ T7] hub: probe of 2-1:250.228 failed with error -5 04:12:42 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:12:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 879.717932][ T3934] udc-core: couldn't find an available UDC or it's busy [ 879.739743][ T7] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 879.745240][ T3934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 879.759059][ C1] usblp0: nonzero read bulk status received: -71 [ 879.765277][ T3938] overlayfs: unrecognized mount option "xino=o" or missing value [ 879.839467][ T7] usb 2-1: USB disconnect, device number 31 [ 879.874027][ T3944] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 879.885696][ T7] usblp1: removed 04:12:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 879.887687][ T3943] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 879.896203][ T3940] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 879.918125][ T2959] usb 1-1: USB disconnect, device number 5 [ 879.929129][ T2959] usblp0: removed 04:12:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 880.176543][ T3969] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 880.257459][ T3972] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 880.293440][ T3974] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 880.352810][ T3978] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:43 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:43 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) [ 880.508792][ T7] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 880.570279][ T3984] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 880.586679][ T3985] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 880.698869][ T7] usb 2-1: device descriptor read/64, error 18 [ 880.908865][T24054] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 880.968967][ T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 881.168811][ T7] usb 2-1: device descriptor read/64, error 18 [ 881.168834][T24054] usb 1-1: Using ep0 maxpacket: 8 [ 881.288929][ T7] usb usb2-port1: attempt power cycle [ 881.339678][T24054] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 881.348299][T24054] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 881.357372][T24054] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 881.366686][T24054] usb 1-1: config 250 has no interface number 0 [ 881.373064][T24054] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 881.384617][T24054] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 881.395343][T24054] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 881.407078][T24054] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 881.421664][T24054] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 881.436572][T24054] usb 1-1: config 250 interface 228 has no altsetting 0 [ 881.550851][T24054] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 881.560205][T24054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 881.568186][T24054] usb 1-1: SerialNumber: syz [ 881.590585][ T3988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 881.598173][ T3988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 881.619752][T24054] hub 1-1:250.228: bad descriptor, ignoring hub [ 881.626207][T24054] hub: probe of 1-1:250.228 failed with error -5 [ 881.698837][ T7] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 881.847396][T24054] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 881.869537][ T7] usb 2-1: device descriptor read/8, error -61 [ 881.899411][T24054] usb 1-1: USB disconnect, device number 6 [ 881.917380][T24054] usblp0: removed [ 882.138794][ T7] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 882.308836][ T7] usb 2-1: device descriptor read/8, error -61 [ 882.428812][T24054] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 882.428905][ T7] usb usb2-port1: unable to enumerate USB device 04:12:45 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:12:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:45 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) [ 882.698780][T24054] usb 1-1: Using ep0 maxpacket: 8 04:12:45 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 882.861744][ T4042] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 882.868549][ T4040] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 882.874571][T24054] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 882.883696][ T4041] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 882.888545][ T4043] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:45 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 882.910343][T24054] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 882.950852][T24054] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 04:12:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 883.000996][T24054] usb 1-1: config 250 has no interface number 0 [ 883.019760][T24054] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:12:45 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 883.047578][T24054] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 883.070747][T24054] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 883.086378][T24054] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 883.104060][T24054] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 883.118130][T24054] usb 1-1: config 250 interface 228 has no altsetting 0 [ 883.209942][T24054] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 883.232931][T24054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 883.247373][ T4057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.260720][T24054] usb 1-1: SerialNumber: syz [ 883.301643][ T3988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 883.319804][ T3988] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 883.340087][ T4062] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.360117][ T4061] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.370915][T24054] hub 1-1:250.228: bad descriptor, ignoring hub [ 883.377174][T24054] hub: probe of 1-1:250.228 failed with error -5 [ 883.396133][ T4067] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 04:12:46 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 883.550722][ T20] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 883.600493][T24054] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 883.649588][ T4084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.661197][T24054] usb 1-1: USB disconnect, device number 7 [ 883.672104][T24054] usblp0: removed [ 883.700699][ T4088] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 883.778948][ T20] usb 2-1: device descriptor read/64, error 18 [ 884.055005][ T20] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 884.258960][ T20] usb 2-1: device descriptor read/64, error 18 [ 884.389193][ T20] usb usb2-port1: attempt power cycle [ 884.820100][ T20] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 885.028880][ T20] usb 2-1: device descriptor read/8, error -61 [ 885.318738][ T20] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 885.510685][ T20] usb 2-1: device descriptor read/8, error -61 [ 885.639333][ T20] usb usb2-port1: unable to enumerate USB device 04:12:48 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:12:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:12:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 04:12:48 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 885.942003][ T4125] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 885.957196][ T4130] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 885.961591][ T4123] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:48 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 885.987221][ T4124] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.011749][ T4126] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:48 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 04:12:48 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f110000000400110187", 0x1c}], 0x1}, 0x0) [ 886.301799][ T4152] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.326915][ T4150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.370737][ T4154] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:49 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:49 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 886.468878][ T20] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 886.529779][ T4163] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.540873][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd 04:12:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f110000000400110187", 0x1c}], 0x1}, 0x0) [ 886.659013][ T4169] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.684379][ T4168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.728544][ T4171] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.736492][ T20] usb 2-1: Using ep0 maxpacket: 8 04:12:49 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 886.828826][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 886.882860][ T20] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 886.910486][ T20] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 886.913720][ T4180] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 886.945137][ T20] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 886.972440][ T20] usb 2-1: config 250 has no interface number 0 [ 886.980317][ T26] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 886.994469][ T26] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 887.015032][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 887.048045][ T26] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 887.071305][ T4185] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 887.079689][ T4186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 887.082485][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 887.108175][ T26] usb 4-1: config 250 has no interface number 0 [ 887.123669][ T26] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 887.141094][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 887.159810][ T26] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 887.178377][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 887.207137][ T26] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 887.238717][ T20] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 887.259719][ T26] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 887.271776][ T20] usb 2-1: config 250 interface 228 has no altsetting 0 [ 887.279878][ T26] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 887.294418][ T26] usb 4-1: config 250 interface 228 has no altsetting 0 [ 887.379636][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 887.399475][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 887.407661][ T20] usb 2-1: SerialNumber: syz [ 887.412778][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 887.425079][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 887.433383][ T26] usb 4-1: SerialNumber: syz [ 887.460327][ T4139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 887.467692][ T4139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 887.476339][ T4151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 887.489690][ T20] hub 2-1:250.228: bad descriptor, ignoring hub [ 887.490363][ T4151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 887.496246][ T20] hub: probe of 2-1:250.228 failed with error -5 [ 887.561733][ T26] hub 4-1:250.228: bad descriptor, ignoring hub [ 887.568027][ T26] hub: probe of 4-1:250.228 failed with error -5 04:12:50 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:50 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 887.798337][ T20] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 887.844830][ T26] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 887.878990][ T4217] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 887.893464][ T20] usb 2-1: USB disconnect, device number 40 [ 887.906483][ T20] usblp0: removed [ 888.069799][ T4151] udc-core: couldn't find an available UDC or it's busy [ 888.086907][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 888.188802][T24052] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 888.238963][ T2959] usb 4-1: USB disconnect, device number 11 [ 888.257229][ T2959] usblp1: removed [ 888.463260][T24052] usb 1-1: Using ep0 maxpacket: 8 04:12:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fab", 0x20}], 0x1}, 0x0) 04:12:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:51 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 888.619419][T24052] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 888.627952][T24052] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 888.638250][T24052] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 888.648389][T24052] usb 1-1: config 250 has no interface number 0 [ 888.679978][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 888.731074][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 888.749775][ T4258] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 888.782716][ T4263] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 888.789054][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 04:12:51 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 888.827188][ T4265] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 888.835126][ T4266] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 888.850638][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 888.919047][T24052] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 04:12:51 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:51 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 888.993237][T24052] usb 1-1: config 250 interface 228 has no altsetting 0 [ 889.109515][T24052] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 889.129714][T24052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 889.162716][ T4276] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 889.163343][ T4277] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 889.172635][T24052] usb 1-1: SerialNumber: syz 04:12:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 889.253679][ T4281] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 889.263490][ T4220] raw-gadget gadget: fail, usb_ep_enable returned -22 04:12:52 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 889.295087][ T4220] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.339604][T24052] hub 1-1:250.228: bad descriptor, ignoring hub [ 889.346501][T24052] hub: probe of 1-1:250.228 failed with error -5 [ 889.398786][ T26] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 889.458834][ T2959] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 889.461902][ T4294] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 889.502634][ T4295] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 889.592833][T24052] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 889.698840][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 889.699292][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 889.804096][ T4220] udc-core: couldn't find an available UDC or it's busy [ 889.811352][ T4220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 889.824900][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 889.845131][ T26] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 889.845741][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 889.857203][ T26] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 889.866129][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 889.882544][ T2959] usb 6-1: config 250 has no interface number 0 [ 889.889827][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 889.896628][ T26] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 889.902777][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 889.922556][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 889.929891][ T26] usb 2-1: config 250 has no interface number 0 [ 889.936017][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 889.971067][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 889.996504][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 890.008467][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 890.047213][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 890.059018][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 890.071466][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 890.082902][ T26] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 890.097810][ T26] usb 2-1: config 250 interface 228 has no altsetting 0 [ 890.099299][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 890.119021][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 890.127284][ T2959] usb 6-1: SerialNumber: syz [ 890.154614][ T7] usb 1-1: USB disconnect, device number 8 [ 890.172465][ T4280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 890.185227][ T7] usblp0: removed [ 890.190890][ T4280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 890.202288][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 890.209929][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 890.214925][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 890.218471][ T2959] hub: probe of 6-1:250.228 failed with error -5 [ 890.250264][ T26] usb 2-1: SerialNumber: syz [ 890.290230][ T4264] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 890.297853][ T4264] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 890.309676][ T26] hub 2-1:250.228: bad descriptor, ignoring hub [ 890.316024][ T26] hub: probe of 2-1:250.228 failed with error -5 04:12:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:53 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 04:12:53 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 890.459904][ T2959] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:12:53 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 890.535868][ T4337] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 890.564173][ T4340] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 890.589538][ T26] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 890.631258][ T4344] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 890.699656][ T26] usb 2-1: USB disconnect, device number 41 [ 890.728059][ T26] usblp1: removed 04:12:53 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 890.759401][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd 04:12:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff", 0x12}], 0x1}, 0x0) 04:12:53 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 890.808975][ T2959] usb 6-1: USB disconnect, device number 3 [ 890.819255][ T2959] usblp0: removed [ 890.958418][ T4393] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 890.984958][ T4391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 890.998939][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 891.091194][ T4399] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 891.120231][ T7] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 891.154081][ T7] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 891.173164][ T7] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 891.199691][ T7] usb 4-1: config 250 has no interface number 0 [ 891.206404][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 891.225771][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 891.237342][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 891.255950][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 891.287391][ T7] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 891.308307][ T7] usb 4-1: config 250 interface 228 has no altsetting 0 [ 891.378794][ T26] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 891.409026][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 891.418468][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 04:12:54 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 04:12:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:54 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:54 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 891.514431][ T7] usb 4-1: SerialNumber: syz [ 891.542407][ T4410] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 891.569122][ T4341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 891.576100][ T4341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 891.585963][ T4412] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 891.589060][ T4411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 891.649638][ T7] hub 4-1:250.228: bad descriptor, ignoring hub [ 891.656096][ T7] hub: probe of 4-1:250.228 failed with error -5 [ 891.659018][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 891.828962][ T26] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 891.837514][ T26] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 891.859076][ T26] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 891.860018][ T7] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 891.868365][ T26] usb 2-1: config 250 has no interface number 0 [ 891.868398][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 891.868427][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 891.914011][ T2959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 891.959009][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 891.998889][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 892.009412][ T26] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 892.038694][ T26] usb 2-1: config 250 interface 228 has no altsetting 0 [ 892.138933][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 892.148474][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 892.157141][ T26] usb 2-1: SerialNumber: syz [ 892.161763][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 892.189778][ T4398] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.210336][ T26] hub 2-1:250.228: bad descriptor, ignoring hub [ 892.217578][ T26] hub: probe of 2-1:250.228 failed with error -5 [ 892.219587][ T9762] usb 4-1: USB disconnect, device number 12 [ 892.248257][ T9762] usblp0: removed [ 892.294215][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 892.307684][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 892.318066][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 892.334083][ T2959] usb 6-1: config 250 has no interface number 0 [ 892.341200][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 892.353608][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.365024][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 892.377569][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 892.389075][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 892.403685][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 892.444934][ T26] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 892.489186][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 892.493771][ T26] usb 2-1: USB disconnect, device number 42 [ 892.498338][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 892.498360][ T2959] usb 6-1: SerialNumber: syz [ 892.529392][ T26] usblp0: removed [ 892.540345][ T4416] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.554580][ T4416] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.579932][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 892.586547][ T2959] hub: probe of 6-1:250.228 failed with error -5 04:12:55 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:55 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:55 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:55 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 892.809806][ T2959] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 892.939412][ T4469] overlayfs: failed to resolve './file1': -2 04:12:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 892.993995][ T4467] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 893.006642][ T4468] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 893.060481][ T4474] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 04:12:55 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 893.188939][ T2959] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 893.212224][ T4482] overlayfs: failed to resolve './file1': -2 [ 893.404146][ T4486] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 893.452676][ T2959] usb 2-1: Using ep0 maxpacket: 8 [ 893.573845][ T2959] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 893.593410][ T2959] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 893.610109][ T2959] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 893.624984][ T2959] usb 2-1: config 250 has no interface number 0 [ 893.634354][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 893.673407][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 893.695379][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 893.707055][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 893.718734][ T2959] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 893.733494][ T2959] usb 2-1: config 250 interface 228 has no altsetting 0 [ 893.818861][ T2959] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 893.832832][ T2959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 893.841936][ T2959] usb 2-1: SerialNumber: syz [ 893.860412][ T4470] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.879527][ T2959] hub 2-1:250.228: bad descriptor, ignoring hub [ 893.886297][ T2959] hub: probe of 2-1:250.228 failed with error -5 [ 894.001504][ T9762] usb 6-1: USB disconnect, device number 4 [ 894.013499][ T9762] usblp0: removed [ 894.115680][ T2959] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 894.169408][ T2959] usb 2-1: USB disconnect, device number 43 [ 894.198804][ T2959] usblp0: removed 04:12:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:12:57 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:57 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:12:57 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:12:57 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 894.572751][ T4530] overlayfs: failed to resolve './file1': -2 04:12:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 894.686119][ T4534] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:57 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 894.761373][ T4539] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 894.839060][T24052] usb 1-1: new high-speed USB device number 9 using dummy_hcd 04:12:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) [ 894.909641][T24054] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 894.917512][ T2959] usb 2-1: new high-speed USB device number 44 using dummy_hcd 04:12:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 895.022263][ T4551] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:12:57 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 895.130266][T24052] usb 1-1: Using ep0 maxpacket: 8 04:12:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 895.162179][ T4554] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 895.179763][ T2959] usb 2-1: Using ep0 maxpacket: 8 [ 895.190196][T24054] usb 4-1: Using ep0 maxpacket: 8 [ 895.267617][ T4561] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 895.290032][T24052] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 895.298487][T24052] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 895.309402][ T2959] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 895.322949][T24052] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 895.327485][ T4563] overlayfs: failed to resolve './file0': -2 [ 895.336766][T24052] usb 1-1: config 250 has no interface number 0 [ 895.341842][ T2959] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 895.360454][T24054] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 895.383186][ T2959] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 895.389913][T24054] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 895.404262][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 895.422032][T24054] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 895.441084][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 895.452408][ T2959] usb 2-1: config 250 has no interface number 0 [ 895.453570][T24054] usb 4-1: config 250 has no interface number 0 [ 895.465982][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 895.478175][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 895.484805][T24054] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 895.501414][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 895.522118][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 895.525396][T24054] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 895.547535][T24052] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 895.563504][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 895.564070][T24054] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 895.585726][T24052] usb 1-1: config 250 interface 228 has no altsetting 0 [ 895.593028][T24054] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 895.594408][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 895.603762][T24054] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 895.628413][T24054] usb 4-1: config 250 interface 228 has no altsetting 0 [ 895.654386][ T2959] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 895.669928][T24052] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 895.673216][ T2959] usb 2-1: config 250 interface 228 has no altsetting 0 [ 895.683496][T24052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 895.702564][T24052] usb 1-1: SerialNumber: syz [ 895.741120][ T4528] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 895.748564][ T4528] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 895.755659][T24054] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 895.765734][T24054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 895.779468][ T2959] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 895.780732][T24054] usb 4-1: SerialNumber: syz [ 895.794438][ T2959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 895.795072][T24052] hub 1-1:250.228: bad descriptor, ignoring hub [ 895.820317][ T2959] usb 2-1: SerialNumber: syz [ 895.824458][T24052] hub: probe of 1-1:250.228 failed with error -5 [ 895.859653][ T4533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 895.867203][ T4533] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 895.879710][T24054] hub 4-1:250.228: bad descriptor, ignoring hub [ 895.886462][T24054] hub: probe of 4-1:250.228 failed with error -5 [ 895.910472][ T4535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 895.929843][ T2959] hub 2-1:250.228: bad descriptor, ignoring hub [ 895.936190][ T2959] hub: probe of 2-1:250.228 failed with error -5 [ 896.010407][T24052] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 896.119487][T24054] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 896.209554][ T2959] usblp 2-1:250.228: usblp2: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 896.269465][ T2959] usb 2-1: USB disconnect, device number 44 [ 896.509398][ T7] usb 4-1: USB disconnect, device number 13 [ 896.699529][ T4528] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 896.958750][ T4528] usb 1-1: Using ep0 maxpacket: 8 [ 897.102117][ T4601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.109771][ T4601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.329265][ T4601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.336724][ T4601] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.379048][ T2959] usblp2: removed [ 897.384347][ T7] usblp1: removed [ 897.398719][ C0] usblp0: nonzero read bulk status received: -71 [ 897.571330][ T5] usb 1-1: USB disconnect, device number 9 [ 897.584412][ T5] usblp0: removed 04:13:00 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:13:00 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:00 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:13:00 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:00 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 898.191634][ T4644] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.225846][ T4649] overlayfs: failed to resolve './file0': -2 [ 898.234204][ T4645] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:01 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 898.302584][ T4653] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:13:01 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 898.479010][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 898.488840][T24054] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 898.541517][ T4663] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.551762][ T4662] overlayfs: failed to resolve './file0': -2 04:13:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:01 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 898.685772][ T4667] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.716375][ T4669] overlayfs: missing 'lowerdir' [ 898.719555][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 898.769258][T24054] usb 2-1: Using ep0 maxpacket: 8 [ 898.795148][ T4672] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 04:13:01 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 898.839923][ T7] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 898.848379][ T7] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 04:13:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 898.903289][ T4675] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 898.917249][ T7] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 898.919312][T24054] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) 04:13:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 898.960522][T24054] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 898.981177][ T7] usb 4-1: config 250 has no interface number 0 [ 898.990128][T24054] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 899.010359][T24054] usb 2-1: config 250 has no interface number 0 [ 899.010443][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 899.025275][T24054] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:13:01 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 899.054487][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 899.064472][T24054] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 899.084474][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 899.089978][T24054] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.101387][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 899.126433][ T7] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 899.130087][T24054] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.145164][ T7] usb 4-1: config 250 interface 228 has no altsetting 0 [ 899.179769][T24054] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 899.215266][T24054] usb 2-1: config 250 interface 228 has no altsetting 0 [ 899.231224][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 899.254036][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 899.282559][ T7] usb 4-1: SerialNumber: syz [ 899.319265][ T4647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 899.332046][ T4647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 899.349458][T24054] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 899.360041][T24054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 899.364395][ T4687] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 899.402999][ T7] hub 4-1:250.228: bad descriptor, ignoring hub [ 899.416533][T24054] usb 2-1: SerialNumber: syz [ 899.418379][ T7] hub: probe of 4-1:250.228 failed with error -5 [ 899.469424][ T4691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 899.490356][ T4648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 899.519732][T24054] hub 2-1:250.228: bad descriptor, ignoring hub [ 899.536419][ T4692] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 899.549789][T24054] hub: probe of 2-1:250.228 failed with error -5 [ 899.623906][T24052] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 899.638927][ T7] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:13:02 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 899.768133][T24054] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 899.888768][T24052] usb 1-1: Using ep0 maxpacket: 8 [ 899.958894][ T20] usb 4-1: USB disconnect, device number 14 [ 899.973527][ T20] usblp0: removed [ 900.021675][T24054] usb 2-1: reset high-speed USB device number 45 using dummy_hcd [ 900.080073][T24052] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 900.108445][T24052] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 900.129018][T24052] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 900.138617][T24052] usb 1-1: config 250 has no interface number 0 [ 900.159194][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 900.191978][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 900.204945][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 900.248835][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 900.262257][T24052] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 900.276315][T24052] usb 1-1: config 250 interface 228 has no altsetting 0 [ 900.312398][T24054] usb 2-1: Using ep0 maxpacket: 8 [ 900.394337][T24052] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 900.404029][T24052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 900.417013][T24052] usb 1-1: SerialNumber: syz [ 900.439534][ T20] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 900.444628][ T4681] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.457207][ T4681] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.469904][T24052] hub 1-1:250.228: bad descriptor, ignoring hub [ 900.478107][T24052] hub: probe of 1-1:250.228 failed with error -5 [ 900.500703][ T4713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.709394][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 900.715041][T24052] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 900.748790][T24054] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 900.770476][T24054] usb 2-1: USB disconnect, device number 45 [ 900.794853][T24054] usblp1: removed [ 900.899243][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 900.907645][ T20] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 900.926925][ T20] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 900.937168][ T20] usb 4-1: config 250 has no interface number 0 [ 900.944198][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 900.956349][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 900.967617][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 900.980107][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 900.998709][ T20] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 901.013380][ T20] usb 4-1: config 250 interface 228 has no altsetting 0 04:13:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) 04:13:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:03 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:13:03 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 901.126546][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 901.135811][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 901.145196][ T20] usb 4-1: SerialNumber: syz [ 901.179823][ T20] usb 4-1: can't set config #250, error -71 [ 901.223190][ T20] usb 4-1: USB disconnect, device number 15 04:13:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 901.333422][ T4762] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 901.350884][ T4766] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 901.375233][ T4768] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 901.384226][ T4681] usb 1-1: reset high-speed USB device number 10 using dummy_hcd 04:13:04 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 901.508814][ T9762] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 901.654512][ T4788] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 901.668843][ T4681] usb 1-1: Using ep0 maxpacket: 8 [ 901.758817][ T9762] usb 2-1: Using ep0 maxpacket: 8 [ 901.844500][ T4751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 901.859030][ T4751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 901.879413][ T9762] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 901.887852][ T9762] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 901.953726][ T9762] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 901.972540][ T9762] usb 2-1: config 250 has no interface number 0 [ 901.995431][ T9762] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 902.008408][ T9762] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 902.019293][ T9762] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 902.031242][ T9762] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 902.042985][ T9762] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 902.057436][ T9762] usb 2-1: config 250 interface 228 has no altsetting 0 [ 902.118254][ T4751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 902.126509][ T4751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 902.139161][ T9762] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 902.148370][ T9762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 902.161690][ T9762] usb 2-1: SerialNumber: syz [ 902.180392][ T4764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 902.188299][ T4764] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 902.188711][ C1] usblp0: nonzero read bulk status received: -71 [ 902.219722][ T9762] hub 2-1:250.228: bad descriptor, ignoring hub [ 902.226302][ T9762] hub: probe of 2-1:250.228 failed with error -5 [ 902.375794][ T5] usb 1-1: USB disconnect, device number 10 [ 902.384497][ T5] usblp0: removed [ 902.440018][ T9762] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:13:05 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:05 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 903.069104][ T4764] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 903.125235][ T4833] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 903.138332][ T4832] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 903.149499][ T4837] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 903.164537][ T4836] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 903.174729][ T4840] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 04:13:05 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 04:13:06 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:06 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 903.328815][ T4764] usb 2-1: Using ep0 maxpacket: 8 04:13:06 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 903.481126][ T4819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.488430][ T4819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.558529][ T4855] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 903.580739][ T4857] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 903.748754][ T20] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 903.756555][T24054] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 903.777086][ T4819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.807386][ T4819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.878734][ C1] usblp0: nonzero read bulk status received: -71 [ 904.009080][T24054] usb 6-1: Using ep0 maxpacket: 8 [ 904.014595][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 904.045703][T24052] usb 2-1: USB disconnect, device number 46 [ 904.064646][T24052] usblp0: removed [ 904.159757][T24054] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 904.168332][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 904.176942][T24054] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 904.185856][ T20] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 904.194855][T24054] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 904.204894][ T20] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 904.214708][T24054] usb 6-1: config 250 has no interface number 0 [ 904.221767][ T20] usb 4-1: config 250 has no interface number 0 [ 904.228028][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 904.241251][T24054] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 904.253299][T24054] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 904.264398][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 904.275778][T24054] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 904.287909][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 904.300304][T24054] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 904.311453][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 904.322644][T24054] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 904.336858][ T20] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 904.351175][T24054] usb 6-1: config 250 interface 228 has no altsetting 0 [ 904.358186][ T20] usb 4-1: config 250 interface 228 has no altsetting 0 [ 904.459869][T24054] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 904.469178][T24054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 904.477369][T24054] usb 6-1: SerialNumber: syz [ 904.482575][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 904.492281][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 904.501991][ T20] usb 4-1: SerialNumber: syz [ 904.530424][ T4851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.537788][ T4851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.545913][ T4853] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.558880][ T4853] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 904.570237][ T20] hub 4-1:250.228: bad descriptor, ignoring hub 04:13:07 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:07 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 04:13:07 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 904.576506][ T20] hub: probe of 4-1:250.228 failed with error -5 [ 904.583714][T24054] hub 6-1:250.228: bad descriptor, ignoring hub [ 904.608207][T24054] hub: probe of 6-1:250.228 failed with error -5 [ 904.702099][ T4895] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:07 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 904.767734][ T4897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 904.785455][ T4896] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 904.800732][ T20] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 904.826260][T24054] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:13:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:07 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 04:13:07 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 904.992674][ T4915] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 905.028806][ T4894] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 905.148900][ T4912] usb 4-1: USB disconnect, device number 16 [ 905.160536][ T4912] usblp0: removed [ 905.184172][ T4922] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 905.201986][ T20] usb 6-1: USB disconnect, device number 5 [ 905.217303][ T20] usblp1: removed [ 905.223198][ T4927] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 905.270856][ T4926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 905.328977][ T4894] usb 2-1: Using ep0 maxpacket: 8 04:13:08 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 905.474656][ T4894] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 905.494609][ T4894] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 905.512583][ T4894] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 905.513094][ T4945] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 905.529613][ T4912] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 905.537779][ T4894] usb 2-1: config 250 has no interface number 0 [ 905.545962][ T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 905.554310][ T4894] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 905.567657][ T4894] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 905.580500][ T4894] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 905.594197][ T4894] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 905.631048][ T4894] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 905.646348][ T4894] usb 2-1: config 250 interface 228 has no altsetting 0 [ 905.761779][ T4894] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 905.782360][ T4894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 905.792371][ T4912] usb 4-1: Using ep0 maxpacket: 8 [ 905.808279][ T4894] usb 2-1: SerialNumber: syz [ 905.839335][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 905.851292][ T4899] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 905.861432][ T4899] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 905.910634][ T4894] hub 2-1:250.228: bad descriptor, ignoring hub [ 905.924471][ T4894] hub: probe of 2-1:250.228 failed with error -5 [ 905.931363][ T4912] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 905.944648][ T4912] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 905.956036][ T4912] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 905.967209][ T4912] usb 4-1: config 250 has no interface number 0 [ 905.974778][ T4912] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 905.990228][ T20] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 905.998569][ T20] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 906.009272][ T4912] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.020482][ T20] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 906.030653][ T4912] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 906.043049][ T20] usb 6-1: config 250 has no interface number 0 [ 906.050213][ T20] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 906.062657][ T4912] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 906.073895][ T20] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.085043][ T4912] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 906.099609][ T20] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 906.111905][ T4912] usb 4-1: config 250 interface 228 has no altsetting 0 [ 906.120703][ T20] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 906.132039][ T20] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 906.146834][ T20] usb 6-1: config 250 interface 228 has no altsetting 0 [ 906.154206][ T4894] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 47 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 906.219372][ T4912] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 906.229014][ T4912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 906.237070][ T4912] usb 4-1: SerialNumber: syz [ 906.260724][ T4853] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.267725][ T4853] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.278833][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 906.288460][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 906.297732][ T20] usb 6-1: SerialNumber: syz [ 906.303785][ T4912] hub 4-1:250.228: bad descriptor, ignoring hub [ 906.310589][ T4912] hub: probe of 4-1:250.228 failed with error -5 [ 906.361187][ T4851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.369557][ T4851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.392507][ T20] hub 6-1:250.228: bad descriptor, ignoring hub [ 906.399784][ T20] hub: probe of 6-1:250.228 failed with error -5 04:13:09 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:09 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 906.799405][ T4899] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 907.039452][ T4899] usb 2-1: Using ep0 maxpacket: 8 [ 907.181965][ T4972] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.192093][ T4972] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.426502][ T4972] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.434546][ T4972] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.471937][ T20] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 907.484449][ T4912] usblp 4-1:250.228: usblp2: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 907.495913][ C1] usblp0: nonzero read bulk status received: -71 [ 907.689202][ T4894] usb 2-1: USB disconnect, device number 47 [ 907.696904][ T4894] usblp0: removed [ 907.730737][ T20] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 907.770562][ T4912] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 907.988826][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 908.018814][ T4912] usb 4-1: Using ep0 maxpacket: 8 04:13:10 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:10 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:10 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:10 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 908.190824][ T4984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.210903][ T4984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.219307][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.227614][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 908.351500][ T5022] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 908.352742][ T5024] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 04:13:11 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 04:13:11 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 908.550966][ T4984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.556747][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.558363][ T4984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.572467][T24052] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 908.585789][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:11 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) [ 908.660192][ T5039] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 908.848829][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 908.883987][ T5049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 908.959300][ T2959] usb 4-1: USB disconnect, device number 17 [ 908.960572][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 908.967857][ T2959] usblp2: removed [ 909.000333][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.009222][ T4912] usb 6-1: USB disconnect, device number 6 [ 909.017845][ T4912] usblp1: removed [ 909.023601][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 909.038624][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 909.049792][T24052] usb 2-1: config 250 has no interface number 0 [ 909.057180][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 909.086668][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.101563][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 909.117893][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 909.140985][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 909.155564][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 909.228980][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 909.249681][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 909.261405][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.270757][T24052] usb 2-1: SerialNumber: syz [ 909.300386][ T5027] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.307694][ T5027] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.319611][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 909.323805][ T2959] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 909.326347][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 909.349422][ T20] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.358260][ T20] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 909.368995][ T20] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 909.378534][ T20] usb 1-1: config 250 has no interface number 0 [ 909.387674][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 909.400971][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.412999][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 909.426179][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 909.456213][ T20] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 909.470632][ T20] usb 1-1: config 250 interface 228 has no altsetting 0 [ 909.548831][ T4912] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 909.557195][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 909.566601][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 909.588581][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.604371][ T20] usb 1-1: SerialNumber: syz [ 909.605430][ T2959] usb 4-1: Using ep0 maxpacket: 8 [ 909.660347][ T5040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.667879][ T5040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.679792][ T20] hub 1-1:250.228: bad descriptor, ignoring hub [ 909.689567][ T20] hub: probe of 1-1:250.228 failed with error -5 [ 909.738887][ T2959] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.754129][ T2959] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 909.765843][ T2959] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 909.779695][ T2959] usb 4-1: config 250 has no interface number 0 [ 909.786030][ T2959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 909.802427][ T2959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.815179][ T2959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 909.818788][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 909.832528][ T2959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 909.847002][ T2959] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 909.864800][ T2959] usb 4-1: config 250 interface 228 has no altsetting 0 [ 909.948849][ T2959] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 909.962244][ T2959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.971620][ T2959] usb 4-1: SerialNumber: syz [ 909.980652][ T4912] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.995535][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.005492][ T4985] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.022338][ T4912] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 910.029608][ T2959] hub 4-1:250.228: bad descriptor, ignoring hub [ 910.038199][ T4912] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 910.041795][ T2959] hub: probe of 4-1:250.228 failed with error -5 [ 910.055605][ T4912] usb 6-1: config 250 has no interface number 0 [ 910.070944][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:13:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:12 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) 04:13:12 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 910.133420][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 910.165090][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 910.189247][ T5027] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 910.222647][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 910.253948][ T4912] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 910.270901][ T5100] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 910.284708][ T4912] usb 6-1: config 250 interface 228 has no altsetting 0 [ 910.349112][ T4912] usb 6-1: string descriptor 0 read error: -71 [ 910.360892][ T4912] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 910.385845][ T4912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 910.417132][ T4912] usb 6-1: can't set config #250, error -71 [ 910.426007][ T4912] usb 6-1: USB disconnect, device number 7 [ 910.448841][ T5027] usb 2-1: Using ep0 maxpacket: 8 [ 910.621447][ T5085] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.637644][ T5085] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.875177][ T5085] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.883334][ T5085] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.932552][ T20] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 910.935707][ T2959] usblp 4-1:250.228: usblp2: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 910.958710][ C1] usblp0: nonzero read bulk status received: -71 [ 911.139101][ T5] usb 2-1: USB disconnect, device number 48 [ 911.152192][ T5] usblp0: removed [ 911.170009][ T20] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 911.189107][ T2959] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 911.428772][ T2959] usb 4-1: Using ep0 maxpacket: 8 [ 911.438933][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 911.569157][ T5106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.576690][ T5106] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:14 executing program 1: accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) 04:13:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:14 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:14 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 911.611635][ T5099] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.627649][ T5099] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.670811][ T20] usb 1-1: can't restore configuration #250 (error=-71) [ 911.679219][ T20] usb 1-1: USB disconnect, device number 11 [ 911.712440][ T20] usblp1: removed 04:13:14 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:14 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 911.816569][ T5150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 911.842803][ T5106] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:14 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 911.871266][ T5106] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:14 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) [ 911.952521][ T5166] overlayfs: missing 'lowerdir' 04:13:14 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:14 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 912.048834][ T5] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 912.076627][ T5174] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 912.114964][ T5177] overlayfs: missing 'lowerdir' [ 912.239940][ T7] usb 4-1: USB disconnect, device number 18 [ 912.264004][ T7] usblp2: removed [ 912.279216][ T2959] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 912.288904][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 912.409368][ T5] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 912.419131][ T5] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 912.431580][ T20] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 912.432800][ T5] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 912.448954][ T5] usb 2-1: config 250 has no interface number 0 [ 912.455401][ T5] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 912.467201][ T5] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 912.480241][ T5] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 