{'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:34 executing program 3 (fault-call:10 fault-nth:2): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 191.168783][ T5569] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 191.176813][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.184758][ T5569] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c 10:13:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x3000000, 0x0, 0x0) [ 191.231350][ T5593] FAULT_INJECTION: forcing a failure. [ 191.231350][ T5593] name failslab, interval 1, probability 0, space 0, times 0 [ 191.246950][ T5593] CPU: 0 PID: 5593 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 191.257034][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.262781][ T5599] FAULT_INJECTION: forcing a failure. [ 191.262781][ T5599] name failslab, interval 1, probability 0, space 0, times 0 [ 191.267085][ T5593] Call Trace: [ 191.267103][ T5593] dump_stack+0x14a/0x1ce [ 191.267112][ T5593] ? devkmsg_release+0x11c/0x11c [ 191.267119][ T5593] ? show_regs_print_info+0x12/0x12 [ 191.267127][ T5593] should_fail+0x6fb/0x860 [ 191.267139][ T5593] ? setup_fault_attr+0x3d0/0x3d0 [ 191.306770][ T5593] ? ksys_mount+0x62/0xf0 [ 191.311075][ T5593] should_failslab+0x5/0x20 [ 191.316023][ T5593] __kmalloc_track_caller+0x5d/0x2c0 [ 191.321284][ T5593] ? strnlen_user+0x185/0x210 [ 191.325936][ T5593] strndup_user+0x73/0x150 [ 191.330325][ T5593] ksys_mount+0x62/0xf0 [ 191.334459][ T5593] __x64_sys_mount+0xb1/0xc0 [ 191.339026][ T5593] do_syscall_64+0xcb/0x150 [ 191.343503][ T5593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.349371][ T5593] RIP: 0033:0x45d4d9 [ 191.353243][ T5593] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.372822][ T5593] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.381239][ T5593] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 191.389186][ T5593] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 191.397130][ T5593] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 191.405161][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.413108][ T5593] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 191.421060][ T5599] CPU: 1 PID: 5599 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 10:13:35 executing program 5 (fault-call:13 fault-nth:2): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 191.421645][ T3045] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 191.431119][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.431122][ T5599] Call Trace: [ 191.431140][ T5599] dump_stack+0x14a/0x1ce [ 191.431148][ T5599] ? devkmsg_release+0x11c/0x11c [ 191.431155][ T5599] ? show_regs_print_info+0x12/0x12 [ 191.431169][ T5599] should_fail+0x6fb/0x860 [ 191.455503][ T5605] FAULT_INJECTION: forcing a failure. [ 191.455503][ T5605] name failslab, interval 1, probability 0, space 0, times 0 [ 191.456321][ T5599] ? setup_fault_attr+0x3d0/0x3d0 [ 191.456331][ T5599] ? copy_mount_options+0x59/0x320 [ 191.456343][ T5599] should_failslab+0x5/0x20 [ 191.497962][ T5599] kmem_cache_alloc_trace+0x39/0x280 [ 191.503235][ T5599] copy_mount_options+0x59/0x320 [ 191.508142][ T5599] ? ksys_mount+0x8f/0xf0 [ 191.512441][ T5599] ksys_mount+0x97/0xf0 [ 191.516569][ T5599] __x64_sys_mount+0xb1/0xc0 [ 191.521131][ T5599] do_syscall_64+0xcb/0x150 [ 191.525607][ T5599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.531471][ T5599] RIP: 0033:0x45d4d9 [ 191.535339][ T5599] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.554917][ T5599] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.563297][ T5599] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 191.571261][ T5599] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffff8, 0x200) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) mkdir(&(0x7f00000000c0)='./bus\x00', 0x105) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065726469733d2e2f66696c7f74b21fe7bb59d6a1e1991965312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c00"]) mknod$loop(&(0x7f00000003c0)='./bus/file0\x00', 0x2000, 0x1) [ 191.579204][ T5599] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 191.587147][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.595092][ T5599] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 191.624857][ T5605] CPU: 1 PID: 5605 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 191.629844][ T5615] overlayfs: unrecognized mount option "upperdis=./filt²ç»YÖ¡á™e1" or missing value [ 191.635050][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.635053][ T5605] Call Trace: [ 191.635070][ T5605] dump_stack+0x14a/0x1ce [ 191.635079][ T5605] ? devkmsg_release+0x11c/0x11c [ 191.635092][ T5605] ? show_regs_print_info+0x12/0x12 [ 191.646752][ T5615] overlayfs: unrecognized mount option "upperdis=./filt²ç»YÖ¡á™e1" or missing value [ 191.654757][ T5605] should_fail+0x6fb/0x860 [ 191.654766][ T5605] ? setup_fault_attr+0x3d0/0x3d0 [ 191.654783][ T5605] ? copy_mount_options+0x59/0x320 [ 191.696623][ T5605] should_failslab+0x5/0x20 [ 191.701116][ T5605] kmem_cache_alloc_trace+0x39/0x280 [ 191.706425][ T5605] copy_mount_options+0x59/0x320 [ 191.711334][ T5605] ? ksys_mount+0x8f/0xf0 [ 191.715634][ T5605] ksys_mount+0x97/0xf0 [ 191.719768][ T5605] __x64_sys_mount+0xb1/0xc0 [ 191.724328][ T5605] do_syscall_64+0xcb/0x150 [ 191.728805][ T5605] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.734933][ T5605] RIP: 0033:0x45d4d9 [ 191.739066][ T5605] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.758652][ T5605] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.767124][ T5605] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 191.775071][ T5605] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 191.783030][ T5605] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 191.790975][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.798922][ T5605] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 191.924990][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.935900][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.946268][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 191.955646][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.964191][ T3045] usb 5-1: config 0 descriptor?? [ 192.304948][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 192.311032][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 192.319271][ T3045] usb 5-1: USB disconnect, device number 51 [ 192.774845][ T3045] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 193.134882][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.145857][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.156196][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 193.165713][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.174258][ T3045] usb 5-1: config 0 descriptor?? [ 193.655500][ T3045] ntrig 0003:1B96:000B.0018: unknown main item tag 0x0 [ 193.662425][ T3045] ntrig 0003:1B96:000B.0018: unknown main item tag 0x0 [ 193.670572][ T3045] ntrig 0003:1B96:000B.0018: unknown main item tag 0x0 [ 193.678182][ T3045] ntrig 0003:1B96:000B.0018: unknown main item tag 0x0 [ 193.686401][ T3045] ntrig 0003:1B96:000B.0018: hidraw0: USB HID v0.00 Device [HID 1b96:000b] on usb-dummy_hcd.4-1/input0 [ 193.875951][ T3045] usb 5-1: USB disconnect, device number 52 10:13:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off='index=off'}, {@workdir={'workdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ftruncate(r0, 0x0) 10:13:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x80000000000000) 10:13:38 executing program 3 (fault-call:10 fault-nth:3): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:38 executing program 5 (fault-call:13 fault-nth:3): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:38 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x40000000, 0x0, 0x0) [ 194.393863][ T5640] overlayfs: missing 'lowerdir' [ 194.396832][ T5644] FAULT_INJECTION: forcing a failure. [ 194.396832][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 194.414248][ T5644] CPU: 1 PID: 5644 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 194.414905][ T5639] FAULT_INJECTION: forcing a failure. [ 194.414905][ T5639] name failslab, interval 1, probability 0, space 0, times 0 [ 194.424322][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.424325][ T5644] Call Trace: [ 194.424343][ T5644] dump_stack+0x14a/0x1ce [ 194.424352][ T5644] ? devkmsg_release+0x11c/0x11c [ 194.424366][ T5644] ? show_regs_print_info+0x12/0x12 [ 194.464609][ T5644] should_fail+0x6fb/0x860 [ 194.469001][ T5644] ? setup_fault_attr+0x3d0/0x3d0 [ 194.474005][ T5644] ? getname_flags+0xb8/0x610 [ 194.478655][ T5644] should_failslab+0x5/0x20 [ 194.483164][ T5644] kmem_cache_alloc+0x36/0x260 [ 194.487914][ T5644] getname_flags+0xb8/0x610 [ 194.492394][ T5644] user_path_at_empty+0x28/0x50 [ 194.497219][ T5644] do_mount+0x15a/0x28c0 [ 194.501464][ T5644] ? copy_mount_string+0x30/0x30 [ 194.506375][ T5644] ? page_fault+0x2f/0x40 [ 194.510853][ T5644] ? copy_mount_options+0x1e8/0x320 [ 194.516023][ T5644] ? copy_mount_options+0x293/0x320 [ 194.521212][ T5644] ksys_mount+0xc2/0xf0 [ 194.525346][ T5644] __x64_sys_mount+0xb1/0xc0 [ 194.529912][ T5644] do_syscall_64+0xcb/0x150 [ 194.534389][ T5644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.540256][ T5644] RIP: 0033:0x45d4d9 [ 194.544126][ T5644] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.563791][ T5644] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.572194][ T5644] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 194.580157][ T5644] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:38 executing program 1: futex(&(0x7f000000cffc)=0x200000004, 0x81, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000040), 0x1000000) 10:13:38 executing program 5 (fault-call:13 fault-nth:4): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 194.588115][ T5644] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 194.596068][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 194.604106][ T5644] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 194.612063][ T5639] CPU: 0 PID: 5639 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 194.622126][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.632440][ T5639] Call Trace: [ 194.635734][ T5639] dump_stack+0x14a/0x1ce [ 194.640061][ T5639] ? devkmsg_release+0x11c/0x11c [ 194.640376][ T5657] FAULT_INJECTION: forcing a failure. [ 194.640376][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 194.644988][ T5639] ? show_regs_print_info+0x12/0x12 [ 194.644996][ T5639] should_fail+0x6fb/0x860 [ 194.645004][ T5639] ? setup_fault_attr+0x3d0/0x3d0 [ 194.645012][ T5639] ? getname_flags+0xb8/0x610 [ 194.645024][ T5639] should_failslab+0x5/0x20 [ 194.681274][ T5639] kmem_cache_alloc+0x36/0x260 [ 194.686016][ T5639] getname_flags+0xb8/0x610 [ 194.690497][ T5639] user_path_at_empty+0x28/0x50 10:13:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r0, 0xa, 0x12) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r0, r1) r2 = gettid() fcntl$setown(r1, 0x8, r2) r3 = signalfd(r1, &(0x7f0000000040)={[0xb5]}, 0x8) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x9}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) write$P9_RRENAMEAT(r7, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7) [ 194.695324][ T5639] do_mount+0x15a/0x28c0 [ 194.699542][ T5639] ? copy_mount_string+0x30/0x30 [ 194.704477][ T5639] ? page_fault+0x2f/0x40 [ 194.708815][ T5639] ? copy_mount_options+0x1e8/0x320 [ 194.714009][ T5639] ? copy_mount_options+0x293/0x320 [ 194.719207][ T5639] ksys_mount+0xc2/0xf0 [ 194.723396][ T5639] __x64_sys_mount+0xb1/0xc0 [ 194.727972][ T5639] do_syscall_64+0xcb/0x150 [ 194.732466][ T5639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.738352][ T5639] RIP: 0033:0x45d4d9 [ 194.742240][ T5639] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.761856][ T5639] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.770244][ T5639] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 194.778197][ T5639] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 194.786188][ T5639] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 194.794151][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 194.802107][ T5639] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 194.810068][ T5657] CPU: 1 PID: 5657 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 194.820213][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.830262][ T5657] Call Trace: [ 194.833549][ T5657] dump_stack+0x14a/0x1ce [ 194.837876][ T5657] ? devkmsg_release+0x11c/0x11c 10:13:38 executing program 3 (fault-call:10 fault-nth:4): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 194.842902][ T5657] ? show_regs_print_info+0x12/0x12 [ 194.848095][ T5657] should_fail+0x6fb/0x860 [ 194.852542][ T5657] ? setup_fault_attr+0x3d0/0x3d0 [ 194.857564][ T5657] ? alloc_fs_context+0x61/0x650 [ 194.860684][ T5667] FAULT_INJECTION: forcing a failure. [ 194.860684][ T5667] name failslab, interval 1, probability 0, space 0, times 0 [ 194.862499][ T5657] should_failslab+0x5/0x20 [ 194.862515][ T5657] kmem_cache_alloc_trace+0x39/0x280 [ 194.884827][ T5657] alloc_fs_context+0x61/0x650 [ 194.889580][ T5657] ? _raw_read_unlock+0xe/0x30 [ 194.894326][ T5657] ? get_fs_type+0x410/0x490 [ 194.898892][ T5657] do_mount+0x12f5/0x28c0 [ 194.903201][ T5657] ? copy_mount_string+0x30/0x30 [ 194.908113][ T5657] ? page_fault+0x2f/0x40 [ 194.912416][ T5657] ? copy_mount_options+0x1e8/0x320 [ 194.917586][ T5657] ? copy_mount_options+0x293/0x320 [ 194.922758][ T5657] ksys_mount+0xc2/0xf0 [ 194.926907][ T5657] __x64_sys_mount+0xb1/0xc0 [ 194.931557][ T5657] do_syscall_64+0xcb/0x150 [ 194.936037][ T5657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.941904][ T5657] RIP: 0033:0x45d4d9 [ 194.945783][ T5657] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.965394][ T5657] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.973782][ T5657] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 194.981736][ T5657] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:38 executing program 5 (fault-call:13 fault-nth:5): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 194.989683][ T5657] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 194.997628][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 195.005578][ T5657] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 195.013552][ T5667] CPU: 0 PID: 5667 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 195.023606][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.033646][ T5667] Call Trace: [ 195.036928][ T5667] dump_stack+0x14a/0x1ce [ 195.041258][ T5667] ? devkmsg_release+0x11c/0x11c [ 195.046192][ T5667] ? show_regs_print_info+0x12/0x12 [ 195.047286][ T5674] FAULT_INJECTION: forcing a failure. [ 195.047286][ T5674] name failslab, interval 1, probability 0, space 0, times 0 [ 195.051383][ T5667] should_fail+0x6fb/0x860 [ 195.051390][ T5667] ? setup_fault_attr+0x3d0/0x3d0 [ 195.051404][ T5667] ? alloc_fs_context+0x61/0x650 [ 195.078306][ T5667] should_failslab+0x5/0x20 [ 195.082795][ T5667] kmem_cache_alloc_trace+0x39/0x280 [ 195.088063][ T5667] alloc_fs_context+0x61/0x650 [ 195.092825][ T5667] ? _raw_read_unlock+0xe/0x30 [ 195.097566][ T5667] ? get_fs_type+0x410/0x490 [ 195.102154][ T5667] do_mount+0x12f5/0x28c0 [ 195.106546][ T5667] ? copy_mount_string+0x30/0x30 [ 195.111455][ T5667] ? page_fault+0x2f/0x40 [ 195.115760][ T5667] ? copy_mount_options+0x1e8/0x320 [ 195.120976][ T5667] ? copy_mount_options+0x293/0x320 [ 195.126160][ T5667] ksys_mount+0xc2/0xf0 [ 195.130297][ T5667] __x64_sys_mount+0xb1/0xc0 [ 195.134886][ T5667] do_syscall_64+0xcb/0x150 [ 195.139368][ T5667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 195.145236][ T5667] RIP: 0033:0x45d4d9 [ 195.149122][ T5667] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.168717][ T5667] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.177104][ T5667] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 195.185051][ T5667] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x100000000000000) [ 195.193016][ T5667] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 195.200963][ T5667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 195.208928][ T5667] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 195.216970][ T5674] CPU: 1 PID: 5674 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 195.227032][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.237081][ T5674] Call Trace: [ 195.240370][ T5674] dump_stack+0x14a/0x1ce [ 195.246172][ T5674] ? devkmsg_release+0x11c/0x11c [ 195.251101][ T5674] ? show_regs_print_info+0x12/0x12 [ 195.256297][ T5674] should_fail+0x6fb/0x860 [ 195.260709][ T5674] ? setup_fault_attr+0x3d0/0x3d0 [ 195.265910][ T5674] ? alloc_fs_context+0x61/0x650 [ 195.270846][ T5674] should_failslab+0x5/0x20 [ 195.275338][ T5674] kmem_cache_alloc_trace+0x39/0x280 [ 195.280598][ T5674] alloc_fs_context+0x61/0x650 [ 195.285352][ T5674] ? _raw_read_unlock+0xe/0x30 [ 195.290105][ T5674] ? get_fs_type+0x410/0x490 [ 195.294782][ T5674] do_mount+0x12f5/0x28c0 [ 195.299088][ T5674] ? copy_mount_string+0x30/0x30 [ 195.304000][ T5674] ? page_fault+0x2f/0x40 [ 195.308312][ T5674] ? copy_mount_options+0x1e8/0x320 [ 195.313487][ T5674] ? copy_mount_options+0x293/0x320 [ 195.318659][ T5674] ksys_mount+0xc2/0xf0 [ 195.322786][ T5674] __x64_sys_mount+0xb1/0xc0 [ 195.327346][ T5674] do_syscall_64+0xcb/0x150 [ 195.331823][ T5674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 195.337700][ T5674] RIP: 0033:0x45d4d9 [ 195.341579][ T5674] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.361253][ T5674] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.369777][ T5674] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 195.377778][ T5674] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 195.385722][ T5674] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 195.393683][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 195.401625][ T5674] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 195.414582][ T3045] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 195.784571][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.795501][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.805483][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 195.814573][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.823140][ T3045] usb 5-1: config 0 descriptor?? [ 196.174512][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 196.180473][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 196.188551][ T3045] usb 5-1: USB disconnect, device number 53 [ 196.644498][ T3045] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 197.004511][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.015403][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.025788][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 197.035161][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.043708][ T3045] usb 5-1: config 0 descriptor?? [ 197.525072][ T3045] ntrig 0003:1B96:000B.0019: unknown main item tag 0x0 [ 197.531968][ T3045] ntrig 0003:1B96:000B.0019: unknown main item tag 0x0 [ 197.539004][ T3045] ntrig 0003:1B96:000B.0019: unknown main item tag 0x0 [ 197.545899][ T3045] ntrig 0003:1B96:000B.0019: unknown main item tag 0x0 [ 197.553513][ T3045] ntrig 0003:1B96:000B.0019: hidraw0: USB HID v0.00 Device [HID 1b96:000b] on usb-dummy_hcd.4-1/input0 [ 197.735577][ T3045] usb 5-1: USB disconnect, device number 54 10:13:41 executing program 3 (fault-call:10 fault-nth:5): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x10000000000, 0x0, 0x0) 10:13:41 executing program 5 (fault-call:13 fault-nth:6): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:41 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x300000000000000) 10:13:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0xb622, 0x7, 0x1ff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000000080)={[{@shortname_lower='shortname=lower'}]}) [ 198.245440][ T5703] FAULT_INJECTION: forcing a failure. [ 198.245440][ T5703] name failslab, interval 1, probability 0, space 0, times 0 [ 198.262037][ T5712] FAT-fs (loop1): bogus number of reserved sectors [ 198.265409][ T5705] FAULT_INJECTION: forcing a failure. [ 198.265409][ T5705] name failslab, interval 1, probability 0, space 0, times 0 [ 198.268823][ T5712] FAT-fs (loop1): Can't find a valid FAT filesystem [ 198.290976][ T5703] CPU: 0 PID: 5703 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 198.301059][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.311132][ T5703] Call Trace: [ 198.314435][ T5703] dump_stack+0x14a/0x1ce [ 198.318766][ T5703] ? devkmsg_release+0x11c/0x11c [ 198.323679][ T5703] ? show_regs_print_info+0x12/0x12 [ 198.328854][ T5703] should_fail+0x6fb/0x860 [ 198.333337][ T5703] ? setup_fault_attr+0x3d0/0x3d0 [ 198.338345][ T5703] ? legacy_init_fs_context+0x4d/0xc0 [ 198.343723][ T5703] should_failslab+0x5/0x20 [ 198.348233][ T5703] kmem_cache_alloc_trace+0x39/0x280 [ 198.353538][ T5703] legacy_init_fs_context+0x4d/0xc0 [ 198.358730][ T5703] alloc_fs_context+0x50c/0x650 [ 198.363572][ T5703] do_mount+0x12f5/0x28c0 [ 198.367878][ T5703] ? copy_mount_string+0x30/0x30 [ 198.372811][ T5703] ? page_fault+0x2f/0x40 [ 198.377117][ T5703] ? copy_mount_options+0x1e8/0x320 [ 198.382287][ T5703] ? copy_mount_options+0x293/0x320 [ 198.387457][ T5703] ksys_mount+0xc2/0xf0 [ 198.391765][ T5703] __x64_sys_mount+0xb1/0xc0 [ 198.396417][ T5703] do_syscall_64+0xcb/0x150 [ 198.400902][ T5703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.406792][ T5703] RIP: 0033:0x45d4d9 [ 198.410663][ T5703] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.430262][ T5703] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.438674][ T5703] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 198.446625][ T5703] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 198.454573][ T5703] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 198.462545][ T5703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 198.470492][ T5703] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 198.478450][ T5705] CPU: 1 PID: 5705 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 198.488597][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.498645][ T5705] Call Trace: [ 198.501912][ T5705] dump_stack+0x14a/0x1ce [ 198.506219][ T5705] ? devkmsg_release+0x11c/0x11c [ 198.511138][ T5705] ? show_regs_print_info+0x12/0x12 [ 198.516309][ T5705] should_fail+0x6fb/0x860 [ 198.520713][ T5705] ? setup_fault_attr+0x3d0/0x3d0 [ 198.525710][ T5705] ? vfs_parse_fs_string+0x183/0x290 [ 198.530986][ T5705] should_failslab+0x5/0x20 [ 198.535465][ T5705] __kmalloc_track_caller+0x5d/0x2c0 [ 198.541763][ T5705] kmemdup_nul+0x27/0xa0 [ 198.545976][ T5705] vfs_parse_fs_string+0x183/0x290 [ 198.551059][ T5705] ? logfc+0x730/0x730 [ 198.555097][ T5705] ? __module_put_and_exit+0x20/0x20 [ 198.560355][ T5705] ? alloc_fs_context+0x520/0x650 [ 198.565362][ T5705] do_mount+0x1404/0x28c0 [ 198.569683][ T5705] ? copy_mount_string+0x30/0x30 [ 198.574593][ T5705] ? page_fault+0x2f/0x40 [ 198.578899][ T5705] ? copy_mount_options+0x1e8/0x320 [ 198.584072][ T5705] ? copy_mount_options+0x293/0x320 [ 198.589240][ T5705] ksys_mount+0xc2/0xf0 [ 198.593393][ T5705] __x64_sys_mount+0xb1/0xc0 [ 198.597969][ T5705] do_syscall_64+0xcb/0x150 [ 198.602461][ T5705] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.608348][ T5705] RIP: 0033:0x45d4d9 [ 198.612250][ T5705] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.631827][ T5705] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:13:42 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x80000000000000, 0x0, 0x0) 10:13:42 executing program 3 (fault-call:10 fault-nth:6): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:42 executing program 5 (fault-call:13 fault-nth:7): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 198.640293][ T5705] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 198.648239][ T5705] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 198.656181][ T5705] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 198.664123][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 198.672088][ T5705] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000) [ 198.714789][ T5723] FAT-fs (loop1): bogus number of reserved sectors [ 198.722670][ T5723] FAT-fs (loop1): Can't find a valid FAT filesystem [ 198.747614][ T5731] FAULT_INJECTION: forcing a failure. [ 198.747614][ T5731] name failslab, interval 1, probability 0, space 0, times 0 [ 198.748606][ T5732] FAULT_INJECTION: forcing a failure. [ 198.748606][ T5732] name failslab, interval 1, probability 0, space 0, times 0 [ 198.760950][ T5731] CPU: 1 PID: 5731 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 198.773228][ T3045] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 198.783014][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.783018][ T5731] Call Trace: [ 198.783038][ T5731] dump_stack+0x14a/0x1ce [ 198.783048][ T5731] ? devkmsg_release+0x11c/0x11c [ 198.783056][ T5731] ? show_regs_print_info+0x12/0x12 [ 198.783065][ T5731] ? avc_has_perm_noaudit+0x30c/0x400 [ 198.783077][ T5731] should_fail+0x6fb/0x860 [ 198.828004][ T5731] ? setup_fault_attr+0x3d0/0x3d0 [ 198.833018][ T5731] ? alloc_super+0x56/0x760 [ 198.837493][ T5731] should_failslab+0x5/0x20 [ 198.842327][ T5731] kmem_cache_alloc_trace+0x39/0x280 [ 198.847686][ T5731] ? _raw_spin_trylock_bh+0x190/0x190 [ 198.853028][ T5731] alloc_super+0x56/0x760 [ 198.857328][ T5731] sget+0x20e/0x4e0 [ 198.861128][ T5731] ? free_anon_bdev+0x20/0x20 [ 198.865775][ T5731] ? ovl_mount+0x30/0x30 [ 198.869986][ T5731] mount_nodev+0x2c/0xe0 [ 198.874200][ T5731] legacy_get_tree+0xde/0x170 [ 198.878850][ T5731] ? fuse_emit+0x7d0/0x7d0 [ 198.883237][ T5731] vfs_get_tree+0x85/0x260 [ 198.887640][ T5731] do_mount+0x1a15/0x28c0 [ 198.891960][ T5731] ? copy_mount_string+0x30/0x30 [ 198.896867][ T5731] ? page_fault+0x2f/0x40 [ 198.901168][ T5731] ? copy_mount_options+0x1e8/0x320 [ 198.906337][ T5731] ? copy_mount_options+0x293/0x320 [ 198.911619][ T5731] ksys_mount+0xc2/0xf0 [ 198.915765][ T5731] __x64_sys_mount+0xb1/0xc0 [ 198.920354][ T5731] do_syscall_64+0xcb/0x150 [ 198.924833][ T5731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.930695][ T5731] RIP: 0033:0x45d4d9 [ 198.934562][ T5731] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.954139][ T5731] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:13:42 executing program 5 (fault-call:13 fault-nth:8): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 198.962523][ T5731] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 198.970491][ T5731] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 198.978433][ T5731] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 198.986385][ T5731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 198.994340][ T5731] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) [ 199.014291][ T5732] CPU: 1 PID: 5732 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 199.024383][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.034432][ T5732] Call Trace: [ 199.037724][ T5732] dump_stack+0x14a/0x1ce [ 199.042057][ T5732] ? devkmsg_release+0x11c/0x11c [ 199.046996][ T5732] ? show_regs_print_info+0x12/0x12 [ 199.052198][ T5732] should_fail+0x6fb/0x860 [ 199.056616][ T5732] ? setup_fault_attr+0x3d0/0x3d0 [ 199.061994][ T5732] ? legacy_init_fs_context+0x4d/0xc0 [ 199.067361][ T5732] should_failslab+0x5/0x20 [ 199.070705][ T5749] FAULT_INJECTION: forcing a failure. [ 199.070705][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 199.071862][ T5732] kmem_cache_alloc_trace+0x39/0x280 [ 199.071880][ T5732] legacy_init_fs_context+0x4d/0xc0 [ 199.094888][ T5732] alloc_fs_context+0x50c/0x650 [ 199.099733][ T5732] do_mount+0x12f5/0x28c0 [ 199.104083][ T5732] ? copy_mount_string+0x30/0x30 [ 199.109779][ T5732] ? page_fault+0x2f/0x40 [ 199.114103][ T5732] ? copy_mount_options+0x1e8/0x320 [ 199.119277][ T5732] ? copy_mount_options+0x293/0x320 [ 199.124458][ T5732] ksys_mount+0xc2/0xf0 [ 199.128589][ T5732] __x64_sys_mount+0xb1/0xc0 [ 199.133158][ T5732] do_syscall_64+0xcb/0x150 [ 199.137637][ T5732] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.143511][ T5732] RIP: 0033:0x45d4d9 [ 199.147402][ T5732] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.166999][ T5732] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.175406][ T5732] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 199.183379][ T5732] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 199.191348][ T5732] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 199.199315][ T5732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 199.207276][ T5732] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 199.215262][ T5749] CPU: 0 PID: 5749 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 199.225319][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.235446][ T5749] Call Trace: [ 199.238712][ T5749] dump_stack+0x14a/0x1ce [ 199.243116][ T5749] ? devkmsg_release+0x11c/0x11c [ 199.248037][ T5749] ? show_regs_print_info+0x12/0x12 [ 199.253211][ T5749] should_fail+0x6fb/0x860 [ 199.257644][ T5749] ? setup_fault_attr+0x3d0/0x3d0 [ 199.262640][ T5749] ? selinux_sb_alloc_security+0x4f/0x200 [ 199.268329][ T5749] should_failslab+0x5/0x20 [ 199.272801][ T5749] kmem_cache_alloc_trace+0x39/0x280 [ 199.278058][ T5749] ? down_write+0xd8/0x150 [ 199.282454][ T5749] selinux_sb_alloc_security+0x4f/0x200 [ 199.287989][ T5749] security_sb_alloc+0x50/0xb0 [ 199.292737][ T5749] alloc_super+0x140/0x760 [ 199.297274][ T5749] sget+0x20e/0x4e0 [ 199.301058][ T5749] ? free_anon_bdev+0x20/0x20 [ 199.305706][ T5749] ? ovl_mount+0x30/0x30 [ 199.309920][ T5749] mount_nodev+0x2c/0xe0 [ 199.314199][ T5749] legacy_get_tree+0xde/0x170 [ 199.318848][ T5749] ? fuse_emit+0x7d0/0x7d0 [ 199.323239][ T5749] vfs_get_tree+0x85/0x260 [ 199.327629][ T5749] do_mount+0x1a15/0x28c0 [ 199.331947][ T5749] ? copy_mount_string+0x30/0x30 [ 199.336856][ T5749] ? page_fault+0x2f/0x40 [ 199.341274][ T5749] ? copy_mount_options+0x1e8/0x320 [ 199.346442][ T5749] ? copy_mount_options+0x293/0x320 [ 199.351610][ T5749] ksys_mount+0xc2/0xf0 [ 199.355737][ T5749] __x64_sys_mount+0xb1/0xc0 [ 199.360297][ T5749] do_syscall_64+0xcb/0x150 [ 199.364790][ T5749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.370652][ T5749] RIP: 0033:0x45d4d9 [ 199.374518][ T5749] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.394099][ T5749] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.402487][ T5749] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 199.410440][ T5749] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:43 executing program 3 (fault-call:10 fault-nth:7): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:43 executing program 5 (fault-call:13 fault-nth:9): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:43 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x100000000000000, 0x0, 0x0) [ 199.418387][ T5749] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 199.426699][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 199.434662][ T5749] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 199.468908][ T5756] FAULT_INJECTION: forcing a failure. [ 199.468908][ T5756] name failslab, interval 1, probability 0, space 0, times 0 [ 199.471520][ T5762] FAULT_INJECTION: forcing a failure. [ 199.471520][ T5762] name failslab, interval 1, probability 0, space 0, times 0 [ 199.500278][ T5756] CPU: 1 PID: 5756 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 199.510456][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.520496][ T5756] Call Trace: [ 199.523776][ T5756] dump_stack+0x14a/0x1ce [ 199.528084][ T5756] ? devkmsg_release+0x11c/0x11c [ 199.532996][ T5756] ? show_regs_print_info+0x12/0x12 [ 199.538789][ T5756] ? avc_has_perm_noaudit+0x30c/0x400 [ 199.544137][ T5756] should_fail+0x6fb/0x860 [ 199.548527][ T5756] ? setup_fault_attr+0x3d0/0x3d0 [ 199.553550][ T5756] ? alloc_super+0x56/0x760 [ 199.558053][ T5756] should_failslab+0x5/0x20 [ 199.562537][ T5756] kmem_cache_alloc_trace+0x39/0x280 [ 199.567799][ T5756] ? _raw_spin_trylock_bh+0x190/0x190 [ 199.573233][ T5756] alloc_super+0x56/0x760 [ 199.577537][ T5756] sget+0x20e/0x4e0 [ 199.581320][ T5756] ? free_anon_bdev+0x20/0x20 [ 199.585971][ T5756] ? ovl_mount+0x30/0x30 [ 199.590187][ T5756] mount_nodev+0x2c/0xe0 [ 199.594407][ T5756] legacy_get_tree+0xde/0x170 [ 199.599060][ T5756] ? fuse_emit+0x7d0/0x7d0 [ 199.603455][ T5756] vfs_get_tree+0x85/0x260 [ 199.607870][ T5756] do_mount+0x1a15/0x28c0 [ 199.612180][ T5756] ? copy_mount_string+0x30/0x30 [ 199.617094][ T5756] ? page_fault+0x2f/0x40 [ 199.621402][ T5756] ? copy_mount_options+0x1e8/0x320 [ 199.626575][ T5756] ? copy_mount_options+0x293/0x320 [ 199.631748][ T5756] ksys_mount+0xc2/0xf0 [ 199.635883][ T5756] __x64_sys_mount+0xb1/0xc0 [ 199.640459][ T5756] do_syscall_64+0xcb/0x150 [ 199.644962][ T5756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.650831][ T5756] RIP: 0033:0x45d4d9 [ 199.654702][ T5756] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.674296][ T5756] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.682683][ T5756] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 199.690649][ T5756] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 199.698637][ T5756] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 199.706584][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 199.714562][ T5756] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 199.722537][ T5762] CPU: 0 PID: 5762 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 199.732598][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.742750][ T5762] Call Trace: [ 199.746053][ T5762] dump_stack+0x14a/0x1ce [ 199.750389][ T5762] ? devkmsg_release+0x11c/0x11c [ 199.755330][ T5762] ? show_regs_print_info+0x12/0x12 [ 199.760531][ T5762] ? pcpu_alloc_area+0x7a2/0x8f0 [ 199.765468][ T5762] should_fail+0x6fb/0x860 [ 199.769882][ T5762] ? setup_fault_attr+0x3d0/0x3d0 [ 199.774884][ T5762] ? cpumask_next+0xc/0x20 [ 199.779276][ T5762] ? pcpu_alloc+0xd17/0x11f0 [ 199.783857][ T5762] ? prealloc_shrinker+0x50/0x210 [ 199.788858][ T5762] should_failslab+0x5/0x20 [ 199.793349][ T5762] kmem_cache_alloc_trace+0x39/0x280 [ 199.798753][ T5762] prealloc_shrinker+0x50/0x210 [ 199.803595][ T5762] alloc_super+0x5f2/0x760 [ 199.807991][ T5762] sget+0x20e/0x4e0 [ 199.811903][ T5762] ? free_anon_bdev+0x20/0x20 [ 199.816579][ T5762] ? ovl_mount+0x30/0x30 [ 199.820792][ T5762] mount_nodev+0x2c/0xe0 [ 199.825295][ T5762] legacy_get_tree+0xde/0x170 [ 199.829947][ T5762] ? fuse_emit+0x7d0/0x7d0 [ 199.834349][ T5762] vfs_get_tree+0x85/0x260 [ 199.838749][ T5762] do_mount+0x1a15/0x28c0 [ 199.843055][ T5762] ? copy_mount_string+0x30/0x30 [ 199.847972][ T5762] ? page_fault+0x2f/0x40 [ 199.852276][ T5762] ? copy_mount_options+0x1e8/0x320 [ 199.857448][ T5762] ? copy_mount_options+0x293/0x320 [ 199.862623][ T5762] ksys_mount+0xc2/0xf0 [ 199.866752][ T5762] __x64_sys_mount+0xb1/0xc0 [ 199.871488][ T5762] do_syscall_64+0xcb/0x150 [ 199.875962][ T5762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.881835][ T5762] RIP: 0033:0x45d4d9 [ 199.885713][ T5762] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.905292][ T5762] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.913695][ T5762] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 199.921642][ T5762] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 199.929595][ T5762] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 199.937644][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 199.945612][ T5762] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 200.214127][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.225326][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.235080][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 200.244128][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.252682][ T3045] usb 5-1: config 0 descriptor?? [ 200.594058][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 200.600058][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 200.608329][ T3045] usb 5-1: USB disconnect, device number 55 [ 201.064013][ T3045] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 201.423999][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.434911][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.445245][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 201.454587][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.463182][ T3045] usb 5-1: config 0 descriptor?? 10:13:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:45 executing program 3 (fault-call:10 fault-nth:8): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:45 executing program 5 (fault-call:13 fault-nth:10): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x5, 0x4, 0x3, 0x0, 0x96f3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe58}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180), 0x4) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff47) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffad) 10:13:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_uring_enter(r6, 0x1, 0x7ea1, 0x1, 0x0, 0x0) 10:13:45 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x300000000000000, 0x0, 0x0) [ 201.729122][ T5794] FAULT_INJECTION: forcing a failure. [ 201.729122][ T5794] name failslab, interval 1, probability 0, space 0, times 0 [ 201.730615][ T5796] FAULT_INJECTION: forcing a failure. [ 201.730615][ T5796] name failslab, interval 1, probability 0, space 0, times 0 [ 201.743509][ T5794] CPU: 1 PID: 5794 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 201.764515][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.774560][ T5794] Call Trace: [ 201.777834][ T5794] dump_stack+0x14a/0x1ce [ 201.782140][ T5794] ? devkmsg_release+0x11c/0x11c [ 201.787050][ T5794] ? show_regs_print_info+0x12/0x12 [ 201.792220][ T5794] should_fail+0x6fb/0x860 [ 201.796619][ T5794] ? setup_fault_attr+0x3d0/0x3d0 [ 201.801630][ T5794] ? selinux_sb_alloc_security+0x4f/0x200 [ 201.807321][ T5794] should_failslab+0x5/0x20 [ 201.811796][ T5794] kmem_cache_alloc_trace+0x39/0x280 [ 201.813873][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 201.817058][ T5794] ? down_write+0xd8/0x150 [ 201.817067][ T5794] selinux_sb_alloc_security+0x4f/0x200 [ 201.817080][ T5794] security_sb_alloc+0x50/0xb0 [ 201.837603][ T5794] alloc_super+0x140/0x760 [ 201.841996][ T5794] sget+0x20e/0x4e0 [ 201.845776][ T5794] ? free_anon_bdev+0x20/0x20 [ 201.850422][ T5794] ? ovl_mount+0x30/0x30 [ 201.854635][ T5794] mount_nodev+0x2c/0xe0 [ 201.858866][ T5794] legacy_get_tree+0xde/0x170 [ 201.863511][ T5794] ? fuse_emit+0x7d0/0x7d0 [ 201.867894][ T5794] vfs_get_tree+0x85/0x260 [ 201.872289][ T5794] do_mount+0x1a15/0x28c0 [ 201.876601][ T5794] ? copy_mount_string+0x30/0x30 [ 201.881506][ T5794] ? page_fault+0x2f/0x40 [ 201.885893][ T5794] ? copy_mount_options+0x1e8/0x320 [ 201.891061][ T5794] ? copy_mount_options+0x293/0x320 [ 201.896228][ T5794] ksys_mount+0xc2/0xf0 [ 201.900354][ T5794] __x64_sys_mount+0xb1/0xc0 [ 201.904928][ T5794] do_syscall_64+0xcb/0x150 [ 201.909488][ T5794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.915549][ T5794] RIP: 0033:0x45d4d9 [ 201.920631][ T5794] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.941246][ T5794] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.949625][ T5794] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 201.957587][ T5794] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 201.965530][ T5794] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 201.973472][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 201.981412][ T5794] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 201.990475][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 202.000463][ T5796] CPU: 1 PID: 5796 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 202.009683][ T3045] usb 5-1: USB disconnect, device number 56 [ 202.010535][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.026444][ T5796] Call Trace: [ 202.029857][ T5796] dump_stack+0x14a/0x1ce [ 202.034186][ T5796] ? devkmsg_release+0x11c/0x11c [ 202.039110][ T5796] ? show_regs_print_info+0x12/0x12 [ 202.044289][ T5796] ? idr_get_free+0x6de/0x880 [ 202.049574][ T5796] should_fail+0x6fb/0x860 [ 202.053991][ T5796] ? setup_fault_attr+0x3d0/0x3d0 [ 202.058987][ T5796] ? __down_read+0xf1/0x210 [ 202.063456][ T5796] ? up_write+0xa1/0x190 [ 202.067667][ T5796] ? __list_lru_init+0xa7/0x570 [ 202.072489][ T5796] should_failslab+0x5/0x20 [ 202.076970][ T5796] kmem_cache_alloc_trace+0x39/0x280 [ 202.082234][ T5796] __list_lru_init+0xa7/0x570 [ 202.086883][ T5796] ? prealloc_shrinker+0x1cc/0x210 [ 202.091966][ T5796] alloc_super+0x61e/0x760 [ 202.096355][ T5796] sget+0x20e/0x4e0 [ 202.100143][ T5796] ? free_anon_bdev+0x20/0x20 [ 202.105052][ T5796] ? ovl_mount+0x30/0x30 [ 202.109287][ T5796] mount_nodev+0x2c/0xe0 [ 202.113515][ T5796] legacy_get_tree+0xde/0x170 [ 202.118170][ T5796] ? fuse_emit+0x7d0/0x7d0 [ 202.122559][ T5796] vfs_get_tree+0x85/0x260 [ 202.127083][ T5796] do_mount+0x1a15/0x28c0 [ 202.131515][ T5796] ? copy_mount_string+0x30/0x30 [ 202.136428][ T5796] ? page_fault+0x2f/0x40 [ 202.140737][ T5796] ? copy_mount_options+0x1e8/0x320 [ 202.145905][ T5796] ? copy_mount_options+0x293/0x320 [ 202.151076][ T5796] ksys_mount+0xc2/0xf0 [ 202.155204][ T5796] __x64_sys_mount+0xb1/0xc0 [ 202.159762][ T5796] do_syscall_64+0xcb/0x150 [ 202.164235][ T5796] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.170096][ T5796] RIP: 0033:0x45d4d9 [ 202.174017][ T5796] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.193619][ T5796] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.202015][ T5796] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 202.209962][ T5796] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 202.217916][ T5796] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 10:13:45 executing program 3 (fault-call:10 fault-nth:9): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:45 executing program 5 (fault-call:13 fault-nth:11): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:45 executing program 0: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 10:13:45 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0) [ 202.225949][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 202.233893][ T5796] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 202.299638][ T5821] FAULT_INJECTION: forcing a failure. [ 202.299638][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 202.300237][ T5822] FAULT_INJECTION: forcing a failure. [ 202.300237][ T5822] name failslab, interval 1, probability 0, space 0, times 0 [ 202.318680][ T5821] CPU: 1 PID: 5821 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 202.334966][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.345015][ T5821] Call Trace: 10:13:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xfffffffffffffffe}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xefffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="77a186d1cf07aec10100000000000000cafae0e6b27dd9cfb41c7851060054a8aee79c5037174a3270e7ff570e14a410bbe3c87ec4dfae39e2f50710c00e31d70b91eacf180c3e59b8ed3f4146169c47656a6f8818a587dd8c24883189a1e8f2d327e0bf0ca4ca28a6f543ade818170200750165d3233da6073cb24c9eab810bb954b655f7df2d5e6b51eecabb1fffc05c7e9879ceac5d8a7f0d10d6de9d8956b535ef53e272571e3663f644a04df569c016b0e6e9fcdd913a05113103972971ac96d3f8c62ceb02ec0b50dc58669e6a2ef274a8e24764fccee13a88f7fe2be785091f2f6c5a7b7e7bce75924407a21b27a75f9c461fee120507e110dce7890100c85bdd7e8b3c7c8e3f71c72e63984a5b2005bc35500c067bd5b3fce968b582ab344c9334e5bfd0077f8dd4f0f50417836385497c1c667233ceb3433563d109bdcbe7d040e865e954d908bebfba7feeed381c0dec0b6e1e0467475f2b82989210d2373604b642ae3fc5f37a081bc222a6d87ca9c5731b295ce87090e1c82cf61c2cf77d3a02b7069fad8c67e1b141a260da4947c943b2fe1f002c202697bf274d455f88d231163c3fcbe273407e0ca63f04fd77ef8fa8356579a15ac69f9d3c166d34b38c44d6aa0c11edeaa97bf5bf8ed3b00a4dc89c46578f0ce613d946080753624e862882913fdbad2ce45445743e592121ad39aad9f3978fb3addd2613892854a70c53a971e7f8bcbd4c3d4c06153b51155c39151a49d089ce90803f2f4de3dc"], 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x187) dup(0xffffffffffffffff) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x2, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 202.348304][ T5821] dump_stack+0x14a/0x1ce [ 202.352626][ T5821] ? devkmsg_release+0x11c/0x11c [ 202.357547][ T5821] ? show_regs_print_info+0x12/0x12 [ 202.362731][ T5821] ? pcpu_alloc_area+0x7a2/0x8f0 [ 202.367640][ T5821] should_fail+0x6fb/0x860 [ 202.372028][ T5821] ? setup_fault_attr+0x3d0/0x3d0 [ 202.377035][ T5821] ? cpumask_next+0xc/0x20 [ 202.381441][ T5821] ? pcpu_alloc+0xd17/0x11f0 [ 202.386016][ T5821] ? prealloc_shrinker+0x50/0x210 [ 202.391015][ T5821] should_failslab+0x5/0x20 [ 202.393769][ T3045] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 202.395517][ T5821] kmem_cache_alloc_trace+0x39/0x280 [ 202.395527][ T5821] prealloc_shrinker+0x50/0x210 [ 202.395538][ T5821] alloc_super+0x5f2/0x760 [ 202.418924][ T5821] sget+0x20e/0x4e0 [ 202.422792][ T5821] ? free_anon_bdev+0x20/0x20 [ 202.427439][ T5821] ? ovl_mount+0x30/0x30 [ 202.431678][ T5821] mount_nodev+0x2c/0xe0 [ 202.435901][ T5821] legacy_get_tree+0xde/0x170 [ 202.440561][ T5821] ? fuse_emit+0x7d0/0x7d0 [ 202.444960][ T5821] vfs_get_tree+0x85/0x260 [ 202.449358][ T5821] do_mount+0x1a15/0x28c0 [ 202.453662][ T5821] ? copy_mount_string+0x30/0x30 [ 202.458572][ T5821] ? page_fault+0x2f/0x40 [ 202.462876][ T5821] ? copy_mount_options+0x1e8/0x320 [ 202.468044][ T5821] ? copy_mount_options+0x293/0x320 [ 202.473212][ T5821] ksys_mount+0xc2/0xf0 [ 202.477343][ T5821] __x64_sys_mount+0xb1/0xc0 [ 202.481906][ T5821] do_syscall_64+0xcb/0x150 [ 202.486381][ T5821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.492246][ T5821] RIP: 0033:0x45d4d9 [ 202.496121][ T5821] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.515702][ T5821] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.524626][ T5821] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 202.532579][ T5821] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 202.540525][ T5821] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 10:13:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 202.548470][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 202.556419][ T5821] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 202.564374][ T5822] CPU: 0 PID: 5822 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 202.574476][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.584532][ T5822] Call Trace: [ 202.587820][ T5822] dump_stack+0x14a/0x1ce [ 202.592158][ T5822] ? devkmsg_release+0x11c/0x11c [ 202.597092][ T5822] ? show_regs_print_info+0x12/0x12 [ 202.602398][ T5822] should_fail+0x6fb/0x860 [ 202.606789][ T5822] ? setup_fault_attr+0x3d0/0x3d0 [ 202.611799][ T5822] ? kvmalloc_node+0xc2/0x120 [ 202.616476][ T5822] should_failslab+0x5/0x20 [ 202.620966][ T5822] __kmalloc+0x5f/0x2d0 [ 202.625101][ T5822] kvmalloc_node+0xc2/0x120 [ 202.629719][ T5822] __list_lru_init+0x1d2/0x570 [ 202.634461][ T5822] ? prealloc_shrinker+0x1cc/0x210 [ 202.639544][ T5822] alloc_super+0x61e/0x760 [ 202.643931][ T5822] sget+0x20e/0x4e0 [ 202.647709][ T5822] ? free_anon_bdev+0x20/0x20 [ 202.652355][ T5822] ? ovl_mount+0x30/0x30 [ 202.656595][ T5822] mount_nodev+0x2c/0xe0 [ 202.660815][ T5822] legacy_get_tree+0xde/0x170 [ 202.665459][ T5822] ? fuse_emit+0x7d0/0x7d0 [ 202.669844][ T5822] vfs_get_tree+0x85/0x260 [ 202.674664][ T5822] do_mount+0x1a15/0x28c0 [ 202.678976][ T5822] ? copy_mount_string+0x30/0x30 [ 202.683896][ T5822] ? page_fault+0x2f/0x40 [ 202.688203][ T5822] ? copy_mount_options+0x1e8/0x320 [ 202.693369][ T5822] ? copy_mount_options+0x293/0x320 [ 202.698637][ T5822] ksys_mount+0xc2/0xf0 [ 202.702779][ T5822] __x64_sys_mount+0xb1/0xc0 [ 202.707337][ T5822] do_syscall_64+0xcb/0x150 [ 202.711809][ T5822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.717670][ T5822] RIP: 0033:0x45d4d9 [ 202.721532][ T5822] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.741104][ T5822] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.749481][ T5822] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 202.757421][ T5822] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 202.765372][ T5822] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 202.773762][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 202.781708][ T5822] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 202.953826][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.964791][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.975379][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 202.984827][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.995118][ T3045] usb 5-1: config 0 descriptor?? [ 203.333741][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 203.339722][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 203.347777][ T3045] usb 5-1: USB disconnect, device number 57 [ 203.823629][ T3045] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 204.183694][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.194687][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.205021][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 204.214364][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.222905][ T3045] usb 5-1: config 0 descriptor?? [ 204.704345][ T3045] ntrig 0003:1B96:000B.001A: unknown main item tag 0x0 [ 204.711270][ T3045] ntrig 0003:1B96:000B.001A: unknown main item tag 0x0 [ 204.718154][ T3045] ntrig 0003:1B96:000B.001A: unknown main item tag 0x0 [ 204.725050][ T3045] ntrig 0003:1B96:000B.001A: unknown main item tag 0x0 [ 204.732622][ T3045] ntrig 0003:1B96:000B.001A: hidraw0: USB HID v0.00 Device [HID 1b96:000b] on usb-dummy_hcd.4-1/input0 [ 204.924816][ T3045] usb 5-1: USB disconnect, device number 58 10:13:49 executing program 3 (fault-call:10 fault-nth:10): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:49 executing program 5 (fault-call:13 fault-nth:12): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:13:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0xa, &(0x7f0000000000/0x1000)=nil) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r5, 0x10000000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10000, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@remote, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008890}, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x201, 0x81) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 10:13:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:49 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0xffffffff00000000, 0x0, 0x0) 10:13:49 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00', &(0x7f00000002c0)='security.', 0x9, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000003c0)=@known='user.syz\x00', &(0x7f0000000440)='!^(!)\x00', 0x6, 0x2) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r2, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000005c0)={0x90, 0x0, r0, {0x6, 0x0, 0x0, 0x8b2, 0xffffffff, 0x101, {0x0, 0x0, 0x100000001, 0x6, 0x9, 0x1, 0x6, 0xe7, 0x1000, 0x4000, 0xfff, r2, 0xee00, 0x0, 0xffffffff}}}, 0x90) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl(0x5, &(0x7f0000000480)='./bus\x00', r3, &(0x7f0000000580)="0fe13ef286c087bc366e5cbd1b9e53004218305110f7d54cd9") r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r4, r4, &(0x7f0000000200), 0xa198) removexattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=@random={'security.', '\xfe\xb3!$*%\\\x00'}) [ 205.448765][ T5874] FAULT_INJECTION: forcing a failure. [ 205.448765][ T5874] name failslab, interval 1, probability 0, space 0, times 0 [ 205.469270][ T5876] FAULT_INJECTION: forcing a failure. [ 205.469270][ T5876] name failslab, interval 1, probability 0, space 0, times 0 [ 205.490062][ T5874] CPU: 0 PID: 5874 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 205.500147][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.510272][ T5874] Call Trace: [ 205.513551][ T5874] dump_stack+0x14a/0x1ce [ 205.517881][ T5874] ? devkmsg_release+0x11c/0x11c [ 205.522791][ T5874] ? show_regs_print_info+0x12/0x12 [ 205.527963][ T5874] ? pcpu_alloc_area+0x7a2/0x8f0 [ 205.532872][ T5874] should_fail+0x6fb/0x860 [ 205.537522][ T5874] ? setup_fault_attr+0x3d0/0x3d0 [ 205.542562][ T5874] ? cpumask_next+0xc/0x20 [ 205.546957][ T5874] ? pcpu_alloc+0xd17/0x11f0 [ 205.551522][ T5874] ? prealloc_shrinker+0x50/0x210 [ 205.556519][ T5874] should_failslab+0x5/0x20 [ 205.561000][ T5874] kmem_cache_alloc_trace+0x39/0x280 [ 205.566259][ T5874] prealloc_shrinker+0x50/0x210 [ 205.571099][ T5874] alloc_super+0x5f2/0x760 [ 205.575491][ T5874] sget+0x20e/0x4e0 [ 205.579271][ T5874] ? free_anon_bdev+0x20/0x20 [ 205.583919][ T5874] ? ovl_mount+0x30/0x30 [ 205.588134][ T5874] mount_nodev+0x2c/0xe0 [ 205.592350][ T5874] legacy_get_tree+0xde/0x170 [ 205.597016][ T5874] ? fuse_emit+0x7d0/0x7d0 [ 205.601407][ T5874] vfs_get_tree+0x85/0x260 [ 205.605867][ T5874] do_mount+0x1a15/0x28c0 [ 205.610170][ T5874] ? copy_mount_string+0x30/0x30 [ 205.615081][ T5874] ? page_fault+0x2f/0x40 [ 205.619385][ T5874] ? copy_mount_options+0x1e8/0x320 [ 205.624558][ T5874] ? copy_mount_options+0x293/0x320 [ 205.629728][ T5874] ksys_mount+0xc2/0xf0 [ 205.633859][ T5874] __x64_sys_mount+0xb1/0xc0 [ 205.638423][ T5874] do_syscall_64+0xcb/0x150 [ 205.643337][ T5874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 205.649216][ T5874] RIP: 0033:0x45d4d9 [ 205.653086][ T5874] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.672672][ T5874] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.681079][ T5874] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 205.691142][ T5874] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 205.699103][ T5874] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 205.707054][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 205.715003][ T5874] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 205.722961][ T5876] CPU: 1 PID: 5876 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 205.733109][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.743162][ T5876] Call Trace: [ 205.746448][ T5876] dump_stack+0x14a/0x1ce [ 205.750772][ T5876] ? devkmsg_release+0x11c/0x11c [ 205.755707][ T5876] ? show_regs_print_info+0x12/0x12 [ 205.761790][ T5876] should_fail+0x6fb/0x860 [ 205.766206][ T5876] ? setup_fault_attr+0x3d0/0x3d0 [ 205.771225][ T5876] ? __down_read+0xf1/0x210 [ 205.775827][ T5876] ? mutex_lock+0xa6/0x110 [ 205.780235][ T5876] ? __list_lru_init+0xa7/0x570 [ 205.785425][ T5876] should_failslab+0x5/0x20 [ 205.789926][ T5876] kmem_cache_alloc_trace+0x39/0x280 [ 205.795204][ T5876] __list_lru_init+0xa7/0x570 [ 205.799881][ T5876] ? prealloc_shrinker+0x1cc/0x210 [ 205.804988][ T5876] alloc_super+0x64d/0x760 [ 205.809396][ T5876] sget+0x20e/0x4e0 [ 205.813234][ T5876] ? free_anon_bdev+0x20/0x20 [ 205.818776][ T5876] ? ovl_mount+0x30/0x30 [ 205.823019][ T5876] mount_nodev+0x2c/0xe0 [ 205.827256][ T5876] legacy_get_tree+0xde/0x170 [ 205.831931][ T5876] ? fuse_emit+0x7d0/0x7d0 [ 205.836377][ T5876] vfs_get_tree+0x85/0x260 [ 205.838698][ T5889] overlayfs: './file0' not a directory [ 205.840794][ T5876] do_mount+0x1a15/0x28c0 10:13:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d4, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0x379, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r5, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000100)='iD<1:\x84\x8eG\xaa\xe7\xcfGk\x92\x83l\x9c6\xef{c\x94\xc8\xadZ\bpz\x1c\xc3\a\x13<\x1b\xa7\xbb,\r\x96\xbd+\xda,\xd8\x92\xd4\xf1\xd6d\xf0\x8d\xfb{\xe3\xc3\xcd09\xc3\x8f\x8fu\xb3\x03\x00]})\xb0\xc7R\xc5\xbc\'\xa1\xe2l') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000180)=@builtin='builtin_trusted\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000019479b781f6e7c0951f2aa40c85", @ANYRES16, @ANYBLOB="000000000000000008000400", @ANYBLOB="80cd05e9b5fcbe36a1b872afb571b82d9a3fa74753c2ad3f4cd21994a087c94857b44c84ac405dcd2cefb163f5bf3ef6f06febadefa6a4181ba667113707b24004d8912bf8c37d27a535aa8579a2cde275f3947643e8ffeba44eb3ce9e4157d1f0154bbbc3e2fdbacf7b0e18ac4607b896480deefd293dc0e2b9e6fb9dd75baf4329d6afd2c0a5df8d357f", @ANYBLOB="486c11638ece059a360fa4ccb848884870f17f5ed9429bea84c939f91c180372492f5c05000bb2f1c080e89c8d0cfbcedca1f03e2835707a16e8b68d12b7f1b9315384c53920c39a01e76624fe1e0095eeb0a3b05e1b0936f432c45cf95c89fd3f673b5e5ed8f4470b30c71d78"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r8, 0x2f, 0xc, 0x25, 0x67a, 0x13, @mcast2, @dev={0xfe, 0x80, [], 0x2b}, 0x700, 0x80, 0x40000007, 0x3ff}}) r9 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r9) r10 = syz_open_procfs(r9, &(0x7f0000000280)='net/psched\x00') getpeername$unix(r10, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 205.850812][ T5876] ? copy_mount_string+0x30/0x30 [ 205.855840][ T5876] ? page_fault+0x2f/0x40 [ 205.860198][ T5876] ? copy_mount_options+0x1e8/0x320 [ 205.865410][ T5876] ? copy_mount_options+0x293/0x320 [ 205.870782][ T5876] ksys_mount+0xc2/0xf0 [ 205.875810][ T5876] __x64_sys_mount+0xb1/0xc0 [ 205.880465][ T5876] do_syscall_64+0xcb/0x150 [ 205.885242][ T5876] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 205.891432][ T5876] RIP: 0033:0x45d4d9 [ 205.895323][ T5876] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.901709][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.915707][ T5876] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.915715][ T5876] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 205.915718][ T5876] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:49 executing program 3 (fault-call:10 fault-nth:11): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:49 executing program 5 (fault-call:13 fault-nth:13): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:49 executing program 1: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1a404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x6c71414ac3af15c2, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x22242, 0x0) utimes(0x0, &(0x7f0000000180)) write$9p(r0, &(0x7f0000001400)="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", 0x600) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x18, 0x3f9, 0x20, 0x70bd25, 0x25dfdbf9, {0x1}, ["", "", "", "", "", "", ""]}, 0xffffffffffffff57}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) sendfile(r3, r1, &(0x7f0000000040), 0x100000005) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xbae, 0x5, 0x1}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYRES16], 0x18c}}, 0x40005) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 205.915723][ T5876] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 205.915726][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 205.915730][ T5876] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:49 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x3) 10:13:49 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r1, 0x0) ftruncate(r1, 0x40) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0xc248, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={{0x2, 0x0, @identifier="ee34d1340d0dea6d6ae6d3c1bec62840"}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x70ee08c105ed780d, 0x7800, 0x7, 0x8, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x0, 0x0, 0x2b, 0x0, @private=0xa010100, @broadcast, {[@noop, @end, @noop]}}}}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 206.025953][ T5896] FAULT_INJECTION: forcing a failure. [ 206.025953][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 206.039663][ T5906] FAULT_INJECTION: forcing a failure. [ 206.039663][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 206.051154][ T5896] CPU: 0 PID: 5896 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 206.062510][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.072567][ T5896] Call Trace: [ 206.076150][ T5896] dump_stack+0x14a/0x1ce [ 206.080583][ T5896] ? devkmsg_release+0x11c/0x11c [ 206.085504][ T5896] ? show_regs_print_info+0x12/0x12 [ 206.090683][ T5896] should_fail+0x6fb/0x860 [ 206.095084][ T5896] ? setup_fault_attr+0x3d0/0x3d0 [ 206.100275][ T5896] ? kvmalloc_node+0xc2/0x120 [ 206.104950][ T5896] should_failslab+0x5/0x20 [ 206.109440][ T5896] __kmalloc+0x5f/0x2d0 [ 206.113673][ T5896] kvmalloc_node+0xc2/0x120 [ 206.118171][ T5896] __list_lru_init+0x1d2/0x570 [ 206.122922][ T5896] ? prealloc_shrinker+0x1cc/0x210 [ 206.128060][ T5896] alloc_super+0x61e/0x760 [ 206.132718][ T5896] sget+0x20e/0x4e0 [ 206.136550][ T5896] ? free_anon_bdev+0x20/0x20 [ 206.141209][ T5896] ? ovl_mount+0x30/0x30 [ 206.145433][ T5896] mount_nodev+0x2c/0xe0 [ 206.149658][ T5896] legacy_get_tree+0xde/0x170 [ 206.154318][ T5896] ? fuse_emit+0x7d0/0x7d0 [ 206.158720][ T5896] vfs_get_tree+0x85/0x260 [ 206.163251][ T5896] do_mount+0x1a15/0x28c0 [ 206.167652][ T5896] ? copy_mount_string+0x30/0x30 [ 206.172576][ T5896] ? page_fault+0x2f/0x40 [ 206.176992][ T5896] ? copy_mount_options+0x1e8/0x320 [ 206.182172][ T5896] ? copy_mount_options+0x293/0x320 [ 206.187350][ T5896] ksys_mount+0xc2/0xf0 [ 206.191487][ T5896] __x64_sys_mount+0xb1/0xc0 [ 206.196059][ T5896] do_syscall_64+0xcb/0x150 [ 206.200577][ T5896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 206.206464][ T5896] RIP: 0033:0x45d4d9 [ 206.210423][ T5896] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.230283][ T5896] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.238683][ T5896] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 206.246640][ T5896] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 206.254641][ T5896] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 206.262596][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 206.270620][ T5896] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 206.278598][ T5906] CPU: 1 PID: 5906 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 206.288854][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.298913][ T5906] Call Trace: [ 206.302210][ T5906] dump_stack+0x14a/0x1ce [ 206.306556][ T5906] ? devkmsg_release+0x11c/0x11c [ 206.311585][ T5906] ? show_regs_print_info+0x12/0x12 [ 206.316790][ T5906] should_fail+0x6fb/0x860 [ 206.321486][ T5906] ? setup_fault_attr+0x3d0/0x3d0 [ 206.326726][ T5906] ? kvmalloc_node+0xc2/0x120 [ 206.331406][ T5906] should_failslab+0x5/0x20 [ 206.335914][ T5906] __kmalloc+0x5f/0x2d0 [ 206.340082][ T5906] kvmalloc_node+0xc2/0x120 [ 206.344591][ T5906] __list_lru_init+0x1d2/0x570 [ 206.349359][ T5906] ? prealloc_shrinker+0x1cc/0x210 [ 206.354476][ T5906] alloc_super+0x64d/0x760 [ 206.359011][ T5906] sget+0x20e/0x4e0 [ 206.362922][ T5906] ? free_anon_bdev+0x20/0x20 [ 206.367778][ T5906] ? ovl_mount+0x30/0x30 [ 206.372024][ T5906] mount_nodev+0x2c/0xe0 [ 206.376361][ T5906] legacy_get_tree+0xde/0x170 [ 206.381042][ T5906] ? fuse_emit+0x7d0/0x7d0 [ 206.385555][ T5906] vfs_get_tree+0x85/0x260 [ 206.389980][ T5906] do_mount+0x1a15/0x28c0 [ 206.394320][ T5906] ? copy_mount_string+0x30/0x30 [ 206.399257][ T5906] ? page_fault+0x2f/0x40 [ 206.403590][ T5906] ? copy_mount_options+0x1e8/0x320 [ 206.408798][ T5906] ? copy_mount_options+0x293/0x320 [ 206.414032][ T5906] ksys_mount+0xc2/0xf0 [ 206.418196][ T5906] __x64_sys_mount+0xb1/0xc0 [ 206.422791][ T5906] do_syscall_64+0xcb/0x150 [ 206.427301][ T5906] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 206.433195][ T5906] RIP: 0033:0x45d4d9 [ 206.437107][ T5906] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.457180][ T5906] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.465597][ T5906] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 10:13:50 executing program 3 (fault-call:10 fault-nth:12): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:50 executing program 5 (fault-call:13 fault-nth:14): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 206.473574][ T5906] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 206.481550][ T5906] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 206.489962][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 206.497938][ T5906] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 206.508880][ T3050] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 206.547165][ T5920] FAULT_INJECTION: forcing a failure. [ 206.547165][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 206.558475][ T5922] FAULT_INJECTION: forcing a failure. [ 206.558475][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 206.564259][ T5920] CPU: 0 PID: 5920 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 206.583371][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.593428][ T5920] Call Trace: [ 206.596755][ T5920] dump_stack+0x14a/0x1ce [ 206.601088][ T5920] ? devkmsg_release+0x11c/0x11c [ 206.606114][ T5920] ? show_regs_print_info+0x12/0x12 [ 206.611320][ T5920] should_fail+0x6fb/0x860 [ 206.615764][ T5920] ? setup_fault_attr+0x3d0/0x3d0 [ 206.620919][ T5920] ? __down_read+0xf1/0x210 [ 206.625425][ T5920] ? mutex_lock+0xa6/0x110 [ 206.629846][ T5920] ? __list_lru_init+0xa7/0x570 [ 206.634825][ T5920] should_failslab+0x5/0x20 [ 206.639333][ T5920] kmem_cache_alloc_trace+0x39/0x280 [ 206.644622][ T5920] __list_lru_init+0xa7/0x570 [ 206.649387][ T5920] ? prealloc_shrinker+0x1cc/0x210 [ 206.654500][ T5920] alloc_super+0x64d/0x760 [ 206.658920][ T5920] sget+0x20e/0x4e0 [ 206.662728][ T5920] ? free_anon_bdev+0x20/0x20 [ 206.667408][ T5920] ? ovl_mount+0x30/0x30 [ 206.671649][ T5920] mount_nodev+0x2c/0xe0 [ 206.675902][ T5920] legacy_get_tree+0xde/0x170 [ 206.680580][ T5920] ? fuse_emit+0x7d0/0x7d0 [ 206.685080][ T5920] vfs_get_tree+0x85/0x260 [ 206.689492][ T5920] do_mount+0x1a15/0x28c0 [ 206.693819][ T5920] ? copy_mount_string+0x30/0x30 [ 206.698898][ T5920] ? copy_mount_options+0x1f8/0x320 [ 206.704112][ T5920] ? __sanitizer_cov_trace_const_cmp4+0x22/0x90 [ 206.710367][ T5920] ? copy_mount_options+0x293/0x320 [ 206.718642][ T5920] ksys_mount+0xc2/0xf0 [ 206.722809][ T5920] __x64_sys_mount+0xb1/0xc0 [ 206.727512][ T5920] do_syscall_64+0xcb/0x150 [ 206.732027][ T5920] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 206.737918][ T5920] RIP: 0033:0x45d4d9 [ 206.741809][ T5920] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.761411][ T5920] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.770016][ T5920] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 206.778095][ T5920] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 206.786063][ T5920] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 206.794124][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 206.802096][ T5920] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 206.810509][ T5922] CPU: 1 PID: 5922 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 206.822580][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.832635][ T5922] Call Trace: [ 206.835933][ T5922] dump_stack+0x14a/0x1ce [ 206.840440][ T5922] ? devkmsg_release+0x11c/0x11c 10:13:50 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x300) [ 206.845381][ T5922] ? show_regs_print_info+0x12/0x12 [ 206.850584][ T5922] ? stack_trace_save+0x123/0x1f0 [ 206.855607][ T5922] should_fail+0x6fb/0x860 [ 206.860019][ T5922] ? setup_fault_attr+0x3d0/0x3d0 [ 206.865054][ T5922] ? ovl_fill_super+0x10a/0x4f30 [ 206.869988][ T5922] should_failslab+0x5/0x20 [ 206.874493][ T5922] kmem_cache_alloc_trace+0x39/0x280 [ 206.879785][ T5922] ? xas_create+0x1269/0x1360 [ 206.884466][ T5922] ovl_fill_super+0x10a/0x4f30 [ 206.889323][ T5922] ? xas_store+0x9a2/0x13b0 [ 206.893845][ T5922] ? xas_find_marked+0x8c8/0xa10 [ 206.898787][ T5922] ? ovl_mount+0x30/0x30 [ 206.903040][ T5922] ? ida_alloc_range+0xa59/0xac0 [ 206.908075][ T5922] ? delete_node+0x761/0x7b0 [ 206.912676][ T5922] ? __radix_tree_replace+0x24d/0x2f0 [ 206.918055][ T5922] ? idr_replace+0x1ca/0x240 [ 206.922748][ T5922] ? up_write+0xa1/0x190 [ 206.927605][ T5922] ? _raw_spin_lock+0xa1/0x170 [ 206.932391][ T5922] ? up_read+0x10/0x10 [ 206.936464][ T5922] ? sget+0x4cb/0x4e0 [ 206.940548][ T5922] ? free_anon_bdev+0x20/0x20 [ 206.945230][ T5922] ? ovl_mount+0x30/0x30 [ 206.949470][ T5922] mount_nodev+0x52/0xe0 [ 206.953722][ T5922] legacy_get_tree+0xde/0x170 [ 206.958403][ T5922] ? fuse_emit+0x7d0/0x7d0 [ 206.962825][ T5922] vfs_get_tree+0x85/0x260 [ 206.967249][ T5922] do_mount+0x1a15/0x28c0 [ 206.971588][ T5922] ? copy_mount_string+0x30/0x30 [ 206.976627][ T5922] ? page_fault+0x2f/0x40 [ 206.980963][ T5922] ? copy_mount_options+0x1e8/0x320 [ 206.987045][ T5922] ? copy_mount_options+0x293/0x320 [ 206.992857][ T5922] ksys_mount+0xc2/0xf0 [ 206.997030][ T5922] __x64_sys_mount+0xb1/0xc0 [ 207.001628][ T5922] do_syscall_64+0xcb/0x150 [ 207.006135][ T5922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 207.012125][ T5922] RIP: 0033:0x45d4d9 [ 207.016025][ T5922] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.035933][ T5922] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.044520][ T5922] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 207.052500][ T5922] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 207.060559][ T5922] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 207.068530][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 207.076502][ T5922] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 207.363322][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.375309][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.386235][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 207.395906][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.405442][ T3050] usb 5-1: config 0 descriptor?? [ 207.743280][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 207.749372][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 207.758593][ T3050] usb 5-1: USB disconnect, device number 59 [ 208.223145][ T3050] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 208.583209][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.599843][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.621625][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 208.640507][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.660619][ T3050] usb 5-1: config 0 descriptor?? 10:13:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:52 executing program 3 (fault-call:10 fault-nth:13): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x4000) 10:13:52 executing program 5 (fault-call:13 fault-nth:15): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006440)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0x90}, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r2, r3) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000006280)={0x0, @rc={0x1f, @none, 0x3}, @generic={0x3, "61058ddcb46b5a82f57794a18805"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x70, 0x0, 0x0, 0x0, 0x4000, &(0x7f0000002080)='geneve0\x00', 0x401, 0x4, 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_fuse_handle_req(r5, &(0x7f0000004280)="e126edf1ba3558ad65ba3d80b40069a75b91fc08131e11c063a81010ecd5e0d4fe1e2abb07c2fea0afd99a491897229d369818af3dd366ee383c58264a879ee1d1c18f96eb98a3dbbe6011cc394685102b7b5b51b630a3467245eb0e4e715c8104896d7b8b4f481d29aef20fe8e40a58e8c6b0d5fbf348bb05a1473d068fd4ee74573b5a38aa7fd94a91d6b7676e78d9f676f614c2f188484cda4985f4c1547e99c9328ccc1d78bf95ea2fe81e69f174860262a13f1292cb02f76d91de2b82d37d1ff7fc0cb1a5eaca845ac7b89ae209131fde5de3717889755d953bf263a0b3765ae8a0048ba2276278d341d415ebe036750bb371ad620fcda6be09c32ed679a24371b1aa898921f78a95e22b48368d58b009cc175dbf36f05dae7f7665b8c1e861be263b2abae64907840239664377ac938939c03d93af49f49751f9b92b6fe6ab40032907cecf052b8559ed72857278403223ffed4d1cfe5f3d777a3c1fa5624545789446c266bcbbb3aab173fcbf6a91ab18976c53f0c7793a6851cd4b4f57935dcc46be79c222716fbaa21f2c5e2a73e32a6fbf35baab19922936533b2b711da775b34daf8a3b84e6547f99f7d5c17ed236ced73f4434ecac207825f2e9e50a09ec183f0a02d216c28883b5a8152626f8f633df183eef759e27d32569175c4ffb36041afc977d71c17dab8d8550d6ffd00aff4555824415ab6d45fca0c8c88a34d2b06a97dbac226a6e572f500e292c223f4a6cd5db85c9de568d615526a45da22c794a5412caf4751c30064451a45f52fe36dcbfa308929be0b4464a66944e80e299c58ce84bfbefd67f13efbf8aa65055bbf7a55cf4def266996532ed59589ab2d63cdff278e4e37a375f4e5897a606260fcccc9f7f9247fbde954db3db960d03c961c35200746a82e86f439aa0acadb2fe7b97ba414000fd20b90acec2129bf41abde5cc6fbc6366a6cc6f5da6579321cf279334c5db1afb5e2ff95d8616f469f227fb9405837edbb095df04e061fb0fa31954c91757a41c6c628131a0b2b862d0c52d06954cfe608d5364be278d624871c7f7b63f000c1f1a088b9d287705ea6c74fec9d6367026ca2a2b74e4423599d31ab3499ada02ce2e21292ef1f056a05fe09097f06f6a694582bb869df1d3ca6f5f2f6780d1babbac8dff568ad803211cdcd370f69f2680dc9f01f28ffbd45a8f0905b305558c9202fb58fbdf45189de78974e2ef406c4b17a2314a4b198e8b1085bb565731a6ccdcf5858a83518d502e93cf0606c20af38e68ce0df06e4556f761b2bc0c2be3512d28736ca26e7cb2de83d4842cc7b3793e53dd09bc102f9953583560088e61c6aceb4503a469bd50dd83d145a7c29b848d0a4791cad906bbe32c8f4d6150d2d66e0d6226c359231d8113d4f6e843b6ce904f8cf0f0d66c647c62ef6359d177707e35c8180bd7179ecd571c774f36d5ce9dec3f597468bc3ad7189476efc91f5531d41744b3ef4507b095a237ff42ef29f526185c0d092e4615fe0864bc5a87c6b841b9bfa19988503c30dddbf4052191ba7d98ff9cdf5b4837c749196c9667ee0b1172b25c26d6817cf9775ce25664b6be243ba267b4209e67c6e00143456710a9bacfaa949f2b587f85a1ec5d9b834a2b2ef4bb6742f595e2ca74834c50299e420f4a67d37d569151e73832cffcea6ef87e7e2f6347cb7144952adf631f2d4cde7040366257c305d6334aad44ec099825fb44dca9aa8fcd1ca92251d7efbd791adabe2227d7ddcf1da67f90c1ccd2ba45b1a703d3700c219818cd1637e941d7889b1e4f038bca8721612f5e1fbd381e3ded926e6f9ff9e7c5608be2526a3134fd964ac56f68d1ae61d2ac99fa6ea4d0eb11d9f7a5aeffe921045eba8fa35f5c8c7657b90fc56cfe0c43049db1bbbb151a1dffe04d04e1f91834e71cdb01243b9a461ac077a1cac7bc3590204fdcbd3219378557f592c0a99b30431137e42492d8e8522d93be54807ff75ed071adaead9264416c9c676a9ab8aeec22bd17572fd72b857f946a641272b63a6a2373d1053e4402da63a8d8e69a579a3d885c8eed6a50795d747be5b2fbb8771a20cf6a45ef10ba8c4ff0e2d38b9189a1deeab8e68eab86c72e37fabe60ecaf2814e2e34ce2e8e8af916c2dd531d0638cbca41d00e3b81e49714f22eaa56d9dfaddea627f2a65a5da6032241edf57c237ed8183e40982f036d72defd66a97a533a4eeefbe3f4527149f7623b4dbf1200eeacc4413dd4e379c51c8cc80fcf6fa47fe4672f0ab1866478f7b29e861fba65d6e292b394ae2350bb764a2ae5034ab3652b1cfc128d99f8e2833dba1df51ac80e96f32ee06317b39473a9a703f3e674254270e19b8f0456037c1056a7e875c1b2bf87467ee4c23e20624b8a6cb958ae127dfa911ad6f2a215eefb39cd9bccfa6008a62dd17b1f65f013a2954df12b47c93ec134d11a5f3e112941a4c79dbb9ba5f87df1300bebb4e2b7b4962582d7ee73c6135e4158366ed0a24ccdd89d46ffc793d80255c2c50bb2ce8fe7fbc69023288a712167f61e781913dc0667fcf4c00190b3641f06b9b07312338fa5129040623f719a9e04e5f9ae167fa0c808de87d2361680998fd674eeb7c46415a5a81e1dbbc8789c584510a0c5de96599c90c32313f1dfa8bca686ad25a034b4a905ac61ba6476827dd51a4aab14c670fdc16fda083e6cd58729e0ff7fae13c748ceaa6ee8d3f1effdf2921e84623bc749ef8f7e6b3839a8f10a95426a3c011ad83240dd6e60d8e84ed2c70e6e71ed0dab3b166e24c1b4357c830a1c228b670d26adc1f83bdbd7c149c08ecf1c1e4c5852324eb61b87eeb3664d387a067159944d7ab2a680e347277412b57b696160111454f3bfe94910c0f9a02fb586e363f94c33f926f4b43bf695e07b36305ce99d656a68a8f17947c67f9bf5cfd77efbb1ef7e96ccf84502551aaf7ebf714f6c38cdbcbe3f1dcdda85467168ed1dc265af82fb6fd5f06ad4af180acf9bb19517711bee63e86f9bd6a42e3cec35a2e488ed236c4e91c93bf485f30a5c89cf778e2a30cc847479f8b50eb181329d29a87b6ffb40fbaeb8f42251280863e851baebd2e949bd57332a01d6c367b7aeab4c720b26fe5f73d58a42fb3f65739d0508c210d54e1933601205871baf8e4d588966e0485e90418b20e431cf75759d59eca96c17eebc68fb6acc3ad90d54f278c312303ec65781270d137dc7bc50a48a5d29320a0f2d722dd7522be9b23317b6e3ce2979b26771ba8a53f7c3abb60ea0b0b10fb636a401dd1295b7060be08ed8c59aeab8ad33a76a265a6225adad2f017c36897d7b149f4af9851e40cf9236641764ef00bc2084526c1f22bba5520b29ebaaf2f682b2f3be02c0977423cd9e1b9980ee014f06fe5990f3ccc2a645f001b95c75e1f36def553d4afb4fb37d7ebd5f2c90ca813ec3f61486c9f4bb3f590cca70743e732331b5499da237acf72bbcb5c0918b0767791fbbc65a1bd4188d8d41a60eabfa116375a522ff91b602a93d39cd6b2681afc3a7d6a4735c25fa39521f0a54b1a838a88fe7f67b6bb064e53b6db3e23ac25d953cfd4aba3d6b2be964b48a6c1fce34b2c960a614785cfebae08b77f1745adc8be306bfa10ea0c0a18993e1795490109c336ebfd07acdc7e89a17bdd7bd883eefeda4e3df7784db0c9d152ded1d07635f2f58d9b0bf5e27a3a05b0084043021a5728210f920f63afb97d4287934046c19cd733d08d2db5ad8fe9de4e736efb9b7b7e9f96687ef69fdeb0536f64879e8087791576358c8662d6efd7b4be488c06624678265aace72febe2997ea4d88b04c81c099dd4b5d984d2b7279f37f9e49239c99e8b5bcf738b8b0d426ec7feeefc704f66ff496f809bb72163ed97aea9beaaf6a3b2609ee4fd220bb63fe37ab0629cc6ce556049eb313d1dd8ef5a5ad56f1aca2491e73cfa8c69027309d2bf81990bf4ec41e21f519c725e6bfb16a7f321a3d0c5bd579fbf9f3b3a2ac5d4f8d9e3cade88dcb408cfe293af08439d7f4d19bcd27a08f55f05b11d53383d5c669e13a4aa9efbcecdc8743cfbf555cb364989a5c42c6916d0002a200c99d1a8321a25f7cc4bdfabb640df1ef65fda23bab762694216b00b498ea0b99af9dab2deaf186da4d90ff72687e32c375efefa38c11522ec2038d1105f77799a586e8c709180b5fa975d3353d04e706230898966e0d12b890f345829d58c238c66570863291f7266d215cd97a85545241b2382b86ed3957f8b3329adcf81b64ce9c10cce8c9e117fa557ad9776d0d314d4c3e7f666efc3e4336da1133e7cfee4251cd78c8df1c3b3a5480cb6afb557c60c8bb949361394c85a8efe23a72a708cbf55bab8be2b7bf600bed9b8ca5273d710dc2deff513613426be9f13ab65038354535e2109d6183b3930c3fbae5967f9925ce9823ff2e3795541d2818b5fbf85a2b752af82761faf2574efe6bbae33d78cb01655fbd85663c65bcab7c059795d0ef42325c37b9854401e5de7c81841357774b236cdadf3bbe2d18844d651b57e1630cf706db40ab0872b2eb38a997d2aa299b18e8be8a9d70a296c96038acbb3eac4c9d0277ca95f5a9c620ed6647502dadac603fea59e12fd3b94c3378606989480aa2138f54dabf6c0bfb00fa5718d00a80998d4efe48aa5ff0394c761b26c93789b73fb2f0ccc8207227a98113326845c16bc1ec7ba623e011780423ac29a34d38aa845a762fac7a3fd7fbf5e4bd47a5603647669211ea8605dbeb6ec5d2916f457dd5191da308986078b45e882dc73afae339023a03dcd216dbe87185bdb03651c6b1b4be6cfba3860241dfebd2b80b85e46d02646e46d7d13af85f7e95d9d60a9ef39c5b7df3f7b649a99530881a0ab74713f7f4d125c357e6298e56c7a72d4da5149725791b7b19f50b9124cabd4e26618fa1278371a9efb2edeaba517fb4acbcbb383b4f4b6b5e0ac7621802b8d0d7e813290bfc00f65e5f0ae90ff6edc8db9751b6b4a7821f5611ba763be64978eb86c365be26de4c7d01f288940c9fb8c199b198aea7be7d953d3e338c4e3f51ddf7c4427b91b01da30f807bc9d9a7d8cc040db912e8d780c99c0d5875fddbeb78cf97cdb26ed2df150cd0076aa35958624900288e8c77656f8d38f890032edfeeabecd14750d9d2b9a460743cda8f84a3b3c2454d74686dad81c73dfde6767bcae527eb013405eb95c084e8e8b7c803b701d714c1c47a34736dd01f9cffa3aca4f9e039bf9dd9ddf8e0fff9dd75dd5ffcc7d4757bb874220302cbc00defed65b561a432cebadd389322bb07998ee622692e98e19c29eab0a84b7dd118332c812a0c7a409e67b50816da005ef7e8f1fb13242fccbe5ffde6c4cad08f0c577e38fc386220f272c4aaa3a376c5de2d59466ff2620410b6999127a5bb8a5b3e263ad1ba483c261f4a55470575daeebaea7bfee07f9ed8614b763e8065d7cbe7875448fbee57aa32cc80ccfd047db1ff35d68d8c5efc9871caeeda260727103abdd9f1ff97fe7138ec77aeac03541f593aa8871e5edd9e1f814c0a532573b6a51050e065a04dfb616479d5a1a56357a133bf265f3fae0abdbe45c381b669a6205d384a0e786936bc4a70006ecca5e22e6ee92a8a12fddcb8364a56ad4f882794a0c83325da1e89589a8afdeb84418dbe163f2c772662afca5e534ad50296da419a7c06c630fd5fe301bbfb90aafc66f20927101da8c5be926f6b41b07f40e711f3a932371c24ade42345dcfe593746a374bbee10cf87aa0dedee9faf34ab908b6b8fb7ef93998792608954158065ebcaf2d2e78cf2738b718aa8500e678ded979bc26402197b8ad967a9d5397965ceb9a052ebaab2a2ff3c421292877330540b68216d50f20d1376be47f0ccaeab23bff38f63a38836962fa671b4ecdf8f924ebb18a05b50ca7f4e2d244b8adeef5d6e8dec54ee2eb336c2f22e05d2fa1b61338cac8ece1cf21ced9cd3529399111cff88cf714a26f6f5ae11aa0d49575ca9010e4d85075b6a5eb69aefeeb7218c52a729548c057b2782f1b6380cc5298237f439e11454523796b5a5f423cfcdeb4ea255417deddaf2c1ca178519dba037ec1aaeae20f05758639860585c41ba4cb6b461e07116bc97ed2206365898ce572724193a2d92439e32773671014ab6ce2a86adc4ae50c13fc3624308c4d1f6a8a9084c1cef61cd90db3089a182606d6f76df92aef693dec7db78c03c64b5c875cd3cf2ac8b4dcba525c3d6e5b6195d415dbd51c813cf5512c3bd17e5fdac56f9e959eac539bbdfbe55e084fd772ac7ce3a8ccaa9f91fea393bbac45ba4b162aac6e4c2c6e84345d8f5f343bf1b1a40bc0a971a1a38ddbab563e7cc76f959bab95bcad97abf0948982fd225c056009d66a5e3b9955be3e4e979d0029543143ae821730819ca2c436688f77b9bd9b22881236bb3604053f25ce554fb7975da29741babda9f5ff64711af1c4a27e3e67192665af3c92833fe341099e2b6f59bc9d1e1677ca5165b2545f077ad0411ecea4c154d6345a143f4f36890da715613e1910fb502b49adf4e2112c52e4e996fce6d9aa23f5c3a88278c234aabcb61f1a144717a88d4d612b87cabfecead3acdfd0f2931f8e0bd5ad565b303a27694fab4fdccc93d19b7b758dca524366bfb8e1242c4dc2cd2523c3f5b3fd098d50beeb8a555c64f3ebc029b7512a354a9952e2721647737ae619af645054815e6468e4aa4c772b8876b3aeace2c222fbd339804ee795f5a4d2e474feec7d653daad35802fb550fc69e0bcbe5427a6f45e2022039846af5f5d07e8ef7a397b15817ed3cd89b4b018322e5d560f4a82284e0d1efb3673946b5be976ed4ccfc0c657613b331aa3649878c083ae4ceaab89c17e27182c890abbf8aa9172b837b6afb9c94b6f12404f3e8799f37b9bb91e84fe3123ff30335506709275d21feb3a5a481a49a7ba784940605c81e08b148393081d1c3e67f8d36b09eb82aa959eb2251735f9151433427c167300e907ecf984b3c15bb8ef847a9ddb6a78e71c4ee82d0b3de226bb4b00e90c342fcd1a9bb9721b35694e2f84f87545c29aca66fdd2dfc95f5d93f46e5713c2fc3d401c08ec3ddc0fa3dfa862194adc46b04dbe7b34081d699a91ee48542493f90e0595df4cc3daf564f3cabc800ae579caf5fa1efc02a91f82ccca7d197637a04dc1d57d8d3a209bcf8fd820deda411fd902b9f716f911a7c7d857014d1f2a55321f1d2ee5811c57fea1e90e6cf9f46cb56d181cfd30dce5a90f49af81248614ee080bafa352896bf1cc927df3af7edb9c5060e0a4880ad86aa81adc1df45676e987812c35524e2e8bdc0e056c0278a44ac5f124f74a9893d6fe2fcf7578715510c8ab1d4bc646f420452a61a6881d5a67f451a8b76aeac7a2ecc894873f28bab8aa09e16d26c67b0c5fc16d8a6d13946babe0553774d40ce6bdbf9a1dcd5b587b077665bc701a874c6ccd265737c11dc1a2f32fbb52c2c6b4a1ac719f22f283af9ce2d2b1aff39b8bdd56ba653686c0286935666821cfb9ae1a59910bbec6f81530089d739597c746b42141a4b7e7d29682d71d937380bee674574ad956458c0aa73edc16c43cb9bcb641b65b8a4d719510e6f372c03e51e82e674a0ac6dab11b0994cf114b60fee93155f90eee2c7f04683176c534c15d398b81429635dddc31abaae308f28529d3911bbf4769eddd64264741e28cc38951a67f62ade4d2fc4297a09cbec8b8bfbc03873a8b6e1312d7d90061cd059f9263328579902e2210d5f3ad603db5ac0ec6e3202d9b07c1ae8cc885344ba5410012c6c80aadeac9a574f6b073e84f81f04b4ea692f527b8ee0310a6289ad3b6139c60a00fa27dbac206d98feca46f242e8f9426170f7a9d7b7acbebdb0fccdde5c2372857a3717aa68d32f4eee8736738f7ddaf5216417151c28c3deb7d4cf4e56b3b12886567b42522b29bb34b6f73348e8ed66085a5ad05c9b92272e4343dc74b9afea5eaff834b772ae033c74dc59355a2eaf744f040a5a7052880c1ba5ae3bbb3be6f7f468e7a30d9e5ceb0e5c080ed01ac502ce755a6defb92b1dc2aaa5cf23aa268ce71cf1ffc81453cd30ee4c22b3aa4ec5c924188695aa4addd8bae61bf05b3185f1183011ad388b3b44671815ef5a089191f09be7136d451e8389e06b6d1cf3e11f17ebb260de4ca9689d3ccdc10cc241d268f046b762ba7be80d368fe7b1e2c0b768cd9b6ae3df1fed1c7d658c6c24697cfd812c6588247579f36c70b4838ad463825461574bd4901c637ea358394a2c4c705d6426d883c63cc805de6b777cd1f6199fc6938e1ea6b87c44152286179c0368585c815e247161e3627d62b00659388395c92ac9bd412d7cfb994925563ec61bfaba4bc91586596f773bdbf43e6a61be865e5afa29c1659819197ecf553275719250d07f7793241a4a705345c85b66263604e1dc7b98608d4570343f10df31be36430d374c7fd0150ccf09274bfb337436c91fe29c5e94e7a87a304feb1f68b8087795c5a4de87593bb1ce04846cee6eb3b6a2c29ed547d5261a7c29106a7ffced2e17d5fd7475a0325635b837a18f022c1ac1c12da7077309f7c75a5a98a2e8954b2b70ffb078e743b08ee306264b9d0ae0673c8b00d03adfdba2b65d3a517d6b21eaab8f8fe42d65aa0fd9e429d8e6c8acd02e1707bf5cccbac9d4a7ce4d84fad1d1f617cbe11ab60a1f23803e77b089c6f580296b63a3cc5cbfc420fe020f3a4187e77aba0e0cd91f0ccf9f8d557084ceea99b79cbccdfff415d015a28276daae2138b1fd90b4eecccba655acadb7c3be798cb32e8a5763335dba4e23b63682d196080bbedb3d01ff1f1e9dbfd76576a9f21174c15b2a4a67fdb89c9aff3ecfa71ba8eeb804422263b51646df884f5b1616f1b1b33a90680bcc940652e149dca26fcde0617feca54ac5a3b6f78671fbb5436aa22d63c2c3e601847e01c6a788c2c40b9e0561ed8ffa52f8e04bb1d3fa4384b7ac431890fc320b96759717e6851e4ead5a0f89b1a54df795987c523d30cb003655f72d20fb27b7d21ab792c92d7f0e8ba9ff15f6ebb46cab945f371b2064b4b01505e85f7f4377438cfc3bf9dcef4e1af6a25ed01381df499984815770928c5c78971d8db0315957fbebfeb3d5aba76e60f465c2ab6a6c91a10bbc223d6e3c40de6a7ad4c91152e24358150614451d9efe1512edd4c6e3641386a64b00ad9b5449383bd7d74b24755d63dbd220c2720797cd31d265255b3b23fe58859d29a1456953501d5ca0330b48bc501b9f2c958d84d5ce8400bb5195ef6d78184dbd7feb6541eec55cd989d582e7b6bdb409ed8fe973426f91cd0e4c7fb276fc70a8a5616a32ec0a68bf493e184804b94a8f082995349d5342ca378f026406ca9c27e1ed82a2e5b0cc2276080018793f6b47a1fdabcb985f7730e0ee73a9babfe3ef403c32b1731fedb20ec6443748cc664cd5b3618dec2b100d267e6adb9a46d9442bda1bc7dc3eabb6383d84ea02ec795a3d1cec5cc48337bf0b3e80d4d2c760a5d9be761f50327c753e1360ef90b6f30e64540bc08431dfe835d221bb099ecc09c6460a61b8de49948a04621695e18c8895150e584514f7e31ac302b2d45fa10a5b2aa4549a30c77bf571dea6753334be625242fa083fea274789b7f67414da19b949bc0f2c31b85e759fb8a5a3fae9e4c58aa9417ef0c47bf827945a4c2d66a61a6150459e8dd78e85abe77ef045a38c5093196e750f6e1dd6901da09860d06181b9dcd0c4055f0e5e3de2e4ade26d0cf5c14e028e8afb91c52cff878975f5afb2432a0e8d5b4679b45eef39514382a8fadf41939e021940abee12f50b420feb0382f7791ee95e1ca49b1681be1f6528f186e9a479828ca34cd0b9d62832b879919214197dbfabee9226f6139e00466e3083be8c163be6e821d372970bb01ba7bf7a5af4200474572cc2cf5db4e58d1b24bce86932cc5f29dd2388e36e067319e40dac2ce5f545503a16af0165aa0a4879bc1e0916469b330d977d9bc8b2a170fe41bcbdcfd1513d0a8be2cdfd8859f7b8b75ecefc01f79bc289255ff1a3a785380fc3e419553be8f0558a6f2d6cefd9adb22f811703b233caa9a93f048d6e45d1bae76a8cd2b0a2281f4c6ebb388c66ee058fab55c5c1b0a34eaa5afcfb9fecf75a023dc8eb6484664713b6443d7ee23e9bb76c7e1e2855c634106636c2eb270a65122e9e07c2637ec33717af55d1181498b694cd61b495aca7001c4c5b4746167328ce5545a403ab4ce83316947a59763d5dac79f4f08bdc06d0b0d382ef87ab623432ab03eef4af650bba6472fcf15b2008472031129ad5979969a38e29b8f63f84c5a7de829766620e8ad0e760b035d16970af1db5518fbbeb81c8c54fe407f0dc6f3b92bbd9466d870d51bbc006c50a0141eeafba86102c46eb6bca921f3dc21917ad4695829f249fbb407d2b3d9a476808f8103856acf3085fcfce774b045206c9b2de7ea8a4a84f1f73384cd19714b5efaa76f9f82be016c082955146afab14bcdc0d2336505cf44e55e6df6577a19c812e8c675dabfba260e3abe499448fe055f955adae00adb201abda4e3cbb23d3883e0c2498f39c63cf777fb752d1f1697a9a2c6f12d38e8badfeb9683c076476b75951d6692fabd371a80b432c9da04beb07c06ea5e9cc4021f3552bea67ecf6d334c54499e3c25a16fd745d0073529a27307e4db636ec19588908b61b3fdfe4fd483481ce68203837bd8960f24349ebe6305a0b477785ce89820f347f67c67cf2aa227adcadb90592be6c637f8120ff22456206e749df89fad1f9e6b6dc262b4be40d6f73a628080dc1b397104a47734dfd3e60726c5bf56e09da16f107235b1c104d128b40214318d115a94b1254d185c0fbb304830ead1349dc8c09fd0e7a11bdd4a9e5bf75bce5f1fd6c18753a86b5d66a7558b3366bcfcdd284924b7311f859ac897757aaedb78f1a1f20f7a28e5f5aefae4db8400a1f0704e5a558619cbe405bdd13607ee888a99ea65f970aa23ea3bdd53db1436118af27ee81c8550dca09301535d9fa3377e4df7d354f7a1b94daf728c35d1ad90a6cce8c719929e76788e414fa5d360866b3d04ecd8f67ae3a42ec372c1b51534fcb37e3d72fa1f665db20e5e84e4735a10c7197e0e29bf828f699162a42b9746904bb5ebfa089671f5357fddc7ee2482d88fbb2dcf561ecd32a67a5d6d6b4b2d9f52264cde2b4b7236ab390ef2d57ddbe3459be1de1e39297afcc2759f9c72f95d4911b6f551395c0347b82c330c9f919dddbfccacc172628575357480a5f31fc631d3a065fdd437fc50ec0224cbc963a9d451e89e4523dc3d7d7552d20a7c961f0dbebb734ac9138d654e7da2ece018db5594a95516d1d79cc63922d7055cc3d6f88041d01338bd1cb0a1b813853a445c493c13211a8aa0720b6de16e38cfbde51321c3859230259a1fe901c5fc1e9508923215e6302a48194f8f7e888e8e4071f1b0d5632051f088b195667d8efc3fc5a0e6381777b8dfd254ac5cfb58f6929f7385bffcdd96f2ded3a3200", 0x2000, &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) 10:13:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000180)={0x0, 0x5f, 0x3, 0x1}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{r1}, {@val={r5}, @max='max'}}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 208.902786][ T5952] FAULT_INJECTION: forcing a failure. [ 208.902786][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 208.926886][ T5954] FAULT_INJECTION: forcing a failure. [ 208.926886][ T5954] name failslab, interval 1, probability 0, space 0, times 0 [ 208.931838][ T5952] CPU: 0 PID: 5952 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 208.950501][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.960559][ T5952] Call Trace: [ 208.963854][ T5952] dump_stack+0x14a/0x1ce [ 208.968187][ T5952] ? devkmsg_release+0x11c/0x11c [ 208.973114][ T5952] ? show_regs_print_info+0x12/0x12 [ 208.978440][ T5952] should_fail+0x6fb/0x860 [ 208.982841][ T5952] ? setup_fault_attr+0x3d0/0x3d0 [ 208.987850][ T5952] ? kvmalloc_node+0xc2/0x120 [ 208.992599][ T5952] should_failslab+0x5/0x20 [ 208.997089][ T5952] __kmalloc+0x5f/0x2d0 [ 209.001227][ T5952] kvmalloc_node+0xc2/0x120 [ 209.005724][ T5952] __list_lru_init+0x1d2/0x570 [ 209.010485][ T5952] ? prealloc_shrinker+0x1cc/0x210 [ 209.015577][ T5952] alloc_super+0x64d/0x760 [ 209.020034][ T5952] sget+0x20e/0x4e0 [ 209.023873][ T5952] ? free_anon_bdev+0x20/0x20 [ 209.028668][ T5952] ? ovl_mount+0x30/0x30 [ 209.032933][ T5952] mount_nodev+0x2c/0xe0 [ 209.037222][ T5952] legacy_get_tree+0xde/0x170 [ 209.041878][ T5952] ? fuse_emit+0x7d0/0x7d0 [ 209.046275][ T5952] vfs_get_tree+0x85/0x260 [ 209.050677][ T5952] do_mount+0x1a15/0x28c0 [ 209.054999][ T5952] ? copy_mount_string+0x30/0x30 [ 209.059928][ T5952] ? page_fault+0x2f/0x40 [ 209.064247][ T5952] ? copy_mount_options+0x1e8/0x320 [ 209.069459][ T5952] ? copy_mount_options+0x293/0x320 [ 209.074736][ T5952] ksys_mount+0xc2/0xf0 [ 209.079050][ T5952] __x64_sys_mount+0xb1/0xc0 [ 209.083624][ T5952] do_syscall_64+0xcb/0x150 [ 209.088312][ T5952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.094201][ T5952] RIP: 0033:0x45d4d9 [ 209.098086][ T5952] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.117904][ T5952] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.126325][ T5952] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 209.134385][ T5952] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 209.142377][ T5952] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 209.150373][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 209.158328][ T5952] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 209.166290][ T5954] CPU: 1 PID: 5954 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 209.176359][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.186416][ T5954] Call Trace: [ 209.189709][ T5954] dump_stack+0x14a/0x1ce [ 209.194036][ T5954] ? devkmsg_release+0x11c/0x11c [ 209.198973][ T5954] ? show_regs_print_info+0x12/0x12 [ 209.204171][ T5954] ? stack_trace_save+0x123/0x1f0 [ 209.209189][ T5954] should_fail+0x6fb/0x860 [ 209.213690][ T5954] ? setup_fault_attr+0x3d0/0x3d0 [ 209.218717][ T5954] ? ovl_fill_super+0x10a/0x4f30 [ 209.223652][ T5954] should_failslab+0x5/0x20 [ 209.228136][ T5954] kmem_cache_alloc_trace+0x39/0x280 [ 209.233403][ T5954] ? xas_create+0x1269/0x1360 [ 209.238078][ T5954] ovl_fill_super+0x10a/0x4f30 [ 209.242823][ T5954] ? xas_store+0x9a2/0x13b0 [ 209.247466][ T5954] ? xas_find_marked+0x8c8/0xa10 [ 209.252391][ T5954] ? ovl_mount+0x30/0x30 [ 209.256751][ T5954] ? ida_alloc_range+0xa59/0xac0 [ 209.261898][ T5954] ? delete_node+0x761/0x7b0 [ 209.266516][ T5954] ? __radix_tree_replace+0x24d/0x2f0 [ 209.271954][ T5954] ? idr_replace+0x1ca/0x240 [ 209.276769][ T5954] ? up_write+0xa1/0x190 [ 209.281005][ T5954] ? _raw_spin_lock+0xa1/0x170 [ 209.285762][ T5954] ? up_read+0x10/0x10 [ 209.289822][ T5954] ? sget+0x4cb/0x4e0 [ 209.294060][ T5954] ? free_anon_bdev+0x20/0x20 [ 209.298806][ T5954] ? ovl_mount+0x30/0x30 [ 209.303212][ T5954] mount_nodev+0x52/0xe0 [ 209.307667][ T5954] legacy_get_tree+0xde/0x170 [ 209.312594][ T5954] ? fuse_emit+0x7d0/0x7d0 [ 209.317009][ T5954] vfs_get_tree+0x85/0x260 [ 209.321821][ T5954] do_mount+0x1a15/0x28c0 [ 209.326136][ T5954] ? copy_mount_string+0x30/0x30 [ 209.331100][ T5954] ? page_fault+0x2f/0x40 [ 209.335412][ T5954] ? copy_mount_options+0x1e8/0x320 [ 209.340598][ T5954] ? copy_mount_options+0x293/0x320 [ 209.345782][ T5954] ksys_mount+0xc2/0xf0 [ 209.349921][ T5954] __x64_sys_mount+0xb1/0xc0 [ 209.354509][ T5954] do_syscall_64+0xcb/0x150 [ 209.359117][ T5954] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.365136][ T5954] RIP: 0033:0x45d4d9 [ 209.369012][ T5954] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.388597][ T5954] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.397271][ T5954] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 10:13:53 executing program 3 (fault-call:10 fault-nth:14): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 209.405297][ T5954] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 209.414292][ T5954] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 209.422479][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 209.430929][ T5954] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:53 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x6}, 0x1}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x2, 0x1}, {0x1f, 0x5}]}, 0x14, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f00000000c0)=0x977, 0x4) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:13:53 executing program 5 (fault-call:13 fault-nth:16): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:53 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x800000) [ 209.453062][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 209.461323][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 209.480990][ T3050] usb 5-1: USB disconnect, device number 60 [ 209.503276][ T5977] FAULT_INJECTION: forcing a failure. [ 209.503276][ T5977] name failslab, interval 1, probability 0, space 0, times 0 [ 209.507088][ T5981] FAULT_INJECTION: forcing a failure. [ 209.507088][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 209.516498][ T5977] CPU: 1 PID: 5977 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 209.539002][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.549127][ T5977] Call Trace: [ 209.552414][ T5977] dump_stack+0x14a/0x1ce [ 209.556749][ T5977] ? devkmsg_release+0x11c/0x11c [ 209.561671][ T5977] ? show_regs_print_info+0x12/0x12 [ 209.566852][ T5977] ? stack_trace_save+0x123/0x1f0 [ 209.571945][ T5977] should_fail+0x6fb/0x860 [ 209.576359][ T5977] ? setup_fault_attr+0x3d0/0x3d0 [ 209.581368][ T5977] ? ovl_fill_super+0x10a/0x4f30 [ 209.586292][ T5977] should_failslab+0x5/0x20 [ 209.590798][ T5977] kmem_cache_alloc_trace+0x39/0x280 [ 209.596074][ T5977] ? xas_create+0x1269/0x1360 [ 209.600822][ T5977] ovl_fill_super+0x10a/0x4f30 [ 209.605582][ T5977] ? xas_store+0x9a2/0x13b0 [ 209.610066][ T5977] ? xas_find_marked+0x8c8/0xa10 [ 209.614985][ T5977] ? ovl_mount+0x30/0x30 [ 209.619210][ T5977] ? ida_alloc_range+0xa59/0xac0 [ 209.624149][ T5977] ? delete_node+0x761/0x7b0 [ 209.628722][ T5977] ? __radix_tree_replace+0x24d/0x2f0 [ 209.634249][ T5977] ? idr_replace+0x1ca/0x240 [ 209.638823][ T5977] ? up_write+0xa1/0x190 [ 209.643086][ T5977] ? _raw_spin_lock+0xa1/0x170 [ 209.647830][ T5977] ? up_read+0x10/0x10 [ 209.651879][ T5977] ? sget+0x4cb/0x4e0 [ 209.655842][ T5977] ? free_anon_bdev+0x20/0x20 [ 209.660536][ T5977] ? ovl_mount+0x30/0x30 [ 209.664937][ T5977] mount_nodev+0x52/0xe0 [ 209.669598][ T5977] legacy_get_tree+0xde/0x170 [ 209.674703][ T5977] ? fuse_emit+0x7d0/0x7d0 [ 209.679150][ T5977] vfs_get_tree+0x85/0x260 [ 209.683552][ T5977] do_mount+0x1a15/0x28c0 [ 209.687863][ T5977] ? copy_mount_string+0x30/0x30 [ 209.692784][ T5977] ? page_fault+0x2f/0x40 [ 209.697098][ T5977] ? copy_mount_options+0x1e8/0x320 [ 209.702277][ T5977] ? copy_mount_options+0x293/0x320 [ 209.707491][ T5977] ksys_mount+0xc2/0xf0 [ 209.711697][ T5977] __x64_sys_mount+0xb1/0xc0 [ 209.716272][ T5977] do_syscall_64+0xcb/0x150 [ 209.720816][ T5977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.726726][ T5977] RIP: 0033:0x45d4d9 [ 209.730605][ T5977] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.750288][ T5977] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.758812][ T5977] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 209.766768][ T5977] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 209.774723][ T5977] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 209.782769][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 209.790724][ T5977] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 209.798689][ T5981] CPU: 0 PID: 5981 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 209.810325][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.820386][ T5981] Call Trace: [ 209.823686][ T5981] dump_stack+0x14a/0x1ce [ 209.828016][ T5981] ? devkmsg_release+0x11c/0x11c [ 209.832952][ T5981] ? show_regs_print_info+0x12/0x12 [ 209.838139][ T5981] should_fail+0x6fb/0x860 [ 209.842626][ T5981] ? setup_fault_attr+0x3d0/0x3d0 [ 209.847635][ T5981] ? kzalloc+0x22/0x40 [ 209.851745][ T5981] should_failslab+0x5/0x20 [ 209.856232][ T5981] __kmalloc+0x5f/0x2d0 [ 209.860379][ T5981] kzalloc+0x22/0x40 [ 209.864273][ T5981] security_prepare_creds+0x46/0x220 [ 209.869539][ T5981] prepare_creds+0x290/0x380 [ 209.874112][ T5981] ovl_fill_super+0x128/0x4f30 [ 209.878855][ T5981] ? xas_store+0x9a2/0x13b0 [ 209.883337][ T5981] ? xas_find_marked+0x8c8/0xa10 [ 209.888253][ T5981] ? ovl_mount+0x30/0x30 [ 209.892479][ T5981] ? ida_alloc_range+0xa59/0xac0 [ 209.897395][ T5981] ? delete_node+0x761/0x7b0 [ 209.901965][ T5981] ? __radix_tree_replace+0x24d/0x2f0 [ 209.907316][ T5981] ? idr_replace+0x1ca/0x240 [ 209.911886][ T5981] ? up_write+0xa1/0x190 [ 209.916113][ T5981] ? _raw_spin_lock+0xa1/0x170 [ 209.920913][ T5981] ? up_read+0x10/0x10 [ 209.924962][ T5981] ? sget+0x4cb/0x4e0 [ 209.928925][ T5981] ? free_anon_bdev+0x20/0x20 [ 209.933671][ T5981] ? ovl_mount+0x30/0x30 [ 209.937894][ T5981] mount_nodev+0x52/0xe0 [ 209.942120][ T5981] legacy_get_tree+0xde/0x170 [ 209.947216][ T5981] ? fuse_emit+0x7d0/0x7d0 [ 209.951620][ T5981] vfs_get_tree+0x85/0x260 10:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000200)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 209.956059][ T5981] do_mount+0x1a15/0x28c0 [ 209.960385][ T5981] ? copy_mount_string+0x30/0x30 [ 209.965323][ T5981] ? page_fault+0x2f/0x40 [ 209.969648][ T5981] ? copy_mount_options+0x1e8/0x320 [ 209.974839][ T5981] ? copy_mount_options+0x293/0x320 [ 209.980030][ T5981] ksys_mount+0xc2/0xf0 [ 209.984166][ T5981] __x64_sys_mount+0xb1/0xc0 [ 209.988736][ T5981] do_syscall_64+0xcb/0x150 [ 209.993342][ T5981] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.999340][ T5981] RIP: 0033:0x45d4d9 [ 210.003224][ T5981] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.022810][ T5981] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.031200][ T5981] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 210.039153][ T5981] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 210.047108][ T5981] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 10:13:53 executing program 3 (fault-call:10 fault-nth:15): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 210.055103][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 210.063756][ T5981] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 210.091149][ T5995] FAULT_INJECTION: forcing a failure. [ 210.091149][ T5995] name failslab, interval 1, probability 0, space 0, times 0 [ 210.106998][ T5995] CPU: 0 PID: 5995 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 210.117085][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.127142][ T5995] Call Trace: [ 210.130443][ T5995] dump_stack+0x14a/0x1ce [ 210.135043][ T5995] ? devkmsg_release+0x11c/0x11c [ 210.140075][ T5995] ? show_regs_print_info+0x12/0x12 [ 210.145277][ T5995] should_fail+0x6fb/0x860 [ 210.149700][ T5995] ? setup_fault_attr+0x3d0/0x3d0 [ 210.154867][ T5995] ? prepare_creds+0x20/0x380 [ 210.159547][ T5995] should_failslab+0x5/0x20 [ 210.164046][ T5995] kmem_cache_alloc+0x36/0x260 [ 210.168926][ T5995] ? ovl_fill_super+0x10a/0x4f30 [ 210.173846][ T5995] prepare_creds+0x20/0x380 [ 210.178341][ T5995] ovl_fill_super+0x128/0x4f30 [ 210.183086][ T5995] ? xas_store+0x9a2/0x13b0 [ 210.187653][ T5995] ? xas_find_marked+0x8c8/0xa10 [ 210.192592][ T5995] ? ovl_mount+0x30/0x30 [ 210.196820][ T5995] ? ida_alloc_range+0xa59/0xac0 [ 210.201836][ T5995] ? delete_node+0x761/0x7b0 [ 210.206441][ T5995] ? __radix_tree_replace+0x24d/0x2f0 [ 210.211906][ T5995] ? idr_replace+0x1ca/0x240 [ 210.216481][ T5995] ? up_write+0xa1/0x190 [ 210.220704][ T5995] ? _raw_spin_lock+0xa1/0x170 [ 210.225532][ T5995] ? up_read+0x10/0x10 [ 210.229700][ T5995] ? sget+0x4cb/0x4e0 [ 210.233754][ T5995] ? free_anon_bdev+0x20/0x20 [ 210.238413][ T5995] ? ovl_mount+0x30/0x30 [ 210.242722][ T5995] mount_nodev+0x52/0xe0 [ 210.246949][ T5995] legacy_get_tree+0xde/0x170 [ 210.251606][ T5995] ? fuse_emit+0x7d0/0x7d0 [ 210.256014][ T5995] vfs_get_tree+0x85/0x260 [ 210.260413][ T5995] do_mount+0x1a15/0x28c0 [ 210.264844][ T5995] ? copy_mount_string+0x30/0x30 [ 210.269766][ T5995] ? page_fault+0x2f/0x40 [ 210.274183][ T5995] ? copy_mount_options+0x1e8/0x320 [ 210.279460][ T5995] ? copy_mount_options+0x293/0x320 [ 210.284731][ T5995] ksys_mount+0xc2/0xf0 [ 210.289759][ T5995] __x64_sys_mount+0xb1/0xc0 [ 210.294344][ T5995] do_syscall_64+0xcb/0x150 [ 210.298832][ T5995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 210.304710][ T5995] RIP: 0033:0x45d4d9 [ 210.308892][ T5995] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.328650][ T5995] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.337046][ T5995] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 210.345047][ T5995] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 210.353000][ T5995] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 210.361093][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 210.369518][ T5995] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 210.592916][ T3050] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 210.962991][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.973965][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.983725][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 210.992749][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.001587][ T3050] usb 5-1: config 0 descriptor?? [ 211.342886][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 211.348967][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 211.357017][ T3050] usb 5-1: USB disconnect, device number 61 [ 211.822816][ T3050] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 212.182834][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.193732][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.204094][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 212.213505][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.222128][ T3050] usb 5-1: config 0 descriptor?? 