912.493131][ T5] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 912.505023][ T5] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 912.518932][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 912.535045][ T5] usb 2-1: config 250 interface 228 has no altsetting 0 [ 912.620134][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 912.639529][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 912.649155][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 912.667360][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 912.679582][ T5] usb 2-1: SerialNumber: syz [ 912.687247][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 912.704561][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 912.716043][ T2959] usb 6-1: config 250 has no interface number 0 [ 912.718824][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 912.730575][ T5159] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 912.747780][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 912.764923][ T5159] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 912.790095][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 912.802928][ T5] hub 2-1:250.228: bad descriptor, ignoring hub [ 912.821194][ T5] hub: probe of 2-1:250.228 failed with error -5 [ 912.840904][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 912.859584][ T20] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 912.868167][ T20] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 912.868597][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 912.895218][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 912.916687][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 912.918803][ T20] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 912.942483][ T20] usb 1-1: config 250 has no interface number 0 [ 912.959501][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 912.967504][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 912.979737][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 912.991282][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 912.999294][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 913.004446][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 913.012307][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.031380][ T20] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 913.037664][ T2959] usb 6-1: SerialNumber: syz [ 913.046479][ T20] usb 1-1: config 250 interface 228 has no altsetting 0 [ 913.058335][ T5] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 913.088911][ T7] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 913.109747][ T7] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 913.120631][ T5171] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.127703][ T5171] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.139667][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 913.142305][ T7] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 913.155100][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.160326][ T7] usb 4-1: config 250 has no interface number 0 [ 913.179698][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 913.186133][ T2959] hub: probe of 6-1:250.228 failed with error -5 [ 913.190296][ T20] usb 1-1: SerialNumber: syz [ 913.210248][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 913.230788][ T5178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.237050][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 913.238261][ T5178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.263158][ T7] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 913.279783][ T20] hub 1-1:250.228: bad descriptor, ignoring hub [ 913.295467][ T20] hub: probe of 1-1:250.228 failed with error -5 [ 913.295907][ T7] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 04:13:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 913.336488][ T7] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 913.376385][ T7] usb 4-1: config 250 interface 228 has no altsetting 0 [ 913.441937][ T5223] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 913.456241][ T7] usb 4-1: string descriptor 0 read error: -71 [ 913.464587][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 913.478781][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.519132][ T7] usb 4-1: can't set config #250, error -71 [ 913.534807][ T7] usb 4-1: USB disconnect, device number 19 [ 913.699270][ T5159] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 913.948834][ T5159] usb 2-1: Using ep0 maxpacket: 8 [ 914.113592][ T5219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 914.121403][ T5219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 914.341173][ T5219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 914.348547][ T5219] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 914.389787][ T2959] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 914.393262][ T20] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 914.408742][ C0] usblp0: nonzero read bulk status received: -71 [ 914.576722][ T4912] usb 2-1: USB disconnect, device number 49 [ 914.593306][ T4912] usblp0: removed [ 914.649442][ T2959] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 914.649473][ T20] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 914.898736][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 914.958825][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 915.018818][ T2959] usb 6-1: device firmware changed [ 915.024334][ T2959] usb 6-1: USB disconnect, device number 8 [ 915.046683][ T2959] usblp1: removed 04:13:17 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:13:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 04:13:17 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 915.132895][ T20] usb 1-1: device firmware changed [ 915.145447][ T20] usb 1-1: USB disconnect, device number 12 [ 915.188539][ T20] usblp2: removed [ 915.240648][ T5282] overlayfs: missing 'lowerdir' 04:13:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 915.298916][ T5280] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 915.299642][ T5287] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:18 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d", 0x24}], 0x1}, 0x0) 04:13:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) [ 915.484111][ T5303] overlayfs: missing 'lowerdir' 04:13:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 04:13:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 915.558794][ T4912] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 915.558843][ T2959] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 915.628341][ T5305] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 915.666154][ T5308] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 915.722409][ T5313] overlayfs: missing 'lowerdir' [ 915.801603][ T5311] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 915.838909][ T4912] usb 2-1: Using ep0 maxpacket: 8 [ 915.848781][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 915.969342][ T4912] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 915.969342][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 915.969373][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 915.977798][ T4912] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 915.977822][ T4912] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 915.977845][ T4912] usb 2-1: config 250 has no interface number 0 [ 915.977874][ T4912] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 915.986468][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 916.035243][ T4912] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 916.058645][ T4912] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 916.078029][ T4912] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 916.089017][ T4912] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 916.102948][ T4912] usb 2-1: config 250 interface 228 has no altsetting 0 [ 916.126245][ T2959] usb 6-1: config 250 has no interface number 0 [ 916.148888][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 916.170030][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 916.198779][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 916.211930][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 916.228774][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 916.233721][ T4912] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 916.251094][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 916.261041][ T4912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.274083][ T4912] usb 2-1: SerialNumber: syz [ 916.310370][ T5293] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.317860][ T5293] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.329530][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 916.339603][ T4912] hub 2-1:250.228: bad descriptor, ignoring hub [ 916.345977][ T4912] hub: probe of 2-1:250.228 failed with error -5 [ 916.348515][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.373752][ T2959] usb 6-1: SerialNumber: syz [ 916.403405][ T5281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.433952][ T5281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.459765][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 916.474879][ T2959] hub: probe of 6-1:250.228 failed with error -5 [ 916.581710][ T4912] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 916.679935][ T2959] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 917.058873][ T4912] usb 6-1: USB disconnect, device number 9 [ 917.189244][ T5293] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 917.429534][ T5293] usb 2-1: Using ep0 maxpacket: 8 [ 917.571663][ T5341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.579480][ T5341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.797793][ T5341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.805621][ T5341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.849311][ T4912] usblp1: removed [ 917.868715][ C0] usblp0: nonzero read bulk status received: -71 [ 918.059875][ T20] usb 2-1: USB disconnect, device number 50 [ 918.067162][ T20] usblp0: removed [ 918.218828][ T4912] usb 6-1: new high-speed USB device number 10 using dummy_hcd 04:13:21 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:21 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) 04:13:21 executing program 0: accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 04:13:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:21 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 918.661277][ T5385] overlayfs: missing 'lowerdir' [ 918.684764][ T5381] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 918.697095][ T5383] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:21 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) 04:13:21 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 918.907361][ T5399] overlayfs: missing 'lowerdir' [ 918.918828][ T4894] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 918.928854][ T20] usb 2-1: new high-speed USB device number 51 using dummy_hcd 04:13:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 918.983500][ T5401] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:21 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e", 0x36}], 0x1}, 0x0) [ 919.077476][ T5407] overlayfs: missing 'lowerdir' 04:13:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 919.148868][ T4912] usb 6-1: device descriptor read/64, error -71 [ 919.208771][ T4894] usb 1-1: Using ep0 maxpacket: 8 [ 919.214082][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 919.223282][ T5410] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 919.228810][ T2959] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 919.251365][ T5413] overlayfs: missing 'lowerdir' [ 919.360151][ T4894] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.379025][ T4894] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 919.389735][ T20] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.398079][ T20] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 919.408330][ T4894] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 919.420050][ T4894] usb 1-1: config 250 has no interface number 0 [ 919.426323][ T4894] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.439730][ T4912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 919.447350][ T20] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 919.458151][ T20] usb 2-1: config 250 has no interface number 0 [ 919.465966][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.478532][ T4894] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.490030][ T2959] usb 4-1: Using ep0 maxpacket: 8 [ 919.498568][ T4894] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 919.517087][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.540256][ T4894] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 919.555344][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 919.567530][ T4894] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 919.585508][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 919.596824][ T20] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 919.608911][ T2959] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.615600][ T4894] usb 1-1: config 250 interface 228 has no altsetting 0 [ 919.619046][ T2959] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 919.634955][ T2959] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 919.644507][ T20] usb 2-1: config 250 interface 228 has no altsetting 0 [ 919.649726][ T2959] usb 4-1: config 250 has no interface number 0 [ 919.657754][ T2959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.669482][ T2959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.680771][ T2959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 919.693196][ T2959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 919.704497][ T2959] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 919.718642][ T2959] usb 4-1: config 250 interface 228 has no altsetting 0 [ 919.719918][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 919.749528][ T4894] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 919.759514][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 919.768926][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.782313][ T4894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.791081][ T20] usb 2-1: SerialNumber: syz [ 919.795749][ T4894] usb 1-1: SerialNumber: syz [ 919.799055][ T2959] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 919.820587][ T5386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.822390][ T2959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.828810][ T5389] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.850871][ T2959] usb 4-1: SerialNumber: syz [ 919.851333][ T5386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.868887][ T5389] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.882379][ T20] hub 2-1:250.228: bad descriptor, ignoring hub [ 919.889181][ T5404] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.889467][ T4894] hub 1-1:250.228: bad descriptor, ignoring hub [ 919.903301][ T4912] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.924304][ T20] hub: probe of 2-1:250.228 failed with error -5 [ 919.929026][ T5404] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.933417][ T4912] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 919.950113][ T4894] hub: probe of 1-1:250.228 failed with error -5 [ 919.957606][ T4912] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 919.968330][ T4912] usb 6-1: config 250 has no interface number 0 [ 919.975889][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.988615][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.989486][ T2959] hub 4-1:250.228: bad descriptor, ignoring hub [ 920.004123][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 920.018650][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 920.030438][ T4912] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 920.032291][ T2959] hub: probe of 4-1:250.228 failed with error -5 [ 920.050770][ T4912] usb 6-1: config 250 interface 228 has no altsetting 0 [ 920.100151][ T20] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 920.129787][ T4894] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 920.159695][ T4912] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 920.172176][ T4912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 920.184033][ T4912] usb 6-1: SerialNumber: syz [ 920.229978][ T2959] usblp 4-1:250.228: usblp2: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 920.230208][ T5384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 920.257167][ T5384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 920.279855][ T4912] hub 6-1:250.228: bad descriptor, ignoring hub [ 920.286400][ T4912] hub: probe of 6-1:250.228 failed with error -5 [ 920.522538][ T20] usb 1-1: USB disconnect, device number 13 [ 920.618938][T24052] usb 4-1: USB disconnect, device number 20 [ 920.709237][ T5389] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 920.948830][ T5389] usb 2-1: Using ep0 maxpacket: 8 [ 921.091896][ T5445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.099682][ T5445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.325333][ T5445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.333207][ T5445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.370155][ T4912] usblp 6-1:250.228: usblp3: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 921.381879][ T20] usblp1: removed [ 921.386637][T24052] usblp2: removed [ 921.388727][ C0] usblp0: nonzero read bulk status received: -71 [ 921.590581][T24054] usb 2-1: USB disconnect, device number 51 [ 921.604048][T24054] usblp0: removed [ 921.639342][ T4912] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 921.788906][T24052] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 921.918855][ T4912] usb 6-1: Using ep0 maxpacket: 8 04:13:24 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:24 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) 04:13:24 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) 04:13:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:13:24 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) [ 922.048799][ T4912] usb 6-1: device descriptor read/all, error -71 [ 922.167070][ T5512] overlayfs: missing 'workdir' 04:13:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:24 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 922.219873][ T5516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 922.239878][T24052] usb 4-1: device not accepting address 21, error -71 04:13:25 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) [ 922.364387][ T5528] overlayfs: missing 'workdir' 04:13:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 922.457430][ T5532] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 922.479714][ T4912] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 922.493751][ T5534] overlayfs: missing 'workdir' 04:13:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 922.503782][T24054] usb 2-1: new high-speed USB device number 52 using dummy_hcd 04:13:25 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501a", 0x3f}], 0x1}, 0x0) [ 922.529781][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 922.623762][ T5537] overlayfs: workdir and upperdir must be separate subtrees [ 922.671172][ T5539] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 922.718876][T24052] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 922.769157][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 922.775563][T24054] usb 2-1: Using ep0 maxpacket: 8 [ 922.810154][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 922.930409][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.937835][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.945304][T24054] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 922.954199][ T20] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 922.963087][ T20] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 922.973446][T24054] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 922.983608][ T20] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 923.010370][T24054] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 923.019921][T24052] usb 4-1: Using ep0 maxpacket: 8 [ 923.027067][ T20] usb 1-1: config 250 has no interface number 0 [ 923.034140][T24054] usb 2-1: config 250 has no interface number 0 [ 923.042139][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 923.054850][T24054] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 923.067962][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 923.079554][T24054] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 923.091574][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 923.104423][T24054] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.130249][T24054] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 923.141545][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 923.153179][T24052] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 923.161579][T24054] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 923.176103][ T20] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 923.190238][T24052] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 923.199861][T24052] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 923.205271][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.210131][T24054] usb 2-1: config 250 interface 228 has no altsetting 0 [ 923.222187][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.223270][ T20] usb 1-1: config 250 interface 228 has no altsetting 0 [ 923.237332][T24052] usb 4-1: config 250 has no interface number 0 [ 923.244394][T24052] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 923.256477][T24052] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 923.268120][T24052] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 923.281498][T24052] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 923.292911][T24052] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 923.307673][T24052] usb 4-1: config 250 interface 228 has no altsetting 0 [ 923.328960][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 923.338103][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.347245][T24054] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 923.356567][T24054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.365461][ T20] usb 1-1: SerialNumber: syz [ 923.370568][T24054] usb 2-1: SerialNumber: syz [ 923.398979][T24052] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 923.400273][ T5515] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.408141][T24052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.416393][ T5520] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.439823][T24054] hub 2-1:250.228: bad descriptor, ignoring hub [ 923.441083][ T5515] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.446106][T24054] hub: probe of 2-1:250.228 failed with error -5 [ 923.479737][ T20] hub 1-1:250.228: bad descriptor, ignoring hub [ 923.486123][ T20] hub: probe of 1-1:250.228 failed with error -5 [ 923.509581][T24052] usb 4-1: SerialNumber: syz [ 923.529199][ T5525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.536197][ T5525] raw-gadget gadget: fail, usb_ep_enable returned -22 04:13:26 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:26 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) [ 923.599727][T24052] hub 4-1:250.228: bad descriptor, ignoring hub [ 923.606113][T24052] hub: probe of 4-1:250.228 failed with error -5 [ 923.608981][ T2959] usb 6-1: USB disconnect, device number 11 [ 923.627714][ T2959] usblp3: removed [ 923.696784][T24054] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 52 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 923.719525][ T20] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 923.779658][ T5579] overlayfs: workdir and upperdir must be separate subtrees [ 923.798585][ T5580] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 923.847132][T24052] usblp 4-1:250.228: usblp2: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 923.958818][ T2959] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 923.970874][T24054] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 924.064726][T24052] usb 1-1: USB disconnect, device number 14 [ 924.198749][ T2959] usb 6-1: Using ep0 maxpacket: 8 [ 924.232252][T24054] usb 2-1: Using ep0 maxpacket: 8 [ 924.269167][ T20] usb 4-1: USB disconnect, device number 22 [ 924.319016][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 924.327579][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 924.343942][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 924.354828][ T2959] usb 6-1: config 250 has no interface number 0 [ 924.367545][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 924.383528][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 924.390081][ T5586] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.395168][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 924.418547][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 924.433385][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 924.458726][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 924.539015][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 924.548350][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 924.556799][ T2959] usb 6-1: SerialNumber: syz [ 924.581165][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.588644][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.599660][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 924.606032][ T2959] hub: probe of 6-1:250.228 failed with error -5 [ 924.684211][T24054] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 924.696960][T24052] usblp1: removed [ 924.708656][ T20] usblp2: removed [ 924.723282][T24054] usb 2-1: USB disconnect, device number 52 [ 924.742681][T24054] usblp0: removed [ 924.824021][ T2959] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 924.889838][ T2959] usb 6-1: USB disconnect, device number 12 [ 924.907387][ T2959] usblp0: removed 04:13:27 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) 04:13:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 925.108914][ T20] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 925.116668][T24052] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 925.220829][ T5661] overlayfs: workdir and upperdir must be separate subtrees 04:13:28 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,x']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:28 executing program 3: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r3, 0x0, 0x0) 04:13:28 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) 04:13:28 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 925.388940][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 925.408761][ C1] raw-gadget gadget: ignoring, device is not running [ 925.460426][ T5671] overlayfs: unrecognized mount option "x" or missing value [ 925.469168][ T20] usb 4-1: device descriptor read/all, error -71 04:13:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,x']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 925.520633][ T5677] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 925.548864][ T5676] overlayfs: unrecognized mount option "xino=o" or missing value [ 925.553327][T24052] usb 1-1: device descriptor read/64, error -71 04:13:28 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:28 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703", 0x44}], 0x1}, 0x0) [ 925.686827][ T5686] overlayfs: unrecognized mount option "x" or missing value [ 925.698759][ T2959] usb 2-1: new high-speed USB device number 53 using dummy_hcd 04:13:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,x']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 925.800377][ T5689] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 925.849052][T24052] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 925.857991][ T5692] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 925.874332][ T20] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 925.901199][ T5695] overlayfs: unrecognized mount option "x" or missing value 04:13:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 925.948840][ T2959] usb 2-1: Using ep0 maxpacket: 8 [ 926.073881][ T5700] overlayfs: unrecognized mount option "xino" or missing value [ 926.074874][ T2959] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 926.108934][ T2959] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 926.140318][ T2959] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 926.147052][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 926.154908][T24052] usb 1-1: Using ep0 maxpacket: 8 [ 926.177390][ T2959] usb 2-1: config 250 has no interface number 0 [ 926.198803][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 926.228750][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 926.248755][ T2959] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 926.278734][ T2959] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 926.304858][ T2959] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 926.320784][ T2959] usb 2-1: config 250 interface 228 has no altsetting 0 [ 926.339112][ T20] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 926.347629][ T20] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 926.356753][T24052] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 926.365349][T24052] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 926.375174][T24052] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 926.385007][ T20] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 926.394724][T24052] usb 1-1: config 250 has no interface number 0 [ 926.401895][ T20] usb 4-1: config 250 has no interface number 0 [ 926.408160][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 926.419464][ T2959] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 926.421229][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 926.428622][ T2959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 926.441485][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 926.454263][ T2959] usb 2-1: SerialNumber: syz [ 926.459651][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 926.478870][ T20] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 926.480303][ T5670] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.497378][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 926.515833][ T20] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 926.523794][ T2959] hub 2-1:250.228: bad descriptor, ignoring hub [ 926.531005][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 926.544370][ T2959] hub: probe of 2-1:250.228 failed with error -5 [ 926.549538][ T20] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 926.564368][T24052] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 926.578743][ T20] usb 4-1: config 250 interface 228 has no altsetting 0 [ 926.585796][T24052] usb 1-1: config 250 interface 228 has no altsetting 0 [ 926.679028][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 926.688430][T24052] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 