10:13:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:56 executing program 5 (fault-call:13 fault-nth:17): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:56 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x1000000) 10:13:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x188) mkdir(0x0, 0x0) chdir(0x0) open(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffff) getsockname$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 10:13:56 executing program 3 (fault-call:10 fault-nth:16): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:56 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x1076d1, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x9) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 212.473823][ T6021] FAULT_INJECTION: forcing a failure. [ 212.473823][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 212.494117][ T6027] FAULT_INJECTION: forcing a failure. [ 212.494117][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 212.524518][ T6021] CPU: 0 PID: 6021 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 212.534610][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.544654][ T6021] Call Trace: [ 212.547968][ T6021] dump_stack+0x14a/0x1ce [ 212.552367][ T6021] ? devkmsg_release+0x11c/0x11c [ 212.557309][ T6021] ? show_regs_print_info+0x12/0x12 [ 212.562490][ T6021] should_fail+0x6fb/0x860 [ 212.566887][ T6021] ? setup_fault_attr+0x3d0/0x3d0 [ 212.571889][ T6021] ? kzalloc+0x22/0x40 [ 212.576284][ T6021] should_failslab+0x5/0x20 [ 212.580764][ T6021] __kmalloc+0x5f/0x2d0 [ 212.584898][ T6021] kzalloc+0x22/0x40 [ 212.588773][ T6021] security_prepare_creds+0x46/0x220 [ 212.594036][ T6021] prepare_creds+0x290/0x380 [ 212.598604][ T6021] ovl_fill_super+0x128/0x4f30 [ 212.603342][ T6021] ? xas_store+0x9a2/0x13b0 [ 212.607819][ T6021] ? xas_find_marked+0x8c8/0xa10 [ 212.612732][ T6021] ? ovl_mount+0x30/0x30 [ 212.616951][ T6021] ? ida_alloc_range+0xa59/0xac0 [ 212.621863][ T6021] ? delete_node+0x761/0x7b0 [ 212.626564][ T6021] ? __radix_tree_replace+0x24d/0x2f0 [ 212.631933][ T6021] ? idr_replace+0x1ca/0x240 [ 212.636596][ T6021] ? up_write+0xa1/0x190 [ 212.640814][ T6021] ? _raw_spin_lock+0xa1/0x170 [ 212.645557][ T6021] ? up_read+0x10/0x10 [ 212.649601][ T6021] ? sget+0x4cb/0x4e0 [ 212.653560][ T6021] ? free_anon_bdev+0x20/0x20 [ 212.658218][ T6021] ? ovl_mount+0x30/0x30 [ 212.662434][ T6021] mount_nodev+0x52/0xe0 [ 212.666654][ T6021] legacy_get_tree+0xde/0x170 [ 212.671326][ T6021] ? fuse_emit+0x7d0/0x7d0 [ 212.675715][ T6021] vfs_get_tree+0x85/0x260 [ 212.680124][ T6021] do_mount+0x1a15/0x28c0 [ 212.684431][ T6021] ? copy_mount_string+0x30/0x30 [ 212.690415][ T6021] ? page_fault+0x2f/0x40 [ 212.694721][ T6021] ? copy_mount_options+0x1e8/0x320 [ 212.699894][ T6021] ? copy_mount_options+0x293/0x320 [ 212.705069][ T6021] ksys_mount+0xc2/0xf0 [ 212.709201][ T6021] __x64_sys_mount+0xb1/0xc0 [ 212.714115][ T6021] do_syscall_64+0xcb/0x150 [ 212.718592][ T6021] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 212.724547][ T6021] RIP: 0033:0x45d4d9 [ 212.728420][ T6021] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.748004][ T6021] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.756405][ T6021] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 212.764360][ T6021] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 212.772317][ T6021] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 212.780887][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 212.788858][ T6021] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 212.799823][ T6027] CPU: 0 PID: 6027 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 212.809912][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.819956][ T6027] Call Trace: [ 212.823231][ T6027] dump_stack+0x14a/0x1ce [ 212.827539][ T6027] ? devkmsg_release+0x11c/0x11c [ 212.832457][ T6027] ? show_regs_print_info+0x12/0x12 [ 212.837807][ T6027] should_fail+0x6fb/0x860 [ 212.842203][ T6027] ? setup_fault_attr+0x3d0/0x3d0 [ 212.847205][ T6027] ? selinux_cred_prepare+0x72/0x80 [ 212.852394][ T6027] ? ovl_fill_super+0x246/0x4f30 [ 212.857309][ T6027] should_failslab+0x5/0x20 [ 212.861788][ T6027] __kmalloc_track_caller+0x5d/0x2c0 [ 212.867049][ T6027] kstrdup+0x31/0x70 [ 212.870920][ T6027] ovl_fill_super+0x246/0x4f30 [ 212.875661][ T6027] ? xas_find_marked+0x8c8/0xa10 [ 212.880575][ T6027] ? ovl_mount+0x30/0x30 [ 212.884793][ T6027] ? ida_alloc_range+0xa59/0xac0 [ 212.889717][ T6027] ? delete_node+0x761/0x7b0 [ 212.894282][ T6027] ? __radix_tree_replace+0x24d/0x2f0 [ 212.899641][ T6027] ? idr_replace+0x1ca/0x240 [ 212.904208][ T6027] ? up_write+0xa1/0x190 [ 212.908426][ T6027] ? _raw_spin_lock+0xa1/0x170 [ 212.913177][ T6027] ? up_read+0x10/0x10 [ 212.917310][ T6027] ? sget+0x4cb/0x4e0 [ 212.921267][ T6027] ? free_anon_bdev+0x20/0x20 [ 212.925917][ T6027] ? ovl_mount+0x30/0x30 [ 212.930135][ T6027] mount_nodev+0x52/0xe0 [ 212.934359][ T6027] legacy_get_tree+0xde/0x170 [ 212.939031][ T6027] ? fuse_emit+0x7d0/0x7d0 [ 212.943420][ T6027] vfs_get_tree+0x85/0x260 [ 212.947812][ T6027] do_mount+0x1a15/0x28c0 [ 212.952117][ T6027] ? copy_mount_string+0x30/0x30 [ 212.957031][ T6027] ? page_fault+0x2f/0x40 [ 212.961358][ T6027] ? copy_mount_options+0x1e8/0x320 [ 212.966533][ T6027] ? copy_mount_options+0x293/0x320 [ 212.971712][ T6027] ksys_mount+0xc2/0xf0 [ 212.975864][ T6027] __x64_sys_mount+0xb1/0xc0 [ 212.980434][ T6027] do_syscall_64+0xcb/0x150 [ 212.984923][ T6027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 212.990791][ T6027] RIP: 0033:0x45d4d9 [ 212.994676][ T6027] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.014255][ T6027] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.022642][ T6027] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 213.031023][ T6027] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 213.038971][ T6027] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 213.046931][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 213.055054][ T6027] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:13:56 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x3000000) 10:13:56 executing program 3 (fault-call:10 fault-nth:17): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:56 executing program 5 (fault-call:13 fault-nth:18): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 213.072698][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 213.110958][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 213.125672][ T6045] FAULT_INJECTION: forcing a failure. [ 213.125672][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 213.145960][ T3050] usb 5-1: USB disconnect, device number 62 [ 213.148807][ T6046] FAULT_INJECTION: forcing a failure. [ 213.148807][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 213.167616][ T6045] CPU: 0 PID: 6045 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 213.177699][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.187751][ T6045] Call Trace: [ 213.191047][ T6045] dump_stack+0x14a/0x1ce [ 213.195375][ T6045] ? devkmsg_release+0x11c/0x11c [ 213.200314][ T6045] ? show_regs_print_info+0x12/0x12 [ 213.205510][ T6045] should_fail+0x6fb/0x860 [ 213.209933][ T6045] ? setup_fault_attr+0x3d0/0x3d0 [ 213.214957][ T6045] ? match_token+0x6a2/0x710 [ 213.219549][ T6045] ? ovl_fill_super+0x708/0x4f30 [ 213.224498][ T6045] should_failslab+0x5/0x20 [ 213.229000][ T6045] __kmalloc_track_caller+0x5d/0x2c0 [ 213.234719][ T6045] ? kstrdup+0x4c/0x70 [ 213.238792][ T6045] kmemdup_nul+0x27/0xa0 [ 213.243037][ T6045] ovl_fill_super+0x708/0x4f30 [ 213.247938][ T6045] ? ovl_mount+0x30/0x30 [ 213.252179][ T6045] ? ida_alloc_range+0xa59/0xac0 [ 213.257210][ T6045] ? delete_node+0x761/0x7b0 [ 213.261801][ T6045] ? __radix_tree_replace+0x24d/0x2f0 [ 213.267536][ T6045] ? idr_replace+0x1ca/0x240 [ 213.272101][ T6045] ? up_write+0xa1/0x190 [ 213.276316][ T6045] ? _raw_spin_lock+0xa1/0x170 [ 213.281050][ T6045] ? up_read+0x10/0x10 [ 213.285101][ T6045] ? sget+0x4cb/0x4e0 [ 213.289319][ T6045] ? free_anon_bdev+0x20/0x20 [ 213.293965][ T6045] ? ovl_mount+0x30/0x30 [ 213.298634][ T6045] mount_nodev+0x52/0xe0 [ 213.302850][ T6045] legacy_get_tree+0xde/0x170 [ 213.307510][ T6045] ? fuse_emit+0x7d0/0x7d0 [ 213.311910][ T6045] vfs_get_tree+0x85/0x260 [ 213.316299][ T6045] do_mount+0x1a15/0x28c0 [ 213.320617][ T6045] ? copy_mount_string+0x30/0x30 [ 213.325786][ T6045] ? page_fault+0x2f/0x40 [ 213.330085][ T6045] ? copy_mount_options+0x1e8/0x320 [ 213.335253][ T6045] ? copy_mount_options+0x293/0x320 [ 213.340420][ T6045] ksys_mount+0xc2/0xf0 [ 213.344548][ T6045] __x64_sys_mount+0xb1/0xc0 [ 213.349131][ T6045] do_syscall_64+0xcb/0x150 [ 213.353627][ T6045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 213.359491][ T6045] RIP: 0033:0x45d4d9 [ 213.363361][ T6045] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.382937][ T6045] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.391331][ T6045] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 213.399546][ T6045] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:13:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x40000000) [ 213.407491][ T6045] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 213.415531][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 213.423473][ T6045] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 213.447912][ T6046] CPU: 0 PID: 6046 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 213.458086][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.468424][ T6046] Call Trace: [ 213.471731][ T6046] dump_stack+0x14a/0x1ce [ 213.476064][ T6046] ? devkmsg_release+0x11c/0x11c [ 213.481101][ T6046] ? show_regs_print_info+0x12/0x12 [ 213.486313][ T6046] should_fail+0x6fb/0x860 [ 213.490735][ T6046] ? setup_fault_attr+0x3d0/0x3d0 [ 213.495771][ T6046] ? selinux_cred_prepare+0x72/0x80 [ 213.500977][ T6046] ? ovl_fill_super+0x246/0x4f30 [ 213.505915][ T6046] should_failslab+0x5/0x20 [ 213.510430][ T6046] __kmalloc_track_caller+0x5d/0x2c0 [ 213.515720][ T6046] kstrdup+0x31/0x70 [ 213.519618][ T6046] ovl_fill_super+0x246/0x4f30 [ 213.524476][ T6046] ? xas_find_marked+0x8c8/0xa10 [ 213.529427][ T6046] ? ovl_mount+0x30/0x30 [ 213.533670][ T6046] ? ida_alloc_range+0xa59/0xac0 [ 213.538711][ T6046] ? delete_node+0x761/0x7b0 [ 213.543305][ T6046] ? __radix_tree_replace+0x24d/0x2f0 [ 213.548864][ T6046] ? idr_replace+0x1ca/0x240 [ 213.553459][ T6046] ? up_write+0xa1/0x190 [ 213.557712][ T6046] ? _raw_spin_lock+0xa1/0x170 10:13:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x364a, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) ftruncate(0xffffffffffffffff, 0x40) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x3f, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r5, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000300)='SMC_PNETID\x00') ftruncate(r5, 0x40) r6 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r7}}, 0x9) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 213.562485][ T6046] ? up_read+0x10/0x10 [ 213.566554][ T6046] ? sget+0x4cb/0x4e0 [ 213.570539][ T6046] ? free_anon_bdev+0x20/0x20 [ 213.575212][ T6046] ? ovl_mount+0x30/0x30 [ 213.579452][ T6046] mount_nodev+0x52/0xe0 [ 213.583699][ T6046] legacy_get_tree+0xde/0x170 [ 213.588370][ T6046] ? fuse_emit+0x7d0/0x7d0 [ 213.592788][ T6046] vfs_get_tree+0x85/0x260 [ 213.597196][ T6046] do_mount+0x1a15/0x28c0 [ 213.601517][ T6046] ? copy_mount_string+0x30/0x30 [ 213.606441][ T6046] ? page_fault+0x2f/0x40 [ 213.610742][ T6046] ? copy_mount_options+0x1e8/0x320 [ 213.615922][ T6046] ? copy_mount_options+0x293/0x320 [ 213.621091][ T6046] ksys_mount+0xc2/0xf0 [ 213.625216][ T6046] __x64_sys_mount+0xb1/0xc0 [ 213.629790][ T6046] do_syscall_64+0xcb/0x150 [ 213.634264][ T6046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 213.640124][ T6046] RIP: 0033:0x45d4d9 [ 213.644002][ T6046] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:13:57 executing program 5 (fault-call:13 fault-nth:19): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 213.663576][ T6046] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.672668][ T6046] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 213.680611][ T6046] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 213.689107][ T6046] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 213.697052][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 213.705109][ T6046] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 213.746156][ T6061] FAULT_INJECTION: forcing a failure. [ 213.746156][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 213.759032][ T6061] CPU: 1 PID: 6061 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 213.769100][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.779135][ T6061] Call Trace: [ 213.782479][ T6061] dump_stack+0x14a/0x1ce [ 213.786832][ T6061] ? devkmsg_release+0x11c/0x11c [ 213.791739][ T6061] ? show_regs_print_info+0x12/0x12 [ 213.796975][ T6061] should_fail+0x6fb/0x860 [ 213.801407][ T6061] ? setup_fault_attr+0x3d0/0x3d0 [ 213.806402][ T6061] ? match_token+0x6a2/0x710 [ 213.810964][ T6061] ? ovl_fill_super+0x4a3/0x4f30 [ 213.815869][ T6061] should_failslab+0x5/0x20 [ 213.820400][ T6061] __kmalloc_track_caller+0x5d/0x2c0 [ 213.825655][ T6061] ? kmemdup_nul+0x42/0xa0 [ 213.830063][ T6061] kmemdup_nul+0x27/0xa0 [ 213.834389][ T6061] ovl_fill_super+0x4a3/0x4f30 [ 213.839133][ T6061] ? ovl_mount+0x30/0x30 [ 213.843534][ T6061] ? ida_alloc_range+0xa59/0xac0 [ 213.848438][ T6061] ? delete_node+0x761/0x7b0 [ 213.852999][ T6061] ? __radix_tree_replace+0x24d/0x2f0 [ 213.858349][ T6061] ? idr_replace+0x1ca/0x240 [ 213.862912][ T6061] ? up_write+0xa1/0x190 [ 213.867126][ T6061] ? _raw_spin_lock+0xa1/0x170 [ 213.871868][ T6061] ? up_read+0x10/0x10 [ 213.875906][ T6061] ? sget+0x4cb/0x4e0 [ 213.879888][ T6061] ? free_anon_bdev+0x20/0x20 [ 213.884636][ T6061] ? ovl_mount+0x30/0x30 [ 213.888846][ T6061] mount_nodev+0x52/0xe0 [ 213.893061][ T6061] legacy_get_tree+0xde/0x170 [ 213.897709][ T6061] ? fuse_emit+0x7d0/0x7d0 [ 213.902112][ T6061] vfs_get_tree+0x85/0x260 [ 213.906501][ T6061] do_mount+0x1a15/0x28c0 [ 213.910803][ T6061] ? copy_mount_string+0x30/0x30 [ 213.915723][ T6061] ? page_fault+0x2f/0x40 [ 213.920118][ T6061] ? copy_mount_options+0x1e8/0x320 [ 213.925285][ T6061] ? copy_mount_options+0x293/0x320 [ 213.930450][ T6061] ksys_mount+0xc2/0xf0 [ 213.934664][ T6061] __x64_sys_mount+0xb1/0xc0 [ 213.939224][ T6061] do_syscall_64+0xcb/0x150 [ 213.943702][ T6061] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 213.949704][ T6061] RIP: 0033:0x45d4d9 [ 213.953580][ T6061] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.973561][ T6061] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.981945][ T6061] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 213.989905][ T6061] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 213.997856][ T6061] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 214.005975][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 214.014017][ T6061] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 214.282540][ T3050] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 214.642575][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.653570][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.665382][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 214.674707][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.683649][ T3050] usb 5-1: config 0 descriptor?? [ 215.032466][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 215.038614][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 215.046996][ T3050] usb 5-1: USB disconnect, device number 63 [ 215.502363][ T3050] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 215.862461][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.873966][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.883915][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 215.893140][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.901684][ T3050] usb 5-1: config 0 descriptor?? 10:13:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:13:59 executing program 3 (fault-call:10 fault-nth:18): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:59 executing program 5 (fault-call:13 fault-nth:20): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:13:59 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x10000000000) 10:13:59 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r1, 0x0) ftruncate(r1, 0x40) r2 = syz_io_uring_setup(0x524c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r7, r8) r9 = gettid() fcntl$setown(r8, 0x8, r9) preadv2(r8, &(0x7f0000000540)=[{&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/96, 0x60}], 0x6, 0xfffffff7, 0x8, 0x8) 10:13:59 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x188) mkdir(0x0, 0x0) chdir(0x0) open(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffff) getsockname$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 216.166292][ T6091] FAULT_INJECTION: forcing a failure. [ 216.166292][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 216.167099][ T6090] FAULT_INJECTION: forcing a failure. [ 216.167099][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 216.183887][ T6091] CPU: 0 PID: 6091 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 216.201722][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.211775][ T6091] Call Trace: [ 216.215068][ T6091] dump_stack+0x14a/0x1ce [ 216.219393][ T6091] ? devkmsg_release+0x11c/0x11c [ 216.223711][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 216.224331][ T6091] ? show_regs_print_info+0x12/0x12 [ 216.230270][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 216.235407][ T6091] should_fail+0x6fb/0x860 [ 216.235431][ T6091] ? setup_fault_attr+0x3d0/0x3d0 [ 216.235440][ T6091] ? match_token+0x6a2/0x710 [ 216.235448][ T6091] ? ovl_fill_super+0x708/0x4f30 [ 216.235455][ T6091] should_failslab+0x5/0x20 10:13:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) signalfd4(r7, &(0x7f0000000380)={[0xdb4d]}, 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r8, 0x0) ftruncate(r8, 0x40) ioctl$USBDEVFS_RESETEP(r8, 0x80045503, &(0x7f00000003c0)={0xa}) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="cb7d3db363d8e8cf6d4b5564a5276d00a6567cb1e732d734e20b68c44179bd1b9264077270b83dc073c53411cb5c0cdac9261e25e44554a37b6c0368d119c7a22740fd56dfc3be4d2b9c64ca31b0b498011ba4c9abd6c2d6e96d5e8244d76d777be2bd950eda31ab37afd8a5e70d09f3de17ec9e", 0x74}, {&(0x7f0000000200)="557898baf8b4137cf35a044aa02dca6ba5a5c05ce4723329d6bdafb1776c6ed8082eedf158ed2b5442a88b243a2007f58cafab2466e46f7708c99f0550edcabd214aa0944cb12118353227df377a1135d32622a4c8c80386b8a028df02b8c6ade101f0f386c1e7948a9ca0e05d686a499a49e7d732527d74047fd79568fbfc65e2ebcdc40fcac2c4756b5ae56ea76861d3f8a1369e117b8fbdaa1c3caa96afdb522df652fe037154607bdf188a540067cc2825673786908afde1146a4a8589dd678dc07a32e16385f1961f2165cb5a169fe6f401112471807e4e699160e318473601d608846e0765ac61f12a677bf7a913d1e650", 0xf4}], 0x2}}], 0x1, 0x48855) [ 216.235463][ T6091] __kmalloc_track_caller+0x5d/0x2c0 [ 216.235475][ T6091] ? kstrdup+0x4c/0x70 [ 216.260736][ T3050] usb 5-1: USB disconnect, device number 64 [ 216.265179][ T6091] kmemdup_nul+0x27/0xa0 [ 216.265189][ T6091] ovl_fill_super+0x708/0x4f30 [ 216.265198][ T6091] ? ovl_mount+0x30/0x30 [ 216.265205][ T6091] ? ida_alloc_range+0xa59/0xac0 [ 216.265211][ T6091] ? delete_node+0x761/0x7b0 [ 216.265225][ T6091] ? __radix_tree_replace+0x24d/0x2f0 [ 216.308635][ T6091] ? idr_replace+0x1ca/0x240 [ 216.313236][ T6091] ? up_write+0xa1/0x190 [ 216.317483][ T6091] ? _raw_spin_lock+0xa1/0x170 [ 216.322245][ T6091] ? up_read+0x10/0x10 [ 216.326315][ T6091] ? sget+0x4cb/0x4e0 [ 216.330336][ T6091] ? free_anon_bdev+0x20/0x20 [ 216.335007][ T6091] ? ovl_mount+0x30/0x30 [ 216.339243][ T6091] mount_nodev+0x52/0xe0 [ 216.343478][ T6091] legacy_get_tree+0xde/0x170 [ 216.348147][ T6091] ? fuse_emit+0x7d0/0x7d0 [ 216.352559][ T6091] vfs_get_tree+0x85/0x260 [ 216.356966][ T6091] do_mount+0x1a15/0x28c0 [ 216.361285][ T6091] ? copy_mount_string+0x30/0x30 [ 216.366213][ T6091] ? page_fault+0x2f/0x40 [ 216.370554][ T6091] ? copy_mount_options+0x1e8/0x320 [ 216.375749][ T6091] ? copy_mount_options+0x293/0x320 [ 216.380957][ T6091] ksys_mount+0xc2/0xf0 [ 216.385099][ T6091] __x64_sys_mount+0xb1/0xc0 [ 216.389679][ T6091] do_syscall_64+0xcb/0x150 [ 216.394189][ T6091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 216.400072][ T6091] RIP: 0033:0x45d4d9 [ 216.403958][ T6091] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.423547][ T6091] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.431973][ T6091] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 216.443144][ T6091] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 216.451104][ T6091] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 216.459059][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 216.467040][ T6091] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 216.474998][ T6090] CPU: 1 PID: 6090 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 216.485065][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.495117][ T6090] Call Trace: [ 216.498408][ T6090] dump_stack+0x14a/0x1ce [ 216.502736][ T6090] ? devkmsg_release+0x11c/0x11c [ 216.507672][ T6090] ? show_regs_print_info+0x12/0x12 [ 216.512857][ T6090] should_fail+0x6fb/0x860 [ 216.517254][ T6090] ? setup_fault_attr+0x3d0/0x3d0 [ 216.522260][ T6090] ? match_token+0x6a2/0x710 [ 216.526852][ T6090] ? ovl_fill_super+0x633/0x4f30 [ 216.531767][ T6090] should_failslab+0x5/0x20 [ 216.536252][ T6090] __kmalloc_track_caller+0x5d/0x2c0 [ 216.541517][ T6090] ? kmemdup_nul+0x42/0xa0 [ 216.545916][ T6090] kmemdup_nul+0x27/0xa0 [ 216.550139][ T6090] ovl_fill_super+0x633/0x4f30 [ 216.554896][ T6090] ? ovl_mount+0x30/0x30 [ 216.559574][ T6090] ? ida_alloc_range+0xa59/0xac0 [ 216.564514][ T6090] ? delete_node+0x761/0x7b0 [ 216.569084][ T6090] ? __radix_tree_replace+0x24d/0x2f0 [ 216.574544][ T6090] ? idr_replace+0x1ca/0x240 [ 216.579123][ T6090] ? up_write+0xa1/0x190 [ 216.583344][ T6090] ? _raw_spin_lock+0xa1/0x170 [ 216.588087][ T6090] ? up_read+0x10/0x10 [ 216.592133][ T6090] ? sget+0x4cb/0x4e0 [ 216.596134][ T6090] ? free_anon_bdev+0x20/0x20 [ 216.600789][ T6090] ? ovl_mount+0x30/0x30 [ 216.605010][ T6090] mount_nodev+0x52/0xe0 [ 216.609234][ T6090] legacy_get_tree+0xde/0x170 [ 216.613901][ T6090] ? fuse_emit+0x7d0/0x7d0 [ 216.618319][ T6090] vfs_get_tree+0x85/0x260 [ 216.622716][ T6090] do_mount+0x1a15/0x28c0 [ 216.627027][ T6090] ? copy_mount_string+0x30/0x30 [ 216.631962][ T6090] ? page_fault+0x2f/0x40 [ 216.636295][ T6090] ? copy_mount_options+0x1e8/0x320 [ 216.641469][ T6090] ? copy_mount_options+0x293/0x320 [ 216.646661][ T6090] ksys_mount+0xc2/0xf0 [ 216.650798][ T6090] __x64_sys_mount+0xb1/0xc0 [ 216.655367][ T6090] do_syscall_64+0xcb/0x150 [ 216.659865][ T6090] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 216.665737][ T6090] RIP: 0033:0x45d4d9 [ 216.669613][ T6090] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.689204][ T6090] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.697595][ T6090] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 216.705565][ T6090] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:14:00 executing program 3 (fault-call:10 fault-nth:19): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:00 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x80000000000000) [ 216.713516][ T6090] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 216.721475][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 216.729688][ T6090] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:14:00 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d2, &(0x7f0000000040)={0x0, 0x41, 0x0, 0x2, 0x5a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 216.763008][ T6109] FAULT_INJECTION: forcing a failure. [ 216.763008][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 216.785411][ T6109] CPU: 0 PID: 6109 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 216.795505][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.805563][ T6109] Call Trace: [ 216.808849][ T6109] dump_stack+0x14a/0x1ce [ 216.813176][ T6109] ? devkmsg_release+0x11c/0x11c [ 216.818112][ T6109] ? show_regs_print_info+0x12/0x12 [ 216.823306][ T6109] should_fail+0x6fb/0x860 [ 216.827711][ T6109] ? setup_fault_attr+0x3d0/0x3d0 [ 216.832724][ T6109] ? match_token+0x6a2/0x710 [ 216.837304][ T6109] ? ovl_fill_super+0x4a3/0x4f30 [ 216.842242][ T6109] should_failslab+0x5/0x20 [ 216.846738][ T6109] __kmalloc_track_caller+0x5d/0x2c0 [ 216.852017][ T6109] ? kmemdup_nul+0x42/0xa0 [ 216.856427][ T6109] kmemdup_nul+0x27/0xa0 [ 216.860671][ T6109] ovl_fill_super+0x4a3/0x4f30 [ 216.865449][ T6109] ? ovl_mount+0x30/0x30 [ 216.869683][ T6109] ? ida_alloc_range+0xa59/0xac0 [ 216.874608][ T6109] ? delete_node+0x761/0x7b0 [ 216.879186][ T6109] ? __radix_tree_replace+0x24d/0x2f0 [ 216.884544][ T6109] ? idr_replace+0x1ca/0x240 [ 216.889225][ T6109] ? up_write+0xa1/0x190 [ 216.892199][ T3050] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 216.893450][ T6109] ? _raw_spin_lock+0xa1/0x170 [ 216.893457][ T6109] ? up_read+0x10/0x10 [ 216.893469][ T6109] ? sget+0x4cb/0x4e0 [ 216.913777][ T6109] ? free_anon_bdev+0x20/0x20 [ 216.918439][ T6109] ? ovl_mount+0x30/0x30 [ 216.922666][ T6109] mount_nodev+0x52/0xe0 [ 216.926900][ T6109] legacy_get_tree+0xde/0x170 [ 216.931571][ T6109] ? fuse_emit+0x7d0/0x7d0 [ 216.935986][ T6109] vfs_get_tree+0x85/0x260 [ 216.940403][ T6109] do_mount+0x1a15/0x28c0 [ 216.944734][ T6109] ? copy_mount_string+0x30/0x30 [ 216.949674][ T6109] ? page_fault+0x2f/0x40 [ 216.954004][ T6109] ? copy_mount_options+0x1e8/0x320 [ 216.959216][ T6109] ? copy_mount_options+0x293/0x320 [ 216.964392][ T6109] ksys_mount+0xc2/0xf0 [ 216.968522][ T6109] __x64_sys_mount+0xb1/0xc0 [ 216.973100][ T6109] do_syscall_64+0xcb/0x150 [ 216.977578][ T6109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 216.983440][ T6109] RIP: 0033:0x45d4d9 [ 216.987325][ T6109] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:14:00 executing program 5 (fault-call:13 fault-nth:21): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:00 executing program 3 (fault-call:10 fault-nth:20): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 217.006902][ T6109] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.015286][ T6109] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 217.023231][ T6109] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 217.031176][ T6109] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 217.039137][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 217.047098][ T6109] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 217.097903][ T6124] FAULT_INJECTION: forcing a failure. [ 217.097903][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 217.136460][ T6124] CPU: 1 PID: 6124 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 217.146570][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.156621][ T6124] Call Trace: [ 217.159915][ T6124] dump_stack+0x14a/0x1ce [ 217.164378][ T6124] ? devkmsg_release+0x11c/0x11c [ 217.169318][ T6124] ? show_regs_print_info+0x12/0x12 [ 217.174520][ T6124] should_fail+0x6fb/0x860 [ 217.178940][ T6124] ? setup_fault_attr+0x3d0/0x3d0 [ 217.183971][ T6124] ? ovl_mount_dir+0x23/0x270 [ 217.188745][ T6124] should_failslab+0x5/0x20 [ 217.193250][ T6124] __kmalloc_track_caller+0x5d/0x2c0 [ 217.194029][ T6132] FAULT_INJECTION: forcing a failure. [ 217.194029][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 217.198530][ T6124] kstrdup+0x31/0x70 [ 217.198539][ T6124] ovl_mount_dir+0x23/0x270 [ 217.198552][ T6124] ovl_fill_super+0xf65/0x4f30 [ 217.224253][ T6124] ? ovl_mount+0x30/0x30 [ 217.228500][ T6124] ? ida_alloc_range+0xa59/0xac0 [ 217.233441][ T6124] ? delete_node+0x761/0x7b0 [ 217.238031][ T6124] ? __radix_tree_replace+0x24d/0x2f0 [ 217.243434][ T6124] ? idr_replace+0x1ca/0x240 [ 217.248022][ T6124] ? up_write+0xa1/0x190 [ 217.252279][ T6124] ? _raw_spin_lock+0xa1/0x170 [ 217.257045][ T6124] ? up_read+0x10/0x10 [ 217.261152][ T6124] ? sget+0x4cb/0x4e0 [ 217.265129][ T6124] ? free_anon_bdev+0x20/0x20 [ 217.269796][ T6124] ? ovl_mount+0x30/0x30 [ 217.274020][ T6124] mount_nodev+0x52/0xe0 [ 217.278246][ T6124] legacy_get_tree+0xde/0x170 [ 217.282895][ T6124] ? fuse_emit+0x7d0/0x7d0 [ 217.287283][ T6124] vfs_get_tree+0x85/0x260 [ 217.291761][ T6124] do_mount+0x1a15/0x28c0 [ 217.296067][ T6124] ? copy_mount_string+0x30/0x30 [ 217.300978][ T6124] ? page_fault+0x2f/0x40 [ 217.305285][ T6124] ? copy_mount_options+0x1e8/0x320 [ 217.310455][ T6124] ? copy_mount_options+0x293/0x320 [ 217.315631][ T6124] ksys_mount+0xc2/0xf0 [ 217.319762][ T6124] __x64_sys_mount+0xb1/0xc0 [ 217.324325][ T6124] do_syscall_64+0xcb/0x150 [ 217.328802][ T6124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 217.334669][ T6124] RIP: 0033:0x45d4d9 [ 217.338539][ T6124] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.358373][ T6124] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.366764][ T6124] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 217.374720][ T6124] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 217.382666][ T6124] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 217.390612][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 217.398562][ T6124] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 217.406540][ T6132] CPU: 0 PID: 6132 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 217.416607][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.426656][ T6132] Call Trace: [ 217.429936][ T6132] dump_stack+0x14a/0x1ce [ 217.434426][ T6132] ? devkmsg_release+0x11c/0x11c [ 217.439405][ T6132] ? show_regs_print_info+0x12/0x12 [ 217.444745][ T6132] should_fail+0x6fb/0x860 [ 217.449142][ T6132] ? setup_fault_attr+0x3d0/0x3d0 [ 217.454144][ T6132] ? match_token+0x6a2/0x710 [ 217.458706][ T6132] ? ovl_fill_super+0x633/0x4f30 [ 217.463621][ T6132] should_failslab+0x5/0x20 [ 217.468117][ T6132] __kmalloc_track_caller+0x5d/0x2c0 [ 217.473395][ T6132] ? kmemdup_nul+0x42/0xa0 [ 217.477790][ T6132] kmemdup_nul+0x27/0xa0 [ 217.482008][ T6132] ovl_fill_super+0x633/0x4f30 [ 217.486775][ T6132] ? ovl_mount+0x30/0x30 [ 217.490988][ T6132] ? ida_alloc_range+0xa59/0xac0 [ 217.495928][ T6132] ? delete_node+0x761/0x7b0 [ 217.500492][ T6132] ? __radix_tree_replace+0x24d/0x2f0 [ 217.506024][ T6132] ? idr_replace+0x1ca/0x240 [ 217.510673][ T6132] ? up_write+0xa1/0x190 [ 217.514891][ T6132] ? _raw_spin_lock+0xa1/0x170 [ 217.519728][ T6132] ? up_read+0x10/0x10 [ 217.523767][ T6132] ? sget+0x4cb/0x4e0 [ 217.527720][ T6132] ? free_anon_bdev+0x20/0x20 [ 217.532369][ T6132] ? ovl_mount+0x30/0x30 [ 217.536672][ T6132] mount_nodev+0x52/0xe0 [ 217.540887][ T6132] legacy_get_tree+0xde/0x170 [ 217.545535][ T6132] ? fuse_emit+0x7d0/0x7d0 [ 217.549921][ T6132] vfs_get_tree+0x85/0x260 [ 217.552212][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.554335][ T6132] do_mount+0x1a15/0x28c0 [ 217.554348][ T6132] ? copy_mount_string+0x30/0x30 [ 217.565250][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.569497][ T6132] ? page_fault+0x2f/0x40 [ 217.569507][ T6132] ? copy_mount_options+0x1e8/0x320 [ 217.569518][ T6132] ? copy_mount_options+0x293/0x320 [ 217.580936][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 217.584123][ T6132] ksys_mount+0xc2/0xf0 [ 217.584131][ T6132] __x64_sys_mount+0xb1/0xc0 [ 217.584139][ T6132] do_syscall_64+0xcb/0x150 [ 217.584147][ T6132] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 217.584153][ T6132] RIP: 0033:0x45d4d9 [ 217.584165][ T6132] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.590005][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.593646][ T6132] RSP: 002b:00007f4b3f1c9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.593653][ T6132] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 217.593658][ T6132] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 217.593662][ T6132] RBP: 00007f4b3f1c9ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 217.593666][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 217.593670][ T6132] R13: 00007ffd98a6a5bf R14: 00007f4b3f1ca9c0 R15: 000000000118cfec [ 217.707922][ T3050] usb 5-1: config 0 descriptor?? [ 218.052143][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 218.058225][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 218.066457][ T3050] usb 5-1: USB disconnect, device number 65 [ 218.532070][ T3050] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 218.892076][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.902949][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.913248][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 218.922595][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.931178][ T3050] usb 5-1: config 0 descriptor?? 10:14:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x100000000000000) 10:14:02 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x18, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xba}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x1, 0x7fff800000000}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_DIRENT(r1, &(0x7f0000000140)=ANY=[@ANYRES32], 0x10) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 10:14:02 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r8, 0x0) ftruncate(r8, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000030201acdc2eb7fe4e394a609302c9d967d564aa0b7cb75b6585487e6b6f698fa2a9d4a4ce555fcbc7fcb84a85ab8590b304bc9f6934e44086729293416cc96b39ba6b5569c758f87cd03d2d97c3f3b834e"], 0x0, 0x26}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r10, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r11, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r11, 0x4) write$binfmt_misc(r12, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES16, @ANYRESDEC=r5, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000000c0)={0x8, 0xe, [0x1, 0x3, 0x81, 0x200, 0x5], 0x6}) 10:14:02 executing program 5 (fault-call:13 fault-nth:22): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:02 executing program 3 (fault-call:10 fault-nth:21): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 219.183255][ T6150] FAULT_INJECTION: forcing a failure. [ 219.183255][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 219.184677][ T6151] FAULT_INJECTION: forcing a failure. [ 219.184677][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 219.206895][ T6150] CPU: 1 PID: 6150 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 219.218596][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.228637][ T6150] Call Trace: [ 219.231914][ T6150] dump_stack+0x14a/0x1ce [ 219.236224][ T6150] ? devkmsg_release+0x11c/0x11c [ 219.241141][ T6150] ? show_regs_print_info+0x12/0x12 [ 219.246316][ T6150] should_fail+0x6fb/0x860 [ 219.250710][ T6150] ? setup_fault_attr+0x3d0/0x3d0 [ 219.255716][ T6150] ? getname_kernel+0x55/0x2f0 [ 219.260465][ T6150] should_failslab+0x5/0x20 [ 219.264966][ T6150] kmem_cache_alloc+0x36/0x260 [ 219.269710][ T6150] getname_kernel+0x55/0x2f0 [ 219.274286][ T6150] kern_path+0x19/0x40 [ 219.278338][ T6150] ovl_mount_dir_noesc+0x55/0x1a0 [ 219.283370][ T6150] ovl_mount_dir+0x18b/0x270 [ 219.287940][ T6150] ovl_fill_super+0xf65/0x4f30 [ 219.292682][ T6150] ? ovl_mount+0x30/0x30 [ 219.296921][ T6150] ? ida_alloc_range+0xa59/0xac0 [ 219.301833][ T6150] ? delete_node+0x761/0x7b0 [ 219.306400][ T6150] ? __radix_tree_replace+0x24d/0x2f0 [ 219.311750][ T6150] ? idr_replace+0x1ca/0x240 [ 219.316320][ T6150] ? up_write+0xa1/0x190 [ 219.320545][ T6150] ? _raw_spin_lock+0xa1/0x170 [ 219.325299][ T6150] ? up_read+0x10/0x10 [ 219.329353][ T6150] ? sget+0x4cb/0x4e0 [ 219.333324][ T6150] ? free_anon_bdev+0x20/0x20 [ 219.337993][ T6150] ? ovl_mount+0x30/0x30 [ 219.342223][ T6150] mount_nodev+0x52/0xe0 [ 219.346458][ T6150] legacy_get_tree+0xde/0x170 [ 219.351125][ T6150] ? fuse_emit+0x7d0/0x7d0 [ 219.355530][ T6150] vfs_get_tree+0x85/0x260 [ 219.359940][ T6150] do_mount+0x1a15/0x28c0 [ 219.364272][ T6150] ? copy_mount_string+0x30/0x30 [ 219.369226][ T6150] ? page_fault+0x2f/0x40 [ 219.373544][ T6150] ? copy_mount_options+0x1e8/0x320 [ 219.378731][ T6150] ? copy_mount_options+0x293/0x320 [ 219.383917][ T6150] ksys_mount+0xc2/0xf0 [ 219.388057][ T6150] __x64_sys_mount+0xb1/0xc0 [ 219.392629][ T6150] do_syscall_64+0xcb/0x150 [ 219.397205][ T6150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 219.403084][ T6150] RIP: 0033:0x45d4d9 [ 219.407136][ T6150] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.428200][ T6150] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.436631][ T6150] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 219.444591][ T6150] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 219.452553][ T6150] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 219.460511][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 219.468472][ T6150] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 219.478477][ T6150] overlayfs: failed to resolve './file1': -12 [ 219.484610][ T6151] CPU: 0 PID: 6151 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 219.484614][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.484617][ T6151] Call Trace: [ 219.484631][ T6151] dump_stack+0x14a/0x1ce [ 219.484641][ T6151] ? devkmsg_release+0x11c/0x11c [ 219.484648][ T6151] ? show_regs_print_info+0x12/0x12 [ 219.484656][ T6151] should_fail+0x6fb/0x860 [ 219.484664][ T6151] ? setup_fault_attr+0x3d0/0x3d0 [ 219.484672][ T6151] ? ovl_mount_dir+0x23/0x270 [ 219.484684][ T6151] should_failslab+0x5/0x20 [ 219.543614][ T6151] __kmalloc_track_caller+0x5d/0x2c0 [ 219.548868][ T6151] kstrdup+0x31/0x70 [ 219.552734][ T6151] ovl_mount_dir+0x23/0x270 [ 219.557225][ T6151] ovl_fill_super+0xf65/0x4f30 [ 219.561962][ T6151] ? ovl_mount+0x30/0x30 [ 219.566175][ T6151] ? ida_alloc_range+0xa59/0xac0 [ 219.571100][ T6151] ? delete_node+0x761/0x7b0 [ 219.575680][ T6151] ? __radix_tree_replace+0x24d/0x2f0 [ 219.581065][ T6151] ? idr_replace+0x1ca/0x240 [ 219.585626][ T6151] ? up_write+0xa1/0x190 [ 219.589846][ T6151] ? _raw_spin_lock+0xa1/0x170 [ 219.594582][ T6151] ? up_read+0x10/0x10 [ 219.598622][ T6151] ? sget+0x4cb/0x4e0 [ 219.602575][ T6151] ? free_anon_bdev+0x20/0x20 [ 219.607222][ T6151] ? ovl_mount+0x30/0x30 [ 219.611434][ T6151] mount_nodev+0x52/0xe0 [ 219.615668][ T6151] legacy_get_tree+0xde/0x170 [ 219.620313][ T6151] ? fuse_emit+0x7d0/0x7d0 [ 219.624703][ T6151] vfs_get_tree+0x85/0x260 [ 219.629092][ T6151] do_mount+0x1a15/0x28c0 [ 219.633392][ T6151] ? copy_mount_string+0x30/0x30 [ 219.638302][ T6151] ? page_fault+0x2f/0x40 [ 219.642603][ T6151] ? copy_mount_options+0x1e8/0x320 [ 219.647771][ T6151] ? copy_mount_options+0x293/0x320 [ 219.652939][ T6151] ksys_mount+0xc2/0xf0 [ 219.657067][ T6151] __x64_sys_mount+0xb1/0xc0 [ 219.661649][ T6151] do_syscall_64+0xcb/0x150 [ 219.666140][ T6151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 219.672023][ T6151] RIP: 0033:0x45d4d9 [ 219.675891][ T6151] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.696404][ T6151] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.704793][ T6151] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 219.712742][ T6151] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 219.720705][ T6151] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 10:14:03 executing program 5 (fault-call:13 fault-nth:23): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x300000000000000) [ 219.728651][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 219.736605][ T6151] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 219.744629][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 219.759054][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.777439][ T3050] usb 5-1: USB disconnect, device number 66 10:14:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x40) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) [ 219.800397][ T6171] FAULT_INJECTION: forcing a failure. [ 219.800397][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 219.830216][ T6171] CPU: 0 PID: 6171 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 219.840332][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.850461][ T6171] Call Trace: [ 219.853736][ T6171] dump_stack+0x14a/0x1ce [ 219.858040][ T6171] ? devkmsg_release+0x11c/0x11c [ 219.862949][ T6171] ? show_regs_print_info+0x12/0x12 [ 219.868117][ T6171] ? find_inode+0x40d/0x4c0 [ 219.872592][ T6171] ? _raw_spin_lock+0x170/0x170 [ 219.877414][ T6171] should_fail+0x6fb/0x860 [ 219.881804][ T6171] ? setup_fault_attr+0x3d0/0x3d0 [ 219.886803][ T6171] ? _raw_spin_lock+0xa1/0x170 [ 219.891538][ T6171] ? _raw_spin_trylock_bh+0x190/0x190 [ 219.896882][ T6171] ? __percpu_counter_sum+0x19b/0x1e0 [ 219.902226][ T6171] ? ovl_lookup_inode+0x120/0x120 [ 219.907221][ T6171] ? ovl_alloc_inode+0x1b/0x90 [ 219.911956][ T6171] should_failslab+0x5/0x20 [ 219.916433][ T6171] kmem_cache_alloc+0x36/0x260 [ 219.921169][ T6171] ? ovl_free_fs+0x640/0x640 [ 219.925772][ T6171] ? ovl_lookup_inode+0x120/0x120 [ 219.930766][ T6171] ovl_alloc_inode+0x1b/0x90 [ 219.935327][ T6171] ? ovl_free_fs+0x640/0x640 [ 219.939889][ T6171] iget5_locked+0xa2/0x3e0 [ 219.944279][ T6171] ? ovl_get_trap_inode+0x190/0x190 [ 219.949451][ T6171] ovl_get_trap_inode+0x88/0x190 [ 219.954359][ T6171] ovl_fill_super+0x139a/0x4f30 [ 219.959185][ T6171] ? ovl_mount+0x30/0x30 [ 219.963399][ T6171] ? ida_alloc_range+0xa59/0xac0 [ 219.968306][ T6171] ? delete_node+0x761/0x7b0 [ 219.972886][ T6171] ? __radix_tree_replace+0x24d/0x2f0 [ 219.978230][ T6171] ? idr_replace+0x1ca/0x240 [ 219.982793][ T6171] ? up_read+0x10/0x10 [ 219.986832][ T6171] ? sget+0x4cb/0x4e0 [ 219.990794][ T6171] ? free_anon_bdev+0x20/0x20 [ 219.995446][ T6171] ? ovl_mount+0x30/0x30 [ 219.999660][ T6171] mount_nodev+0x52/0xe0 [ 220.003876][ T6171] legacy_get_tree+0xde/0x170 [ 220.008523][ T6171] ? fuse_emit+0x7d0/0x7d0 [ 220.012915][ T6171] vfs_get_tree+0x85/0x260 [ 220.017305][ T6171] do_mount+0x1a15/0x28c0 [ 220.021608][ T6171] ? copy_mount_string+0x30/0x30 [ 220.026535][ T6171] ? page_fault+0x2f/0x40 [ 220.030836][ T6171] ? copy_mount_options+0x1e8/0x320 [ 220.036006][ T6171] ? copy_mount_options+0x293/0x320 [ 220.041177][ T6171] ksys_mount+0xc2/0xf0 [ 220.046925][ T6171] __x64_sys_mount+0xb1/0xc0 [ 220.051507][ T6171] do_syscall_64+0xcb/0x150 [ 220.055995][ T6171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 220.061878][ T6171] RIP: 0033:0x45d4d9 [ 220.065776][ T6171] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.085365][ T6171] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.093764][ T6171] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 10:14:03 executing program 3 (fault-call:10 fault-nth:22): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:03 executing program 5 (fault-call:13 fault-nth:24): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 220.101718][ T6171] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 220.109671][ T6171] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 220.117618][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 220.125565][ T6171] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 220.164468][ T6187] FAULT_INJECTION: forcing a failure. [ 220.164468][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 220.177222][ T6187] CPU: 1 PID: 6187 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 220.183115][ T6192] FAULT_INJECTION: forcing a failure. [ 220.183115][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 220.187300][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.187303][ T6187] Call Trace: [ 220.187325][ T6187] dump_stack+0x14a/0x1ce [ 220.187340][ T6187] ? devkmsg_release+0x11c/0x11c [ 220.222543][ T6187] ? show_regs_print_info+0x12/0x12 [ 220.227719][ T6187] should_fail+0x6fb/0x860 [ 220.232165][ T6187] ? setup_fault_attr+0x3d0/0x3d0 [ 220.237184][ T6187] ? getname_kernel+0x55/0x2f0 [ 220.241931][ T6187] should_failslab+0x5/0x20 [ 220.246413][ T6187] kmem_cache_alloc+0x36/0x260 [ 220.251157][ T6187] getname_kernel+0x55/0x2f0 [ 220.255721][ T6187] kern_path+0x19/0x40 [ 220.259767][ T6187] ovl_mount_dir_noesc+0x55/0x1a0 [ 220.264766][ T6187] ovl_mount_dir+0x18b/0x270 [ 220.269347][ T6187] ovl_fill_super+0xf65/0x4f30 [ 220.274103][ T6187] ? ovl_mount+0x30/0x30 [ 220.278325][ T6187] ? ida_alloc_range+0xa59/0xac0 [ 220.283238][ T6187] ? delete_node+0x761/0x7b0 [ 220.287801][ T6187] ? __radix_tree_replace+0x24d/0x2f0 [ 220.293154][ T6187] ? idr_replace+0x1ca/0x240 [ 220.297723][ T6187] ? up_write+0xa1/0x190 [ 220.301964][ T6187] ? _raw_spin_lock+0xa1/0x170 [ 220.306702][ T6187] ? up_read+0x10/0x10 [ 220.310745][ T6187] ? sget+0x4cb/0x4e0 [ 220.314699][ T6187] ? free_anon_bdev+0x20/0x20 [ 220.319372][ T6187] ? ovl_mount+0x30/0x30 [ 220.323590][ T6187] mount_nodev+0x52/0xe0 [ 220.327827][ T6187] legacy_get_tree+0xde/0x170 [ 220.332482][ T6187] ? fuse_emit+0x7d0/0x7d0 [ 220.336892][ T6187] vfs_get_tree+0x85/0x260 [ 220.341286][ T6187] do_mount+0x1a15/0x28c0 [ 220.345592][ T6187] ? copy_mount_string+0x30/0x30 [ 220.350501][ T6187] ? page_fault+0x2f/0x40 [ 220.354803][ T6187] ? copy_mount_options+0x1e8/0x320 [ 220.359975][ T6187] ? copy_mount_options+0x293/0x320 [ 220.365147][ T6187] ksys_mount+0xc2/0xf0 [ 220.369277][ T6187] __x64_sys_mount+0xb1/0xc0 [ 220.373842][ T6187] do_syscall_64+0xcb/0x150 [ 220.378320][ T6187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 220.384191][ T6187] RIP: 0033:0x45d4d9 [ 220.388061][ T6187] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.407641][ T6187] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.416032][ T6187] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 220.423995][ T6187] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 220.431966][ T6187] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 220.439912][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 220.447860][ T6187] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 220.455823][ T6192] CPU: 0 PID: 6192 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 10:14:04 executing program 3 (fault-call:10 fault-nth:23): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 220.462616][ T6187] overlayfs: failed to resolve './file1': -12 [ 220.465884][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.465887][ T6192] Call Trace: [ 220.465903][ T6192] dump_stack+0x14a/0x1ce [ 220.465916][ T6192] ? devkmsg_release+0x11c/0x11c [ 220.494685][ T6192] ? show_regs_print_info+0x12/0x12 [ 220.499886][ T6192] ? find_inode+0x40d/0x4c0 [ 220.504253][ T6198] FAULT_INJECTION: forcing a failure. [ 220.504253][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 220.504484][ T6192] ? _raw_spin_lock+0x170/0x170 [ 220.521910][ T6192] should_fail+0x6fb/0x860 [ 220.526315][ T6192] ? setup_fault_attr+0x3d0/0x3d0 [ 220.531331][ T6192] ? _raw_spin_lock+0xa1/0x170 [ 220.536103][ T6192] ? _raw_spin_trylock_bh+0x190/0x190 [ 220.541455][ T6192] ? __percpu_counter_sum+0x19b/0x1e0 [ 220.546807][ T6192] ? ovl_lookup_inode+0x120/0x120 [ 220.551826][ T6192] ? ovl_alloc_inode+0x1b/0x90 [ 220.556566][ T6192] should_failslab+0x5/0x20 [ 220.561054][ T6192] kmem_cache_alloc+0x36/0x260 [ 220.565793][ T6192] ? ovl_free_fs+0x640/0x640 [ 220.570376][ T6192] ? ovl_lookup_inode+0x120/0x120 [ 220.575461][ T6192] ovl_alloc_inode+0x1b/0x90 [ 220.580048][ T6192] ? ovl_free_fs+0x640/0x640 [ 220.584614][ T6192] iget5_locked+0xa2/0x3e0 [ 220.589006][ T6192] ? ovl_get_trap_inode+0x190/0x190 [ 220.594179][ T6192] ovl_get_trap_inode+0x88/0x190 [ 220.599092][ T6192] ovl_fill_super+0x139a/0x4f30 [ 220.603917][ T6192] ? ovl_mount+0x30/0x30 [ 220.608134][ T6192] ? ida_alloc_range+0xa59/0xac0 [ 220.613045][ T6192] ? delete_node+0x761/0x7b0 [ 220.617608][ T6192] ? __radix_tree_replace+0x24d/0x2f0 [ 220.622955][ T6192] ? idr_replace+0x1ca/0x240 [ 220.627520][ T6192] ? up_read+0x10/0x10 [ 220.631563][ T6192] ? sget+0x4cb/0x4e0 [ 220.635519][ T6192] ? free_anon_bdev+0x20/0x20 [ 220.640170][ T6192] ? ovl_mount+0x30/0x30 [ 220.644387][ T6192] mount_nodev+0x52/0xe0 [ 220.648605][ T6192] legacy_get_tree+0xde/0x170 [ 220.653256][ T6192] ? fuse_emit+0x7d0/0x7d0 [ 220.657675][ T6192] vfs_get_tree+0x85/0x260 [ 220.661788][ T3050] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 220.662075][ T6192] do_mount+0x1a15/0x28c0 [ 220.662087][ T6192] ? copy_mount_string+0x30/0x30 [ 220.678827][ T6192] ? page_fault+0x2f/0x40 [ 220.684105][ T6192] ? copy_mount_options+0x1e8/0x320 [ 220.689293][ T6192] ? copy_mount_options+0x293/0x320 [ 220.694468][ T6192] ksys_mount+0xc2/0xf0 [ 220.698600][ T6192] __x64_sys_mount+0xb1/0xc0 [ 220.703164][ T6192] do_syscall_64+0xcb/0x150 [ 220.707644][ T6192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 220.713510][ T6192] RIP: 0033:0x45d4d9 [ 220.717381][ T6192] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.738347][ T6192] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.746749][ T6192] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 220.754695][ T6192] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 220.762642][ T6192] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 220.770588][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 220.778536][ T6192] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 220.786490][ T6198] CPU: 1 PID: 6198 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 220.796553][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.806600][ T6198] Call Trace: [ 220.809882][ T6198] dump_stack+0x14a/0x1ce [ 220.814283][ T6198] ? devkmsg_release+0x11c/0x11c [ 220.819193][ T6198] ? show_regs_print_info+0x12/0x12 [ 220.824360][ T6198] ? find_inode+0x40d/0x4c0 [ 220.828974][ T6198] ? _raw_spin_lock+0x170/0x170 [ 220.833796][ T6198] should_fail+0x6fb/0x860 [ 220.838182][ T6198] ? setup_fault_attr+0x3d0/0x3d0 [ 220.843175][ T6198] ? _raw_spin_lock+0xa1/0x170 [ 220.847915][ T6198] ? _raw_spin_trylock_bh+0x190/0x190 [ 220.853285][ T6198] ? __percpu_counter_sum+0x19b/0x1e0 [ 220.858628][ T6198] ? ovl_lookup_inode+0x120/0x120 [ 220.863670][ T6198] ? ovl_alloc_inode+0x1b/0x90 [ 220.868404][ T6198] should_failslab+0x5/0x20 [ 220.872899][ T6198] kmem_cache_alloc+0x36/0x260 [ 220.877633][ T6198] ? ovl_free_fs+0x640/0x640 [ 220.882212][ T6198] ? ovl_lookup_inode+0x120/0x120 [ 220.887205][ T6198] ovl_alloc_inode+0x1b/0x90 [ 220.891767][ T6198] ? ovl_free_fs+0x640/0x640 [ 220.896325][ T6198] iget5_locked+0xa2/0x3e0 [ 220.900716][ T6198] ? ovl_get_trap_inode+0x190/0x190 [ 220.905885][ T6198] ovl_get_trap_inode+0x88/0x190 [ 220.910793][ T6198] ovl_fill_super+0x139a/0x4f30 [ 220.915616][ T6198] ? ovl_mount+0x30/0x30 [ 220.919836][ T6198] ? ida_alloc_range+0xa59/0xac0 [ 220.924756][ T6198] ? delete_node+0x761/0x7b0 [ 220.929341][ T6198] ? __radix_tree_replace+0x24d/0x2f0 [ 220.934682][ T6198] ? idr_replace+0x1ca/0x240 [ 220.939254][ T6198] ? up_read+0x10/0x10 [ 220.943303][ T6198] ? sget+0x4cb/0x4e0 [ 220.947307][ T6198] ? free_anon_bdev+0x20/0x20 [ 220.951977][ T6198] ? ovl_mount+0x30/0x30 [ 220.956210][ T6198] mount_nodev+0x52/0xe0 [ 220.960434][ T6198] legacy_get_tree+0xde/0x170 [ 220.965085][ T6198] ? fuse_emit+0x7d0/0x7d0 [ 220.969490][ T6198] vfs_get_tree+0x85/0x260 [ 220.973895][ T6198] do_mount+0x1a15/0x28c0 [ 220.978196][ T6198] ? copy_mount_string+0x30/0x30 [ 220.983103][ T6198] ? page_fault+0x2f/0x40 [ 220.987422][ T6198] ? copy_mount_options+0x1e8/0x320 [ 220.992591][ T6198] ? copy_mount_options+0x293/0x320 [ 220.997758][ T6198] ksys_mount+0xc2/0xf0 [ 221.001888][ T6198] __x64_sys_mount+0xb1/0xc0 [ 221.006448][ T6198] do_syscall_64+0xcb/0x150 [ 221.010922][ T6198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 221.016783][ T6198] RIP: 0033:0x45d4d9 [ 221.020663][ T6198] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.040238][ T6198] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.048618][ T6198] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 221.056563][ T6198] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 221.064506][ T6198] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 221.072458][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 221.080436][ T6198] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 221.351790][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.362823][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.373438][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 221.383027][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.391624][ T3050] usb 5-1: config 0 descriptor?? [ 221.721744][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 221.727691][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 221.735844][ T3050] usb 5-1: USB disconnect, device number 67 [ 222.191627][ T3050] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 222.551684][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.562565][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.572932][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 222.582304][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.592539][ T3050] usb 5-1: config 0 descriptor?? [ 223.141557][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 223.147549][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 223.155126][ T3050] usb 5-1: USB disconnect, device number 68 10:14:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76cf, &(0x7f0000000040)={0x0, 0x59c6, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x2, 0x1, 0x24, 0xf3, "578135369728118cb54e8167c0dcc4294a5e067aa0f8305483451f099d2d28dba4329742d264e3239699faff4de1de7a19d051e44fbf938402489f2cbd313d8fadd1998bc62cda921dbf1b0127d7089215f9a06dd0ce11f483b9d7496ba6c9b4d37b9ff0d1659c58edb4f576dc8d9b634c8e8375f562932ab3dfae28d732ca072290a64e9db7f67eb460ad181047a695406eb0a44375e1388eb936b216628ae3273f9c348789a04d96cbc7c5397baec0aba9606f79bd43e3a87a0fb2ce72709735c9cfd82637afbd51a430ec3461b6626da4c3884294b08a03241304446f59b05d4fcf0d7437bf3adc4e4d5617938940ede343"}, 0xfc, 0x0) r6 = dup(r5) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000000000)={0x14}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:07 executing program 5 (fault-call:13 fault-nth:25): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:07 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000) 10:14:07 executing program 3 (fault-call:10 fault-nth:24): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x979b}]}, 0x2c}}, 0x0) 10:14:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 223.579599][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.589261][ T6222] FAULT_INJECTION: forcing a failure. [ 223.589261][ T6222] name failslab, interval 1, probability 0, space 0, times 0 [ 223.597864][ T6224] FAULT_INJECTION: forcing a failure. [ 223.597864][ T6224] name failslab, interval 1, probability 0, space 0, times 0 [ 223.604108][ T6222] CPU: 0 PID: 6222 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 223.624575][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.634621][ T6222] Call Trace: [ 223.637899][ T6222] dump_stack+0x14a/0x1ce [ 223.642220][ T6222] ? devkmsg_release+0x11c/0x11c [ 223.647148][ T6222] ? show_regs_print_info+0x12/0x12 [ 223.652327][ T6222] should_fail+0x6fb/0x860 [ 223.656721][ T6222] ? setup_fault_attr+0x3d0/0x3d0 [ 223.661723][ T6222] ? security_inode_alloc+0x32/0x1f0 [ 223.666981][ T6222] should_failslab+0x5/0x20 [ 223.671460][ T6222] kmem_cache_alloc+0x36/0x260 [ 223.676198][ T6222] ? from_kuid_munged+0x3b0/0x3b0 [ 223.681206][ T6222] security_inode_alloc+0x32/0x1f0 [ 223.686299][ T6222] inode_init_always+0x37c/0x800 [ 223.691214][ T6222] ? ovl_lookup_inode+0x120/0x120 [ 223.696244][ T6222] iget5_locked+0xb9/0x3e0 [ 223.700639][ T6222] ? ovl_get_trap_inode+0x190/0x190 [ 223.705814][ T6222] ovl_get_trap_inode+0x88/0x190 [ 223.710769][ T6222] ovl_fill_super+0x139a/0x4f30 [ 223.715615][ T6222] ? ovl_mount+0x30/0x30 [ 223.719833][ T6222] ? ida_alloc_range+0xa59/0xac0 [ 223.724832][ T6222] ? delete_node+0x761/0x7b0 [ 223.729395][ T6222] ? __radix_tree_replace+0x24d/0x2f0 [ 223.734741][ T6222] ? idr_replace+0x1ca/0x240 [ 223.739308][ T6222] ? up_read+0x10/0x10 [ 223.743356][ T6222] ? sget+0x4cb/0x4e0 [ 223.747330][ T6222] ? free_anon_bdev+0x20/0x20 [ 223.751997][ T6222] ? ovl_mount+0x30/0x30 [ 223.756212][ T6222] mount_nodev+0x52/0xe0 [ 223.760447][ T6222] legacy_get_tree+0xde/0x170 [ 223.765097][ T6222] ? fuse_emit+0x7d0/0x7d0 [ 223.769493][ T6222] vfs_get_tree+0x85/0x260 [ 223.773886][ T6222] do_mount+0x1a15/0x28c0 [ 223.778211][ T6222] ? copy_mount_string+0x30/0x30 [ 223.783123][ T6222] ? page_fault+0x2f/0x40 [ 223.787428][ T6222] ? copy_mount_options+0x1e8/0x320 [ 223.792600][ T6222] ? copy_mount_options+0x293/0x320 [ 223.797771][ T6222] ksys_mount+0xc2/0xf0 [ 223.801904][ T6222] __x64_sys_mount+0xb1/0xc0 [ 223.806469][ T6222] do_syscall_64+0xcb/0x150 [ 223.810947][ T6222] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 223.816814][ T6222] RIP: 0033:0x45d4d9 [ 223.820686][ T6222] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.840265][ T6222] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.848650][ T6222] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 223.856617][ T6222] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 223.864565][ T6222] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 223.872618][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 223.880568][ T6222] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 223.888523][ T6224] CPU: 1 PID: 6224 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 223.898592][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.908634][ T6224] Call Trace: [ 223.912008][ T6224] dump_stack+0x14a/0x1ce [ 223.912117][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.916345][ T6224] ? devkmsg_release+0x11c/0x11c [ 223.916353][ T6224] ? show_regs_print_info+0x12/0x12 [ 223.916366][ T6224] ? find_inode+0x40d/0x4c0 [ 223.937928][ T6224] should_fail+0x6fb/0x860 [ 223.942317][ T6224] ? setup_fault_attr+0x3d0/0x3d0 [ 223.947311][ T6224] ? alloc_vfsmnt+0x24/0x470 [ 223.951869][ T6224] should_failslab+0x5/0x20 [ 223.956348][ T6224] kmem_cache_alloc+0x36/0x260 [ 223.961134][ T6224] ? kmem_cache_alloc+0x1d5/0x260 [ 223.966135][ T6224] alloc_vfsmnt+0x24/0x470 [ 223.970529][ T6224] clone_mnt+0x68/0xca0 [ 223.974661][ T6224] clone_private_mount+0x8d/0xe0 [ 223.979570][ T6224] ovl_fill_super+0x1445/0x4f30 [ 223.984419][ T6224] ? ovl_mount+0x30/0x30 [ 223.988631][ T6224] ? ida_alloc_range+0xa59/0xac0 [ 223.993539][ T6224] ? delete_node+0x761/0x7b0 [ 223.998099][ T6224] ? __radix_tree_replace+0x24d/0x2f0 [ 224.003470][ T6224] ? idr_replace+0x1ca/0x240 [ 224.008032][ T6224] ? up_read+0x10/0x10 [ 224.012071][ T6224] ? sget+0x4cb/0x4e0 [ 224.016023][ T6224] ? free_anon_bdev+0x20/0x20 [ 224.020672][ T6224] ? ovl_mount+0x30/0x30 [ 224.024891][ T6224] mount_nodev+0x52/0xe0 [ 224.029105][ T6224] legacy_get_tree+0xde/0x170 [ 224.031402][ T3045] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 224.033754][ T6224] ? fuse_emit+0x7d0/0x7d0 [ 224.033761][ T6224] vfs_get_tree+0x85/0x260 [ 224.033774][ T6224] do_mount+0x1a15/0x28c0 [ 224.054467][ T6224] ? copy_mount_string+0x30/0x30 [ 224.059390][ T6224] ? page_fault+0x2f/0x40 [ 224.063694][ T6224] ? copy_mount_options+0x1e8/0x320 [ 224.068864][ T6224] ? copy_mount_options+0x293/0x320 [ 224.074029][ T6224] ksys_mount+0xc2/0xf0 [ 224.078162][ T6224] __x64_sys_mount+0xb1/0xc0 [ 224.082992][ T6224] do_syscall_64+0xcb/0x150 [ 224.087474][ T6224] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.093337][ T6224] RIP: 0033:0x45d4d9 [ 224.097223][ T6224] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.116806][ T6224] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:14:07 executing program 3 (fault-call:10 fault-nth:25): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:07 executing program 5 (fault-call:13 fault-nth:26): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 224.125277][ T6224] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 224.133243][ T6224] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 224.141193][ T6224] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 224.149417][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 224.158232][ T6224] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 224.171885][ T6224] overlayfs: failed to clone upperpath 10:14:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x8e}}, 0x30) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r6, 0x0) chown(&(0x7f0000000180)='./file0\x00', r6, 0xee01) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{0x0}, {&(0x7f0000000380)="2a92997dde9f81b959d19ef711ce3882f2b6c6b2eee8f19ca2a0fcfecba4edd78a127e05c323349d294b1c64b5d2c579d920a0c30d0b4eba440a3300192ec13e90b3e265a9fcdeff7d40325ef14638a30d1a57584a58c984d175c8415194bb8985924609e0a1d599578289ba4a1861e3796934fbf216f54d5d3202f0912985e0dcca08e3f85fa4bd3f1950881ebee0f628aac1fb68220f90cf876683a57bb8da3c", 0xa1}, {&(0x7f0000000140)="6771dc6032", 0x5}, {0x0}, {&(0x7f0000000600)}, {0x0}, {&(0x7f00000006c0)}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1ecc6d6b7300006500000000010400000247", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32], 0x20}, 0x6008005) lseek(r5, 0x4200, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1}) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffb) [ 224.199696][ T6240] FAULT_INJECTION: forcing a failure. [ 224.199696][ T6240] name failslab, interval 1, probability 0, space 0, times 0 [ 224.199981][ T6244] FAULT_INJECTION: forcing a failure. [ 224.199981][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 224.216773][ T6240] CPU: 1 PID: 6240 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 224.235127][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.245180][ T6240] Call Trace: [ 224.248478][ T6240] dump_stack+0x14a/0x1ce [ 224.252805][ T6240] ? devkmsg_release+0x11c/0x11c [ 224.257737][ T6240] ? show_regs_print_info+0x12/0x12 [ 224.262933][ T6240] ? find_inode+0x40d/0x4c0 [ 224.267410][ T6240] should_fail+0x6fb/0x860 [ 224.271822][ T6240] ? setup_fault_attr+0x3d0/0x3d0 [ 224.276822][ T6240] ? alloc_vfsmnt+0x24/0x470 [ 224.281391][ T6240] should_failslab+0x5/0x20 [ 224.285874][ T6240] kmem_cache_alloc+0x36/0x260 [ 224.290618][ T6240] ? kmem_cache_alloc+0x1d5/0x260 [ 224.295620][ T6240] alloc_vfsmnt+0x24/0x470 [ 224.300012][ T6240] clone_mnt+0x68/0xca0 [ 224.304147][ T6240] clone_private_mount+0x8d/0xe0 [ 224.309080][ T6240] ovl_fill_super+0x1445/0x4f30 [ 224.313996][ T6240] ? ovl_mount+0x30/0x30 [ 224.318212][ T6240] ? ida_alloc_range+0xa59/0xac0 [ 224.323154][ T6240] ? delete_node+0x761/0x7b0 [ 224.327724][ T6240] ? __radix_tree_replace+0x24d/0x2f0 [ 224.333071][ T6240] ? idr_replace+0x1ca/0x240 [ 224.337683][ T6240] ? up_read+0x10/0x10 [ 224.341735][ T6240] ? sget+0x4cb/0x4e0 [ 224.345700][ T6240] ? free_anon_bdev+0x20/0x20 [ 224.350363][ T6240] ? ovl_mount+0x30/0x30 [ 224.354583][ T6240] mount_nodev+0x52/0xe0 [ 224.358802][ T6240] legacy_get_tree+0xde/0x170 [ 224.363454][ T6240] ? fuse_emit+0x7d0/0x7d0 [ 224.367863][ T6240] vfs_get_tree+0x85/0x260 [ 224.372255][ T6240] do_mount+0x1a15/0x28c0 [ 224.376561][ T6240] ? copy_mount_string+0x30/0x30 [ 224.381475][ T6240] ? page_fault+0x2f/0x40 [ 224.385788][ T6240] ? copy_mount_options+0x1e8/0x320 [ 224.390962][ T6240] ? copy_mount_options+0x293/0x320 [ 224.396144][ T6240] ksys_mount+0xc2/0xf0 [ 224.400294][ T6240] __x64_sys_mount+0xb1/0xc0 [ 224.401500][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.404865][ T6240] do_syscall_64+0xcb/0x150 [ 224.404875][ T6240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.404887][ T6240] RIP: 0033:0x45d4d9 [ 224.427710][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 10:14:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 224.429956][ T6240] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.429961][ T6240] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.429968][ T6240] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 224.429978][ T6240] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 224.460353][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 224.467638][ T6240] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 224.467643][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 224.467647][ T6240] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 224.475695][ T6244] CPU: 1 PID: 6244 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 224.475699][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.475701][ T6244] Call Trace: [ 224.475720][ T6244] dump_stack+0x14a/0x1ce 10:14:08 executing program 3 (fault-call:10 fault-nth:26): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 224.500098][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.500680][ T6244] ? devkmsg_release+0x11c/0x11c [ 224.510359][ T3045] usb 5-1: config 0 descriptor?? [ 224.516646][ T6244] ? show_regs_print_info+0x12/0x12 [ 224.516653][ T6244] ? ida_alloc_range+0xa59/0xac0 [ 224.516661][ T6244] should_fail+0x6fb/0x860 [ 224.516668][ T6244] ? setup_fault_attr+0x3d0/0x3d0 [ 224.516673][ T6244] ? idr_replace+0x240/0x240 [ 224.516682][ T6244] ? alloc_vfsmnt+0xa3/0x470 [ 224.516688][ T6244] should_failslab+0x5/0x20 [ 224.516702][ T6244] __kmalloc_track_caller+0x5d/0x2c0 [ 224.531530][ T6240] overlayfs: failed to clone upperpath [ 224.536780][ T6244] ? alloc_vfsmnt+0x24/0x470 [ 224.536788][ T6244] kstrdup_const+0x51/0x90 [ 224.536800][ T6244] alloc_vfsmnt+0xa3/0x470 [ 224.562739][ T6262] FAULT_INJECTION: forcing a failure. [ 224.562739][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 224.567385][ T6244] clone_mnt+0x68/0xca0 [ 224.567395][ T6244] clone_private_mount+0x8d/0xe0 [ 224.567410][ T6244] ovl_fill_super+0x1445/0x4f30 [ 224.645801][ T6244] ? ovl_mount+0x30/0x30 [ 224.650046][ T6244] ? ida_alloc_range+0xa59/0xac0 [ 224.655145][ T6244] ? delete_node+0x761/0x7b0 [ 224.659719][ T6244] ? __radix_tree_replace+0x24d/0x2f0 [ 224.665114][ T6244] ? idr_replace+0x1ca/0x240 [ 224.669686][ T6244] ? up_read+0x10/0x10 [ 224.673748][ T6244] ? sget+0x4cb/0x4e0 [ 224.677742][ T6244] ? free_anon_bdev+0x20/0x20 [ 224.683093][ T6244] ? ovl_mount+0x30/0x30 [ 224.687331][ T6244] mount_nodev+0x52/0xe0 [ 224.691586][ T6244] legacy_get_tree+0xde/0x170 [ 224.696241][ T6244] ? fuse_emit+0x7d0/0x7d0 [ 224.700649][ T6244] vfs_get_tree+0x85/0x260 [ 224.705047][ T6244] do_mount+0x1a15/0x28c0 [ 224.709531][ T6244] ? copy_mount_string+0x30/0x30 [ 224.714639][ T6244] ? page_fault+0x2f/0x40 [ 224.718952][ T6244] ? copy_mount_options+0x1e8/0x320 [ 224.724124][ T6244] ? copy_mount_options+0x293/0x320 [ 224.729352][ T6244] ksys_mount+0xc2/0xf0 [ 224.733484][ T6244] __x64_sys_mount+0xb1/0xc0 [ 224.738050][ T6244] do_syscall_64+0xcb/0x150 [ 224.742529][ T6244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.748396][ T6244] RIP: 0033:0x45d4d9 [ 224.752284][ T6244] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.771862][ T6244] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.780256][ T6244] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 224.788217][ T6244] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 224.796179][ T6244] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 224.804135][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 224.812104][ T6244] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 224.820062][ T6262] CPU: 0 PID: 6262 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 224.824217][ T6244] overlayfs: failed to clone upperpath [ 224.830121][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.830124][ T6262] Call Trace: [ 224.830143][ T6262] dump_stack+0x14a/0x1ce [ 224.830156][ T6262] ? devkmsg_release+0x11c/0x11c [ 224.858199][ T6262] ? show_regs_print_info+0x12/0x12 [ 224.863370][ T6262] ? ida_alloc_range+0xa59/0xac0 [ 224.868278][ T6262] should_fail+0x6fb/0x860 [ 224.872665][ T6262] ? setup_fault_attr+0x3d0/0x3d0 [ 224.877657][ T6262] ? idr_replace+0x240/0x240 [ 224.882238][ T6262] ? alloc_vfsmnt+0xa3/0x470 [ 224.886799][ T6262] should_failslab+0x5/0x20 [ 224.891276][ T6262] __kmalloc_track_caller+0x5d/0x2c0 [ 224.896535][ T6262] ? alloc_vfsmnt+0x24/0x470 [ 224.901124][ T6262] kstrdup_const+0x51/0x90 [ 224.905531][ T6262] alloc_vfsmnt+0xa3/0x470 [ 224.909921][ T6262] clone_mnt+0x68/0xca0 [ 224.914048][ T6262] clone_private_mount+0x8d/0xe0 [ 224.918960][ T6262] ovl_fill_super+0x1445/0x4f30 [ 224.923835][ T6262] ? ovl_mount+0x30/0x30 [ 224.928048][ T6262] ? ida_alloc_range+0xa59/0xac0 [ 224.932963][ T6262] ? delete_node+0x761/0x7b0 [ 224.937523][ T6262] ? __radix_tree_replace+0x24d/0x2f0 [ 224.942934][ T6262] ? idr_replace+0x1ca/0x240 [ 224.947510][ T6262] ? up_read+0x10/0x10 [ 224.951581][ T6262] ? sget+0x4cb/0x4e0 [ 224.955535][ T6262] ? free_anon_bdev+0x20/0x20 [ 224.960216][ T6262] ? ovl_mount+0x30/0x30 [ 224.964432][ T6262] mount_nodev+0x52/0xe0 [ 224.968648][ T6262] legacy_get_tree+0xde/0x170 [ 224.973298][ T6262] ? fuse_emit+0x7d0/0x7d0 [ 224.977700][ T6262] vfs_get_tree+0x85/0x260 [ 224.982090][ T6262] do_mount+0x1a15/0x28c0 [ 224.986391][ T6262] ? copy_mount_string+0x30/0x30 [ 224.991302][ T6262] ? page_fault+0x2f/0x40 [ 224.995629][ T6262] ? copy_mount_options+0x1e8/0x320 [ 225.000799][ T6262] ? copy_mount_options+0x293/0x320 [ 225.005993][ T6262] ksys_mount+0xc2/0xf0 [ 225.010122][ T6262] __x64_sys_mount+0xb1/0xc0 [ 225.014692][ T6262] do_syscall_64+0xcb/0x150 [ 225.019170][ T6262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.025033][ T6262] RIP: 0033:0x45d4d9 [ 225.028924][ T6262] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.048498][ T6262] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.056878][ T6262] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 225.064840][ T6262] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 225.072784][ T6262] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 225.080727][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 225.088691][ T6262] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c 10:14:08 executing program 5 (fault-call:13 fault-nth:27): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfffffeff, 0x7fffffff, 0xfa2, 0x7, 0xc, "ea882abc69e5b36d6981ce0ce4634827504754"}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r8, 0x0) ftruncate(r8, 0x40) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000001c0)=r9, 0x1) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) [ 225.100350][ T6262] overlayfs: failed to clone upperpath 10:14:08 executing program 3 (fault-call:10 fault-nth:27): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 225.131337][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 225.138489][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 225.146665][ T6276] FAULT_INJECTION: forcing a failure. [ 225.146665][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 225.152250][ T3045] usb 5-1: USB disconnect, device number 69 [ 225.166951][ T6276] CPU: 1 PID: 6276 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 225.177020][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.183278][ T6284] FAULT_INJECTION: forcing a failure. [ 225.183278][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 225.187071][ T6276] Call Trace: [ 225.202922][ T6276] dump_stack+0x14a/0x1ce [ 225.207247][ T6276] ? devkmsg_release+0x11c/0x11c [ 225.212170][ T6276] ? show_regs_print_info+0x12/0x12 [ 225.217357][ T6276] ? find_next_bit+0xd8/0x120 [ 225.222015][ T6276] ? cpumask_next+0xc/0x20 [ 225.226413][ T6276] should_fail+0x6fb/0x860 [ 225.230805][ T6276] ? setup_fault_attr+0x3d0/0x3d0 [ 225.235805][ T6276] ? _raw_spin_lock+0xa1/0x170 [ 225.240547][ T6276] ? _raw_spin_trylock_bh+0x190/0x190 [ 225.245899][ T6276] ? ovl_mount_dir+0x23/0x270 [ 225.250657][ T6276] should_failslab+0x5/0x20 [ 225.255137][ T6276] __kmalloc_track_caller+0x5d/0x2c0 [ 225.260408][ T6276] ? _raw_spin_unlock+0x5/0x20 [ 225.265163][ T6276] ? clone_mnt+0xa21/0xca0 [ 225.269572][ T6276] kstrdup+0x31/0x70 [ 225.273448][ T6276] ovl_mount_dir+0x23/0x270 [ 225.278290][ T6276] ovl_fill_super+0x159f/0x4f30 [ 225.283118][ T6276] ? ovl_mount+0x30/0x30 [ 225.287340][ T6276] ? ida_alloc_range+0xa59/0xac0 [ 225.292346][ T6276] ? delete_node+0x761/0x7b0 [ 225.296922][ T6276] ? __radix_tree_replace+0x24d/0x2f0 [ 225.302274][ T6276] ? up_read+0x10/0x10 [ 225.306330][ T6276] ? sget+0x4cb/0x4e0 [ 225.315258][ T6276] ? free_anon_bdev+0x20/0x20 [ 225.319929][ T6276] ? ovl_mount+0x30/0x30 [ 225.324155][ T6276] mount_nodev+0x52/0xe0 [ 225.328406][ T6276] legacy_get_tree+0xde/0x170 [ 225.333055][ T6276] ? fuse_emit+0x7d0/0x7d0 [ 225.337442][ T6276] vfs_get_tree+0x85/0x260 [ 225.341836][ T6276] do_mount+0x1a15/0x28c0 [ 225.346142][ T6276] ? copy_mount_string+0x30/0x30 [ 225.351052][ T6276] ? page_fault+0x2f/0x40 [ 225.355353][ T6276] ? copy_mount_options+0x1e8/0x320 [ 225.360523][ T6276] ? copy_mount_options+0x293/0x320 [ 225.365698][ T6276] ksys_mount+0xc2/0xf0 [ 225.369829][ T6276] __x64_sys_mount+0xb1/0xc0 [ 225.374395][ T6276] do_syscall_64+0xcb/0x150 [ 225.378871][ T6276] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.384744][ T6276] RIP: 0033:0x45d4d9 [ 225.388875][ T6276] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.408454][ T6276] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.416849][ T6276] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 225.424797][ T6276] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 225.432752][ T6276] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 225.440716][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 225.448664][ T6276] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 225.456627][ T6284] CPU: 0 PID: 6284 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 225.466687][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.476732][ T6284] Call Trace: 10:14:09 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) timerfd_gettime(r6, &(0x7f00000000c0)) 10:14:09 executing program 5 (fault-call:13 fault-nth:28): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 225.480023][ T6284] dump_stack+0x14a/0x1ce [ 225.484359][ T6284] ? devkmsg_release+0x11c/0x11c [ 225.489296][ T6284] ? show_regs_print_info+0x12/0x12 [ 225.494496][ T6284] ? find_next_bit+0xd8/0x120 [ 225.499168][ T6284] ? cpumask_next+0xc/0x20 [ 225.503629][ T6284] should_fail+0x6fb/0x860 [ 225.508044][ T6284] ? setup_fault_attr+0x3d0/0x3d0 [ 225.508558][ T6292] FAULT_INJECTION: forcing a failure. [ 225.508558][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 225.513079][ T6284] ? _raw_spin_lock+0xa1/0x170 [ 225.513086][ T6284] ? _raw_spin_trylock_bh+0x190/0x190 [ 225.513095][ T6284] ? ovl_mount_dir+0x23/0x270 [ 225.513102][ T6284] should_failslab+0x5/0x20 [ 225.513146][ T6284] __kmalloc_track_caller+0x5d/0x2c0 [ 225.550763][ T6284] ? _raw_spin_unlock+0x5/0x20 [ 225.555503][ T6284] ? clone_mnt+0xa21/0xca0 [ 225.559896][ T6284] kstrdup+0x31/0x70 [ 225.563766][ T6284] ovl_mount_dir+0x23/0x270 [ 225.569226][ T6284] ovl_fill_super+0x159f/0x4f30 [ 225.574064][ T6284] ? ovl_mount+0x30/0x30 [ 225.578301][ T6284] ? ida_alloc_range+0xa59/0xac0 [ 225.583218][ T6284] ? delete_node+0x761/0x7b0 [ 225.587783][ T6284] ? __radix_tree_replace+0x24d/0x2f0 [ 225.594089][ T6284] ? up_read+0x10/0x10 [ 225.598150][ T6284] ? sget+0x4cb/0x4e0 [ 225.602132][ T6284] ? free_anon_bdev+0x20/0x20 [ 225.606801][ T6284] ? ovl_mount+0x30/0x30 [ 225.611031][ T6284] mount_nodev+0x52/0xe0 [ 225.615265][ T6284] legacy_get_tree+0xde/0x170 [ 225.619937][ T6284] ? fuse_emit+0x7d0/0x7d0 [ 225.624352][ T6284] vfs_get_tree+0x85/0x260 [ 225.628761][ T6284] do_mount+0x1a15/0x28c0 [ 225.633092][ T6284] ? copy_mount_string+0x30/0x30 [ 225.638018][ T6284] ? page_fault+0x2f/0x40 [ 225.642330][ T6284] ? copy_mount_options+0x1e8/0x320 [ 225.647518][ T6284] ? copy_mount_options+0x293/0x320 [ 225.652692][ T6284] ksys_mount+0xc2/0xf0 [ 225.656830][ T6284] __x64_sys_mount+0xb1/0xc0 [ 225.661391][ T6284] do_syscall_64+0xcb/0x150 [ 225.665870][ T6284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.672093][ T6284] RIP: 0033:0x45d4d9 [ 225.676049][ T6284] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.695635][ T6284] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.704023][ T6284] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 225.711968][ T6284] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 225.719914][ T6284] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 225.727860][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 225.735812][ T6284] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 225.743774][ T6292] CPU: 1 PID: 6292 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 225.744192][ T3045] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 225.753828][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.753831][ T6292] Call Trace: [ 225.753848][ T6292] dump_stack+0x14a/0x1ce [ 225.753856][ T6292] ? devkmsg_release+0x11c/0x11c [ 225.753863][ T6292] ? show_regs_print_info+0x12/0x12 [ 225.753871][ T6292] should_fail+0x6fb/0x860 [ 225.753882][ T6292] ? setup_fault_attr+0x3d0/0x3d0 [ 225.798616][ T6292] ? getname_kernel+0x55/0x2f0 [ 225.803373][ T6292] should_failslab+0x5/0x20 [ 225.808046][ T6292] kmem_cache_alloc+0x36/0x260 [ 225.812884][ T6292] getname_kernel+0x55/0x2f0 [ 225.817450][ T6292] kern_path+0x19/0x40 [ 225.821493][ T6292] ovl_mount_dir_noesc+0x55/0x1a0 [ 225.826496][ T6292] ovl_mount_dir+0x18b/0x270 [ 225.831669][ T6292] ovl_fill_super+0x159f/0x4f30 [ 225.836930][ T6292] ? ovl_mount+0x30/0x30 [ 225.841164][ T6292] ? ida_alloc_range+0xa59/0xac0 [ 225.846079][ T6292] ? delete_node+0x761/0x7b0 [ 225.850638][ T6292] ? __radix_tree_replace+0x24d/0x2f0 [ 225.855981][ T6292] ? up_read+0x10/0x10 [ 225.860019][ T6292] ? sget+0x4cb/0x4e0 [ 225.863968][ T6292] ? free_anon_bdev+0x20/0x20 [ 225.868656][ T6292] ? ovl_mount+0x30/0x30 [ 225.872868][ T6292] mount_nodev+0x52/0xe0 [ 225.877099][ T6292] legacy_get_tree+0xde/0x170 [ 225.881746][ T6292] ? fuse_emit+0x7d0/0x7d0 [ 225.886131][ T6292] vfs_get_tree+0x85/0x260 [ 225.890520][ T6292] do_mount+0x1a15/0x28c0 [ 225.894839][ T6292] ? copy_mount_string+0x30/0x30 [ 225.899746][ T6292] ? page_fault+0x2f/0x40 [ 225.904057][ T6292] ? copy_mount_options+0x1e8/0x320 [ 225.909225][ T6292] ? copy_mount_options+0x293/0x320 [ 225.914398][ T6292] ksys_mount+0xc2/0xf0 [ 225.918527][ T6292] __x64_sys_mount+0xb1/0xc0 [ 225.923364][ T6292] do_syscall_64+0xcb/0x150 [ 225.927843][ T6292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.933704][ T6292] RIP: 0033:0x45d4d9 [ 225.937583][ T6292] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.957252][ T6292] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.965831][ T6292] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 225.973822][ T6292] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 225.981768][ T6292] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 225.989781][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 225.997734][ T6292] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 226.006336][ T6292] overlayfs: failed to resolve './file0': -12 [ 226.121280][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.132172][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.142525][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 226.151946][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.160491][ T3045] usb 5-1: config 0 descriptor?? [ 226.701239][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 226.707317][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 226.715452][ T3045] usb 5-1: USB disconnect, device number 70 10:14:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:10 executing program 3 (fault-call:10 fault-nth:28): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r0, 0x0) ftruncate(r0, 0x40) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x10008001) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x10, 0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x2dc8, 0x2, 0x0, 0x0) 10:14:10 executing program 5 (fault-call:13 fault-nth:29): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:10 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) dup3(r1, r0, 0x0) 10:14:10 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:10 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r1, 0x0) ftruncate(r1, 0x40) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)='#', 0x1}], 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xfffffffffffffffc, 0x3}) mlockall(0x7) [ 227.163212][ T6323] FAULT_INJECTION: forcing a failure. [ 227.163212][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 227.172259][ T6318] FAULT_INJECTION: forcing a failure. [ 227.172259][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 227.177904][ T6323] CPU: 0 PID: 6323 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 227.198457][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.208496][ T6323] Call Trace: [ 227.211773][ T6323] dump_stack+0x14a/0x1ce [ 227.216088][ T6323] ? devkmsg_release+0x11c/0x11c [ 227.221014][ T6323] ? show_regs_print_info+0x12/0x12 [ 227.226196][ T6323] should_fail+0x6fb/0x860 [ 227.230597][ T6323] ? setup_fault_attr+0x3d0/0x3d0 [ 227.235600][ T6323] ? getname_kernel+0x55/0x2f0 [ 227.240338][ T6323] should_failslab+0x5/0x20 [ 227.244821][ T6323] kmem_cache_alloc+0x36/0x260 [ 227.249580][ T6323] getname_kernel+0x55/0x2f0 [ 227.254157][ T6323] kern_path+0x19/0x40 [ 227.258234][ T6323] ovl_mount_dir_noesc+0x55/0x1a0 [ 227.263249][ T6323] ovl_mount_dir+0x18b/0x270 [ 227.267818][ T6323] ovl_fill_super+0x159f/0x4f30 [ 227.272778][ T6323] ? ovl_mount+0x30/0x30 [ 227.277016][ T6323] ? ida_alloc_range+0xa59/0xac0 [ 227.281930][ T6323] ? delete_node+0x761/0x7b0 [ 227.286517][ T6323] ? __radix_tree_replace+0x24d/0x2f0 [ 227.291865][ T6323] ? up_read+0x10/0x10 [ 227.295908][ T6323] ? sget+0x4cb/0x4e0 [ 227.299862][ T6323] ? free_anon_bdev+0x20/0x20 [ 227.304529][ T6323] ? ovl_mount+0x30/0x30 [ 227.308867][ T6323] mount_nodev+0x52/0xe0 [ 227.313087][ T6323] legacy_get_tree+0xde/0x170 [ 227.317750][ T6323] ? fuse_emit+0x7d0/0x7d0 [ 227.322161][ T6323] vfs_get_tree+0x85/0x260 [ 227.326658][ T6323] do_mount+0x1a15/0x28c0 [ 227.330981][ T6323] ? copy_mount_string+0x30/0x30 [ 227.335901][ T6323] ? page_fault+0x2f/0x40 [ 227.340206][ T6323] ? copy_mount_options+0x1e8/0x320 [ 227.345380][ T6323] ? copy_mount_options+0x293/0x320 [ 227.350735][ T6323] ksys_mount+0xc2/0xf0 [ 227.354868][ T6323] __x64_sys_mount+0xb1/0xc0 [ 227.359431][ T6323] do_syscall_64+0xcb/0x150 [ 227.363908][ T6323] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.372289][ T6323] RIP: 0033:0x45d4d9 [ 227.376157][ T6323] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.395824][ T6323] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.404209][ T6323] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 227.412414][ T6323] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 227.420359][ T6323] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 227.428307][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 227.436266][ T6323] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 227.444222][ T6318] CPU: 1 PID: 6318 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 227.445053][ T6323] overlayfs: failed to resolve './file0': -12 10:14:11 executing program 3 (fault-call:10 fault-nth:29): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 227.454275][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.454279][ T6318] Call Trace: [ 227.454296][ T6318] dump_stack+0x14a/0x1ce [ 227.454303][ T6318] ? devkmsg_release+0x11c/0x11c [ 227.454316][ T6318] ? show_regs_print_info+0x12/0x12 [ 227.488217][ T6318] should_fail+0x6fb/0x860 [ 227.492632][ T6318] ? setup_fault_attr+0x3d0/0x3d0 [ 227.497654][ T6318] ? getname_kernel+0x55/0x2f0 [ 227.497979][ T6340] FAULT_INJECTION: forcing a failure. [ 227.497979][ T6340] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 227.503025][ T6318] should_failslab+0x5/0x20 [ 227.503035][ T6318] kmem_cache_alloc+0x36/0x260 [ 227.503044][ T6318] getname_kernel+0x55/0x2f0 [ 227.503049][ T6318] kern_path+0x19/0x40 [ 227.503057][ T6318] ovl_mount_dir_noesc+0x55/0x1a0 [ 227.503069][ T6318] ovl_mount_dir+0x18b/0x270 [ 227.543675][ T6318] ovl_fill_super+0x159f/0x4f30 [ 227.548681][ T6318] ? ovl_mount+0x30/0x30 [ 227.552899][ T6318] ? ida_alloc_range+0xa59/0xac0 [ 227.557821][ T6318] ? delete_node+0x761/0x7b0 [ 227.562396][ T6318] ? __radix_tree_replace+0x24d/0x2f0 [ 227.567760][ T6318] ? up_read+0x10/0x10 [ 227.571826][ T6318] ? sget+0x4cb/0x4e0 [ 227.575780][ T6318] ? free_anon_bdev+0x20/0x20 [ 227.580435][ T6318] ? ovl_mount+0x30/0x30 [ 227.584648][ T6318] mount_nodev+0x52/0xe0 [ 227.588867][ T6318] legacy_get_tree+0xde/0x170 [ 227.593514][ T6318] ? fuse_emit+0x7d0/0x7d0 [ 227.597900][ T6318] vfs_get_tree+0x85/0x260 [ 227.602304][ T6318] do_mount+0x1a15/0x28c0 [ 227.606608][ T6318] ? copy_mount_string+0x30/0x30 [ 227.611610][ T6318] ? page_fault+0x2f/0x40 [ 227.615910][ T6318] ? copy_mount_options+0x1e8/0x320 [ 227.621081][ T6318] ? copy_mount_options+0x293/0x320 [ 227.626263][ T6318] ksys_mount+0xc2/0xf0 [ 227.630406][ T6318] __x64_sys_mount+0xb1/0xc0 [ 227.634975][ T6318] do_syscall_64+0xcb/0x150 [ 227.639449][ T6318] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.645329][ T6318] RIP: 0033:0x45d4d9 [ 227.649222][ T6318] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.668970][ T6318] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 227.677361][ T6318] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 227.685308][ T6318] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 227.693253][ T6318] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 227.701199][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d 10:14:11 executing program 5 (fault-call:13 fault-nth:30): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 227.709144][ T6318] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 227.717358][ T6340] CPU: 0 PID: 6340 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 227.722121][ T6318] overlayfs: failed to resolve './file0': -12 [ 227.727410][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.727414][ T6340] Call Trace: [ 227.727428][ T6340] dump_stack+0x14a/0x1ce [ 227.727442][ T6340] ? devkmsg_release+0x11c/0x11c [ 227.756028][ T6340] ? show_regs_print_info+0x12/0x12 [ 227.761231][ T6340] ? unwind_get_return_address+0x48/0x90 [ 227.766861][ T6340] ? arch_stack_walk+0xd8/0x120 [ 227.767867][ T6345] FAULT_INJECTION: forcing a failure. [ 227.767867][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 227.771714][ T6340] should_fail+0x6fb/0x860 [ 227.771722][ T6340] ? setup_fault_attr+0x3d0/0x3d0 [ 227.771730][ T6340] ? stack_trace_save+0x123/0x1f0 [ 227.771739][ T6340] __alloc_pages_nodemask+0x1ee/0x7c0 [ 227.771747][ T6340] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 227.771760][ T6340] ? mount_nodev+0x52/0xe0 [ 227.817759][ T6340] ? legacy_get_tree+0xde/0x170 [ 227.822586][ T6340] ? vfs_get_tree+0x85/0x260 [ 227.827170][ T6340] ? do_mount+0x1a15/0x28c0 [ 227.831656][ T6340] ? ksys_mount+0xc2/0xf0 [ 227.835958][ T6340] ? __x64_sys_mount+0xb1/0xc0 [ 227.840695][ T6340] ? do_syscall_64+0xcb/0x150 [ 227.845348][ T6340] alloc_slab_page+0x3a/0x3a0 [ 227.850029][ T6340] new_slab+0x97/0x450 [ 227.854185][ T6340] ? should_fail+0x182/0x860 [ 227.858788][ T6340] ___slab_alloc+0x2e0/0x450 [ 227.863370][ T6340] ? getname_kernel+0x55/0x2f0 [ 227.868137][ T6340] ? getname_kernel+0x55/0x2f0 [ 227.872875][ T6340] kmem_cache_alloc+0x23f/0x260 [ 227.877721][ T6340] getname_kernel+0x55/0x2f0 [ 227.882310][ T6340] kern_path+0x19/0x40 [ 227.886354][ T6340] ovl_mount_dir_noesc+0x55/0x1a0 [ 227.891353][ T6340] ovl_mount_dir+0x18b/0x270 [ 227.895919][ T6340] ovl_fill_super+0x159f/0x4f30 [ 227.900747][ T6340] ? ovl_mount+0x30/0x30 [ 227.904975][ T6340] ? ida_alloc_range+0xa59/0xac0 [ 227.909905][ T6340] ? delete_node+0x761/0x7b0 [ 227.914482][ T6340] ? __radix_tree_replace+0x24d/0x2f0 [ 227.920003][ T6340] ? up_read+0x10/0x10 [ 227.924048][ T6340] ? sget+0x4cb/0x4e0 [ 227.928022][ T6340] ? free_anon_bdev+0x20/0x20 [ 227.932680][ T6340] ? ovl_mount+0x30/0x30 [ 227.936895][ T6340] mount_nodev+0x52/0xe0 [ 227.941113][ T6340] legacy_get_tree+0xde/0x170 [ 227.945780][ T6340] ? fuse_emit+0x7d0/0x7d0 [ 227.950169][ T6340] vfs_get_tree+0x85/0x260 [ 227.954579][ T6340] do_mount+0x1a15/0x28c0 [ 227.958901][ T6340] ? copy_mount_string+0x30/0x30 [ 227.963813][ T6340] ? page_fault+0x2f/0x40 [ 227.968119][ T6340] ? copy_mount_options+0x1e8/0x320 [ 227.973291][ T6340] ? copy_mount_options+0x293/0x320 [ 227.978481][ T6340] ksys_mount+0xc2/0xf0 [ 227.982612][ T6340] __x64_sys_mount+0xb1/0xc0 [ 227.987183][ T6340] do_syscall_64+0xcb/0x150 [ 227.991679][ T6340] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.997546][ T6340] RIP: 0033:0x45d4d9 [ 228.001450][ T6340] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.021028][ T6340] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.029410][ T6340] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 228.037359][ T6340] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 228.045312][ T6340] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 228.053261][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d 10:14:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000740)=0x3) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$FIOCLEX(r2, 0x5451) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="be38", 0x2}, {&(0x7f0000000000)="46a3200cf4f4a185ec1a298f4bb80a7c6bffc21b1d44f9c15eb8e52b37977dd3785a664517e6ee83ebb319cdc0998fb4a3269ce4aaf3", 0x36}, {&(0x7f0000000040)="09e921c6798c7a486ca0b197cd0440e779feef45cefde495bf4cdf8e2330f39ef6867599aa090d1d7d47387f0da90016650c6da7f269f12ced13ae0ee305a2b081ac233af4475fd3af7003040973e981549737e831b1f2c2133cb66ce02c6e4729fd67d11f5b53b627ebda48d4638b809c940a29b2d015ba1fa86b6211820cafeb3b9eff2408f1047d1590b16d20f935840e3d0bc0e7df8d742e", 0x9a}, {&(0x7f0000000240)="3919408f6207cf62f5e5b9210334c809969db2bc600736767aa7b49f1105d6bea1bdf5631df35deb3b9955b3273d5830897d1f86ed10ff5d319b0d7b7ba15b25f8d5e8c4efa14ae33b72893d0f7ea82dc9429f72edc7dcf1d85b1528e8c5d771435ac0f2344c2c28beb4b90560040d170fb534a7ca86f66a9036f83a7f2741b22227355990c5917578239a2c036edb67f3533b14f661787f6c00b68184c34adf658fa2ed41b0a40d12ba4e2a6e85566d2c1946782cc102699f418796d455a96e040f940dcebbf48a7fab2c6f823e13f2fbeb2bbf18c0242da9ee3fb537822ceffc584449711e8fdc244cbb073d33df3a45fe706dd155d5792f2ea3f1775cbfd44ebb5927218fa6b31b26c69bd7538fc9aa9472a506d8bdf47cd1ce8c456e6e6f053977b6370005266021ce815d2245dcdfc2169260cb4f5d2cb55608adc5ada7b802c449ee7a778331fd5ee1af954ada151393d3e510c26c0234c90abf40a0cd0fd5d09bb5ad04845794dda3cefe50e33996bd4c75ea215260924dea623ee50ee0d8da4dfeefbfc7a0d6da1847731be3370e415fe8db7e9cf1e3225c4821b2d529510b213f2df8f652e45b1dc79baa39625143bcbb014a34c1b5e0ea0f1878774dc623309af33a8fe4e8ae28476c23adafec8992fd1489f26e146a784f116243e599e2b235b16a2d3ac66b87edb68fd5ef13be51b61910f9cd5039ceb54b17e5dcf5801c900c491cd803dd14f57c6633bdd010f05e0ac058a6dd3903524334bb38f2be6f0dd7f8194732f9b9678e43d2fa86d60cc060b3d53b1b4076edbf34c8e98fae513060f0584e30336b985e32cea0ed87d387fa3a5f62be728ceaa39183f356a2f5dab473b751bc55cc3e874a376ac19131a2eb237e2b0b34efa9a4bcf2a12efadb40d3d55cecb5457527bb6f6f8cff5fc75dfd4df062ad5156baa39814b820d3300132beb90e7b2131dbf14e7c18c8c4f8e81c1ed152670c43e29f0ced9323437708e72909e87bbb41ef1c30882c826eedb6905dcbc5dd232d4f891e45d4e54519588f89011509416ee72a78559621aed813ad30d72ef148f04b3896f5659200ff025b2623b31c7ba7530bb943fe226eadde9376e95e5f99b16a9eeb6b4252dddeab53944004d24dbb4265352fa664b1d62f3104a10787e8303c947d3f2b3fcf482a503dd722f6227da9ccfa79c659fc80a706d92086f222aac858328089f915a9622ead5585285a4adf796d3b1766fca8ce98a8ef891f489b3badf65070e277c932a71184a0f98d9211ee819bb5b8c15ba68f30011242bef33ad562277251494d41d5817feec08e00eb047dae274bf3b941c39ec1eed885e1727bbe5e52e96379a6eda076662f0bda42338346845070b962293a899b36651e7fd52b106006cf6cdd7557fda1a0f56aa16b6c555416442ef5d72b7ae538668a8f9a00a2a7a143ee050ba482bb890e108bf571f846a94ebb004c90e8d994078ac0cc83060a215308a019225bd20c88e11d8d4b9a57cbe4dbf3354603556e4b9ccca4a81bc98816e7879a5e3f68730fd6e7cb696d52e99086613b4a0b285bc5d7c9c0b1d76f46768d8cf023b223630617262e8bf05199e973b323865433bf2cac8d1435a52dd6d50980c6b2f02282d9b02a7e80f1d646ee382ae57d4d9fe06f7a5246b66b2a6309f2bb96e87f3245ae57516da30215fa24d0487b35e33d614d78a47c887105c941cd6eb57aef7d44a4c468bcb3291fe31a0665c96ccb819b1eb47ffe2624757f2b", 0x4e3}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1e000100000000260000000000000000000000070000004410fc00000000000000000000000000940400000000000021f285d65963a6e92ea2364586fed4be4c7f2b684d9b44f440b7f3469a87b97480c1ad9d2e3688b292869ee6e45a74c3fc45125eee48ca2bc24a8d00605c7fad509c1aa3bcbfc40eae80f0f4854caa354f79267e2136f6c7a6"], 0x48}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZGET(r6, 0x80081270, &(0x7f00000001c0)) [ 228.061213][ T6340] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 228.076770][ T6345] CPU: 1 PID: 6345 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 228.086860][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.086938][ T6340] ovl_get_fh: 1 callbacks suppressed 10:14:11 executing program 3 (fault-call:10 fault-nth:30): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 228.086946][ T6340] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 