926.697527][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 926.706780][T24052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 926.715318][ T20] usb 4-1: SerialNumber: syz [ 926.720395][T24052] usb 1-1: SerialNumber: syz [ 926.749154][ T5680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.750245][ T5662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.756215][ T5680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.780569][ T5662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.810005][ T2959] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 926.816337][ T20] hub 4-1:250.228: bad descriptor, ignoring hub [ 926.828626][T24052] hub 1-1:250.228: bad descriptor, ignoring hub [ 926.835265][T24052] hub: probe of 1-1:250.228 failed with error -5 [ 926.843832][ T20] hub: probe of 4-1:250.228 failed with error -5 [ 926.889727][ T2959] usb 2-1: USB disconnect, device number 53 [ 926.897295][ T2959] usblp0: removed [ 927.050490][ T20] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 927.062781][T24052] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 927.438958][T24052] usb 1-1: USB disconnect, device number 16 [ 927.679251][ T5662] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 927.948759][ T5662] usb 4-1: Using ep0 maxpacket: 8 [ 928.139586][ T5740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.146622][ T5740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.373367][ T5740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.384245][ T5740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.419611][T24052] usblp1: removed [ 928.448823][ C1] usblp0: nonzero read bulk status received: -71 04:13:31 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) 04:13:31 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:13:31 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) 04:13:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 928.622103][ T5769] overlayfs: unrecognized mount option "xino" or missing value [ 928.623081][ T5767] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 928.744943][ T20] usb 4-1: USB disconnect, device number 24 [ 928.761267][ T20] usblp0: removed [ 928.868741][ T2959] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 929.018831][T24052] usb 1-1: new high-speed USB device number 17 using dummy_hcd 04:13:31 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 929.108734][ T2959] usb 6-1: Using ep0 maxpacket: 8 04:13:31 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:31 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) [ 929.199400][ T5793] overlayfs: unrecognized mount option "xino" or missing value [ 929.229409][ T2959] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 929.236210][ T5795] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 929.237943][ T2959] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 929.237967][ T2959] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 929.237991][ T2959] usb 6-1: config 250 has no interface number 0 [ 929.238022][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 929.288829][T24052] usb 1-1: Using ep0 maxpacket: 8 04:13:32 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f", 0x46}], 0x1}, 0x0) [ 929.306737][ T5794] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:32 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 929.408436][ T5798] overlayfs: unrecognized mount option "xino=o" or missing value [ 929.431687][T24052] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 929.468853][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 929.469664][T24052] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 929.499078][ T2959] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 04:13:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 929.510140][T24052] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 929.516300][ T5801] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 929.530694][T24052] usb 1-1: config 250 has no interface number 0 [ 929.546437][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 929.548429][ T2959] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 929.563261][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 929.579845][T24052] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 929.597609][T24052] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 929.617501][ T2959] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 929.628091][T24052] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 929.643161][ T2959] usb 6-1: config 250 interface 228 has no altsetting 0 [ 929.648247][T24052] usb 1-1: config 250 interface 228 has no altsetting 0 [ 929.703750][ T5805] overlayfs: unrecognized mount option "xino=o" or missing value [ 929.739332][ T2959] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 929.759699][T24052] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 929.763824][ T2959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.771908][T24052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.811371][ T5809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 929.813896][ T2959] usb 6-1: SerialNumber: syz [ 929.819201][T24052] usb 1-1: SerialNumber: syz [ 929.840551][ T5766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.847854][ T5766] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.861061][ T5771] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.877307][ T5771] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.901507][ T2959] hub 6-1:250.228: bad descriptor, ignoring hub [ 929.907859][ T2959] hub: probe of 6-1:250.228 failed with error -5 [ 929.951479][T24052] hub 1-1:250.228: bad descriptor, ignoring hub [ 929.957947][T24052] hub: probe of 1-1:250.228 failed with error -5 [ 930.119755][ T2959] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 930.171364][T24052] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 930.559050][ T20] usb 1-1: USB disconnect, device number 17 [ 930.720767][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.727254][ T3261] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.779805][ T5766] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 931.018751][ T5766] usb 6-1: Using ep0 maxpacket: 8 [ 931.161430][ T5831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.169221][ T5831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.395140][ T5831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.404170][ T5831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.439347][ T20] usblp1: removed [ 931.458756][ C1] usblp0: nonzero read bulk status received: -71 04:13:34 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603000000000000000000040000000000010006000000"], 0x1c}}, 0x0) [ 931.629113][T24052] usb 6-1: USB disconnect, device number 13 [ 931.648212][T24052] usblp0: removed 04:13:34 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603000000000000000000040000000000010006000000"], 0x1c}}, 0x0) 04:13:34 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) 04:13:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=o']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:34 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:34 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 932.138874][ T20] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 932.197004][ T5871] overlayfs: unrecognized mount option "xino=o" or missing value 04:13:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 932.290620][ T5875] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.306152][ T5873] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.333205][ T5879] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:35 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) [ 932.391035][ T20] usb 1-1: Using ep0 maxpacket: 8 04:13:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:35 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 932.540149][ T20] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 932.549016][ T4912] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 932.566007][ T20] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 932.584046][ T5888] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.584126][ T5886] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.606218][ T20] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 04:13:35 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93", 0x47}], 0x1}, 0x0) 04:13:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 932.636300][ T20] usb 1-1: config 250 has no interface number 0 [ 932.671255][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 932.716025][ T5894] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.722213][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 932.763783][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 932.780502][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 932.793884][ T20] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 932.808831][ T20] usb 1-1: config 250 interface 228 has no altsetting 0 [ 932.828812][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 932.840623][ T5897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 932.930470][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 932.949929][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 932.979991][ T4912] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 932.990997][ T4912] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 933.001782][ T20] usb 1-1: SerialNumber: syz [ 933.020985][ T5901] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 933.030744][ T5864] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.038576][ T5864] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.046965][ T4912] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 933.063267][ T4912] usb 6-1: config 250 has no interface number 0 [ 933.086653][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 933.100322][ T20] hub 1-1:250.228: bad descriptor, ignoring hub [ 933.106580][ T20] hub: probe of 1-1:250.228 failed with error -5 [ 933.131803][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 933.144238][ T4912] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 933.158619][ T4912] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 933.181603][ T4912] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 933.207028][ T4912] usb 6-1: config 250 interface 228 has no altsetting 0 [ 933.309496][ T4912] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 933.323767][ T4912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 933.338584][ T4912] usb 6-1: SerialNumber: syz [ 933.360121][ T20] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 933.410204][ T5876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.417427][ T5876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.439689][ T4912] hub 6-1:250.228: bad descriptor, ignoring hub [ 933.446911][ T4912] hub: probe of 6-1:250.228 failed with error -5 [ 934.029438][ T5864] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 934.278779][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 934.423086][ T5918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 934.432174][ T5918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 934.675100][ T5918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 934.686160][ T5918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 934.719780][ T4912] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 934.738814][ C0] usblp0: nonzero read bulk status received: -71 [ 934.911881][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 934.926295][ T7] usb 1-1: USB disconnect, device number 18 [ 934.937278][ T7] usblp0: removed [ 934.955334][ T4912] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 935.248882][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 935.308903][ T4912] usb 6-1: device descriptor read/all, error -71 04:13:38 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:38 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:13:38 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:38 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:38 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603000000000000000000040000000000010006000000"], 0x1c}}, 0x0) 04:13:38 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @null, @netrom, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$hid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603000000000000000000040000000000010006000000"], 0x1c}}, 0x0) [ 935.518240][ T5955] overlayfs: workdir and upperdir must be separate subtrees [ 935.563262][ T5959] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) [ 935.613153][ T5960] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 935.623664][ T5962] overlayfs: workdir and upperdir must be separate subtrees 04:13:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:38 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 935.842812][ T5970] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 935.873009][ T5973] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 935.936961][ T5976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 935.959379][ T5979] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 935.988829][ T4912] usb 6-1: reset high-speed USB device number 14 using dummy_hcd 04:13:38 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 936.175954][ T5986] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:39 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 936.247076][ T5987] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 936.255133][ T4912] usb 6-1: Using ep0 maxpacket: 8 [ 936.305457][ T5991] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:39 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 936.400548][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.408208][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.439006][ T5993] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 936.516736][ T6000] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 936.628615][ T6005] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 936.706507][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.718917][ T7] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 936.736610][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.988892][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 937.108852][ T7] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 937.117409][ T7] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 937.128938][ T7] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 937.138238][ T7] usb 2-1: config 250 has no interface number 0 [ 937.145892][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 937.157762][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 937.168273][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 937.178606][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 937.189164][ T7] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 937.203306][ T7] usb 2-1: config 250 interface 228 has no altsetting 0 [ 937.298891][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 937.308043][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 937.316246][ T7] usb 2-1: SerialNumber: syz [ 937.340373][ T5996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 937.370283][ T7] hub 2-1:250.228: bad descriptor, ignoring hub [ 937.376872][ T7] hub: probe of 2-1:250.228 failed with error -5 [ 937.419231][ T5] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 937.589473][ T7] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 937.646035][ T7] usb 2-1: USB disconnect, device number 54 [ 937.654337][ T7] usblp0: removed [ 937.669025][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 937.821393][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 937.828607][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.054225][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.062559][ T5964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.287117][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 938.419038][T24052] usb 6-1: USB disconnect, device number 14 [ 938.436808][T24052] usblp1: removed 04:13:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x583000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) 04:13:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:41 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:41 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 938.940431][ T6057] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 938.946211][ T6058] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 938.956665][ T6059] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:41 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 939.052889][ T6060] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x583000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) 04:13:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 939.199659][T24052] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 939.278479][ T6077] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 939.300937][ T6078] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:42 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 939.468768][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 939.533501][ T6084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 939.589639][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 939.598195][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 939.646652][ T6092] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 939.669373][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 939.669402][T24052] usb 2-1: config 250 has no interface number 0 [ 939.669433][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 04:13:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:42 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 939.669461][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 939.669487][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.669511][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 939.669536][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 939.669571][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 939.671907][ T6089] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 939.749669][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 939.749708][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 04:13:42 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 939.749731][T24052] usb 2-1: SerialNumber: syz [ 939.780520][ T6061] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.799721][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 939.799750][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 939.840800][ T37] audit: type=1800 audit(1627100022.540:4755): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14723 res=0 errno=0 [ 940.060016][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 55 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 940.089405][T24052] usb 2-1: USB disconnect, device number 55 [ 940.091045][T24052] usblp0: removed [ 940.258445][ T6113] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 940.340931][ T37] audit: type=1804 audit(1627100023.040:4756): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir783872602/syzkaller.YcnFoC/1066/cgroup.controllers" dev="sda1" ino=14302 res=1 errno=0 04:13:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 940.555881][ T6126] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:43 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 940.621264][ T6127] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 940.642242][ T6128] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 940.650142][T24052] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 940.671513][ T6129] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:43 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 940.948880][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 940.971746][ T6138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.016222][ T6139] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 941.098944][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 941.109767][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 941.112909][ T6143] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.133352][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 941.193881][T24052] usb 2-1: config 250 has no interface number 0 [ 941.213785][ T6145] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:43 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 941.233204][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 941.263812][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 941.275325][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 04:13:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 941.286370][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 941.297352][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 941.318408][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 941.468841][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 941.496059][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 941.506530][ T6153] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.547410][T24052] usb 2-1: SerialNumber: syz [ 941.600474][ T6108] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.619612][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 941.621508][ T6158] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.626082][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 941.644160][ T6160] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:44 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 941.899413][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 56 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 941.969513][T24052] usb 2-1: USB disconnect, device number 56 [ 941.982250][ T6176] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 941.985736][ T6173] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 942.004933][T24052] usblp0: removed [ 942.031731][ T6183] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 942.038548][ T6177] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:44 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 942.088044][ T6179] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:44 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x583000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000003c0)={0x200, 0x4, 0x3, 0x6, 0x80, 0x40}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) 04:13:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x583000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000003c0)={0x200, 0x4, 0x3, 0x6, 0x80, 0x40}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 942.345356][ T6202] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 942.375557][ T6203] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:45 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(0x0, 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 942.507766][ T6208] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 942.598836][T24052] usb 2-1: new high-speed USB device number 57 using dummy_hcd 04:13:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 942.695365][ T6220] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 942.707779][ T6217] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 04:13:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(0x0, 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:45 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 942.908761][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 942.986653][ T6228] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(0x0, 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 943.032432][ T6232] overlayfs: failed to resolve './file0': -2 [ 943.062305][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 943.086841][ T6231] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 943.110331][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 943.156622][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 943.183125][T24052] usb 2-1: config 250 has no interface number 0 [ 943.203699][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 943.235520][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 943.286308][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 943.331138][ T37] audit: type=1800 audit(1627100026.030:4757): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14529 res=0 errno=0 [ 943.332495][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 943.421839][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 943.427718][ T37] audit: type=1804 audit(1627100026.100:4758): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520963057/syzkaller.YTezDL/1029/cgroup.controllers" dev="sda1" ino=14018 res=1 errno=0 [ 943.451130][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 943.579443][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 943.588598][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 943.606290][T24052] usb 2-1: SerialNumber: syz [ 943.640510][ T6197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 943.664451][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 943.699180][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 943.769244][ T6244] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:46 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x583000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000003c0)={0x200, 0x4, 0x3, 0x6, 0x80, 0x40}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:13:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 943.938868][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 943.985387][ T6256] overlayfs: failed to resolve './file0': -2 [ 944.019482][T24052] usb 2-1: USB disconnect, device number 57 [ 944.058832][ T6257] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 944.069543][ T6258] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 944.071120][T24052] usblp0: removed 04:13:46 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 944.128487][ T6263] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0xc40, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r8}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059d40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {r10}], 0x81, "d1369540e8b693"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYBLOB="e30100000000000085ffffffe1c9dfd8dc16d8d1040000000000000064cf88d2ee79f33a000000000000030000ffff01800000000000003f0000000200000008000000040000000000308f0800a9d9c36334baa4630000070000000000000081000000000000001800000000000000000000000000002000000000000000000000367bac1f8ab59bd6f7"]) 04:13:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r0, r3], 0x3) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, 0x20}, 0x20000005) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r4, r5, r6, r0, r7]}, 0xa) [ 944.308240][ T6279] overlayfs: failed to resolve './file0': -2 04:13:47 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 944.512330][ T6285] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 944.538889][T24052] usb 2-1: new high-speed USB device number 58 using dummy_hcd 04:13:47 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 944.714172][ T6293] QAT: Invalid ioctl -1066363887 [ 944.818772][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 944.872327][ T37] audit: type=1804 audit(1627100027.570:4759): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520963057/syzkaller.YTezDL/1030/cgroup.controllers" dev="sda1" ino=14150 res=1 errno=0 [ 944.979590][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 945.019113][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 945.028086][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 945.078913][T24052] usb 2-1: config 250 has no interface number 0 [ 945.085291][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 945.129051][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 945.162675][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.188724][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 945.208799][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 945.238747][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 945.318845][ T37] audit: type=1800 audit(1627100028.010:4760): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=13971 res=0 errno=0 [ 945.355520][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 945.368113][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 945.388932][T24052] usb 2-1: SerialNumber: syz [ 945.450539][ T6266] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 945.490426][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 945.496790][T24052] hub: probe of 2-1:250.228 failed with error -5 04:13:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:48 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:48 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x800004, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000001640)='./file0\x00', 0x8, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) recvfrom(0xffffffffffffffff, &(0x7f0000002080)=""/166, 0xa6, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x74) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x4044830) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000002600)={{0x3, @null}, [@null, @bcast, @default, @rose, @default, @netrom, @default, @null]}, &(0x7f0000002680)=0x48) sendmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="2e57e475ebde1c61364f9fc3f30c8c8a7c723f5a66c209cf58c2723206d408acfc0781a6b6166d42fcc0c75cce937f0b57e4de9c70d4bcc0169ae0c528a7196083890933", 0x44}], 0x1, &(0x7f0000002800)=[{0x90, 0x10d, 0x4, "6086a940295a233c38c447bd429be771705c2e44e493a29256155fd1347582985c0c71ae9b505e5d37275ba0ccae9ecbcc2d24a609c5083f190562153c91e080f3a96a36ebacdbeb40d7501097f7edc74bd171b9aa88035a59b926078f1f4e86f0f9d816eed4cc2151e62e8fad215bd058ec00f070cd853de7f35d17263bf0"}, {0x30, 0xff, 0x3, "586e8470ce09692b02163f4261ceb7b625abe9a85528f812a0a0e6"}], 0xc0}}, {{&(0x7f00000028c0)=@generic={0x10, "693cab28a0090c24a37555999576c7661b868e780872e86e94278a993e19551f0efde1b7a08175b59e21c06775a4a8d00971425c658115eecbb6eaa8e516e562053bd890c1bcef707674336b3f075676d996cc65a8d0d6abc0a26b765e6906d61bd4124ff23f14cfec55fc81a9c634155f60e2ff878e956ec46a95524eae"}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="06e9bb193893a6ca0faf551762a6107b12489bfe9be6681a2b16211886682a6aab9fbd078edbf2dd4b9b0d336071f7a0cc9b63c4f30ac7dd33570f39060a90970905314e6da98d4a5d140211b6ba24793535b0704b24f3586d3140c01f53689ab406cd014383edcc16f7ed298f1586464117ac1516ed3cac7be4454118e8a8d551673fb3b698039e368f14b7445ee99d008c6a7d41e2c349b9d31c26e2a2c5becf8cc22252ab4d7c47b5d4d19b527c9a4a2897b15eb1fe70a43a2532470bed3b2e3e", 0xc2}], 0x1, &(0x7f0000002a80)=[{0x108, 0x103, 0x7, "249b9c216d63f3b93ba7c465349ba4307a425087ec38e10f422e6a6bf691528d136cb5b448e427aec82e887dcee01266e189b59efbd76b8432f221e12dda758bd15f77be77da4f2d878f38576e77e52f19af585bda8a7bc85db04724329005c8b113ebc8172acb14b72408dda81ad1e153ce1180f6668660dd3d058c84bb9e679d08b7a182accae0b5a5fde0b1b08187529ddb3e75788b3ef8ba836dd1a09f461105ebf279dc2ec3c41c278ee517576058b8fac235187047f5d38373648f9ed8a1ad6756137fd8eaeacdc53c351214b6d69df1fc38037fcab6a6d0f95716f01c54c3af3a218678c7a6ebcc25a2db047d7fb1896af97f"}, {0x30, 