228.096898][ T6345] Call Trace: [ 228.096913][ T6345] dump_stack+0x14a/0x1ce [ 228.096922][ T6345] ? devkmsg_release+0x11c/0x11c [ 228.096929][ T6345] ? show_regs_print_info+0x12/0x12 [ 228.096937][ T6345] should_fail+0x6fb/0x860 [ 228.096944][ T6345] ? setup_fault_attr+0x3d0/0x3d0 [ 228.096954][ T6345] ? security_inode_alloc+0x32/0x1f0 [ 228.096960][ T6345] should_failslab+0x5/0x20 [ 228.096973][ T6345] kmem_cache_alloc+0x36/0x260 [ 228.160545][ T6345] ? from_kuid_munged+0x3b0/0x3b0 [ 228.165549][ T6345] security_inode_alloc+0x32/0x1f0 [ 228.170649][ T6345] inode_init_always+0x37c/0x800 [ 228.175580][ T6345] ? ovl_lookup_inode+0x120/0x120 [ 228.180591][ T6345] iget5_locked+0xb9/0x3e0 [ 228.184989][ T6345] ? ovl_get_trap_inode+0x190/0x190 [ 228.190171][ T6345] ovl_get_trap_inode+0x88/0x190 [ 228.195102][ T6345] ovl_fill_super+0x3239/0x4f30 [ 228.199947][ T6345] ? ovl_mount+0x30/0x30 [ 228.204180][ T6345] ? ida_alloc_range+0xa59/0xac0 [ 228.209123][ T6345] ? delete_node+0x761/0x7b0 [ 228.213691][ T6345] ? __radix_tree_replace+0x24d/0x2f0 [ 228.219037][ T6345] ? up_read+0x10/0x10 [ 228.223088][ T6345] ? sget+0x4cb/0x4e0 [ 228.227044][ T6345] ? free_anon_bdev+0x20/0x20 [ 228.231707][ T6345] ? ovl_mount+0x30/0x30 [ 228.235937][ T6345] mount_nodev+0x52/0xe0 [ 228.240151][ T6345] legacy_get_tree+0xde/0x170 [ 228.244799][ T6345] ? fuse_emit+0x7d0/0x7d0 [ 228.249203][ T6345] vfs_get_tree+0x85/0x260 [ 228.253593][ T6345] do_mount+0x1a15/0x28c0 [ 228.257893][ T6345] ? copy_mount_string+0x30/0x30 [ 228.262823][ T6345] ? page_fault+0x2f/0x40 [ 228.267124][ T6345] ? copy_mount_options+0x1e8/0x320 [ 228.272435][ T6345] ? copy_mount_options+0x293/0x320 [ 228.277660][ T6345] ksys_mount+0xc2/0xf0 [ 228.281806][ T6345] __x64_sys_mount+0xb1/0xc0 [ 228.286445][ T6345] do_syscall_64+0xcb/0x150 [ 228.291414][ T6345] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 228.297285][ T6345] RIP: 0033:0x45d4d9 [ 228.301153][ T6345] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.320822][ T6345] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.329239][ T6345] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 228.337201][ T6345] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 228.345146][ T6345] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 228.353091][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e 10:14:12 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)=0x0) setpriority(0x0, r7, 0x80) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 228.361069][ T6345] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 228.373951][ T3045] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 228.418728][ T6359] FAULT_INJECTION: forcing a failure. [ 228.418728][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 228.431593][ T6359] CPU: 1 PID: 6359 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 228.441829][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.451881][ T6359] Call Trace: [ 228.455171][ T6359] dump_stack+0x14a/0x1ce [ 228.459489][ T6359] ? devkmsg_release+0x11c/0x11c [ 228.464400][ T6359] ? show_regs_print_info+0x12/0x12 [ 228.469567][ T6359] ? find_inode+0x40d/0x4c0 [ 228.474039][ T6359] should_fail+0x6fb/0x860 [ 228.478428][ T6359] ? setup_fault_attr+0x3d0/0x3d0 [ 228.483422][ T6359] ? _raw_spin_lock+0xa1/0x170 [ 228.488159][ T6359] ? _raw_spin_trylock_bh+0x190/0x190 [ 228.493524][ T6359] ? ovl_lookup_inode+0x120/0x120 [ 228.498539][ T6359] ? ovl_alloc_inode+0x1b/0x90 [ 228.503417][ T6359] should_failslab+0x5/0x20 [ 228.507909][ T6359] kmem_cache_alloc+0x36/0x260 [ 228.512650][ T6359] ? ovl_free_fs+0x640/0x640 [ 228.517216][ T6359] ? ovl_lookup_inode+0x120/0x120 [ 228.522231][ T6359] ovl_alloc_inode+0x1b/0x90 [ 228.527143][ T6359] ? ovl_free_fs+0x640/0x640 [ 228.531707][ T6359] iget5_locked+0xa2/0x3e0 [ 228.536096][ T6359] ? ovl_get_trap_inode+0x190/0x190 [ 228.541283][ T6359] ovl_get_trap_inode+0x88/0x190 [ 228.546194][ T6359] ovl_fill_super+0x3239/0x4f30 [ 228.551018][ T6359] ? ovl_mount+0x30/0x30 [ 228.555249][ T6359] ? ida_alloc_range+0xa59/0xac0 [ 228.560165][ T6359] ? delete_node+0x761/0x7b0 [ 228.564736][ T6359] ? __radix_tree_replace+0x24d/0x2f0 [ 228.570081][ T6359] ? up_read+0x10/0x10 [ 228.574122][ T6359] ? sget+0x4cb/0x4e0 [ 228.578108][ T6359] ? free_anon_bdev+0x20/0x20 [ 228.582761][ T6359] ? ovl_mount+0x30/0x30 [ 228.586975][ T6359] mount_nodev+0x52/0xe0 [ 228.591189][ T6359] legacy_get_tree+0xde/0x170 [ 228.595835][ T6359] ? fuse_emit+0x7d0/0x7d0 [ 228.600219][ T6359] vfs_get_tree+0x85/0x260 [ 228.604610][ T6359] do_mount+0x1a15/0x28c0 [ 228.608921][ T6359] ? copy_mount_string+0x30/0x30 [ 228.613830][ T6359] ? page_fault+0x2f/0x40 [ 228.618218][ T6359] ? copy_mount_options+0x1e8/0x320 [ 228.623389][ T6359] ? copy_mount_options+0x293/0x320 [ 228.628561][ T6359] ksys_mount+0xc2/0xf0 [ 228.632703][ T6359] __x64_sys_mount+0xb1/0xc0 [ 228.637527][ T6359] do_syscall_64+0xcb/0x150 [ 228.642207][ T6359] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 228.648080][ T6359] RIP: 0033:0x45d4d9 [ 228.651956][ T6359] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.671540][ T6359] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.680055][ T6359] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 228.688005][ T6359] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 228.695949][ T6359] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 228.703895][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 228.711843][ T6359] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 228.990935][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.001916][ T3045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.013243][ T3045] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 229.022627][ T3045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.031825][ T3045] usb 5-1: config 0 descriptor?? [ 229.370898][ T3045] usbhid 5-1:0.0: can't add hid device: -71 [ 229.376894][ T3045] usbhid: probe of 5-1:0.0 failed with error -71 [ 229.384849][ T3045] usb 5-1: USB disconnect, device number 71 10:14:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:13 executing program 5 (fault-call:13 fault-nth:31): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:13 executing program 2: r0 = epoll_create1(0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r5, r6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'veth0_to_bridge\x00', &(0x7f0000000300)=@ethtool_ts_info}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) write$eventfd(r8, &(0x7f0000000380)=0xd531, 0x8) keyctl$restrict_keyring(0xa, r9, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000100)='iD<1:\x84\x8eG\xaa\xe7\xcfGk\x92\x83l\x9c6\xef{c\x94\xc8\xadZ\bpz\x1c\xc3\a\x13<\x1b\xa7\xbb,\r\x96\xbd+\xda,\xd8\x92\xd4\xf1\xd6d\xf0\x8d\xfb{\xe3\xc3\xcd09\xc3\x8f\x8fu\xb3\x03\x00]})\xb0\xc7R\xc5\xbc\'\xa1\xe2l') request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='-\x00', r9) 10:14:13 executing program 3 (fault-call:10 fault-nth:31): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:13 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726f6f74636f6e706578743d7523693925004695a86f6e746578743dff597361646d5f752c00000000000000230fdd96007e1ca49457368748"]) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40100, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r6, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@empty, 0x76, r6}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0xffff, 0x2}, @timestamp, @window={0x3, 0x3ff, 0xe8}], 0x4) r9 = socket$pptp(0x18, 0x1, 0x2) getpeername(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) [ 229.987984][ T6375] FAULT_INJECTION: forcing a failure. [ 229.987984][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 229.999223][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 230.008661][ T6375] CPU: 1 PID: 6375 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 230.013846][ T6382] FAULT_INJECTION: forcing a failure. [ 230.013846][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 230.018766][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.041372][ T6375] Call Trace: [ 230.044662][ T6375] dump_stack+0x14a/0x1ce [ 230.048985][ T6375] ? devkmsg_release+0x11c/0x11c [ 230.053906][ T6375] ? show_regs_print_info+0x12/0x12 [ 230.059084][ T6375] should_fail+0x6fb/0x860 [ 230.063485][ T6375] ? setup_fault_attr+0x3d0/0x3d0 [ 230.068486][ T6375] ? security_inode_alloc+0x32/0x1f0 [ 230.073760][ T6375] should_failslab+0x5/0x20 [ 230.078255][ T6375] kmem_cache_alloc+0x36/0x260 [ 230.085343][ T6375] ? from_kuid_munged+0x3b0/0x3b0 [ 230.090356][ T6375] security_inode_alloc+0x32/0x1f0 [ 230.095446][ T6375] inode_init_always+0x37c/0x800 [ 230.100404][ T6375] ? ovl_lookup_inode+0x120/0x120 [ 230.105429][ T6375] iget5_locked+0xb9/0x3e0 [ 230.109847][ T6375] ? ovl_get_trap_inode+0x190/0x190 [ 230.115037][ T6375] ovl_get_trap_inode+0x88/0x190 [ 230.119956][ T6375] ovl_fill_super+0x3239/0x4f30 [ 230.124962][ T6375] ? ovl_mount+0x30/0x30 [ 230.129182][ T6375] ? ida_alloc_range+0xa59/0xac0 [ 230.134095][ T6375] ? delete_node+0x761/0x7b0 [ 230.138662][ T6375] ? __radix_tree_replace+0x24d/0x2f0 [ 230.144012][ T6375] ? up_read+0x10/0x10 [ 230.148173][ T6375] ? sget+0x4cb/0x4e0 [ 230.152130][ T6375] ? free_anon_bdev+0x20/0x20 [ 230.156806][ T6375] ? ovl_mount+0x30/0x30 [ 230.161023][ T6375] mount_nodev+0x52/0xe0 [ 230.165267][ T6375] legacy_get_tree+0xde/0x170 [ 230.169919][ T6375] ? fuse_emit+0x7d0/0x7d0 [ 230.174309][ T6375] vfs_get_tree+0x85/0x260 [ 230.178700][ T6375] do_mount+0x1a15/0x28c0 [ 230.183010][ T6375] ? copy_mount_string+0x30/0x30 [ 230.187936][ T6375] ? page_fault+0x2f/0x40 [ 230.192238][ T6375] ? copy_mount_options+0x1e8/0x320 [ 230.197410][ T6375] ? copy_mount_options+0x293/0x320 [ 230.202582][ T6375] ksys_mount+0xc2/0xf0 [ 230.206712][ T6375] __x64_sys_mount+0xb1/0xc0 [ 230.211279][ T6375] do_syscall_64+0xcb/0x150 [ 230.215757][ T6375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 230.221622][ T6375] RIP: 0033:0x45d4d9 [ 230.225512][ T6375] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.245089][ T6375] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.253473][ T6375] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 230.261422][ T6375] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 230.269803][ T6375] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 230.277769][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f 10:14:13 executing program 5 (fault-call:13 fault-nth:32): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 230.285754][ T6375] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 230.293730][ T6382] CPU: 0 PID: 6382 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 230.303793][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.313846][ T6382] Call Trace: [ 230.317143][ T6382] dump_stack+0x14a/0x1ce [ 230.321493][ T6382] ? devkmsg_release+0x11c/0x11c [ 230.326431][ T6382] ? show_regs_print_info+0x12/0x12 [ 230.331978][ T6385] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 230.332231][ T6382] ? memset+0x1f/0x40 [ 230.332244][ T6382] should_fail+0x6fb/0x860 [ 230.339935][ T6385] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 230.343885][ T6382] ? setup_fault_attr+0x3d0/0x3d0 [ 230.343894][ T6382] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 230.343902][ T6382] ? __rcu_read_lock+0x50/0x50 [ 230.343911][ T6382] ? unwind_get_return_address_ptr+0x130/0x130 [ 230.343923][ T6382] ? __d_alloc+0x2a/0x6b0 [ 230.351592][ T6385] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 230.356479][ T6382] should_failslab+0x5/0x20 [ 230.356489][ T6382] kmem_cache_alloc+0x36/0x260 [ 230.356508][ T6382] __d_alloc+0x2a/0x6b0 [ 230.369842][ T6385] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 230.372340][ T6382] d_alloc_parallel+0xf3/0x1440 [ 230.372349][ T6382] ? avc_has_perm_noaudit+0x37d/0x400 [ 230.372356][ T6382] ? avc_has_perm_noaudit+0x30c/0x400 [ 230.372364][ T6382] ? avc_denied+0x1c0/0x1c0 [ 230.372377][ T6382] ? d_hash_and_lookup+0x1e0/0x1e0 [ 230.386105][ T6400] FAULT_INJECTION: forcing a failure. [ 230.386105][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 230.390522][ T6382] ? stack_trace_snprint+0x150/0x150 [ 230.390532][ T6382] ? selinux_inode_permission+0x389/0x6c0 [ 230.390545][ T6382] ? selinux_inode_permission+0x464/0x6c0 [ 230.466309][ T6382] ? __rcu_read_lock+0x50/0x50 [ 230.471048][ T6382] __lookup_slow+0x169/0x490 [ 230.475610][ T6382] ? lookup_one_len2+0x2d0/0x2d0 [ 230.480540][ T6382] lookup_one_len2+0x18b/0x2d0 [ 230.485278][ T6382] ? lookup_one_len_common+0x460/0x460 [ 230.490711][ T6382] ovl_workdir_create+0x144/0x590 [ 230.495711][ T6382] ? wake_up_bit+0x9a/0x1c0 [ 230.500192][ T6382] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 230.505448][ T6382] ? __wake_up_bit+0x180/0x180 [ 230.510183][ T6382] ? _raw_spin_lock+0xa1/0x170 [ 230.514920][ T6382] ? ovl_get_trap_inode+0x190/0x190 [ 230.520089][ T6382] ? __sb_start_write+0xa5/0x150 [ 230.525006][ T6382] ovl_fill_super+0x3a0d/0x4f30 [ 230.529833][ T6382] ? apic_timer_interrupt+0xa/0x20 [ 230.534916][ T6382] ? ovl_mount+0x30/0x30 [ 230.539131][ T6382] ? __radix_tree_lookup+0xb2/0x250 [ 230.544303][ T6382] ? delete_node+0x761/0x7b0 [ 230.548866][ T6382] ? __radix_tree_replace+0x24d/0x2f0 [ 230.554218][ T6382] ? up_read+0x10/0x10 [ 230.558260][ T6382] ? sget+0x4cb/0x4e0 [ 230.562213][ T6382] ? free_anon_bdev+0x20/0x20 [ 230.566858][ T6382] ? ovl_mount+0x30/0x30 [ 230.571077][ T6382] mount_nodev+0x52/0xe0 [ 230.575293][ T6382] legacy_get_tree+0xde/0x170 [ 230.579939][ T6382] ? fuse_emit+0x7d0/0x7d0 [ 230.584328][ T6382] vfs_get_tree+0x85/0x260 [ 230.588718][ T6382] do_mount+0x1a15/0x28c0 [ 230.593022][ T6382] ? copy_mount_string+0x30/0x30 [ 230.597932][ T6382] ? page_fault+0x2f/0x40 [ 230.602239][ T6382] ? copy_mount_options+0x1e8/0x320 [ 230.607408][ T6382] ? copy_mount_options+0x293/0x320 [ 230.612577][ T6382] ksys_mount+0xc2/0xf0 [ 230.616724][ T6382] __x64_sys_mount+0xb1/0xc0 [ 230.621286][ T6382] do_syscall_64+0xcb/0x150 [ 230.625762][ T6382] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 230.631625][ T6382] RIP: 0033:0x45d4d9 [ 230.635494][ T6382] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.655072][ T6382] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.663455][ T6382] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 230.671401][ T6382] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 230.679346][ T6382] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 230.687292][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 230.695240][ T6382] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 230.703203][ T6400] CPU: 1 PID: 6400 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 230.713263][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.714164][ T6382] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 230.723486][ T6400] Call Trace: [ 230.723506][ T6400] dump_stack+0x14a/0x1ce 10:14:14 executing program 3 (fault-call:10 fault-nth:32): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 230.723515][ T6400] ? devkmsg_release+0x11c/0x11c [ 230.723523][ T6400] ? show_regs_print_info+0x12/0x12 [ 230.723531][ T6400] ? __find_get_block+0xe0e/0x1070 [ 230.723539][ T6400] should_fail+0x6fb/0x860 [ 230.723545][ T6400] ? setup_fault_attr+0x3d0/0x3d0 [ 230.723553][ T6400] ? ebitmap_cmp+0x1c8/0x230 [ 230.723560][ T6400] ? mls_compute_context_len+0x81b/0x850 [ 230.723566][ T6400] ? context_struct_to_string+0x3e4/0x820 [ 230.723573][ T6400] should_failslab+0x5/0x20 [ 230.723581][ T6400] __kmalloc+0x5f/0x2d0 [ 230.723589][ T6400] context_struct_to_string+0x3e4/0x820 [ 230.723604][ T6400] ? security_bounded_transition+0x560/0x560 [ 230.801521][ T6400] ? ebitmap_contains+0x6d8/0x780 [ 230.806533][ T6400] ? hashtab_search+0x1bf/0x200 [ 230.811373][ T6400] context_add_hash+0x145/0x280 [ 230.816221][ T6400] ? security_sid_to_context_inval+0x40/0x40 [ 230.822184][ T6400] ? mls_context_isvalid+0x98/0x380 [ 230.827384][ T6400] ? policydb_context_isvalid+0x1b6/0x400 [ 230.833101][ T6400] security_compute_sid+0x11da/0x1d50 [ 230.838483][ T6400] ? security_transition_sid+0x90/0x90 [ 230.843941][ T6400] ? avc_denied+0x1c0/0x1c0 [ 230.848450][ T6400] ? avc_has_perm_noaudit+0x30c/0x400 [ 230.853822][ T6400] ? avc_has_perm_noaudit+0x400/0x400 [ 230.859190][ T6400] security_transition_sid+0x78/0x90 [ 230.864468][ T6400] may_create+0x64e/0x9a0 [ 230.868784][ T6400] ? show_sid+0x250/0x250 [ 230.873114][ T6400] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 230.878907][ T6400] ? generic_permission+0x190/0x4a0 [ 230.884094][ T6400] security_inode_mkdir+0xa6/0x130 [ 230.889215][ T6400] vfs_mkdir2+0x35b/0x620 [ 230.893538][ T6400] ovl_create_real+0x148/0x330 [ 230.898287][ T6400] ovl_workdir_create+0x3df/0x590 [ 230.904170][ T6400] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 230.909452][ T6400] ? __sb_start_write+0xa5/0x150 [ 230.914387][ T6400] ovl_fill_super+0x3a0d/0x4f30 [ 230.919231][ T6400] ? ovl_mount+0x30/0x30 [ 230.923460][ T6400] ? ida_alloc_range+0xa59/0xac0 [ 230.928382][ T6400] ? delete_node+0x761/0x7b0 [ 230.932959][ T6400] ? __radix_tree_replace+0x24d/0x2f0 [ 230.938325][ T6400] ? up_read+0x10/0x10 [ 230.942389][ T6400] ? sget+0x4cb/0x4e0 [ 230.946356][ T6400] ? free_anon_bdev+0x20/0x20 [ 230.951022][ T6400] ? ovl_mount+0x30/0x30 [ 230.955252][ T6400] mount_nodev+0x52/0xe0 [ 230.959744][ T6400] legacy_get_tree+0xde/0x170 [ 230.964452][ T6400] ? fuse_emit+0x7d0/0x7d0 [ 230.968859][ T6400] vfs_get_tree+0x85/0x260 [ 230.973267][ T6400] do_mount+0x1a15/0x28c0 [ 230.977588][ T6400] ? copy_mount_string+0x30/0x30 [ 230.982509][ T6400] ? page_fault+0x2f/0x40 [ 230.986824][ T6400] ? copy_mount_options+0x1e8/0x320 [ 230.992008][ T6400] ? copy_mount_options+0x293/0x320 [ 230.997198][ T6400] ksys_mount+0xc2/0xf0 [ 231.001341][ T6400] __x64_sys_mount+0xb1/0xc0 [ 231.005922][ T6400] do_syscall_64+0xcb/0x150 [ 231.010413][ T6400] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 231.016292][ T6400] RIP: 0033:0x45d4d9 [ 231.020171][ T6400] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.039764][ T6400] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.048306][ T6400] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 231.057316][ T6400] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 231.065280][ T6400] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 231.073248][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 231.081212][ T6400] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c 10:14:14 executing program 5 (fault-call:13 fault-nth:33): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 231.100400][ T6400] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only 10:14:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0), 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$int_out(r5, 0x4, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 231.144708][ T6383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 231.167515][ T6421] FAULT_INJECTION: forcing a failure. [ 231.167515][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 231.182996][ T6418] FAULT_INJECTION: forcing a failure. [ 231.182996][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 231.195754][ T6418] CPU: 1 PID: 6418 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 231.205807][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.215868][ T6418] Call Trace: [ 231.219157][ T6418] dump_stack+0x14a/0x1ce [ 231.223484][ T6418] ? devkmsg_release+0x11c/0x11c [ 231.228511][ T6418] ? show_regs_print_info+0x12/0x12 [ 231.233796][ T6418] ? __find_get_block+0xe0e/0x1070 [ 231.238906][ T6418] should_fail+0x6fb/0x860 [ 231.243329][ T6418] ? setup_fault_attr+0x3d0/0x3d0 [ 231.248359][ T6418] ? ebitmap_cmp+0x1c8/0x230 [ 231.252959][ T6418] ? mls_compute_context_len+0x81b/0x850 [ 231.258586][ T6418] ? context_struct_to_string+0x3e4/0x820 [ 231.264302][ T6418] should_failslab+0x5/0x20 [ 231.268802][ T6418] __kmalloc+0x5f/0x2d0 [ 231.272982][ T6418] context_struct_to_string+0x3e4/0x820 [ 231.278528][ T6418] ? security_bounded_transition+0x560/0x560 [ 231.284503][ T6418] ? ebitmap_contains+0x6d8/0x780 [ 231.289530][ T6418] ? hashtab_search+0x1bf/0x200 10:14:14 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) [ 231.294378][ T6418] context_add_hash+0x145/0x280 [ 231.299224][ T6418] ? security_sid_to_context_inval+0x40/0x40 [ 231.305200][ T6418] ? mls_context_isvalid+0x98/0x380 [ 231.310483][ T6418] ? policydb_context_isvalid+0x1b6/0x400 [ 231.316300][ T6418] security_compute_sid+0x11da/0x1d50 [ 231.321676][ T6418] ? security_transition_sid+0x90/0x90 [ 231.327133][ T6418] ? avc_denied+0x1c0/0x1c0 [ 231.331639][ T6418] ? avc_has_perm_noaudit+0x30c/0x400 [ 231.337015][ T6418] ? avc_has_perm_noaudit+0x400/0x400 [ 231.342379][ T6418] security_transition_sid+0x78/0x90 [ 231.347665][ T6418] may_create+0x64e/0x9a0 [ 231.351991][ T6418] ? show_sid+0x250/0x250 [ 231.356315][ T6418] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 231.362110][ T6418] ? generic_permission+0x190/0x4a0 [ 231.367295][ T6418] security_inode_mkdir+0xa6/0x130 [ 231.372647][ T6418] vfs_mkdir2+0x35b/0x620 [ 231.376955][ T6418] ovl_create_real+0x148/0x330 [ 231.381717][ T6418] ovl_workdir_create+0x3df/0x590 [ 231.386742][ T6418] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 231.392014][ T6418] ? __sb_start_write+0xa5/0x150 [ 231.396934][ T6418] ovl_fill_super+0x3a0d/0x4f30 [ 231.401771][ T6418] ? ovl_mount+0x30/0x30 [ 231.405994][ T6418] ? ida_alloc_range+0xa59/0xac0 [ 231.410939][ T6418] ? delete_node+0x761/0x7b0 [ 231.415528][ T6418] ? __radix_tree_replace+0x24d/0x2f0 [ 231.420944][ T6418] ? up_read+0x10/0x10 [ 231.424993][ T6418] ? sget+0x4cb/0x4e0 [ 231.428963][ T6418] ? free_anon_bdev+0x20/0x20 [ 231.433621][ T6418] ? ovl_mount+0x30/0x30 [ 231.437841][ T6418] mount_nodev+0x52/0xe0 [ 231.442066][ T6418] legacy_get_tree+0xde/0x170 [ 231.446723][ T6418] ? fuse_emit+0x7d0/0x7d0 [ 231.451117][ T6418] vfs_get_tree+0x85/0x260 [ 231.455514][ T6418] do_mount+0x1a15/0x28c0 [ 231.459823][ T6418] ? copy_mount_string+0x30/0x30 [ 231.464743][ T6418] ? page_fault+0x2f/0x40 [ 231.469060][ T6418] ? copy_mount_options+0x1e8/0x320 [ 231.474236][ T6418] ? copy_mount_options+0x293/0x320 [ 231.479505][ T6418] ksys_mount+0xc2/0xf0 [ 231.483650][ T6418] __x64_sys_mount+0xb1/0xc0 [ 231.488236][ T6418] do_syscall_64+0xcb/0x150 [ 231.492731][ T6418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 231.498614][ T6418] RIP: 0033:0x45d4d9 [ 231.502509][ T6418] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.523074][ T6418] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.531469][ T6418] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 231.539423][ T6418] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 231.547376][ T6418] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 231.555328][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 231.563287][ T6418] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 231.572257][ T6421] CPU: 0 PID: 6421 Comm: syz-executor.5 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 231.577957][ T3050] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 231.582330][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.582333][ T6421] Call Trace: [ 231.582348][ T6421] dump_stack+0x14a/0x1ce [ 231.582356][ T6421] ? devkmsg_release+0x11c/0x11c [ 231.582368][ T6421] ? show_regs_print_info+0x12/0x12 [ 231.597423][ T6418] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 231.599931][ T6421] should_fail+0x6fb/0x860 [ 231.599943][ T6421] ? setup_fault_attr+0x3d0/0x3d0 [ 231.636412][ T6421] ? sidtab_context_to_sid+0x68/0x10c0 [ 231.641852][ T6421] ? ext4_alloc_inode+0x1b/0x620 [ 231.646767][ T6421] should_failslab+0x5/0x20 [ 231.651247][ T6421] kmem_cache_alloc+0x36/0x260 [ 231.658007][ T6421] ? set_qf_name+0x350/0x350 [ 231.662575][ T6421] ext4_alloc_inode+0x1b/0x620 [ 231.667320][ T6421] ? set_qf_name+0x350/0x350 [ 231.671908][ T6421] new_inode_pseudo+0x64/0x240 [ 231.676649][ T6421] new_inode+0x25/0x1d0 [ 231.680788][ T6421] ? memset+0x1f/0x40 [ 231.684749][ T6421] __ext4_new_inode+0x639/0x5cd0 [ 231.689668][ T6421] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 231.695363][ T6421] ? memset+0x1f/0x40 [ 231.699327][ T6421] ? __dquot_initialize+0x227/0xd70 [ 231.704507][ T6421] ? avc_has_perm+0x176/0x280 [ 231.709177][ T6421] ? security_transition_sid+0x78/0x90 [ 231.714612][ T6421] ext4_mkdir+0x41e/0x1530 [ 231.719012][ T6421] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 231.724811][ T6421] ? ext4_symlink+0x1040/0x1040 [ 231.729641][ T6421] ? generic_permission+0x190/0x4a0 [ 231.734819][ T6421] ? security_inode_mkdir+0xed/0x130 [ 231.740081][ T6421] vfs_mkdir2+0x448/0x620 [ 231.744393][ T6421] ovl_create_real+0x148/0x330 [ 231.749136][ T6421] ovl_workdir_create+0x3df/0x590 [ 231.754150][ T6421] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 231.759415][ T6421] ? __sb_start_write+0xa5/0x150 [ 231.764418][ T6421] ovl_fill_super+0x3a0d/0x4f30 [ 231.769255][ T6421] ? ovl_mount+0x30/0x30 [ 231.773493][ T6421] ? ida_alloc_range+0xa59/0xac0 [ 231.778425][ T6421] ? delete_node+0x761/0x7b0 [ 231.782998][ T6421] ? __radix_tree_replace+0x24d/0x2f0 [ 231.788349][ T6421] ? up_read+0x10/0x10 [ 231.792404][ T6421] ? sget+0x4cb/0x4e0 [ 231.796364][ T6421] ? free_anon_bdev+0x20/0x20 [ 231.801111][ T6421] ? ovl_mount+0x30/0x30 [ 231.805329][ T6421] mount_nodev+0x52/0xe0 [ 231.809567][ T6421] legacy_get_tree+0xde/0x170 [ 231.814221][ T6421] ? fuse_emit+0x7d0/0x7d0 [ 231.818617][ T6421] vfs_get_tree+0x85/0x260 [ 231.823010][ T6421] do_mount+0x1a15/0x28c0 [ 231.827319][ T6421] ? copy_mount_string+0x30/0x30 [ 231.832237][ T6421] ? page_fault+0x2f/0x40 [ 231.836547][ T6421] ? copy_mount_options+0x1e8/0x320 [ 231.841728][ T6421] ? copy_mount_options+0x293/0x320 [ 231.846902][ T6421] ksys_mount+0xc2/0xf0 [ 231.851041][ T6421] __x64_sys_mount+0xb1/0xc0 [ 231.855612][ T6421] do_syscall_64+0xcb/0x150 [ 231.860095][ T6421] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 231.865983][ T6421] RIP: 0033:0x45d4d9 [ 231.869857][ T6421] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.889438][ T6421] RSP: 002b:00007fa25f0b7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:14:15 executing program 3 (fault-call:10 fault-nth:33): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 231.897822][ T6421] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 231.905775][ T6421] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 231.913726][ T6421] RBP: 00007fa25f0b7ca0 R08: 00000000200002c0 R09: 0000000000000000 [ 231.921759][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 231.929710][ T6421] R13: 00007ffc9a47cadf R14: 00007fa25f0b89c0 R15: 000000000118cf4c [ 231.958540][ T6421] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 232.008583][ T6439] FAULT_INJECTION: forcing a failure. [ 232.008583][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 232.021462][ T6439] CPU: 1 PID: 6439 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 232.031529][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.041580][ T6439] Call Trace: [ 232.044872][ T6439] dump_stack+0x14a/0x1ce [ 232.049207][ T6439] ? devkmsg_release+0x11c/0x11c [ 232.054136][ T6439] ? show_regs_print_info+0x12/0x12 [ 232.059307][ T6439] should_fail+0x6fb/0x860 [ 232.063813][ T6439] ? setup_fault_attr+0x3d0/0x3d0 [ 232.068811][ T6439] ? sidtab_context_to_sid+0x68/0x10c0 [ 232.074241][ T6439] ? ext4_alloc_inode+0x1b/0x620 [ 232.079180][ T6439] should_failslab+0x5/0x20 [ 232.083665][ T6439] kmem_cache_alloc+0x36/0x260 [ 232.088415][ T6439] ? set_qf_name+0x350/0x350 [ 232.092979][ T6439] ext4_alloc_inode+0x1b/0x620 [ 232.097714][ T6439] ? set_qf_name+0x350/0x350 [ 232.102277][ T6439] new_inode_pseudo+0x64/0x240 [ 232.107013][ T6439] new_inode+0x25/0x1d0 [ 232.115063][ T6439] ? memset+0x1f/0x40 [ 232.119045][ T6439] __ext4_new_inode+0x639/0x5cd0 [ 232.123956][ T6439] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 232.129649][ T6439] ? memset+0x1f/0x40 [ 232.133601][ T6439] ? __dquot_initialize+0x227/0xd70 [ 232.138776][ T6439] ? avc_has_perm+0x176/0x280 [ 232.143431][ T6439] ? security_transition_sid+0x78/0x90 [ 232.149047][ T6439] ext4_mkdir+0x41e/0x1530 [ 232.153440][ T6439] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 232.159219][ T6439] ? ext4_symlink+0x1040/0x1040 [ 232.164043][ T6439] ? generic_permission+0x190/0x4a0 [ 232.169212][ T6439] ? security_inode_mkdir+0xed/0x130 [ 232.174469][ T6439] vfs_mkdir2+0x448/0x620 [ 232.178791][ T6439] ovl_create_real+0x148/0x330 [ 232.183526][ T6439] ovl_workdir_create+0x3df/0x590 [ 232.188540][ T6439] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 232.193814][ T6439] ? __sb_start_write+0xa5/0x150 [ 232.198728][ T6439] ovl_fill_super+0x3a0d/0x4f30 [ 232.203560][ T6439] ? ovl_mount+0x30/0x30 [ 232.207773][ T6439] ? ida_alloc_range+0xa59/0xac0 [ 232.212680][ T6439] ? delete_node+0x761/0x7b0 [ 232.217244][ T6439] ? __radix_tree_replace+0x24d/0x2f0 [ 232.222588][ T6439] ? up_read+0x10/0x10 [ 232.230015][ T6439] ? sget+0x4cb/0x4e0 [ 232.233968][ T6439] ? free_anon_bdev+0x20/0x20 [ 232.238730][ T6439] ? ovl_mount+0x30/0x30 [ 232.242951][ T6439] mount_nodev+0x52/0xe0 [ 232.247173][ T6439] legacy_get_tree+0xde/0x170 [ 232.251937][ T6439] ? fuse_emit+0x7d0/0x7d0 [ 232.256346][ T6439] vfs_get_tree+0x85/0x260 [ 232.260756][ T6439] do_mount+0x1a15/0x28c0 [ 232.265069][ T6439] ? copy_mount_string+0x30/0x30 [ 232.270004][ T6439] ? page_fault+0x2f/0x40 [ 232.274309][ T6439] ? copy_mount_options+0x1e8/0x320 [ 232.279477][ T6439] ? copy_mount_options+0x293/0x320 [ 232.284649][ T6439] ksys_mount+0xc2/0xf0 [ 232.289939][ T6439] __x64_sys_mount+0xb1/0xc0 [ 232.294513][ T6439] do_syscall_64+0xcb/0x150 [ 232.298995][ T6439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 232.304861][ T6439] RIP: 0033:0x45d4d9 [ 232.308728][ T6439] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.328311][ T6439] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.336700][ T6439] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 232.344646][ T6439] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 232.352594][ T6439] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 232.360539][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 232.368577][ T6439] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 232.380628][ T6439] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 232.620534][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.631585][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.641932][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 232.651273][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.659823][ T3050] usb 5-1: config 0 descriptor?? [ 233.010526][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 233.016523][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 233.024649][ T3050] usb 5-1: USB disconnect, device number 72 10:14:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:17 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@mcast2, @private2, @remote}) r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x4d92, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) memfd_create(&(0x7f0000000100)='%%!$.\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_create1(0x0) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:17 executing program 3 (fault-call:10 fault-nth:34): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:17 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRESHEX, @ANYRES16, @ANYRES32=r7, @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x1) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x4e9f, @empty, 0x1}, {0xa, 0x4e22, 0x3f, @private2={0xfc, 0x2, [], 0x1}, 0x8}, 0x20, [0x40, 0x3, 0x0, 0x9, 0xfffffffd, 0x1, 0x1, 0x4]}, 0x5c) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0xc4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80000}, 0x80) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:17 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) [ 233.637915][ T6459] FAULT_INJECTION: forcing a failure. [ 233.637915][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 233.650661][ T6459] CPU: 1 PID: 6459 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 233.660720][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.665598][ T6463] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 233.670768][ T6459] Call Trace: [ 233.670784][ T6459] dump_stack+0x14a/0x1ce [ 233.670793][ T6459] ? devkmsg_release+0x11c/0x11c [ 233.670807][ T6459] ? show_regs_print_info+0x12/0x12 [ 233.704475][ T6459] should_fail+0x6fb/0x860 [ 233.708891][ T6459] ? setup_fault_attr+0x3d0/0x3d0 [ 233.713903][ T6459] ? make_kgid+0x228/0x3a0 [ 233.718328][ T6459] ? security_inode_alloc+0x32/0x1f0 [ 233.723610][ T6459] should_failslab+0x5/0x20 [ 233.728097][ T6459] kmem_cache_alloc+0x36/0x260 [ 233.732845][ T6459] security_inode_alloc+0x32/0x1f0 [ 233.737947][ T6459] inode_init_always+0x37c/0x800 [ 233.742863][ T6459] ? set_qf_name+0x350/0x350 [ 233.747454][ T6459] new_inode_pseudo+0x7b/0x240 [ 233.752203][ T6459] new_inode+0x25/0x1d0 [ 233.756344][ T6459] ? memset+0x1f/0x40 [ 233.760308][ T6459] __ext4_new_inode+0x639/0x5cd0 [ 233.765230][ T6459] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 233.770928][ T6459] ? memset+0x1f/0x40 [ 233.774889][ T6459] ? __dquot_initialize+0x227/0xd70 [ 233.780067][ T6459] ? avc_has_perm+0x176/0x280 [ 233.784723][ T6459] ? security_transition_sid+0x78/0x90 [ 233.790176][ T6459] ext4_mkdir+0x41e/0x1530 [ 233.794577][ T6459] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 233.800360][ T6459] ? ext4_symlink+0x1040/0x1040 [ 233.805189][ T6459] ? generic_permission+0x190/0x4a0 [ 233.810367][ T6459] ? security_inode_mkdir+0xed/0x130 [ 233.815631][ T6459] vfs_mkdir2+0x448/0x620 [ 233.819944][ T6459] ovl_create_real+0x148/0x330 [ 233.824685][ T6459] ovl_workdir_create+0x3df/0x590 [ 233.829689][ T6459] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 233.834956][ T6459] ? __sb_start_write+0xa5/0x150 [ 233.839872][ T6459] ovl_fill_super+0x3a0d/0x4f30 [ 233.844702][ T6459] ? ovl_mount+0x30/0x30 [ 233.848924][ T6459] ? ida_alloc_range+0xa59/0xac0 [ 233.853839][ T6459] ? delete_node+0x761/0x7b0 [ 233.858410][ T6459] ? __radix_tree_replace+0x24d/0x2f0 [ 233.863764][ T6459] ? up_read+0x10/0x10 [ 233.867818][ T6459] ? sget+0x4cb/0x4e0 [ 233.871788][ T6459] ? free_anon_bdev+0x20/0x20 [ 233.876441][ T6459] ? ovl_mount+0x30/0x30 [ 233.880659][ T6459] mount_nodev+0x52/0xe0 [ 233.884888][ T6459] legacy_get_tree+0xde/0x170 [ 233.889542][ T6459] ? fuse_emit+0x7d0/0x7d0 [ 233.893934][ T6459] vfs_get_tree+0x85/0x260 [ 233.898330][ T6459] do_mount+0x1a15/0x28c0 [ 233.902640][ T6459] ? copy_mount_string+0x30/0x30 [ 233.907554][ T6459] ? page_fault+0x2f/0x40 [ 233.911864][ T6459] ? copy_mount_options+0x1e8/0x320 [ 233.917040][ T6459] ? copy_mount_options+0x293/0x320 [ 233.922213][ T6459] ksys_mount+0xc2/0xf0 [ 233.926348][ T6459] __x64_sys_mount+0xb1/0xc0 [ 233.930940][ T6459] do_syscall_64+0xcb/0x150 [ 233.935424][ T6459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 233.941295][ T6459] RIP: 0033:0x45d4d9 [ 233.945266][ T6459] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.964847][ T6459] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.973235][ T6459] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 233.981188][ T6459] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 10:14:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40001a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:17 executing program 3 (fault-call:10 fault-nth:35): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 233.989138][ T6459] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 233.997088][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 234.005051][ T6459] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 234.015516][ T6459] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only 10:14:17 executing program 2: epoll_create1(0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="7fdb72e5a9f6cef95c5773739622ebeacd14d43e66e06f304ce655851bf382fb2cbe3597cdd802fedcd2ef5a168a767da56fdcad8c7958a8e98fd65cc06e5849f6a142558c6f94ac39aeb8a9c06adbb569654a56a72152c00b70706dd08312a39576bae556599eea919b67e32ff204f2923c787aab7292c4218a71bc767669b0ba743c418fb26821e301fe8e2d87f2cda6b6d8706e675b6f107c66e235059b0d465eda36b7363a6e9fc123cd859b742bfe6cf8e2cb1dc545ae61041f7a08cd1876cc52e28cfb4f7dbf83e885df9d136ff28e1a72783541debd361a4f71f59614582cbdae9b9bddcf366685b936", 0xed, 0xc02d}], 0x4000, &(0x7f0000000580)={[{@errors_remount='errors=remount-ro'}, {@grpjquota='grpjquota='}, {@block_validity='block_validity'}, {@min_batch_time={'min_batch_time', 0x3d, 0xeed}}, {@test_dummy_encryption='test_dummy_encryption'}, {@inode_readahead_blks={'inode_readahead_blks'}}, {@user_xattr='user_xattr'}, {@grpjquota='grpjquota='}], [{@measure='measure'}, {@obj_type={'obj_type'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '#%&}.@-*\\+%'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[},-['}}]}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x3, 0xa0, 0x0, 0x80, 0x3, 0x0, {0x0, r6}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) [ 234.081924][ T6480] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 234.112446][ T6479] FAULT_INJECTION: forcing a failure. [ 234.112446][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 234.117429][ T6487] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 234.125223][ T6479] CPU: 1 PID: 6479 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 234.141680][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.151740][ T6479] Call Trace: [ 234.155021][ T6479] dump_stack+0x14a/0x1ce [ 234.159333][ T6479] ? devkmsg_release+0x11c/0x11c [ 234.164247][ T6479] ? show_regs_print_info+0x12/0x12 [ 234.169422][ T6479] ? arch_stack_walk+0xb8/0x120 [ 234.174315][ T6479] should_fail+0x6fb/0x860 [ 234.178786][ T6479] ? setup_fault_attr+0x3d0/0x3d0 [ 234.183800][ T6479] ? memset+0x1f/0x40 [ 234.187867][ T6479] ? ebitmap_cmp+0x1c8/0x230 [ 234.192430][ T6479] ? mls_compute_context_len+0x81b/0x850 [ 234.198035][ T6479] ? context_struct_to_string+0x3e4/0x820 [ 234.203733][ T6479] should_failslab+0x5/0x20 [ 234.208213][ T6479] __kmalloc+0x5f/0x2d0 [ 234.212351][ T6479] context_struct_to_string+0x3e4/0x820 [ 234.217938][ T6479] ? security_bounded_transition+0x560/0x560 [ 234.223888][ T6479] ? ebitmap_contains+0x6d8/0x780 [ 234.228881][ T6479] ? hashtab_search+0x1bf/0x200 [ 234.233706][ T6479] context_add_hash+0x145/0x280 [ 234.238529][ T6479] ? security_sid_to_context_inval+0x40/0x40 [ 234.244478][ T6479] ? mls_context_isvalid+0x98/0x380 [ 234.249658][ T6479] ? policydb_context_isvalid+0x1b6/0x400 [ 234.255406][ T6479] security_compute_sid+0x11da/0x1d50 [ 234.260771][ T6479] ? security_transition_sid+0x90/0x90 [ 234.266215][ T6479] ? page_cache_prev_miss+0x3f0/0x3f0 [ 234.271571][ T6479] ? stack_trace_save+0x123/0x1f0 [ 234.276570][ T6479] ? xas_load+0x468/0x4c0 [ 234.280961][ T6479] ? ext4_mkdir+0x41e/0x1530 [ 234.286132][ T6479] ? page_cache_prev_miss+0x3f0/0x3f0 [ 234.291560][ T6479] ? __find_get_block+0xbd8/0x1070 [ 234.296645][ T6479] security_transition_sid+0x78/0x90 [ 234.301906][ T6479] selinux_inode_init_security+0x4bd/0xb00 [ 234.307861][ T6479] ? selinux_inode_free_security+0x1d0/0x1d0 [ 234.313815][ T6479] ? crc16+0x1e6/0x230 [ 234.317881][ T6479] security_inode_init_security+0x16f/0x3c0 [ 234.323774][ T6479] ? ext4_init_security+0x40/0x40 [ 234.328801][ T6479] ? security_dentry_create_files_as+0xe0/0xe0 [ 234.334929][ T6479] ? _raw_spin_unlock+0x5/0x20 [ 234.339671][ T6479] __ext4_new_inode+0x46e9/0x5cd0 [ 234.344695][ T6479] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 234.350408][ T6479] ? memset+0x1f/0x40 [ 234.354377][ T6479] ? __dquot_initialize+0x227/0xd70 [ 234.359543][ T6479] ? avc_has_perm+0x176/0x280 [ 234.364222][ T6479] ? security_transition_sid+0x78/0x90 [ 234.369664][ T6479] ext4_mkdir+0x41e/0x1530 [ 234.374054][ T6479] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 234.379830][ T6479] ? ext4_symlink+0x1040/0x1040 [ 234.384651][ T6479] ? generic_permission+0x190/0x4a0 [ 234.389828][ T6479] ? security_inode_mkdir+0xed/0x130 [ 234.395350][ T6479] vfs_mkdir2+0x448/0x620 [ 234.399654][ T6479] ovl_create_real+0x148/0x330 [ 234.404388][ T6479] ovl_workdir_create+0x3df/0x590 [ 234.409381][ T6479] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 234.414638][ T6479] ? __sb_start_write+0xa5/0x150 [ 234.419569][ T6479] ovl_fill_super+0x3a0d/0x4f30 [ 234.424390][ T6479] ? ovl_mount+0x30/0x30 [ 234.428608][ T6479] ? ida_alloc_range+0xa59/0xac0 [ 234.433524][ T6479] ? delete_node+0x761/0x7b0 [ 234.438081][ T6479] ? __radix_tree_replace+0x24d/0x2f0 [ 234.443421][ T6479] ? up_read+0x10/0x10 [ 234.447458][ T6479] ? sget+0x4cb/0x4e0 [ 234.451419][ T6479] ? free_anon_bdev+0x20/0x20 [ 234.456073][ T6479] ? ovl_mount+0x30/0x30 [ 234.460285][ T6479] mount_nodev+0x52/0xe0 [ 234.464520][ T6479] legacy_get_tree+0xde/0x170 [ 234.469190][ T6479] ? fuse_emit+0x7d0/0x7d0 [ 234.473584][ T6479] vfs_get_tree+0x85/0x260 [ 234.477974][ T6479] do_mount+0x1a15/0x28c0 [ 234.482280][ T6479] ? copy_mount_string+0x30/0x30 [ 234.487194][ T6479] ? page_fault+0x2f/0x40 [ 234.491500][ T6479] ? copy_mount_options+0x1e8/0x320 [ 234.496666][ T6479] ? copy_mount_options+0x293/0x320 [ 234.501834][ T6479] ksys_mount+0xc2/0xf0 [ 234.506103][ T6479] __x64_sys_mount+0xb1/0xc0 [ 234.510665][ T6479] do_syscall_64+0xcb/0x150 [ 234.515138][ T6479] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 234.521000][ T6479] RIP: 0033:0x45d4d9 [ 234.524870][ T6479] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.544444][ T6479] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.552827][ T6479] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 234.560786][ T6479] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 234.568731][ T6479] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 10:14:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x402000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:18 executing program 3 (fault-call:10 fault-nth:36): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 234.576689][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 234.584630][ T6479] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 234.592826][ T6479] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 234.600732][ T3046] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 234.650769][ T6493] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 234.672146][ T6498] FAULT_INJECTION: forcing a failure. [ 234.672146][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 234.684924][ T6498] CPU: 1 PID: 6498 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 234.698190][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.708408][ T6498] Call Trace: [ 234.711702][ T6498] dump_stack+0x14a/0x1ce [ 234.716031][ T6498] ? devkmsg_release+0x11c/0x11c [ 234.720978][ T6498] ? mls_context_isvalid+0x98/0x380 [ 234.726181][ T6498] ? show_regs_print_info+0x12/0x12 [ 234.731374][ T6498] ? memset+0x1f/0x40 [ 234.735348][ T6498] should_fail+0x6fb/0x860 [ 234.739762][ T6498] ? setup_fault_attr+0x3d0/0x3d0 10:14:18 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) [ 234.743525][ T6502] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 234.744780][ T6498] ? ebitmap_cmp+0x1c8/0x230 [ 234.765221][ T6498] ? mls_compute_context_len+0x81b/0x850 [ 234.770847][ T6498] ? context_struct_to_string+0x3e4/0x820 [ 234.776558][ T6498] should_failslab+0x5/0x20 [ 234.781317][ T6498] __kmalloc+0x5f/0x2d0 [ 234.785470][ T6498] context_struct_to_string+0x3e4/0x820 [ 234.791016][ T6498] ? security_bounded_transition+0x560/0x560 [ 234.796991][ T6498] ? ext4_mkdir+0x41e/0x1530 [ 234.801586][ T6498] ? sidtab_search_force+0x139/0x330 [ 234.806866][ T6498] security_sid_to_context_core+0x270/0x3a0 [ 234.812759][ T6498] selinux_inode_init_security+0x709/0xb00 [ 234.818572][ T6498] ? selinux_inode_free_security+0x1d0/0x1d0 [ 234.824543][ T6498] ? crc16+0x1e6/0x230 [ 234.828606][ T6498] security_inode_init_security+0x16f/0x3c0 [ 234.834669][ T6498] ? ext4_init_security+0x40/0x40 [ 234.839695][ T6498] ? security_dentry_create_files_as+0xe0/0xe0 [ 234.845855][ T6498] ? _raw_spin_unlock+0x5/0x20 [ 234.850613][ T6498] __ext4_new_inode+0x46e9/0x5cd0 [ 234.855722][ T6498] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 234.861441][ T6498] ? memset+0x1f/0x40 [ 234.865417][ T6498] ? __dquot_initialize+0x227/0xd70 [ 234.870609][ T6498] ? avc_has_perm+0x176/0x280 [ 234.875285][ T6498] ? security_transition_sid+0x78/0x90 [ 234.880744][ T6498] ext4_mkdir+0x41e/0x1530 [ 234.885157][ T6498] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 234.890959][ T6498] ? ext4_symlink+0x1040/0x1040 [ 234.895809][ T6498] ? generic_permission+0x190/0x4a0 [ 234.901003][ T6498] ? security_inode_mkdir+0xed/0x130 [ 234.906286][ T6498] vfs_mkdir2+0x448/0x620 [ 234.910613][ T6498] ovl_create_real+0x148/0x330 [ 234.915371][ T6498] ovl_workdir_create+0x3df/0x590 [ 234.920393][ T6498] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 234.925677][ T6498] ? __sb_start_write+0xa5/0x150 [ 234.930606][ T6498] ovl_fill_super+0x3a0d/0x4f30 [ 234.935454][ T6498] ? ovl_mount+0x30/0x30 [ 234.939689][ T6498] ? ida_alloc_range+0xa59/0xac0 [ 234.944621][ T6498] ? delete_node+0x761/0x7b0 [ 234.949205][ T6498] ? __radix_tree_replace+0x24d/0x2f0 [ 234.954574][ T6498] ? up_read+0x10/0x10 [ 234.958633][ T6498] ? sget+0x4cb/0x4e0 [ 234.963214][ T6498] ? free_anon_bdev+0x20/0x20 [ 234.967895][ T6498] ? ovl_mount+0x30/0x30 [ 234.972129][ T6498] mount_nodev+0x52/0xe0 [ 234.976383][ T6498] legacy_get_tree+0xde/0x170 [ 234.981049][ T6498] ? fuse_emit+0x7d0/0x7d0 [ 234.985458][ T6498] vfs_get_tree+0x85/0x260 [ 234.989869][ T6498] do_mount+0x1a15/0x28c0 [ 234.994201][ T6498] ? copy_mount_string+0x30/0x30 [ 234.999133][ T6498] ? page_fault+0x2f/0x40 [ 235.003455][ T6498] ? copy_mount_options+0x1e8/0x320 [ 235.008646][ T6498] ? copy_mount_options+0x293/0x320 [ 235.013858][ T6498] ksys_mount+0xc2/0xf0 [ 235.018009][ T6498] __x64_sys_mount+0xb1/0xc0 [ 235.022594][ T6498] do_syscall_64+0xcb/0x150 [ 235.027090][ T6498] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 235.032973][ T6498] RIP: 0033:0x45d4d9 [ 235.036858][ T6498] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.056626][ T6498] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.065031][ T6498] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 235.072997][ T6498] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 235.080963][ T6498] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 235.088929][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 235.096894][ T6498] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c [ 235.108110][ T6498] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 235.340238][ T3046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.356627][ T3046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.376715][ T3046] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 235.395584][ T3046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.416001][ T3046] usb 5-1: config 0 descriptor?? [ 235.770183][ T3046] usbhid 5-1:0.0: can't add hid device: -71 [ 235.776273][ T3046] usbhid: probe of 5-1:0.0 failed with error -71 [ 235.784080][ T3046] usb 5-1: USB disconnect, device number 73 10:14:20 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:20 executing program 3 (fault-call:10 fault-nth:37): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:20 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) 10:14:20 executing program 2: writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x2, [0x0, 0x0]}) r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10120088}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x64, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x24}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x14080}, 0x4000800) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44) r6 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) [ 236.410088][ T6514] FAULT_INJECTION: forcing a failure. [ 236.410088][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 236.427830][ T6514] CPU: 0 PID: 6514 Comm: syz-executor.3 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 236.437915][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.447966][ T6514] Call Trace: [ 236.451262][ T6514] dump_stack+0x14a/0x1ce [ 236.455590][ T6514] ? devkmsg_release+0x11c/0x11c [ 236.460528][ T6514] ? show_regs_print_info+0x12/0x12 [ 236.465724][ T6514] should_fail+0x6fb/0x860 [ 236.470142][ T6514] ? setup_fault_attr+0x3d0/0x3d0 [ 236.475175][ T6514] ? kcalloc+0x2b/0x50 [ 236.479239][ T6514] should_failslab+0x5/0x20 [ 236.483735][ T6514] __kmalloc+0x5f/0x2d0 [ 236.487890][ T6514] ? __rcu_read_lock+0x50/0x50 [ 