0x119, 0x7, "8edb1565e4ebe36229168fd2750e96cd1ec4a4a84510d94853d01d8ccb50"}, {0x80, 0x3a, 0x2, "a98048bf8b048f3445b4ee2b6ae705e7153dd3304dd85255c2470acb8cc68d552d1708064333164d1b921b662eee4f8298c6968ecd470eb294c27f2e069a2ce73ebc1a4efa4d641817a35300980480c89560eb3df3087ab4e1db5ca6eebbd11bb32bebd4a92bad606e87c4d1"}, {0x68, 0x112, 0x0, "c1fd9a9a39dad95be1a5690edc9bf339cb0af2b1c2f28155ce0c0e602a5aee560ef72df31bbfb640e04e7a4ce2bc796f2036e2a7deb6c4bc0d2248fecfd7f3f0378eeb0b4d61475df6d738e7e69019ab7f8bd05b90b07da4"}], 0x220}}, {{&(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x1ffffffff, @host}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f833ceaa2f21ea28d4220126ec446e6e15e0023545d78ba1cedcb45e54195bdd812a7e6d4ca08a1ce5768c5062057759c68e8300ac6a8ed55ebf291e8fac6066293be9b8b389c922a88a295d2bcb29727788f4e5496c66e8aa6e15a82710df4ddb7885cd589ce5c0b248f71eddba1d056e5b3d9779587d5a40030ed40d19af1fb77ebfe5453cab2942db2428bc688c2787dbacf2f6136455243e56b1330f2cf9017c1dde7ada1c4c698630173ed375c03862c53e7312263ca1be8b80d8677818d7be3f994960628f9dc2c846de81887478892bc7", 0xd4}, {&(0x7f0000002e40)="d29bee91bb55b731b9f19090bb4e0a8cac683862052bbe0d0c18ba03b95a93b8f12eb195677bc55f9a3ba4c1d74d2f48f468d9505df560592b8bced1bfa7682469f28bc8d220445b5f8a6aa3b16f675e046974c78084f7f4605b00db07d7451fa08408911a33dd60b777546a99659155723888d5b8f005bbf73348008e61f89aa26afb5b47e9f71b4ba5200ca91e3fedc65454ef5e67b2146f81202d73f9c283eba8c885ca4e2b92705a31a24762051f0baf6d1b16db504cc56cd310db4b742bfaabdaa1bbb78ab09bda1c9d2b21fcad903c62fa70ff2d5d91", 0xd9}, {&(0x7f0000002f40)="71de12de9d14ffe61c5431dbf074193d22e462cdf75854ea7754829325784545", 0x20}], 0x3, &(0x7f0000002fc0)=[{0x28, 0x10e, 0x3ff, "2464a1241fba7804fd6e5749f1fdc3e44153"}, {0x30, 0x115, 0x10000, "0345ad1f7910d3993fa9fd7824f5357fd01d4ca08d11ec5516b0d820"}, {0x100, 0x107, 0x8, "c51b402a73af633aefdaea5bc63462ed0bd14946129f7639af56ab1a9739a6582cdb626810f2ea2f4063cbe74a8562810e45f5d04001ff07d9b32b01f22faf4b216ec56c21488c5766312ba8555280aae1bba208b24478c28f9599ff8d791383de68613418e8cfc68459fede314fb1f1db7dcad88baac33cb67601568bc3641596d385d537cc86e1fc2824ce02e79788e558ff520b2180df7a380997e6780dc4d291e50c1dc4d672374a4bb2b1b67b62bc0dfb6629f79104a14aa4382a8b40164cb89148b6e42be84961251d051a78067a43f9cfb6307d8342f279e1c2bc2dcb1dc8e1e98dd760d4da4c7ec88421"}, {0xb0, 0x1, 0x9, "0d0c3e0fb79500f0a08a18def6b7a1bd5dc91ae43e25e2f9c1600ad2e6c86795f4e16b7b17143fee99730aab4b3d5d8446c810afd4f1cd5f495b8df8d08bb849c97c088dbe97b4aa75771e452e366159326481fcc09997d4b414fa8e3f428ce7b7f09bcf59c5b9deae4a306989373b6d22ea96740665be33236371f24f4cc62f7dfcad687897e107631306a0917caf7e33eabe01e4edbcffb801cfe0"}, {0x30, 0x107, 0x8, "26854e3aaceeb073d4954ffb59370ae03a90af7a596bd66bf069e2927beef913"}, {0xf0, 0x29, 0x8, "ca0e1db41376006c11f89233036d6edc83237ec34926172697b6a6f440b65eda15550b9952a1ce0b6832c7c806e1083bc44e66bceb6884fe97a6c941427d5873c18652841322b976a7c41840a151d87b06cedc3e49e04901b43a6507403d115892b8c5adcfc5e49e4a52eaa338ab5772a0490ebecf4d02a1f888048b71f480eec99a99552d4ca9a0008c27f765631eb3eaebdb5c1be1885deff53f6d3da27c7cc1a24b6104bcb3c4b0f89042090071ebc3ce042daeadbdeb0f86cc81e5397b079349e3f8eeda19f04c59e446a1918388315eecb1319438de6e7d6ef128"}, {0xe0, 0x113, 0x5, "0741f1425f322836632ae8fbe7b01e6319f910af7254a53275c2e170ad3eab049718374406c14041fe54cb64a978788c963f96cdca008a4e6b04a7f280aae1affc7e9609b115c095d8131eecf2125f65a09c4d3ee58ddc5340851000177366ca400c920cf338d381fabd66be7d0f5438062e380cce24cc3a22dd2bece159c1e7c345ad0a1b38bec1544a0c998869fc9002672c3c777a988031bf1e1292e000ec4f164f532d6151908efa07a950eb2e3d492a186a1eae07217b7c04d01a81fdda4abdf9c72535a437705d2d"}], 0x408}}], 0x3, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) 04:13:48 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x800004, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000001640)='./file0\x00', 0x8, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) recvfrom(0xffffffffffffffff, &(0x7f0000002080)=""/166, 0xa6, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x74) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x4044830) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000002600)={{0x3, @null}, [@null, @bcast, @default, @rose, @default, @netrom, @default, @null]}, &(0x7f0000002680)=0x48) sendmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="2e57e475ebde1c61364f9fc3f30c8c8a7c723f5a66c209cf58c2723206d408acfc0781a6b6166d42fcc0c75cce937f0b57e4de9c70d4bcc0169ae0c528a7196083890933", 0x44}], 0x1, &(0x7f0000002800)=[{0x90, 0x10d, 0x4, "6086a940295a233c38c447bd429be771705c2e44e493a29256155fd1347582985c0c71ae9b505e5d37275ba0ccae9ecbcc2d24a609c5083f190562153c91e080f3a96a36ebacdbeb40d7501097f7edc74bd171b9aa88035a59b926078f1f4e86f0f9d816eed4cc2151e62e8fad215bd058ec00f070cd853de7f35d17263bf0"}, {0x30, 0xff, 0x3, "586e8470ce09692b02163f4261ceb7b625abe9a85528f812a0a0e6"}], 0xc0}}, {{&(0x7f00000028c0)=@generic={0x10, "693cab28a0090c24a37555999576c7661b868e780872e86e94278a993e19551f0efde1b7a08175b59e21c06775a4a8d00971425c658115eecbb6eaa8e516e562053bd890c1bcef707674336b3f075676d996cc65a8d0d6abc0a26b765e6906d61bd4124ff23f14cfec55fc81a9c634155f60e2ff878e956ec46a95524eae"}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="06e9bb193893a6ca0faf551762a6107b12489bfe9be6681a2b16211886682a6aab9fbd078edbf2dd4b9b0d336071f7a0cc9b63c4f30ac7dd33570f39060a90970905314e6da98d4a5d140211b6ba24793535b0704b24f3586d3140c01f53689ab406cd014383edcc16f7ed298f1586464117ac1516ed3cac7be4454118e8a8d551673fb3b698039e368f14b7445ee99d008c6a7d41e2c349b9d31c26e2a2c5becf8cc22252ab4d7c47b5d4d19b527c9a4a2897b15eb1fe70a43a2532470bed3b2e3e", 0xc2}], 0x1, &(0x7f0000002a80)=[{0x108, 0x103, 0x7, "249b9c216d63f3b93ba7c465349ba4307a425087ec38e10f422e6a6bf691528d136cb5b448e427aec82e887dcee01266e189b59efbd76b8432f221e12dda758bd15f77be77da4f2d878f38576e77e52f19af585bda8a7bc85db04724329005c8b113ebc8172acb14b72408dda81ad1e153ce1180f6668660dd3d058c84bb9e679d08b7a182accae0b5a5fde0b1b08187529ddb3e75788b3ef8ba836dd1a09f461105ebf279dc2ec3c41c278ee517576058b8fac235187047f5d38373648f9ed8a1ad6756137fd8eaeacdc53c351214b6d69df1fc38037fcab6a6d0f95716f01c54c3af3a218678c7a6ebcc25a2db047d7fb1896af97f"}, {0x30, 0x119, 0x7, "8edb1565e4ebe36229168fd2750e96cd1ec4a4a84510d94853d01d8ccb50"}, {0x80, 0x3a, 0x2, "a98048bf8b048f3445b4ee2b6ae705e7153dd3304dd85255c2470acb8cc68d552d1708064333164d1b921b662eee4f8298c6968ecd470eb294c27f2e069a2ce73ebc1a4efa4d641817a35300980480c89560eb3df3087ab4e1db5ca6eebbd11bb32bebd4a92bad606e87c4d1"}, {0x68, 0x112, 0x0, "c1fd9a9a39dad95be1a5690edc9bf339cb0af2b1c2f28155ce0c0e602a5aee560ef72df31bbfb640e04e7a4ce2bc796f2036e2a7deb6c4bc0d2248fecfd7f3f0378eeb0b4d61475df6d738e7e69019ab7f8bd05b90b07da4"}], 0x220}}, {{&(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x1ffffffff, @host}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f833ceaa2f21ea28d4220126ec446e6e15e0023545d78ba1cedcb45e54195bdd812a7e6d4ca08a1ce5768c5062057759c68e8300ac6a8ed55ebf291e8fac6066293be9b8b389c922a88a295d2bcb29727788f4e5496c66e8aa6e15a82710df4ddb7885cd589ce5c0b248f71eddba1d056e5b3d9779587d5a40030ed40d19af1fb77ebfe5453cab2942db2428bc688c2787dbacf2f6136455243e56b1330f2cf9017c1dde7ada1c4c698630173ed375c03862c53e7312263ca1be8b80d8677818d7be3f994960628f9dc2c846de81887478892bc7", 0xd4}, {&(0x7f0000002e40)="d29bee91bb55b731b9f19090bb4e0a8cac683862052bbe0d0c18ba03b95a93b8f12eb195677bc55f9a3ba4c1d74d2f48f468d9505df560592b8bced1bfa7682469f28bc8d220445b5f8a6aa3b16f675e046974c78084f7f4605b00db07d7451fa08408911a33dd60b777546a99659155723888d5b8f005bbf73348008e61f89aa26afb5b47e9f71b4ba5200ca91e3fedc65454ef5e67b2146f81202d73f9c283eba8c885ca4e2b92705a31a24762051f0baf6d1b16db504cc56cd310db4b742bfaabdaa1bbb78ab09bda1c9d2b21fcad903c62fa70ff2d5d91", 0xd9}, {&(0x7f0000002f40)="71de12de9d14ffe61c5431dbf074193d22e462cdf75854ea7754829325784545", 0x20}], 0x3, &(0x7f0000002fc0)=[{0x28, 0x10e, 0x3ff, "2464a1241fba7804fd6e5749f1fdc3e44153"}, {0x30, 0x115, 0x10000, "0345ad1f7910d3993fa9fd7824f5357fd01d4ca08d11ec5516b0d820"}, {0x100, 0x107, 0x8, "c51b402a73af633aefdaea5bc63462ed0bd14946129f7639af56ab1a9739a6582cdb626810f2ea2f4063cbe74a8562810e45f5d04001ff07d9b32b01f22faf4b216ec56c21488c5766312ba8555280aae1bba208b24478c28f9599ff8d791383de68613418e8cfc68459fede314fb1f1db7dcad88baac33cb67601568bc3641596d385d537cc86e1fc2824ce02e79788e558ff520b2180df7a380997e6780dc4d291e50c1dc4d672374a4bb2b1b67b62bc0dfb6629f79104a14aa4382a8b40164cb89148b6e42be84961251d051a78067a43f9cfb6307d8342f279e1c2bc2dcb1dc8e1e98dd760d4da4c7ec88421"}, {0xb0, 0x1, 0x9, "0d0c3e0fb79500f0a08a18def6b7a1bd5dc91ae43e25e2f9c1600ad2e6c86795f4e16b7b17143fee99730aab4b3d5d8446c810afd4f1cd5f495b8df8d08bb849c97c088dbe97b4aa75771e452e366159326481fcc09997d4b414fa8e3f428ce7b7f09bcf59c5b9deae4a306989373b6d22ea96740665be33236371f24f4cc62f7dfcad687897e107631306a0917caf7e33eabe01e4edbcffb801cfe0"}, {0x30, 0x107, 0x8, "26854e3aaceeb073d4954ffb59370ae03a90af7a596bd66bf069e2927beef913"}, {0xf0, 0x29, 0x8, "ca0e1db41376006c11f89233036d6edc83237ec34926172697b6a6f440b65eda15550b9952a1ce0b6832c7c806e1083bc44e66bceb6884fe97a6c941427d5873c18652841322b976a7c41840a151d87b06cedc3e49e04901b43a6507403d115892b8c5adcfc5e49e4a52eaa338ab5772a0490ebecf4d02a1f888048b71f480eec99a99552d4ca9a0008c27f765631eb3eaebdb5c1be1885deff53f6d3da27c7cc1a24b6104bcb3c4b0f89042090071ebc3ce042daeadbdeb0f86cc81e5397b079349e3f8eeda19f04c59e446a1918388315eecb1319438de6e7d6ef128"}, {0xe0, 0x113, 0x5, "0741f1425f322836632ae8fbe7b01e6319f910af7254a53275c2e170ad3eab049718374406c14041fe54cb64a978788c963f96cdca008a4e6b04a7f280aae1affc7e9609b115c095d8131eecf2125f65a09c4d3ee58ddc5340851000177366ca400c920cf338d381fabd66be7d0f5438062e380cce24cc3a22dd2bece159c1e7c345ad0a1b38bec1544a0c998869fc9002672c3c777a988031bf1e1292e000ec4f164f532d6151908efa07a950eb2e3d492a186a1eae07217b7c04d01a81fdda4abdf9c72535a437705d2d"}], 0x408}}], 0x3, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) 04:13:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0xc40, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r8}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000058b40)={{0x0, 0x9, 0xe54, 0x9, 0x0, 0x8000, 0x80000000, 0xfffffffe, 0x0, 0x7, 0x1, 0x3ff, 0x7, 0x8001, 0x100000001}}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059d40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {r10}], 0x81, "d1369540e8b693"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYBLOB="e30100000000000085ffffffe1c9dfd8dc16d8d1040000000000000064cf88d2ee79f33a000000000000030000ffff01800000000000003f0000000200000008000000040000000000308f0800a9d9c36334baa4630000070000000000000081000000000000001800000000000000000000000000002000000000000000000000367bac1f8ab59bd6f7"]) [ 945.794738][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 58 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 945.880902][ T6334] loop2: detected capacity change from 0 to 4096 [ 945.890826][T24052] usb 2-1: USB disconnect, device number 58 [ 945.906414][ T6335] loop0: detected capacity change from 0 to 4096 [ 945.949588][T24052] usblp0: removed 04:13:48 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 945.991924][ T6329] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 946.011680][ T6335] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.025707][ T6334] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 04:13:48 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x800004, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000001640)='./file0\x00', 0x8, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) recvfrom(0xffffffffffffffff, &(0x7f0000002080)=""/166, 0xa6, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x74) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x4044830) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000002600)={{0x3, @null}, [@null, @bcast, @default, @rose, @default, @netrom, @default, @null]}, &(0x7f0000002680)=0x48) sendmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="2e57e475ebde1c61364f9fc3f30c8c8a7c723f5a66c209cf58c2723206d408acfc0781a6b6166d42fcc0c75cce937f0b57e4de9c70d4bcc0169ae0c528a7196083890933", 0x44}], 0x1, &(0x7f0000002800)=[{0x90, 0x10d, 0x4, "6086a940295a233c38c447bd429be771705c2e44e493a29256155fd1347582985c0c71ae9b505e5d37275ba0ccae9ecbcc2d24a609c5083f190562153c91e080f3a96a36ebacdbeb40d7501097f7edc74bd171b9aa88035a59b926078f1f4e86f0f9d816eed4cc2151e62e8fad215bd058ec00f070cd853de7f35d17263bf0"}, {0x30, 0xff, 0x3, "586e8470ce09692b02163f4261ceb7b625abe9a85528f812a0a0e6"}], 0xc0}}, {{&(0x7f00000028c0)=@generic={0x10, "693cab28a0090c24a37555999576c7661b868e780872e86e94278a993e19551f0efde1b7a08175b59e21c06775a4a8d00971425c658115eecbb6eaa8e516e562053bd890c1bcef707674336b3f075676d996cc65a8d0d6abc0a26b765e6906d61bd4124ff23f14cfec55fc81a9c634155f60e2ff878e956ec46a95524eae"}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="06e9bb193893a6ca0faf551762a6107b12489bfe9be6681a2b16211886682a6aab9fbd078edbf2dd4b9b0d336071f7a0cc9b63c4f30ac7dd33570f39060a90970905314e6da98d4a5d140211b6ba24793535b0704b24f3586d3140c01f53689ab406cd014383edcc16f7ed298f1586464117ac1516ed3cac7be4454118e8a8d551673fb3b698039e368f14b7445ee99d008c6a7d41e2c349b9d31c26e2a2c5becf8cc22252ab4d7c47b5d4d19b527c9a4a2897b15eb1fe70a43a2532470bed3b2e3e", 0xc2}], 0x1, &(0x7f0000002a80)=[{0x108, 0x103, 0x7, "249b9c216d63f3b93ba7c465349ba4307a425087ec38e10f422e6a6bf691528d136cb5b448e427aec82e887dcee01266e189b59efbd76b8432f221e12dda758bd15f77be77da4f2d878f38576e77e52f19af585bda8a7bc85db04724329005c8b113ebc8172acb14b72408dda81ad1e153ce1180f6668660dd3d058c84bb9e679d08b7a182accae0b5a5fde0b1b08187529ddb3e75788b3ef8ba836dd1a09f461105ebf279dc2ec3c41c278ee517576058b8fac235187047f5d38373648f9ed8a1ad6756137fd8eaeacdc53c351214b6d69df1fc38037fcab6a6d0f95716f01c54c3af3a218678c7a6ebcc25a2db047d7fb1896af97f"}, {0x30, 0x119, 0x7, "8edb1565e4ebe36229168fd2750e96cd1ec4a4a84510d94853d01d8ccb50"}, {0x80, 0x3a, 0x2, "a98048bf8b048f3445b4ee2b6ae705e7153dd3304dd85255c2470acb8cc68d552d1708064333164d1b921b662eee4f8298c6968ecd470eb294c27f2e069a2ce73ebc1a4efa4d641817a35300980480c89560eb3df3087ab4e1db5ca6eebbd11bb32bebd4a92bad606e87c4d1"}, {0x68, 0x112, 0x0, "c1fd9a9a39dad95be1a5690edc9bf339cb0af2b1c2f28155ce0c0e602a5aee560ef72df31bbfb640e04e7a4ce2bc796f2036e2a7deb6c4bc0d2248fecfd7f3f0378eeb0b4d61475df6d738e7e69019ab7f8bd05b90b07da4"}], 0x220}}, {{&(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x1ffffffff, @host}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f833ceaa2f21ea28d4220126ec446e6e15e0023545d78ba1cedcb45e54195bdd812a7e6d4ca08a1ce5768c5062057759c68e8300ac6a8ed55ebf291e8fac6066293be9b8b389c922a88a295d2bcb29727788f4e5496c66e8aa6e15a82710df4ddb7885cd589ce5c0b248f71eddba1d056e5b3d9779587d5a40030ed40d19af1fb77ebfe5453cab2942db2428bc688c2787dbacf2f6136455243e56b1330f2cf9017c1dde7ada1c4c698630173ed375c03862c53e7312263ca1be8b80d8677818d7be3f994960628f9dc2c846de81887478892bc7", 0xd4}, {&(0x7f0000002e40)="d29bee91bb55b731b9f19090bb4e0a8cac683862052bbe0d0c18ba03b95a93b8f12eb195677bc55f9a3ba4c1d74d2f48f468d9505df560592b8bced1bfa7682469f28bc8d220445b5f8a6aa3b16f675e046974c78084f7f4605b00db07d7451fa08408911a33dd60b777546a99659155723888d5b8f005bbf73348008e61f89aa26afb5b47e9f71b4ba5200ca91e3fedc65454ef5e67b2146f81202d73f9c283eba8c885ca4e2b92705a31a24762051f0baf6d1b16db504cc56cd310db4b742bfaabdaa1bbb78ab09bda1c9d2b21fcad903c62fa70ff2d5d91", 0xd9}, {&(0x7f0000002f40)="71de12de9d14ffe61c5431dbf074193d22e462cdf75854ea7754829325784545", 0x20}], 0x3, &(0x7f0000002fc0)=[{0x28, 0x10e, 0x3ff, "2464a1241fba7804fd6e5749f1fdc3e44153"}, {0x30, 0x115, 0x10000, "0345ad1f7910d3993fa9fd7824f5357fd01d4ca08d11ec5516b0d820"}, {0x100, 0x107, 0x8, "c51b402a73af633aefdaea5bc63462ed0bd14946129f7639af56ab1a9739a6582cdb626810f2ea2f4063cbe74a8562810e45f5d04001ff07d9b32b01f22faf4b216ec56c21488c5766312ba8555280aae1bba208b24478c28f9599ff8d791383de68613418e8cfc68459fede314fb1f1db7dcad88baac33cb67601568bc3641596d385d537cc86e1fc2824ce02e79788e558ff520b2180df7a380997e6780dc4d291e50c1dc4d672374a4bb2b1b67b62bc0dfb6629f79104a14aa4382a8b40164cb89148b6e42be84961251d051a78067a43f9cfb6307d8342f279e1c2bc2dcb1dc8e1e98dd760d4da4c7ec88421"}, {0xb0, 0x1, 0x9, "0d0c3e0fb79500f0a08a18def6b7a1bd5dc91ae43e25e2f9c1600ad2e6c86795f4e16b7b17143fee99730aab4b3d5d8446c810afd4f1cd5f495b8df8d08bb849c97c088dbe97b4aa75771e452e366159326481fcc09997d4b414fa8e3f428ce7b7f09bcf59c5b9deae4a306989373b6d22ea96740665be33236371f24f4cc62f7dfcad687897e107631306a0917caf7e33eabe01e4edbcffb801cfe0"}, {0x30, 0x107, 0x8, "26854e3aaceeb073d4954ffb59370ae03a90af7a596bd66bf069e2927beef913"}, {0xf0, 0x29, 0x8, "ca0e1db41376006c11f89233036d6edc83237ec34926172697b6a6f440b65eda15550b9952a1ce0b6832c7c806e1083bc44e66bceb6884fe97a6c941427d5873c18652841322b976a7c41840a151d87b06cedc3e49e04901b43a6507403d115892b8c5adcfc5e49e4a52eaa338ab5772a0490ebecf4d02a1f888048b71f480eec99a99552d4ca9a0008c27f765631eb3eaebdb5c1be1885deff53f6d3da27c7cc1a24b6104bcb3c4b0f89042090071ebc3ce042daeadbdeb0f86cc81e5397b079349e3f8eeda19f04c59e446a1918388315eecb1319438de6e7d6ef128"}, {0xe0, 0x113, 0x5, "0741f1425f322836632ae8fbe7b01e6319f910af7254a53275c2e170ad3eab049718374406c14041fe54cb64a978788c963f96cdca008a4e6b04a7f280aae1affc7e9609b115c095d8131eecf2125f65a09c4d3ee58ddc5340851000177366ca400c920cf338d381fabd66be7d0f5438062e380cce24cc3a22dd2bece159c1e7c345ad0a1b38bec1544a0c998869fc9002672c3c777a988031bf1e1292e000ec4f164f532d6151908efa07a950eb2e3d492a186a1eae07217b7c04d01a81fdda4abdf9c72535a437705d2d"}], 0x408}}], 0x3, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) 04:13:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 946.212374][ T6359] overlayfs: failed to resolve './file1': -2 04:13:49 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x800004, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000001640)='./file0\x00', 0x8, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) recvfrom(0xffffffffffffffff, &(0x7f0000002080)=""/166, 0xa6, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x74) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x4044830) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000002600)={{0x3, @null}, [@null, @bcast, @default, @rose, @default, @netrom, @default, @null]}, &(0x7f0000002680)=0x48) sendmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="2e57e475ebde1c61364f9fc3f30c8c8a7c723f5a66c209cf58c2723206d408acfc0781a6b6166d42fcc0c75cce937f0b57e4de9c70d4bcc0169ae0c528a7196083890933", 0x44}], 0x1, &(0x7f0000002800)=[{0x90, 0x10d, 0x4, "6086a940295a233c38c447bd429be771705c2e44e493a29256155fd1347582985c0c71ae9b505e5d37275ba0ccae9ecbcc2d24a609c5083f190562153c91e080f3a96a36ebacdbeb40d7501097f7edc74bd171b9aa88035a59b926078f1f4e86f0f9d816eed4cc2151e62e8fad215bd058ec00f070cd853de7f35d17263bf0"}, {0x30, 0xff, 0x3, "586e8470ce09692b02163f4261ceb7b625abe9a85528f812a0a0e6"}], 0xc0}}, {{&(0x7f00000028c0)=@generic={0x10, "693cab28a0090c24a37555999576c7661b868e780872e86e94278a993e19551f0efde1b7a08175b59e21c06775a4a8d00971425c658115eecbb6eaa8e516e562053bd890c1bcef707674336b3f075676d996cc65a8d0d6abc0a26b765e6906d61bd4124ff23f14cfec55fc81a9c634155f60e2ff878e956ec46a95524eae"}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="06e9bb193893a6ca0faf551762a6107b12489bfe9be6681a2b16211886682a6aab9fbd078edbf2dd4b9b0d336071f7a0cc9b63c4f30ac7dd33570f39060a90970905314e6da98d4a5d140211b6ba24793535b0704b24f3586d3140c01f53689ab406cd014383edcc16f7ed298f1586464117ac1516ed3cac7be4454118e8a8d551673fb3b698039e368f14b7445ee99d008c6a7d41e2c349b9d31c26e2a2c5becf8cc22252ab4d7c47b5d4d19b527c9a4a2897b15eb1fe70a43a2532470bed3b2e3e", 0xc2}], 0x1, &(0x7f0000002a80)=[{0x108, 0x103, 0x7, "249b9c216d63f3b93ba7c465349ba4307a425087ec38e10f422e6a6bf691528d136cb5b448e427aec82e887dcee01266e189b59efbd76b8432f221e12dda758bd15f77be77da4f2d878f38576e77e52f19af585bda8a7bc85db04724329005c8b113ebc8172acb14b72408dda81ad1e153ce1180f6668660dd3d058c84bb9e679d08b7a182accae0b5a5fde0b1b08187529ddb3e75788b3ef8ba836dd1a09f461105ebf279dc2ec3c41c278ee517576058b8fac235187047f5d38373648f9ed8a1ad6756137fd8eaeacdc53c351214b6d69df1fc38037fcab6a6d0f95716f01c54c3af3a218678c7a6ebcc25a2db047d7fb1896af97f"}, {0x30, 0x119, 0x7, "8edb1565e4ebe36229168fd2750e96cd1ec4a4a84510d94853d01d8ccb50"}, {0x80, 0x3a, 0x2, "a98048bf8b048f3445b4ee2b6ae705e7153dd3304dd85255c2470acb8cc68d552d1708064333164d1b921b662eee4f8298c6968ecd470eb294c27f2e069a2ce73ebc1a4efa4d641817a35300980480c89560eb3df3087ab4e1db5ca6eebbd11bb32bebd4a92bad606e87c4d1"}, {0x68, 0x112, 0x0, "c1fd9a9a39dad95be1a5690edc9bf339cb0af2b1c2f28155ce0c0e602a5aee560ef72df31bbfb640e04e7a4ce2bc796f2036e2a7deb6c4bc0d2248fecfd7f3f0378eeb0b4d61475df6d738e7e69019ab7f8bd05b90b07da4"}], 0x220}}, {{&(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x1ffffffff, @host}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f833ceaa2f21ea28d4220126ec446e6e15e0023545d78ba1cedcb45e54195bdd812a7e6d4ca08a1ce5768c5062057759c68e8300ac6a8ed55ebf291e8fac6066293be9b8b389c922a88a295d2bcb29727788f4e5496c66e8aa6e15a82710df4ddb7885cd589ce5c0b248f71eddba1d056e5b3d9779587d5a40030ed40d19af1fb77ebfe5453cab2942db2428bc688c2787dbacf2f6136455243e56b1330f2cf9017c1dde7ada1c4c698630173ed375c03862c53e7312263ca1be8b80d8677818d7be3f994960628f9dc2c846de81887478892bc7", 0xd4}, {&(0x7f0000002e40)="d29bee91bb55b731b9f19090bb4e0a8cac683862052bbe0d0c18ba03b95a93b8f12eb195677bc55f9a3ba4c1d74d2f48f468d9505df560592b8bced1bfa7682469f28bc8d220445b5f8a6aa3b16f675e046974c78084f7f4605b00db07d7451fa08408911a33dd60b777546a99659155723888d5b8f005bbf73348008e61f89aa26afb5b47e9f71b4ba5200ca91e3fedc65454ef5e67b2146f81202d73f9c283eba8c885ca4e2b92705a31a24762051f0baf6d1b16db504cc56cd310db4b742bfaabdaa1bbb78ab09bda1c9d2b21fcad903c62fa70ff2d5d91", 0xd9}, {&(0x7f0000002f40)="71de12de9d14ffe61c5431dbf074193d22e462cdf75854ea7754829325784545", 0x20}], 0x3, &(0x7f0000002fc0)=[{0x28, 0x10e, 0x3ff, "2464a1241fba7804fd6e5749f1fdc3e44153"}, {0x30, 0x115, 0x10000, "0345ad1f7910d3993fa9fd7824f5357fd01d4ca08d11ec5516b0d820"}, {0x100, 0x107, 0x8, "c51b402a73af633aefdaea5bc63462ed0bd14946129f7639af56ab1a9739a6582cdb626810f2ea2f4063cbe74a8562810e45f5d04001ff07d9b32b01f22faf4b216ec56c21488c5766312ba8555280aae1bba208b24478c28f9599ff8d791383de68613418e8cfc68459fede314fb1f1db7dcad88baac33cb67601568bc3641596d385d537cc86e1fc2824ce02e79788e558ff520b2180df7a380997e6780dc4d291e50c1dc4d672374a4bb2b1b67b62bc0dfb6629f79104a14aa4382a8b40164cb89148b6e42be84961251d051a78067a43f9cfb6307d8342f279e1c2bc2dcb1dc8e1e98dd760d4da4c7ec88421"}, {0xb0, 0x1, 0x9, "0d0c3e0fb79500f0a08a18def6b7a1bd5dc91ae43e25e2f9c1600ad2e6c86795f4e16b7b17143fee99730aab4b3d5d8446c810afd4f1cd5f495b8df8d08bb849c97c088dbe97b4aa75771e452e366159326481fcc09997d4b414fa8e3f428ce7b7f09bcf59c5b9deae4a306989373b6d22ea96740665be33236371f24f4cc62f7dfcad687897e107631306a0917caf7e33eabe01e4edbcffb801cfe0"}, {0x30, 0x107, 0x8, "26854e3aaceeb073d4954ffb59370ae03a90af7a596bd66bf069e2927beef913"}, {0xf0, 0x29, 0x8, "ca0e1db41376006c11f89233036d6edc83237ec34926172697b6a6f440b65eda15550b9952a1ce0b6832c7c806e1083bc44e66bceb6884fe97a6c941427d5873c18652841322b976a7c41840a151d87b06cedc3e49e04901b43a6507403d115892b8c5adcfc5e49e4a52eaa338ab5772a0490ebecf4d02a1f888048b71f480eec99a99552d4ca9a0008c27f765631eb3eaebdb5c1be1885deff53f6d3da27c7cc1a24b6104bcb3c4b0f89042090071ebc3ce042daeadbdeb0f86cc81e5397b079349e3f8eeda19f04c59e446a1918388315eecb1319438de6e7d6ef128"}, {0xe0, 0x113, 0x5, "0741f1425f322836632ae8fbe7b01e6319f910af7254a53275c2e170ad3eab049718374406c14041fe54cb64a978788c963f96cdca008a4e6b04a7f280aae1affc7e9609b115c095d8131eecf2125f65a09c4d3ee58ddc5340851000177366ca400c920cf338d381fabd66be7d0f5438062e380cce24cc3a22dd2bece159c1e7c345ad0a1b38bec1544a0c998869fc9002672c3c777a988031bf1e1292e000ec4f164f532d6151908efa07a950eb2e3d492a186a1eae07217b7c04d01a81fdda4abdf9c72535a437705d2d"}], 0x408}}], 0x3, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) [ 946.295017][ T6354] QAT: Invalid ioctl -1066363887 04:13:49 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 946.365383][ T6366] loop0: detected capacity change from 0 to 4096 [ 946.368784][T24052] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 946.454312][ T6366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.477311][ T6371] overlayfs: failed to resolve './file1': -2 [ 946.499585][ T6377] loop2: detected capacity change from 0 to 4096 04:13:49 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 946.635516][ T6377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.660469][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 946.715220][ T37] audit: type=1804 audit(1627100029.410:4761): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1432/cgroup.controllers" dev="sda1" ino=14384 res=1 errno=0 [ 946.838865][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 946.847493][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 946.858568][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 946.868584][T24052] usb 2-1: config 250 has no interface number 0 [ 946.877020][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 946.913748][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 946.952113][ T6385] overlayfs: failed to resolve './file1': -2 [ 947.010567][ T6387] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 947.046001][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 947.108918][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 947.124257][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 947.138081][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 947.229495][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 947.266704][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 947.313858][T24052] usb 2-1: SerialNumber: syz [ 947.361255][ T6337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 947.380684][ T6337] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 947.419625][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 947.426157][T24052] hub: probe of 2-1:250.228 failed with error -5 04:13:50 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040411018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:50 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)) splice(r1, &(0x7f0000000040)=0x4, r4, &(0x7f00000000c0)=0xfffffffffffffffc, 0x7, 0x8) sendfile(r3, r2, 0x0, 0x100000002) 04:13:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1001, 0x2001}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x800004, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000001640)='./file0\x00', 0x8, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) recvfrom(0xffffffffffffffff, &(0x7f0000002080)=""/166, 0xa6, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[], 0x44) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0x74) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x4044830) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000002600)={{0x3, @null}, [@null, @bcast, @default, @rose, @default, @netrom, @default, @null]}, &(0x7f0000002680)=0x48) sendmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)="2e57e475ebde1c61364f9fc3f30c8c8a7c723f5a66c209cf58c2723206d408acfc0781a6b6166d42fcc0c75cce937f0b57e4de9c70d4bcc0169ae0c528a7196083890933", 0x44}], 0x1, &(0x7f0000002800)=[{0x90, 0x10d, 0x4, "6086a940295a233c38c447bd429be771705c2e44e493a29256155fd1347582985c0c71ae9b505e5d37275ba0ccae9ecbcc2d24a609c5083f190562153c91e080f3a96a36ebacdbeb40d7501097f7edc74bd171b9aa88035a59b926078f1f4e86f0f9d816eed4cc2151e62e8fad215bd058ec00f070cd853de7f35d17263bf0"}, {0x30, 0xff, 0x3, "586e8470ce09692b02163f4261ceb7b625abe9a85528f812a0a0e6"}], 0xc0}}, {{&(0x7f00000028c0)=@generic={0x10, "693cab28a0090c24a37555999576c7661b868e780872e86e94278a993e19551f0efde1b7a08175b59e21c06775a4a8d00971425c658115eecbb6eaa8e516e562053bd890c1bcef707674336b3f075676d996cc65a8d0d6abc0a26b765e6906d61bd4124ff23f14cfec55fc81a9c634155f60e2ff878e956ec46a95524eae"}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)="06e9bb193893a6ca0faf551762a6107b12489bfe9be6681a2b16211886682a6aab9fbd078edbf2dd4b9b0d336071f7a0cc9b63c4f30ac7dd33570f39060a90970905314e6da98d4a5d140211b6ba24793535b0704b24f3586d3140c01f53689ab406cd014383edcc16f7ed298f1586464117ac1516ed3cac7be4454118e8a8d551673fb3b698039e368f14b7445ee99d008c6a7d41e2c349b9d31c26e2a2c5becf8cc22252ab4d7c47b5d4d19b527c9a4a2897b15eb1fe70a43a2532470bed3b2e3e", 0xc2}], 0x1, &(0x7f0000002a80)=[{0x108, 0x103, 0x7, "249b9c216d63f3b93ba7c465349ba4307a425087ec38e10f422e6a6bf691528d136cb5b448e427aec82e887dcee01266e189b59efbd76b8432f221e12dda758bd15f77be77da4f2d878f38576e77e52f19af585bda8a7bc85db04724329005c8b113ebc8172acb14b72408dda81ad1e153ce1180f6668660dd3d058c84bb9e679d08b7a182accae0b5a5fde0b1b08187529ddb3e75788b3ef8ba836dd1a09f461105ebf279dc2ec3c41c278ee517576058b8fac235187047f5d38373648f9ed8a1ad6756137fd8eaeacdc53c351214b6d69df1fc38037fcab6a6d0f95716f01c54c3af3a218678c7a6ebcc25a2db047d7fb1896af97f"}, {0x30, 0x119, 0x7, "8edb1565e4ebe36229168fd2750e96cd1ec4a4a84510d94853d01d8ccb50"}, {0x80, 0x3a, 0x2, "a98048bf8b048f3445b4ee2b6ae705e7153dd3304dd85255c2470acb8cc68d552d1708064333164d1b921b662eee4f8298c6968ecd470eb294c27f2e069a2ce73ebc1a4efa4d641817a35300980480c89560eb3df3087ab4e1db5ca6eebbd11bb32bebd4a92bad606e87c4d1"}, {0x68, 0x112, 0x0, "c1fd9a9a39dad95be1a5690edc9bf339cb0af2b1c2f28155ce0c0e602a5aee560ef72df31bbfb640e04e7a4ce2bc796f2036e2a7deb6c4bc0d2248fecfd7f3f0378eeb0b4d61475df6d738e7e69019ab7f8bd05b90b07da4"}], 0x220}}, {{&(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x1ffffffff, @host}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d40)="f833ceaa2f21ea28d4220126ec446e6e15e0023545d78ba1cedcb45e54195bdd812a7e6d4ca08a1ce5768c5062057759c68e8300ac6a8ed55ebf291e8fac6066293be9b8b389c922a88a295d2bcb29727788f4e5496c66e8aa6e15a82710df4ddb7885cd589ce5c0b248f71eddba1d056e5b3d9779587d5a40030ed40d19af1fb77ebfe5453cab2942db2428bc688c2787dbacf2f6136455243e56b1330f2cf9017c1dde7ada1c4c698630173ed375c03862c53e7312263ca1be8b80d8677818d7be3f994960628f9dc2c846de81887478892bc7", 0xd4}, {&(0x7f0000002e40)="d29bee91bb55b731b9f19090bb4e0a8cac683862052bbe0d0c18ba03b95a93b8f12eb195677bc55f9a3ba4c1d74d2f48f468d9505df560592b8bced1bfa7682469f28bc8d220445b5f8a6aa3b16f675e046974c78084f7f4605b00db07d7451fa08408911a33dd60b777546a99659155723888d5b8f005bbf73348008e61f89aa26afb5b47e9f71b4ba5200ca91e3fedc65454ef5e67b2146f81202d73f9c283eba8c885ca4e2b92705a31a24762051f0baf6d1b16db504cc56cd310db4b742bfaabdaa1bbb78ab09bda1c9d2b21fcad903c62fa70ff2d5d91", 0xd9}, {&(0x7f0000002f40)="71de12de9d14ffe61c5431dbf074193d22e462cdf75854ea7754829325784545", 0x20}], 0x3, &(0x7f0000002fc0)=[{0x28, 0x10e, 0x3ff, "2464a1241fba7804fd6e5749f1fdc3e44153"}, {0x30, 0x115, 0x10000, "0345ad1f7910d3993fa9fd7824f5357fd01d4ca08d11ec5516b0d820"}, {0x100, 0x107, 0x8, "c51b402a73af633aefdaea5bc63462ed0bd14946129f7639af56ab1a9739a6582cdb626810f2ea2f4063cbe74a8562810e45f5d04001ff07d9b32b01f22faf4b216ec56c21488c5766312ba8555280aae1bba208b24478c28f9599ff8d791383de68613418e8cfc68459fede314fb1f1db7dcad88baac33cb67601568bc3641596d385d537cc86e1fc2824ce02e79788e558ff520b2180df7a380997e6780dc4d291e50c1dc4d672374a4bb2b1b67b62bc0dfb6629f79104a14aa4382a8b40164cb89148b6e42be84961251d051a78067a43f9cfb6307d8342f279e1c2bc2dcb1dc8e1e98dd760d4da4c7ec88421"}, {0xb0, 0x1, 0x9, "0d0c3e0fb79500f0a08a18def6b7a1bd5dc91ae43e25e2f9c1600ad2e6c86795f4e16b7b17143fee99730aab4b3d5d8446c810afd4f1cd5f495b8df8d08bb849c97c088dbe97b4aa75771e452e366159326481fcc09997d4b414fa8e3f428ce7b7f09bcf59c5b9deae4a306989373b6d22ea96740665be33236371f24f4cc62f7dfcad687897e107631306a0917caf7e33eabe01e4edbcffb801cfe0"}, {0x30, 0x107, 0x8, "26854e3aaceeb073d4954ffb59370ae03a90af7a596bd66bf069e2927beef913"}, {0xf0, 0x29, 0x8, "ca0e1db41376006c11f89233036d6edc83237ec34926172697b6a6f440b65eda15550b9952a1ce0b6832c7c806e1083bc44e66bceb6884fe97a6c941427d5873c18652841322b976a7c41840a151d87b06cedc3e49e04901b43a6507403d115892b8c5adcfc5e49e4a52eaa338ab5772a0490ebecf4d02a1f888048b71f480eec99a99552d4ca9a0008c27f765631eb3eaebdb5c1be1885deff53f6d3da27c7cc1a24b6104bcb3c4b0f89042090071ebc3ce042daeadbdeb0f86cc81e5397b079349e3f8eeda19f04c59e446a1918388315eecb1319438de6e7d6ef128"}, {0xe0, 0x113, 0x5, "0741f1425f322836632ae8fbe7b01e6319f910af7254a53275c2e170ad3eab049718374406c14041fe54cb64a978788c963f96cdca008a4e6b04a7f280aae1affc7e9609b115c095d8131eecf2125f65a09c4d3ee58ddc5340851000177366ca400c920cf338d381fabd66be7d0f5438062e380cce24cc3a22dd2bece159c1e7c345ad0a1b38bec1544a0c998869fc9002672c3c777a988031bf1e1292e000ec4f164f532d6151908efa07a950eb2e3d492a186a1eae07217b7c04d01a81fdda4abdf9c72535a437705d2d"}], 0x408}}], 0x3, 0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x7000000, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)) [ 947.677763][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 947.739506][ T6410] loop2: detected capacity change from 0 to 4096 [ 947.769365][T24052] usb 2-1: USB disconnect, device number 59 04:13:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0xe000000) [ 947.802012][ T6411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 947.810860][T24052] usblp0: removed [ 947.833334][ T6410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 947.843582][ T6415] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 04:13:50 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 947.962963][ T37] audit: type=1804 audit(1627100030.660:4762): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir783872602/syzkaller.YcnFoC/1076/cgroup.controllers" dev="sda1" ino=14212 res=1 errno=0 04:13:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) r2 = fsmount(r0, 0x0, 0xf4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}], [{@obj_user={'obj_user', 0x3d, 'cgroup.controllers\x00'}}, {@fsname={'fsname', 0x3d, 'cgroup.controllers\x00'}}, {@appraise_type}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000000000000000000000004d8b894227cec43600"}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r7, r4, 0x0, 0x100000002) [ 948.155190][ T6444] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 948.229620][ T6447] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 948.248938][T24052] usb 2-1: new high-speed USB device number 60 using dummy_hcd 04:13:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 948.370610][ T6412] netlink: 2583 bytes leftover after parsing attributes in process `syz-executor.0'. [ 948.396498][ T37] audit: type=1804 audit(1627100031.090:4763): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir520963057/syzkaller.YTezDL/1034/cgroup.controllers" dev="sda1" ino=14371 res=1 errno=0 [ 948.568911][T24052] usb 2-1: Using ep0 maxpacket: 8 [ 948.586266][ T6459] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 948.695352][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 948.728838][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 948.760416][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 948.770791][ T4912] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 948.785680][T24052] usb 2-1: config 250 has no interface number 0 [ 948.793032][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 948.806129][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 948.817618][T24052] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 948.831712][T24052] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 948.843373][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 948.870395][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 948.959360][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 948.968607][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 949.000145][T24052] usb 2-1: SerialNumber: syz [ 949.090416][ T6418] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.097785][ T6418] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.140376][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 949.146835][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 949.217833][ T4912] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 949.227187][ T4912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.244562][ T4912] usb 3-1: config 0 descriptor?? 04:13:52 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:52 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 04:13:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x2) 04:13:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 949.368759][ T4912] rc_core: IR keymap rc-hauppauge not found [ 949.375073][ T4912] Registered IR keymap rc-empty [ 949.395994][ T4912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 949.410041][T24052] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:13:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x400000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/165, 0xa5}], 0x3, 0xdd6, 0x7fffffff) sendfile(r3, r2, 0x0, 0x100000002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) accept4$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) [ 949.477521][ T4912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 949.502699][T24052] usb 2-1: USB disconnect, device number 60 [ 949.539700][T24052] usblp0: removed 04:13:52 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 949.568349][ T6485] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 949.610785][ T6486] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x100000002) 04:13:52 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 949.904658][ T6515] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 950.218477][ T6452] netlink: 2583 bytes leftover after parsing attributes in process `syz-executor.2'. [ 950.282389][T24052] usb 3-1: USB disconnect, device number 5 04:13:53 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11f00000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:53 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) 04:13:53 executing program 2 (fault-call:14 fault-nth:0): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 950.871572][ T6542] usb usb9: usbfs: process 6542 (syz-executor.5) did not claim interface 0 before use 04:13:53 executing program 0 (fault-call:14 fault-nth:0): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:53 executing program 4 (fault-call:15 fault-nth:0): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 950.979725][ T6547] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.016234][ T37] audit: type=1804 audit(1627100033.710:4764): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1438/cgroup.controllers" dev="sda1" ino=14290 res=1 errno=0 04:13:53 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 951.114420][ T6554] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.123050][ T6550] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.125832][ T5203] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 951.151833][ T6559] FAULT_INJECTION: forcing a failure. [ 951.151833][ T6559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.154528][ T6557] FAULT_INJECTION: forcing a failure. [ 951.154528][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.216752][ T6560] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.226291][ T6559] CPU: 0 PID: 6559 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 951.234977][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.245032][ T6559] Call Trace: [ 951.248318][ T6559] dump_stack_lvl+0xcd/0x134 [ 951.252925][ T6559] should_fail.cold+0x5/0xa [ 951.257543][ T6559] _copy_to_user+0x2c/0x150 [ 951.262052][ T6559] simple_read_from_buffer+0xcc/0x160 [ 951.267448][ T6559] proc_fail_nth_read+0x187/0x220 [ 951.272476][ T6559] ? proc_fault_inject_read+0x220/0x220 [ 951.278022][ T6559] ? security_file_permission+0x248/0x560 [ 951.283762][ T6559] ? proc_fault_inject_read+0x220/0x220 [ 951.289317][ T6559] vfs_read+0x1b5/0x570 [ 951.293486][ T6559] ksys_read+0x12d/0x250 [ 951.297735][ T6559] ? vfs_write+0xa40/0xa40 [ 951.302162][ T6559] ? syscall_enter_from_user_mode+0x21/0x70 [ 951.308083][ T6559] do_syscall_64+0x35/0xb0 [ 951.312513][ T6559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.318439][ T6559] RIP: 0033:0x41936c [ 951.322335][ T6559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 951.341949][ T6559] RSP: 002b:00007f30655c7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.348963][ T6551] netlink: 2583 bytes leftover after parsing attributes in process `syz-executor.5'. [ 951.359793][ T6559] RAX: ffffffffffffffda RBX: 0000000000000260 RCX: 000000000041936c [ 951.359814][ T6559] RDX: 000000000000000f RSI: 00007f30655c71e0 RDI: 0000000000000008 [ 951.359829][ T6559] RBP: 00007f30655c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.359844][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.359857][ T6559] R13: 00007ffd98a9e26f R14: 00007f30655c7300 R15: 0000000000022000 [ 951.414298][ T6557] CPU: 1 PID: 6557 Comm: syz-executor.2 Not tainted 5.14.0-rc2-syzkaller #0 [ 951.423093][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.429837][ T6560] FAULT_INJECTION: forcing a failure. [ 951.429837][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 951.433150][ T6557] Call Trace: [ 951.433161][ T6557] dump_stack_lvl+0xcd/0x134 [ 951.433196][ T6557] should_fail.cold+0x5/0xa [ 951.433223][ T6557] _copy_to_user+0x2c/0x150 [ 951.433247][ T6557] simple_read_from_buffer+0xcc/0x160 [ 951.433279][ T6557] proc_fail_nth_read+0x187/0x220 [ 951.433299][ T6557] ? proc_fault_inject_read+0x220/0x220 [ 951.462859][ T6564] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.462902][ T6557] ? security_file_permission+0x248/0x560 [ 951.491908][ T6557] ? proc_fault_inject_read+0x220/0x220 [ 951.497468][ T6557] vfs_read+0x1b5/0x570 [ 951.501633][ T6557] ksys_read+0x12d/0x250 [ 951.505882][ T6557] ? vfs_write+0xa40/0xa40 [ 951.510304][ T6557] ? syscall_enter_from_user_mode+0x21/0x70 [ 951.516202][ T6557] do_syscall_64+0x35/0xb0 [ 951.520607][ T6557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.526496][ T6557] RIP: 0033:0x41936c [ 951.530377][ T6557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 951.549973][ T6557] RSP: 002b:00007fde02345170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.558372][ T6557] RAX: ffffffffffffffda RBX: 0000000000000260 RCX: 000000000041936c [ 951.566331][ T6557] RDX: 000000000000000f RSI: 00007fde023451e0 RDI: 0000000000000008 [ 951.574289][ T6557] RBP: 00007fde023451d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.582249][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.590206][ T6557] R13: 00007ffff4e5968f R14: 00007fde02345300 R15: 0000000000022000 [ 951.599129][ T6560] CPU: 0 PID: 6560 Comm: syz-executor.4 Not tainted 5.14.0-rc2-syzkaller #0 [ 951.607816][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.617870][ T6560] Call Trace: [ 951.621147][ T6560] dump_stack_lvl+0xcd/0x134 [ 951.625750][ T6560] should_fail.cold+0x5/0xa [ 951.630265][ T6560] ? ovl_iterate+0x72e/0xe00 [ 951.634860][ T6560] should_failslab+0x5/0x10 [ 951.639371][ T6560] kmem_cache_alloc_trace+0x55/0x3c0 [ 951.644662][ T6560] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 951.650389][ T6560] ovl_iterate+0x72e/0xe00 [ 951.654821][ T6560] iterate_dir+0x1f9/0x660 [ 951.659253][ T6560] __x64_sys_getdents+0x13a/0x2b0 [ 951.664289][ T6560] ? __ia32_sys_old_readdir+0x1c0/0x1c0 [ 951.670194][ T6560] ? filldir64+0x690/0x690 [ 951.674623][ T6560] ? syscall_enter_from_user_mode+0x21/0x70 [ 951.680530][ T6560] do_syscall_64+0x35/0xb0 [ 951.684956][ T6560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.690870][ T6560] RIP: 0033:0x4665e9 [ 951.694774][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:13:54 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 951.714397][ T6560] RSP: 002b:00007f17a31b9188 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 951.722818][ T6560] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 951.730793][ T6560] RDX: 00000000200003dd RSI: 0000000020000340 RDI: 0000000000000007 [ 951.738766][ T6560] RBP: 00007f17a31b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.746726][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.754683][ T6560] R13: 00007ffeed2bc3ff R14: 00007f17a31b9300 R15: 0000000000022000 04:13:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 951.798862][ T5203] usb 2-1: Using ep0 maxpacket: 8 04:13:54 executing program 4 (fault-call:15 fault-nth:1): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 951.919824][ T5203] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 951.928374][ T5203] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 951.973474][ T5203] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 951.989218][ T6572] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 951.997924][ T5203] usb 2-1: config 250 has no interface number 0 [ 952.017045][ T5203] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 952.043972][ T6575] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 952.062467][ T5203] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 952.063553][ T6576] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 952.124774][ T5203] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 952.144833][ T5203] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 952.149360][ T6580] FAULT_INJECTION: forcing a failure. [ 952.149360][ T6580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.182356][ T5203] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 952.196944][ T6580] CPU: 1 PID: 6580 Comm: syz-executor.4 Not tainted 5.14.0-rc2-syzkaller #0 [ 952.205640][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.209751][ T5203] usb 2-1: config 250 interface 228 has no altsetting 0 [ 952.215691][ T6580] Call Trace: [ 952.215701][ T6580] dump_stack_lvl+0xcd/0x134 [ 952.215735][ T6580] should_fail.cold+0x5/0xa [ 952.234968][ T6580] _copy_from_user+0x2c/0x180 [ 952.239652][ T6580] kstrtouint_from_user+0xb5/0x240 [ 952.244773][ T6580] ? kstrtou8_from_user+0x210/0x210 [ 952.249999][ T6580] proc_fail_nth_write+0x79/0x220 [ 952.255032][ T6580] ? proc_task_getattr+0x1f0/0x1f0 [ 952.260151][ T6580] ? proc_task_getattr+0x1f0/0x1f0 [ 952.265265][ T6580] vfs_write+0x28e/0xa40 [ 952.269518][ T6580] ksys_write+0x12d/0x250 [ 952.273864][ T6580] ? __ia32_sys_read+0xb0/0xb0 [ 952.278638][ T6580] ? syscall_enter_from_user_mode+0x21/0x70 [ 952.284550][ T6580] do_syscall_64+0x35/0xb0 [ 952.288976][ T6580] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 952.294880][ T6580] RIP: 0033:0x4192cf [ 952.298774][ T6580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 952.309276][ T5203] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 952.318382][ T6580] RSP: 002b:00007f17a3198170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 952.335794][ T6580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192cf [ 952.341041][ T5203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 952.343764][ T6580] RDX: 0000000000000001 RSI: 00007f17a31981e0 RDI: 0000000000000008 [ 952.343780][ T6580] RBP: 00007f17a31981d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.343795][ T6580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 952.343808][ T6580] R13: 00007ffeed2bc3ff R14: 00007f17a3198300 R15: 0000000000022000 [ 952.406519][ T5203] usb 2-1: SerialNumber: syz [ 952.440335][ T6541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.475187][ T6541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.539639][ T5203] hub 2-1:250.228: bad descriptor, ignoring hub [ 952.546099][ T5203] hub: probe of 2-1:250.228 failed with error -5 04:13:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:55 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) 04:13:55 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:13:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 952.816573][ T5203] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 04:13:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 952.901622][ T6609] usb usb9: usbfs: process 6609 (syz-executor.5) did not claim interface 0 before use [ 952.920057][ T5203] usb 2-1: USB disconnect, device number 61 [ 952.970021][ T6610] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 952.971679][ T6607] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 952.978292][ T5203] usblp0: removed [ 952.997615][ T6615] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 953.056520][ T6611] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:55 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:55 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 953.177650][ T37] audit: type=1804 audit(1627100035.870:4765): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1439/cgroup.controllers" dev="sda1" ino=14147 res=1 errno=0 04:13:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x100000002) 04:13:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75737065726469723d2e2f66696c65312c6c6f776572646a7267acdfc85eff13343d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6ed6c5928b446486facfabd0f25d"]) mkdir(0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) 04:13:56 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 953.394338][ T6639] overlayfs: unrecognized mount option "usperdir=./file1" or missing value [ 953.403824][ T6634] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 953.420522][ T6638] usb usb9: usbfs: process 6638 (syz-executor.5) did not claim interface 0 before use [ 953.450251][ T6640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 953.465160][ T6639] overlayfs: unrecognized mount option "usperdir=./file1" or missing value 04:13:56 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='hostfs\x00', 0x104008, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 953.517114][ T6646] overlayfs: unrecognized mount option "xino=onre" or missing value 04:13:56 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 953.573913][ T37] audit: type=1804 audit(1627100036.270:4766): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1440/cgroup.controllers" dev="sda1" ino=14611 res=1 errno=0 04:13:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 953.696187][ T6652] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 953.739003][ T7] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 953.763247][ T6652] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 953.764296][ T6654] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:13:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30005, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="cc90681c6b106e2ee9be0c098f2e7a5d4903a11dea0037ddd227cd1cc46704ce0fe5679f791ed91f2887689323170b2298499cf9bde6a959e21d12103e1f8b5f52c8320cc2c44805836c2ca9880e326806742dcf8585af64dd338a0da1be038f6ff1eec16dc2a4664720cea7cbdb86ac01c3d8a706e2e303c383222d434cba4712441b4a470aa9e54f7e7647ccbeb80814b51fe9b4a32db0808134bffe2263439513b74e96f32e4fcb19169ab1ca6ca4657823befb131f7ab7f60454963fc4738c85894391944523ff8c6a47c793c283300a", 0xd2, 0x44041, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) 04:13:56 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 953.890260][ T6660] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 953.936434][ T6650] netlink: 2583 bytes leftover after parsing attributes in process `syz-executor.5'. [ 953.945309][ T6662] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 953.959930][ T6663] overlayfs: unrecognized mount option "xino=onre" or missing value 04:13:56 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6eccc8a36c50653248b500705312f6ed7d5487014380dfc6acc6ace7911f811d817a290bd212b91739be092fd4d6db4cef68feb14fea452338d9cbcb60d228393aa9658c2b85d5bdc36e2041b6b21c5146366568ca8e6b15ba1b40b1a09d4f63b7265fff0ea603785954ccb1cb23cc806a637b5f1f7a58461fc35dc167cb48e0a8c690910d97ef884af1a965c04405081f4209245434833ea9ed129b8b7d5fd6db3b9af5daf2e6fc1b1f045b5901000031147d19007373e052984e392f000000000000"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0xb25cd000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 953.999030][ T7] usb 2-1: Using ep0 maxpacket: 8 04:13:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file0\x00', r2, 0x0, 0x800) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdJ\x00\x00\x00\x00\x00\x00\x00e1,lQwerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 954.028780][ T6662] overlayfs: unrecognized mount option "xino=onre" or missing value 04:13:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 954.117581][ T6670] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 954.126089][ T7] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 954.138341][ T6671] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 954.148313][ T7] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 954.176317][ T7] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 954.192722][ T6670] overlayfs: unrecognized mount option "xino=onre" or missing value [ 954.211846][ T7] usb 2-1: config 250 has no interface number 0 04:13:56 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 954.223034][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 954.237478][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 954.248677][ T7] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1280, setting to 1024 [ 954.254920][ T6677] overlayfs: unrecognized mount option "xino=onÌÈ£lPe2Hµ" or missing value [ 954.268837][ T7] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 954.288267][ T6679] usb usb9: usbfs: process 6679 (syz-executor.5) did not claim interface 0 before use [ 954.298211][ T7] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 04:13:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="70000000064c8f4e519f0e88ca9f7cf397d5eb0ece8eaa2c202ddb90ee7777de0347caf94940cc43dfbb50eb987486ccee70b519c551b3843daaa56caf2a9b5310aa", @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5e550000844ec1947f6677094d48a9c5202be1e8aa633e38716bc0352c5cd3f3f46f23ea70302d50b18c2806d3acbc644173b63139029b59703cc551b2074ddf711ee03207fbd08c7d4dc4ebc9392eda53aa6f5fd3b035e1a9e5947838a0c53a27960b07e8d5aae0c7973ed85a3ea8b6122699ae7a86c02cf2af2ba2d65537fcfb337ae90858d5c81080504c3cf477cb077f99908d552b4579ba8cfead10ab56", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf252b0000000c009900999f00005c0000000400cc00"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x91) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7570706572a67d723d2e2f662f6275732c7770726b6449723d2e2f66696c65302c78696e6f3d6f6e"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) [ 954.326210][ T7] usb 2-1: config 250 interface 228 has no altsetting 0 [ 954.349270][ T6677] overlayfs: unrecognized mount option "xino=onÌÈ£lPe2Hµ" or missing value [ 954.409592][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 954.418669][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 954.450282][ T37] audit: type=1804 audit(1627100037.150:4767): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1441/cgroup.controllers" dev="sda1" ino=14527 res=1 errno=0 [ 954.452092][ T7] usb 2-1: SerialNumber: syz [ 954.531216][ T6645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.538676][ T6645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.554218][ T6689] overlayfs: unrecognized mount option "upperdJ" or missing value [ 954.589109][ T6691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 954.594462][ T6689] overlayfs: unrecognized mount option "upperdJ" or missing value [ 954.635917][ T7] hub 2-1:250.228: bad descriptor, ignoring hub [ 954.653458][ T7] hub: probe of 2-1:250.228 failed with error -5 [ 954.709499][ T6696] overlayfs: unrecognized mount option "upper¦}r=./f/bus" or missing value [ 954.759094][ T6696] overlayfs: unrecognized mount option "upper¦}r=./f/bus" or missing value 04:13:57 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:13:57 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f776572cf16a03ade6469723d2e2f6275732c776f726b6469723d2e2f66696c65302c7869"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 04:13:57 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) write$FUSE_BMAP(r0, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x3}}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x4) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='\x00', &(0x7f0000000100), 0x280084, &(0x7f0000000400)=ANY=[@ANYRESOCT]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x510, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x16b}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:13:57 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000440)={0xc, 0x80, 0x5, 0x2, 0x0, 0x40, 0x0, 0xa0, 0x14000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x9a8, 0x20000000000000}, 0x40, 0xffffffffffffff80, 0x3ff, 0x9, 0x0, 0x1, 0xbb04, 0x0, 0x1b2, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r2, 0x2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) [ 954.884529][ T7] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 954.933041][ T6711] usb usb9: usbfs: process 6711 (syz-executor.5) did not claim interface 0 before use [ 954.966026][ T7] usb 2-1: USB disconnect, device number 62 [ 954.967774][ T6710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 954.984166][ T6721] usb usb9: usbfs: process 6721 (syz-executor.4) did not claim interface 0 before use [ 954.986717][ T6717] overlayfs: unrecognized mount option "lowerÏ :Þdir=./bus" or missing value [ 955.016058][ T7] usblp0: removed 04:13:57 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 955.069359][ T6717] overlayfs: unrecognized mount option "lowerÏ :Þdir=./bus" or missing value [ 955.098227][ T6721] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 955.131942][ T37] audit: type=1804 audit(1627100037.830:4768): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir433223110/syzkaller.Qx4zRz/1442/cgroup.controllers" dev="sda1" ino=14112 res=1 errno=0 04:13:57 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6ed1cc95f04fcaa7b490eaf13e79800bb8a4030cffc603fcec00b6dab0e44e63f85729e43ecc8fb97a6957376f3e83826e876c6d09a22a964873f72ab2a4bb2966858d29fbb2406126c1a6a4bcf95073c3a36cf9be20c182a47ebe007757601c0ee5434a82f750f1ac1ae48fb1c5ba610670c00210cf0a0c382ffbc4474993e0cb372053287a4c614d4a2e31c74b4bbb01e77db4020928f7cc25bad7ad4eaaf27555c0a1a40e6e0c13a4761d7de3e2b52851813852130ec701c520"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 955.175610][ T6738] usb usb9: usbfs: process 6738 (syz-executor.4) did not claim interface 0 before use 04:13:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) [ 955.214248][ T6737] overlayfs: unrecognized mount option "xino=onre" or missing value 04:13:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) close(0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x1a0000, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=oN']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x2, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xba18, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 955.314509][ T6742] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 955.353726][ T6745] overlayfs: unrecognized mount option "xino=onÑÌ•ðOʧ´êñ>y€ ¸¤ ÿÆüì" or missing value [ 955.383564][ T6747] usb usb9: usbfs: process 6747 (syz-executor.5) did not claim interface 0 before use [ 955.407457][ T6745] overlayfs: unrecognized mount option "xino=onÑÌ•ðOʧ´êñ>y€ ¸¤ ÿÆüì" or missing value 04:13:58 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x22c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2e, 0xd}}}}, [@NL80211_ATTR_VENDOR_DATA={0x39, 0xc5, "9c422b3d574306db256f819e600a6409c81f5946aaa935dedd8b7cac6e9ad264b4c26b9c9ad520a89d2006bb826575170fc75948ac"}, @NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "89efce8703f678e15b19699ab7867883b0649a887217ee5c370508cb72841ebedcb83ad7d3d9395001cd1f31f8c3456a7f93dacc240752e759a82b63767a8d0d28ac922a33"}, @NL80211_ATTR_VENDOR_DATA={0xce, 0xc5, "ee6b6af7a8dd610cd13a05b329f9e6ec46b2e2ea3176ac127a2396bb6b8651a21c294ebc8013b32555ba0387b7bf34a245b66dea4312548411782b13ca0f74584d15347fb90cc7b0866b29201f3acce9cca1b4a073a9658be2a5426f6853cf6895351c456b86e237f12bb5cb2b2f8ef7e09110bb17c772b03e2d14201c10fb99119c2addafdd66ecdd33f95cea6e6f19e3a61d708cb777432b3af1bf6230735cb1c95c7ed679a8260be4d658690171bf29b198c7baf699115a409bafa2978dc945c3e94552239e98577d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xa9, 0xc5, "d645ef78d05f3f9407fdf45018a09f5016c36e631efa9b9eb0176d142a3572b523c827a5043e4869ac87a7c3d179c80cf0f0da4aa9c396a11b96166825422b315ba5c0dc879179770130abd6550926d5b29f60d0f34c5f8883699468bb951b41d0d3aeade653510c9bc6c595622db4897b22ee41092b82f14c25b997d2579a8429b3a6ac42715135a283201a9328fc733feba99a8ffdadadddcf7712f1fbaa37dca420d7ce"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:13:58 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 955.516401][ T6754] overlayfs: unrecognized mount option "xino=oN" or missing value [ 955.560009][ T6754] overlayfs: unrecognized mount option "xino=oN" or missing value [ 955.602083][ T6758] overlayfs: failed to resolve './file0': -2 [ 955.608899][ T7] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 955.674077][ T6761] overlayfs: unrecognized mount option "xino=onre" or missing value [ 955.704030][ T6762] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 955.808798][ T7] usb 2-1: device descriptor read/64, error 18 [ 956.088856][ T7] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 956.278842][ T7] usb 2-1: device descriptor read/64, error 18 [ 956.399323][ T7] usb usb2-port1: attempt power cycle [ 956.808815][ T7] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 956.978853][ T7] usb 2-1: device descriptor read/8, error -61 [ 957.248804][ T7] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 957.419096][ T7] usb 2-1: device descriptor read/8, error -61 [ 957.539105][ T7] usb usb2-port1: unable to enumerate USB device 04:14:00 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:00 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) pipe(&(0x7f0000000040)) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) 04:14:00 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:00 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 958.029006][ T6779] usb usb9: usbfs: process 6779 (syz-executor.5) did not claim interface 0 before use 04:14:00 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 958.105252][ T6774] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.116437][ T6781] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.137846][ T6782] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.166666][ T6778] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.200825][ T6790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 958.203914][ T6786] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:01 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 958.272715][ T6789] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000002480)=""/189, 