236.492650][ T6514] ? security_inode_init_security+0x2c8/0x3c0 [ 236.498708][ T6514] kcalloc+0x2b/0x50 [ 236.502602][ T6514] ext4_find_extent+0x2bb/0xce0 [ 236.507545][ T6514] ext4_ext_map_blocks+0x3b7/0x46a0 [ 236.512746][ T6514] ? ext4_mark_iloc_dirty+0x248f/0x3420 [ 236.518293][ T6514] ? ext4_ext_release+0x10/0x10 [ 236.523146][ T6514] ? __down_read+0xf1/0x210 [ 236.527662][ T6514] ? _raw_read_unlock+0xe/0x30 [ 236.532433][ T6514] ? ext4_es_lookup_extent+0x415/0x900 [ 236.537903][ T6514] ext4_map_blocks+0x4af/0x1eb0 [ 236.542754][ T6514] ? _raw_spin_unlock+0x5/0x20 [ 236.547521][ T6514] ? ext4_issue_zeroout+0x160/0x160 [ 236.552988][ T6514] ext4_getblk+0x111/0x560 [ 236.557408][ T6514] ? ext4_get_block_trans+0x5a0/0x5a0 [ 236.562779][ T6514] ? memset+0x1f/0x40 [ 236.566761][ T6514] ext4_bread+0x8e/0x390 [ 236.571004][ T6514] ? ext4_getblk+0x560/0x560 [ 236.575587][ T6514] ext4_append+0x153/0x2d0 [ 236.580004][ T6514] ext4_mkdir+0x7f8/0x1530 [ 236.584419][ T6514] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 236.590218][ T6514] ? ext4_symlink+0x1040/0x1040 [ 236.595782][ T6514] ? generic_permission+0x190/0x4a0 [ 236.602208][ T6514] ? security_inode_mkdir+0xed/0x130 [ 236.607499][ T6514] vfs_mkdir2+0x448/0x620 [ 236.611838][ T6514] ovl_create_real+0x148/0x330 [ 236.616691][ T6514] ovl_workdir_create+0x3df/0x590 [ 236.621727][ T6514] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 236.627011][ T6514] ? __sb_start_write+0xa5/0x150 [ 236.631948][ T6514] ovl_fill_super+0x3a0d/0x4f30 [ 236.636802][ T6514] ? ovl_mount+0x30/0x30 [ 236.641041][ T6514] ? ida_alloc_range+0xa59/0xac0 [ 236.645977][ T6514] ? delete_node+0x761/0x7b0 [ 236.650562][ T6514] ? __radix_tree_replace+0x24d/0x2f0 [ 236.655950][ T6514] ? up_read+0x10/0x10 [ 236.660017][ T6514] ? sget+0x4cb/0x4e0 [ 236.663994][ T6514] ? free_anon_bdev+0x20/0x20 [ 236.668667][ T6514] ? ovl_mount+0x30/0x30 [ 236.672909][ T6514] mount_nodev+0x52/0xe0 [ 236.677156][ T6514] legacy_get_tree+0xde/0x170 [ 236.681830][ T6514] ? fuse_emit+0x7d0/0x7d0 [ 236.686247][ T6514] vfs_get_tree+0x85/0x260 [ 236.690661][ T6514] do_mount+0x1a15/0x28c0 [ 236.694989][ T6514] ? copy_mount_string+0x30/0x30 [ 236.699924][ T6514] ? page_fault+0x2f/0x40 [ 236.704251][ T6514] ? copy_mount_options+0x1e8/0x320 [ 236.709447][ T6514] ? copy_mount_options+0x293/0x320 [ 236.714643][ T6514] ksys_mount+0xc2/0xf0 [ 236.718801][ T6514] __x64_sys_mount+0xb1/0xc0 [ 236.723388][ T6514] do_syscall_64+0xcb/0x150 [ 236.727888][ T6514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 236.733775][ T6514] RIP: 0033:0x45d4d9 [ 236.737657][ T6514] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.757253][ T6514] RSP: 002b:00007f4b3f1eac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.765659][ T6514] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045d4d9 [ 236.773626][ T6514] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400019 [ 236.781617][ T6514] RBP: 00007f4b3f1eaca0 R08: 00000000200002c0 R09: 0000000000000000 [ 236.789585][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 236.797570][ T6514] R13: 00007ffd98a6a5bf R14: 00007f4b3f1eb9c0 R15: 000000000118cf4c 10:14:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 236.899791][ T6541] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 236.959981][ T3044] usb 5-1: new high-speed USB device number 74 using dummy_hcd 10:14:20 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000000c0)=0x31) keyctl$get_persistent(0x3, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, 0x0, r6) write$P9_RGETATTR(r2, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x2408, {0x8, 0x0, 0x7}, 0x44, r3, 0x0, 0x800, 0x5, 0xffffffffffffe14c, 0x9, 0x6, 0x836f, 0x100005, 0x8001, 0x1000, 0x0, 0xffffffff80000001, 0x4, 0x100000001, 0x7, 0x101}}, 0xa0) r7 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r8 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_uring_enter(r8, 0x1, 0x0, 0x0, 0x0, 0x0) [ 237.091952][ T6552] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 237.215965][ T6561] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:21 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r5, 0x0) ftruncate(r5, 0x40) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000239e7b095d8900f076ec99c5c51a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000000070b000009000000950b000009c33a72722119576691e4cd1724b70afaf523dd457e465a2b0618c4d1b83d378becfc063ea3bd2c8d69a4753c07000000000000b75ed3abe82700dabda28ec43f66681f3ef90de6a845ecda5f5c319ed8cf2d2ee53e72c3fe573a3bd786134619b3a76abe95a619550f0611459423d0760a3fa02af9302198c92a11b7ebc6345baa4414"], 0x1a0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, &(0x7f0000000180)=""/216, &(0x7f00000000c0)=0xd8) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 237.322859][ T6569] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 237.330107][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:14:21 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) [ 237.365444][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.396953][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 237.418500][ T6514] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 237.438541][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.456053][ T3044] usb 5-1: config 0 descriptor?? [ 237.703249][ T6525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.799941][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 237.805934][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 237.814589][ T3044] usb 5-1: USB disconnect, device number 74 10:14:21 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:21 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r9, 0x0) ftruncate(r9, 0x40) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f00000001c0)=""/38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x110030, r10, 0x0) ftruncate(r10, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000200)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000180)={0x7, &(0x7f00000000c0)=[{0x6, 0x3, 0x6, 0x3}, {0x3f, 0x0, 0x34, 0xf1f}, {0x9, 0x81, 0xff, 0xde}, {0x1f, 0x7, 0x0, 0xe000}, {0x3, 0x0, 0x20, 0x80000000}, {0x6, 0x7, 0x8, 0x3f}, {0x40, 0x1, 0x1, 0x6}]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x4, 0x0, 0x0, 0x0, 0x0) 10:14:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:21 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) 10:14:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001880)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0xb8, 0x0, 0x3, 0x7, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r6, 0x0) ftruncate(r6, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x80000000, 0x1000000000, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000880)={{r3}, r7, 0x2, @inherit={0x50, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x7, {0xa, 0x200, 0xffff, 0x4, 0x8}, [0xf95]}}, @devid=r8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x4000e0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 238.249273][ T6597] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 238.265386][ T6598] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400119, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:22 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffd7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:22 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r1, 0x0) ftruncate(r1, 0x40) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000013c0)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/4096}, &(0x7f0000001440)=0x78) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000001480)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000001500)=0x80) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x1}, 0x16, 0x2) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400d5}, 0x40) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) [ 238.499824][ T3050] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 238.859887][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.870795][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.880564][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 238.889629][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.898289][ T3050] usb 5-1: config 0 descriptor?? [ 239.160180][ T6599] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.249839][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 239.255897][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 239.263089][ T3050] usb 5-1: USB disconnect, device number 75 10:14:23 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40f518, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101002, 0x0) 10:14:23 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) 10:14:23 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01070000000000000000050000000800030041470907273badf42be8a72708ac5876f962a01d5b69e46c6e63107c01c1dd160412c0a0f902c894da4090ff34e46f3ab0c32ea2bd748ea16ae3229a81638818efe3b8ad551ad89cd3035616995efacf1c59b0fdf071e5f0c7a229d37e87e71b08861c7f74a5d05b0982c773b4476c4f427a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x90) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/null\x00', 0x400, 0x0) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000002940)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002540)={0x394, 0x12, 0x10, 0x70bd2d, 0x25dfdbfd, {0x2a, 0x9, 0x3, 0x76, {0x4e23, 0x4e23, [0x3, 0x4, 0x4, 0x9], [0xca, 0x7, 0x1000, 0x8], 0x0, [0x46b9, 0xf4]}, 0x1, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "3e6b76adb35dff9011d485658cbec23f3724a1b87cb567ec91324c3364b0b08ae3b775ac495dca9fb732fc717a5b6f3d17c7912a009f86e55de80c9ff61d79043f6b1600fd349d243c6379b39368d343675f90f705ac44436971f3933e023cedb3baf47d5f"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "37a3aee0f6687aab14537085954bff36c96184ebec2e340d2f337c1ff0922dc33495d4faa67bd8b6ebffa5dd41da98a69ba3c44d70a3f3662b92d5211eee80016f5ddab451815e6cc6a43e283ba97740d615dc821545460ff66604e71991238cefe0169486154bf710655001a1656ed2b47434d6b9230e401c1089a673fde21109bad3a3aaa4b0f62b2566baff2b6e31db0975c72aed16cfe6b55ade6aab0100c0cffec5a340b83e67ee5e02"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "9b88980e18e982a431242c53da5e613f5dc752e4e71e2cd7cdcd84de36b0cc0ffe7943190a73f3d0640dffc500d7e22aa5817b3ee41574829b84c5b7cf2a625de7a9acf35e5f1dcfa6e5750f8789b1f63e61f3d32f9dc2e65d00d7c2ff8b42e059bff531c69ee4f1e341ce32bea8e2a078966dc57211936702e24de6cc0008302258"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "5654ec05022318bc025d6141464728468e0074a71ce0d8c38322fb4618939f27739e95b20cecb530ee29951de0bb523755656fe2c2b4e511972653462702f2bfdc62665e722fef88f3c8146b7c0e5bac1ac3544b54d8a0e334ab5bd0dc46f092aa403bfb8e41e0b335aa700e02c2f2e81e0637c931e40a9614cd07932ae2e07365db"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "415cf7bbcfbf8ebba8cbf6c15ad353efe5eeb7a7160abc52fcb8acb6855bb6598828616f424b3f31d02cec64046c4d90"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "9bda0f594704eff3cb1bda9d11988490ab5034569600f33efe5d409c2c928a62993461b97014dac61d6ce0f846da8eafaa84e700bbd27129bfe29ead339101d58a47fa6ab6904d2b910036ce9cceef7fd4dac05891d9b9bc18961c657cfb020d0fbf20395be154548486a37a8b76f12de60fad08e995e8d64d391cdb57ca2b0feecf5645f89da5f649ba0b3da12cfd1301979d1d3cff040dd3b3d5646b07d1a7a030ce38b1d54cc3367a97862dba3ca2ea2fbae5eab33b6456"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "f828f6d037985b5620c5202a9ae2538b3a483175074139dd23566507fa"}]}, 0x394}, 0x1, 0x0, 0x0, 0x80}, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40f618, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 239.695035][ T6666] ovl_get_fh: 4 callbacks suppressed [ 239.695043][ T6666] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 239.695800][ T6668] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 239.755055][ T6693] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40f718, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 239.793811][ T6697] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 239.830550][ T6704] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:23 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000180)={{r1}, "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"}) delete_module(&(0x7f00000000c0)='\x00', 0x800) r2 = syz_io_uring_setup(0x3475, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x12000000}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000011c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x6a0}, 0xa15959694568d760}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x7, 0x2, 0x8000, 0x8, 0x10000}, 0x14) r6 = dup(r5) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001180)={0x0, 0x0, 0x5, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 239.874131][ T6712] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 239.949717][ T3050] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 240.309685][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.320616][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.331170][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 240.340595][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.349332][ T3050] usb 5-1: config 0 descriptor?? [ 240.589981][ T6673] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.689650][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 240.695655][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 240.703293][ T3050] usb 5-1: USB disconnect, device number 76 10:14:24 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40f918, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000a74c000000440a0000005b0e0000", @ANYRES32=r6, @ANYRESOCT], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r9, @ANYBLOB="081e1b4ed9d57f3c43da289708dda46f1f3ad2204aa40b1cc92326dfa1cf40372d74c26df395fc8970835ec5110639d2b5cdc764f8942df10cbfca0b013a0781f39f388c105bca003ca3ba3acbe7f9ed8ff1d78e1c35e078b9fd00"/100], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r12, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x15) r13 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:24 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) io_pgetevents(r4, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) 10:14:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xd82, &(0x7f0000000040)={0x0, 0xf941, 0x10, 0x2, 0x26c, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, r7, {0x0, 0x2}}, 0x20) [ 241.119776][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.133530][ T6738] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 241.139123][ T6743] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r3, 0x1, r1, 0x5, 0x80000}) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0xfffffffc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r7 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x121000, 0x20) setns(r7, 0x40000000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$UI_DEV_DESTROY(r8, 0x5502) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40fb18, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 241.168428][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:14:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 241.203156][ T6765] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 241.205189][ T6769] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 241.242343][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.252505][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6740 comm=syz-executor.0 10:14:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 241.253651][ T6784] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 241.589455][ T3050] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 241.859433][ T3050] usb 5-1: device descriptor read/64, error 18 [ 242.249462][ T3050] usb 5-1: device descriptor read/64, error 18 [ 242.519361][ T3050] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 242.789388][ T3050] usb 5-1: device descriptor read/64, error 18 [ 243.179321][ T3050] usb 5-1: device descriptor read/64, error 18 [ 243.299339][ T3050] usb usb5-port1: attempt power cycle [ 244.009234][ T3050] usb 5-1: new high-speed USB device number 79 using dummy_hcd 10:14:27 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40fd18, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_int(r7, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)) 10:14:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x108, 0x3, 0x8, 0x4d, 0x3be, 0x2b5ea366, 0x195, 0x2e}, "78e8735cc1f45d5418f2ba526b4d1b0fb7768448408a7fe180263cbe4795c0b2803898eba7f818fe532908ba1948e6d6f7f8021455f823a18f99b589bde907539ff06cb4b3d93a3edd6c36a74898787a9dfcece78fb493057212660fbbcc2d1e40877465b549848da75947edbc0e422c2798d65cd7", [[]]}, 0x195) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40ff18, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x11, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x40ffe0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 244.139203][ T3050] usb 5-1: device descriptor read/8, error -71 10:14:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r2, 0x0) ftruncate(r2, 0x40) fsetxattr$security_selinux(r2, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='/sbin/dhclient\x00', 0xf, 0x1) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000180)={0x5, 0x1ff, 0x6, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x12, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 244.211299][ T6853] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 244.349241][ T3050] usb 5-1: device descriptor read/8, error -71 [ 244.839129][ T3050] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 245.009159][ T3050] usb 5-1: device descriptor read/8, error -61 [ 245.279159][ T3050] usb 5-1: device descriptor read/8, error -61 [ 245.399181][ T3050] usb usb5-port1: unable to enumerate USB device 10:14:30 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x13, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:30 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 10:14:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r5, 0x0) ftruncate(r5, 0x40) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r3}) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 247.152911][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.169422][ T6875] ovl_get_fh: 8 callbacks suppressed [ 247.169431][ T6875] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x14, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 247.175936][ T6893] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x20) ioctl$KDSETMODE(r8, 0x4b3a, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:30 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) [ 247.226016][ T6908] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.230945][ T6909] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 247.287182][ T6916] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 247.628815][ T3044] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 247.898782][ T3044] usb 5-1: device descriptor read/64, error 18 [ 248.288815][ T3044] usb 5-1: device descriptor read/64, error 18 [ 248.558726][ T3044] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 248.838662][ T3044] usb 5-1: device descriptor read/64, error 18 [ 249.228648][ T3044] usb 5-1: device descriptor read/64, error 18 [ 249.348702][ T3044] usb usb5-port1: attempt power cycle [ 250.058528][ T3044] usb 5-1: new high-speed USB device number 83 using dummy_hcd 10:14:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x24, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:14:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r5, r6) r7 = gettid() fcntl$setown(r6, 0x8, r7) r8 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r8, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x40000009}) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) fsmount(r1, 0x1, 0x82) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x30}, 0x0, {0x0, r7}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 250.177212][ T6947] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 250.208951][ T3044] usb 5-1: device descriptor read/8, error -71 10:14:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 250.218077][ T6978] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 250.257219][ T6991] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:33 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0x0, 0x0) [ 250.261988][ T6995] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 250.302549][ T6995] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 250.333939][ T7010] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 250.418513][ T3044] usb 5-1: device descriptor read/8, error -71 [ 250.908456][ T3044] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 251.078479][ T3044] usb 5-1: device descriptor read/8, error -61 [ 251.368425][ T3044] usb 5-1: device descriptor read/8, error -61 [ 251.488576][ T3044] usb usb5-port1: unable to enumerate USB device 10:14:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6e, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:36 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x5015, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfa}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5d5f}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000008) 10:14:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:36 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFLUSH(r2, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) [ 253.223637][ T7027] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6f, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:36 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000100), 0x4000) 10:14:37 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 253.327483][ T7046] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 253.412803][ T7062] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 253.454011][ T7068] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:37 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 253.566466][ T7079] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 253.585847][ T7081] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 253.668118][ T3050] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 253.938160][ T3050] usb 5-1: device descriptor read/64, error 18 [ 254.328076][ T3050] usb 5-1: device descriptor read/64, error 18 [ 254.598052][ T3050] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 254.868013][ T3050] usb 5-1: device descriptor read/64, error 18 [ 255.257987][ T3050] usb 5-1: device descriptor read/64, error 18 [ 255.378020][ T3050] usb usb5-port1: attempt power cycle [ 256.087859][ T3050] usb 5-1: new high-speed USB device number 87 using dummy_hcd 10:14:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r7, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r10, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r13, @ANYBLOB="08001be9f91870184fbd8cc4f3bcfd087314804c1f4ebbfaf2a412fa7bba3253aff19be475ea76f85b9c6980188845b47f016f5efa1708b2e217eb5031e3bf75f9249496d8f9c9974a2626f1df2dcc822ac9f81fc3f3933a4f543c73e389dcd4297a9435fd50aa698f26fba14a7cae59d07a6953b6453a4657a983114964d816fa7592edbca2f392f09c7fd93deba89e2edf9c186a3e13bd67c09b9877b098e005eab8aa3ee297fc2cf182368fd56cb043ddbdcbaa40c2fcb1cf58e6f39a55009d46bd3270036031cbc98adfd8d172d3fe7242c6228c4f19be40bf14d0b4eb8d1a9f"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:39 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) 10:14:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x38f, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) ftruncate(0xffffffffffffffff, 0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x4, 0x7, 0x91, 0x3b9, 0x9, 0xc6, 0x7ff}, "c3b87c39cec459ee56a84cfb5fa38392fffa3a572a20fe3fe909c07f039a720a7b6417075d024eb22340078b87db9902227c7ea166a322c698f3c560fc931d13177b95b2782e2fdb3a8c5f58ea8b94d4acdbb65e33690f9ddd9b3088f99b57143e1836c8ae7340852362c7033ba0f85f74bd178fc027bc5194b7e3b2f087afd4988a03b1719a251d875ecfc7777846b7188ea14fda9f86c55b16902090cd", [[], [], [], [], []]}, 0x5be) ioctl$CHAR_RAW_BSZSET(r7, 0x40081271, &(0x7f0000000280)) eventfd(0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x4, 0x400000000004, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r9, 0xffffffff, 0x18}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000000180)={"59633611d046e8ab4b6850d2ad5752f9", 0x0, 0x0, {0x3, 0x3}, {0xff, 0x4}, 0x4, [0xfffffffffffffff8, 0x53eb, 0x2, 0x7, 0x0, 0x4, 0x80000000, 0xfffffffffffffffe, 0x5, 0x7f, 0x6, 0x81, 0x0, 0x9, 0x1, 0x2]}) [ 256.197725][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.214534][ T7099] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 256.215514][ T7102] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x391, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 256.230996][ T3050] usb 5-1: device descriptor read/8, error -71 10:14:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x400}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:39 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:14:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x408, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 256.286301][ T7123] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 256.292399][ T7127] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 256.467866][ T3050] usb 5-1: device descriptor read/8, error -71 [ 256.957757][ T3050] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 257.127840][ T3050] usb 5-1: device descriptor read/8, error -61 [ 257.397774][ T3050] usb 5-1: device descriptor read/8, error -61 [ 257.517826][ T3050] usb usb5-port1: unable to enumerate USB device 10:14:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:42 executing program 2: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0xeba0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r4, 0xa, 0x12) recvmmsg(r5, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r4, r5) r6 = gettid() fcntl$setown(r5, 0x8, r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x12433}, {0xffffffffffffffff, 0x3632}, {0xffffffffffffffff, 0x1060}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1000}, {r5, 0x4004}, {r8, 0x43}], 0x9, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f00000000c0)=0x78) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x480, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 10:14:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x3766, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4f5, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 259.222226][ T7160] ovl_get_fh: 1 callbacks suppressed [ 259.222235][ T7160] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 259.222430][ T7161] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x500, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 10:14:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x600, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 259.278783][ T7181] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 259.295504][ T7192] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 259.348797][ T7210] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 259.381220][ T7216] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 259.412077][ T7225] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.667456][ T3044] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 259.937415][ T3044] usb 5-1: device descriptor read/64, error 18 [ 260.327361][ T3044] usb 5-1: device descriptor read/64, error 18 [ 260.597385][ T3044] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 260.867357][ T3044] usb 5-1: device descriptor read/64, error 18 [ 261.257314][ T3044] usb 5-1: device descriptor read/64, error 18 [ 261.377375][ T3044] usb usb5-port1: attempt power cycle [ 262.087232][ T3044] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 262.177265][ T3044] usb 5-1: Invalid ep0 maxpacket: 0 10:14:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x11, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:45 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:14:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x15090200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000303030000000000007c08134500ac4f6e000200ffffffff000002000c00020000000000000000090c000200fffffffd00000fff"], 0x38}}, 0x418) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x111d00, 0x0) sendmsg$AUDIT_LIST_RULES(r12, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x404, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc816}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000280)={r5, 0x20, 0x3, 0x2}) sendmsg$AUDIT_SIGNAL_INFO(r13, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x1, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000040) io_uring_enter(r9, 0x4101, 0xb845, 0x2, 0x0, 0x0) 10:14:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:45 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:45 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r7, 0x701, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x7, 0x0, [0xc, 0xf, 0x1b]}, {0xa, 0x0, [0x0, 0x19, 0x15, 0x11, 0x7, 0x14]}, {0xc, 0x0, [0x2, 0x16, 0x7, 0x12, 0x19, 0x9, 0xa, 0x11]}, {0x9, 0x0, [0x20, 0x10, 0x1a, 0x1e, 0x13]}, {0xb, 0x0, [0xa, 0x1e, 0x1b, 0x18, 0x9, 0x1e, 0x17]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008802}, 0x0) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x12, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x804, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:45 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0xa, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 262.240837][ T7239] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 262.262120][ T7238] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x900, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 262.315067][ T7265] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 262.319645][ T7263] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 262.547148][ T3044] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 262.637203][ T3044] usb 5-1: Invalid ep0 maxpacket: 0 [ 262.642572][ T3044] usb usb5-port1: unable to enumerate USB device 10:14:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x13, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:48 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmmsg(r1, &(0x7f00000060c0)=[{{&(0x7f0000000180)=@can={0x1d, r5}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="2cb3f0e46d89a97e2e2ee4ffa5c3602b52c4e63070c5f3d9e47224b6d003bb4d756118cd36a941ae22c1096ddf202d019360ff1cca9871232ff1674a5999f226dade4c70fafa032e69960b160bb714b6f90a5e9daa616f9e4b21187a7474b67be47f48b4f6327bbc57c244d5b8747c0ee05edec271d64bdf392f8f3ab1e868bc5e8b1ddf3954fcb1543ab56e0fb3510ea882d802618e58cc418c8a13a96e0165536139dd284da5e77984b5d8a6efe0ce7b9eff6ed881d076899ca71c0bac5685e2a7c1cce67ecec6786597f79904f7", 0xcf}, {&(0x7f0000000300)="1b89e935e6d1f87d941161b12725c9579e4f7b27cb16737ff83148d7cd3ce491c39dde323aee2286654c1a0fee6a41d84f90f150", 0x34}, {&(0x7f0000000340)="1e24373908094fa2f89cccd6f7869f21c96e1ef4f1d148b6b12792db95939c3434d8cda72d9aacbb91a7d0a0a6db012e191bc87190d3482e57d79efc2b54139f30bcf2681a94743a803fa810eef966d71f031af0b0c9dee1ea8ff39cf6d3cc2fcb8f785ee8584e76792b496b1db8f962382158", 0x73}, {&(0x7f00000003c0)="e2fe5321ee9740deb8c388db15d527760319648a876fcd1887327c03eb1eac0e9215a2988ff3034b3b85db68339213753d681150247b64af70b180c28b598abf7189ade431b2c1be3397083dc630e654cb1d88e80d3f292ec2c21a6a3b00", 0x5e}, {&(0x7f0000000440)="021c8a6981019364f87d0644655c8894762c3b98b1d78a1ef4142f0754df70ae9feadd5ae4aa1a00ec256a546e521ea76edbe58d1bc64481", 0x38}, {&(0x7f0000000480)="40d2f7e093fede79db236fc9d1831435db1c2ab82617854d446425a7763332414bb719ee41dcbd9a4da8e265bd299fd7fff9a3b2559de20fd1de8d8f927440f3f0fe04eac1282a65ad31b96d2794bb1fa8dd50db1ba3c81b00b98fcfb83f54815f7c1935cdb08e4761f3acccdabb6ba5007860d0", 0x74}, {&(0x7f0000000500)="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", 0xfe}], 0x7, &(0x7f0000000680)=[{0x1010, 0x102, 0x8, "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"}], 0x1010}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000016c0)="170ae4ae60ce5ad41caeab514ae72697d140ed15841ba99b5946e609e8cde3dcd24c5e05e852bfe3860ff53960cbec33", 0x30}, {&(0x7f0000001700)="7598e9c368bda5d2200d8004a6e8291dd6ef79c6ae7947ca490b7f0f0869cc014fe84db00e29c9fc666bb6c3f67e8fc9bdfe30b2a89cf594f138340adc39bfd905c284d6a3814c507d6735c56f1c12915d95e6877f6ca83b134335e1ceeb68350b490b", 0x63}, {&(0x7f0000001780)="6a2be98f483f8702c1a0a137e75713c75017db849d85b3a7b4f7c82c79dc60ecc11902ea7d6c4440bc6aeffbb9ffe979fd741efc4b86307e70b860e38d0cca6036f319063c00756966afd793b083b8dc333154e3f6d9b44b7d834978772626dd566c0e1a2fcfca11f5b28d51f2f73659d26b569c5072740708968aa8ab5fd2f8281b77dd0ed4cbece69db6804796b8db87eab90178def937a9ce70f54597", 0x9e}, {&(0x7f0000001840)="72d0fcbf42e66475843a836f85aff8c048e1740341a663b624c34e8123ac67a51643a21692d1ac5758c603949131bce8d217b02887bb5b20ffc2dd80689e32341f9463b64efd519ea52cb4eb40aac1aee0a54b9f01a10f53695aa12c8c7de27c098328e9220ad2663a804c", 0x6b}, {&(0x7f00000018c0)="fec0fdef2cc5adc03a11f376d3cfe50bc1315e7f365a963e813c85d26b317442651e3c793b768e98310f43abf1c969e889a8fbc4997bf68d41f636d9", 0x3c}, {&(0x7f0000001900)="a2756d1cd6ef71af57c80de2ce92d21d0786d7d122a4b3ae70f3840aecb99793818b8ca84bf73b337800a35340e0713c3333f231a137afe47a8fe37fdf52caa666428172fc76fd063bf06e050dc6d9bcf22a4449a9c4684b3792103a3e5d6e466d4e660a3115307c71dcaec592667d59ac527e76088a833358b047648591a955405a12f7602bc9ad6411996ddce1ad30eb77a3f1bae494055907b925e7149c63eead286d805f50e9b966b5143d157753fd4f94ceee254f45eacb2d2a58d467db05c5adc6150338f18bd6d4b6", 0xcc}, {&(0x7f0000001a00)="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", 0xfc}], 0x7, &(0x7f0000001b80)=[{0xf8, 0x88, 0x3ff, "2f9bbab75f2e5d91d812d7922dab164b4fc6ad721024abb620ea874c023e896fa387f63397ec97a46f5be643afa2f6fd141e0f051ef62c519b48e4271c861c4730f74e126447c02b0b908371cbef34c40ce082e99bf4a717b61de9b05668e891a9bdb967d9d95d9e7f1ec90957fcb2847816841862c8e55e2c6caaa9e34b225921210fa33a020a74b90c89eae8ce3a7e846ed86adb51186ff77e3ce04e0e101cbf02134b490420b06d066c60955dfa30b9cf1b88c191e7a6b05f0bc23e77871ee02624d7d757becfda7200d2753b84084fbd16c7df6a8f4fbc0b215c7ffa214c3e1587"}, {0xd0, 0x0, 0x2, "1312fcf47d5615074779ca34a000c625bfa5f0057681212f376e55a23c1c31d9fa1b37510c7c67e84aa5008393f76c9787b3d07037db49d5ffd2d324a14ad736bca43e83e19d6e86943b2b735d813689996d23276cf276e124bcda18b14b1d19a85df1fd53c54ab30e4dbb527436732cf7403893fe8709621cf5fd3a4dd12ae7276643d3f214fb3dcf67133923cccaf002a775f151a7fd62375aaa1a6b6725f3c542995ba2061a64a50fabcb642bb9e49ae7a32d9e24c150c1a9b623"}, {0x108, 0xeba2f23e49ba0c6d, 0x5, "67aa43c947c63f00d0d1e0099265c308c8fbe377c38fb6de4cc9a2a162cf624393846cddf3f46a53ab7744e6dd244ee87b61587890ebe7e9abbe7916b037a6f1cb0a1f97dfc6ff89b3f2944a79a1370a03b4c9bbc7369f46fafebe6021ecc213a7729d7ea0e4df77ab1cc57444cb873e2ff4ccf3bd075d76c6bafad38a89fa8c648806f959f3cc8ee1ec0e84eb8f2d1b8e3795d352d3a1b64fe82b323a5e13a046ea8a24cf98cb80dde127b78c8c8cb80b247811a026ce2a06641e43428ffe4070982e0dd316e8c299d369709609caca25ace8d474d66f20677c6ce6ffbc930056c6f48f89f5f3ff9384ac100c7290aab56b6124d0"}, {0x98, 0x107, 0xffffffff, "bfb6f7d860d30cfc95ce2f34ddb9235d4183a167c7e4090927ce928d0a7c48202ac4c8d5f0fc60883015c5fb84f171e7cd867651ad00f43e93467f646292265357b371e8886a24cafacd8a327039b93c140f40474ccc6ce948508f7a33705392c546b1617896ab083875467f0212e7eb7ec95b4e7b57e04921584a7d94889e050f5e5c4379137fd2"}, {0x1010, 0x112, 0xd64, "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"}], 0x1378}}, {{&(0x7f0000002f00)=@pppoe={0x18, 0x0, {0x1, @empty, 'caif0\x00'}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002f80)="c25dfd5c0cc195149cb52b5ffe64b84376641b970179d2c3645538e2de9f9547509d3c97ffc35bedfb4d7a28320d3adec80d6dd4ee30445ac78382c558f1f0e3b784446a1e9aff0c34239707d592b16bcab40c0978ed91af37de6ca11f2aa0bb629a737ca9f3ca0a1a666da52172ca8fb701e1d4abc33cbe3b741eddaa05fd4ba4af40e90280f7a0f19521ea0012d6ace5ee79642a640b9b363d7200c18df23c539ed7f6bca52cb3c634e17b3c64b687ec16c11e23d9a9e50f0b2c85305036cc5b716c0a736546cb1668498959f8b8439f74394591b6deed2ebf36a2d9bccf751055c805050713b1a379e0764e73571f5615e3423f", 0xf5}, {&(0x7f0000003080)="01e6c7385ba923afab4b24140aa46c534f62adc2d5766b0385b49fd616e8d8424315197a59d0df24f4d8150eb46d1b3747d59d46f701fbbba5b38aea2131f79a2e0c5373113a62b7d8d7d5215b20e8b0a453db388028376ecb216790b692aa3fbe2b581d84983daa05c025284f91b10f4968a54fa2b236c2f9d349488dc57a91444b56a99295f11411fdfe30c115f974161e35fdb8a684fb498174b13c734726a50832fa6339f5af21e9c6f080535b91af031e3e7603cda0ebe553f05c798e1711e5994b4abcb1b1004e83ac78beeae551d91a3cc56a04b11e462092e8111f40f44e5492f4", 0xe5}, {&(0x7f0000003180)="30f10f8c4d9cdb40ffccd2af4dfd47fb3638ab6845e292cbf611841986f4e15b6fdf563ad6515f75032775758c1f56e743e7567d268da5e6f0199d484c0aa62a74fbb67a62ecbc99bb5675a9ae0af7953cd855eb770c913e045fc9d76b6562cf2f2f704f7fb485e44d0ceaaf3f7412d31f36201bf017", 0x76}, {&(0x7f0000003200)="1c6c6a7b971df9cbc97d73514ca647f4ea8a57823ddcb40f205827a222551564824b83ef38f98760366b490be9b276dfbf7489b7cd73ba217ed2ed600670c1f799e48deea98a3b7f8deb924b3b7f7b493d0f078d14a4bf632ef23fdd1103926f1ba43e6816be2f3a5f62fde42784a87d7f8bbabd144b68b2e1232f6fb57c265970b6c541c2b6a9605e2f2312e0b110d5153954a5cb93", 0x96}, {&(0x7f00000032c0)}, {&(0x7f0000003300)="5837127e71cc933c3f399b9a0e2f670d71955900d88dc17e3c7ccd7230fe7a1380376e812fada6c5c2ecb258aff1cae26c59bc4e39a2f740054d459fae40483140daeb59f2f84f657d7f08eb05dd5af28abd34b8e4d6174bc284b8e51372b065c89a86cb154546596324bd1e444b2ac05d6a65dc44df42e1e79aa3ae6aa0945b2a8eea5c0e64e3286161d08c242f0c95bd5a9deb02c84285eaf39f3bea208c7a0283e182323385c419844c92f79f2e0e49b71414d3d265b62518555de71da224f67a3ea6a25a94a0cabfa980895642d08e204cfb156b47f09fd9b80384a8efc25fb9c9f3d4291d4faf295c66b111e54469", 0xf1}, {&(0x7f0000003400)="8f6d6e6bc6bdff2ad4106b965906571807109c8d9a7ab5182b99d58c4ceae7169caf429609e02480eeff8be19c89a63e9924d87d2fed7c1cf6dc7638fd6588479b6c7211ca", 0x45}, {&(0x7f0000003480)="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", 0x1000}], 0x8, &(0x7f0000006200)=ANY=[@ANYBLOB="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"], 0x1188}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f00000056c0)}], 0x1, &(0x7f0000005740)=[{0xb8, 0x10e, 0xff, "9a797980a7f9fea43f76e7bece91105649b0511432046149be3b3a48ffe54b11fbfaa07d2a6c1107e74b7ac334730b9f826f5698aaecc6ba541c0b7a6a68be043b54825496f02028b0e1467bc8af641ce5b23857ae80ca5e27c55098c9c1ab0013897dcdad133614d6dda69f671bff2ee249d27734104bd6491e6b93d40d8895ce85830cd6866ae44d0a7f3b5416690b6ce777279be3b7f67417d978ed9fcdbf9d96d0c941"}, {0xc8, 0x8b, 0x9, "15ad28b36a358d01c0bcf4688bfee73b7ba6f7d2b588394a8dba77df7cf8f946c734af98787aad2a18f44cbfe57bd273c6b7538ec2c2f76a08bcc8325384f01a8cb2f488c600a88ed23e7863070b4587a4818d847d55c4a79304bec6861b2e4dddee7e38b6a8c6d666d0109928743f888151fde5a2480c1b81d5f2ac052cf9f08670ec5d3b3d23a2bba15c263c43e6982f75317e613d349590c99f112af09dbfb3b93cb8feba713df220f29a3feddc892feaf38c589a"}], 0x180}}, {{&(0x7f00000058c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}}}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005940)="93b7c34a515534f8a21c15fd4e15b331c73d4cc70fc36973555feee5880a23837b83804f459cc0a17e6a82101bc642784bedd2ef28b9a5818794e9aac95b8528424dae733457d42b68e606269e0e18bf868bf9913cb542e619aa528df540f9f16ddbae6e848bbe8980abc1b5ea05e401f6a2fedaaf7bdd6138027ebdd003fe3150a7a7705cc76aeb32503eda384bf0cc59c0a882253999bf1ca364e49b5daabe5ce57dfb2bb3dd78464a45f5a8b262a61c479e4f44aba46a1d66adb7e1f775a2300b843148e3ef3ef0", 0xc9}, {&(0x7f0000005a40)="3d4a93d48e5c1dcaef9eaa02023f1dc72f5bd17b0132a0bebb58513f6040c47c9c412a83af3b9d9a70eb796fd929aa138e2aec6b6bc37229ae14a5ba19e9d4d6e8afc37c625c796f4a64dfb2", 0x4c}, {&(0x7f0000005ac0)="4b1224f259d12e594bf5f10c3beb896f39bcd2288e17509008e5142244ad54f1ecf468d1c2b4a0033bfb94a11da82377", 0x30}, {&(0x7f0000005b00)="735ea12fec7c33d2eda5f5a9ec70f1759a40dc3334fa0ced9cf9fcc7d205f72acefab12ad016fa8272f90526a2946a733f2f8fb01ade56a77424296cb1", 0x3d}, {&(0x7f0000005b40)="b0294a44f36755d899ddb2e9a4cd9dfa435bd51588dbd5a92ab44ccf98edab9c0538919b5de10337f9641dc7d7ca73fd76093a200565d560daf1470ce4e56e89be4b09011c1d5abd2377c0", 0x4b}], 0x5, &(0x7f0000005c40)=[{0x30, 0x1, 0x3, "989b88732b7b036d7f7437a28ec6faff3fea6fd67242ded975c013"}, {0x28, 0x103, 0x3f, "499c295e8bb60d689bf12eea04dd602f82"}, {0x108, 0x3a, 0x4, "637c77a4d11362f086834a2f2edfb8a214a16b5b473507f9c3f3bb412dd299b5fea0ba6bf71958cc857931322e7c55dc71b4adff9fce07061664793ed268cb8fc20aa73a85a4a7627d28fa43bd7661f158ebad5b0f1bae497e317a15b3ba23f0648737bd5aadec8a1c619f4298fc29fcb812177b72bc73f377f8b828be2a0402c4b90f42dbb5bac9e6cfa7c5901890445e9f5c8e2ea48d73143f09e26cc1c17910df7cc2cf57ff6dac39fab4e0b3c112f3c6cab5e96dbb0ef2b07179e4c4a855c8ff1cf166df53b06fffe5740469dbb43eed58c7d9ae2cdc59b59eba7ad8778534b4cb1af541809107b2c81f5969cba79fcf4b"}, {0xf0, 0x111, 0x80, "e1ea1e501babc356827dd2ab2abbcaaeeb338144a700a38e632326410688801f19e2d81e089d72b8b735608d2b2da64173dfa9b44896e384c390f7a2e047d3376fc6458b95ae624a6a638fd4c4a2b11a92def256b95e78fe7891d774f034cab24c7ac725692e38aac5990e3a5f29d5fed14556732c262b6fa02a209d9ad63919d11f30b3b8b9e61a14226475ecfbabcffaacb12900b876f596fd1ac9b4b32c118d0b31a454b9fc9e3e9de4550465dfbbc6a0b273e7350e868e1dc618505c55d7ea7fa5dd010099960553e617c7517ea25b3e6cccb9ebaa3a29c6"}, {0x78, 0x88, 0x1, "dee7bd77b796a1f1733d954c0c7f3f186c4abbb10d189e7f335b13b384b5b9d119d2f5ce51ff17bc14d09b23a4393fa10272ade6cc9d7b465365375e5ffd48148018c606b2ed3c05c86a8eef541bfce11233cc30100f538cb7df6406450cc691320de2"}, {0xb8, 0x117, 0x5, "a6bb17a383ff4b9dacf4708ba57e0e569727cdc16984fbdb06a2d0ed6cc7eee6236d9e36326db955506832c28bfd71ffc16a457ff8f4195b52cb172c158b86cc2f5286c0ec31799ca24754c63b910453ebafa55fd873bff75d872b151d6a79b98db47067461c7017f908bf89cf1f4dd870ce942199a3f0bd08b04d855190fd962050bd748c0dfe0c0fd5f1568067144eaea76ea57420f86ebe6ad3af737cc7e06409a7"}, {0x100, 0x109, 0x5, "4d74c9ce4f9617d9f6f4acc1f95141464fd97d399f278c28c5a540cae4db6469989a3f959f1ff4b3e1accc41a2e52208a424b726d6f6415c717ba46c67147c4d9f43bb6e113d62a33b7ff83069bc585e7f34518d674d7dff43c40c45f563561aed3fc3be517e6e2501d2f7c867bf1f77d8ff53fe97cb5b248cab3de18f22ef074e9f0ceec1e057ed67ce47817d0e73356aa72547584eca4388ecbb3c9a9f4e9bdbd11261deb5d12b4fc04d6144f86e5819845b0d4a28a3d8694a34e89252de6198319e22bbec1a2ddf2bab7723debe5a1575c00496fa04c1c3c38d58dee9665671c0b04fd936d889af7173f80a"}], 0x480}}], 0x5, 0x800) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000000c0)={0x4, 0x1, 0x6, 0x7}) r6 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:48 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 10:14:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) io_uring_enter(r6, 0x6592, 0x4, 0x1, 0x0, 0x0) [ 265.249894][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.251194][ T7299] ovl_get_fh: 1 callbacks suppressed [ 265.251203][ T7299] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.264122][ T7303] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 10:14:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x17, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:48 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) [ 265.281946][ T7298] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x18, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r0, 0xa, 0x12) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r0, r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:49 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 265.338331][ T7325] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.350185][ T7324] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.383187][ T7342] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.419091][ T7351] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 265.706773][ T3044] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 265.976757][ T3044] usb 5-1: device descriptor read/64, error 18 [ 266.366693][ T3044] usb 5-1: device descriptor read/64, error 18 [ 266.636677][ T3044] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 266.906674][ T3044] usb 5-1: device descriptor read/64, error 18 [ 267.296610][ T3044] usb 5-1: device descriptor read/64, error 18 [ 267.416687][ T3044] usb usb5-port1: attempt power cycle [ 268.126553][ T3044] usb 5-1: new high-speed USB device number 95 using dummy_hcd 10:14:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:51 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:14:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000480)="80", 0x1, 0xfffffffffffffffd) keyctl$unlink(0x9, r7, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000480)="80", 0x1, 0xfffffffffffffffd) keyctl$unlink(0x9, r8, 0xfffffffffffffffd) r9 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000480)="80", 0x1, 0xfffffffffffffffd) keyctl$unlink(0x9, r9, 0xfffffffffffffffd) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r8, r9}, &(0x7f0000000180), 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={'blake2s-160-x86\x00'}, &(0x7f0000000200)="603b337a78815621c1fcf7be7ef676b461c0fbe8fe35bddfad01d5ee80c3f9f57ecd925c18dc82110ca0e060f37e1c4248230aba41875c2d1fcf991c6f12cab59e46f4cc041c66788db3b98b2da7bcd3fedfbc4f5d0eb49f5c8025a7bb010c7c415a7b01537879b93375c0459c20d62c6b9f94fe373ebf0806ba0802721408a8f728bb9ba2e211003e4dec60924cedcbe166e6659252319466224edfd79c6f93b993a330fade23ef1a79479d9a24c6b0a8ccde94c5ca0f35c363d170eaef1e0b46ebd0980ca582a8af", 0xc9}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 268.226556][ T3044] usb 5-1: Invalid ep0 maxpacket: 0 10:14:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x24, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x25, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 268.256939][ T7366] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:51 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:14:52 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000180)=""/122) syz_io_uring_complete(r5) syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x6, 0x4, 0x1, {0x0, r4, r0}}, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 268.301130][ T7393] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 268.596446][ T3044] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 268.806531][ T3044] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.819460][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 268.829075][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.838017][ T3044] usb 5-1: config 0 descriptor?? [ 268.876947][ T3044] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 269.077799][ T3044] usb 5-1: USB disconnect, device number 96 [ 269.646362][ T3044] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 270.016398][ T3044] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.029200][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 270.038238][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.046855][ T3044] usb 5-1: config 0 descriptor?? [ 270.086760][ T3044] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 10:14:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:55 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:55 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:14:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x36, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r7) r8 = syz_io_uring_complete(r7) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "f7fb98c89334d55a8dcbf8be67792ea4a2f79f174a7576450dbf58a240256d14e695d9d7f4690eb45dea23b849408a1b523c692510b92f3b7c1544537ee15e979214137a9ebec86fbc1661f913442e8c79875441c45f816c780393b1a89cac171b9897e528ebcf827da3591b48370f6028cf"}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x401d1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd_index=0x3, 0x8, 0x4, 0x1, 0x11, 0x0, {0x1, r6}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) getcwd(&(0x7f0000000240)=""/24, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000280)={0x20000018}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc) ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f0000000200)={0x2, 0x8, [], 0x1, &(0x7f00000001c0)=[0x0]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="fc72d83112ad3d911d91c40000000000", @ANYRESDEC=0x0, @ANYBLOB="3a12f6e47115f5999d313bbb6a4d1b733187870c2fa47e426d7378"]) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 271.982413][ T3044] usb 5-1: USB disconnect, device number 97 10:14:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3a, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:55 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1020, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:55 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 272.024297][ T7450] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:55 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 272.072982][ T7478] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 272.406091][ T3044] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 272.766079][ T3044] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.779119][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 272.788819][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.797706][ T3044] usb 5-1: config 0 descriptor?? [ 272.836523][ T3044] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 273.037169][ T3050] usb 5-1: USB disconnect, device number 98 [ 273.515921][ T3050] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 273.875961][ T3050] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.889098][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 273.898125][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.906694][ T3050] usb 5-1: config 0 descriptor?? [ 273.946442][ T3050] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 10:14:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:14:59 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:14:59 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1100, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:59 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0xe, 0x7, 0x1, {{0x1, '!'