0xbd}, {&(0x7f0000002540)=""/101, 0x65}, {&(0x7f00000025c0)=""/216, 0xd8}, {&(0x7f00000026c0)=""/99, 0x63}, {&(0x7f0000002740)=""/125, 0x7d}, {&(0x7f00000027c0)=""/98, 0x62}, {&(0x7f0000002840)=""/95, 0x5f}, {&(0x7f00000001c0)}], 0x8, 0xe0b, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="75700100008069723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f666968106c65302c78696e6f3de76bcf5de593053c9717fcbd70980228ccd5aef1ad4d4cf7930a9d7dd20c41838faafd4c746ef57e6e711b5aa3ee6ea2ef"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x200000000000000}, r2, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) clone3(&(0x7f0000001580)={0x400d080, &(0x7f0000000040), &(0x7f00000001c0)=0x0, &(0x7f0000000280), {0x20}, &(0x7f0000000440)=""/219, 0xdb, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 04:14:01 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="5001000024000b0f00000000600000000000000098253913544ca072fb56d63652a5b4fedfccc6396da7bd95d00851376b", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf2502000000500001801400020069705f76746930000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006261746164765f736c6576655f300000600001800800030001000000080001001c9efb7bcd775fda19cf4de0a65e72af62eb885662ee283b442246fb36d9f93b1d6e7226c7a7a9a32bd68776646d1fdd401be463c13da7c015c5d2ceeca957369dd050e5fbcc59552a1f686fcebff546ae622fd8f784a4ad8a8b24d4b6fab0812e758cc102887ff3", @ANYRES32=0x0, @ANYBLOB="0800030004000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006970366772657461703000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000300030000002000018014000200766c616e31000000000000000000000008000300010000000c0001800800030003000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070657264590be91c5ec8e9c32d69723d2e2f66696c65312c6c6f7765726469723d2edabb09"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 958.497450][ T6800] usb usb9: usbfs: process 6800 (syz-executor.5) did not claim interface 0 before use 04:14:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) [ 958.567879][ T6804] overlayfs: unrecognized mount option "up" or missing value [ 958.592012][ T6806] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.606488][ T6807] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.631852][ T6808] overlayfs: unrecognized mount option "upperdY é^ÈéÃ-ir=./file1" or missing value [ 958.641009][ T6811] overlayfs: unrecognized mount option "up" or missing value [ 958.669183][ T6807] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:01 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 958.693557][ T6808] overlayfs: unrecognized mount option "upperdY é^ÈéÃ-ir=./file1" or missing value [ 958.714691][ T6816] usb usb9: usbfs: process 6816 (syz-executor.5) did not claim interface 0 before use [ 958.718805][T24052] usb 2-1: new high-speed USB device number 67 using dummy_hcd 04:14:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004", @ANYBLOB="e5ee93aa9176abe816056868fbbffe25ed613c028645c268bcd3e60e", @ANYRES16], 0x70}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="19ce1e3105e7d97ea0f44053e4d25bc28cf27ff972be7b366d96889e8a45d4b0a025cf2de95bb7ec3955d124631b68678e64266213ef39ff070000d9af39b192239d6fe0163c1fb6c1590a4db47aec5ccda80006c745d4dfb256be4c7403cbdea93f7b75f53eaacc0da325622e21cb3bda0501d84398232c6fc7b1399c2e5af399ca70ad1a247de412f3dc41ddd5", @ANYRES64=r1, @ANYBLOB="00082dbd7800fcdbdf254400000008000300", @ANYRESHEX, @ANYBLOB="0c0099007f000000110000000a0018000303030303030000040008010400080108000d007f000000"], 0x44}}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x28) getdents(r5, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_delroute={0x24, 0x19, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8, 0x6, 0x2000}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20010}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:01 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x34, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x11) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 958.936500][ T6822] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 958.952807][ T6830] usb usb9: usbfs: process 6830 (syz-executor.5) did not claim interface 0 before use [ 958.962764][T24052] usb 2-1: device descriptor read/64, error 18 [ 959.006216][ T6828] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 959.017289][ T6829] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 959.083763][ T6829] overlayfs: unrecognized mount option "xino=onre" or missing value [ 959.099739][ T6828] overlayfs: unrecognized mount option "xino=onre" or missing value [ 959.250124][T24052] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 959.468848][T24052] usb 2-1: device descriptor read/64, error 18 [ 959.598854][T24052] usb usb2-port1: attempt power cycle [ 960.048758][T24052] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 960.268958][T24052] usb 2-1: device descriptor read/8, error -61 [ 960.538816][T24052] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 960.738927][T24052] usb 2-1: device descriptor read/8, error -61 [ 960.868920][T24052] usb usb2-port1: unable to enumerate USB device 04:14:03 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:03 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:03 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:03 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x804000, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x481}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerSir=./bus3workdir\x00\x00\x00\x00ile0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb9a4}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x24) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x400080, 0x80, 0x4c267b016b6239dd}, 0x18) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x18}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000440)={r0, 0x101, 0x100, "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"}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070656572646972dbf3393d5d00463d2e2f6275732c776f726b6469723d2e2f66696c65302c"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) [ 961.250258][ T6855] overlayfs: unrecognized mount option "uppeerdirÛó9=]" or missing value [ 961.251577][ T6860] usb usb9: usbfs: process 6860 (syz-executor.5) did not claim interface 0 before use [ 961.279607][ T6858] overlayfs: unrecognized mount option "lowerSir=./bus3workdir" or missing value 04:14:04 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 961.303992][ T6859] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 961.320032][ T6856] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 961.324895][ T6855] overlayfs: unrecognized mount option "uppeerdirÛó9=]" or missing value 04:14:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 961.363886][ T6864] overlayfs: unrecognized mount option "lowerSir=./bus3workdir" or missing value 04:14:04 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:04 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r1, r1, &(0x7f0000000000), 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000100)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x1, 0x0, 0xae, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) dup2(r2, r0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x4000, 0x0, 0x0, 0x0, 0x3f}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) unshare(0x60000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) [ 961.412895][ T6865] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 04:14:04 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000094) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 961.664411][ T6881] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:04 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 961.713476][ T6891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 961.739018][ T4912] usb 2-1: new high-speed USB device number 71 using dummy_hcd 04:14:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 961.825321][ T6923] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:04 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740), 0x4) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) bpf$LINK_DETACH(0x22, &(0x7f0000001940), 0x4) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x1f, 0x8, &(0x7f0000001840)=[{&(0x7f0000000440)="f4a877bfa9dcada56040a327056c8d94e8c07909988cf8ce41b4831043391ffcf878f26104e39692132385bf4cba17dea28ba54ce7bb53de51be3382b01877c30318b256c0147065a43dff6aa9afc936c8330def93935600da3b8a5b5381e1", 0x5f, 0x2}, {&(0x7f00000004c0)="bf0541177e14f096df3ecc449f7bc8ae9418ff29debfd28e2ff25932b0f1accef174f315c736dfc2aef8e9bc60098c5944b8fa1bf1d133d82bf2feca963819ba49552b3a519d47e3473db8ef953ab99263cbc1a801f9199fcc764bc663f15d1499d97362fa6754072a0b5d7631fab020c559b08c14b00fad59c649604801dd174e75d96c7a41e21425ffec671eddebc62247ee95548804b261704ec5ad401982c437299c1957968b834799ed1ff2e6355d6801f15606cf51c222a32c861390ed621699a1dc0673ea44efb96d7c4bd6b882793b5d56358a27bd4be2f812e125181815b5960899f7112e52748955e745cfa4a7b694d77b29eb7fb99bbb", 0xfc, 0x944}, {&(0x7f00000005c0)="5eb17eded147e792440cc202e4a2f18acae3b014822a021f8a84b95815a7e0bb19261f21dd071b3deaae060f961ea3929d544d3a45c38a2291a08a280cb99e23cee56813259bf42988503b6b8e91c8b7a48f2ae72fa92c1ffa1b98dc2852050367096f7e33e66a8e70c65533f80616bc48f1034433ab3d10b0766cedc1e77eee966c4d0ed246d3dee21f126eb67febeb86ae1c762165708bef4dc4df6a5a741bb552008a5f4afa361ae63ad4ae759981a6a2609536e9d79cf1191b79f97ac37d60731eaba5c3f4b76a6dad6883c2e42cbf97fd07c8613c079078af64e57543fcc3c2aa57a5", 0xe5, 0x8}, {&(0x7f00000006c0)="2e6412a5a5217023faec48ffc3f27504e75abbdce7b780687a14c4ab11d4af5af1c55ea41f7ead7756c4a8eb76da9fd5256a613d45e2c2529f2876eadadd620b17482991d491ea2239905ddc525a13aa4c96894d41668b166d52b21eb5e7a064649615f2a4af92c555ae633e2648567c82", 0x71, 0x8}, {&(0x7f0000000740), 0x0, 0x7fff}, {&(0x7f0000000780)="0611d79196", 0x5, 0x7}, {&(0x7f00000007c0)="613a4948c03df57ef7e9ec0094b4c969f42e6708b2b9b2c6c15e4cd8687fec982c753da9081c33ceceecd466b79f291e521986876b538eba81c84b51c23b584ab3c0ae36a9dded89d1adbe0b68e388bdb673cc060d2bd32bb939670bed", 0x5d, 0x1ff}, {&(0x7f0000000840)="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", 0x1000, 0x3}], 0x8080, &(0x7f0000001900)=ANY=[@ANYBLOB='nod\t\x00\x00\x00nodots,\x00']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x84, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff7ffffc00000003, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 961.885135][ T6921] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x63) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) [ 961.948837][ T4912] usb 2-1: device descriptor read/64, error 18 04:14:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x29, 0x5, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x11, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 962.049092][ T6939] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 962.177415][ T6946] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 962.178372][ T6945] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 962.199422][ T6948] loop0: detected capacity change from 0 to 127 [ 962.211008][ T6947] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 962.258874][ T4912] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 962.267293][ T6950] overlayfs: unrecognized mount option "xino=onre" or missing value [ 962.288818][ T6948] overlayfs: unrecognized mount option "xino=onre" or missing value [ 962.498769][ T4912] usb 2-1: device descriptor read/64, error 18 [ 962.634825][ T4912] usb usb2-port1: attempt power cycle [ 963.048965][ T4912] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 963.229434][ T4912] usb 2-1: device descriptor read/8, error -61 [ 963.518837][ T4912] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 963.718941][ T4912] usb 2-1: device descriptor read/8, error -61 [ 963.849094][ T4912] usb usb2-port1: unable to enumerate USB device 04:14:07 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:07 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e0f6075732c776f726b6469723d2a2f66696c65302c78696e6f3d6f6ee3681971a8d14c5e869f54f0011a2f43798a1d7e555dcce22e26022f90b2da8ef4da14f2d7853914359a2cfe3b2e3b3077ddb2aa0b60b29ede8b1a0ee481a7ba413f21bdf9674c475fbb94f2aabf9f4fba151e96b2dcc41f4f575810a0ecdb17388788d5c7c779a89cca1e44f2d4b31d7e77"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x7f, 0x3f, 0x0, 0x0, 0x400, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x8001}, 0x2a11, 0x7, 0x2, 0x9, 0x9, 0x28a, 0x8, 0x0, 0x200, 0x0, 0xf1fd}, r3, 0xe, r2, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:07 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x4}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00050000818293dd429fdfdda4bf621ce0cb9f97c8e7279e4e4f3b72714ec53599640659044aa13f6c53973d72237a4a4fe52063b97fda981c48708bf5bc134fd9c7d09ac997af9052c6269e221b6c20723e5645ad07e2d20211d8fd450f061e856e5929d4adda42a0f96e2eb04aa45367ce7f432e2b2d005ac3dade0a31c98704298f2f0b2ef348cb0314d2130a233ce8fa14338e25000000000000000000000080", @ANYRES16=0x0, @ANYBLOB="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"], 0x500}, 0x1, 0x0, 0x0, 0x4040000}, 0x11) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75707065726469723d2e2f64696c65312c06007765726469723d2e0a931bccee5dbed6dcc87e51ad2f6275732c776f726b6469723d2e2f66696c65302c03696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r2 = accept$inet6(r1, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0xffff8001, 0x6, 0x401, 0x0, 0x7, 0x1020001}) 04:14:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 964.557495][ T6973] overlayfs: unrecognized mount option "xino=onãhq¨ÑL^†ŸTð/CyŠ~U]Ìâ.&/²ÚŽôÚò×…95š" or missing value [ 964.591288][ T6972] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 964.604293][ T6974] overlayfs: unrecognized mount option "" or missing value [ 964.622970][ T6977] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:07 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 964.664642][ T6984] overlayfs: unrecognized mount option "xino=onãhq¨ÑL^†ŸTð/CyŠ~U]Ìâ.&/²ÚŽôÚò×…95š" or missing value [ 964.685503][ T6977] overlayfs: unrecognized mount option "xino=onre" or missing value [ 964.696661][ T6974] overlayfs: unrecognized mount option "" or missing value 04:14:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000440)={0x4, {{0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x38, 0x140d, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004005}, 0x4008011) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) epoll_create1(0x80000) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x2, 0x1000], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44010}, 0x4000012) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x28e, @local, 0xe3}, @in={0x2, 0x4e22, @private=0xa010101}], 0x2c) 04:14:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 964.868932][ T5] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 965.028627][ T6995] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 965.059418][ T5] usb 2-1: device descriptor read/64, error 18 [ 965.099429][ T7000] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 965.125512][ T7002] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 965.173421][ T7005] overlayfs: unrecognized mount option "xino=onre" or missing value [ 965.193326][ T7006] overlayfs: unrecognized mount option "xino=onre" or missing value [ 965.328890][ T5] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 965.518861][ T5] usb 2-1: device descriptor read/64, error 18 [ 965.638984][ T5] usb usb2-port1: attempt power cycle [ 966.048824][ T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 966.219185][ T5] usb 2-1: device descriptor read/8, error -61 [ 966.488787][ T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 966.658882][ T5] usb 2-1: device descriptor read/8, error -61 [ 966.789236][ T5] usb usb2-port1: unable to enumerate USB device 04:14:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c7701040000006100002f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:10 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:10 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:10 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:10 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x6, &(0x7f00000001c0)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000540)={r0, 0x7, &(0x7f0000000440)=[0x400, 0x76f38602, 0x7, 0xffffffff, 0x2, 0x907, 0x1], &(0x7f0000000480)=[0x10000, 0x2, 0x4, 0xaab6, 0x1, 0x1, 0x8, 0x2, 0x64ef], 0x20, 0x7, 0xf0b1, &(0x7f00000004c0)=[0x1af, 0x9, 0x1e0b, 0x56a, 0x7, 0x9, 0x3f], &(0x7f0000000500)=[0x1, 0xda, 0x1, 0x10001, 0x6, 0x101, 0x3, 0x2, 0x8000]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="47fce05c32638c2ae97bd775707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:10 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000440)="56b26836d405497ead087d73fbea159608153c44371eaad9891245496c36b78bb662e89484d1321445be8609338a1f3cdbe34b8b72596cc3b6b5f91fa8e139568b66222195dc8534eb23d629031ee1cc1fed91ef67e8512c0f8e1a6d314f5bb076cbd19422f971538d54e6ff7f8e6e1a0dd22ab48dab918d262e7bec272a12c35949062ec0d5fcde22de3959eca03f3a96342b0db14570892c17f65cd3a2241c44d66e6f23cba94dfc5605e9c432a4f72caf8d325b5e2a6b74be2cd50b3995b8ee46b69f96e52813b7af11ae9faa76", 0xcf, 0x4000004, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperd\x00\x00=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:10 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 967.626577][ T7024] overlayfs: unrecognized mount option "w" or missing value [ 967.631914][ T7027] overlayfs: unrecognized mount option "Güà\2cŒ*é{×upperdir=./file1" or missing value [ 967.658259][ T7028] overlayfs: unrecognized mount option "upperd" or missing value [ 967.684685][ T7026] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 967.700115][ T7027] overlayfs: unrecognized mount option "Güà\2cŒ*é{×upperdir=./file1" or missing value [ 967.727049][ T7024] overlayfs: unrecognized mount option "w" or missing value [ 967.728423][ T7028] overlayfs: unrecognized mount option "upperd" or missing value 04:14:10 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:10 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070c18365726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d3b2f66696c65302c78696e6f3d"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:10 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./Cile0,xino=on']) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x4429c2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1d}]}, 0x2c}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:10 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7505000000000000002e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469ce0e6d531801deef03e17459723d2e2f66696c65302c78696e6f3d6f6e"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x18010e0, &(0x7f0000000400)={[{@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@xino_on}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 04:14:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 967.950261][ T7045] overlayfs: unrecognized mount option "uppÁƒerdir=./file1" or missing value [ 967.992341][ T7054] overlayfs: unrecognized mount option "uppÁƒerdir=./file1" or missing value [ 967.994331][ T20] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 968.035931][ T7052] overlayfs: unrecognized mount option "u" or missing value [ 968.043363][ T7055] overlayfs: failed to resolve './Cile0': -2 [ 968.069092][ T7053] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:10 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x1, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1}}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f77df3078b1a2d5ceed7f75732c776f726b6469723d2e2f66696c656f3d6f6ea84b7d09f5ee87a65d5e4f013d9e5dbdfd2d"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x28) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 968.093846][ T7052] overlayfs: unrecognized mount option "u" or missing value [ 968.136529][ T7055] overlayfs: unrecognized mount option "xino=onre" or missing value [ 968.214276][ T7065] overlayfs: unrecognized mount option "lowß0x±¢ÕÎíus" or missing value [ 968.245325][ T7065] overlayfs: unrecognized mount option "lowß0x±¢ÕÎíus" or missing value [ 968.258918][ T20] usb 2-1: device descriptor read/64, error 18 [ 968.538934][ T20] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 968.748775][ T20] usb 2-1: device descriptor read/64, error 18 [ 968.868903][ T20] usb usb2-port1: attempt power cycle [ 969.310921][ T20] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 969.509157][ T20] usb 2-1: device descriptor read/8, error -61 [ 969.798777][ T20] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 970.018892][ T20] usb 2-1: device descriptor read/8, error -61 [ 970.149077][ T20] usb usb2-port1: unable to enumerate USB device 04:14:13 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:13 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:13 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2ed921696c65252c6c6f7765726469723d2e2f6275732c776f476aa1c9d0488e2aa56d0b159da8726b6469723d2e2f66696c65302c78696e6f3d6f6e"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="70df5e77e88d6693000000f3ab543d5a8aba2adb5d73795e18562d13c5c432df98366bcb54fb0fca897b31fb1fb5def014152ef4d9b1c745", @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f40000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x7c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c86ad1bf104946890795a02f9d6b4e812971095731c75158"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1a7a721b7697861c7bf24c84bfb59081cf7a2a7ab3deea95"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:13 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7570706572e469723d2e2f66696c65312c6c737765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 970.717267][ T7086] overlayfs: unrecognized mount option "woGj¡ÉÐHŽ*¥m ¨rkdir=./file0" or missing value [ 970.729614][ T7083] overlayfs: unrecognized mount option "upperäir=./file1" or missing value 04:14:13 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 970.760723][ T7085] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 970.782764][ T7087] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 970.809537][ T7083] overlayfs: unrecognized mount option "upperäir=./file1" or missing value 04:14:13 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000440)="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", 0xfffffeb8, 0x20000080, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) r2 = geteuid() setreuid(r2, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x4000, &(0x7f00000014c0)=ANY=[@ANYBLOB='nfs_export=off,nfs_export=off,nfs_export=on,upperdir=./file1,xino=on,metacopy=on,hash,audit,euid<', @ANYRESDEC=r2, @ANYBLOB="3d15caada0d22c16"]) 04:14:13 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2fcf32ac6233540a99776572647c723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6a"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 970.861574][ T7085] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:13 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000b0f000000006000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100726564002401020014000100000000000000000000000000000000000800060000020000040102"], 0x150}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@newneigh={0x80, 0x1c, 0x400, 0x70bd28, 0x25dfdbfc, {0x1c, 0x0, 0x0, r1, 0x4, 0x28, 0x3}, [@NDA_MASTER={0x8, 0x9, 0x6}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VLAN={0x6}, @NDA_DST_MAC={0xa}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_DST_IPV6={0x14, 0x1, @private1}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_MASTER={0x8, 0x9, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0c1}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 971.053751][ T7105] overlayfs: unrecognized mount option "hash" or missing value [ 971.083410][ T7107] overlayfs: unrecognized mount option "xino=oj" or missing value 04:14:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 971.123222][ T7111] overlayfs: unrecognized mount option "hash" or missing value [ 971.142754][ T7107] overlayfs: unrecognized mount option "xino=ojre" or missing value 04:14:13 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6eece73fe5e3e15e1ea7ad9f502b826df3ccf71f3e9c70da9071714a19f477e15772fcfba9969b9f7ffbffffffffffffff9b9958b9c4245eb2b447d6113d47642e5dc54c7608a7f41dc2283acfc408d386f9d749c59b89d5b3b1c6ea4a2f49d6ddc19cee475b6bcd3cb505e8c14b9579e527c3b8537bed3021a575e825da7931df4cff005adf791c79d850f1b8389beccb049fbc2805aea9071ca0d9dd19f1257694c88a75ab0ffb4d3060714abe2236ab79ccaf4573718f5a38128c75cccdf6b2659d2d738a7be88e91e37203ac984b02802af06c30fbffffff5b20235b727454ad74dda0e0339e8c64d80f84a517c34aa86acd286a556fa4a696324b80777197e23c2c48fca3588b2825ff41d61d42e636b1d85687a72fdacb253bc11f3920c263316038fc180af235c0a1dee68047cb75d9e64b143fd3f1ee55639b4bc5cf8df45d658db1c84bc8019c41733d3ae4f3fe9ed8b5467ac85b633e0a45a07e86e2fc3b2148c22bc6"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:13 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x70001}, 0x40840) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000340)=""/157, 0x200003dd) [ 971.209537][ T20] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 971.237677][ T7116] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 971.253550][ T7114] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:14 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 971.308875][ T7119] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2210010, r0, 0xea570000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000000440)='./bus/file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [{0x2, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x5, 0xee00}, {0x2, 0x7}, {0x2, 0x2, r2}], {}, [], {0x10, 0x2}}, 0x5c, 0x3) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 971.413849][ T7127] overlayfs: unrecognized mount option "xino=onìç?åãá^§­ŸP+‚móÌ÷>œpÚqqJôwáWrüû©–›Ÿûÿÿÿÿÿÿÿ›™X¹Ä$^²´GÖ=Gd.]ÅLv§ôÂ(:ÏÄÓ†ù×IÅ›‰Õ³±ÆêJ/IÖÝÁœîG[kÍ<µèÁK•yå'øS{í0!¥uè%Úy1ßLÿ" or missing value [ 971.438992][ T20] usb 2-1: device descriptor read/64, error 18 [ 971.471017][ T7125] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 971.539129][ T7125] overlayfs: unrecognized mount option "xino=onre" or missing value [ 971.618199][ T7136] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 971.666358][ T7138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 971.726573][ T20] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 971.774839][ T7143] overlayfs: unrecognized mount option "xino=onre" or missing value [ 971.928903][ T20] usb 2-1: device descriptor read/64, error 18 [ 972.049255][ T20] usb usb2-port1: attempt power cycle [ 972.468834][ T20] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 972.659137][ T20] usb 2-1: device descriptor read/8, error -61 [ 972.958860][ T20] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 973.148823][ T20] usb 2-1: device descriptor read/8, error -61 [ 973.268943][ T20] usb usb2-port1: unable to enumerate USB device 04:14:16 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:16 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:16 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./bus/file0\x00', 0x5, 0x5, &(0x7f0000000880)=[{&(0x7f0000000440)="82205f858fcf1e0cae8f6d2eb79c1e523d74fa58b43f1b67ea72a5007409100f0057d562f6a2be046748c550076d5ceaf7f546eb89504a2ad6bcd5ad237b4dab833f6eef3c1c5422989994855fa16bcf8faf7084a5a5205b65d506ce5e33fdc04525ab39376cae5fc64bfc876934bcd6419bda87c38ad57da213b71e8f33e5323223", 0x82, 0x8001}, {&(0x7f0000000500)="a7a67e86ee8d6742f8d86f37a267bf3b219fc7ce682aeace63c79b7391e9ce618b47411298f320f3802334933f78803ab744965a0dc01f80a0f3d2bb643d5a114d0d30992abcd2da3b43bab3a88505490770a399012e1b3dd41290aeff5a83481b6bb2b366b389bb64079c03a51a9b6fd4f5b6ff6d11511676d82663e8d8e998f5743b2fee9a9cd555233567af5209c7a3230bb1a0628df3719fe03f3b99178cdf4f6f0ec985f696f16732ef68ddd517f00e5649345ef8ca36a70440e13be887a6f4", 0xc2, 0x20}, {&(0x7f0000000600)="5bf660c790ed107fda476f51406d7c6d2833509f1501a5cecaf7fbed426e573db6ef0eeb54bfab20175ab13e5f758e5607343276dfd4e6978570786978699ccd28482cf666d632486d9fe34fc00630eac896e62f9b034dcfd5be4fc6d05f7e47cda3340d2ca65b61a000c641304b178ab52c8489913f35d2e71a7234d160cf233c4d1b47cf722046016d58aeb659f9181c69bc6d06e36f052e16c5b2a8e7c69fb28aba29817de9096e02259c8f23285452ebdbdc39709a0b5de6ed666b072aa3bf2db698e8ac8635c9a3d610bd", 0xcd, 0x1}, {&(0x7f0000000700)="335dae477bd8daab09371eb7aee5e971149de7765de903f2dbbd30146db063db52a19ebfe16a15dcb1a51178851ca4014e05d83e6f3a00eda05f8a5dd90985cdf6488a2ed118bb69a9f5ac98d512a6f6a08a0ab6ddca4fd150391115421d37d33c5c2c080a0e4ff72ae9c6d881def00823024f344209afe659b585f0f0c1e1c17cc5789e17fd4e53d466ab50462e6cedfef9374b901ae4fbff08cb2da794ef309595da1737e19ba0c8f4d6ec07573f3ba820721a04193de1c9f9a937b3d231ddee75f0a6358ed59aa68fc931ba8429f88ea5ab3e6d59019315708339309c581cb4c8bffba16122191db358bb93ca6b16947e07", 0xf3, 0x5}, {&(0x7f0000000800)="dae508fd88c8e6f6dc1f5f8576b14c01203c78d0725cfaa4014849aaf418801cc7ccb60869318c80509bdc1172be57e35934ba884bd2af47589d2df2bc2c5389cb74605e053cf7c240082d0ad6d642c495f10c2c134d711a543ccf34a6af", 0x5e, 0xfffffffffffffff9}], 0x0, &(0x7f0000000900)={[{@nouser_xattr}, {}, {}, {@fault_injection={'fault_injection', 0x3d, 0xd11}}, {@acl}, {}, {}, {@nouser_xattr}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsmagic={'fsmagic', 0x3d, 0xf19}}, {@smackfsroot={'smackfsroot', 0x3d, ':P^-)'}}]}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:16 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:16 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x101c55949f9bc4f6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe2(&(0x7f0000000a80)={0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_NEW_MPATH(r1, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) preadv(r0, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/65, 0x41}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/182, 0xb6}, {&(0x7f0000000940)=""/132, 0x84}], 0x8, 0x0, 0x200) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000280)='wlan0\x00', &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e0963bf4e65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:16 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75887065726469723d2e2f66696c65312c6c82726b6469723d2e0266696c653000000000000000fcff00"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:16 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 973.962595][ T7162] overlayfs: failed to resolve './file0': -2 [ 973.963866][ T7161] overlayfs: failed to resolve '. c¿Ne0': -2 [ 973.988893][ T7163] overlayfs: unrecognized mount option "uˆperdir=./file1" or missing value [ 974.002910][ T7159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 974.015996][ T7161] overlayfs: failed to resolve '. c¿Ne0': -2 [ 974.033212][ T7162] loop4: detected capacity change from 0 to 16383 04:14:16 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffac, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:16 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:16 