}, 0xfffffff7}}, 0xe) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:59 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 275.841250][ T3050] usb 5-1: USB disconnect, device number 99 10:14:59 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:14:59 executing program 2: r0 = epoll_create1(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=r1, 0x4) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair(0x18, 0x80000, 0x6, &(0x7f0000001200)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x15c, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x8d9d}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff69}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x681}}]}, 0x15c}}, 0x4000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x108, r9, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x108}}, 0x48004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'team0\x00', 0x0}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x801) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x16c, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x91}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x393}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x104c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x164, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x5}, 0x4000) dup(r6) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:14:59 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1200, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:59 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf4, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:14:59 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 275.878359][ T7514] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:14:59 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 276.245597][ T3050] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 276.605689][ T3050] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 276.618494][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 276.628288][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.637129][ T3050] usb 5-1: config 0 descriptor?? [ 276.676055][ T3050] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 276.876610][ T3050] usb 5-1: USB disconnect, device number 100 [ 277.345518][ T3050] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 277.705536][ T3050] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.718332][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 277.727947][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.736826][ T3050] usb 5-1: config 0 descriptor?? [ 277.775880][ T3050] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 10:15:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1300, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:03 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf5, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:03 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x138, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2d, 0x3, "af86a7d1fedea8701df0c5107fff7063a3bb74c1cc7072b64b9de78ab1b0605e571a491550d69ee436"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "20087e9af7ab331c2a8120b95c0036679601a1f876a21b6269eafddd08ff255b92ad"}}, @TIPC_NLA_NODE_ID={0x21, 0x3, "dbebbfc26d474633f98740c4b4679540f58009684340f9489b6847eb06"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe8f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x84}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r10, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) io_uring_enter(r10, 0x1, 0x55ae, 0x2, 0x0, 0x0) 10:15:03 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf6, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1400, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:03 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r2 = gettid() tkill(r2, 0x12) setpgid(r1, r2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, r9, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xb0, r9, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') r11 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) [ 279.671459][ T3044] usb 5-1: USB disconnect, device number 101 10:15:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf7, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:03 executing program 1: unshare(0x20000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 279.827422][ T7628] tipc: Enabling of bearer rejected, failed to enable media [ 280.075189][ T3044] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 280.435187][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.446110][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.456442][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 280.465857][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.474409][ T3044] usb 5-1: config 0 descriptor?? [ 280.515733][ T3044] usbhid 5-1:0.0: can't add hid device: -22 [ 280.521706][ T3044] usbhid: probe of 5-1:0.0 failed with error -22 [ 280.718150][ T3044] usb 5-1: USB disconnect, device number 102 [ 281.305070][ T3044] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 281.665105][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.676112][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.685863][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 281.694868][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.703704][ T3044] usb 5-1: config 0 descriptor?? [ 281.745689][ T3044] usbhid 5-1:0.0: can't add hid device: -22 [ 281.751672][ T3044] usbhid: probe of 5-1:0.0 failed with error -22 10:15:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf9, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:07 executing program 1: unshare(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x1ff) fcntl$setsig(r5, 0xa, 0x12) dup2(r5, r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00a22d037000bfdbdf250700000005006584497d530ef3d13900ff00000008000b0001000000f745330001000080feb43e7eb7165a2db6b9966b925056a5c5ba0e492ecfe30445371882f5d9c8872747dfeb051c9bfba27b15a9fac5ee7d63e89f2dac7a2e05c8c57f793ab0104b5db2a45538b7d9e3912118ddd74a899e90df4f6cd41b4a17e088"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x1) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0x2, 0x800, 0x3, 0x7a200d9c, 0x8}) dup2(r7, r8) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) io_uring_enter(r2, 0x1, 0x3, 0x0, 0x0, 0x0) 10:15:07 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='9!\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000000000008000000140006006c6f0000000000000000000000000000050001000000000014000600766c616e300000000000000000000000080004007f00000108000400ac1414aa"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x40001) r5 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000340)=r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000100000000000000000400", @ANYRES32=r7, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_uring_enter(r8, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:07 executing program 1: unshare(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfb, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2010, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:07 executing program 1: unshare(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 283.641168][ T3050] usb 5-1: USB disconnect, device number 103 10:15:07 executing program 1: unshare(0x20000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfd, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 284.064728][ T3050] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 284.424751][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.435670][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.445614][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 284.454766][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.465157][ T3050] usb 5-1: config 0 descriptor?? [ 284.505316][ T3050] usbhid 5-1:0.0: can't add hid device: -22 [ 284.511300][ T3050] usbhid: probe of 5-1:0.0 failed with error -22 [ 284.721837][ T3050] usb 5-1: USB disconnect, device number 104 [ 285.274591][ T3050] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 285.634640][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.645517][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.655257][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 285.664400][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.674538][ T3050] usb 5-1: config 0 descriptor?? [ 285.715128][ T3050] usbhid 5-1:0.0: can't add hid device: -22 [ 285.721279][ T3050] usbhid: probe of 5-1:0.0 failed with error -22 10:15:11 executing program 1: unshare(0x20000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2200, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x103, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:11 executing program 2: r0 = epoll_create1(0x74af384e820fea36) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r5, 0x0) ftruncate(r5, 0x40) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xff}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffff001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48411}, 0x44803) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={r12, 0x1, 0x6, @broadcast}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000583d2ccfd83594658741fc", @ANYRES16=r7, @ANYBLOB="050900000000fddbdf250100000004000180040001802800018008000700", @ANYRES32=r12, @ANYBLOB="060001000200000014000400fc0100"/28], 0x44}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x408, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r13 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2400, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 287.611148][ T3044] usb 5-1: USB disconnect, device number 105 10:15:11 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, r0) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000180)) 10:15:11 executing program 1: unshare(0x20000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:15:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x105, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:11 executing program 1: unshare(0x20000400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:15:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26ed, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 287.645764][ T7718] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 287.669224][ T7721] device syz_tun entered promiscuous mode [ 287.682019][ T7715] device syz_tun left promiscuous mode 10:15:11 executing program 1: unshare(0x20000400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:15:11 executing program 1: unshare(0x20000400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:15:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, 0x0) 10:15:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26ee, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 287.709988][ T7747] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 287.768155][ T7776] device syz_tun entered promiscuous mode [ 287.777252][ T7715] device syz_tun left promiscuous mode [ 288.044392][ T3044] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 288.414314][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.425219][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.435006][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 288.444020][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.452802][ T3044] usb 5-1: config 0 descriptor?? [ 288.494894][ T3044] usbhid 5-1:0.0: can't add hid device: -22 [ 288.500887][ T3044] usbhid: probe of 5-1:0.0 failed with error -22 [ 288.695600][ T3050] usb 5-1: USB disconnect, device number 106 [ 289.304141][ T3050] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 289.664185][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.675068][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.685526][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 289.694892][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.703420][ T3050] usb 5-1: config 0 descriptor?? [ 289.744776][ T3050] usbhid 5-1:0.0: can't add hid device: -22 [ 289.750770][ T3050] usbhid: probe of 5-1:0.0 failed with error -22 10:15:15 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:15:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x107, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @local}, 'syzkaller1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'syzkaller1\x00'}) 10:15:15 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x80\x96o\xd6Q\xb9Y\xa9\xc8\xff\x0f\x00\x00\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x140, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x972d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62394eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c59c968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cf}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb87cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34679816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2007}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f6cb5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0541d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39075d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x546dcc37}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a2ea6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5782d45f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354dd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83c0d4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddffda1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r7, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c49}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x582) write$P9_RWRITE(r7, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xff}, 0xb) 10:15:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x109, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 291.640450][ T3044] usb 5-1: USB disconnect, device number 107 [ 291.672807][ T7797] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:15 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10b, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x80000010) [ 291.711860][ T7824] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 291.745423][ T7839] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 291.798692][ T7853] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 291.820459][ T7857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 292.043824][ T3044] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 292.413891][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.424888][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.434643][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 292.443653][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.452370][ T3044] usb 5-1: config 0 descriptor?? [ 292.894548][ T7804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.983760][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 292.989738][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 292.997817][ T3044] usb 5-1: USB disconnect, device number 108 10:15:17 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:15:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x186, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:17 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="39d464e302000000d201"], 0x30) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 10:15:17 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0xffffff80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x8c001, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x9, 0xca}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x16c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x91}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x393}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x104c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2d8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xfffe}, {0x5}, {0x6, 0x11, 0xfffb}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x84c}, {0x5}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x996}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xbfb}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xce}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x7}, {0x6, 0x11, 0x74}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8001}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3b8c}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xd4a2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x76}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x9d49}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x27b}, {0x8, 0xb, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6a89}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000580)={0x1, 0x0, 0x6, 0x16, 0x175, &(0x7f0000000180)}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r8, 0x0) ftruncate(r8, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0800df25ae030000000c00990088005901000000000000000008000000000000000000000000001d86c4578b0cf9b1a2c2f480949f5540982c4a696e5cc5ff81a5c7a8878d584e5b1a8278c9784b3af66f41f945ca75d05aed31d0190c11fb037c08dc09bf87b6d3e02bf0c8211c122d2d5ac5e24dd0e89cb3c3e7379393c9cb34d61832c897230782dd31f545b9627cc2d5e942ad968c9c651416506e73d60e7bd8c3d2417f5f1478a594e7ba4a3004936f43a3afdb960aa8b7649cc10a3412f3ba29b987e11c8c92ff9aaf6caceb3d25262217f6"], 0x2c}, 0x1, 0x0, 0x0, 0x4110}, 0x4044814) 10:15:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x1d0, 0xc8, 0x36010000, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 10:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x100001ff) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6e00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x4000001000000009) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) [ 293.433518][ T7872] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6f00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 293.494742][ T7912] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 293.693642][ T3050] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 294.053682][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.064617][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.074396][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 294.083436][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.093165][ T3050] usb 5-1: config 0 descriptor?? [ 294.534335][ T7881] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 294.623601][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 294.629599][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 294.637705][ T3050] usb 5-1: USB disconnect, device number 109 10:15:18 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:15:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x301, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:18 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8004, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:18 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000208000406b1d01014000010203010902920003010000000904000000010100000a2401000000020179fa0c0f020000000000000040000d240700ff02000000000000000c24507de9ffffff1600ffff0924030100050005"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x408, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 295.066732][ T7946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.073147][ T7944] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8f03, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x480, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 295.109142][ T7962] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 295.110227][ T7943] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4f5, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9103, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 295.163306][ T7974] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 295.165624][ T7975] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 295.248186][ T7999] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 295.363464][ T3044] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 295.584718][ T8008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.723483][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.735310][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.745739][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 295.754815][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.763928][ T3044] usb 5-1: config 0 descriptor?? [ 296.203998][ T7948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.303396][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 296.309397][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 296.317022][ T3044] usb 5-1: USB disconnect, device number 110 10:15:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xed26, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:20 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x500, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4007, @fd_index, 0x3ff, 0x0, 0x0, 0xa, 0x1, {0x2}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = dup(r6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/168) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r10, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) fcntl$F_SET_RW_HINT(r10, 0x40c, &(0x7f00000002c0)) write$P9_RUNLINKAT(r9, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) ioctl$int_in(r8, 0x5421, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 296.734795][ T8019] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 296.760634][ T8031] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 296.993281][ T3044] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 297.353314][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.364240][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.374005][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 297.383035][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.391759][ T3044] usb 5-1: config 0 descriptor?? [ 297.733221][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 297.739312][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.746973][ T3044] usb 5-1: USB disconnect, device number 111 10:15:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:21 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2180}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xedc0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x501, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xee26, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 298.091664][ T8047] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x600, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf504, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:22 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x28ac, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000002c0)={r11, 0x101, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r11) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r11, 0x100, 0x6}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x701, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 298.613133][ T3050] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 298.973122][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.984020][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.994388][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 299.003760][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.012333][ T3050] usb 5-1: config 0 descriptor?? [ 299.363060][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 299.369122][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 299.376707][ T3050] usb 5-1: USB disconnect, device number 112 10:15:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff01, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x804, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$CHAR_RAW_BSZSET(r6, 0x40081271, &(0x7f00000000c0)) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x6}, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) open(&(0x7f00000000c0)='./file0\x00', 0x5d1000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400204) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r7, 0x10000000) 10:15:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff03, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0f, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x900, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 301.095285][ T8126] ovl_get_fh: 3 callbacks suppressed [ 301.095294][ T8126] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7ff00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 301.139927][ T8158] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 301.163485][ T8174] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 301.352810][ T3044] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 301.712814][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.724682][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.735292][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 301.744689][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.753719][ T3044] usb 5-1: config 0 descriptor?? [ 302.102794][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 302.108742][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 302.116702][ T3044] usb 5-1: USB disconnect, device number 113 10:15:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x901, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80040, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r4, 0x0) ftruncate(r4, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000380)={'bond_slave_0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x1100}}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x1d1040) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r6, 0x0) ftruncate(r6, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r7 = dup(0xffffffffffffffff) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b000000009060104000000000031316b0605a9450231b7db000500001d00000000000504000880080009400000000108000940000000000908020073797a3100000000100007800c00028008000140ac14143605000100070000005c00078005001500b60000000c00018008000140ac14144018000180140002400000a299967778f891680000000400000000000000657468305f766c716e0000000000000900130073797a30230000"], 0xb0}, 0x1, 0x0, 0x0, 0x4110}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffff6) 10:15:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) sendto$inet(r5, &(0x7f0000000180)="4eab86c563058efde6a6a4a4b47e7b5b78e372b3585e9aa759b643e715efc09d1b3ef6a870d924a8a19b28a5e98dc2c3828f936b30cd0ac42b2685ffaca98287f36d6df5e985272a24a992941884b27d5dfcd46717631652e6bfe628418badf48c412fd770b869381acceed8e9941639796af2", 0x73, 0xace4c910adaa3b39, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x100000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1fffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x4}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = gettid() tkill(r9, 0x16) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r11, 0x0) sendmsg$nl_generic(r8, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f00000001c0)={0x1590, 0x23, 0x20, 0x70bd2b, 0x25dfdbff, {0x1e}, [@typed={0x8, 0x12, 0x0, 0x0, @pid=r9}, @generic="39e722be7c5246d55e20de730b", @nested={0x1a4, 0x5a, 0x0, 0x1, [@generic="7301a289f309857d7ec4e3d8ebddf6dcb5e3931c18cd58841fe7b2ba9b7d5af0041f1da525d822a9393fba702ba96e49fd677d9878886700aa27409922f0740f866de32a8621f913449a6804e745236eaf67e76e2991b0aa697cf129ad9fb942af1688d5f35719552ff3c607126bb6aeb707338b93ccf532be1c177e01d9974c8b2f1d6d1a464ff77dd867eda4554788", @generic="9a2c8d08ab4409ae8144d90d8e55ace3cd38e0d3ae3d4a8de1d77f58d0b321e713221bf95581c2ff4ff52ff7ce937d274eaa093c7d90db969934a403944b024791605b844737336264da4ee278fe94e986ed3c4e5d2f1e57eda098532ce60e598e60bc81d31dd71768e265ca764af11f631cf6167dd89d0cd169b270b9d9a73f93cac7ba48677ca4", @generic="9f6b7c2abc06d2fb9080aae6e40455960bb7cf6d67c97d37b0741c85f33204ac28229c703c8e742bcb345ba1d0e0a329d0dc1dbc2c4f0e26e0d7b5c45faae999a5dec3935c3c44299acd1e3ec522510262893d100b388602e0bd8a06cf0e6ac66bd6992a5e8fcdd2dd8c4b19bb216f313934b305b3c4cb59cd033fe57ae3a0cb0f356202407f749d"]}, @generic="ef21d01514cd86f60989f31f5096a0b4789af1f4d518ef05f0f72509be82583ddb4141e9", @nested={0x1399, 0x43, 0x0, 0x1, [@generic="f2301b1a8348cd5c749579d814a36084e1ff747e68e95e1817f6bd6f443cdb40080dc3d6b25523c7afea5cc307b588fa1db47bbac152825ed20e5eda32ec889b7f9a1d8c43439c1ecd31ca24b541d992c763203283a9f8fd2245a2b6898e87908f6730e3490a73167844e95b3f4370854a8286427be347d9ff9fd2191b29b54040ba43debf46205893a35e9b999c4b88df765bc157b074099dadb9b5d0f861a0abf367a95ab53011a8ab19fd4577fbb7d810693e16c2d71734d388b38cb3de12e440bfa19730", @generic="6c119da8ea6128c339bf9c4a706a1124489f4672736fc4a963802c9da2794e23de2312179db31f2e49a8fb08a382d1e52ae326d5005a16738dcc19c21204f2b8c1205f7b4cd90d0d7a4ab3a31e755a651fda838795e739926f54216136213febc53307fd25145a99d8c0e4bec6773ec0046c1fc257aab7f2ec48f9e110fd8b9a4f9f3a71cb212c9f13e620d3d4a4f7a21569fe871a1b27753f61b41b0a96344b7f75c00e762f1fe4bc4d3e3cd76a2f984b61c172a726d54fc1cd7861deff3df07d786f26ed", @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x44}}, @typed={0x7, 0x7f, 0x0, 0x0, @str='}:\x00'}, @generic="1dc89ff1777ca7e0fbacd97aa53702e2682e2a836c5608e2c05d7ccee63e60c69c22d6fd52d3fbcea2fd53f886b593abf266dd0c95c5712633a19137d6297c2ee16929e225087a8a05e2d25a987054af7176fde1f7708b50a741d2cd86de5dbfbc0106da5eeca41d42dc4df4239213902ea12444ab85090aa78422a75840ab320a16c9a8b29eaf4c8daed8d4c4b66f64c9c2ee780033ebf8dc90ede38c79c72f2162fd6f2991135dba2e6968a031188d1ced7da1e79efd26e9beca9e7a22ae2a09", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @typed={0x8, 0x83, 0x0, 0x0, @uid=r11}, @generic="69aa434b776d8e9599d7ce0a2042b61f97392eab33ed86f902c3951e09ff1e0def7f7d507cb6407260028adc91262ede66c3d1d958d34f0c5338d08c2fb7e2b7e0ee73c4105f91b2195d18a8a346f841eefde2d06aa0b7365df4e7bd5099bb99d989f3d3d3c2ffb800519f68697b67582f2dd4e6d2af5ea867acae7ad64da64f23ad3c353cfda394f901ed09747592", @generic="148eb421a66fb696fef04ec2cd1c6c47fe3f58cce0b9f65fd79cb5418b2be2abfe44f0b7fb5dc7572e7cd9d58b85ede745074434ec557401a793b93a90e92dab1b9a6c19bb48a2247854a89007a1d48fee57ae576a75b712e2a52f560a31cb61bf8003a39993cf96084919e80d8c69a4a6608926a1288e57393fd4e28a41b95740b617c9ca60a50c94bed904107d"]}]}, 0x1590}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 304.100572][ T8199] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x200000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 304.145946][ T8228] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 304.166826][ T8242] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 304.198986][ T8252] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 304.382448][ T3050] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 304.742502][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.753427][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.763767][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 304.773461][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.782179][ T3050] usb 5-1: config 0 descriptor?? [ 305.122397][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 305.128394][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 305.136423][ T3050] usb 5-1: USB disconnect, device number 114 [ 305.602320][ T3050] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 305.962333][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.973288][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.983987][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 305.993351][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.001915][ T3050] usb 5-1: config 0 descriptor?? [ 306.542301][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 306.548300][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 306.555548][ T3050] usb 5-1: USB disconnect, device number 115 10:15:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb01, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$unix(r6, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r7) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000180)=""/109, &(0x7f0000000000)=0x6d) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) 10:15:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f00000000c0)=0x8, 0x4) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 307.119335][ T8281] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 307.131459][ T8280] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r7, 0x0) ftruncate(r7, 0x40) fstat(r7, &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r8, 0x0) ftruncate(r8, 0x40) sendfile(r8, r2, &(0x7f00000000c0)=0x480, 0xff) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 307.177465][ T8299] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 307.207267][ T8308] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:15:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76ce, &(0x7f00000002c0)={0x0, 0xaa0b, 0x0, 0x20, 0x40000, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x8, 0x80}) signalfd(r6, &(0x7f0000000080)={[0x2]}, 0x8) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r9, 0x8018456f, &(0x7f0000000180)=""/80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r12, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf25170000000c00018008000300010000002800018008000100d1c4c60f59e1cb86c406fefd8e586ebabdc78968c2333dda91c84e734ff32bfff8f954504d695cfd31795134619032ae1cc6ccd5609c1791f5dfb486194c108fefec158ee5ca818dd8c7e27d19bbdfc466750a952b1d27d4d6030a9f0cea786c03ca5b29123930a1f7c62a02fcb97377e0d88fb74c816e", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020062726964676530000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x840) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 307.269082][ T8321] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x532a, 0x0, 0x0, 0x40001, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) read(r5, &(0x7f0000000180)=""/83, 0x53) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) 10:15:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 307.308454][ T8325] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 307.330395][ T8333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.345808][ T8334] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 307.348969][ T22] audit: type=1400 audit(1598004931.001:10): avc: denied { create } for pid=8336 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 307.382715][ T3044] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 307.392642][ T8333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.401617][ T8351] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 307.752152][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.763162][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.773545][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 307.782916][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.791462][ T3044] usb 5-1: config 0 descriptor?? [ 308.132065][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 308.138046][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 308.145297][ T3044] usb 5-1: USB disconnect, device number 116 [ 308.601985][ T3044] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 308.961998][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.973573][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.983974][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 308.993373][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.001957][ T3044] usb 5-1: config 0 descriptor?? [ 309.561931][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 309.568029][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 309.576082][ T3044] usb 5-1: USB disconnect, device number 117 10:15:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:33 executing program 2: r0 = epoll_create1(0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/24, 0x18) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) r9 = syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xa47, 0xa, &(0x7f0000001900)=[{&(0x7f0000000200)="271c990421eb92687c7c57c4808397d6938f319e1ffad5287d2768159123db82b0105a722b52ed0d54fba12b6d0e4aa3addcb62f37467dab232fc11836731cdc7e0ae0dfcd1c1d154a", 0x49, 0x400}, {&(0x7f0000000280)="646af43e590a8828b7b8f3710c440967158691dc43fa0f74a7f0efc91d87bb9e9d1be62a9655686acaaa2968a648623b5f5266f1f943af82faf48c43bf058f5d81d8b06b9c30db28d443d5754bbd837c932935ff16848ba976b4798f03c55e62f44bc0dab4144afb300a4ad978151ffb7cc9990108778222d442db580b90ac57da16dd2fb9c0aeaafe2b537f5cdfdad2de58f57d62cea1a8fcbaa008dfb14db47274db9147cc9ccd8bd2aeb8a3a9075f95a25fbb4dfedb34b163bb839c57fce4928e18", 0xc3, 0x8}, {&(0x7f0000000380)="a8412b0b749aab062e169549c1ea50af82099b919a208d56d2aab41f4f85026795bfc1bcdeb96aa7ee28904c2003c419a48e3730ecdead6f17ded5165c23761eb3baea0db269cdd3b80d84ef80f567c39a662ec2d5501c8a3b49b52edae81839a25227d01e62f342f8cd42e72b7eaffd4849062e7616555e906c95c96a154c60a871fb66d2bb6780a05a3739677ebcb21265c1b936104e58f04458f84f126e7cb3771d5b34191fbcd4289ce851258df859be296c411ff4761eea4e720a38b83690fa36688eded02b4a3fc0ec", 0xcc, 0x5}, {&(0x7f0000000480)="7470cfb293de0eca725d9195124986d3613f257c54f1f54c27910243", 0x1c, 0x1}, {&(0x7f00000004c0)="63a0426ca6c56bdefe0d8dcdbccdf8f3aabd9015871687d6049a84f4c29ad11911f757682889638b0d5fe71d226da5b3fd9a02b1dc193e7b1c87ad473a1f769607e8a47e02ba4138342d20f1d75e4d85e2cf5ba9465193b3e7f6a24b917e9ce407edce8d350216e90bf8e776e9ded22fc348dc28570a2a7b148547edf5d4acd4922b8876796517ec96e6706525843956f5227aad81df5babae5b52b155c32a36265cbffa64bf621f37b0241ea9ca214b96e034333f686cf7025d45d0ffd8fad13506e66b7e05521bcfb66000068ca7a1715a68182dfef5052c447a5000", 0xdd, 0x3}, {&(0x7f00000005c0)="6f9c14430e46404c71a0f104f8e893f593561cd4460fa14c4b31c334713d2ea6099723c10d8e70e1f0f5c5faa7fca14ae328e83f21d965995e6824d20988ed4ad535c185015719e1d39c6db0710675ba36ca325f45ae68c7cf70221727d92b4a7d78e6ca4eca4050f1417f0b3867a3f27dddeef39cefb0bd48d442e013fb9efeb93c7e9d808f38ce56051947ea350363d7f7ec67988d01820783ff5f8695f29148a68f2de2a94508a9d48e177b815419c39a68db063b74a7961162e6c60c014fc4dd02d2ca61153dbe082cf70adf6944e9e5b5c9e3d21652e07e1a3dd5d229ea6219508530a4af", 0xe7, 0x40}, {&(0x7f00000006c0)="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", 0x1000, 0x1}, {&(0x7f00000016c0)="5eb574313280580f3477793d98142545a44c3de10fb743298206b42a2b4920933629cf1e5d0f9d5d4eb606b5457b34c5aa366a1f0054ffabc536c632a2f0ecf7b8fe7e6ae6e5cc5738201faa6fccab5f8f223e0332ff9bb59df16367c532d162b011d6596a3e9406f1cd12488f0e374de6d5c53a5324a462fffe7343b704d531fc430658c207d195b036dea1ca9f5ac0e5613dad75b2876ed3dbd8f7704d34492622378cc1c146456dc5426de37b930984d85ff44093c599727c796b6d0dce6e402e9bd22a", 0xc5, 0x8}, {&(0x7f00000017c0)="409ca31dd63f20adf7841c66577c5ed467b1fdbe030b0bf682aca1ce60d3327a47bb6fcf23836bdd21aa08456b3664efecfb0f672fe7a17902b53edcc3bc135f711ccc1ea6e97f344bb9a0dfc7891b9573fc0bb23e95e83c3db5e612668fe2c5a5883a9f4fb52af605fef2676ed3a15528777b7c9d7ca2b9e25ea47558496792154cfa6a1d99b09fa9e58589f1a170ea2f7e8b4730eaa4f49e9a69f29f1f6c91c9f8f586ab49520db64d899ad527249d5ae54cba8130b3ef6b15a8f339285dd62fd712fde77f2eaca346934f965926f90476702dad71846f070271e369b28060c1", 0xe1, 0x8}, {&(0x7f00000018c0)="35cfb82a9681820f6c482198197647d6f875668a3304f8e0c8b1ff", 0x1b, 0x100000001}], 0x2021000, &(0x7f0000001a00)=ANY=[@ANYBLOB='errors=continue,nodots,nodots,nodots,flush,nocase,discard,nodots,smackfstransmute=\'$[:,/,subj_role=*:+,obj_type=^),measure,dsname=,euid<', @ANYRESDEC=r8, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', 0x800, 0x200, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r12, 0x0, r14) fchownat(r9, &(0x7f0000001ac0)='./file0\x00', r10, r12, 0x1000) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000180)) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000000c0)={0x2, 0x200, 0x7, 0xb8, 0x3, 0x6}) 10:15:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x6, 0x3) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "aa8dae76b71ea83c", "4431ef198e5184e285cebb3f0abe61e5", "979d86ea", "e2c5de2504609223"}, 0x28) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1020, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1100, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 310.172357][ T8381] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 310.191015][ T8386] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)={{0x107, 0x1, 0x1, 0xc, 0x72, 0x100, 0x14a, 0x1f}, "8249012381e64324079bdcd5eafb1652b2476bbc947aa6e906", [[], [], [], [], [], [], [], [], [], []]}, 0xa39) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r9, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', r9, 0x8000, 0x7, 0x4, 0xb88, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x27, 0xc0, [@empty, @rand_addr=0x64010102, @broadcast, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x0, [{@broadcast, 0x5}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010100, 0x7fff}, {@empty, 0x3ff}, {@private=0xa010102, 0xfffffffb}, {@remote, 0x9}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x18, 0x0, [{0x5, 0x4, "6405"}, {0x1, 0xe, "c6be3c35cded155372967709"}]}]}}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 310.236949][ T8409] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 310.252974][ T3050] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 310.285797][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.621847][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.632734][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.642492][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 310.651505][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.660198][ T3050] usb 5-1: config 0 descriptor?? [ 311.001748][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 311.007807][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 311.015273][ T3050] usb 5-1: USB disconnect, device number 118 [ 311.471654][ T3050] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 311.841682][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.852715][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.862499][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 311.871525][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.880255][ T3050] usb 5-1: config 0 descriptor?? [ 312.421596][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 312.427581][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 312.435884][ T3050] usb 5-1: USB disconnect, device number 119 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1200, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:36 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:36 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000180)={{0x1, 0x2, 0x5, 0x1ff, 0x800, 0xd211}, 0x78, [0xffff0000, 0x9, 0x3, 0x0, 0x1, 0x800, 0x97f8, 0x0, 0x3ba2, 0xffffffff, 0x4, 0x0, 0x5, 0x6, 0xed70, 0xffffff00, 0x2, 0x400, 0x71, 0x7, 0x2, 0x4, 0x80000001, 0x5, 0x7, 0x5, 0x7f, 0x6, 0x10001, 0xc4a, 0xd3, 0x10000, 0x3, 0x4, 0x6, 0x672, 0xa1, 0x8, 0x0, 0x400, 0x7ff, 0x8, 0x4, 0x100, 0x0, 0x3, 0x80, 0x40, 0x200, 0x0, 0x7fff, 0x57, 0x0, 0x912, 0x9, 0x8001, 0xfffffff8, 0xffffffff, 0x1, 0x5, 0x3f5, 0x8000, 0x200, 0x9, 0x1, 0xffffffff, 0xffffffff, 0x1, 0x800, 0x1, 0xc4cf, 0x8001, 0x19c, 0x1, 0x1, 0xffffffd1, 0x2, 0x63c0, 0x200, 0x5, 0x81, 0x1, 0x9, 0x0, 0x4, 0x7fff, 0x68abca7f, 0x27, 0xffff0001, 0x37, 0x81, 0x480, 0x5, 0x4, 0xf06, 0x1, 0xff, 0x5, 0x8, 0x101, 0x5, 0xd388, 0xfffffffd, 0x1, 0xc86, 0x2, 0x9, 0x2, 0x1, 0x3f, 0x1, 0xc40, 0x80000000, 0xffffffc0, 0x1, 0x5, 0x7ff, 0x1f, 0x8, 0x5, 0x8000, 0x100, 0x8, 0x7, 0x3ff, 0x8, 0x8, 0x8, 0xda71, 0x1000, 0x2, 0x2, 0x1, 0x3, 0x80000000, 0x7, 0x9, 0x2, 0x6954b8ba, 0x6, 0x0, 0x0, 0x7ff, 0x8, 0xffff, 0x3, 0x4, 0xffffeeeb, 0x2, 0x488d, 0x6, 0x800, 0x8000, 0xffffffff, 0x9, 0x1, 0x2, 0x7, 0x4, 0x0, 0x3, 0x8000, 0x2, 0x4, 0x7, 0x1, 0x7, 0x7fffffff, 0x2, 0x40, 0x8, 0x4, 0x4, 0x1, 0xb3, 0x7f, 0x81, 0x4, 0x2bd, 0x5, 0x9, 0x0, 0x1ff, 0xffffff09, 0x5, 0xfffffffc, 0x1, 0x1ff, 0x4, 0x4, 0x5, 0x88b, 0xbe34, 0x1f, 0x6, 0x7, 0x2, 0x11, 0x40, 0x7, 0x2, 0x13e, 0x40, 0x80000000, 0x8, 0xd2, 0x10001, 0x10000, 0x2, 0x8, 0x1, 0x9, 0x200, 0x6, 0x5, 0x7fffffff, 0xfffffffb, 0x2, 0x200, 0x0, 0x80, 0x7f, 0x1, 0x2, 0x1, 0x9, 0x4, 0x8, 0x3, 0x101, 0x1, 0x90, 0xffff, 0x5b2, 0xfffffffb, 0x3, 0x4, 0xffffffff, 0x401, 0x101, 0x4, 0x55, 0x7, 0x521a, 0xfffffffb, 0x7, 0x3ff, 0x7239, 0x1ceee12e, 0x2, 0xfff, 0x10000, 0x5, 0x400, 0x4, 0x7fff, 0x80000001, 0x7f, 0x8, 0x4832, 0x0, 0x80000000, 0x8, 0x401, 0xc1ea, 0x2, 0x1, 0x3ff, 0x6, 0xd1, 0x9429, 0x3, 0x1, 0x3, 0x4b2d, 0x7, 0x9, 0x400, 0x4db, 0x1, 0x7, 0x6, 0x98d0, 0x20, 0x81d7, 0x0, 0xfcb, 0x6, 0x1, 0x808c, 0x25, 0x8, 0x4, 0xc0000000, 0x5, 0x1, 0xe19c, 0x7f, 0x0, 0x1000, 0x9, 0x20d3, 0x4, 0x20ab, 0x100, 0x955, 0x8001, 0x401, 0xe3f, 0x8, 0x6, 0x5, 0x7ff, 0xfffffffb, 0x5, 0x10001, 0x57a3, 0x4, 0xffff04ba, 0x7, 0x41, 0x30, 0xa1, 0x5, 0x8, 0x1ff, 0x2, 0x1, 0x29ecebf2, 0x5, 0x380000, 0xfff, 0x8, 0x5496, 0x8c, 0xff, 0x81, 0x9, 0x401, 0xfffff71e, 0x8, 0x81, 0x9, 0xc2, 0x0, 0x9, 0x40, 0x6, 0xa0f, 0x13cf, 0x75ab, 0x0, 0xffffffff, 0x2, 0x21, 0x5, 0x8, 0x1fb, 0x800, 0x80000000, 0xc0000000, 0x0, 0x1ff, 0xff, 0x3, 0x80000001, 0x4378, 0x3ff, 0x4, 0x4, 0x0, 0x1, 0x1, 0x7, 0x7, 0x361b, 0x52d72602, 0x81, 0x0, 0x10001, 0x8e, 0x4, 0x74, 0x8, 0x2, 0x7ff, 0xffffff00, 0x3, 0x0, 0x93, 0xc9, 0x7fff, 0x4, 0x18, 0x101, 0x400, 0x8, 0x2, 0x7fff, 0x4, 0x7, 0x9, 0x6, 0x200, 0x4, 0xfff, 0x4, 0x9, 0x8, 0xedbb, 0x6, 0xca, 0x3, 0xfffffff7, 0x7, 0x9, 0x401, 0xfffffffd, 0x200, 0x200, 0x80000000, 0x5, 0x3, 0x9, 0x800, 0x80000001, 0x7fff, 0xfffffff8, 0xfffffffe, 0x2, 0x2, 0x0, 0x2, 0x9, 0x4, 0x8, 0x80000000, 0x1, 0x1, 0x1000, 0x7fff, 0x10001, 0xffffffe1, 0x5, 0x0, 0x0, 0x6, 0x4, 0x8, 0x5, 0x6, 0x4, 0x0, 0x7, 0xcd0, 0x100, 0x7, 0x100, 0x0, 0x8, 0x4, 0x5b21c04c, 0x1000, 0x8d, 0x5, 0x7fffffff, 0x1, 0x1, 0x1, 0x0, 0x1a65863, 0x6, 0x9, 0x4, 0x4, 0x6, 0x200, 0x9, 0x2, 0xad9f, 0x9, 0x2, 0x2, 0x0, 0x20, 0x9, 0x9, 0x7fffffff, 0xffffffff, 0xbd59, 0x4, 0x13fd890e, 0xa0, 0x8000, 0x9, 0x81, 0x3, 0x6, 0x9, 0x1, 0x347, 0x8a9b, 0x5, 0x0, 0x1, 0x800, 0x5, 0x200, 0x401, 0x2, 0x3d, 0x100, 0x8, 0x2, 0x1, 0x1ff, 0x1b2, 0x7, 0x1, 0x6, 0xa9d8, 0xfe, 0x4, 0xffff, 0x7ff, 0x0, 0x9, 0x1, 0x401, 0xfff, 0x1f, 0x101, 0x7fff, 0x7, 0xdbf, 0x7, 0xfffff800, 0x0, 0x5, 0x2000000, 0x0, 0xffffffff, 0x8, 0x46700dc, 0x7, 0x8, 0xffffffff, 0x5, 0x81, 0x5, 0x80000000, 0x2, 0x1, 0xfff, 0x1f, 0x3b, 0x6, 0x46, 0x0, 0x5, 0x80000001, 0x800, 0x1000, 0x7f, 0xa102, 0x4, 0xffffff7f, 0xae9, 0x6, 0x2, 0x2, 0x3c, 0x80, 0x7f, 0x1, 0xac, 0x3, 0x3, 0x9, 0x3, 0x200, 0x2, 0x6, 0x3f, 0xffffff9a, 0x7, 0x1, 0x0, 0xffffffff, 0x800, 0x7fffffff, 0x200, 0x6, 0x8001, 0x109800, 0x3, 0x1e98, 0xfff, 0x100, 0x3, 0x84, 0x34000000, 0x6, 0x200, 0x7b, 0xe53, 0x40, 0x401, 0x33496a29, 0x1ff, 0x9, 0x6, 0x4, 0x3, 0x0, 0x1, 0x6, 0x5d48, 0x0, 0x7f, 0x7f, 0x0, 0x6, 0x8000, 0x0, 0x81, 0x4, 0x6, 0x1, 0x5, 0xfffffffe, 0x0, 0x0, 0x4, 0x1, 0x33, 0xffffffff, 0xfffffff8, 0x8, 0x2, 0x1, 0xb3, 0x80000000, 0x2, 0x10000, 0xa286, 0xa000000, 0x5, 0xfff, 0x7, 0x8, 0xfffffffc, 0xfffffffd, 0x4, 0x0, 0xf40000, 0x0, 0xfff, 0x2, 0x0, 0xffff, 0x9, 0x200, 0x85, 0x9d, 0x1, 0x2, 0x3ff, 0x1000, 0x3, 0x40, 0x5, 0x3, 0x6, 0x3ff, 0x3, 0x8, 0x7ff, 0x1, 0xa79b, 0x80, 0x182, 0x7, 0xfff, 0x7ff, 0x892, 0x400, 0x1f50, 0x80, 0x8, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x8, 0x8, 0x8, 0x10000, 0xc6, 0x3, 0x4, 0x401, 0x664, 0x1000, 0xff, 0x5, 0x3, 0x6a18, 0x1ff, 0x2, 0x1, 0x5, 0x6, 0x9, 0x2, 0xffff, 0x8, 0x2, 0xb775, 0x7, 0x7f, 0x8000, 0x6, 0x5681, 0x53, 0x0, 0x749, 0x4, 0x4, 0x7, 0x7, 0x3e3, 0xd3, 0x99a2, 0x1f, 0xda0, 0xb7f, 0x8000, 0x20, 0x2, 0x1f, 0x8, 0x8, 0x6, 0x2, 0x7fffffff, 0x10001, 0x9, 0x6, 0x10000, 0x8, 0xfffffb52, 0x6, 0x1d, 0x4, 0x8, 0xff, 0x0, 0x9, 0x2, 0x3, 0x4, 0x4, 0x76e, 0x400, 0x7, 0x2, 0x36, 0x6, 0xf049, 0x10001, 0x0, 0x1, 0x0, 0x8, 0x0, 0xe06, 0x59c, 0x1, 0x5, 0x4, 0x4, 0xd621, 0x8001, 0x7, 0x80000000, 0xfffffffa, 0xead, 0x4, 0x3, 0x7fff, 0x9, 0x1, 0xedf, 0x101, 0x80000000, 0x1, 0x3, 0xffffffff, 0x8, 0x10001, 0x8b77, 0x4, 0x1, 0x1ff, 0x7, 0x8, 0x8000, 0x6, 0xfffff800, 0x2, 0x1, 0x3, 0x618, 0x5, 0x0, 0x1ca, 0x4, 0x6, 0x5, 0x1, 0x1, 0xd4d4, 0x5, 0x3, 0x0, 0x1, 0x2, 0xc9, 0x7f, 0x39, 0x9, 0x8, 0x4b33, 0x1, 0x7, 0x3f, 0xbb0000, 0x800, 0x7f, 0x6, 0x2, 0x5, 0x8, 0x9, 0xa, 0x415, 0xfff, 0xc89, 0x1e, 0x3ff, 0x8, 0xd750, 0x0, 0x3ecccc16, 0x5, 0x0, 0x8, 0x5, 0x0, 0x81, 0x8, 0x3, 0xc62, 0xc91c, 0x6, 0x1ff, 0x7, 0x0, 0x6, 0xfffffffc, 0x7, 0x401, 0x40, 0xff, 0x2, 0x1504, 0x7, 0x40, 0x5, 0x9, 0x800, 0x4, 0x3, 0x5, 0x7, 0xfffffffd, 0x1, 0x400, 0xffffffc0, 0xff, 0x95, 0x7f, 0x396, 0x6, 0x1f, 0x4, 0x8, 0x69, 0x2, 0x0, 0x1000, 0x2, 0xffffffff, 0x7, 0x3, 0x2, 0x80000000, 0xfffffff7, 0x4, 0x80000001, 0xffffffff, 0x4, 0x0, 0x43, 0x2, 0x88, 0x91b, 0x4, 0x6, 0x3f, 0x9, 0x1c0, 0x5, 0x9, 0x8, 0x4, 0x7, 0x8, 0x3, 0x8, 0x2, 0x5db, 0xae, 0x5, 0x5, 0x3, 0x7, 0x6, 0x10001, 0x2, 0xffff1a95, 0xfffffbff, 0xf0, 0x7, 0x1, 0x8000, 0x7, 0x40, 0x7fffffff, 0x1, 0x3, 0x5, 0x2, 0x10001, 0x3a, 0x6, 0x101, 0x9, 0x1f, 0x3ed9587b, 0x3ff, 0x99, 0x5, 0x1, 0x20, 0x101, 0x6, 0x800, 0x7, 0x88e, 0x6, 0x3, 0x1, 0x20, 0x7, 0x101, 0x2, 0x2, 0x4ae, 0x2, 0x7, 0x3, 0x7, 0xc367, 0x3, 0x6, 0x5, 0x1ff, 0x1d, 0x5, 0x1, 0x4, 0x3, 0xffff, 0x8, 0x7, 0x3, 0x4, 0x8000, 0x80000000, 0x400, 0xffffffff, 0xa, 0x0, 0xffff0000, 0x162f, 0x2, 0x7f, 0x5, 0x4, 0xfff, 0xffff, 0x9, 0x5, 0x10000, 0xffff, 0x9, 0x3, 0x7fff, 0xffff0000, 0x17bb, 0x8]}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1300, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1800, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2010, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 313.193039][ T8458] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:36 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) io_uring_setup(0x62e3, &(0x7f0000000180)={0x0, 0xdee2, 0x10, 0x1, 0x181, 0x0, r6}) r7 = dup(r5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000280)={0x3f, 0x20, [], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 313.244634][ T8503] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 313.441488][ T3044] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 313.801459][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.812703][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.823053][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 313.832419][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.842489][ T3044] usb 5-1: config 0 descriptor?? [ 314.181405][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 314.187385][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 314.195423][ T3044] usb 5-1: USB disconnect, device number 120 [ 314.661296][ T3044] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 315.021331][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.032223][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.042597][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 315.051964][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.060509][ T3044] usb 5-1: config 0 descriptor?? [ 315.601261][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 315.607289][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 315.616272][ T3044] usb 5-1: USB disconnect, device number 121 10:15:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x106df0, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d70696473202d6d656d6f7279102d63707520"], 0x13) setresgid(r6, 0x0, r8) setgid(r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2200, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r6, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000100)='iD<1:\x84\x8eG\xaa\xe7\xcfGk\x92\x83l\x9c6\xef{c\x94\xc8\xadZ\bpz\x1c\xc3\a\x13<\x1b\xa7\xbb,\r\x96\xbd+\xda,\xd8\x92\xd4\xf1\xd6d\xf0\x8d\xfb{\xe3\xc3\xcd09\xc3\x8f\x8fu\xb3\x03\x00]})\xb0\xc7R\xc5\xbc\'\xa1\xe2l') keyctl$restrict_keyring(0xa, r6, &(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)='iD<\x11:\x84\x8eG\xaa\xe7\xcfGk\x92\x83l\x9c6\xef{c\x94\xc8\xadZ\bpz\x1c\xc3\a\x13<\x1b\xa7\xbb,\r\x00\x00\x00\x00,\xd8\x92\xd4\xf1\xd6d\xf0\x8d\xfb{\xe3\xc3\xcd09\xc3\x8f\x8fu\xb3\x03\x00]})\xb0\xc7R\xc5\xbc\'\xa1\x92l') write$P9_RWALK(r1, &(0x7f0000000200)={0x4a, 0x6f, 0x1, {0x5, [{0x10, 0x0, 0x4}, {0x20, 0x0, 0x2}, {}, {0x80, 0x4, 0x5}, {0x1, 0x4, 0x2}]}}, 0x4a) keyctl$update(0x2, r5, 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2400, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2500, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 316.195667][ T8536] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26ed, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8040000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 316.240341][ T8567] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 316.328566][ T8592] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 316.461123][ T3050] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 316.841115][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.852044][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.862381][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 316.871833][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.880405][ T3050] usb 5-1: config 0 descriptor?? [ 317.211061][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 317.217063][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 317.224287][ T3050] usb 5-1: USB disconnect, device number 122 [ 317.680969][ T3050] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 318.041002][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.051897][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.061657][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 318.070661][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.079556][ T3050] usb 5-1: config 0 descriptor?? [ 318.620908][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 318.626889][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 318.634263][ T3050] usb 5-1: USB disconnect, device number 123 10:15:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26ee, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 0: r0 = gettid() tkill(r0, 0x16) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x4}, &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x50, r1, 0x0) r3 = syz_io_uring_setup(0x76d2, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {0x1}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f0000000500)=ANY=[@ANYRESHEX]) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) fstat(0xffffffffffffffff, &(0x7f0000000180)) 10:15:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0009c3"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26ef, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 319.211857][ T8615] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3a00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 319.255137][ T8646] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 319.302622][ T8671] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 319.470778][ T3044] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 319.830789][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.841722][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.851742][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 319.860793][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.869409][ T3044] usb 5-1: config 0 descriptor?? [ 320.200706][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 320.206700][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 320.214430][ T3044] usb 5-1: USB disconnect, device number 124 [ 320.670624][ T3044] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 321.030670][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.041685][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.052391][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 321.061825][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.070404][ T3044] usb 5-1: config 0 descriptor?? [ 321.610553][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 321.616545][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 321.624614][ T3044] usb 5-1: USB disconnect, device number 125 10:15:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3b84, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:45 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x1000009c) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x4) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x6cfc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="073674a83c40953f5c6db73d20e84a3607510ace39b791ebe2290173e5f5af7da5b442f862355ddc81e918c375afce59ad9ffff13dca191e893b37d94e73f4bd9c1ed5e1f23a03b78fd638b0617e3ac956f53f4d4b77221066f42545734f47b11953ec4a60914a0a135a6a355a8e886ed13938c05e4d17b7aece560266e043ed8f21e96a253002e6f0a9cf76f86ecc3c58dde521522fa080ca1666c89f5b66da1d2ef4ec4ea84e8165612070946f8d06a702cb2328fe009d2a675b1ad22db051e633b22d26fdb5af4d74a3ef931bc84e6ee09da7453940279ad67cdca478b548027e5262fd25beb4cb7b17279ad11a75d10c67f90fdc0dd5e4a2213a7236171b80bc93794cb771d2cc9f74e7193f6ee8cb305942842431ba26ef3ab1ef38b59ede566de2f8a2114255822e74a280ae85f456aef11b0e20122ae4f532256493e64385ffaeb94b9f1be9b8f4b56c8f95dd3a899ed2bd0f848eb04875c2e6ae5a316db48ecd70f7f0dbb3dd50204e9575d847849479ed0adeec180cf7f1593541a615c3bc96238b17c79f4aa8dc5c60bed9cd25725041b201193e5148591a645ba35a0909cd5e939c3253ad4767dd8657b9009e9e9bb7d881382af26908c5cd436821751dc26fbc149f0eea311c3a1294359dc4618af49c9e85b8ee2d316d375f7fc66d8de4447483e9392c8ffdde874625d4779619b2296a8a2b4e63b29c71646756a75f284ed4100ad445ba7bc3666ea15d5e0f7fb90402fb2a7130f2bd7b23ed8f3ef9ca9da797c196fb1f5ebf5fd74dddacca5ec2c5690c0c37d446cd6a196b1f3cb602f696f5c321bf18ee38b53ad7028188b2b4c77801b4f3b94562b0ad9d14af31db13534fe0fb688595ab31e461827883c78402e3d204b5503516fe131a8d8a7cf6ae4ae65fd630d06ca0288eee4615b5f9603ca9a002d724f64f511d5bf8a307658b446a90ef7601a9d7542db2989a56544480a4032679f2bbb72438710dece9ff2d01e294939428c4974d3b14a15a367b108773c36e65ed98fc7eff2356872f86bbf7828e2f876525a03a74b75cab8fdf13e4f54d00a0f42e5844616354c964e5c101aacfeb4bbef7222a780c6a21cb87264f713b7130608da973b855d5108b367c6fb3506fce61c40d86c991ce2de63f04decf319812d7c4d675a7d9cb2f0ec783817a3588235e6e18e8e0ea788735c5de046bda6542f98b2550d0ba9396fbd469259944a029dad385d19978cd6df1b5ff440d76cf361975ce61d0c3b7f05a7b6a964538553229f3b6c58408703c7b9805cf5c1043cc62f6d0340ed27446c36f4500589359f78c9085e52e57e49676c4750fd21bd86539e85731869a672768c74c345b57e1779a41512cfd80f5a166d7090beefaa18a8682f9d8f451d85ef05907284f120e164149f8bb57cd49c9d77039bd10c1e077e07f8afbddcfc16578ed73af1749fb4807d2b5b0fe6102f3641bbd4339d5c2555483c46592998187e43b433bee8025a34c9a9f3da9551a369a80d31af46b3f9d00cefb6c0590ff5b112ab387c7095e280fb64b1c9a7c516249c0f1ed0ba583ebd6fbdf7d4f3692d7b08499ee0e401f20bebdf194f12e18a315b5d86c20c4b6d11b974fa9bf28b6c7388e5d9606a371ef94d9d4a6aead70814e1d41d3a3516f2979f75dcf30a444273e722efa927ed05cba9bab0b0b1153fcf87736bd020d86123cef413382430716718a18c5f0cd835efbe51a3c920912eaefecca2f07600c31adb13f64478b0a72981421ef6ac42b72f727aa88c73b668d575195b0c851e9320d909a15174f70502f62b4a44d0037e221b7d4b7ae766917babd6d17b33ec2ee03bef7ee210b4eecf2911da0d8cd6aeb19ebd1007934f4b802f4c3b7fe5ce5133b49189f6100dd4abd567755a924f3a5c3a0086f24613b8e3b240ea9d5c7a9525668fbac80ee45b5470bc19bbdf7f141e2f8255889b9585e5ed6d30b29807080ae6830a9e9c73ea3da91248cbc90921795291d183b8d569d063c6c2dc89fb649b36b4e7c807add7e49d29ebb082b75ce9792df3ebaa82b7aec1c769ad5f8c0c9e7e0eb7bc59fa74fd1629dcf02a33660e6c2c0daac50b1f8cc71ce253bc0049dd4ca46ea004af96c66598310675c9335256376c46db8c7860a9de37e00ae918e68c75bb95b3b8129fc9d52ee43214876c39376c96dfbe6e715a47286bf266571cb79e95b51159dd1df06f1c96e94b55d3054eaf46e17adb4c3fb9c0c9a7a58f16d13c3c5515293e4110a1c12c90c73275c3305706caac9b4baf71387168a9bd4244d9ce63ee5c7b47baed326f2d010b0250c18f90d82e1aad1054ffb71804c45c5a75db8f10b413c99a212c18b4f23bc1a4da5daff04fed924adac19f8fc2d92e6909622a83ae967c7bac3333626c7c6fffe88e9f8d2dc273f3ac0a9618b164bc9770f2f754d80dcfe860b85daf4187f87d974ddaadd43bd04aacebd94b97452f7356c7f036217e9862907d5c9adaf9977a970f59870cc478aa72c2661d7850c2c8333a768b2df05f8399876fcd00a4b2913d367cbaf387aa1325b54fbca34856504c6f80d741257712d6a625443856056e5b57b6464ff8dbeaa36f8297ac6630e70b9327f798945c8e5eb07d1c6ec4f18189c8b00b7e0ea36a7bae563b33e80b8f7491cbfddfbf9176f9b60874e6cbd8bf9044a5ca8fd8171e9c68664b4be136e1cfa3a055b6fd33befa527c9db6b663096a8d7ede6c344315d59101e71625e0633ec07dadc4ebc2f9b03563deba1f032ef00bb84e4c9248bd66399fbdf791d2efaab08d83e88243301d67ea052cdf944efcf98e9cdabdfb3d19134054a74c6e7b8825da4e8811d4e28368b4e27d0097c154ea70d59001e25f356d07480f66305c625f16f76ef151a28633551d7a61c9e0cc1ed50942ccc216fd36d6ebd9af22b148f980673fe09dc3e025df7322a1b4826df7249be6ddec84053a52259e0592a9dd0b6c65dd166e641ba9e54bcb0ebc6853426ea47ff94e3ac64ebb66254541774d2f7c682e1dc888895fe07ac2a02132ec1b718a5c4119d89f65b87edbf37367454565ffa79dd8863b2351b1a12ee6759106951b31032cfd8fb40a121ccd97af45cf92980cad44e4e6f231c9198bf920ba359b2a49109b3422319e0d9bfc63ecfd53fa04b9844d35ffc55690b909e2a47f4b98bb9e8592982fd47feed9792a0a1a7c1a32a094481c5931d8429078f148d928262a3c2a5cafb412e877bb9b79a1337f7e2f6c0c7d8e9268df63b46f6628daf1dc34c9e2f4fdad2c4c168226f93ae3b373ad0702b522df4ae62863c21cba0f139764a3002b3aafc97176c842251b4a6e2d561a7f307d0151d53d2f257029b92682792a55b0d13671c75dac8dd6efa2d9cd9c94cf8ce7c2260bcc1ae7d68eadc9da6fffc830fe3dd91c93c329006d927ce2b2afd363f07ec4b9e0c4e161cecf0b8bb5f873787bf5bdbb0e17d215e218c90e2daf9d818bae0cd068e70e5f2167f5db1096a017c0933d3d75b1251b6db286336ad9da8784fa3ab684c964bbf421931e79ecd0a2e99e6610a281ffeba2581fa15fa8d2449cea9c6236a53c829487994a7676e3ba1dbd5b28fe6880dc201946c5eb05ff141cd517f19286ceca69bcebcdbab1b4c9d3c82226c6f5974f10d96875c4b70d131265872168e61675e63462504e6b023fce462faf8d74d24d94efd9622f8677f2bea354abee8760137a05cb33cd57fcde65ea08a9e4935f71e278c02df16a7bf847049b9f31bf667e930e77d3005966e67a2e9901e56b3da92f782e210a508d8c21240d5c3f3577ab6e64c708c9908c67693ad0ea47f6679b3eca2b6168dc56e78425db09760cc44a6924876d7e26fdc857ca6962f5be2885ac40e46df93e6f28a11073b7f015d257f78924009fbbf3b326faa2a982784ccc01499792c617b566de0cf017b1c168758cb8ed3ad252d5dfc450e4be7ef44cebd8542a214723cbc8911fef24328a51a19665a4610f0b9123465e73258d9eeaabb7cda6f0874f0eeac9a91ec2efc0d83bce6c7214144a59a542e6d5760ae2102080624ea4f0e2b31e89002e624ff6762b16bd15f39e49e317a6d18bdc6789f10146f973eaafd9d58b70dec97c6e4409785cd45504f7e46f79a56350a21168b8a152567224ea030e89b5c504c175b777f7a8431f92d40a7bc83bea958414815a92f5dc921d1348c10978cb000e197d769144655c949bbe8d382e05ed28b603d3b3ed32f214024da3d59a7dd6257ddd84b723661b545db16f6d668a3d077b19264ffa646be6b0631fe431ebb4937e73ea1b8b0cd55d9b4980315c9bb7fe2f93d75a8e45c71ada6fe4517dc1215d958d536e53ce2f4ac7f73b8c5bce4d64e55795cf641c990f4ae993262d7104f7fee24aeedd5adc20dd57e1e8892fb9c144dfbc8a93ee0dc1bcf68ee68fef490c2b4764b4b829acb51bd49cd0dbe4291cdac0d296345d8301098d6dfffcbec32e5336546ace22b73e9c54a3a943a3058061f5932a51b55a19bbf4f771df3c94b99827deaee5c4a6c08fec42dcdfd574923647f51ce781a54f194bfd2a7b9096840b7494d498b1105f75102736f38174f4a168ff590a14935e0f07b6c44cb9951ee82c8276c26515f27d69242df4238fbb80bb76b42f519725a4eb4d808173d67c4cf2c494a4b17d35773cda891f02d5fc89d60f18e5a67e3e29f221145727953dfaf3de408f05b33531d8383c1be734170bce02ffaf383c2879372fecacdf864d8ac7bf8d48882d28cb3e9cba20d02a97703bae4c3874eda23892cebfe579477b82bd4549338118e01492c65337749db80068233d18e24ae3e8d7ad2de0cb086ba72c62690bd8ce920caab0a44e6fe440cd4dd20c2865133e7d9b4f6d525265f5514a315186c3c96e6405aa4a58b4a29faba8586f012469a7a3330acbecfe37b488ac630bd9fd854398fc63a3fbf76d0e0dfc85dbce0cabc0394a9b9815bcfdd338bae14c2d6f198b326e815c379d6ba67790cde4cd4489f0058be2d9e2f8f4f56308a32ef74ee46b3020b3897b26f7fafda785ba6146de908e484653442f10ef79f067438e324b09fca72a4f2a44505b41deb7cb837119b582e5adc2b9e20ca1f490752655ca9c99d9d8948666d9e6f156a107a9f1b47eed9bdb12cea5d563990b5a4739590dc288ebc8d42b4b9d67770f6a07c39efa9bf34ff8e4442458d2334563c6770b382d12eb246408fc2e2ffdc33cfbd68594e8097b9fc0ee255367d323082cbf670495f0966f73d89d0c23bac51dd4c54f94858654f2fc2a29a1c0ddd7105d0088ade9858c3003d6a0061b02856b42a7695cfe8ec106fc5062cf25c0345267440e854b3824d", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000000101000000000000893a55c077f933c1d4112a93e07f2f7b2b3795ae00000000"], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fchmod(r10, 0x3) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000000c0)='\x00', 0x0, r2) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 322.225909][ T8695] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r7, 0xa, 0x12) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000180)={'team_slave_1\x00', 0x5}) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r7, r8) r9 = gettid() fcntl$setown(r8, 0x8, r9) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000000c0)={0x0, r8, 0x3, 0x80, 0x4, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 322.273817][ T8721] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 322.308496][ T8724] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 322.316513][ T8733] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8004, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 322.362262][ T8746] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 322.397014][ T8759] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 322.500483][ T3044] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 322.860436][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.871422][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.881371][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 322.890431][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.899036][ T3044] usb 5-1: config 0 descriptor?? [ 323.240440][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 323.246454][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 323.271231][ T3044] usb 5-1: USB disconnect, device number 126 [ 323.720442][ T3044] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 324.080312][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.091238][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.101808][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 324.111235][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.119794][ T3044] usb 5-1: config 0 descriptor?? [ 324.660236][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 324.666414][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 324.674712][ T3044] usb 5-1: USB disconnect, device number 127 10:15:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x11000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x843b, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:48 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000298000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) r5 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r8, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)}, 0x0, 0x20000000, 0x1, {0x0, r6}}, 0x9) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) memfd_create(&(0x7f00000006c0)='%\xf0\x13*\x83\xe1\xa8\x90\xef\x85eZ\xec\x12\xac+/\xb8\x91\t\xf5\xfc\x81\xff\xe3 l\xec\xf6\x0f*qG\xef\xb0s\x1a,\xe62\x1e\xde\xcce\x90\xe2\x93\xee\x99\x9a\xa3\xdf]y^qxE\x99\xa3r\xf9Rwe\xd6\x06\x88%&{\xd9\xcb\xc6\x98\xe7\x8f\x9fVA9r^\"\xfc\xc567\xd0F\xbb\xe9\xfe\xd6\xcb\xa2\xd1\x90\x13\x97\x16\xaf\x93\x17\v\xcaTH\x87\bK\x9aF\x14\x94\x13\xe3\xc6\xca\xad\x1f<\xd5\xa8\x86\x02W\x9fM\x8e\xceI3\x8c8\xd4\x9aH:p(\x8ddmS\x9e9\xa7T\x8f\x9b\x8c`\xff\x87eo\x9d\xd9\xe3P\xe7\xd7>\x80A\x89\xa1)\xc8\r\x94\xc9uu\xbfW\xa1\x88w\xe63:\x16\xeb\x9cE@\xb7\x1b\x1e},\x9f\xcb\x19j\xe1\xbbm\x10\x81\xf7my\xd3\xd3\x1an\f\xe4\xf2\xba\xbe\xcfo?x\xd4\xd8\x05\x1c\n\x83\xc5S\xd2\xdbR\x14^\x13}\x83\xf9\x80\x1b\x83\xbb\xf4\xf4fp\v\xea\x9c\x80\xe0oe', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r6}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1a) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8601, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x12000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 325.237175][ T8785] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 325.247568][ T8799] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xed26, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x13000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x20001, 0x80000, 0x3, 0x0, 0x0) [ 325.288017][ T8811] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 325.291746][ T8815] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 325.352519][ T8832] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 325.490090][ T3050] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 325.850113][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.861136][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.871129][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 325.880318][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.888951][ T3050] usb 5-1: config 0 descriptor?? [ 326.220066][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 326.226069][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 326.241144][ T3050] usb 5-1: USB disconnect, device number 2 [ 326.729951][ T3050] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 327.089980][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.100987][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.110740][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 327.119752][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.128568][ T3050] usb 5-1: config 0 descriptor?? [ 327.659901][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 327.665893][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 327.673149][ T3050] usb 5-1: USB disconnect, device number 3 10:15:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xedc0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x14000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f2481f539", @ANYRES16=r6, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r9, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000ff00000000000000feeec80acfa918000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r12, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xee26, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x15077ff0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xef26, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 328.242642][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 328.254633][ T8868] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf400, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:52 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20100000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 328.306377][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 328.319286][ T8903] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 328.499754][ T3050] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 328.869799][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.880730][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.890674][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 328.899758][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.908364][ T3050] usb 5-1: config 0 descriptor?? [ 329.239700][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 329.245683][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 329.253357][ T3050] usb 5-1: USB disconnect, device number 4 [ 329.709631][ T3050] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 330.079634][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.090628][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.101157][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 330.110785][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.119483][ T3050] usb 5-1: config 0 descriptor?? [ 330.669580][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 330.675652][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 330.683312][ T3050] usb 5-1: USB disconnect, device number 5 10:15:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf500, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:54 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETAW(r8, 0x5407, &(0x7f00000000c0)={0xe998, 0xfff7, 0x3ff, 0x0, 0x1b, "4490ce35913a1320"}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r11, 0x0, r13) fchown(0xffffffffffffffff, r9, r11) 10:15:54 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf504, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf600, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:54 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x24000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 331.262903][ T8944] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:55 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf900, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 331.315586][ T8978] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:15:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000240)={0x0, 0xc87d, 0x0, 0x0, 0x339, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x624080, 0x0) r8 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000380)=[@request_death], 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r11, 0x0, r13) fchownat(r7, 0x0, 0xffffffffffffffff, r13, 0x800) 10:15:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e23, 0x80, @local, 0x7}, {0xa, 0x4e23, 0x7eb0fa04, @mcast2, 0x7}, 0x7fff, [0xa3, 0x1a, 0x800, 0x2, 0x1b3, 0xfb4]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f00000002c0)={0x40000000}) 10:15:55 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfb00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 331.355778][ T8995] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 331.415435][ T9016] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 331.519429][ T3050] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 331.879497][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.890505][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.900277][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 331.909288][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.918035][ T3050] usb 5-1: config 0 descriptor?? [ 332.259373][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 332.265491][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 332.273539][ T3050] usb 5-1: USB disconnect, device number 6 [ 332.739293][ T3050] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 333.099310][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.110330][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.120698][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 333.130077][ T3050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.138652][ T3050] usb 5-1: config 0 descriptor?? [ 333.679250][ T3050] usbhid 5-1:0.0: can't add hid device: -71 [ 333.685435][ T3050] usbhid: probe of 5-1:0.0 failed with error -71 [ 333.693047][ T3050] usb 5-1: USB disconnect, device number 7 10:15:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:15:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfd00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30b98ee8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept4$tipc(r7, 0x0, &(0x7f0000000180), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f00000001c0)) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f00000000c0)=0x9) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:15:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) 10:15:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3c885d5c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:15:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff01, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:15:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff03, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 334.299741][ T9086] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 334.379124][ T3044] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 334.739111][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.750019][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.760178][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 334.769252][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.777826][ T3044] usb 5-1: config 0 descriptor?? [ 335.109129][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 335.117167][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 335.124810][ T3044] usb 5-1: USB disconnect, device number 8 [ 335.588980][ T3044] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 335.949060][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.960640][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.971331][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 335.980838][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.989819][ T3044] usb 5-1: config 0 descriptor?? [ 336.528898][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 336.534913][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 336.542970][ T3044] usb 5-1: USB disconnect, device number 9 10:16:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:16:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0f, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:00 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000080)) 10:16:00 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r7, 0xa, 0x12) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r7, r8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7ff00, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 336.973895][ T9124] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:00 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000800, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 337.248819][ T3044] usb 5-1: new high-speed USB device number 10 using dummy_hcd 10:16:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80040, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 337.292799][ T9159] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 337.608788][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.619743][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.629508][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 337.638518][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.647237][ T3044] usb 5-1: config 0 descriptor?? [ 337.988721][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 337.994802][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 338.019522][ T3044] usb 5-1: USB disconnect, device number 10 [ 338.478654][ T3044] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 338.838663][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.849573][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.859912][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 338.869344][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.877986][ T3044] usb 5-1: config 0 descriptor?? [ 339.408587][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 339.414663][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 339.422865][ T3044] usb 5-1: USB disconnect, device number 11 10:16:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:16:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r1, 0x0, &(0x7f0000000380)="edbad4316df093d6b6f58b2c847fa339c21cb54cdb1dce3b1e0cea291056311d574a0e9bb1e50d4973a360f3f1d2176ad7fa592722c9bb1ea37b86df27c4dac915c732dcb98e5856a313f67c3366c918b8ebcbc2616bad01efb8", 0x5a, 0xc0194, 0x0, {0x0, r8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="03000300000ea500c92556d7d88b51a88e6a82dde2405c523c1743cc73b6fca04303bf4678fc118ed571ec7b11aef1021804432279cb1d3cfe508e020f52e6be0db006442d52fdda3283dfc687aec03776c6bf50b643c9b7aa4ebe2a44f560241b6efcfa18290413c595055cb5a7f4af0d15c1b9caf738f45a3f4523e84a14aa999ad65a7e1a6eb070fc5ad02873a362206c8c7e716e89c75c370ca7a9bec0cf9ad04be82154d5a043858735b9ad4d6f1c831e165dbd44f33c5edd61868d305a1a9bd8faed83aeaa0e460cc3955cdb64632d"], 0xd2, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r11, 0x7706, &(0x7f0000000300)) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x100000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 339.857614][ T9210] ================================================================== [ 339.864498][ T9206] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 339.865720][ T9210] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2b/0x100 [ 339.865734][ T9210] Read of size 8 at addr ffff8881d854fc00 by task syz-executor.0/9210 [ 339.897523][ T9210] [ 339.900018][ T9210] CPU: 1 PID: 9210 Comm: syz-executor.0 Not tainted 5.4.59-syzkaller-00523-g17245be70d1d #0 [ 339.910289][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.920483][ T9210] Call Trace: [ 339.923805][ T9210] dump_stack+0x14a/0x1ce [ 339.928662][ T9210] ? up_read+0x10/0x10 [ 339.932704][ T9210] ? show_regs_print_info+0x12/0x12 [ 339.937985][ T9210] ? printk+0xd2/0x114 [ 339.942027][ T9210] print_address_description+0x93/0x620 [ 339.947556][ T9210] ? devkmsg_release+0x11c/0x11c [ 339.952486][ T9210] ? mmap_region+0xe38/0x1bb0 [ 339.957141][ T9210] ? __percpu_ref_switch_mode+0x350/0x5e0 [ 339.962835][ T9210] __kasan_report+0x16d/0x1e0 [ 339.967496][ T9210] ? __list_del_entry_valid+0x2b/0x100 [ 339.973395][ T9210] kasan_report+0x36/0x60 [ 339.977725][ T9210] __list_del_entry_valid+0x2b/0x100 [ 339.982987][ T9210] io_cancel_async_work+0x9b/0x280 [ 339.988076][ T9210] io_ring_ctx_wait_and_kill+0xaf/0x1380 [ 339.993687][ T9210] ? __get_user_pages+0x1420/0x1420 [ 339.998879][ T9210] ? io_cancel_async_work+0x280/0x280 [ 340.004248][ T9210] ? vm_mmap_pgoff+0x21f/0x280 [ 340.008989][ T9210] io_uring_release+0x59/0x70 [ 340.013666][ T9210] ? io_uring_flush+0x130/0x130 [ 340.018488][ T9210] __fput+0x27d/0x6c0 [ 340.022441][ T9210] task_work_run+0x176/0x1a0 [ 340.027003][ T9210] prepare_exit_to_usermode+0x286/0x2e0 [ 340.032545][ T9210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 340.038418][ T9210] RIP: 0033:0x45d52a [ 340.042291][ T9210] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 340.065788][ T9210] RSP: 002b:00007ff1c2aeabc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 340.074202][ T9210] RAX: 0000000020fff000 RBX: 0000000000000003 RCX: 000000000045d52a [ 340.083020][ T9210] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020fff000 [ 340.090967][ T9210] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 340.098954][ T9210] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020fff000 [ 340.106905][ T9210] R13: 0000000000200000 R14: 0000000000008011 R15: 0000000010000000 [ 340.114858][ T9210] [ 340.117167][ T9210] Allocated by task 9202: [ 340.118447][ T3044] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 340.121474][ T9210] __kasan_kmalloc+0x12c/0x1c0 [ 340.121482][ T9210] kmem_cache_alloc+0x1d5/0x260 [ 340.121493][ T9210] io_get_req+0x1e8/0x850 [ 340.142919][ T9210] io_submit_sqe+0x83/0xe90 [ 340.147409][ T9210] __se_sys_io_uring_enter+0x922/0x1ff0 [ 340.152926][ T9210] do_syscall_64+0xcb/0x150 [ 340.157401][ T9210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 340.163348][ T9210] [ 340.165652][ T9210] Freed by task 377: [ 340.169522][ T9210] __kasan_slab_free+0x181/0x230 [ 340.174440][ T9210] slab_free_freelist_hook+0xd0/0x150 [ 340.179790][ T9210] kmem_cache_free+0xac/0x600 [ 340.184442][ T9210] io_poll_complete_work+0x737/0x940 [ 340.189700][ T9210] process_one_work+0x777/0xf90 [ 340.194523][ T9210] worker_thread+0xa8f/0x1430 [ 340.199276][ T9210] kthread+0x2df/0x300 [ 340.203331][ T9210] ret_from_fork+0x1f/0x30 [ 340.208147][ T9210] [ 340.210469][ T9210] The buggy address belongs to the object at ffff8881d854fb00 [ 340.210469][ T9210] which belongs to the cache io_kiocb of size 264 [ 340.224251][ T9210] The buggy address is located 256 bytes inside of [ 340.224251][ T9210] 264-byte region [ffff8881d854fb00, ffff8881d854fc08) [ 340.237540][ T9210] The buggy address belongs to the page: [ 340.243155][ T9210] page:ffffea0007615380 refcount:1 mapcount:0 mapping:ffff8881d923db80 index:0x0 compound_mapcount: 0 [ 340.254064][ T9210] flags: 0x8000000000010200(slab|head) [ 340.259586][ T9210] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881d923db80 [ 340.268173][ T9210] raw: 0000000000000000 0000000080150015 00000001ffffffff 0000000000000000 [ 340.276999][ T9210] page dumped because: kasan: bad access detected [ 340.283398][ T9210] [ 340.285805][ T9210] Memory state around the buggy address: [ 340.291412][ T9210] ffff8881d854fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.299628][ T9210] ffff8881d854fb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 10:16:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1fffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c5d883c, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x200000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 340.307859][ T9210] >ffff8881d854fc00: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 340.315998][ T9210] ^ [ 340.320042][ T9210] ffff8881d854fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.329120][ T9210] ffff8881d854fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.337174][ T9210] ================================================================== [ 340.345232][ T9210] Disabling lock debugging due to kernel taint 10:16:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6e000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x800000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 340.386518][ T9245] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 340.406618][ T9249] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 340.440963][ T9259] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 340.498503][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.509504][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.519475][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 340.529422][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.538038][ T3044] usb 5-1: config 0 descriptor?? [ 340.888433][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 340.894581][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 340.903471][ T3044] usb 5-1: USB disconnect, device number 12 [ 341.358300][ T3044] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 341.718352][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.729993][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.740363][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 341.749795][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.759170][ T3044] usb 5-1: config 0 descriptor?? [ 342.488215][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 342.494234][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 342.502263][ T3044] usb 5-1: USB disconnect, device number 13 10:16:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="0100fdffffff00000000010000000000000006000000001800136574683a76657468315f6d616376746170000000"], 0x34}}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xf, 0x100, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24008090}, 0x20040090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6f000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:16:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000001c0)=r10) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0700, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80040000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8cffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 342.956657][ T9282] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 342.967231][ T9281] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8f030000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1010000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0xbd79, 0x4, 0x400, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000200)) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r8, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000100)='iD<1:\x84\x8eG\xaa\xe7\xcfGk\x92\x83l\x9c6\xef{c\x94\xc8\xadZ\bpz\x1c\xc3\a\x13<\x1b\xa7\xbb,\r\x96\xbd+\xda,\xd8\x92\xd4\xf1\xd6d\xf0\x8d\xfb{\xe3\xc3\xcd09\xc3\x8f\x8fu\xb3\x03\x00]})\xb0\xc7R\xc5\xbc\'\xa1\xe2l') add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x8}, 0x5, 0x1, 0x2, 0x8, 0x1e, 'syz1\x00', "af550037bcd3d30bb2699f50664715c6c6524aaa97a11a86c34e28e04e1a973a", "228cbe7d2222e424587dd1a4251b1dc0be009f01453fa844244f0cf855932322", [{0x7c, 0xff, {0x2, 0x10001}}, {0xaa0, 0x6, {0x2, 0xff}}, {0xfff, 0x5cfa, {0x2, 0x9}}, {0xf524, 0x7f6, {0x1, 0x7}}, {0x8, 0x8, {0x2, 0x7}}, {0x72d3, 0x0, {0x2, 0x2}}, {0x40, 0x5, {0x0, 0x8000}}, {0x0, 0x3, {0x0, 0x1}}, {0x1ff, 0x7, {0x3, 0x4ccf}}, {0x2, 0x4000, {0x3, 0x7}}, {0x400, 0xfff, {0x0, 0x9}}, {0x0, 0x80, {0x0, 0x7fff}}, {0xfff, 0x3, {0x3, 0x7fff}}, {0x7, 0x2, {0x0, 0xff}}, {0x3, 0x28a6, {0x1, 0x100}}, {0x9, 0x0, {0x1, 0x88c1}}, {0xff, 0x40, {0x3, 0x81}}, {0x3, 0x0, {0x0, 0x8000}}, {0x5, 0x0, {0x2, 0x9}}, {0x732, 0x1000, {0x2, 0x8}}, {0xf800, 0x8000, {0x0, 0x3}}, {0x9, 0x100, {0x2}}, {0x6, 0x2, {0x3, 0x8}}, {0x1, 0x7, {0x2, 0xbcfd}}, {0x1, 0x400, {0x0, 0x4}}, {0xff81, 0xe5a, {0x0, 0x7c}}, {0x1, 0x80, {0x17882a9927ff8dad, 0xa8b}}, {0x3f, 0x6, {0x0, 0x8c}}, {0x1, 0x2, {0x2, 0x3f}}, {0xfeff, 0x1, {0x2, 0x9}}, {0x80, 0x20, {0x0, 0xffffe47c}}, {0x0, 0xfff, {0x0, 0x4}}, {0x100, 0x40, {0x0, 0x4}}, {0x0, 0x401, {0x1, 0x7ff}}, {0x4, 0xb4c5, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x401}}, {0x8a40, 0x1cd4, {0x0, 0x1000000}}, {0xa80, 0x889, {0x3, 0x8001}}, {0xc000, 0xc27, {0x3, 0x1}}, {0x9, 0x1000, {0x2, 0x8000}}]}}}, {{0x254, 0x1, {{0x2}, 0x5, 0x5d, 0x8, 0x8, 0x19, 'syz1\x00', "2039bf77bd18ba8c6b31039b465f1db1ed6883abaad6d4d63e449db58d991a0a", "b75b19c717891ef6180a879a978c3f21a7105d471f528690e530affe711da9a0", [{0x3, 0x6, {0x1, 0x7ff}}, {0x4, 0x80, {0x3, 0x38ea}}, {0x4, 0x1, {0x2, 0x49}}, {0x0, 0x9, {0x3, 0x10001}}, {0x0, 0x3, {0x1, 0x4}}, {0x4, 0x3ff, {0x2, 0x81}}, {0xcd, 0x6, {0x1, 0x2}}, {0x7, 0x7, {0x3, 0x5}}, {0xbe95, 0x3, {0x2, 0x4}}, {0x400, 0x1f, {0x3, 0x7}}, {0xfff8, 0x2, {0x1, 0x40}}, {0x3, 0x8, {0x3, 0x1}}, {0x7, 0x3, {0x2, 0x6}}, {0xe6dd, 0xa155, {0x1, 0x10000}}, {0xd3, 0x2, {0x0, 0x3ff}}, {0x4, 0x0, {0x3, 0xd296df6}}, {0x9, 0xaa3, {0x3, 0x100}}, {0x5, 0x1ff, {0x2}}, {0x7fff, 0x8000, {0x3}}, {0x7, 0xff, {0x3, 0x1}}, {0x2, 0x6cea, {0x1, 0x9}}, {0x3b, 0x400, {0x1, 0xfffffffc}}, {0xba, 0x0, {0x2, 0x2a}}, {0x7f, 0x151, {0x2, 0x8}}, {0x3, 0x1, {0x1, 0x3623}}, {0x0, 0x4, {0x1, 0xfffffffb}}, {0x6, 0x43, {0x1, 0x716}}, {0x4, 0x5, {0x1, 0x8000}}, {0xa6, 0x1, {0x0, 0x1}}, {0x0, 0xff}, {0x4, 0x7fff, {0x3, 0x2}}, {0x800, 0x2, {0x3, 0x788}}, {0x5, 0xff00, {0x1, 0x1}}, {0xfff9, 0x8f7, {0x2, 0x1f2}}, {0x4, 0x8, {0x3, 0xc8a8}}, {0x6, 0x2, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x9}}, {0x0, 0x8000, {0x0, 0x3}}, {0x800, 0x5, {0x3}}, {0xfffe, 0x1, {0x3, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000001) ioctl$CHAR_RAW_PBSZGET(r7, 0x127b, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x91030000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 343.033271][ T9314] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1860000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 343.103493][ T9346] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 343.228095][ T3044] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 343.608189][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.619115][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.629233][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 343.638287][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.646861][ T3044] usb 5-1: config 0 descriptor?? [ 343.988066][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 343.994046][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 344.002062][ T3044] usb 5-1: USB disconnect, device number 14 [ 344.457955][ T3044] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 344.817981][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.828970][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.839529][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 344.849087][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.857657][ T3044] usb 5-1: config 0 descriptor?? [ 345.597889][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 345.603919][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 345.611186][ T3044] usb 5-1: USB disconnect, device number 15 10:16:09 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa1ffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, r0) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) r6 = inotify_init() r7 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00007a8000)) r8 = inotify_add_watch(r6, &(0x7f0000000000)='./control\x00', 0x70) inotify_rm_watch(r6, r8) inotify_rm_watch(r5, r8) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="61202a3a2a20726d00beae2c38f716453769a96b1d984712a7965ac409fc597942d5db9ae6be5e4c9647e6af35116a9ddb4aae1cbbb083e9f18adafd3bad42aef75759108920015a538d2803bd172c88122e524dc5d9a8d88392157000657e13fef787fa79b7c3963c74209df5c7acc71c39fa101c015c4adaf1c2a4c7d7073b10e0a10f95615aff614d845e1c2121f3fc6cf77d6a5732df71e4c832d8a3c8c9f991ed3064f3bd506111030baff752b3b09e72f00120"], 0x9) 10:16:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:16:09 executing program 2: r0 = epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r1, 0x0) ftruncate(r1, 0x40) accept$inet6(r1, 0x0, &(0x7f00000001c0)) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0)=[r8]}, 0x1) 10:16:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0ed0000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd8ffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 346.073404][ T9386] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 346.080617][ T9397] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe4ffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe88eb930, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3010000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xed260000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 346.127253][ T9408] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xee260000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 346.173589][ T9441] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 346.337753][ T3044] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 346.707804][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.718727][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.728726][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 346.737988][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.746557][ T3044] usb 5-1: config 0 descriptor?? 10:16:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 346.896797][ T9465] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 347.097736][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 347.103716][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 347.111099][ T3044] usb 5-1: USB disconnect, device number 16 [ 347.567613][ T3044] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 347.927640][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.938607][ T3044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.949057][ T3044] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 347.958485][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.967036][ T3044] usb 5-1: config 0 descriptor?? [ 348.707529][ T3044] usbhid 5-1:0.0: can't add hid device: -71 [ 348.713544][ T3044] usbhid: probe of 5-1:0.0 failed with error -71 [ 348.721616][ T3044] usb 5-1: USB disconnect, device number 17 10:16:12 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)='#', 0x7ffff000}], 0x1) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 10:16:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf07f0715, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0xb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:16:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf4ffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x131, 0x131, 0x4, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x150}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:16:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x1e, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5010000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 10:16:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf5040000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 349.172339][ T9484] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) 10:16:12 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf6ffffff, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 349.227254][ T9521] overlayfs: invalid origin (790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 349.253427][ T9531] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 349.437385][ T3050] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 349.807429][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.825897][ T3050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.846016][ T3050] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40