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 974.109535][ T7163] overlayfs: unrecognized mount option "uˆperdir=./file1" or missing value [ 974.135479][ T7162] erofs: Unknown parameter 'fault_injection' [ 974.197924][ T7168] overlayfs: unrecognized mount option "xino=onre" or missing value 04:14:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 04:14:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440)="3712323c1b68f0de87e4424dba73a6f6ac9089d736ec2f2b711c09e576e9b0929e0fb4d8427fdfe6f4378e5919c46933435d80a06e480e0e3b7b3dfd90c9e953a0e6c5fcef564e4dea95fd40d00d90bffc958f0ced64e0abbe1604bb32cad5249c504172f35e64255de06373fabdd92d884f054109e2c6549e16c95fb6b8a9e626c3b25fae196d1f57cdcf1470394bbd10fb", 0x92, 0x48050, &(0x7f00000001c0)={0xa, 0x4e21, 0x10001, @loopback, 0x35a}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x2a9) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000400)=ANY=[@ANYRES16=r2]) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x20000000) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 974.298853][ T4912] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 974.411453][ T7185] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 974.428320][ T7183] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 974.508043][ T7183] overlayfs: unrecognized mount option "xino=onre" or missing value [ 974.558923][ T4912] usb 2-1: Using ep0 maxpacket: 8 [ 974.709438][ T4912] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 974.717815][ T4912] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 974.745675][ T4912] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 974.776471][ T4912] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 974.890210][ T4912] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 974.899520][ T4912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 974.907560][ T4912] usb 2-1: SerialNumber: syz [ 975.715374][ T7205] udc-core: couldn't find an available UDC or it's busy [ 975.722475][ T7205] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 04:14:19 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x20, 0x1) 04:14:19 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r1, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3ec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7c}}}}, [@NL80211_ATTR_IE={0x154, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x0, 0x1, 0x0, {0x7f, 0x80, 0x0, 0x372, 0x0, 0x1, 0x1, 0x2}, 0x800, 0xdf74, 0x80}}, @perr={0x84, 0x11b, {0xb3, 0x11, [@not_ext={{}, @device_b, 0x0, "", 0x9}, @ext={{}, @device_a, 0x2, @device_b, 0x27}, @not_ext={{}, @device_a, 0x0, "", 0x2f}, @ext={{}, @broadcast, 0x7ff, @device_b, 0x1a}, @ext={{}, @device_b, 0xff, @device_b, 0x42}, @ext={{}, @device_a, 0x4, @device_b, 0x32}, @not_ext={{}, @device_b, 0x401, "", 0x39}, @ext={{}, @broadcast, 0x6, @device_a, 0x35}, @ext={{}, @device_a, 0x8, @broadcast, 0x40}, @not_ext={{}, @broadcast, 0x1, "", 0x38}, @ext={{}, @device_a, 0x1000, @device_b, 0x9}, @not_ext={{}, @device_b, 0xb6, "", 0x3c}, @not_ext={{}, @broadcast, 0x3ff, "", 0x5}, @ext={{}, @device_a, 0x7fff, @device_b, 0x12}, @ext={{}, @device_b, 0x1ff, @device_b, 0x41}, @not_ext={{}, @device_b, 0x9, "", 0x41}, @ext={{}, @device_a, 0x1, @device_a, 0x32}]}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x1e, 0x1f, @device_a, 0x0, 0x40}}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x22, 0x6, 0x14, 0x8}}, @cf={0x4, 0x6, {0x7f, 0x8, 0xc921, 0x5}}, @supported_rates, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfc, 0xab, 0x8}}, @random_vendor={0xdd, 0x72, "02efa7ea8ec79603ec4695138d3940beda37e6017ea87590d092cef5e6a4accde39e39e5c542a331e5c82c0b29a9ff06bcb6c730f8c01fa71eb811a882da4e96b64f7457f904fe15d0c471b485f5d0d3b3df4a3fbfe0a672ce7ec0253a484f84fe356f760ed36774a568d2f6d89722a05cc6"}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x0, 0x3f, @broadcast, 0x3ff, 0x57bc5a23, 0xa0ec}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x89f}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}, @NL80211_ATTR_IE={0x2e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x23, 0xb9, 0x9}}, @link_id={0x65, 0x12, {@random="b042248acdde"}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x3}}, @supported_rates={0x1, 0x8, [{0x36}, {0x3}, {0xb, 0x1}, {0x6c, 0x1}, {0x24}, {0x24}, {0x5, 0x1}, {0x6}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff}, @NL80211_ATTR_IE={0x180, 0x2a, [@measure_req={0x26, 0x7d, {0x7f, 0x7, 0x1, "9c422b894610e579ddba6d1cb4e01f553e281cc76559539339260eb5ade19762919e2ef3bb3706cf7cca3499eea76a39c52af9004b22c077753de873a0cbe03a69cf9d7cdd28e2a775138cfe546b10b2a14f5fccb8fcdd132888642b6870859858b58d3e4963582d525d98d5d0d82a9246dc9153624eae1981ed"}}, @ibss={0x6, 0x2, 0xfffe}, @measure_req={0x26, 0xef, {0x20, 0xf7, 0x1f, "3a7eab83dd8cf9a9e051f69dd514b3a6525e1238232943d5bd23bd2086ef60513c9b003247af22b9f5089e1cf03b1d885d1532eb09ae86b086839c68dc7616ee1c0bfdc49357e74900655ac268317c5dc7bf9ef1b4908fd2da825eb37e4bd59086e409a8b5bbebef7ebffc2c4d1f713b59c7535db992e651785dba6467e3d73e178050a45314a16e9a5d56af26d0f711ad0a062077d860f37bef85c9475aca3a1c65370c8b33916592afc611587d3ba1822570572dc4b1406da5caf60a2e415201d3f9b65a545eccbe351282811f0f8407004c62125df8db3a3bd7f93ec1878317e085f889180b8be76674f7"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x37, 0x7}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000855}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726498723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:19 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 04:14:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0xe0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7fff, 0x8001, 0x7, 0x8, 0x0, 0xfffffffc]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x6, 0x7, 0x200]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4dc}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x10000, 0x5, 0x958a]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000440)="ee46b25f82a870bb203680af422a5bbc84fa459dbadf44e3a3ece566536d949c83a73c7eb62778399228ba064eeb8ee4d6654a16a57108008a73b102f34ce292a51b715364db7c6ee500198716e5c650bf52af7a41ab6d1db26864508129eccc4b3002300b2d3e772c3fcb031a03572c6aa814be5e462fb5ddb90bbe30c531213c35558135b929920a288df93792747c8402a578c9e778fde0606af41f4a539dffa848598658cc35a77e7b972448463b", 0xb0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x510, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x2, &(0x7f0000000500)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup2\x00'}}]}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 976.929087][ T4912] usb 2-1: USB disconnect, device number 87 [ 977.063768][ T7218] overlayfs: unrecognized mount option "upperd˜r=./file1" or missing value [ 977.085833][ T7223] overlayfs: unrecognized mount option "defcontext=sysadm_u" or missing value [ 977.096839][ T7216] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:19 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 977.113492][ T7219] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 977.125680][ T7221] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 977.160317][ T7224] overlayfs: unrecognized mount option "upperd˜r=./file1" or missing value [ 977.161422][ T7223] overlayfs: unrecognized mount option "xino=onre" or missing value [ 977.190595][ T7223] overlayfs: unrecognized mount option "defcontext=sysadm_u" or missing value [ 977.218456][ T7221] overlayfs: unrecognized mount option "’8"" or missing value 04:14:19 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:20 executing program 0: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r1 = fork() perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x4a, 0x80, 0x3, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x110, 0x5, 0x0, 0x3, 0x3, 0x40, 0x7, 0x0, 0x6, 0x0, 0xfff}, r1, 0x7, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x5, 0x4, 0x5, 0x7, 0x0, 0x9, 0xc0c, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x7b1}, 0x2000, 0x4, 0x800, 0x1, 0x8001, 0x6, 0x0, 0x0, 0xd1d, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x9) chroot(&(0x7f0000001700)='./file2\x00') mount$overlay(0x400002, &(0x7f0000000400)='./bus\x00', &(0x7f0000000100), 0x66040, &(0x7f00000018c0)=ANY=[@ANYBLOB="d3ebc08197feab9ee93541dc1e20ab26062bd0a6d381a62cad46bd140ed2843cbd009a2d07ebdc0d6c68d241f5a78816342004de957dfd35a523ebb56c473c2d5fb911fd95cb4c57f00be0fd62f61f81adafc664007916ea90b4e3b17eedd3215b93ff5624b74d9158cc4e880d256c52c3a6687229664075b61431fb945b856b2112d9fc4cd7ba27a7bf3ee342192c4cee0d03d8ad72c8628df4174cfe33262755b93327a65110b0e0dd24390439fedf996c519a67a28c10912fefd668b97ced0e4a4d299f750569dffd613c8caf20e39edd34280556fac5a174df78c017478af4cab18474", @ANYRESOCT=r2]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x100000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd00043872f75037030000000000000017b8c119418ff0501af4d6e74703c48f93b8", 0x48}, {&(0x7f0000000540)="fc647735490b65afe7a6c37cfea9ce0fa723de45cf9c7c29da10429dfed3a6514e7adc2977c6eb8f8bb561e2b9f15fea624f9bf830eb99222d3172ba14a08f9cc9ae5e872153c3505fd30e689f788b0c6546511a223f34ad9bfb9b5c7875957925004f155bc4aadbfbf1b57780b4c36af742e4fd8f32c3d7ae7cd75619eebbc0", 0x80}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000280)="26e972494e3fbc29bde9c2419abb5487b922f9da1ed45fbc", 0x18}, {&(0x7f00000015c0)="d774464b6166e74a3b135b60039fa50ec6dbed9de53d10f4e92fd19d145e1324c70d2c0afa175fc255e294072ce698627e2fb925ceff51c799c8e18950fd548a3e20d87a677ff0eba2efdc26b824cf104c06796874c64701e7269578e1dde5db725527948b01579788df869149ca3d4b8115b6398bc1517bfaea4ee5e6cdd4e6489e82c812ad559b49d62bb666429683afceef7e17f65f937f6aafd630f8dfa8a3e84c0d1171beac9ec9b61ea88270f0e75fe9c8b6f546eafb07350d", 0xbc}], 0x5}, 0x0) 04:14:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070657264e9723d2e2f6e696c65312c6c6f776572dbc2caf46d0d507a732c776f726b6469723d2e2f66690900302c78696e6f3d6f6e"]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065724638723d2e2f66696c653175732c77e8006b6469723d2e2f66696c65302c79696e6f3d6f6e"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = getpid() ptrace(0x10, r1) mkdir(&(0x7f0000000200)='./file1\x00', 0x20) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x7b, 0x82, 0x1, 0xdf, 0x0, 0x5, 0x52, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x15, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x7601, 0xfffffffffffffe00, 0x4, 0x2, 0x9, 0x101, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff9}, r1, 0xf, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 977.413871][ T7240] vhci_hcd: default hub control req: 000a v0009 i0000 l19 04:14:20 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000008000000007000000080001005f00000008000300", @ANYRES32=r1, @ANYBLOB="0c00990000000000000000000800050006000000240017800400030004000200040006c70757e5fd4ae702247ff09442000400020004000300040006000400050004000100140004"], 0x70}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040000080211000000000022e02e15f18c"], 0x20}, 0x1, 0x0, 0x0, 0x20048060}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65313c6c65726469723d2e2f6275732c776f726b6469723a070000000000002c78696e6f3d6f6e172f55c2c293ed33a5f44858d23dcb1059b636ba18203e4eb19f2d3a9b53"]) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3f}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 977.488876][ T4912] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 977.502933][ T7250] overlayfs: unrecognized mount option "upperdér=./nile1" or missing value [ 977.550425][ T7250] overlayfs: unrecognized mount option "upperdér=./nile1" or missing value [ 977.556671][ T7253] overlayfs: unrecognized mount option "upperF8r=./file1us" or missing value [ 977.565113][ T7244] overlayfs: "xino" feature enabled using 2 upper inode bits. 04:14:20 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 977.629118][ T7253] overlayfs: unrecognized mount option "upperF8r=./file1us" or missing value 04:14:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000009e0e7509a14c339fad26b6de7ec684c3ebac4d71452a8704e6ec47fdd16c9be54300f72e4ab0614ea8842bb96376080d", @ANYRES16=r2, @ANYBLOB="0002000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x80001}, 0x22000080) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fbdbdf250500000006001b004e200000050020000000000014002000fc000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c00000000000000003d2e2f01000000776f726b6469723d2e2f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0xa, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 977.678260][ T7259] vhci_hcd: default hub control req: 000a v0009 i0000 l19 [ 977.705457][ T7261] overlayfs: unrecognized mount option "workdir:" or missing value [ 977.758630][ T7264] overlayfs: unrecognized mount option "workdir:" or missing value [ 977.758817][ T4912] usb 2-1: Using ep0 maxpacket: 8 [ 977.819201][ T7265] overlayfs: missing 'lowerdir' [ 977.827449][ T7268] vhci_hcd: default hub control req: 000a v0009 i0000 l19 [ 977.869163][ T7265] overlayfs: missing 'lowerdir' [ 977.929028][ T4912] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 977.933937][ T7271] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 977.937490][ T4912] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 977.937514][ T4912] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 977.975713][ T4912] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 978.073531][ T4912] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 978.090744][ T4912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 978.110128][ T4912] usb 2-1: SerialNumber: syz [ 978.928362][ T7287] udc-core: couldn't find an available UDC or it's busy [ 978.935472][ T7287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 04:14:22 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0xd304}, {0xffffffffffffffff, 0x80}, {r1, 0x420}, {r2, 0x77cc7d3ab71ea7f0}], 0x5, &(0x7f0000000480)={r3, r4+10000000}, &(0x7f00000004c0)={[0xbab]}, 0x8) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x74) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c78696e6f3d6f6e57b8d55749f95d0ddb98e4b907f999df5fc55ec7ed02ad7df5dfab2cda677a57411a9e83cd3c005f6930899938f1aaa5fde18d2151"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d6469723d2e2f6275732c776f726b6469722f44ee87306c65302c7801006f3d6f6e00"/55]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) getdents(r1, &(0x7f0000000340)=""/157, 0x9d) 04:14:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x0, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f62b2732c77a35d0b12f3dd826f726b6469723d2e2f66696c65302ca36d610d11b7a2b9110bdf981860654bbf58395421bc8c206383a35d936018215de0991efb57c04f31185ce9e8589573395eef627b5f0ebe9236645ff566c40fb50b"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = getuid() setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), &(0x7f0000000440)=@v3={0x3000000, [{0x7fffffff, 0x4}, {0x1, 0x5}], r3}, 0x18, 0x2) 04:14:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff110701030009"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:22 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 980.142171][T24052] usb 2-1: USB disconnect, device number 88 04:14:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x0, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 980.257222][ T7301] overlayfs: unrecognized mount option "workdir/Dî‡0le0" or missing value [ 980.274803][ T7300] overlayfs: unrecognized mount option "w£] óÝ‚orkdir=./file0" or missing value [ 980.294700][ T7298] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 980.329819][ T7305] overlayfs: unrecognized mount option "xino=onW¸ÕWIù]Û˜ä¹ù™ß_Å^Çí­}õß«" or missing value [ 980.344230][ T7300] overlayfs: unrecognized mount option "w£] óÝ‚orkdir=./file0" or missing value 04:14:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x0, 0x9, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000f204653700f66ecb4c38695829732c7bbb448097e5d630bc8b42290f868d4402550bab86688a226d6cb441a0b43ef12860e04054fb72b3a8aedeec25e4e2f99ad6002bc03d6197e2715158b6fcc15b3a3961f88b58d4c11214d1e23f5a637ad5fee710c18415cc617339052cfc87719f9ee0efe4a375dc44dbe7dda817bcfe3a2022768c471d84777e9b86ced8f2221d014d06093a83cc2c65c3a4ea9afa81157ef6c2adfc7d213a52c46487b3", @ANYRES16=r2, @ANYBLOB="00002dbd7000ffdbdf250600000006001b004e24000014000800766972745f7769666930000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x804a095) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x4a) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) truncate(&(0x7f0000000500)='./bus\x00', 0x40) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x82080, &(0x7f00000005c0)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [{@fsname={'fsname', 0x3d, '.'}}]}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x0, 0x0, 0x13, 0x1000, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) [ 980.564381][ T7321] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 980.568638][ T7323] overlayfs: failed to resolve './file0': -2 04:14:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 980.610884][ T7323] overlayfs: unrecognized mount option "xino=onre" or missing value [ 980.718939][T24052] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 980.768941][ T7332] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 980.984660][T24052] usb 2-1: Using ep0 maxpacket: 8 04:14:23 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x204, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0xe2}, 0xffffffffffffffff, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uppele1,lowerdir=./bus,workdir=./file0,xino=on\x00\x00\x00\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000040)="65899125a76f1a17f5786d5aee171a9cbc0f78"}) 04:14:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 981.070783][ T7305] overlayfs: unrecognized mount option "xino=onW¸ÕWIù]Û˜ä¹ù™ß_Å^Çí­}õß«" or missing value [ 981.131544][T24052] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 981.143510][T24052] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 981.179495][T24052] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 981.191617][ T7344] overlayfs: unrecognized mount option "uppele1" or missing value [ 981.202625][ T7342] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 981.210469][T24052] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 981.267461][T24052] usb 2-1: config 250 has no interface number 0 [ 981.277178][ T7346] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 981.284855][T24052] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 981.334682][ T7346] overlayfs: unrecognized mount option "xino=onre" or missing value [ 981.347802][T24052] usb 2-1: config 250 interface 228 has no altsetting 0 [ 981.378011][ T7344] overlayfs: unrecognized mount option "uppele1" or missing value [ 981.449572][T24052] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 981.467149][T24052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.482020][T24052] usb 2-1: SerialNumber: syz [ 981.549742][T24052] hub 2-1:250.228: bad descriptor, ignoring hub [ 981.556120][T24052] hub: probe of 2-1:250.228 failed with error -5 [ 982.304368][ T7366] udc-core: couldn't find an available UDC or it's busy [ 982.311513][ T7366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 04:14:26 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff110701030009"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 04:14:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66697765312c6c00000000646972572e2f65a7216275732c676f726b6469723d2e2f66696c65302c78696e6f"]) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) 04:14:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x90f, 0x28101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:14:26 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:26 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x240941, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{0x0, 0x3, 0xb8, 0x8, 0xc787, 0x80000001, 0x4, 0x7fffffff, 0x5, 0x80, 0x5, 0xffffffff, 0x7, 0x3, 0x200}}) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 983.427622][ T7378] ------------[ cut here ]------------ [ 983.457881][ T7378] usb usb9: BOGUS control dir, pipe 80000180 doesn't match bRequestType 80 [ 983.460854][ T20] usb 2-1: USB disconnect, device number 89 [ 983.474247][ T7379] overlayfs: unrecognized mount option "l" or missing value 04:14:26 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff110701030009"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 983.510323][ T7374] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.524055][ T7375] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.524579][ T7377] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.534503][ T7378] WARNING: CPU: 0 PID: 7378 at drivers/usb/core/urb.c:410 usb_submit_urb+0x149d/0x18a0 [ 983.553217][ T7379] overlayfs: unrecognized mount option "l" or missing value 04:14:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x4880) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) [ 983.601495][ T7390] overlayfs: unrecognized mount option "xino=onre" or missing value [ 983.610574][ T7383] overlayfs: unrecognized mount option "xino=onre" or missing value [ 983.614368][ T7378] Modules linked in: 04:14:26 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 04:14:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='./file0\x00') mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$isdn_base(0x22, 0x3, 0x0) fsetxattr(r2, &(0x7f00000001c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000480)=',)!/#\x00', 0x6, 0x2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_vlan\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 983.661945][ T7378] CPU: 0 PID: 7378 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 04:14:26 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x5, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 983.707816][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.744839][ T7378] RIP: 0010:usb_submit_urb+0x149d/0x18a0 [ 983.766482][ T7378] Code: 7c 24 40 e8 d5 d0 1f fc 48 8b 7c 24 40 e8 eb 1f 0c ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 60 a7 27 8a e8 04 c9 91 03 <0f> 0b e9 a5 ee ff ff e8 a7 d0 1f fc 0f b6 1d 37 36 02 08 31 ff 41 [ 983.807029][ T7400] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.842000][ T7397] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.872302][ T7378] RSP: 0018:ffffc900031bf9a8 EFLAGS: 00010286 [ 983.911277][ T7378] RAX: 0000000000000000 RBX: ffff888020fdb058 RCX: 0000000000000000 [ 983.925754][ T7401] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 983.933620][ T20] usb 2-1: new high-speed USB device number 90 using dummy_hcd 04:14:26 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418ff0501af4d6e74703c48f93b8", 0x48}], 0x1}, 0x0) [ 983.970851][ T7378] RDX: 0000000000040000 RSI: ffffffff815d6855 RDI: fffff52000637f27 [ 983.994183][ T7397] overlayfs: unrecognized mount option "xino=onre" or missing value [ 984.012796][ T7407] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 984.019541][ T7410] overlayfs: unrecognized mount option "xino=onre" or missing value [ 984.027381][ T7378] RBP: ffff88814418d2f8 R08: 0000000000000000 R09: 0000000000000000 04:14:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) fcntl$dupfd(r0, 0x406, r1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x20040010) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c2f77657264697a3d2e2f6275732c776f726b6469723dea812e2f66696c65302c78696e6f3d6f6e"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/157, 0x200003dd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 04:14:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x80, 0x0, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x7800, 0xd39e, 0xffff7fff}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="38401e914ade"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,xino=on']) mkdir(0x0, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000340)=""/157, 0x200003dd) [ 984.064874][ T7378] R10: ffffffff815d068e R11: 0000000000000000 R12: ffff8880207db9b0 [ 984.102318][ T7378] R13: 0000000000000080 R14: 0000000080000180 R15: ffff8881427d6d00 [ 984.121213][ T7412] overlayfs: unrecognized mount option "xino=onre" or missing value [ 984.125050][ T7378] FS: 00007f01afe30700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 984.155240][ T7378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 984.185791][ T7416] overlayfs: failed to resolve './file1': -2 [ 984.187642][ T7378] CR2: 00005562e37a9b58 CR3: 0000000072b5b000 CR4: 0000000000350ef0 [ 984.209350][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 984.254299][ T7378] Call Trace: [ 984.264451][ T7378] ? lockdep_init_map_type+0x260/0x7b0 [ 984.278389][ T7418] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 984.288246][ T7378] usb_start_wait_urb+0x101/0x4c0 [ 984.300734][ T7378] ? usb_api_blocking_completion+0xa0/0xa0 [ 984.354381][ T7378] ? memset+0x20/0x40 [ 984.358824][ T7378] usb_control_msg+0x31c/0x4a0 [ 984.363819][ T7378] ? usb_start_wait_urb+0x4c0/0x4c0 [ 984.364702][ T7420] overlayfs: unrecognized mount option "l/werdiz=./bus" or missing value [ 984.374265][ T20] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 984.388075][ T7378] ? wait_for_completion_io+0x280/0x280 [ 984.403030][ T7423] overlayfs: unrecognized mount option "l/werdiz=./bus" or missing value [ 984.404266][ T20] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 984.423289][ T7378] do_proc_control+0x6c4/0x920 [ 984.423330][ T7418] overlayfs: unrecognized mount option "xino=onre" or missing value [ 984.434039][ T7378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 984.449130][ T7378] usbdev_ioctl+0x10e2/0x36c0 [ 984.454107][ T20] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 984.475974][ T7378] ? do_proc_bulk+0x750/0x750 [ 984.483690][ T7378] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 984.495131][ T20] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 984.505526][ T7378] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 984.516930][ T7378] ? do_vfs_ioctl+0x132/0x15d0 [ 984.523159][ T20] usb 2-1: config 250 has no interface number 0 [ 984.529735][ T7378] ? vfs_fileattr_set+0xb50/0xb50 [ 984.534960][ T20] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 984.548647][ T7378] ? lock_downgrade+0x6e0/0x6e0 [ 984.553721][ T7378] ? __fget_files+0x23d/0x3e0 [ 984.558589][ T7378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 984.565079][ T20] usb 2-1: config 250 interface 228 has no altsetting 0 [ 984.572175][ T7378] ? do_proc_bulk+0x750/0x750 [ 984.572203][ T7378] __x64_sys_ioctl+0x193/0x200 [ 984.572227][ T7378] do_syscall_64+0x35/0xb0 [ 984.572247][ T7378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 984.607192][ T7378] RIP: 0033:0x4665e9 [ 984.612136][ T7378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.646968][ T7378] RSP: 002b:00007f01afe30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.658385][ T7378] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 984.674618][ T7378] RDX: 00000000200000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 984.683722][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 984.707648][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 984.716270][ T7378] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 984.724591][ T20] usb 2-1: SerialNumber: syz [ 984.729393][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 984.742191][ T7378] R13: 00007ffcce0dabdf R14: 00007f01afe30300 R15: 0000000000022000 [ 984.751713][ T7378] Kernel panic - not syncing: panic_on_warn set ... [ 984.758291][ T7378] CPU: 1 PID: 7378 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 984.766952][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.776994][ T7378] Call Trace: [ 984.780261][ T7378] dump_stack_lvl+0xcd/0x134 [ 984.784848][ T7378] panic+0x306/0x73d [ 984.788732][ T7378] ? __warn_printk+0xf3/0xf3 [ 984.793319][ T7378] ? __warn.cold+0x1a/0x44 [ 984.797727][ T7378] ? usb_submit_urb+0x149d/0x18a0 [ 984.802745][ T7378] __warn.cold+0x35/0x44 [ 984.806980][ T7378] ? wake_up_klogd.part.0+0x8e/0xd0 [ 984.812167][ T7378] ? usb_submit_urb+0x149d/0x18a0 [ 984.817182][ T7378] report_bug+0x1bd/0x210 [ 984.821502][ T7378] handle_bug+0x3c/0x60 [ 984.825650][ T7378] exc_invalid_op+0x14/0x40 [ 984.830142][ T7378] asm_exc_invalid_op+0x12/0x20 [ 984.834980][ T7378] RIP: 0010:usb_submit_urb+0x149d/0x18a0 [ 984.840607][ T7378] Code: 7c 24 40 e8 d5 d0 1f fc 48 8b 7c 24 40 e8 eb 1f 0c ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 60 a7 27 8a e8 04 c9 91 03 <0f> 0b e9 a5 ee ff ff e8 a7 d0 1f fc 0f b6 1d 37 36 02 08 31 ff 41 [ 984.860203][ T7378] RSP: 0018:ffffc900031bf9a8 EFLAGS: 00010286 [ 984.866257][ T7378] RAX: 0000000000000000 RBX: ffff888020fdb058 RCX: 0000000000000000 [ 984.874214][ T7378] RDX: 0000000000040000 RSI: ffffffff815d6855 RDI: fffff52000637f27 [ 984.882170][ T7378] RBP: ffff88814418d2f8 R08: 0000000000000000 R09: 0000000000000000 [ 984.890127][ T7378] R10: ffffffff815d068e R11: 0000000000000000 R12: ffff8880207db9b0 [ 984.898084][ T7378] R13: 0000000000000080 R14: 0000000080000180 R15: ffff8881427d6d00 [ 984.906131][ T7378] ? wake_up_klogd.part.0+0x8e/0xd0 [ 984.911320][ T7378] ? vprintk+0x95/0x260 [ 984.915465][ T7378] ? usb_submit_urb+0x149d/0x18a0 [ 984.920481][ T7378] ? lockdep_init_map_type+0x260/0x7b0 [ 984.925935][ T7378] usb_start_wait_urb+0x101/0x4c0 [ 984.930955][ T7378] ? usb_api_blocking_completion+0xa0/0xa0 [ 984.936760][ T7378] ? memset+0x20/0x40 [ 984.940735][ T7378] usb_control_msg+0x31c/0x4a0 [ 984.945492][ T7378] ? usb_start_wait_urb+0x4c0/0x4c0 [ 984.950685][ T7378] ? wait_for_completion_io+0x280/0x280 [ 984.956227][ T7378] do_proc_control+0x6c4/0x920 [ 984.960987][ T7378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 984.967221][ T7378] usbdev_ioctl+0x10e2/0x36c0 [ 984.971891][ T7378] ? do_proc_bulk+0x750/0x750 [ 984.976565][ T7378] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 984.982448][ T7378] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 984.988677][ T7378] ? do_vfs_ioctl+0x132/0x15d0 [ 984.993433][ T7378] ? vfs_fileattr_set+0xb50/0xb50 [ 984.998455][ T7378] ? lock_downgrade+0x6e0/0x6e0 [ 985.003299][ T7378] ? __fget_files+0x23d/0x3e0 [ 985.007968][ T7378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 985.014199][ T7378] ? do_proc_bulk+0x750/0x750 [ 985.018869][ T7378] __x64_sys_ioctl+0x193/0x200 [ 985.023628][ T7378] do_syscall_64+0x35/0xb0 [ 985.028031][ T7378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 985.034300][ T7378] RIP: 0033:0x4665e9 [ 985.038183][ T7378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 985.057781][ T7378] RSP: 002b:00007f01afe30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.066184][ T7378] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 985.074146][ T7378] RDX: 00000000200000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 985.082105][ T7378] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 985.090062][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 985.098020][ T7378] R13: 00007ffcce0dabdf R14: 00007f01afe30300 R15: 0000000000022000 [ 985.112344][ T7378] Kernel Offset: disabled [ 985.116831][ T7378] Rebooting in 86400 seconds..